{"id":11947,"date":"2024-01-08T10:00:14","date_gmt":"2024-01-08T07:00:14","guid":{"rendered":"https:\/\/www.kaspersky.com.tr\/blog\/?p=11947"},"modified":"2024-01-08T01:06:49","modified_gmt":"2024-01-07T22:06:49","slug":"dangerous-browser-extensions-2023","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.tr\/blog\/dangerous-browser-extensions-2023\/11947\/","title":{"rendered":"Tehlikeli taray\u0131c\u0131 uzant\u0131lar\u0131"},"content":{"rendered":"<p>Bu blog sayfalar\u0131nda s\u0131k s\u0131k taray\u0131c\u0131 uzant\u0131lar\u0131n\u0131n ne kadar tehlikeli olabilece\u011fi hakk\u0131nda yaz\u0131yoruz. Bu ger\u00e7e\u011fi g\u00f6stermek i\u00e7in bir makaleyi bu konuya ay\u0131rmaya karar verdik. Bu yaz\u0131da, 2023 y\u0131l\u0131nda k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131lar\u0131 i\u00e7eren en ilgin\u00e7, ola\u011fan d\u0131\u015f\u0131, yayg\u0131n ve tehlikeli vakalara bakaca\u011f\u0131z. Ayr\u0131ca bu uzant\u0131lar\u0131n neler yapabilece\u011fini ve elbette kendinizi bunlardan nas\u0131l koruyabilece\u011finizi de tart\u0131\u015faca\u011f\u0131z.<\/p>\n<h2>Arka kap\u0131l\u0131 Roblox uzant\u0131lar\u0131<\/h2>\n<p>Konunun gidi\u015fat\u0131n\u0131 belirlemek ve tehlikeli uzant\u0131larla ilgili en b\u00fcy\u00fck endi\u015felerden birini vurgulamak i\u00e7in, ge\u00e7en y\u0131l ba\u015flayan bir hikayeyle ba\u015flayal\u0131m. Kas\u0131m 2022\u2019de, Google Chrome taray\u0131c\u0131 uzant\u0131lar\u0131 i\u00e7in resmi ma\u011faza olan Chrome Web Ma\u011fazas\u0131\u2019nda ayn\u0131 ad\u0131 ta\u015f\u0131yan iki k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131 (SearchBlox) <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/Roblox_RTC\/status\/1595236988533313536\">ke\u015ffedildi<\/a>. Bu uzant\u0131lardan biri 200.000\u2019den fazla indirme alm\u0131\u015ft\u0131.<\/p>\n<p>Uzant\u0131lar\u0131n beyan edilen amac\u0131 Roblox sunucular\u0131nda belirli bir oyuncuyu aramakt\u0131. Ancak as\u0131l ama\u00e7lar\u0131 Roblox oyuncular\u0131n\u0131n hesaplar\u0131n\u0131 ele ge\u00e7irmek ve oyun i\u00e7i varl\u0131klar\u0131n\u0131 \u00e7almakt\u0131. Bu zararl\u0131 uzant\u0131lar hakk\u0131ndaki bilgiler BleepingComputer\u2019da <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/backdoored-chrome-extension-installed-by-200-000-roblox-players\/\">yay\u0131nland\u0131ktan<\/a> sonra Chrome Web Ma\u011fazas\u0131\u2019ndan kald\u0131r\u0131ld\u0131 ve bunlar\u0131 y\u00fckleyen kullan\u0131c\u0131lar\u0131n cihazlar\u0131ndan otomatik olarak silindi.<\/p>\n<div id=\"attachment_11948\" style=\"width: 1262px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005643\/dangerous-browser-extensions-2023-01.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-11948\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005643\/dangerous-browser-extensions-2023-01.jpg\" alt=\"SearchBlox: Chrome Web Ma\u011fazas\u0131nda arka kap\u0131ya sahip k\u00f6t\u00fc ama\u00e7l\u0131 taray\u0131c\u0131 uzant\u0131lar\u0131\" width=\"1252\" height=\"630\" class=\"size-full wp-image-11948\"><\/a><p id=\"caption-attachment-11948\" class=\"wp-caption-text\">Google Chrome Web Ma\u011fazas\u0131\u2019nda yay\u0131nlanan k\u00f6t\u00fc ama\u00e7l\u0131 SearchBlox uzant\u0131lar\u0131, Roblox oyuncular\u0131n\u0131n hesaplar\u0131n\u0131 ele ge\u00e7irdi. <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/backdoored-chrome-extension-installed-by-200-000-roblox-players\/\">Kaynak<\/a><\/p><\/div>\n<p>Ancak Roblox\u2019un hikayesi burada bitmiyor. A\u011fustos 2023\u2019te Chrome Web Ma\u011fazas\u0131\u2019nda <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/devforum.roblox.com\/t\/psa-do-not-install-chrome-webstore-plugin-rotracker-which-is-being-advertised-on-the-website\/2561666\">RoFinder ve RoTracker<\/a> adl\u0131 benzer nitelikte iki k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131 daha ke\u015ffedildi. T\u0131pk\u0131 SearchBlox gibi, bu eklentiler de kullan\u0131c\u0131lara Roblox sunucular\u0131ndaki di\u011fer oyuncular\u0131 arama olana\u011f\u0131 sunuyordu, ancak ger\u00e7ekte bunlar\u0131n i\u00e7ine yerle\u015ftirilmi\u015f bir arka kap\u0131 vard\u0131. Roblox kullan\u0131c\u0131 toplulu\u011fu sonunda bu uzant\u0131lar\u0131 da ma\u011fazadan kald\u0131rtmay\u0131 ba\u015fard\u0131.