Bu makalede tam olarak kimlerin risk alt\u0131nda oldu\u011funu ve verilerinizi nas\u0131l koruyabilece\u011finizi a\u00e7\u0131kl\u0131yoruz.<\/p>\n
C3RB3R kimleri hedef al\u0131yor ve sald\u0131r\u0131 nas\u0131l i\u015fliyor?<\/h2>\n
K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n bir cihaza genellikle birinin \u015f\u00fcpheli bir dosya indirmesi veya sald\u0131rgan\u0131n talimatlar\u0131n\u0131 uygulamas\u0131 sonucunda bula\u015ft\u0131\u011f\u0131n\u0131 d\u00fc\u015f\u00fcnmeye al\u0131\u015fk\u0131n\u0131z. Ancak C3RB3R bula\u015fmalar\u0131n\u0131n b\u00fcy\u00fck \u00e7o\u011funlu\u011fu hi\u00e7bir kullan\u0131c\u0131 etkile\u015fimi olmadan ger\u00e7ekle\u015fiyor; sald\u0131rgan\u0131n yaln\u0131zca savunmas\u0131z bir NAS hizmetine ula\u015fmas\u0131 yeterli. \u00d6zel taray\u0131c\u0131lar muhtemelen Synology NAS sistemlerini otomatik olarak aray\u0131p DiskStation Manager (DSM) s\u00fcr\u00fcmlerini kontrol ederek bu cihazlar\u0131n bulunmas\u0131na yard\u0131mc\u0131 oluyor.<\/p>\n
Ge\u00e7en ay bir\u00e7ok Synology sahibi C3RB3R sald\u0131r\u0131lar\u0131n\u0131 bildirmeye ba\u015flad\u0131. Synology sorunu resmen do\u011frulad\u0131<\/a> ve sald\u0131rganlar\u0131n Aral\u0131k 2024\u2019te d\u00fczeltilmi\u015f bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131ndan yararland\u0131\u011f\u0131n\u0131 a\u00e7\u0131klad\u0131. A\u00e7\u0131klamaya g\u00f6re bunun CVE-2024-10441<\/a> olmas\u0131 muhtemel; bu g\u00fcvenlik a\u00e7\u0131\u011f\u0131, sald\u0131rgan\u0131n kimlik do\u011frulamas\u0131 olmadan NAS i\u015fletim sisteminde keyfi kod y\u00fcr\u00fctmesine olanak tan\u0131yor.<\/p>\n Ayn\u0131 zamanda 360.cn ara\u015ft\u0131rmac\u0131lar\u0131, inceledikleri C3RB3R sald\u0131r\u0131lar\u0131nda 9,8 puan alan iki kritik g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n daha kullan\u0131ld\u0131\u011f\u0131n\u0131 bildirdi<\/a> \u2014 bunlar CVE-2026-13639<\/a> ve CVE-2026-13684<\/a>. Bu g\u00fcvenlik a\u00e7\u0131klar\u0131 keyfi dosya okuma veya yazma ve hizmet reddi (DoS) sald\u0131r\u0131lar\u0131na olanak tan\u0131yor. Synology, bu g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n bu kampanyada kullan\u0131ld\u0131\u011f\u0131n\u0131 do\u011frulamad\u0131. \u015eirket bunlar\u0131 Eyl\u00fcl ay\u0131ndaki DSM g\u00fcncellemesinde yamalad\u0131.<\/p>\n Her iki durumda da yukar\u0131da belirtilen g\u00fcvenlik a\u00e7\u0131klar\u0131 sald\u0131rganlar\u0131n bir NAS cihaz\u0131n\u0131 uzaktan hedef almas\u0131na olanak tan\u0131yor. Sald\u0131rganlar\u0131n depolama cihaz\u0131n\u0131za eri\u015fmesi, fidye yaz\u0131l\u0131m\u0131n\u0131 cihaza yerle\u015ftirmesi ve \u00e7al\u0131\u015ft\u0131rmas\u0131 i\u00e7in yaln\u0131zca iki ko\u015fulun kar\u015f\u0131lanmas\u0131 gerekiyor:<\/p>\n Hepsi bu kadar. Sald\u0131rgan\u0131n parolan\u0131za veya sizin herhangi bir i\u015flem yapman\u0131za ihtiyac\u0131 yok. Her<\/em> Synology NAS sahibi sistemini <\/strong>zaman\u0131nda g\u00fcncellemediyse<\/strong><\/a> risk alt\u0131ndad\u0131r<\/strong>.