{"id":25182,"date":"2026-07-28T09:28:54","date_gmt":"2026-07-28T09:28:54","guid":{"rendered":"https:\/\/akdenizolay.com.tr\/index.php\/2026\/07\/28\/kaspersky-siber-casusluk-operasyonlarinda-kullanilan-yeni-mirage-kitten-zararli-yazilim-setini-ortaya-cikardi\/"},"modified":"2026-07-28T09:28:54","modified_gmt":"2026-07-28T09:28:54","slug":"kaspersky-siber-casusluk-operasyonlarinda-kullanilan-yeni-mirage-kitten-zararli-yazilim-setini-ortaya-cikardi","status":"publish","type":"post","link":"https:\/\/akdenizolay.com.tr\/index.php\/2026\/07\/28\/kaspersky-siber-casusluk-operasyonlarinda-kullanilan-yeni-mirage-kitten-zararli-yazilim-setini-ortaya-cikardi\/","title":{"rendered":"Kaspersky, Siber Casusluk Operasyonlar\u0131nda Kullan\u0131lan Yeni Mirage Kitten Zararl\u0131 Yaz\u0131l\u0131m Setini Ortaya \u00c7\u0131kard\u0131"},"content":{"rendered":"<p> <strong>Kaspersky K\u00fcresel Ara\u015ft\u0131rma ve Analiz Ekibi (GReAT), &#8220;Mirage Kitten&#8221; geli\u015fmi\u015f s\u00fcrekli tehdit (APT) grubu taraf\u0131ndan kullan\u0131lan ve daha \u00f6nce belgelenmemi\u015f yeni bir zararl\u0131 yaz\u0131l\u0131m seti ke\u015ffetti. Ara\u015ft\u0131rma sonu\u00e7lar\u0131, \u015firketin Orta Do\u011fu, T\u00fcrkiye ve Afrika (META) b\u00f6lgesine y\u00f6nelik d\u00fczenledi\u011fi y\u0131ll\u0131k Siber G\u00fcvenlik Hafta Sonu etkinli\u011finde kamuoyuyla payla\u015f\u0131ld\u0131. S\u00f6z konusu k\u00f6t\u00fc ama\u00e7l\u0131 ara\u00e7lar\u0131n, kurban a\u011flar\u0131nda uzun s\u00fcreli eri\u015fim sa\u011flamak ve hassas verileri \u00e7almak amac\u0131yla ger\u00e7ekle\u015ftirilen hedefli bir kampanyada kullan\u0131ld\u0131\u011f\u0131 tespit edildi.<\/strong><\/p>\n<p>Kaspersky ara\u015ft\u0131rmac\u0131lar\u0131; Orta Do\u011fu ve Afrika genelinde \u00e7e\u015fitli kurbanlar\u0131 hedef ald\u0131\u011f\u0131n\u0131 belirledi. Bunlar aras\u0131nda M\u0131s\u0131r\u2019daki kurulu\u015flar; \u00dcrd\u00fcn ve Tanzanya\u2019daki k\u00fc\u00e7\u00fck ve orta \u00f6l\u00e7ekli i\u015fletmeler ile kamu kurumlar\u0131; Pakistan\u2019daki havac\u0131l\u0131k kurulu\u015flar\u0131; Etiyopya\u2019daki telekom\u00fcnikasyon \u015firketleri ve Burkina Faso\u2019daki finans sekt\u00f6r\u00fc kurulu\u015flar\u0131 yer al\u0131yor.<\/p>\n<p>Ara\u00e7 seti, \u00f6zel olarak geli\u015ftirilmi\u015f \u00fc\u00e7 programdan olu\u015fuyor. Ara\u00e7 setinin merkezinde, daha \u00f6nce gruba atfedilen zararl\u0131 yaz\u0131l\u0131mlarla kod yap\u0131s\u0131 ve davran\u0131\u015f \u00f6zellikleri bak\u0131m\u0131ndan benzerlik g\u00f6sterdi\u011fi i\u00e7in Mirage Kitten\u2019a atfedilen yeni ke\u015ffedilmi\u015f Windows arka kap\u0131s\u0131 NightLedger bulunuyor. Bu ara\u00e7, sald\u0131rganlara ele ge\u00e7irilmi\u015f sistemler \u00fczerinde uzaktan kontrol sa\u011fl\u0131yor; sald\u0131rganlar\u0131n komut \u00e7al\u0131\u015ft\u0131rmas\u0131na, dosyalar\u0131 g\u00f6r\u00fcnt\u00fclemesine ve aktarmas\u0131na, ayr\u0131ca ekran g\u00f6r\u00fcnt\u00fcs\u00fc almas\u0131na olanak tan\u0131yor. NightLedger\u2019a, ArcBridge ve BridgeHead adl\u0131 iki gizli t\u00fcnelleme arac\u0131 e\u015flik ediyor. Bu ara\u00e7lar, ele ge\u00e7irilen bilgisayar\u0131 adeta bir ara d\u00fc\u011f\u00fcme d\u00f6n\u00fc\u015ft\u00fcr\u00fcyor: Sald\u0131rganlar kendi sunucular\u0131ndaki ara\u00e7lar\u0131n\u0131 \u00e7al\u0131\u015ft\u0131r\u0131rken ortaya \u00e7\u0131kan t\u00fcm trafik, kurban\u0131n bilgisayar\u0131 \u00fczerinden sessizce y\u00f6nlendirilerek sanki kurban\u0131n a\u011f\u0131 i\u00e7inden geliyormu\u015f gibi g\u00f6r\u00fcn\u00fcyor. B\u00f6ylece sald\u0131rganlar a\u011f g\u00fcvenlik mekanizmalar\u0131n\u0131 a\u015fabiliyor ve dikkat \u00e7ekmeden uzun s\u00fcreli eri\u015fimi s\u00fcrd\u00fcrebiliyor. Bu ara\u00e7lardan ilki, Nisan 2026\u2019da Orta Do\u011fu\u2019daki kurbanlar\u0131 hedef alan faaliyetler s\u0131ras\u0131nda tespit edildi.