<\/p>\n<div id=\"attachment_11954\" style=\"width: 1264px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005644\/dangerous-browser-extensions-2023-02.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-11954\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005644\/dangerous-browser-extensions-2023-02.png\" alt=\"RoTracker: arka kap\u0131ya sahip ba\u015fka bir k\u00f6t\u00fc ama\u00e7l\u0131 taray\u0131c\u0131 uzant\u0131s\u0131\" width=\"1254\" height=\"697\" class=\"size-full wp-image-11954\"><\/a><p id=\"caption-attachment-11954\" class=\"wp-caption-text\">RoTracker k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131s\u0131 da Google Chrome Web Ma\u011fazas\u0131\u2019nda yer al\u0131yor. <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/devforum.roblox.com\/t\/psa-do-not-install-chrome-webstore-plugin-rotracker-thing-is-being-advertised-on-the-website\/2561666\">Kaynak<\/a><\/p><\/div>\n<p>Bu durum, Google Chrome uzant\u0131lar\u0131n\u0131n indirilmesi i\u00e7in d\u00fcnyan\u0131n en resmi platformundaki denetim kalitesinin arzulanan d\u00fczeyde olmad\u0131\u011f\u0131n\u0131 ve k\u00f6t\u00fc niyetli uzant\u0131lar\u0131n yarat\u0131c\u0131lar\u0131 i\u00e7in eserlerini buraya yerle\u015ftirmenin yeterince kolay oldu\u011funu g\u00f6steriyor. Moderat\u00f6rlerin tehlikeli uzant\u0131lar\u0131 tespit etmesini ve ma\u011fazadan kald\u0131rmas\u0131n\u0131 sa\u011flamak i\u00e7in, etkilenen kullan\u0131c\u0131lar\u0131n yorumlar\u0131 genellikle yeterli de\u011fildir. \u00c7o\u011fu zaman medyan\u0131n, g\u00fcvenlik ara\u015ft\u0131rmac\u0131lar\u0131n\u0131n ve\/veya b\u00fcy\u00fck bir \u00e7evrimi\u00e7i toplulu\u011fun \u00e7abalar\u0131 gerekir.<\/p>\n<h2>Sahte ChatGPT uzant\u0131lar\u0131 Facebook hesaplar\u0131n\u0131 ele ge\u00e7iriyor<\/h2>\n<p>Mart 2023\u2019te, Google Chrome Web Ma\u011fazas\u0131nda birka\u00e7 g\u00fcn arayla <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/facebook-accounts-hijacked-by-new-malicious-chatgpt-chrome-extension\/\">iki k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131<\/a> <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/thehackernews.com\/2023\/03\/fake-chatgpt-chrome-extension-hijacking.html\">ke\u015ffedildi<\/a>, her ikisi de ChatGPT AI hizmeti etraf\u0131nda olu\u015fan heyecandan yararlan\u0131yordu. Bunlardan biri, ChatGPT\u2019nin yan\u0131tlar\u0131n\u0131n arama motoru sonu\u00e7lar\u0131na entegre edilmesini sa\u011flayan yasal \u201cChatGPT for Google\u201d uzant\u0131s\u0131n\u0131n vir\u00fcsl\u00fc bir kopyas\u0131yd\u0131.<\/p>\n<p>Vir\u00fcs bula\u015fm\u0131\u015f \u201cChatGPT for Google\u201d uzant\u0131s\u0131 14 \u015eubat 2023 tarihinde Chrome Web Ma\u011fazas\u0131na y\u00fcklendi. Yarat\u0131c\u0131lar\u0131 bir s\u00fcre bekledi ama tam bir ay sonra, 14 Mart 2023\u2019te Google Arama reklamlar\u0131n\u0131 kullanarak aktif bir \u015fekilde yaymaya ba\u015flad\u0131lar. Su\u00e7lular tehdit ke\u015ffedildi\u011finde g\u00fcnde yakla\u015f\u0131k bin yeni kullan\u0131c\u0131 \u00e7ekmeyi ba\u015farm\u0131\u015f ve sonu\u00e7 olarak 9000\u2019den fazla indirme ger\u00e7ekle\u015fmi\u015ftir.<\/p>\n<div id=\"attachment_11949\" style=\"width: 926px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005643\/dangerous-browser-extensions-2023-03.