<\/p>\n Son zamanlarda g\u00fcncellemeleri kendiniz y\u00fcklemediyseniz ve otomatik g\u00fcncellemelerin etkin olup olmad\u0131\u011f\u0131n\u0131 hat\u0131rlam\u0131yorsan\u0131z, \u00f6nce NAS\u2019\u0131n internet eri\u015fimini engellemenizi, ard\u0131ndan cihaz\u0131 m\u00fcmk\u00fcn olan en k\u0131sa s\u00fcrede manuel olarak g\u00fcncellemenizi \u00f6neriyoruz; aksi takdirde kolayca kurbanlardan biri olabilirsiniz.<\/p>\n G\u00fcncellemeler y\u00fcklenene kadar cihaz\u0131n yerel a\u011fdan gelecek sald\u0131r\u0131lara kar\u015f\u0131 savunmas\u0131z kalaca\u011f\u0131n\u0131 unutmay\u0131n. Bu nedenle Synology NAS\u2019\u0131n\u0131za LAN \u00fczerindeki ba\u015fka kullan\u0131c\u0131lar eri\u015febiliyorsa \u2014 \u00f6rne\u011fin kom\u015fular\u0131n\u0131zla payla\u015f\u0131yorsan\u0131z veya cihaz \u00fcniversite, ofis ya da yurt a\u011f\u0131na ba\u011fl\u0131ysa \u2014 en g\u00fcvenli se\u00e7enek Ethernet kablosunu \u00e7\u0131karmak ve NAS modeliniz destekliyorsa Wi-Fi\u2019\u0131 kapatmakt\u0131r. Ard\u0131ndan g\u00fcncelleme dosyalar\u0131n\u0131 bilgisayar\u0131n\u0131za indirin, bilgisayar\u0131 hem kablolu a\u011fdan hem de Wi-Fi\u2019dan ay\u0131r\u0131n, NAS\u2019\u0131 Ethernet kablosuyla do\u011frudan bilgisayara ba\u011flay\u0131n ve i\u015fletim sistemiyle uygulamalar\u0131 tamamen yal\u0131t\u0131lm\u0131\u015f bir ortamda g\u00fcncelleyin.<\/p>\n A\u011f depolama cihaz\u0131n\u0131z\u0131 g\u00fcncellemeniz i\u00e7in bir ba\u015fka neden de yak\u0131n zamanda ke\u015ffedilen PHP g\u00fcvenlik a\u00e7\u0131klar\u0131<\/a>. Synology, i\u015fletim sistemi ile Mail Station ve Synology Calendar uygulamalar\u0131 i\u00e7in acil g\u00fcncellemeleri \u00e7oktan yay\u0131mlad\u0131<\/a>.<\/p>\n C3RB3R fidye yaz\u0131l\u0131m\u0131 a\u011fa ba\u011fl\u0131 depolama cihaz\u0131na girdikten sonra kullan\u0131c\u0131 verilerinin bulundu\u011fu eri\u015filebilir t\u00fcm klas\u00f6rleri taramaya ve i\u00e7lerindeki dosyalar\u0131 \u2014 foto\u011fraflar\u0131, belgeleri, ar\u015fivleri, videolar\u0131 ve ses kay\u0131tlar\u0131n\u0131 \u2014 \u015fifrelemeye ba\u015fl\u0131yor; \u015fifrelenen dosyalara .L0CK3D<\/em> uzant\u0131s\u0131n\u0131 ekliyor. Kullan\u0131c\u0131 bu dosyalardan birini a\u00e7maya \u00e7al\u0131\u015f\u0131rsa sistem dosyan\u0131n bozuk oldu\u011funu veya bi\u00e7iminin bilinmedi\u011fini bildiriyor. Ne yaz\u0131k ki yaln\u0131zca dosyan\u0131n ad\u0131n\u0131 de\u011fi\u015ftirmek \u015fifrelemeyi kald\u0131rm\u0131yor.