{"id":34423,"date":"2026-09-17T15:08:42","date_gmt":"2026-09-17T12:08:42","guid":{"rendered":"https:\/\/akdenizolay.com.tr\/index.php\/2026\/09\/17\/kaspersky-macos-kullanicilarinin-verilerini-ve-kripto-varliklarini-hedef-alan-yeni-macsync-surumunu-kesfetti\/"},"modified":"2026-09-17T15:08:43","modified_gmt":"2026-09-17T12:08:43","slug":"kaspersky-macos-kullanicilarinin-verilerini-ve-kripto-varliklarini-hedef-alan-yeni-macsync-surumunu-kesfetti","status":"publish","type":"post","link":"https:\/\/akdenizolay.com.tr\/index.php\/2026\/09\/17\/kaspersky-macos-kullanicilarinin-verilerini-ve-kripto-varliklarini-hedef-alan-yeni-macsync-surumunu-kesfetti\/","title":{"rendered":"Kaspersky, macOS kullan\u0131c\u0131lar\u0131n\u0131n verilerini ve kripto varl\u0131klar\u0131n\u0131 hedef alan yeni MacSync s\u00fcr\u00fcm\u00fcn\u00fc ke\u015ffetti"},"content":{"rendered":"<p> Kaspersky ara\u015ft\u0131rmac\u0131lar\u0131, macOS i\u015fletim sistemini hedef alan ve &#8220;MacSync&#8221; ad\u0131yla bilinen bilgi h\u0131rs\u0131z\u0131 (infostealer) yaz\u0131l\u0131m\u0131n geli\u015fmi\u015f, g\u00fcncel bir varyant\u0131n\u0131 ortaya \u00e7\u0131kard\u0131. \u0130lk olarak 2024\u20132025 d\u00f6neminde AMOS h\u0131rs\u0131z yaz\u0131l\u0131m\u0131n\u0131n bir t\u00fcrevi olarak g\u00f6r\u00fclen MacSync, kapsaml\u0131 bir evrim ge\u00e7irdi. Eyl\u00fcl 2026&#8217;da tespit edilen bu son s\u00fcr\u00fcm, karma\u015f\u0131k yeni bir bula\u015fma zinciri kullanarak hedef sisteme hem bilgi h\u0131rs\u0131z\u0131 bir yaz\u0131l\u0131m hem de bir arka kap\u0131 (backdoor) y\u00fckl\u00fcyor; b\u00f6ylece oturum kimlik bilgilerini, \u00e7e\u015fitli kullan\u0131c\u0131 verilerini ve kripto varl\u0131klar\u0131 tehlikeye at\u0131yor.<\/p>\n<p>Sald\u0131r\u0131, kullan\u0131c\u0131n\u0131n cihaz\u0131na k\u00f6t\u00fc ama\u00e7l\u0131 bir dosyan\u0131n ula\u015fmas\u0131yla ba\u015fl\u0131yor. Bu durum, kullan\u0131c\u0131n\u0131n k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131 belirli bir uygulama gibi g\u00f6sterilerek indirmesi sonucunda ger\u00e7ekle\u015febiliyor. S\u00f6z konusu uygulama bir belge payla\u015f\u0131m uygulamas\u0131, kripto c\u00fczdan uygulamas\u0131 veya ba\u015fka bir uygulama olarak sunulabiliyor. Ard\u0131ndan cihazda bir dizi ba\u015fka k\u00f6t\u00fc ama\u00e7l\u0131 indirme ve manip\u00fclasyon ger\u00e7ekle\u015ftiriliyor. Baz\u0131 durumlarda sald\u0131r\u0131 zincirindeki k\u00f6t\u00fc ama\u00e7l\u0131 indirmelerden biri, herkese a\u00e7\u0131k bir iCloud takvim girdisinde .ics format\u0131nda bar\u0131nd\u0131r\u0131l\u0131yor. Bula\u015fma sonucunda MacSync&#8217;in temel bile\u015fenleri olan bilgi h\u0131rs\u0131z\u0131 ve arka kap\u0131 cihaza y\u00fckleniyor.