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-11949\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005643\/dangerous-browser-extensions-2023-03.jpg\" alt=\"ChatGPT for Google uzant\u0131s\u0131n\u0131n vir\u00fcsl\u00fc s\u00fcr\u00fcm\u00fc \" width=\"916\" height=\"860\" class=\"size-full wp-image-11949\"><\/a><p id=\"caption-attachment-11949\" class=\"wp-caption-text\">\u201cChatGPT for Google\u201d\u0131n vir\u00fcsl\u00fc versiyonu t\u0131pk\u0131 ger\u00e7e\u011fine benziyordu. <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/facebook-accounts-hijacked-by-new-malicious-chatgpt-chrome-extension\/\">Kaynak<\/a><\/p><\/div>\n<p>\u201cChatGPT for Google\u201d \u0131n truva at\u0131 haline getirilmi\u015f kopyas\u0131 ayn\u0131 ger\u00e7ek versiyon gibi \u00e7al\u0131\u015f\u0131yordu, ancak ilave k\u00f6t\u00fc niyetli i\u015flevlere sahipti: vir\u00fcsl\u00fc versiyon, taray\u0131c\u0131 taraf\u0131ndan saklanan Facebook oturum \u00e7erezlerini \u00e7almak i\u00e7in tasarlanm\u0131\u015f ekstra kod i\u00e7eriyordu. Sald\u0131rganlar bu dosyalar\u0131 kullanarak, vir\u00fcsl\u00fc uzant\u0131y\u0131 y\u00fckleyen kullan\u0131c\u0131lar\u0131n Facebook hesaplar\u0131n\u0131 ele ge\u00e7irmeyi ba\u015fard\u0131lar.<\/p>\n<p>Ele ge\u00e7irilen hesaplar daha sonra yasa d\u0131\u015f\u0131 ama\u00e7lar i\u00e7in kullan\u0131labilir. Ara\u015ft\u0131rmac\u0131lar \u00f6rnek olarak, ele ge\u00e7irilmesinin ard\u0131ndan I\u015e\u0130D i\u00e7eri\u011fini tan\u0131tmaya ba\u015flayan bir mobil ev \u00fcreticisine ait bir Facebook hesab\u0131ndan bahsetti.<\/p>\n<div id=\"attachment_11956\" style=\"width: 4253px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005647\/dangerous-browser-extensions-2023-04.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-11956\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005647\/dangerous-browser-extensions-2023-04.jpg\" alt=\" I\u015e\u0130D i\u00e7eri\u011fini tan\u0131tan ele ge\u00e7irilmi\u015f Facebook hesab\u0131\" width=\"4243\" height=\"4332\" class=\"size-full wp-image-11956\"><\/a><p id=\"caption-attachment-11956\" class=\"wp-caption-text\">Facebook hesab\u0131 ele ge\u00e7irildikten sonra I\u015e\u0130D i\u00e7eri\u011fini tan\u0131tmaya ba\u015flad\u0131. <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/facebook-accounts-hijacked-by-new-malicious-chatgpt-chrome-extension\/\">Kaynak<\/a><\/p><\/div>\n<p>Ba\u015fka bir vakada, doland\u0131r\u0131c\u0131lar \u201cQuick access to Chat GPT\u201d ad\u0131nda tamamen orijinal bir uzant\u0131 olu\u015fturdular. Asl\u0131nda, uzant\u0131 s\u00f6z verdi\u011fi \u015feyi yapt\u0131 ve AI hizmetinin resmi API\u2019sini kullanarak kullan\u0131c\u0131lar ve ChatGPT aras\u0131nda bir arac\u0131 g\u00f6revi g\u00f6rd\u00fc. Ancak, as\u0131l amac\u0131 yine Facebook oturum \u00e7erezlerini \u00e7almak ve uzant\u0131n\u0131n yarat\u0131c\u0131lar\u0131n\u0131n Facebook i\u015fletme hesaplar\u0131n\u0131 ele ge\u00e7irmesine imkan vermekti.<\/p>\n<div id=\"attachment_11952\" style=\"width: 1410px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005643\/dangerous-browser-extensions-2023-05.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-11952\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005643\/dangerous-browser-extensions-2023-05.jpg\" alt=\"Chat GPT k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131s\u0131na h\u0131zl\u0131 eri\u015fim \" width=\"1400\" height=\"592\" class=\"size-full wp-image-11952\"><\/a><p id=\"caption-attachment-11952\" class=\"wp-caption-text\">\u201cQuick access to Chat GPT\u201d k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131s\u0131. <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/labs.guard.io\/fakegpt-new-variant-of-fake-chatgpt-chrome-extension-stealing-facebook-ad-accounts-with-4c9996a8f282\">Kaynak<\/a><\/p><\/div>\n<p>Daha da ilginci, bu k\u00f6t\u00fc niyetli uzant\u0131y\u0131 tan\u0131tmak i\u00e7in failler Facebook reklamlar\u0131n\u0131 kulland\u0131lar ve bu reklamlar\u0131n \u00f6demesi \u2013 tahmin etti\u011finiz gibi \u2013 zaten ele ge\u00e7irdikleri i\u015fletme hesaplar\u0131 taraf\u0131ndan yap\u0131ld\u0131! Bu kurnaz plan, \u201cQuick access to Chat GPT\u201d nin yarat\u0131c\u0131lar\u0131n\u0131n g\u00fcnde birka\u00e7 bin yeni kullan\u0131c\u0131 \u00e7ekmesini sa\u011flad\u0131. Sonunda her iki k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131 da ma\u011fazadan kald\u0131r\u0131ld\u0131.