{"id":26433,"date":"2026-08-04T08:19:19","date_gmt":"2026-08-04T08:19:19","guid":{"rendered":"https:\/\/akdenizolay.com.tr\/index.php\/2026\/08\/04\/kaspersky-okospyware-ile-kripto-para-kullanicilarini-hedef-alan-yeni-kotu-amacli-yazilim-iskeletini-desifre-etti\/"},"modified":"2026-08-04T08:19:20","modified_gmt":"2026-08-04T08:19:20","slug":"kaspersky-okospyware-ile-kripto-para-kullanicilarini-hedef-alan-yeni-kotu-amacli-yazilim-iskeletini-desifre-etti","status":"publish","type":"post","link":"https:\/\/akdenizolay.com.tr\/index.php\/2026\/08\/04\/kaspersky-okospyware-ile-kripto-para-kullanicilarini-hedef-alan-yeni-kotu-amacli-yazilim-iskeletini-desifre-etti\/","title":{"rendered":"Kaspersky, OkoSpyware \u0130le Kripto Para Kullan\u0131c\u0131lar\u0131n\u0131 Hedef Alan Yeni K\u00f6t\u00fc Ama\u00e7l\u0131 Yaz\u0131l\u0131m \u0130skeletini De\u015fifre Etti"},"content":{"rendered":"<p> <strong>Kaspersky\u2019nin Orta Do\u011fu, T\u00fcrkiye ve Afrika (META) b\u00f6lgesine y\u00f6nelik y\u0131ll\u0131k Siber G\u00fcvenlik Hafta sonu etkinli\u011finde, Kaspersky Global Ara\u015ft\u0131rma ve Analiz Ekibi (GReAT), kripto para kullan\u0131c\u0131lar\u0131n\u0131 hedef alan yeni OkoBot kampanyas\u0131na ili\u015fkin bulgular\u0131n\u0131 payla\u015ft\u0131. Yeni ve sofistike \u00e7er\u00e7eve, seed phrase\u2019leri ele ge\u00e7irmek i\u00e7in TookPS\u2019yi kullan\u0131rken, Chromium tabanl\u0131 taray\u0131c\u0131lar\u0131 izlemek ve Rilide stealer da dahil olmak \u00fczere \u00e7e\u015fitli k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m t\u00fcrlerini da\u011f\u0131tmak i\u00e7in yeni bir OkoSpyware mod\u00fcl\u00fcnden yararlan\u0131yor. Kampanya \u015fu ana kadar 25\u2019ten fazla \u00fclkede y\u00fczlerce kullan\u0131c\u0131y\u0131 hedef ald\u0131. En fazla etkilenen son kullan\u0131c\u0131lar\u0131n bulundu\u011fu \u00fclkeler ise Brezilya, Vietnam, Kanada, Meksika ve T\u00fcrkiye oldu. Kaspersky uzmanlar\u0131na g\u00f6re tehdit h\u00e2len aktif ve ba\u015fta kripto para kullan\u0131c\u0131lar\u0131 olmak \u00fczere kullan\u0131c\u0131lar i\u00e7in risk olu\u015fturmaya devam ediyor.<\/strong><\/p>\n<p>Kaspersky K\u00fcresel Ara\u015ft\u0131rma ve Analiz Ekibi (GReAT) uzmanlar\u0131, Ocak 2026&#8217;da kripto para c\u00fczdan\u0131 pencerelerinin i\u00e7eri\u011fini yakalama yetene\u011fine sahip, daha \u00f6nce bilinmeyen bir k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131n kullan\u0131ld\u0131\u011f\u0131 \u00e7ok say\u0131da sald\u0131r\u0131 tespit etti. OkoBot olarak adland\u0131r\u0131lan bu geli\u015fmi\u015f yeni k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m altyap\u0131s\u0131; yerel dosyalar\u0131 toplama, uzaktan komut \u00e7al\u0131\u015ft\u0131rma, izinsiz taray\u0131c\u0131 