<\/p>\n C3RB3R \u015fifreledikten sonra dosyalar\u0131n g\u00f6r\u00fcn\u00fcm\u00fc<\/p><\/div>\n Sald\u0131rganlar, \u015fifrelenmi\u015f dosyalar\u0131n bulundu\u011fu klas\u00f6rlere verilerin depolama cihaz\u0131nda nas\u0131l \u00e7\u00f6z\u00fclece\u011fine ili\u015fkin talimatlar i\u00e7eren read-me3.txt adl\u0131 bir metin dosyas\u0131 da b\u0131rak\u0131yor. G\u00f6r\u00fcn\u00fc\u015fe g\u00f6re yapman\u0131z gereken tek \u015fey\u2026 hi\u00e7 de \u015f\u00fcpheli g\u00f6r\u00fcnmeyen Tor Browser\u2019\u0131 a\u00e7mak ve s\u00f6zde t\u00fcm dosyalar\u0131n\u0131z\u0131 geri y\u00fckleyen bir \u015fifre \u00e7\u00f6z\u00fcc\u00fc i\u00e7in sald\u0131rganlara \u00f6deme yapmak. S\u00f6ylemeye gerek yok: dosyalar\u0131n\u0131z\u0131 eksiksiz geri alaca\u011f\u0131n\u0131z\u0131n hi\u00e7bir garantisi yok.<\/p>\n C3RB3R, \u015fifrelenmi\u015f dosyalar\u0131n bulundu\u011fu her klas\u00f6re bunun gibi bir fidye notu b\u0131rak\u0131yor. Ger\u00e7ekten c\u00f6mert bir teklif: bir dosyan\u0131n \u015fifresini \u00fccretsiz \u00e7\u00f6z, geri kalan\u0131 i\u00e7in \u00f6deme yap<\/p><\/div>\n Dosyalar\u0131n\u0131z\u0131n tamam\u0131n\u0131 veya \u00e7o\u011funu kaybetmek tek k\u00f6t\u00fc sonu\u00e7 olmayabilir. Sald\u0131rganlar \u00e7o\u011fu zaman \u00e7al\u0131nan verileri \u2014 hesap kimlik bilgileri, \u00f6zel foto\u011fraflar, i\u015f belgeleri ve di\u011fer gizli bilgiler \u2014 yay\u0131mlamakla tehdit ederek kurbanlara \u015fantaj yap\u0131yor. Kurban fidyeyi \u00f6demeyi reddederse su\u00e7lular t\u00fcm bu verileri herkese a\u00e7\u0131k hale getirmekle tehdit ediyor. Bu taleplerle size e-posta veya sosyal medya \u00fczerinden ula\u015fabilirler.<\/p>\n Bu t\u00fcr tehditler \u00e7o\u011fu zaman yaln\u0131zca bir doland\u0131r\u0131c\u0131l\u0131ktan ibarettir. Bu y\u00f6ntemleri ve \u015fantaja u\u011fruyorsan\u0131z ne yapman\u0131z gerekti\u011fini Doland\u0131r\u0131c\u0131lar \u015fantaj ve gasp i\u00e7in e-postay\u0131 nas\u0131l kullan\u0131yor?<\/strong><\/a> ba\u015fl\u0131kl\u0131 yaz\u0131m\u0131zda ayr\u0131nt\u0131l\u0131 olarak ele ald\u0131k. Ancak NAS\u2019\u0131n\u0131z ger\u00e7ekten \u015fifrelendiyse ne yaz\u0131k ki veri h\u0131rs\u0131zl\u0131\u011f\u0131 ihtimalini g\u00f6z ard\u0131 edemezsiniz.<\/p>\n Fidye yaz\u0131l\u0131m\u0131 NAS\u2019\u0131n\u0131za zaten sald\u0131rd\u0131ysa iki durumdan biriyle kar\u015f\u0131 kar\u015f\u0131ya olabilirsiniz:<\/p>\n Ne yapmal\u0131s\u0131n\u0131z?