<\/p>\n<h2>ChromeLoader: K\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131lar i\u00e7eren korsan i\u00e7erik<\/h2>\n<p>Genellikle, k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131lar\u0131n yarat\u0131c\u0131lar\u0131 bunlar\u0131 Google Chrome Web Ma\u011fazas\u0131\u2019na yerle\u015ftirmez ve ba\u015fka yollarla da\u011f\u0131t\u0131r. \u00d6rne\u011fin, bu y\u0131l\u0131n ba\u015flar\u0131nda ara\u015ft\u0131rmac\u0131lar, siber g\u00fcvenlik alan\u0131nda zaten iyi bilinen ChromeLoader k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131yla ilgili yeni bir k\u00f6t\u00fc ama\u00e7l\u0131 kampanyan\u0131n fark\u0131na vard\u0131lar. Bu Truva at\u0131n\u0131n \u00f6ncelikli amac\u0131 kurban\u0131n taray\u0131c\u0131s\u0131na k\u00f6t\u00fc niyetli bir uzant\u0131 y\u00fcklemektir.<\/p>\n<p>Bu uzant\u0131 da taray\u0131c\u0131da rahats\u0131z edici reklamlar g\u00f6r\u00fcnt\u00fcler ve arama sonu\u00e7lar\u0131n\u0131 sahte \u00e7ekili\u015fler, anketler, arkada\u015fl\u0131k siteleri, yeti\u015fkin oyunlar\u0131, istenmeyen yaz\u0131l\u0131mlar ve benzerlerine y\u00f6nlendiren ba\u011flant\u0131larla bozar.<\/p>\n<p>Bu y\u0131l, sald\u0131rganlar kurbanlar\u0131na ChromeLoader\u2019\u0131 y\u00fckletmek i\u00e7in yem olarak \u00e7e\u015fitli korsan i\u00e7erikler kulland\u0131lar. \u00d6rne\u011fin, <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/chromeloader-campaign-lures-with-malicious-vhds-for-popular-games\/\">\u015eubat 2023<\/a>\u2018te ara\u015ft\u0131rmac\u0131lar ChromeLoader\u2019\u0131n hacklenmi\u015f oyunlar veya oyun k\u0131r\u0131lm\u0131\u015f versiyonlar\u0131 olarak gizlenmi\u015f <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/en.wikipedia.org\/wiki\/VHD_(file_format)\">VHD dosyalar\u0131<\/a> (bir disk imaj format\u0131) arac\u0131l\u0131\u011f\u0131yla yay\u0131ld\u0131\u011f\u0131n\u0131 bildirmi\u015ftir. Da\u011f\u0131t\u0131mc\u0131lar\u0131n kulland\u0131\u011f\u0131 oyunlar aras\u0131nda Elden Ring, ROBLOX, Dark Souls 3, Red Dead Redemption 2, Need for Speed, Call of Duty, Portal 2, Minecraft, Legend of Zelda, Pokemon, Mario Kart, Animal Crossing ve daha fazlas\u0131 yer al\u0131yordu. Tahmin edebilece\u011finiz gibi, t\u00fcm bu VHD dosyalar\u0131 k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131 y\u00fckleyiciyi i\u00e7eriyordu.<\/p>\n<p>Birka\u00e7 ay sonra, <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/new-shampoo-chromeloader-malware-pushed-via-fake-warez-sites\/\">Haziran 2023<\/a>\u2018te, ba\u015fka bir grup ara\u015ft\u0131rmac\u0131 yine ayn\u0131 ChromeLoader\u2019\u0131n aktiviteleri hakk\u0131nda ayr\u0131nt\u0131l\u0131 bir rapor yay\u0131nlad\u0131 ve korsan m\u00fczik, film ve bir kez daha bilgisayar oyunlar\u0131 sunan bir site a\u011f\u0131 arac\u0131l\u0131\u011f\u0131yla nas\u0131l yay\u0131ld\u0131\u011f\u0131n\u0131 ayr\u0131nt\u0131lar\u0131yla ortaya koydu. Bu kampanyada, orijinal i\u00e7erik yerine, kurbanlar\u0131n bilgisayarlar\u0131na <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/tr.wikipedia.org\/wiki\/VBScript\">VBScript<\/a> dosyalar\u0131 indirilmi\u015f ve bu dosyalar daha sonra k\u00f6t\u00fc ama\u00e7l\u0131 taray\u0131c\u0131 uzant\u0131s\u0131n\u0131 y\u00fckleyip kurmu\u015ftur.<\/p>\n<div id=\"attachment_11950\" style=\"width: 2020px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005645\/dangerous-browser-extensions-2023-06.