<\/p>\n<p>Sald\u0131rganlar\u0131n \u00e7o\u011fu vakada sisteme ilk eri\u015fimi nas\u0131l sa\u011flad\u0131\u011f\u0131 belirsizli\u011fini korurken, -Kaspersky GReAT ara\u015ft\u0131rmac\u0131lar\u0131 BridgeHead arac\u0131n\u0131n M\u0131s\u0131r\u2019daki kurban ortamlar\u0131nda ve Pakistan\u2019daki bir havac\u0131l\u0131k ve uzay kurulu\u015funun sistemlerinde, sistemlerin ele ge\u00e7irilmesinin ard\u0131ndan y\u00fcr\u00fct\u00fclen faaliyetler s\u0131ras\u0131nda kullan\u0131ld\u0131\u011f\u0131n\u0131 g\u00f6zlemledi. S\u00f6z konusu vakalarda sisteme s\u0131zma faaliyetleri, grubun bilinen y\u00f6ntemleriyle \u00f6rt\u00fc\u015fen hedefli kimlik av\u0131 giri\u015fimlerinin ard\u0131ndan ger\u00e7ekle\u015fti. Sald\u0131r\u0131larda, g\u00fcvenilir markalar\u0131 ve i\u015fe al\u0131m platformlar\u0131n\u0131 taklit eden i\u015fe al\u0131m temal\u0131 mesajlar\u0131n yan\u0131 s\u0131ra, kurbanlar\u0131 \u00fc\u00e7\u00fcnc\u00fc taraf dosya payla\u015f\u0131m hizmetlerinde bar\u0131nd\u0131r\u0131lan k\u00f6t\u00fc ama\u00e7l\u0131 ar\u015fiv dosyalar\u0131na y\u00f6nlendiren sahte video konferans sayfalar\u0131 gibi son derece hedefli i\u00e7erikler kullan\u0131ld\u0131.<\/p>\n<p><strong>Kaspersky GReAT K\u0131demli G\u00fcvenlik Ara\u015ft\u0131rmac\u0131s\u0131 Omar Amin\u00a0<\/strong>konuya ili\u015fkin de\u011ferlendirmesinde \u015funlar\u0131 s\u00f6yledi:<em>\u00a0<\/em><em>\u201cSon bulgular\u0131m\u0131z, Mirage Kitten\u2019\u0131n Orta Do\u011fu ve Afrika genelindeki hedefli siber casusluk operasyonlar\u0131n\u0131 desteklemek amac\u0131yla zararl\u0131 yaz\u0131l\u0131m cephaneli\u011fini geli\u015ftirmeye devam etti\u011fini g\u00f6steriyor. Kampanyan\u0131n dikkat \u00e7eken bir di\u011fer y\u00f6n\u00fc ise grubun operasyonel ara\u00e7 setinin bir par\u00e7as\u0131 olarak<\/em>\u00a0<em>t\u00fcnelleme ara\u00e7lar\u0131n\u0131 operasyonel ara\u00e7 setinin bir par\u00e7as\u0131 olarak kullanmay\u0131 s\u00fcrd\u00fcrmesi. Bu y\u00f6ntem, sald\u0131rganlar\u0131n a\u011f kontrollerini a\u015fmas\u0131na, ele ge\u00e7irilen ortamlara gizli eri\u015fimi s\u00fcrd\u00fcrmesine ve tespit edilmelerini \u00f6nemli \u00f6l\u00e7\u00fcde zorla\u015ft\u0131rmas\u0131na olanak tan\u0131yor.<\/em>\u00a0<em>Bu tekniklerin uzun s\u00fcreli ve geli\u015fmi\u015f yap\u0131s\u0131 g\u00f6z \u00f6n\u00fcnde bulunduruldu\u011funda, kurulu\u015flar\u0131n ve siber g\u00fcvenlik ekiplerinin s\u00f6z konusu bulgular\u0131 tehdit de\u011ferlendirmelerine dahil etmeleri ve tespit ile m\u00fcdahale yetkinliklerini g\u00fc\u00e7lendirmeleri gerekiyor,\u201d<\/em>\u00a0<\/p>\n<p>Daha fazla bilgiye\u00a0Securelist.com\u00a0<wbr \/>\u00fczerinden ula\u015fabilirsiniz.<\/p>\n<p>Kurulu\u015flar\u0131n Mirage Kitten ve di\u011fer APT gruplar\u0131n\u0131n tehditlerine kar\u015f\u0131 g\u00fcvende kalabilmeleri i\u00e7in \u015fu en iyi uygulamalar\u0131 takip etmeleri \u00f6neriyor:<\/p>\n<ul>\n<li><strong>Aktif Tehdit Takibi:<\/strong>\u00a0NightLedger arka kap\u0131s\u0131 ile ArcBridge ve BridgeHead t\u00fcnelleme ara\u00e7lar\u0131 da dahil olmak \u00fczere Mirage Kitten ara\u00e7 setinin kullan\u0131ma\/da\u011f\u0131t\u0131ma sunulmas\u0131na kar\u015f\u0131 son derece dikkatli olun.