<\/p>\n NAS\u2019\u0131n internetten ve ev a\u011f\u0131n\u0131z\u0131n geri kalan\u0131ndan tamamen yal\u0131t\u0131lmas\u0131 gerekir. NAS\u2019a ba\u011fl\u0131 t\u00fcm kablolar\u0131 g\u00fc\u00e7 kablosu hari\u00e7<\/strong> \u00e7\u0131kar\u0131n. NAS modeliniz yerel a\u011fa Wi-Fi \u00fczerinden ba\u011flan\u0131yorsa kablosuz ba\u011flant\u0131y\u0131 da devre d\u0131\u015f\u0131 b\u0131rak\u0131n. Bunu NAS\u2019\u0131n kendisinden yapabilirsiniz (baz\u0131 Synology modellerinde bas\u0131l\u0131 tutuldu\u011funda kablosuz a\u011f\u0131 kapatan bir Wi-Fi d\u00fc\u011fmesi bulunur) veya y\u00f6nlendiricinizin fi\u015fini \u00e7ekebilirsiniz. B\u00f6ylece sald\u0131rganlar\u0131n cihaza uzaktan eri\u015fimi kesilir ve vir\u00fcsl\u00fc NAS\u2019\u0131n di\u011fer bilgisayarlara ve depolama cihazlar\u0131na ula\u015fmas\u0131 \u00f6nlenir.<\/p>\n Depolama kapasitesini art\u0131rmak i\u00e7in NAS\u2019a harici USB s\u00fcr\u00fcc\u00fcler ba\u011fl\u0131ysa onlar\u0131 da \u00e7\u0131kar\u0131n; fidye yaz\u0131l\u0131m\u0131 hen\u00fcz bu s\u00fcr\u00fcc\u00fclere ula\u015fmam\u0131\u015f olabilir.<\/p>\n Bilgisayarlarda ve bulut hizmetlerinde NAS ile ili\u015fkili e\u015fitleme ve yedekleme g\u00f6revlerini duraklat\u0131n. B\u00f6ylece hasarl\u0131 dosyalar\u0131n di\u011fer kopyalara yay\u0131lmas\u0131n\u0131 ve h\u00e2l\u00e2 sa\u011flam olan s\u00fcr\u00fcmlerin \u00fczerine yaz\u0131lmas\u0131n\u0131 \u00f6nleyebilirsiniz.<\/p>\n Cerber\u2019i \u00e7al\u0131\u015f\u0131rken yakalarsan\u0131z ilk i\u00e7g\u00fcd\u00fcn\u00fcz NAS\u2019\u0131n g\u00fc\u00e7 kablosunu \u00e7ekmek olabilir, ancak bunu yapmamal\u0131s\u0131n\u0131z: ani g\u00fc\u00e7 kayb\u0131 diske yaz\u0131lmakta olan verileri bozabilir. NAS\u2019\u0131n normal kapatma prosed\u00fcr\u00fcn\u00fc kullanmak daha iyidir; ancak bunun, zaten \u015fifrelenmi\u015f dosyalar\u0131 kurtarmak i\u00e7in olas\u0131 yollardan birini ortadan kald\u0131rd\u0131\u011f\u0131n\u0131 unutmay\u0131n. Bir uzman \u015fans\u0131 yaver giderse cihaz\u0131n RAM\u2019inden bir kurtarma anahtar\u0131 \u00e7\u0131karabilir<\/a>. G\u00fc\u00e7 kesildi\u011finde RAM temizlenir.<\/p>\n Fidye yaz\u0131l\u0131m\u0131 NAS\u2019\u0131n\u0131zdaki dosyalar\u0131 \u015fifrelemeyi bitirdiyse ve cihaz\u0131n internet ba\u011flant\u0131s\u0131n\u0131 kestiyseniz NAS\u2019a do\u011frudan ba\u011flanmay\u0131 ve \u015fifrelenmi\u015f dosyalarla sald\u0131rganlar\u0131n talimatlar\u0131n\u0131n bir kopyas\u0131n\u0131 bo\u015f<\/strong> bir harici sabit diske kaydetmeyi deneyin. G\u00fcvenlik ara\u015ft\u0131rmac\u0131lar\u0131 gelecekte \u00fccretsiz bir C3RB3R \u015fifre \u00e7\u00f6z\u00fcc\u00fc yay\u0131mlayabilir.