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-11950\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005645\/dangerous-browser-extensions-2023-06.jpg\" alt=\" ChromeLoader k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131, k\u00f6t\u00fc ama\u00e7l\u0131 bir taray\u0131c\u0131 uzant\u0131s\u0131 y\u00fckl\u00fcyor\" width=\"2010\" height=\"1276\" class=\"size-full wp-image-11950\"><\/a><p id=\"caption-attachment-11950\" class=\"wp-caption-text\">Korsan i\u00e7erik sunma kisvesi alt\u0131nda ChromeLoader k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131n\u0131 da\u011f\u0131tan sitelerden biri. <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/new-shampoo-chromeloader-malware-pushed-via-fake-warez-sites\/\">Kaynak<\/a><\/p><\/div>\n<p>De\u011fi\u015ftirilen arama sonu\u00e7lar\u0131n\u0131n kurbanlar\u0131 taray\u0131c\u0131lar\u0131ndaki tehlikeli uzant\u0131n\u0131n varl\u0131\u011f\u0131 konusunda h\u0131zl\u0131 bir \u015fekilde uyarmas\u0131na ra\u011fmen, bundan kurtulmak o kadar kolay de\u011fil. ChromeLoader yaln\u0131zca k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131y\u0131 y\u00fcklemekle kalmaz, ayn\u0131 zamanda sisteme, sistem her yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda uzant\u0131y\u0131 yeniden y\u00fckleyen komut dosyalar\u0131 ve Windows G\u00f6rev Zamanlay\u0131c\u0131 g\u00f6revleri de ekliyor.<\/p>\n<h2>Bilgisayar korsanlar\u0131 bir casus uzant\u0131s\u0131 kullanarak Gmail yaz\u0131\u015fmalar\u0131n\u0131 okuyor<\/h2>\n<p>Mart 2023\u2019te Alman Federal Anayasay\u0131 Koruma Dairesi ve G\u00fcney Kore Ulusal \u0130stihbarat Te\u015fkilat\u0131, <a target=\"_blank\" href=\"https:\/\/securelist.com\/the-kimsuky-operation-a-north-korean-apt\/57915\/\" rel=\"noopener\">Kimsuky<\/a> siber su\u00e7 grubunun faaliyetleri hakk\u0131nda ortak bir rapor <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.verfassungsschutz.de\/SharedDocs\/publikationen\/EN\/prevention\/2023-03-20-joint-cyber-security-advisory-korean.html\">yay\u0131nlad\u0131<\/a>. Bu grup, kurbanlar\u0131n\u0131n Gmail yaz\u0131\u015fmalar\u0131n\u0131 okumak i\u00e7in Chromium tabanl\u0131 taray\u0131c\u0131lar (Google Chrome, Microsoft Edge ve G\u00fcney Kore taray\u0131c\u0131s\u0131 Naver Whale) i\u00e7in vir\u00fcsl\u00fc bir uzant\u0131 kullanmaktad\u0131r.<\/p>\n<p>Sald\u0131r\u0131, faillerin belirli ki\u015filere e-posta g\u00f6ndermesiyle ba\u015flar. E-posta, ma\u011fduru uzant\u0131y\u0131 y\u00fcklemeye ikna eden baz\u0131 metinlerle birlikte AF adl\u0131 k\u00f6t\u00fc ama\u00e7l\u0131 bir uzant\u0131n\u0131n ba\u011flant\u0131s\u0131na yer veriyor. Uzant\u0131, ma\u011fdur y\u00fcklendi\u011fi taray\u0131c\u0131da Gmail\u2019i a\u00e7t\u0131\u011f\u0131nda \u00e7al\u0131\u015fmaya ba\u015flar. AF daha sonra ma\u011fdurun yaz\u0131\u015fmalar\u0131n\u0131 otomatik olarak bilgisayar korsanlar\u0131n\u0131n C2 sunucusuna g\u00f6nderir.<\/p>\n<p>B\u00f6ylece Kimsuky, ma\u011fdurun posta kutusunun i\u00e7eri\u011fine eri\u015fmeyi ba\u015far\u0131r. Dahas\u0131, bu posta kutusuna girmek i\u00e7in herhangi bir hileye ba\u015fvurmalar\u0131 gerekmez; sadece iki fakt\u00f6rl\u00fc kimlik do\u011frulamay\u0131 atlamalar\u0131 yeterlidir. Ayr\u0131ca bu y\u00f6ntem, her \u015feyi son derece gizli bir \u015fekilde yapar. Bilhassa Google\u2019\u0131n, parolan\u0131n \u00e7al\u0131nmas\u0131 durumunda olabilece\u011fi gibi, yeni bir cihazdan veya \u015f\u00fcpheli bir konumdan hesaba eri\u015fim konusunda kurbana uyar\u0131 g\u00f6ndermesini \u00f6nler.<\/p>\n<h2>Rilide: kripto para \u00e7alan ve iki fakt\u00f6rl\u00fc kimlik do\u011frulamay\u0131 atlayan k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131<\/h2>\n<p>Su\u00e7lular ayr\u0131ca kripto para c\u00fczdanlar\u0131n\u0131 hedef almak i\u00e7in genellikle k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131lar kullanmaktad\u0131r. \u00d6zellikle, ilk olarak <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/hackers-use-rilide-browser-extension-to-bypass-2fa-steal-crypto\/\">Nisan 2023<\/a>\u2018te ke\u015ffedilen Rilide uzant\u0131s\u0131n\u0131n yarat\u0131c\u0131lar\u0131, uzant\u0131y\u0131 kullan\u0131c\u0131lar\u0131n kripto para birimiyle ilgili taray\u0131c\u0131 etkinliklerini izlemek i\u00e7in kullan\u0131yor. Ma\u011fdur belirli bir listedeki siteleri ziyaret etti\u011finde, k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131 kripto para c\u00fczdan\u0131 bilgilerini, e-posta giri\u015flerini ve parolalar\u0131 \u00e7alar.