eklentileri indirme, kripto para c\u00fczdanlar\u0131n\u0131 \u00e7alma, kurtarma ifadelerini ve kimlik bilgilerini ele ge\u00e7irme, video kayd\u0131 alma gibi \u00e7ok \u00e7e\u015fitli eylemleri ger\u00e7ekle\u015ftirmek \u00fczere tasarlanm\u0131\u015f 20&#8217;den fazla zararl\u0131 y\u00fck ve implanttan olu\u015fuyor. Kampanyada kullan\u0131lan yeni implantlardan biri, k\u00f6t\u00fc ama\u00e7l\u0131 eklentileri y\u00fcklemek ve gizlemek amac\u0131yla taray\u0131c\u0131 belle\u011fini de\u011fi\u015ftiren bir y\u00fckleyici (loader) olarak \u00f6ne \u00e7\u0131k\u0131yor. OkoBot ayr\u0131ca, tu\u015f vuru\u015flar\u0131n\u0131 (keystrokes) ve hedef uygulaman\u0131n penceresindeki video ak\u0131\u015f\u0131n\u0131 kaydedebilen yeni bir OkoSpyware mod\u00fcl\u00fc i\u00e7eriyor.<\/p>\n<p>Mevcut veriler, kampanyan\u0131n bilinen bir siber su\u00e7 grubuyla y\u00fcksek kesinlikle ili\u015fkilendirilmesine hen\u00fcz olanak tan\u0131m\u0131yor. Bununla birlikte, kullan\u0131lan teknikler ve bilgi h\u0131rs\u0131z\u0131 yaz\u0131l\u0131mlar Rus\u00e7a konu\u015fan tehdit akt\u00f6rleri taraf\u0131ndan yayg\u0131n olarak tercih ediliyor; ayr\u0131ca teknik analizler kod i\u00e7erisinde Rus\u00e7a kal\u0131nt\u0131lara i\u015faret ediyor.<\/p>\n<p>Bula\u015fma s\u00fcreci genellikle iki ana vekt\u00f6r \u00fczerinden ger\u00e7ekle\u015fiyor: Tehdit akt\u00f6rlerinin kullan\u0131c\u0131lar\u0131 kand\u0131rarak zararl\u0131 kod \u00e7al\u0131\u015ft\u0131rmas\u0131n\u0131 sa\u011flad\u0131\u011f\u0131 toplum m\u00fchendisli\u011fi odakl\u0131 ClickFix sald\u0131r\u0131lar\u0131 ve me\u015fru yaz\u0131l\u0131m s\u00fcs\u00fc verilerek GitHub \u00fczerinden da\u011f\u0131t\u0131lan k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar. Ara\u015ft\u0131rmac\u0131lar inceleme s\u0131ras\u0131nda, yayg\u0131n olarak kullan\u0131lan Microsoft veri taban\u0131 y\u00f6netim arac\u0131 SQL Server Management Studio (SSMS) i\u00e7in haz\u0131rlanm\u0131\u015f sahte bir y\u00fckleyici i\u00e7eren \u00f6rne\u011fe rastlad\u0131.<\/p>\n<p>K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m \u00e7er\u00e7evesi, etkin sistem s\u00fcre\u00e7lerini izleyen ve Trezor Suite, Ledger Wallet ve Ledger Live uygulamalar\u0131na bir implant enjekte eden SeedHunter adl\u0131 bir k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m bile\u015feni i\u00e7eriyor. Bu uygulamalar, kripto varl\u0131klar\u0131 y\u00f6netmek i\u00e7in kullan\u0131lan resmi uygulamalar. SeedHunter, sisteme ba\u011fl\u0131 bir Trezor veya Ledger donan\u0131m c\u00fczdan\u0131 tespit etti\u011finde, kancalanm\u0131\u015f i\u015flevleri devreye sokarak kullan\u0131c\u0131n\u0131n seed phrase\u2019ini ele ge\u00e7irmeyi ama\u00e7layan, \u00f6nceden kodlanm\u0131\u015f bir kimlik av\u0131 sayfas\u0131 g\u00f6r\u00fcnt\u00fcl\u00fcyor. Her c\u00fczdan t\u00fcr\u00fc i\u00e7in farkl\u0131 bir tasar\u0131ma sahip olan bu sayfalar, kullan\u0131c\u0131lar\u0131n seed phrase\u2019lerini girmelerini sa\u011flamak \u00fczere haz\u0131rlanm\u0131\u015f.