<\/p>\n \u015eifreleme devam ederken NAS\u2019\u0131 kapatt\u0131ysan\u0131z yaln\u0131zca i\u015flemleri incelemek veya dosya kopyalamak i\u00e7in yeniden a\u00e7may\u0131n; \u015fifreleme cihaz \u00fczerinde yerel olarak ger\u00e7ekle\u015fir ve yeniden ba\u015flatmadan sonra devam edebilir. Bu durumda, vir\u00fcsl\u00fc DSM kurulumunu ba\u015flatmadan NAS s\u00fcr\u00fcc\u00fclerini okuyabilen g\u00fcvenilir bir veri kurtarma uzman\u0131na ba\u015fvurun.<\/p>\n \u00d6nceki ad\u0131mlar\u0131 izleyerek NAS\u2019\u0131n a\u011f ba\u011flant\u0131s\u0131n\u0131 kestiyseniz, cihaz\u0131 yal\u0131t\u0131lm\u0131\u015f bir ortamda do\u011frudan bilgisayara ba\u011flad\u0131ysan\u0131z ve fidye yaz\u0131l\u0131m\u0131 i\u015flemlerini durdurduysan\u0131z kurtarman\u0131z gereken \u015fifrelenmemi\u015f dosyalar\u0131 kaydedebilirsiniz. Yedekleme s\u00fcr\u00fcc\u00fcs\u00fcn\u00fc NAS\u2019\u0131n USB ba\u011flant\u0131 noktas\u0131na de\u011fil, NAS\u2019a do\u011frudan ba\u011fl\u0131 bilgisayara ba\u011flamak daha iyidir; bu, fidye yaz\u0131l\u0131m\u0131n\u0131n yeniden \u00e7al\u0131\u015f\u0131p bu s\u00fcr\u00fcc\u00fcy\u00fc de \u015fifreleme olas\u0131l\u0131\u011f\u0131n\u0131 azalt\u0131r.<\/p>\n Yedek i\u00e7eren harici bir s\u00fcr\u00fcc\u00fcy\u00fc vir\u00fcsl\u00fc NAS\u2019a ba\u011flamay\u0131n ve ele ge\u00e7irilmi\u015f NAS\u2019a yedekten dosya geri y\u00fcklemeye ba\u015flamay\u0131n. Fidye yaz\u0131l\u0131m\u0131 yeniden \u00e7al\u0131\u015fabilir ve ba\u011fl\u0131 s\u00fcr\u00fcc\u00fcye zarar verebilir.<\/p>\n Snapshot Replication\u2019\u0131 \u00f6nceden yap\u0131land\u0131rd\u0131ysan\u0131z ve sald\u0131rganlar anl\u0131k g\u00f6r\u00fcnt\u00fcleri yok etmediyse verileri bunlardan kurtarabilirsiniz; ancak verileri ele ge\u00e7irilmi\u015f NAS\u2019a geri y\u00fcklemenin anlam\u0131 yoktur. Yedek i\u00e7in ayr\u0131 bir s\u00fcr\u00fcc\u00fcye ihtiyac\u0131n\u0131z olacak.<\/p>\n \u00d6nce anl\u0131k g\u00f6r\u00fcnt\u00fclerin h\u00e2l\u00e2 mevcut olup olmad\u0131\u011f\u0131n\u0131 kontrol edin. K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m durdurulduktan sonra \u00e7al\u0131\u015fan NAS\u2019ta DSM\u2019nin ana men\u00fcs\u00fcnden Snapshot Replication\u2019\u0131 a\u00e7\u0131n. Payla\u015f\u0131lan klas\u00f6r\u00fc se\u00e7in, Anl\u0131k G\u00f6r\u00fcnt\u00fc<\/em> \u2192 Anl\u0131k G\u00f6r\u00fcnt\u00fc Listesi<\/em>, enfeksiyondan \u00f6nce olu\u015fturulmu\u015f bir anl\u0131k g\u00f6r\u00fcnt\u00fc bulun ve i\u00e7eri\u011fini incelemek i\u00e7in G\u00f6zat<\/em> se\u00e7ene\u011fine t\u0131klay\u0131n. Buradan, anl\u0131k g\u00f6r\u00fcnt\u00fcy\u00fc vir\u00fcsl\u00fc birime geri y\u00fcklemeden verileri harici ortama da kopyalayabilirsiniz. Snapshot Replication kullan\u0131m\u0131yla ilgili ayr\u0131nt\u0131lar i\u00e7in Synology talimatlar\u0131na<\/a> bak\u0131n.