<\/li>\n<li><strong>B\u00fct\u00fcnc\u00fcl G\u00fcvenlik \u00c7\u00f6z\u00fcmleri:<\/strong>\u00a0\u015eirketinizi geni\u015f bir tehdit yelpazesinden korumak i\u00e7in, her \u00f6l\u00e7ekten ve sekt\u00f6rden kurulu\u015fa ger\u00e7ek zamanl\u0131 koruma, tehdit g\u00f6r\u00fcn\u00fcrl\u00fc\u011f\u00fc, olay inceleme ve EDR\/XDR m\u00fcdahale kabiliyetleri sunan\u00a0Kaspersky Next\u00a0\u00fcr\u00fcn ailesini kullan\u0131n. Mevcut ihtiya\u00e7lar\u0131n\u0131za ve kaynaklar\u0131n\u0131za ba\u011fl\u0131 olarak en uygun \u00fcr\u00fcn katman\u0131n\u0131 se\u00e7ebilir, siber g\u00fcvenlik gereksinimleriniz de\u011fi\u015ftik\u00e7e kolayca bir \u00fcst katmana ge\u00e7i\u015f yapabilirsiniz.<\/li>\n<li><strong>Y\u00f6netilen G\u00fcvenlik Hizmetleri:<\/strong>\u00a0Tehdit tespitinden s\u00fcrekli koruma ve iyile\u015ftirmeye kadar t\u00fcm olay y\u00f6netim d\u00f6ng\u00fcs\u00fcn\u00fc kapsayan\u00a0\u00a0Compromise Assessment,\u00a0Managed Detection and Response<u>\u00a0(MDR)\u00a0<\/u>ve\/veya\u00a0Inciden<wbr \/>t Response<strong>\u00a0<\/strong>gibi y\u00f6netilen g\u00fcvenlik hizmetlerinden yararlan\u0131n. Bu hizmetler, tespiti zor siber sald\u0131r\u0131lara kar\u015f\u0131 korunmaya, olaylar\u0131 derinlemesine incelemeye ve kurum i\u00e7i siber g\u00fcvenlik personeli eksikli\u011fi durumunda uzman deste\u011fi sa\u011flamaya yard\u0131mc\u0131 olur.<\/li>\n<li><strong>Tehdit \u0130stihbarat\u0131:<\/strong>\u00a0Bilgi g\u00fcvenli\u011fi uzmanlar\u0131n\u0131za, kurulu\u015funuzu hedef alan siber tehditler hakk\u0131nda kapsaml\u0131 g\u00f6r\u00fcn\u00fcrl\u00fck sa\u011flay\u0131n.\u00a0Kaspersky Threat Intelligence, olay y\u00f6netim d\u00f6ng\u00fcs\u00fcn\u00fcn tamam\u0131nda zengin ve anlaml\u0131 bir ba\u011flam sunarak siber risklerin zaman\u0131nda tespit edilmesine katk\u0131 sa\u011flar.<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<p>Kaynak: (BYZHA) Beyaz Haber Ajans\u0131<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Kaspersky K\u00fcresel Ara\u015ft\u0131rma ve Analiz Ekibi (GReAT), &#8220;Mirage Kitten&#8221; geli\u015fmi\u015f s\u00fcrekli tehdit (APT) grubu taraf\u0131ndan kullan\u0131lan ve daha \u00f6nce belgelenmemi\u015f yeni bir zararl\u0131 yaz\u0131l\u0131m seti ke\u015ffetti.<\/p>\n","protected":false},"author":1,"featured_media":25183,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-25182","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji"],"_links":{"self":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/25182","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/comments?post=25182"}],"version-history":[{"count":1,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/25182\/revisions"}],"predecessor-version":[{"id":25184,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/25182\/revisions\/25184"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/media\/25183"}],"wp:attachment":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/media?parent=25182"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/categories?post=25182"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/tags?post=25182"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}