{"id":14738,"date":"2026-08-05T19:34:49","date_gmt":"2026-08-05T16:34:49","guid":{"rendered":"https:\/\/www.kaspersky.com.tr\/blog\/?p=14738"},"modified":"2026-08-05T19:34:49","modified_gmt":"2026-08-05T16:34:49","slug":"manufacturing-phishing-2026","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.tr\/blog\/manufacturing-phishing-2026\/14738\/","title":{"rendered":"\u00dcretim \u015firketlerine y\u00f6nelik hedefli kimlik av\u0131 sald\u0131r\u0131lar\u0131"},"content":{"rendered":"<p>Siber su\u00e7lular\u0131n \u00fcretim \u015firketlerine sald\u0131rmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131 yeni bir hedefli kimlik av\u0131 sald\u0131r\u0131 kampanyas\u0131 tespit ettik. Bu sald\u0131r\u0131, \u00e7ok a\u015famal\u0131 bir yakla\u015f\u0131m kullan\u0131yor. Sald\u0131rganlar, kimlik av\u0131 ba\u011flant\u0131s\u0131n\u0131 do\u011frudan g\u00f6ndermeden \u00f6nce, kurban\u0131n gard\u0131n\u0131 d\u00fc\u015f\u00fcrmek amac\u0131yla onunla yaz\u0131\u015fmaya ba\u015fl\u0131yorlar. G\u00f6r\u00fcn\u00fc\u015fe g\u00f6re e-posta metinleri b\u00fcy\u00fck dil modelleri kullan\u0131larak olu\u015fturulmu\u015f. Bu yaz\u0131 yaz\u0131ld\u0131\u011f\u0131 s\u0131rada sald\u0131r\u0131 h\u00e2l\u00e2 devam ediyordu; bu nedenle tetikte olman\u0131z\u0131 tavsiye ederiz!<\/p>\n<h2>Kimlik Av\u0131 Doland\u0131r\u0131c\u0131l\u0131\u011f\u0131<\/h2>\n<p>Sald\u0131rganlar, potansiyel m\u00fc\u015fterilermi\u015f gibi davranmaya \u00e7al\u0131\u015f\u0131yor. E-postalar, \u00fccretsiz e-posta hizmetlerinde kay\u0131tl\u0131 adreslerden geliyor. Bu hizmetlerin bilinen k\u00f6t\u00fc bir itibar\u0131 yok ve genellikle, \u00f6zellikle k\u00fc\u00e7\u00fck \u015firketler taraf\u0131ndan i\u015f yaz\u0131\u015fmalar\u0131 i\u00e7in kullan\u0131l\u0131yor. Kurban\u0131n ana dili ne olursa olsun (Rusya, \u00c7ek Cumhuriyeti, Malezya ve M\u0131s\u0131r\u2019daki \u015firketleri hedef alan sald\u0131r\u0131lar g\u00f6rd\u00fck), sald\u0131rganlar\u0131n e-postalar\u0131 her zaman \u0130ngilizce yaz\u0131lm\u0131\u015f oluyor.<\/p>\n<p>\u0130lk e-postada sald\u0131rganlar, ger\u00e7ek \u00fcr\u00fcn adlar\u0131n\u0131 \u00f6rnek g\u00f6stererek sunulan \u00fcr\u00fcnlerle ilgili sorular soruyorlar. Bu durum, sald\u0131r\u0131lar i\u00e7in kapsaml\u0131 bir haz\u0131rl\u0131k yap\u0131ld\u0131\u011f\u0131n\u0131 g\u00f6steriyor. Sald\u0131rganlar, benzer profillere sahip \u00fcretim \u015firketlerine ayn\u0131 e-postalar\u0131 g\u00f6ndermiyor; bunun yerine, her bir kurban hakk\u0131nda \u00e7evrimi\u00e7i ortamda kamuya a\u00e7\u0131k bilgileri titizlikle ara\u015ft\u0131r\u0131yor. \u0130lk e-postaya bir yan\u0131t gelirse, sald\u0131rganlar yaz\u0131\u015fmaya devam ediyor. Bazen as\u0131l hedeflerine, yani kurumsal e-posta hesaplar\u0131ndan kimlik bilgilerini ele ge\u00e7irmeye do\u011frudan ge\u00e7meden \u00f6nce, dikkatleri ba\u015fka y\u00f6ne \u00e7ekmek amac\u0131yla baz\u0131 ayr\u0131nt\u0131lar\u0131 a\u00e7\u0131kl\u0131\u011fa kavu\u015fturduklar\u0131 veya ek sorular sorduklar\u0131 birka\u00e7 mesaj al\u0131\u015fveri\u015finde bulunuyorlar. Ancak \u00e7o\u011fu zaman, kimlik av\u0131 ba\u011flant\u0131s\u0131n\u0131 daha ikinci e-postada g\u00f6nderiyorlar.