<\/p>\n \u015eifrelenmi\u015f ve \u015fifrelenmemi\u015f veriler ile g\u00fcnl\u00fckler dahil kurtarabilece\u011finiz her \u015feyi kaydettikten sonra NAS\u2019\u0131 yeniden kullanmadan \u00f6nce fabrika ayarlar\u0131na s\u0131f\u0131rlay\u0131n (Fabrika Ayarlar\u0131na S\u0131f\u0131rla<\/em> \u2192 T\u00fcm Verileri Sil<\/em>).<\/p>\n Bunun a\u011f depolama cihaz\u0131ndaki t\u00fcm verileri, uygulamalar\u0131 ve ayarlar\u0131 tamamen silece\u011fini unutmay\u0131n. S\u0131f\u0131rlamadan \u00f6nce olu\u015fturdu\u011funuz yedekleri kontrol edin ve kopyalad\u0131\u011f\u0131n\u0131z sa\u011flam dosyalar\u0131n a\u00e7\u0131labildi\u011finden, anl\u0131k g\u00f6r\u00fcnt\u00fclerdeki gerekli dosya s\u00fcr\u00fcmlerinin kaydedildi\u011finden ve \u015fifrelenmi\u015f dosyalar\u0131n, fidye notlar\u0131n\u0131n, g\u00fcnl\u00fcklerin ve elde etti\u011finiz bellek d\u00f6k\u00fcmlerinin NAS\u2019ta de\u011fil ba\u015fka bir depolama cihaz\u0131nda sakland\u0131\u011f\u0131ndan emin olun. Bir \u015fey eksikse veri kurtarma uzman\u0131 i\u00e7in orijinal s\u00fcr\u00fcc\u00fcleri veya tam disk g\u00f6r\u00fcnt\u00fclerini koruyun. NAS olmadan bir s\u00fcre idare edebiliyorsan\u0131z cihaz\u0131 silmek i\u00e7in acele etmeyin: \u00fccretsiz \u015fifre \u00e7\u00f6zme ara\u00e7lar\u0131 daha sonra ortaya \u00e7\u0131kabilir.<\/p>\n NAS\u2019\u0131 dosyalar\u0131 atmak i\u00e7in kullan\u0131lan bir depolama alan\u0131ndan biraz fazlas\u0131 olarak kulland\u0131ysan\u0131z ve \u00fczerinde yerine koyamayaca\u011f\u0131n\u0131z ger\u00e7ekten de\u011ferli bir \u015fey yoksa, yeniden kullanmadan \u00f6nce depolama alan\u0131n\u0131 yukar\u0131da a\u00e7\u0131kland\u0131\u011f\u0131 gibi tamamen silin ve DSM\u2019yi resmi bir kaynaktan internet ba\u011flant\u0131s\u0131 olmadan DSM y\u00fckleme talimatlar\u0131n\u0131<\/a> kullanarak yeniden kurun.<\/p>\n Enfeksiyondan sonra olu\u015fturulmu\u015f bir yedekten ayarlar\u0131 geri y\u00fcklemeyin: bu yedek sald\u0131rganlar\u0131n yapt\u0131\u011f\u0131 de\u011fi\u015fiklikleri i\u00e7erebilir. NAS\u2019\u0131 s\u0131f\u0131rdan yap\u0131land\u0131rmak en iyisidir.<\/p>\n DSM\u2019yi yeniden y\u00fcklemek, kimlik bilgileri cihaz\u0131n\u0131zda saklanm\u0131\u015f olabilecek hizmetler i\u00e7in \u00e7al\u0131nan parolalar\u0131, oturumlar\u0131 veya di\u011fer gizli bilgileri ge\u00e7ersiz k\u0131lmaz. NAS\u2019\u0131n\u0131zda hangi hizmetlerin kullan\u0131ld\u0131\u011f\u0131n\u0131, hangi ek paketlerin kurulu oldu\u011funu ve bunlar\u0131n nelere eri\u015febildi\u011fini d\u00fc\u015f\u00fcn\u00fcn. T\u00fcm bu hizmetleri tek tek