<\/p>\n<p><img decoding=\"async\" data-bit=\"iit\" src=\"https:\/\/ci3.googleusercontent.com\/meips\/ADKq_NYC0aMk8BIPIIXoQKPejdP5mvC71hUD05kly0v8xcemH0mIeQXCC23V5jhAWq8429AvCQXbSFY3v-u4eydm5cb8QYp4i8sW2D94F63KDUS4d2jIVgnlviyXnwjCinkOU5BD0qpKN8OT4WqeLqdTki53vi63g4tea60b4g=s0-d-e1-ft#https:\/\/img.faselis.com\/faselis_tr\/brands\/12586\/inline\/1785822524_260804_Kaspersky_bb_g__rsel.png.jpg\" \/><\/p>\n<p><em>OkoBot kampanyas\u0131nda kurtarma ifadesi \u00e7almak i\u00e7in kullan\u0131lan kimlik av\u0131 sayfalar\u0131<\/em><\/p>\n<p><strong>Kaspersky K\u00fcresel Ara\u015ft\u0131rma ve Analiz Ekibi Rusya ve BDT Birimi Ba\u015fkan\u0131 Dmitry Galov<\/strong>\u00a0konuya ili\u015fkin de\u011ferlendirmesinde \u015funlar\u0131 s\u00f6yledi: \u201c<em>OkoBot kampanyas\u0131 bir y\u0131l\u0131 a\u015fk\u0131n s\u00fcredir aktif durumda ve Temmuz 2026 itibar\u0131yla da etkisini s\u00fcrd\u00fcr\u00fcyor. G\u00f6zlemlenen bula\u015fma yollar\u0131, yaz\u0131l\u0131m geli\u015ftiricilerin ana hedefler aras\u0131nda yer ald\u0131\u011f\u0131n\u0131 g\u00fc\u00e7l\u00fc bir \u015fekilde g\u00f6steriyor. \u00d6zellikle yaz\u0131l\u0131m\u0131n aral\u0131ks\u0131z geli\u015fimi ve altyap\u0131s\u0131n\u0131n aktif bi\u00e7imde g\u00fcncellenmesi ciddi bir endi\u015fe kayna\u011f\u0131. Yay\u0131lma \u00e7abalar\u0131n\u0131n devam etmesiyle birlikte, kampanyan\u0131n yak\u0131n gelecekte daha fazla kullan\u0131c\u0131ya ula\u015fma ve yeni \u00fclkelere yay\u0131lma potansiyeli bulunuyor.\u201d<\/em><\/p>\n<p>Kaspersky uzmanlar\u0131, kullan\u0131c\u0131lar\u0131n olas\u0131 bir siber sald\u0131r\u0131dan korunmak i\u00e7in \u015fu ad\u0131mlar\u0131 atmas\u0131n\u0131 \u00f6neriyor:<\/p>\n<ul>\n<li><strong>Bilinmeyen Kodlar\u0131 \u00c7al\u0131\u015ft\u0131rmay\u0131n:<\/strong>\u00a0Do\u011frudan iletilen veya rehberlerde yer alan y\u00f6nlendirmeler d\u00e2hil, kayna\u011f\u0131 do\u011frulanmam\u0131\u015f talimatlar\u0131 izleyerek cihaz\u0131n\u0131zda ne oldu\u011funu bilmedi\u011finiz kodlar\u0131 \u00e7al\u0131\u015ft\u0131rmay\u0131n. Sald\u0131rganlar bu y\u00f6ntemi sistemlere s\u0131zmak i\u00e7in s\u0131kl\u0131kla kullan\u0131r; bu da veri kayb\u0131na hatta cihaz kontrol\u00fcn\u00fcn kaybedilmesine yol a\u00e7abilir.<\/li>\n<li><strong>G\u00fcvenlik \u00c7\u00f6z\u00fcm\u00fc Kullan\u0131n:<\/strong>\u00a0T\u00fcm bilgisayar ve mobil cihazlar\u0131n\u0131zda\u00a0\u00a0Kaspersky Premium\u00a0gibi g\u00fc\u00e7l\u00fc bir g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fc kullan\u0131n. Bu t\u00fcr yaz\u0131l\u0131mlar sizi uyaracak ve olas\u0131 enfeksiyonlar\u0131n \u00f6n\u00fcne ge\u00e7ecektir.