{"id":35218,"date":"2026-09-22T12:48:55","date_gmt":"2026-09-22T09:48:55","guid":{"rendered":"https:\/\/akdenizolay.com.tr\/index.php\/2026\/09\/22\/kaspersky-dosyalari-sifrelemeden-kurumsal-cihazlarin-kontrolunu-ele-geciren-yeni-payload-fidye-yazilimini-ortaya-cikardi\/"},"modified":"2026-09-22T12:48:55","modified_gmt":"2026-09-22T09:48:55","slug":"kaspersky-dosyalari-sifrelemeden-kurumsal-cihazlarin-kontrolunu-ele-geciren-yeni-payload-fidye-yazilimini-ortaya-cikardi","status":"publish","type":"post","link":"https:\/\/akdenizolay.com.tr\/index.php\/2026\/09\/22\/kaspersky-dosyalari-sifrelemeden-kurumsal-cihazlarin-kontrolunu-ele-geciren-yeni-payload-fidye-yazilimini-ortaya-cikardi\/","title":{"rendered":"Kaspersky, dosyalar\u0131 \u015fifrelemeden kurumsal cihazlar\u0131n kontrol\u00fcn\u00fc ele ge\u00e7iren yeni \u2018Payload\u2019 fidye yaz\u0131l\u0131m\u0131n\u0131 ortaya \u00e7\u0131kard\u0131"},"content":{"rendered":"<p> <em>Yeni Kaspersky raporu, \u201cdosya \u015fifrelemesine dayanmayan fidye sald\u0131r\u0131lar\u0131\u201d y\u00f6nteminin giderek yayg\u0131nla\u015ft\u0131\u011f\u0131na dikkat \u00e7ekiyor<\/em><\/p>\n<p>Kaspersky Global Acil Durum M\u00fcdahale Ekibi (GERT), Payload fidye yaz\u0131l\u0131m\u0131 ailesinin yeni ve geli\u015fmi\u015f bir sald\u0131r\u0131 y\u00f6ntemini analiz eden yeni bir rapor yay\u0131mlad\u0131. Orta Do\u011fu\u2019daki bir \u00fcretim \u015firketine y\u00f6nelik olay m\u00fcdahalesi s\u0131ras\u0131nda tespit edilen sald\u0131r\u0131, siber su\u00e7larda ya\u015fanan \u00f6nemli bir de\u011fi\u015fime i\u015faret ediyor. Sald\u0131rganlar, geleneksel bir fidye yaz\u0131l\u0131m\u0131 \u015fifreleyicisi kullanmadan \u015firketin a\u011f\u0131 \u00fczerinde tam kontrol sa\u011flad\u0131; bilgisayarlar\u0131n kilitlenmesini, fidye notlar\u0131n\u0131n g\u00f6r\u00fcnt\u00fclenmesini ve masa\u00fcst\u00fc duvar k\u00e2\u011f\u0131tlar\u0131n\u0131n de\u011fi\u015ftirilmesini sa\u011flad\u0131.<\/p>\n<p>Bu olay, Kaspersky\u2019nin bu y\u0131l\u0131n ba\u015flar\u0131nda yay\u0131mlad\u0131\u011f\u0131 State of Ransomware 2026 (Fidye Yaz\u0131l\u0131mlar\u0131n\u0131n Durumu 2026) raporunda dikkat \u00e7ekilen trendlerden birini ortaya koyuyor: Sald\u0131rganlar geleneksel dosya \u015fifreleme y\u00f6ntemlerinden giderek uzakla\u015f\u0131yor. Bunun yerine \u201cdosya \u015fifrelemesine dayanmayan fidye sald\u0131r\u0131lar\u0131\u201d y\u00f6ntemlerine y\u00f6nelerek, ma\u011fdurlardan \u00f6deme almak i\u00e7in kriptografik anahtarlara g\u00fcvenmek yerine operasyonlar\u0131n do\u011frudan kesintiye u\u011frat\u0131lmas\u0131na ve \u00e7al\u0131nan hassas verilerin dark web\u2019de yay\u0131mlanmas\u0131na odaklan\u0131yor.<\/p>\n<p><strong>\u0130lk S\u0131zma: \u00d6n Kap\u0131dan Sessizce \u0130\u00e7eri Girdiler<\/strong><\/p>\n<p>Sald\u0131rganlar a\u011fa s\u0131zmak i\u00e7in karma\u015f\u0131k zararl\u0131 yaz\u0131l\u0131mlar kullanmak yerine, do\u011frudan y\u00f6netici (admin) yetkilerini ele ge\u00e7irerek ilk savunma hatlar\u0131n\u0131 a\u015ft\u0131. Muhtemelen oltalama (phishing) yoluyla y\u00fcksek ayr\u0131cal\u0131kl\u0131 kullan\u0131c\u0131 kimlik bilgilerini temin eden failler; standart uzak eri\u015fim ve VPN giri\u015f noktalar\u0131 \u00fczerinden kurumsal a\u011fa do\u011frudan giri\u015f yapt\u0131. Sald\u0131rganlar\u0131n g\u00fcvenlik izleme sistemlerine rutin g\u00f6revlerini y\u00fcr\u00fcten yetkili BT personeli gibi g\u00f6r\u00fcnmesi nedeniyle bu s\u00fcre\u00e7 hi\u00e7bir engele tak\u0131lmadan ilerledi.