{"id":41053,"date":"2026-10-28T11:19:31","date_gmt":"2026-10-28T08:19:31","guid":{"rendered":"https:\/\/akdenizolay.com.tr\/index.php\/2026\/10\/28\/kaspersky-orta-asyadaki-diplomatik-kuruluslari-hedef-alan-blackx-bootkitini-ortaya-cikardi\/"},"modified":"2026-10-28T11:19:32","modified_gmt":"2026-10-28T08:19:32","slug":"kaspersky-orta-asyadaki-diplomatik-kuruluslari-hedef-alan-blackx-bootkitini-ortaya-cikardi","status":"publish","type":"post","link":"https:\/\/akdenizolay.com.tr\/index.php\/2026\/10\/28\/kaspersky-orta-asyadaki-diplomatik-kuruluslari-hedef-alan-blackx-bootkitini-ortaya-cikardi\/","title":{"rendered":"Kaspersky, Orta Asya’daki diplomatik kurulu\u015flar\u0131 hedef alan BlackX bootkit’ini ortaya \u00e7\u0131kard\u0131"},"content":{"rendered":"

Kaspersky Global Ara\u015ft\u0131rma ve Analiz Ekibi (GReAT), Microsoft\u2019un yay\u0131mlad\u0131\u011f\u0131 g\u00fcvenlik g\u00fcncellemesindeki yetersizlikten yararlanarak sald\u0131r\u0131 ger\u00e7ekle\u015ftiren geli\u015fmi\u015f yeni bir bootkit olan BlackX\u2019i tespit etti. Uzmanlar, s\u00f6z konusu siber sald\u0131r\u0131 kampanyas\u0131n\u0131 orta d\u00fczeyde bir kesinlikle APT41 grubuna atfederken; BlackX\u2019in, k\u00f6t\u00fc \u015f\u00f6hretli BlackLotus bootkit\u2019inin modernize edilmi\u015f yeni nesil bir versiyonu oldu\u011funu belirledi.<\/strong><\/p>\n

2026 y\u0131l\u0131n\u0131n ba\u015flar\u0131nda Kaspersky g\u00fcvenlik \u00e7\u00f6z\u00fcmleri, Orta Asya’daki diplomatik kurulu\u015flar\u0131 hedef alan bir geli\u015fmi\u015f kal\u0131c\u0131 tehdit (APT) sald\u0131r\u0131s\u0131n\u0131 ba\u015far\u0131yla engelledi. Kaspersky GReAT’in daha sonra y\u00fcr\u00fctt\u00fc\u011f\u00fc ara\u015ft\u0131rma*, sald\u0131rganlar\u0131n Windows i\u015fletim sisteminin \u00f6ny\u00fckleme s\u00fcrecindeki g\u00fcvenlik mekanizmalar\u0131n\u0131 ve bir\u00e7ok \u00fc\u00e7\u00fcnc\u00fc taraf g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fcn\u00fc atlatmak, ayr\u0131ca kurbanlar\u0131n cihazlar\u0131na fark edilmeden uzun s\u00fcre eri\u015fim sa\u011flamak \u00fczere tasarlanm\u0131\u015f karma\u015f\u0131k ve gizlenme kabiliyeti y\u00fcksek bir zararl\u0131 yaz\u0131l\u0131m olan BlackX’i kulland\u0131\u011f\u0131n\u0131 ortaya koydu.<\/p>\n

\u0130nceleme, BlackX’in siber su\u00e7lular taraf\u0131ndan 2022’de dark web’de sat\u0131\u015fa sunulan BlackLotus adl\u0131 zararl\u0131 yaz\u0131l\u0131m\u0131n modernize edilmi\u015f bir devam\u0131 oldu\u011funu ortaya koydu. BlackX, bilgisayar a\u00e7\u0131l\u0131rken yaln\u0131zca g\u00fcvenilir yaz\u0131l\u0131mlar\u0131n \u00e7al\u0131\u015fmas\u0131n\u0131 sa\u011flamay\u0131 ama\u00e7layan Secure Boot \u00f6zelli\u011fini a\u015fabiliyor. Bunun i\u00e7in daha \u00f6nce bilinen ve \u201cBaton Drop\u201d olarak adland\u0131r\u0131lan bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131ndan yararlan\u0131yor. Microsoft bu g\u00fcvenlik a\u00e7\u0131\u011f\u0131na y\u00f6nelik bir yama yay\u0131mlam\u0131\u015f olsa da koruman\u0131n b\u00fct\u00fcn\u00fcyle devreye al\u0131nmas\u0131 i\u00e7in sistem y\u00f6neticilerinin belirli yap\u0131land\u0131rma ad\u0131mlar\u0131n\u0131 manuel olarak tamamlamas\u0131 gerekiyor. Bu ad\u0131mlar\u0131 uygulamayan \u00e7ok say\u0131da kurulu\u015f savunmas\u0131z kald\u0131. Bu nedenle sald\u0131rganlar, yama uygulanm\u0131\u015f sistemlerde bile Baton Drop g\u00fcvenlik a\u00e7\u0131\u011f\u0131ndan yararlanabildi.<\/p>\n

