![\"Google](\"https:\/\/images.ntv.com.tr\/images\/LXSYBGICHROEVFXHEW7YTESYQ4-482938.jpg?width=930&format=webp\")
<\/p>\n<\/p>\n
Google ve internet istihbarat verilerine g\u00f6re fidye arayan siber korsanlar, son bir ayda ABD’li \u00f6nde gelen \u00e7ok say\u0131da finans kurulu\u015funu ve \u015firketi hedef ald\u0131. Korsanlar\u0131n telefon aramalar\u0131 \u00fczerinden \u00e7al\u0131\u015fanlar\u0131n parolalar\u0131n\u0131 \u00e7almak amac\u0131yla Blackstone, KKR ve Apollo gibi dev \u015firketlerin ad\u0131na 72 sahte internet sitesi kurdu\u011fu belirlendi.<\/p>\n
Google verilerine ve Reuters taraf\u0131ndan incelenen internet istihbarat kay\u0131tlar\u0131na g\u00f6re fidye hedefleyen siber korsanlar, son bir ay i\u00e7erisinde ABD’deki \u00f6nde gelen \u00e7ok say\u0131da finans kurulu\u015funa ve sivil i\u015fletmeye y\u00f6nelik sald\u0131r\u0131 giri\u015fiminde bulundu.<\/p>\n
\u00a0<\/p>\n
Toplanan veriler, korsanlar\u0131n \u00f6zel sermaye \u015firketleri ve finans kurulu\u015flar\u0131nda \u00e7al\u0131\u015fan personelin parolalar\u0131n\u0131 ele ge\u00e7irmek amac\u0131yla \u00f6zel internet siteleri tasarlad\u0131\u011f\u0131n\u0131 g\u00f6steriyor.<\/p>\n
\u00a0<\/p>\n
Hedef al\u0131nan yap\u0131lar aras\u0131nda Blackstone, Bridgewater Associates, Apollo Global Management, Bain Capital, KKR, TPG, CME Group, Clearlake Capital ve Moody’s gibi dev kurumlar\u0131n yan\u0131 s\u0131ra farkl\u0131 ticari i\u015fletmeler de yer al\u0131yor.<\/p>\n
\u00a0<\/p>\n
\u0130nternet devi Google taraf\u0131ndan per\u015fembe g\u00fcn\u00fc yay\u0131mlanan blog yaz\u0131s\u0131nda, s\u00f6z konusu siber sald\u0131r\u0131 kampanyas\u0131n\u0131 y\u00fcr\u00fcten korsanlar\u0131n Redact, Pink, Falcon ve Helix gibi \u00e7e\u015fitli isimler alt\u0131nda faaliyet g\u00f6sterdi\u011fi kaydedildi.<\/p>\n
\u00a0<\/p>\n
\u015eirketin yay\u0131mlad\u0131\u011f\u0131 raporda, adlar\u0131 a\u00e7\u0131klanmayan baz\u0131 kurumlar\u0131n siber korsanlara fidye \u00f6demek zorunda kald\u0131\u011f\u0131 aktar\u0131ld\u0131. Ancak korsanlar\u0131n hangi \u015firketlerin sistemlerine eri\u015fmeyi ba\u015fard\u0131\u011f\u0131 hen\u00fcz netle\u015fmedi.<\/p>\n
\u00a0<\/p>\n
Uzmanlar, geli\u015fmi\u015f g\u00fcvenlik yaz\u0131l\u0131mlar\u0131na ve yapay zeka destekli tehditlere ra\u011fmen korsanlar\u0131n telefon aramas\u0131 gibi d\u00fc\u015f\u00fck teknolojili y\u00f6ntemlerle finans sekt\u00f6r\u00fcn\u00fc hedef almas\u0131n\u0131n, geleneksel taktiklerin h\u00e2len en etkili ara\u00e7lar aras\u0131nda yer ald\u0131\u011f\u0131n\u0131 g\u00f6sterdi\u011fini vurguluyor.<\/p>\n
\u00a0<\/p>\n
Sald\u0131r\u0131lar\u0131n ba\u015far\u0131ya ula\u015fmas\u0131 halinde, \u015firketlere sermaye sa\u011flayan ABD’nin en b\u00fcy\u00fck \u00f6zel sermaye fonlar\u0131na ait kritik verilerin s\u0131zmas\u0131 ihtimali bulunuyor.<\/p>\n
\u00a0<\/p>\n
Retail and Hospitality ISAC b\u00fcnyesinde siber tehdit istihbarat\u0131 \u00fcr\u00fcn y\u00f6neticisi olarak g\u00f6rev yapan Lee Clark, konuya ili\u015fkin de\u011ferlendirmesinde, “\u00c7evredeki \u00e7itler art\u0131k \u00e7ok geli\u015fmi\u015f ve y\u00fcksek teknolojiye sahip oldu\u011fu i\u00e7in g\u00fcvenlik g\u00f6revlisini kap\u0131y\u0131 bize a\u00e7mas\u0131 y\u00f6n\u00fcnde kand\u0131rmam\u0131z yetiyor” ifadesini kulland\u0131.<\/p>\n
\u00a0<\/p>\n
Clark, bu y\u00f6ntemlerin h\u0131zla yay\u0131lmas\u0131n\u0131n temel nedeninin insan unsuru oldu\u011funu kaydetti.<\/p>\n