<\/p>\n<p>Bilgi h\u0131rs\u0131z\u0131 \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131\u011f\u0131nda, kullan\u0131c\u0131n\u0131n indirdi\u011fini d\u00fc\u015f\u00fcnd\u00fc\u011f\u00fc uygulama gibi g\u00f6r\u00fcn\u00fcyor. Ard\u0131ndan kullan\u0131c\u0131dan y\u00f6netici hesab\u0131n\u0131n parolas\u0131n\u0131 girmesi isteniyor. Parola girildikten sonra ekranda uygulaman\u0131n \u201chasarl\u0131\u201d oldu\u011fu ve \u00e7\u00f6p kutusuna ta\u015f\u0131nmas\u0131 gerekti\u011fini belirten bir bildirim g\u00f6r\u00fcnt\u00fcleniyor. Bu y\u00f6ntem, kullan\u0131c\u0131n\u0131n dikkatini da\u011f\u0131tmak amac\u0131yla kullan\u0131l\u0131yor. Bilgi h\u0131rs\u0131z\u0131; web taray\u0131c\u0131lar\u0131ndaki verileri (gezinme ge\u00e7mi\u015fi, \u00e7erezler ve kay\u0131tl\u0131 kimlik bilgileri), kripto c\u00fczdan uygulamalar\u0131ndaki verileri, Telegram mesajla\u015fma verilerini, cihaz\u0131n oturum a\u00e7ma bilgilerini ve parolas\u0131n\u0131 ve Keychain dosyas\u0131n\u0131 topluyor. Ayr\u0131ca y\u00fckl\u00fc uygulamalar\u0131n listesinin yan\u0131 s\u0131ra cihaz\u0131n modeli ve donan\u0131m bilgileri, SSH ve ZSH yap\u0131land\u0131rmalar\u0131 ile di\u011fer verileri de ele ge\u00e7iriyor.<\/p>\n<p><em>\u00a0<img decoding=\"async\" data-bit=\"iit\" src=\"https:\/\/ci3.googleusercontent.com\/meips\/ADKq_NbEWSAMw8Fu1Tu0IqfvCnbClpX-_X7Rb4rLahsHpfIx9zL5sVgCYcObFuK5r7IEcfOXh2BX6u-ay6DAdeYiJXRBA2-Hm3fc6Bj9jx6BgKl18-neK5Iv0KJnEl7tVqQuJ6c7KJ6ibactDS2d36y0UO4WJz61c1lPSekg4hVxGvY=s0-d-e1-ft#https:\/\/img.faselis.com\/faselis_tr\/brands\/12586\/inline\/1789628625_260917_Kaspersky_bb_g__rsel__1_.png.jpg\" tabindex=\"0\" \/><img decoding=\"async\" data-bit=\"iit\" src=\"https:\/\/ci3.googleusercontent.com\/meips\/ADKq_Nb9PO1ShzcJ2BMKRLKIwh9_2cCkTIQ0-VrhPEO9OOPfLSrIXcqXtig2MJ3dBb3rZhjv-xFGbG0VXlbIoEyKvSKbVyn9bJQTPxC1D0RNSts2hUXfC6P3IHVh3ARTj6wNE65i4tHAc-auQ8rxGtEMplG1firgn7A86_sK2EI=s0-d-e1-ft#https:\/\/img.faselis.com\/faselis_tr\/brands\/12586\/inline\/1789628619_260917_Kaspersky_bb_g__rsel2.png.jpg\" tabindex=\"0\" \/><\/em><\/p>\n<p>\u00a0<\/p>\n<p><em>Bilgi h\u0131rs\u0131z\u0131n\u0131n kulland\u0131\u011f\u0131 sahte sistem bildirimleri<\/em><\/p>\n<p>MacSync&#8217;in bir di\u011fer bile\u015feni olan arka kap\u0131, me\u015fru Finder uygulamas\u0131 gibi gizleniyor ve sald\u0131rganlara kullan\u0131c\u0131n\u0131n verilerine eri\u015fim imk\u00e2n\u0131 sa\u011fl\u0131yor. Sald\u0131rganlar bu arka kap\u0131 arac\u0131l\u0131\u011f\u0131yla \u00f6zellikle kullan\u0131c\u0131n\u0131n web taray\u0131c\u0131s\u0131na de\u011fi\u015ftirilmi\u015f eklentileri uzaktan y\u00fckleyebiliyor. Bu eklentilerin b\u00fcy\u00fck olas\u0131l\u0131kla kripto c\u00fczdan eklentilerini k\u00f6t\u00fc ama\u00e7l\u0131 olanlarla de\u011fi\u015ftirmek i\u00e7in kullan\u0131ld\u0131\u011f\u0131 d\u00fc\u015f\u00fcn\u00fcl\u00fcyor. Bunun yan\u0131 s\u0131ra sald\u0131rganlar, me\u015fru Ledger kripto c\u00fczdan uygulamas\u0131n\u0131 k\u00f6t\u00fc ama\u00e7l\u0131 bir kopyayla de\u011fi\u015ftirebiliyor, \u00e7e\u015fitli sistem bilgilerini veya belirli kullan\u0131c\u0131 dosyalar\u0131n\u0131 toplayabiliyor ve ba\u015fka ama\u00e7larla rastgele kod \u00e7al\u0131\u015ft\u0131rabiliyor.