Research any topic before you write.

Find related topics. | Discover entities. | See connections. | Build a topical map.

Conficker

Conficker, also known as Downup, Downadup and Kido, is a computer worm targeting the Microsoft Windows operating system that was first detected in November 2008. It uses flaws in Windows OS software (MS08-067 / CVE-2008-4250) and dictionary attacks on administrator passwords to propagate while forming a botnet, and has been unusually difficult to counter…

History, Operation & Response

Use the mouse wheel or two fingers (on touchscreens) to zoom in and out of the map.

Research this topic

Explore the main themes, entities and connections around Conficker. Start with the topic map, then use the sections below for research and deeper semantic analysis.

Explore this topic

Start with a few of the strongest sections from the source topic. These are research directions, not a list of keywords you must use.

Key facts & relationships

High-confidence facts extracted from structured source data. Use them as anchors for further research.

Platforms
Windows 2000, Windows XP, Windows 2003 Server (SP2), Windows Vista, Windows 2008 Server
Technical name
Mal/Conficker-A (Sophos) · Win32/Conficker.A (ESET, CA) · W32.Downadup (Symantec) · W32/Downadup.A (F-Secure) · Conficker.A (Panda)
Type
Worm

Topics to explore

Browse the full topic structure. Each item opens a new analysis centered on that subject.

Overview

History

Operation

Symptoms

Response

Origin

Removal and detection

Advanced semantic analysis

Deeper signals for content research, entity SEO and topical coverage. The plain-language headings explain what each technical view is useful for.

Map overview Semantic statistics

Conficker

Nodes132
Edges131
Triples201
Avg. degree1.98
Density0.015152
Components1

How this topic connects Entity context

See the strongest relationship patterns around the current topic before diving into the raw triples.

Conficker

Top relations

related to Payload propagation · 26
Conficker → April, Assigned Names, DDoS, February, However, HTTP, ICANN, Internet, Internet Corporation, IP, MS08-067, NetBIOS-related DLLs, Numbers, PRNG, Re-infection, TCP, The, These, This, TLD
related to Response · 22
Conficker → Afilias, America Online, Arbor Networks, Center, China Internet Network Information, Conficker Cabal, F-Secure, February, Georgia Tech, Global Domains International, ICANN, ISC, M1D Global, Microsoft, Neustar, On, Public Internet Registry, Support Intelligence, Symantec, The
related to From registries · 20
Conficker → April, Canadian Internet Registration Authority, CIRA, Conficker Working Group, DDoS, Guernsey, IANA, ICANN, Island Networks, Jersey, March, NASK, NIC Chile, NIC-Panama, On, Polish, Swiss, SWITCH, Those, TLD
related to Discovery · 18
Conficker → Although Microsoft, Beta, December, Internet, January, LANs, MS08-067, November, October, R2 Beta, Researchers, The, While Windows, Windows, Windows PCs, Windows Server, Windows Vista, Windows XP
related to External links · 17
Conficker → Atlantic, Bowden, Conficker Working GroupConficker Working, Down The Internet, Fresh Air, Group, ISBN, June, Lessons LearnedConficker Eye ChartWorm, Mark Bowden, NPR, September, The, The Enemy Within, The First Digital World, War, Worm' That Could Bring
related to Origin · 16
Conficker → An, Black Hat Briefings, Engineering, Hassan Saidi, In, Journal, Phil Porras, Porras, Sensitive Cyber Research, The, This, Ukraine, Ukrainian, Ukrainian IP, Vinod Yegneswaran, Working
related to Symptoms · 14
Conficker → Account, ARP, Automatic Updates, Background Intelligent Transfer Service, BITS, Certain Microsoft Windows, Congestion, Domain, Symptoms, User, Web, Windows Defender, Windows Error Reporting, Windows Update
related to Operation · 13
Conficker → Although, April, CWG, December, February, Five, March, MSFT, November, The, The Conficker Working Group, They, This
Technical name · 11
Conficker → Conficker.A (Panda), Mal/Conficker-A (Sophos), Net-Worm.Win32.Kido.bt (Kaspersky), W32.Downadup (Symantec), W32/Conficker.worm (McAfee), W32/Downadup.A (F-Secure), Win32.Worm.Downadup.Gen (BitDefender), Win32/Conficker.A (ESET, CA), Win32:Confi (avast!), Worm.Downadup (ClamAV), WORM_DOWNAD (Trend Micro)
related to US CERT · 10
Conficker → AutoRun, Conficker-infected, Emergency Readiness Team, KB967715, Microsoft, Microsoft's, Prior, The United States Computer, US-CERT, Variant

Important terminology Word statistics

Use these terms to understand the vocabulary surrounding the topic, not as a checklist for keyword stuffing.

Important terminology

virus 2009 network windows domain infected microsoft worm variants names variant generated domains payloads number computers computer also day use

Entity relationships Subject–Predicate–Object triples

SubjectPredicateObjectConfidenceSrc
ConfickerPlatformsWindows 2000, Windows XP, Windows 2003 Server (SP2), Windows Vista, Windows 2008 Server1.00infobox
ConfickerTechnical nameMal/Conficker-A (Sophos)1.00infobox
ConfickerTechnical nameWin32/Conficker.A (ESET, CA)1.00infobox
ConfickerTechnical nameW32.Downadup (Symantec)1.00infobox
ConfickerTechnical nameW32/Downadup.A (F-Secure)1.00infobox
ConfickerTechnical nameConficker.A (Panda)1.00infobox
ConfickerTechnical nameNet-Worm.Win32.Kido.bt (Kaspersky)1.00infobox
ConfickerTechnical nameW32/Conficker.worm (McAfee)1.00infobox
ConfickerTechnical nameWin32.Worm.Downadup.Gen (BitDefender)1.00infobox
ConfickerTechnical nameWin32:Confi (avast!)1.00infobox
ConfickerTechnical nameWORM_DOWNAD (Trend Micro)1.00infobox
ConfickerTechnical nameWorm.Downadup (ClamAV)1.00infobox
ConfickerTypeWorm1.00infobox

Related concept clusters Concept neighborhoods

These clusters group vocabulary that occurs around closely connected concepts in the source material.

    Connections between topic areas Semantic bridges

    Bridges can reveal useful research angles that are easy to miss in a flat list of related terms.

    Min side: 3
    For writers, content strategists, SEOs, marketers and creators — from quick topic research to advanced semantic analysis.