Aldus FreeHand disk shipped MacMag virus

Aldus FreeHand is one of the earliest clean examples of commercial software media carrying malware. The affected artifact was not the FreeHand application release in the abstract; it was a promotional or training floppy disk associated with the product. The trusted path was physical duplication and magazine or customer distribution.

That physical path matters: the user did not download a suspicious utility or accept a shareware copy. The disk arrived as part of a commercial software promotion, so the trust decision had already been made by the publisher's duplication process.

The malware was MacMag, also known as Drew, Brandow, Aldus, Peace, or World Peace. It targeted classic Macintosh systems, copied itself through the System folder path, and spread to bootable disks opened on an infected machine. Its intended March 2, 1988 behavior was a "Universal Message of Peace" followed by self-deletion.

The payload was meant as nuisance and publicity, but bugs and context made it more serious. Public summaries describe crashes on some Mac II systems, possible accidental deletion in narrow cases, and broad user anxiety. Aldus had to recall thousands of FreeHand-related disks and threatened legal action after its media became a carrier.

This record is kept in scope because the malware moved through official commercial product media. It was not a random infected user disk; it was a contaminated master copied into a legitimate distribution channel.

Motive

Vandalism Publicity

Attribution

Person

Cause

Insider Threat

Transitive

No

Actor

Individual Hacker

User Impact

5000

• MacMagen.wikipedia.org
• The virus program that caused Aldus to recall thousands of copies of FreeHandtechmonitor.ai
• A Short Course on Computer Virusesall.net
• Computer virus case tests liability lawlatimes.com
• New computer virus giving software firms a headachewashingtonpost.com