<\/p>\n<p>Ayr\u0131ca, bu uzant\u0131 taray\u0131c\u0131 ge\u00e7mi\u015fini toplayarak C2 sunucusuna g\u00f6nderir ve sald\u0131rganlar\u0131n ekran g\u00f6r\u00fcnt\u00fcs\u00fc almas\u0131n\u0131 sa\u011flar. Ancak Rilide\u2019\u0131n en ilgin\u00e7 \u00f6zelli\u011fi iki fakt\u00f6rl\u00fc kimlik do\u011frulamay\u0131 atlayabilmesi.<\/p>\n<p>Uzant\u0131, bir kullan\u0131c\u0131n\u0131n \u00e7evrimi\u00e7i hizmetlerden birinde bir kripto para birimi i\u015flemi yapmak \u00fczere oldu\u011funu tespit etti\u011finde, sayfaya onay kodu giri\u015f ileti\u015fim kutusunun yerini alan bir komut dosyas\u0131 yerle\u015ftirir ve ard\u0131ndan bu kodu \u00e7alar. \u00d6deme al\u0131c\u0131s\u0131n\u0131n c\u00fczdan\u0131 sald\u0131rganlara ait bir c\u00fczdanla de\u011fi\u015ftirilir ve son olarak uzant\u0131 \u00e7al\u0131nan kodu kullanarak i\u015flemi onaylar.<\/p>\n<div id=\"attachment_11955\" style=\"width: 1168px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005644\/dangerous-browser-extensions-2023-07.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-11955\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005644\/dangerous-browser-extensions-2023-07.jpg\" alt=\"Rilide'\u0131n blockchain oyunu maskesi alt\u0131nda tan\u0131t\u0131m\u0131 \" width=\"1158\" height=\"935\" class=\"size-full wp-image-11955\"><\/a><p id=\"caption-attachment-11955\" class=\"wp-caption-text\">K\u00f6t\u00fc niyetli Rilide uzant\u0131s\u0131, blok zinciri oyunlar\u0131 maskesi alt\u0131nda X\u2019te (Twitter) nas\u0131l tan\u0131t\u0131ld\u0131? <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.trustwave.com\/en-us\/resources\/blogs\/spiderlabs-blog\/new-rilide-stealer-version-targets-banking-data-and-works-around-google-chrome-manifest-v3\/\">Kaynak<\/a><\/p><\/div>\n<p>Rilide, \u015f\u00fcphe \u00e7ekmemek i\u00e7in ger\u00e7ek bir Google Drive uzant\u0131s\u0131n\u0131 taklit ederek Chrome, Edge, Brave ve Opera gibi Chromium tabanl\u0131 taray\u0131c\u0131 kullan\u0131c\u0131lar\u0131na sald\u0131r\u0131yor. Rilide karaborsada serbest\u00e7e sat\u0131l\u0131yor gibi g\u00f6r\u00fcn\u00fcyor, bu nedenle birbirleriyle ilgisi olmayan su\u00e7lular taraf\u0131ndan kullan\u0131l\u0131yor. Bu nedenle, k\u00f6t\u00fc ama\u00e7l\u0131 web siteleri ve e-postalardan X\u2019te tan\u0131t\u0131lan vir\u00fcsl\u00fc <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/en.wikipedia.org\/wiki\/Blockchain_game\">blok zinciri oyun<\/a> y\u00fckleyicilerine kadar \u00e7e\u015fitli da\u011f\u0131t\u0131m y\u00f6ntemleri ke\u015ffedilmi\u015ftir.<\/p>\n<p>\u00d6zellikle ilgi \u00e7ekici Rilide da\u011f\u0131t\u0131m y\u00f6ntemlerinden biri de <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/chrome-malware-rilide-targets-enterprise-users-via-powerpoint-guides\/\">aldat\u0131c\u0131 bir PowerPoint sunumuydu<\/a>. Bu sunum Zendesk \u00e7al\u0131\u015fanlar\u0131 i\u00e7in bir g\u00fcvenlik rehberiymi\u015f gibi g\u00f6r\u00fcnse de asl\u0131nda k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131y\u0131 y\u00fcklemek i\u00e7in haz\u0131rlanm\u0131\u015f ad\u0131m ad\u0131m bir k\u0131lavuzdu.<\/p>\n<div id=\"attachment_11953\" style=\"width: 1697px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005645\/dangerous-browser-extensions-2023-08.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-11953\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005645\/dangerous-browser-extensions-2023-08.jpg\" alt=\"Bir siber g\u00fcvenlik sunumu olarak gizlenmi\u015f Rilide kurulum k\u0131lavuzu\" width=\"1687\" height=\"949\" class=\"size-full wp-image-11953\"><\/a><p id=\"caption-attachment-11953\" class=\"wp-caption-text\">Zendesk \u00e7al\u0131\u015fanlar\u0131 i\u00e7in bir g\u00fcvenlik sunumu olarak gizlenmi\u015f k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131y\u0131 y\u00fcklemek i\u00e7in ad\u0131m ad\u0131m bir k\u0131lavuz. <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/chrome-malware-rilide-targets-enterprise-users-via-powerpoint-guides\/\">Kaynak<\/a><\/p><\/div>\n<h2>Chrome