<\/p>\n<p><strong>Sald\u0131r\u0131n\u0131n Geli\u015fimi: A\u011f\u0131n Kendi Kurallar\u0131 Silaha D\u00f6n\u00fc\u015ft\u00fcr\u00fcld\u00fc<\/strong><\/p>\n<p>Sald\u0131rganlar, sald\u0131r\u0131y\u0131 ilerletmek i\u00e7in \u015firketin g\u00fcvenilir y\u00f6netim ara\u00e7lar\u0131n\u0131 kulland\u0131. Kurumsal a\u011f\u0131n temel bile\u015fenlerinden biri olan Active Directory\u2019yi hedef alarak k\u00f6t\u00fc ama\u00e7l\u0131 bir Grup \u0130lkesi Nesnesi (Group Policy Object \u2013 GPO) kural\u0131 olu\u015fturdular.<\/p>\n<p>GPO\u2019lar, a\u011f y\u00f6neticilerinin binlerce \u00e7al\u0131\u015fan bilgisayar\u0131ndaki ayarlar\u0131 an\u0131nda yap\u0131land\u0131rmas\u0131n\u0131 sa\u011flayan ara\u00e7lard\u0131r. Grup \u0130lkesi, me\u015fru ve y\u00fcksek ayr\u0131cal\u0131kl\u0131 bir y\u00f6netim mekanizmas\u0131 oldu\u011fundan, ele ge\u00e7irilmi\u015f ayr\u0131cal\u0131kl\u0131 hesaplar \u00fczerinden ger\u00e7ekle\u015ftirilen k\u00f6t\u00fc ama\u00e7l\u0131 de\u011fi\u015fiklikler me\u015fru BT faaliyetleriyle benzer g\u00f6r\u00fcnebilir. Sald\u0131rganlar t\u00fcm sald\u0131r\u0131y\u0131 \u201cPAYLOAD\u201d ad\u0131n\u0131 verdikleri k\u00f6t\u00fc ama\u00e7l\u0131 bir GPO kural\u0131n\u0131n i\u00e7ine yerle\u015ftirerek sessizce ilerledi. Kural, sistemlerin g\u00fcncellenen politikalar\u0131 i\u015flemesiyle birlikte yerel y\u00f6netici hesaplar\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rakt\u0131, fidye notlar\u0131n\u0131 da\u011f\u0131tt\u0131 ve t\u00fcm bilgisayarlar\u0131n masa\u00fcst\u00fc duvar k\u00e2\u011f\u0131d\u0131 ile kilit ekran\u0131n\u0131 ele ge\u00e7irerek fidye mesaj\u0131n\u0131 g\u00f6sterdi.<\/p>\n<p><strong>Verilerin dark web\u2019e s\u0131zd\u0131r\u0131lmas\u0131<\/strong><\/p>\n<p>Sald\u0131rganlar, \u00e7al\u0131\u015fmalar\u0131n\u0131 \u015firketin de\u011ferli verilerini ele ge\u00e7irmeye odaklad\u0131. Veri h\u0131rs\u0131zl\u0131\u011f\u0131 tamamland\u0131ktan ve y\u00f6netici hesaplar\u0131na y\u00f6nelik eri\u015fim k\u0131s\u0131tlamalar\u0131 devreye al\u0131nd\u0131ktan sonra, ele ge\u00e7irilen veriler \u015fantaj giri\u015fiminin son a\u015famas\u0131 olarak dark web\u2019de yay\u0131mland\u0131.<\/p>\n<p><strong>Kaspersky Global Acil Durum M\u00fcdahale Ekibi g\u00fcvenlik uzman\u0131 Elsayed Elrefaei<\/strong>, sald\u0131r\u0131yla ilgili \u015fu de\u011ferlendirmede bulundu: \u201c<em>PAYLOAD\u2019\u0131n arkas\u0131ndaki y\u00f6ntemler, siber su\u00e7lular\u0131n kulland\u0131\u011f\u0131 taktiklerde yeni bir geli\u015fmeye i\u015faret ediyor. Sald\u0131rganlar merkezi a\u011f kurallar\u0131n\u0131n kontrol\u00fcn\u00fc ele ge\u00e7irdi\u011finde, k\u00f6t\u00fc ama\u00e7l\u0131 Grup \u0130lkesi aktif oldu\u011fu s\u00fcrece yaln\u0131zca geleneksel u\u00e7 nokta k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m taramas\u0131 yeterli olmayabilir. Kurulu\u015flar, k\u00f6t\u00fc ama\u00e7l\u0131 politikalar\u0131 kayna\u011f\u0131nda engellemeye, y\u00f6netici kimlik bilgilerini s\u0131k\u0131 \u015fekilde korumaya ve savunma yakla\u015f\u0131m\u0131n\u0131 yaln\u0131zca k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m taramas\u0131na de\u011fil, davran\u0131\u015flar\u0131n izlenmesine dayand\u0131rmaya \u00f6ncelik vermeli.