<\/p>\n<p><strong>Kaspersky G\u00fcvenlik Uzman\u0131 Sergey Puzan<\/strong>\u00a0geli\u015fmeyle ilgili \u015fu de\u011ferlendirmede bulundu:\u00a0<em>\u201cYeni ke\u015ffedilen MacSync s\u00fcr\u00fcm\u00fc, sundu\u011fu yeni yetenekler ve daha karma\u015f\u0131k h\u00e2le getirilen enfeksiyon zinciriyle \u00f6nceki varyantlardan belirgin \u015fekilde ayr\u0131l\u0131yor. Tehdit akt\u00f6rleri, kurban\u0131n cihaz\u0131na ilk eri\u015fimi sa\u011flamak ad\u0131na sosyal m\u00fchendislik y\u00f6ntemlerini de h\u0131zla geli\u015ftiriyor. Bu nedenle, \u00f6zellikle geli\u015ftiricisi g\u00fcvenilir olmayan yeni uygulamalar y\u00fcklenirken son derece temkinli olunmal\u0131. Kullan\u0131c\u0131lara, indirdikleri yaz\u0131l\u0131mlar\u0131n orijinal geli\u015ftiriciye ait olup olmad\u0131\u011f\u0131n\u0131 her zaman resm\u00ee ve g\u00fcvenilir kaynaklardan do\u011frulamalar\u0131n\u0131 \u00f6neriyoruz. Cihazdaki en hassas verileri ve giri\u015f kimliklerini koruyan kilit unsur y\u00f6netici parolas\u0131d\u0131r; uygulamalar bu parolay\u0131 talep etti\u011finde kullan\u0131c\u0131lar her zamankinden daha dikkatli yakla\u015fmal\u0131d\u0131r.\u201d<\/em><\/p>\n<p>Kaspersky g\u00fcvenlik \u00e7\u00f6z\u00fcmleri, MacSync ailesiyle ili\u015fkili tehditleri ba\u015far\u0131yla tespit ederek etkisiz hale getiriyor.<\/p>\n<p>G\u00fcncellenen MacSync k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131na ili\u015fkin kapsaml\u0131 teknik analize \u00f6n\u00fcm\u00fczdeki g\u00fcnlerde\u00a0Securelist.com\u00a0<wbr \/>adresinden ula\u015f\u0131labilecek.<\/p>\n<p><strong>\u00a0<\/strong><\/p>\n<p>\u00a0<\/p>\n<p>Kaynak: (BYZHA) Beyaz Haber Ajans\u0131<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Kaspersky ara\u015ft\u0131rmac\u0131lar\u0131, macOS i\u015fletim sistemini hedef alan ve &#8220;MacSync&#8221; ad\u0131yla bilinen bilgi h\u0131rs\u0131z\u0131 (infostealer) yaz\u0131l\u0131m\u0131n geli\u015fmi\u015f, g\u00fcncel bir varyant\u0131n\u0131 ortaya \u00e7\u0131kard\u0131.<\/p>\n","protected":false},"author":1,"featured_media":34424,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-34423","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji"],"_links":{"self":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/34423","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/comments?post=34423"}],"version-history":[{"count":1,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/34423\/revisions"}],"predecessor-version":[{"id":34425,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/34423\/revisions\/34425"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/media\/34424"}],"wp:attachment":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/media?parent=34423"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/categories?post=34423"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/tags?post=34423"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}