Web Ma\u011fazas\u0131\u2019nda d\u00fczinelerce k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131 bulunuyor \u2013 bunlar\u0131n toplam indirilme say\u0131s\u0131 87 milyon<\/h2>\n<p>Tabii ki ara\u015ft\u0131rmac\u0131lar\u0131n Google Chrome Web Ma\u011fazas\u0131\u2019nda topluca 87 milyondan fazla indirilen <a target=\"_blank\" href=\"https:\/\/www.kaspersky.com.tr\/blog\/dangerous-chrome-extensions-87-million\/11622\/\" rel=\"noopener\">birka\u00e7 d\u00fczine k\u00f6t\u00fc niyetli uzant\u0131<\/a> ke\u015ffettikleri yaz hikayesini de unutmamak gerekir. Bunlar, PDF dosyalar\u0131n\u0131 d\u00f6n\u00fc\u015ft\u00fcrme ara\u00e7lar\u0131ndan reklam engelleyicilere, \u00e7eviri ara\u00e7lar\u0131ndan VPN\u2019lere kadar \u00e7e\u015fitli taray\u0131c\u0131 eklentileriydi.<\/p>\n<p>Uzant\u0131lar Chrome Web Ma\u011fazas\u0131\u2019na 2022 ve 2021 y\u0131llar\u0131nda eklenmi\u015fti, yani ke\u015ffedildiklerinde zaten birka\u00e7 ay, bir y\u0131l veya daha uzun s\u00fcredir oradayd\u0131lar. Uzant\u0131larla ilgili incelemeler aras\u0131nda, dikkatli kullan\u0131c\u0131lardan uzant\u0131lar\u0131n arama sonu\u00e7lar\u0131n\u0131 reklamlarla de\u011fi\u015ftirdi\u011fini bildiren baz\u0131 \u015fikayetler vard\u0131. Ne yaz\u0131k ki Chrome Web Ma\u011fazas\u0131 moderat\u00f6rleri bu \u015fikayetleri g\u00f6rmezden geldi. Zararl\u0131 uzant\u0131lar ancak iki grup g\u00fcvenlik ara\u015ft\u0131rmac\u0131s\u0131n\u0131n sorunu Google\u2019\u0131n dikkatine sunmas\u0131n\u0131n ard\u0131ndan ma\u011fazadan kald\u0131r\u0131ld\u0131.<\/p>\n<div id=\"attachment_11951\" style=\"width: 1040px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005643\/dangerous-browser-extensions-2023-09.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-11951\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2024\/01\/08005643\/dangerous-browser-extensions-2023-09.jpg\" alt=\"Google Chrome Web Ma\u011fazas\u0131'nda YouTube i\u00e7in k\u00f6t\u00fc ama\u00e7l\u0131 Autoskip uzant\u0131s\u0131\" width=\"1030\" height=\"1210\" class=\"size-full wp-image-11951\"><\/a><p id=\"caption-attachment-11951\" class=\"wp-caption-text\">K\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131lar\u0131n en pop\u00fcleri olan YouTubei\u00e7in Autoskip , Google Chrome Web Store\u2019dan dokuz milyondan fazla indirilmi\u015ftir. <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/malicious-chrome-extensions-with-75m-installs-removed-from-web-store\/\"> Kaynak<\/a><\/p><\/div>\n<h2>Kendinizi k\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131lardan nas\u0131l koruyabilirsiniz?<\/h2>\n<p>G\u00f6rd\u00fc\u011f\u00fcn\u00fcz gibi, tehlikeli taray\u0131c\u0131 uzant\u0131lar\u0131, resmi Google Chrome Web Ma\u011fazas\u0131 da dahil olmak \u00fczere \u00e7e\u015fitli kaynaklardan bilgisayar\u0131n\u0131za y\u00fcklenebilir. Sald\u0131rganlar bunlar\u0131 hesaplar\u0131 ele ge\u00e7irmekten arama sonu\u00e7lar\u0131n\u0131 de\u011fi\u015ftirmeye, yaz\u0131\u015fmalar\u0131 okumaya ve kripto para \u00e7almaya kadar \u00e7ok \u00e7e\u015fitli ama\u00e7larla kullanabilir. Bu nedenle, \u00f6nlem almak \u00f6nemlidir:<\/p>\n<ul>\n<li>Gereksiz taray\u0131c\u0131 uzant\u0131lar\u0131 y\u00fcklemekten ka\u00e7\u0131n\u0131n. Taray\u0131c\u0131n\u0131zda ne kadar az uzant\u0131 varsa o kadar iyidir.<\/li>\n<li>Bir uzant\u0131 y\u00fcklerseniz, onu bilinmeyen bir web sitesinden y\u00fcklemek yerine resmi bir ma\u011fazadan y\u00fcklemek daha iyidir. Elbette bu, tehlikeli uzant\u0131larla kar\u015f\u0131la\u015fma riskini tamamen ortadan kald\u0131rm\u0131yor, ancak en az\u0131ndan Google Chrome Web Ma\u011fazas\u0131 g\u00fcvenli\u011fi \u00f6nemsiyor.<\/li>\n<li>Y\u00fcklemeden \u00f6nce bir uzant\u0131n\u0131n incelemelerini okuyun. E\u011fer bir sorun varsa, birileri bunu \u00e7oktan fark etmi\u015f ve di\u011fer kullan\u0131c\u0131lar\u0131 bilgilendirmi\u015f olabilir.