KORSANLAR HEDEFLER\u0130N\u0130 DE\u011e\u0130\u015eT\u0130RD\u0130<\/span><\/p>\n Alphabet \u00e7at\u0131s\u0131 alt\u0131nda faaliyet g\u00f6steren Google, blog yaz\u0131s\u0131nda siber korsanlar\u0131n son d\u00f6nemde odak noktalar\u0131n\u0131 \u00f6zel sermaye \u015firketlerine, hukuk b\u00fcrolar\u0131na ve finansal derecelendirme kurulu\u015flar\u0131na \u00e7evirdi\u011fini duyurdu.<\/p>\n \u00a0<\/p>\n Google Tehdit \u0130stihbarat Grubu K\u0131demli Tehdit Analisti Austin Larsen, korsanlar\u0131n genellikle finansal getirileri y\u00fcksek sekt\u00f6rleri hedef ald\u0131\u011f\u0131n\u0131 ve bu giri\u015fimlerinde \u00e7o\u011fu zaman ba\u015far\u0131l\u0131 olduklar\u0131n\u0131 s\u00f6yledi.<\/p>\n \u00a0<\/p>\n Larsen, “Mesele tamamen maddi \u00e7\u0131karla ilgili. Bu \u015firketlerin elinde, \u00e7al\u0131nd\u0131\u011f\u0131 takdirde s\u0131zd\u0131r\u0131lmas\u0131n\u0131 \u00f6nlemek i\u00e7in fidye \u00f6demeyi kabul edecekleri hassasiyette veriler bulundu\u011funu d\u00fc\u015f\u00fcn\u00fcyorlar” dedi.<\/p>\n \u00a0<\/p>\n Google raporunda hedef al\u0131nan \u015firketlerin adlar\u0131na yer vermedi.\u00a0<\/p>\n \u00a0<\/p>\n Reuters ise raporda listelenen 72 zararl\u0131 internet sitesini DomainTools ve urlscan gibi a\u011f istihbarat platformlar\u0131 \u00fczerinden analiz ederek her bir kuruma \u00f6zel olarak haz\u0131rlanan alt alan adlar\u0131n\u0131 ortaya \u00e7\u0131kard\u0131.<\/p>\n \u00a0<\/p>\n S\u00f6z konusu alt alan adlar\u0131na de\u011finen Larsen, hepsinin muhtemelen s\u0131zma giri\u015fimlerinde kullan\u0131ld\u0131\u011f\u0131n\u0131 belirtti ancak “Tamam\u0131 ba\u015far\u0131ya ula\u015fmad\u0131” diyerek ihtiyat uyar\u0131s\u0131nda bulundu.<\/p>\n \u00a0<\/p>\n Google’a g\u00f6re korsanlar titizlikle kurgulanm\u0131\u015f sosyal m\u00fchendislik y\u00f6ntemlerine ba\u015fvurdu. \u015eirketlerin bilgi i\u015flem destek ekibinden arad\u0131klar\u0131n\u0131 belirterek \u00e7al\u0131\u015fanlara ki\u015fisel cep telefonlar\u0131ndan ula\u015fan korsanlar, baz\u0131 durumlarda arayan numara k\u0131sm\u0131nda kurumun ger\u00e7ek destek hatt\u0131 numaras\u0131n\u0131 g\u00f6sterdi.<\/p>\n \u00a0<\/p>\n \u00c7al\u0131\u015fanlara sistem \u015fifrelerini veya \u00e7ok fakt\u00f6rl\u00fc kimlik do\u011frulama kodlar\u0131n\u0131 acilen g\u00fcncellemeleri gerekti\u011fi y\u00f6n\u00fcnde sahte talimatlar verildi.<\/p>\n \u00a0<\/p>\n Ard\u0131ndan personel “passkeyhelpdesk” veya “secure-passkey” gibi ifadeler i\u00e7eren tuzak internet sitelerine y\u00f6nlendirildi.<\/p>\n \u00a0<\/p>\n Bir \u00e7al\u0131\u015fan \u015fifresini girdi\u011finde, korsanlar k\u0131sa mesajla gelen veya uygulama \u00fczerinden \u00fcretilen g\u00fcvenlik kodunu telefon g\u00f6r\u00fc\u015fmesi esnas\u0131nda canl\u0131 olarak ele ge\u00e7irdi ve arama sonlanmadan hesab\u0131 ele ge\u00e7irdi.<\/p>\n \u00a0<\/p>\n Bu takti\u011fin son derece geli\u015fmi\u015f olarak nitelendirilmesinin yanl\u0131\u015f olaca\u011f\u0131n\u0131 vurgulayan Larsen, “Geli\u015fmi\u015f do\u011fru kelime de\u011fil, sadece ger\u00e7ekten \u00e7ok etkili” de\u011ferlendirmesini yapt\u0131.<\/p>\n SALDIRGANLARIN KOD ADLARI S\u00dcREKL\u0130 DE\u011e\u0130\u015e\u0130YOR<\/span><\/p>\n Siber korsan gruplar\u0131na do\u011frudan ula\u015f\u0131lamad\u0131.