<\/p>\n<p>Sald\u0131rganlar, ilgilendiklerini iddia ettikleri bir \u00fcr\u00fcn\u00fcn ayr\u0131nt\u0131l\u0131 teknik \u00f6zelliklerini g\u00f6nderiyor, \u00fcr\u00fcn\u00fcn bir tasla\u011fa g\u00f6re oyulup oyulamayaca\u011f\u0131n\u0131 soruyor ya da ba\u015fka bir bahane uydurarak kurban\u0131n kendilerinin g\u00f6nderdi\u011fi dosyay\u0131 a\u00e7mas\u0131n\u0131 sa\u011flamaya \u00e7al\u0131\u015f\u0131yor.<\/p>\n<div id=\"attachment_14739\" style=\"width: 1585px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2026\/08\/05192836\/manufacturing-phishing-2026-letter.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-14739\" class=\"wp-image-14739 size-full\" title=\"Bir kimlik av\u0131 ba\u011flant\u0131s\u0131yla biten bir e-posta zinciri\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2026\/08\/05192836\/manufacturing-phishing-2026-letter.jpg\" alt=\"Bir kimlik av\u0131 ba\u011flant\u0131s\u0131yla biten bir e-posta zinciri\" width=\"1575\" height=\"893\"><\/a><p id=\"caption-attachment-14739\" class=\"wp-caption-text\">Bir kimlik av\u0131 ba\u011flant\u0131s\u0131yla biten bir e-posta zinciri<\/p><\/div>\n<h2>Kimlik av\u0131 web sitesi<\/h2>\n<p>Asl\u0131nda, ortada hi\u00e7 dosya yok. Kurban ba\u011flant\u0131ya t\u0131klad\u0131\u011f\u0131nda a\u00e7\u0131lan kimlik av\u0131 sitesi, PDF belgeleriyle \u00e7al\u0131\u015fmak i\u00e7in kullan\u0131lan pop\u00fcler bir bulut hizmetini taklit ediyor. \u201c\u0130ndir\u201d d\u00fc\u011fmesi, kurban\u0131n gizli dosyaya eri\u015fmek i\u00e7in i\u015f e-posta adresini ve parolay\u0131 girmesinin istendi\u011fi bir oturum a\u00e7ma formuna y\u00f6nlendiriyor. Elbette, bu \u201cg\u00fcvenlik amac\u0131yla\u201d yap\u0131lmakta. Hedef \u015firketteki bir \u00e7al\u0131\u015fan, tamamen alakas\u0131z ve ger\u00e7ekli\u011fini do\u011frulama imkan\u0131 olmad\u0131\u011f\u0131 a\u00e7\u0131k olan bir web sitesine kurumsal giri\u015f bilgilerini neden girdi\u011fini sorgulamazsa, e-posta adresi ve ili\u015fkili parolas\u0131 sald\u0131rganlar\u0131n sunucusuna g\u00f6nderiliyor.<\/p>\n<h2>Nas\u0131l g\u00fcvende kal\u0131nabilir?<\/h2>\n<p>G\u00fcn\u00fcm\u00fcz\u00fcn kimlik av\u0131 sald\u0131r\u0131lar\u0131 giderek daha karma\u015f\u0131kla\u015f\u0131yor ve sald\u0131rganlar\u0131n yapay zeka ara\u00e7lar\u0131n\u0131 kullanmas\u0131 sayesinde daha da inand\u0131r\u0131c\u0131 hale geliyor. Bu nedenle, her \u015feyden \u00f6nce, \u00e7al\u0131\u015fanlar\u0131n G\u00fcvenlik Fark\u0131ndal\u0131\u011f\u0131n\u0131 <a href=\"https:\/\/k-asap.com\/tr\/?icid=tr_kdailyplacehold_acq_ona_smm__onl_b2b_kasperskydaily_wpplaceholder_______&amp;utm_source=kdaily&amp;utm_medium=blog&amp;utm_campaign=tr_wpplaceholder_nv0092&amp;utm_content=link&amp;utm_term=tr_kdaily_organic_avmwswubv8qh92b\" target=\"_blank\" rel=\"noopener\">d\u00fczenli aral\u0131klarla art\u0131rmay\u0131 her zaman tavsiye ediyoruz<\/a>. Ayr\u0131ca, bu bilgileri m\u00fcmk\u00fcn oldu\u011funca az s\u0131kl\u0131kta uygulamaya koymak zorunda kalmalar\u0131n\u0131 sa\u011flamak i\u00e7in, e-posta a\u011f ge\u00e7idi d\u00fczeyinde bir g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fcn\u00fcn