<\/li>\n<li>Taray\u0131c\u0131lar\u0131n\u0131zda y\u00fckl\u00fc uzant\u0131lar\u0131n listesini d\u00fczenli olarak g\u00f6zden ge\u00e7irin. Kullanmad\u0131klar\u0131n\u0131z\u0131 kald\u0131r\u0131n, \u00f6zellikle de y\u00fckledi\u011finizi hat\u0131rlamad\u0131\u011f\u0131n\u0131z uzant\u0131lar\u0131.<\/li>\n<li>Ve t\u00fcm cihazlar\u0131n\u0131zda <a href=\"https:\/\/www.kaspersky.com.tr\/premium?icid=tr_bb2023-kdplacehd_acq_ona_smm__onl_b2c_kdaily_lnk_sm-team___kprem___\" target=\"_blank\" rel=\"noopener\">g\u00fcvenilir koruma<\/a> kulland\u0131\u011f\u0131n\u0131zdan emin olun.<\/li>\n<\/ul>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"premium-generic\">\n","protected":false},"excerpt":{"rendered":"<p>K\u00f6t\u00fc ama\u00e7l\u0131 uzant\u0131lar nas\u0131l kripto para \u00e7al\u0131yor, oyunlarda ve sosyal a\u011flarda hesaplar\u0131 ele ge\u00e7iriyor, arama sonu\u00e7lar\u0131n\u0131 manip\u00fcle ediyor ve izinsiz reklamlar g\u00f6steriyor.<\/p>\n","protected":false},"author":2726,"featured_media":11946,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1351],"tags":[16,22,744,1564,1500,1525,2431,561,1749,537,1750],"class_list":{"0":"post-11947","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-threats","8":"tag-chrome","9":"tag-google","10":"tag-guvenlik","11":"tag-hesaplar","12":"tag-kripto-para-birimleri","13":"tag-parolalar","14":"tag-reklam-yazilimlari","15":"tag-sifreler","16":"tag-tarayicilar","17":"tag-tehditler","18":"tag-uzantilar"},"hreflang":[{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/dangerous-browser-extensions-2023\/11947\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/dangerous-browser-extensions-2023\/26788\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/dangerous-browser-extensions-2023\/22202\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/dangerous-browser-extensions-2023\/11304\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/dangerous-browser-extensions-2023\/29546\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/dangerous-browser-extensions-2023\/27056\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/dangerous-browser-extensions-2023\/26928\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/dangerous-browser-extensions-2023\/29510\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/dangerous-browser-extensions-2023\/28358\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/dangerous-browser-extensions-2023\/36712\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/dangerous-browser-extensions-2023\/50059\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/dangerous-browser-extensions-2023\/21343\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/dangerous-browser-extensions-2023\/22113\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/dangerous-browser-extensions-2023\/30774\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/dangerous-browser-extensions-2023\/35451\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/dangerous-browser-extensions-2023\/27296\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/dangerous-browser-extensions-2023\/33072\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/dangerous-browser-extensions-2023\/32695\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.tr\/blog\/tag\/uzantilar\/","name":"uzant\u0131lar"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/11947","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/users\/2726"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=11947"}],"version-history":[{"count":2,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/11947\/revisions"}],"predecessor-version":[{"id":11958,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/11947\/revisions\/11958"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media\/11946"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=11947"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=11947"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=11947"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}