\u00a0<\/p>\n \u00a0<\/p>\n Bir d\u00f6nem Blackfile ad\u0131n\u0131 kullanan Redact grubu, karanl\u0131k a\u011fdaki internet sitesinde korsanlar\u0131n “siyasi veya ahlaki motivasyonlarla hareket etmedi\u011fini” ve “\u015fu a\u015famada bas\u0131n\u0131n sorular\u0131n\u0131 yan\u0131tlamad\u0131klar\u0131n\u0131” ilan etti.<\/p>\n \u00a0<\/p>\n Larsen, korsanlar\u0131n tam olarak kimler oldu\u011funun veya aralar\u0131ndaki ili\u015fkinin niteli\u011finin hen\u00fcz belirsizli\u011fini korudu\u011funu s\u00f6yledi.<\/p>\n \u00a0<\/p>\n Farkl\u0131 isimler alt\u0131nda hareket etmelerine ra\u011fmen gruplar\u0131n ortak bir altyap\u0131 \u00fczerinden birbirine ba\u011fl\u0131 g\u00f6r\u00fcnd\u00fc\u011f\u00fcn\u00fc aktaran Larsen, “Burada h\u00e2len bilinmeyen baz\u0131 unsurlar var” diye konu\u015ftu.<\/p>\n \u00a0<\/p>\n Bir k\u0131sm\u0131 daha \u00f6nce Bloomberg taraf\u0131ndan duyurulan siber sald\u0131r\u0131 giri\u015fimleri Wall Street d\u00fcnyas\u0131nda hareketlili\u011fe yol a\u00e7t\u0131.<\/p>\n \u00a0<\/p>\n Reuters’a konu\u015fan bir kayna\u011f\u0131n aktard\u0131\u011f\u0131na g\u00f6re Point72 Asset Management, \u00e7ar\u015famba g\u00fcn\u00fc yat\u0131r\u0131mc\u0131lar\u0131na siber korsanlar\u0131n hedefi oldu\u011funu bildirdi.<\/p>\n \u00a0<\/p>\n Ayn\u0131 kaynak ve s\u00fcre\u00e7 hakk\u0131nda bilgi sahibi ikinci bir ki\u015fi, korsanlar\u0131n Two Sigma Investments ve Citadel dahil di\u011fer baz\u0131 serbest yat\u0131r\u0131m fonlar\u0131n\u0131n sistemlerine de s\u0131zmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 kaydetti.<\/p>\n \u00a0<\/p>\n Google’\u0131n raporu ve verilere g\u00f6re siber su\u00e7lular, finans kurumlar\u0131na y\u00f6nelmeden \u00f6nce \u00e7ok say\u0131da farkl\u0131 sekt\u00f6r\u00fc hedef ald\u0131.<\/p>\n \u00a0<\/p>\n Kay\u0131tlar, korsanlar\u0131n yaln\u0131zca son be\u015f hafta i\u00e7inde ara\u00e7 \u00e7a\u011f\u0131rma platformu Uber, \u00e7evrimi\u00e7i gayrimenkul \u015firketi Zillow, giyim markas\u0131 Levi Strauss ile Paul Hastings ve Greenberg Traurig’in de aralar\u0131nda bulundu\u011fu birka\u00e7 hukuk firmas\u0131 dahil 200’den fazla \u015firket i\u00e7in dijital tuzaklar kurdu\u011funu g\u00f6steriyor.<\/p>\n \u00a0<\/p>\n Greenberg Traurig firmas\u0131ndan yap\u0131lan yaz\u0131l\u0131 a\u00e7\u0131klamada ise “M\u00fc\u015fteri verilerini ve firmay\u0131 korumak ad\u0131na uygulad\u0131\u011f\u0131m\u0131z \u00e7ok katmanl\u0131 g\u00fcvenlik protokolleri sayesinde bir veri ihlali ya\u015fanmam\u0131\u015ft\u0131r” ifadesine yer verildi.<\/p>","protected":false},"excerpt":{"rendered":" Google ve internet istihbarat verilerine g\u00f6re fidye arayan siber korsanlar, son bir ayda ABD’li \u00f6nde gelen \u00e7ok say\u0131da finans kurulu\u015funu ve \u015firketi hedef ald\u0131. Korsanlar\u0131n telefon aramalar\u0131 \u00fczerinden \u00e7al\u0131\u015fanlar\u0131n parolalar\u0131n\u0131 \u00e7almak amac\u0131yla Blackstone, KKR ve Apollo gibi dev \u015firketlerin ad\u0131na 72 sahte internet sitesi kurdu\u011fu belirlendi. Google verilerine ve Reuters taraf\u0131ndan incelenen internet istihbarat kay\u0131tlar\u0131na …<\/p>","protected":false},"author":1,"featured_media":10693,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pagelayer_contact_templates":[],"_pagelayer_content":"","footnotes":""},"categories":[21],"tags":[],"class_list":["post-10692","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji"],"yoast_head":"\n