devreye al\u0131nmas\u0131 da kritik bir ad\u0131md\u0131r. \u00d6zellikle, <a href=\"https:\/\/www.kaspersky.com.tr\/small-to-medium-business-security\/mail-security-appliance?icid=tr_kdailyplacehold_acq_ona_smm__onl_b2b_kasperskydaily_wpplaceholder_______\" target=\"_blank\" rel=\"noopener\">Kaspersky Secure Mail Gateway<\/a> \u00fcr\u00fcn\u00fcm\u00fcz, sald\u0131rganlar as\u0131l kimlik av\u0131 giri\u015fimine ge\u00e7meden \u00f6nce bile bu kimlik av\u0131 sald\u0131r\u0131s\u0131n\u0131 tespit eder.<\/p>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"kesb-trial-leadgen\"><input type=\"hidden\" class=\"placeholder_for_banner\" data-cat_id=\"kesb-trial-leadgen\" value=\"10539\">\n","protected":false},"excerpt":{"rendered":"<p>Bir kimlik av\u0131 sald\u0131r\u0131s\u0131 ba\u015flatmadan \u00f6nce, sald\u0131rganlar kurbanla ileti\u015fime ge\u00e7erler.<\/p>\n","protected":false},"author":2598,"featured_media":14740,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1726,1194],"tags":[1921,1074,1424],"class_list":{"0":"post-14738","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-enterprise","8":"category-business","9":"tag-e-posta","10":"tag-kimlik-avi","11":"tag-yapay-zeka"},"hreflang":[{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/manufacturing-phishing-2026\/14738\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/manufacturing-phishing-2026\/30884\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/manufacturing-phishing-2026\/25919\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/manufacturing-phishing-2026\/30721\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/manufacturing-phishing-2026\/32341\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/manufacturing-phishing-2026\/30888\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/manufacturing-phishing-2026\/42241\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/manufacturing-phishing-2026\/56097\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/manufacturing-phishing-2026\/24160\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/manufacturing-phishing-2026\/33756\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/manufacturing-phishing-2026\/30833\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/manufacturing-phishing-2026\/36387\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/manufacturing-phishing-2026\/36283\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.tr\/blog\/tag\/kimlik-avi\/","name":"kimlik av\u0131"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/14738","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/users\/2598"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=14738"}],"version-history":[{"count":3,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/14738\/revisions"}],"predecessor-version":[{"id":14742,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/14738\/revisions\/14742"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media\/14740"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=14738"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=14738"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=14738"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}