<\/em>\u201d<\/p>\n<p>Kaspersky, benzer tehditlere kar\u015f\u0131 korunmak i\u00e7in a\u015fa\u011f\u0131daki g\u00fcvenlik \u00f6nlemlerini \u00f6neriyor:<\/p>\n<ul>\n<li>A\u011f y\u00f6neticileri, t\u00fcm GPO olu\u015fturma ve de\u011fi\u015fikliklerini yak\u0131ndan izlemeli. Kurumsal a\u011f\u0131n k\u00f6k\u00fcne yeni bir kural ba\u011fland\u0131\u011f\u0131 anda tetiklenecek g\u00fcvenlik uyar\u0131lar\u0131 yap\u0131land\u0131r\u0131lmal\u0131.<\/li>\n<li>A\u011f\u0131n y\u00f6netim sistemlerine ve VPN giri\u015f noktalar\u0131na eri\u015fimde y\u00fcksek g\u00fcvenlikli, kimlik av\u0131na dayan\u0131kl\u0131 \u00e7ok fakt\u00f6rl\u00fc kimlik do\u011frulama kullan\u0131lmal\u0131. \u00d6rne\u011fin fiziksel g\u00fcvenlik anahtarlar\u0131 tercih edilebilir.<\/li>\n<li>Y\u00f6netici yetkileri i\u00e7in kat\u0131 s\u0131n\u0131rlar uygulanmal\u0131. Genel BT y\u00f6neticilerinin t\u00fcm i\u015f istasyonlar\u0131na ve sunuculara ayn\u0131 anda eri\u015fim sa\u011flayan \u201cana anahtarlara\u201d sahip olmas\u0131na izin verilmemeli. Son derece y\u00fcksek ayr\u0131cal\u0131klara sahip \u201cDomain Admin\u201d hesaplar\u0131 yaln\u0131zca \u00f6zel ve izole sistemlerle s\u0131n\u0131rland\u0131r\u0131lmal\u0131.<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<p>Kaynak: (BYZHA) Beyaz Haber Ajans\u0131<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Yeni Kaspersky raporu, \u201cdosya \u015fifrelemesine dayanmayan fidye sald\u0131r\u0131lar\u0131\u201d y\u00f6nteminin giderek yayg\u0131nla\u015ft\u0131\u011f\u0131na dikkat \u00e7ekiyor    Kaspersky Global Acil Durum M\u00fcdahale Ekibi (GERT), Payload fidye yaz\u0131l\u0131m\u0131 ailesinin yeni ve geli\u015fmi\u015f bir sald\u0131r\u0131 y\u00f6ntemini analiz eden yeni bir rapor yay\u0131mlad\u0131.<\/p>\n","protected":false},"author":1,"featured_media":35219,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-35218","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji"],"_links":{"self":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/35218","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/comments?post=35218"}],"version-history":[{"count":1,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/35218\/revisions"}],"predecessor-version":[{"id":35220,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/35218\/revisions\/35220"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/media\/35219"}],"wp:attachment":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/media?parent=35218"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/categories?post=35218"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/tags?post=35218"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}