kontrol edin, \u015f\u00fcpheli oturumlar\u0131 sonland\u0131r\u0131n, etkilenen anahtarlar\u0131 ve belirte\u00e7leri iptal edin, parolalar\u0131 de\u011fi\u015ftirin ve iki fakt\u00f6rl\u00fc kimlik do\u011frulamay\u0131 etkinle\u015ftirin. T\u00fcm kimlik bilgilerini bir parola y\u00f6neticisinin g\u00fcvenli kasas\u0131nda<\/a>\u00a0saklaman\u0131z\u0131 \u00f6neriyoruz. Bunu depolama cihaz\u0131n\u0131 yeniden a\u011fa ba\u011flamadan \u00f6nce yap\u0131n.<\/p>\n Bu hizmet NAS\u2019\u0131n\u0131za internet \u00fczerinden ba\u011flanman\u0131z\u0131 sa\u011flar. DSM 7\u2019de devre d\u0131\u015f\u0131 b\u0131rakmak i\u00e7in Denetim Masas\u0131 \u2192 D\u0131\u015f Eri\u015fim \u2192 QuickConnect<\/em>, QuickConnect\u2019i Etkinle\u015ftir<\/em> onay kutusunun i\u015faretini kald\u0131r\u0131n ve Uygula<\/em> se\u00e7ene\u011fine t\u0131klay\u0131n. Daha eski s\u00fcr\u00fcmlerde QuickConnect<\/em> b\u00f6l\u00fcm\u00fc do\u011frudan Denetim Masas\u0131<\/em> i\u00e7inde yer al\u0131r.<\/p>\n Y\u00f6nlendiriciniz, internetten gelen ba\u011flant\u0131lar\u0131 do\u011frudan NAS\u2019a y\u00f6nlendirecek \u015fekilde yap\u0131land\u0131r\u0131lm\u0131\u015f olabilir; buna port y\u00f6nlendirme denir. \u00d6nce NAS\u2019\u0131n yerel IP adresini bulun. DSM\u2019de bunu Denetim Masas\u0131 \u2192 A\u011f \u2192 A\u011f Aray\u00fcz\u00fc<\/em> alt\u0131nda g\u00f6rebilirsiniz.<\/p>\n Ard\u0131ndan ev y\u00f6nlendiricinizin ayarlar\u0131n\u0131 a\u00e7\u0131n. Bu genellikle y\u00f6nlendiricinin yerel adresini taray\u0131c\u0131ya girerek yap\u0131l\u0131r; tam adres ve oturum a\u00e7ma bilgileri \u00e7o\u011fu zaman y\u00f6nlendiricinin \u00fczerindeki etikette veya internet servis sa\u011flay\u0131c\u0131n\u0131z\u0131n uygulamas\u0131nda bulunur.<\/p>\n Y\u00f6nlendirici ayarlar\u0131nda Port Y\u00f6nlendirme<\/em>, Y\u00f6nlendirme<\/em> veya Port Yeniden Y\u00f6nlendirme<\/em> gibi adlara sahip bir b\u00f6l\u00fcm bulun. Mevcut kurallar\u0131 g\u00f6zden ge\u00e7irin. Dahili IP<\/em>, Yerel IP<\/em>, Hedef<\/em>, veya Cihaz<\/em> gibi bir alanda NAS\u2019\u0131n\u0131z\u0131n IP adresi yer al\u0131yorsa bu kural\u0131 silin.<\/p>\n DMZ, DMZ Ana Bilgisayar\u0131 veya A\u00e7\u0131k Ana Bilgisayar b\u00f6l\u00fcm\u00fcn\u00fc de kontrol edin. NAS\u2019\u0131n IP adresi burada listeleniyorsa \u00f6zelli\u011fi devre d\u0131\u015f\u0131 b\u0131rak\u0131n.<\/p>\n UPnP, uygulamalar\u0131n ve cihazlar\u0131n y\u00f6nlendiriciden kendileri i\u00e7in otomatik olarak port a\u00e7mas\u0131n\u0131 istemesine olanak tan\u0131r. UPnP\u2019ye ihtiyac\u0131n\u0131z yoksa devre d\u0131\u015f\u0131 b\u0131rak\u0131n.