Sald\u0131rganlar, kurbanlar\u0131n i\u00e7 a\u011flar\u0131na s\u0131z\u0131p Windows sistemlerinde y\u00f6netici ayr\u0131cal\u0131klar\u0131n\u0131 ele ge\u00e7irdikten sonra BlackX bootkit’ini y\u00fcksek kal\u0131c\u0131l\u0131k sa\u011flayan ikincil bir zararl\u0131 yaz\u0131l\u0131m olarak devreye ald\u0131. Faaliyetlerini olay m\u00fcdahale ekiplerinden gizlemek isteyen sald\u0131rganlar, bootkit bile\u015fenlerini \u015fifrelenmi\u015f dosyalar ve tespit edilmekten ka\u00e7acak \u015fekilde \u00f6zel olarak tasarlanm\u0131\u015f y\u00fckleyici programlar arac\u0131l\u0131\u011f\u0131yla hedef cihazlara aktard\u0131.<\/p>\n

G\u00fcvenlik a\u00e7\u0131\u011f\u0131ndan ba\u015far\u0131yla yararlan\u0131lmas\u0131n\u0131n ard\u0131ndan BlackX, g\u00fcvenlik yaz\u0131l\u0131mlar\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rakmaya y\u00f6nelik bir bile\u015fen \u00e7al\u0131\u015ft\u0131r\u0131yor. Ancak Kaspersky’nin u\u00e7 nokta koruma \u00e7\u00f6z\u00fcm\u00fc, zararl\u0131 yaz\u0131l\u0131m\u0131n bu giri\u015fimini engelledi ve sald\u0131r\u0131 ba\u015far\u0131s\u0131z oldu. Sald\u0131rganlar g\u00fcvenlik korumas\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rakmay\u0131 ba\u015farsayd\u0131, bir sonraki a\u015famada Google Drive, OneDrive ve Yandex Disk gibi me\u015fru bulut hizmetlerinden yararlanarak gizli bilgileri \u00e7almak ve kurbanlar\u0131n faaliyetlerini izlemek \u00fczere tasarlanm\u0131\u015f bir casus yaz\u0131l\u0131m \u00e7al\u0131\u015ft\u0131racaklard\u0131.<\/p>\n

Kaspersky GReAT g\u00fcvenlik uzman\u0131 Georgy Kucherin<\/strong>, konuyla ilgili \u015fu de\u011ferlendirmede bulundu: \u201cBlackX’in ortaya \u00e7\u0131k\u0131\u015f\u0131 dikkat \u00e7ekici. \u00c7\u00fcnk\u00fc APT gruplar\u0131n\u0131n, bu \u00f6rnekte BlackLotus’ta oldu\u011fu gibi, do\u011frudan siber su\u00e7 d\u00fcnyas\u0131ndan kod veya fikirler \u00f6d\u00fcn\u00e7 ald\u0131\u011f\u0131 durumlarla nadiren kar\u015f\u0131la\u015f\u0131yoruz. Grup, ticari olarak sunulan bir siber su\u00e7 arac\u0131n\u0131 uyarlayarak Windows’un \u00f6ny\u00fckleme s\u00fcrecini korumak i\u00e7in tasarlanm\u0131\u015f g\u00fcvenlik mekanizmalar\u0131n\u0131 a\u015fabildi. Bu hibrit yakla\u015f\u0131m, geli\u015fmi\u015f tehdit akt\u00f6rlerinin y\u00fcksek de\u011fer ta\u015f\u0131yan a\u011flar \u00fczerinde kal\u0131c\u0131 ve g\u00f6r\u00fcnmez bir kontrol sa\u011flamak i\u00e7in her \u015feyi s\u0131f\u0131rdan geli\u015ftirmesine gerek olmad\u0131\u011f\u0131n\u0131 g\u00f6steriyor.\u201d<\/em><\/p>\n

Bu ve benzeri tehditlere kar\u015f\u0131 korunmak i\u00e7in kurulu\u015flar\u0131n BT ekipleri, Baton Drop ve benzeri g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 gidermek \u00fczere Microsoft’un \u00f6nerdi\u011fi ad\u0131mlar\u0131 manuel olarak uygulamal\u0131. Ayr\u0131ca y\u00f6netici ayr\u0131cal\u0131klar\u0131 s\u0131n\u0131rland\u0131r\u0131lmal\u0131 ve \u00fcr\u00fcn yaz\u0131l\u0131m\u0131n\u0131n (firmware) b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc izleyebilen g\u00fcvenlik \u00e7\u00f6z\u00fcmleri kullan\u0131lmal\u0131. Kaspersky’nin u\u00e7 nokta g\u00fcvenli\u011fi \u00e7\u00f6z\u00fcmlerinde yer alan Exploit Prevention bile\u015feni, ilgili yama uygulanmam\u0131\u015f olsa bile veya hen\u00fcz bir yamas\u0131 bulunmayan s\u0131f\u0131r g\u00fcn g\u00fcvenlik a\u00e7\u0131klar\u0131 s\u00f6z konusu oldu\u011funda dahi g\u00fcvenlik a\u00e7\u0131klar\u0131ndan yararlanan kodun \u00e7al\u0131\u015fmas\u0131n\u0131 engelliyor.<\/p>\n