<\/li>\n<li><strong>Hassas Verileri G\u00fcvenli Y\u00f6netin:<\/strong>\u00a0Parolalar\u0131 veya kurtarma ifadelerini foto\u011fraf galerinizde ya da notlar\u0131n\u0131zda saklamaktan ka\u00e7\u0131n\u0131n; bunun yerine\u00a0Kaspersky Password Manager\u00a0gibi g\u00fcvenilir ve bu i\u015fe \u00f6zel bir parola y\u00f6neticisi tercih edin.<\/li>\n<li><strong>G\u00fcvenlik Ara\u00e7lar\u0131n\u0131 Kapatmay\u0131n:<\/strong>\u00a0Herhangi bir yaz\u0131l\u0131m y\u00fcklemek i\u00e7in antivir\u00fcs veya g\u00fcvenlik ara\u00e7lar\u0131n\u0131z\u0131 kesinlikle devre d\u0131\u015f\u0131 b\u0131rakmay\u0131n; oyun modlar\u0131, hile yaz\u0131l\u0131mlar\u0131 veya \u00fc\u00e7\u00fcnc\u00fc taraf ara\u00e7lar\u0131 indirirken son derece dikkatli olun.<\/li>\n<li><strong>Yaz\u0131l\u0131m G\u00fcncellemeleri ve \u00c7ok Fakt\u00f6rl\u00fc Kimlik Do\u011frulama:<\/strong>\u00a0\u0130\u015fletim sistemlerinizi ve uygulamalar\u0131n\u0131z\u0131 g\u00fcncel tutun, g\u00fc\u00e7l\u00fc ve benzersiz parolalar kullan\u0131n ve m\u00fcmk\u00fcn olan her platformda \u00e7ok fakt\u00f6rl\u00fc kimlik do\u011frulamay\u0131 etkinle\u015ftirin.<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<p>\u00a0<\/p>\n<p>Kaynak: (BYZHA) Beyaz Haber Ajans\u0131<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Kaspersky\u2019nin Orta Do\u011fu, T\u00fcrkiye ve Afrika (META) b\u00f6lgesine y\u00f6nelik y\u0131ll\u0131k Siber G\u00fcvenlik Hafta sonu etkinli\u011finde, Kaspersky Global Ara\u015ft\u0131rma ve Analiz Ekibi (GReAT), kripto para kullan\u0131c\u0131lar\u0131n\u0131 hedef alan yeni OkoBot kampanyas\u0131na ili\u015fkin bulgular\u0131n\u0131 payla\u015ft\u0131.<\/p>\n","protected":false},"author":1,"featured_media":26434,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-26433","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji"],"_links":{"self":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/26433","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/comments?post=26433"}],"version-history":[{"count":1,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/26433\/revisions"}],"predecessor-version":[{"id":26435,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/26433\/revisions\/26435"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/media\/26434"}],"wp:attachment":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/media?parent=26433"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/categories?post=26433"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/tags?post=26433"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}