*Ara\u015ft\u0131rma, Endonezya’n\u0131n Bali kentinde d\u00fczenlenen Security Analyst Summit 2026’da sunuldu.<\/em><\/p>\n

Global Ara\u015ft\u0131rma ve Analiz Ekibi hakk\u0131nda<\/strong><\/p>\n

2008 y\u0131l\u0131nda kurulan Global Ara\u015ft\u0131rma ve Analiz Ekibi (GReAT), Kaspersky’nin ara\u015ft\u0131rma faaliyetlerinin merkezinde yer al\u0131yor. Ekip, d\u00fcnya genelindeki geli\u015fmi\u015f kal\u0131c\u0131 tehditleri (APT), siber casusluk kampanyalar\u0131n\u0131, b\u00fcy\u00fck \u00f6l\u00e7ekli k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m ve fidye yaz\u0131l\u0131m\u0131 faaliyetlerini ve yeralt\u0131 siber su\u00e7 d\u00fcnyas\u0131ndaki e\u011filimleri ara\u015ft\u0131r\u0131yor. Bug\u00fcn Avrupa, Rusya, Latin Amerika, Asya ve Orta Do\u011fu’da faaliyet g\u00f6steren 35’ten fazla uzmandan olu\u015fan GReAT, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m ara\u015ft\u0131rmalar\u0131 ve inovasyon alanlar\u0131nda \u015firkete \u00f6nc\u00fcl\u00fck ediyor. Ekibin uzmanlar\u0131, siber tehditlerin ke\u015ffedilmesi ve analiz edilmesine y\u00f6nelik \u00e7al\u0131\u015fmalar\u0131n\u0131 derin teknik bilgi birikimi, uzmanl\u0131k, tutku ve merakla s\u00fcrd\u00fcr\u00fcyor.<\/p>\n

Kaspersky hakk\u0131nda<\/strong><\/p>\n

Kaspersky, 1997 y\u0131l\u0131nda kurulmu\u015f k\u00fcresel bir siber g\u00fcvenlik ve dijital gizlilik \u015firketidir. Bug\u00fcne kadar bir milyardan fazla cihaz\u0131 yeni ortaya \u00e7\u0131kan siber tehditlere ve hedefli sald\u0131r\u0131lara kar\u015f\u0131 koruyan Kaspersky’nin derin tehdit istihbarat\u0131 ve g\u00fcvenlik uzmanl\u0131\u011f\u0131, d\u00fcnyan\u0131n d\u00f6rt bir yan\u0131ndaki bireyleri, i\u015fletmeleri, kritik altyap\u0131lar\u0131 ve devletleri korumak i\u00e7in s\u00fcrekli olarak yenilik\u00e7i \u00e7\u00f6z\u00fcmlere ve hizmetlere d\u00f6n\u00fc\u015f\u00fcyor. \u015eirketin kapsaml\u0131 g\u00fcvenlik portf\u00f6y\u00fc, ki\u015fisel cihazlar i\u00e7in lider dijital ya\u015fam korumas\u0131, \u015firketler i\u00e7in \u00f6zel g\u00fcvenlik \u00fcr\u00fcnleri ve hizmetlerinin yan\u0131 s\u0131ra sofistike ve geli\u015fen dijital tehditlerle m\u00fccadele etmek i\u00e7in Cyber Immune \u00e7\u00f6z\u00fcmlerini i\u00e7eriyor. Milyonlarca bireyin ve yakla\u015f\u0131k 200.000 kurumsal m\u00fc\u015fterinin kendileri i\u00e7in en \u00f6nemli \u015feyleri korumalar\u0131na yard\u0131mc\u0131 oluyoruz.\u00a0kaspersky.com\u00a0adresinde daha fazla bilgi edinebilirsiniz.<\/p>\n

Kaynak: (BYZHA) Beyaz Haber Ajans\u0131<\/p>\n","protected":false},"excerpt":{"rendered":"

Kaspersky Global Ara\u015ft\u0131rma ve Analiz Ekibi (GReAT), Microsoft\u2019un yay\u0131mlad\u0131\u011f\u0131 g\u00fcvenlik g\u00fcncellemesindeki yetersizlikten yararlanarak sald\u0131r\u0131 ger\u00e7ekle\u015ftiren geli\u015fmi\u015f yeni bir bootkit olan BlackX\u2019i tespit etti.<\/p>\n","protected":false},"author":1,"featured_media":41054,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-41053","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji"],"_links":{"self":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/41053","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/comments?post=41053"}],"version-history":[{"count":1,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/41053\/revisions"}],"predecessor-version":[{"id":41055,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/41053\/revisions\/41055"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/media\/41054"}],"wp:attachment":[{"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/media?parent=41053"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/categories?post=41053"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/akdenizolay.com.tr\/index.php\/wp-json\/wp\/v2\/tags?post=41053"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}