<\/p>\n Bunun y\u00f6nlendiricinin tamam\u0131n\u0131 etkileyen bir ayar oldu\u011funu, dolay\u0131s\u0131yla devre d\u0131\u015f\u0131 b\u0131rakman\u0131n ev a\u011f\u0131n\u0131zdaki di\u011fer cihazlar\u0131 etkileyebilece\u011fini unutmay\u0131n. Bu cihazlar i\u00e7in UPnP\u2019yi a\u00e7\u0131k tutmak istiyorsan\u0131z en az\u0131ndan UPnP arac\u0131l\u0131\u011f\u0131yla olu\u015fturulan kurallar\u0131 g\u00f6zden ge\u00e7irin ve hi\u00e7birinin NAS\u2019\u0131n IP adresini g\u00f6stermedi\u011finden emin olun. B\u00f6yle bir kural varsa silin ve y\u00f6nlendiriciniz izin veriyorsa NAS i\u00e7in otomatik port a\u00e7may\u0131 engelleyin.<\/p>\n IPv6 kullan\u0131yorsan\u0131z kurallar\u0131n\u0131 da g\u00f6zden ge\u00e7irin: NAS\u2019a gereksiz gelen ba\u011flant\u0131lar engellenmelidir. Yap\u0131land\u0131rd\u0131ysan\u0131z kullan\u0131lmayan t\u00fcnelleri, VPN\u2019leri ve di\u011fer uzaktan eri\u015fim hizmetlerini de devre d\u0131\u015f\u0131 b\u0131rak\u0131n. Bu de\u011fi\u015fikliklerden sonra NAS\u2019a d\u0131\u015f bir a\u011fdan \u2014 \u00f6rne\u011fin mobil veri ba\u011flant\u0131s\u0131 \u00fczerinden \u2014 eri\u015filip eri\u015filemedi\u011fini kontrol edin.<\/p>\n Siber g\u00fcvenlik ara\u015ft\u0131rmac\u0131lar\u0131 dosya kurtarma i\u00e7in zaman zaman \u00fccretsiz \u015fifre \u00e7\u00f6z\u00fcc\u00fcler yay\u0131mlar. Bunlar\u0131n ortaya \u00e7\u0131kmas\u0131n\u0131n uzun s\u00fcrebilece\u011fini unutmay\u0131n; bu arada yeni bir fidye yaz\u0131l\u0131m\u0131 t\u00fcr\u00fcn\u00fcn sald\u0131r\u0131s\u0131ndan sonra verilerinizi an\u0131nda kurtarabilece\u011fini iddia eden bilinmeyen \u201cara\u015ft\u0131rmac\u0131lara\u201d veya web sitelerine g\u00fcvenmeyin.<\/p>\n Bir\u00e7ok ki\u015fi DiskStation Manager i\u00e7in \u00fc\u00e7\u00fcnc\u00fc taraf y\u00fckleyiciler kullan\u0131yor; bunlar XPenology<\/a> projesindeki resmi olmayan ara\u00e7lar ve Synology\u2019nin i\u015fletim sistemini asl\u0131nda tasarlanmad\u0131\u011f\u0131 donan\u0131mlarda, \u00f6rne\u011fin bir PC\u2019de veya \u00f6zel olarak toplanm\u0131\u015f bir sunucuda \u00e7al\u0131\u015ft\u0131rmaya olanak tan\u0131yor. Arc, RR (RedPill Recovery) ve M-Shell bunlara \u00f6rnektir.<\/p>\n DSM\u2019yi bu \u015fekilde \u00e7al\u0131\u015ft\u0131r\u0131yorsan\u0131z C3RB3R sisteminize de sald\u0131rabilir. Ancak DSM\u2019yi hemen g\u00fcncellemeye kalkmay\u0131n: \u00f6nce yeni s\u00fcr\u00fcm\u00fcn hem y\u00fckleyicinizle hem de donan\u0131m\u0131n\u0131zla uyumlu oldu\u011fundan emin olun. Aksi takdirde dosyalar\u0131n\u0131z zarar g\u00f6rebilir.<\/p>\n Hen\u00fcz en yeni sistem s\u00fcr\u00fcm\u00fcn\u00fc y\u00fckleyemiyorsan\u0131z d\u0131\u015f eri\u015fimi devre d\u0131\u015f\u0131 b\u0131rak\u0131p yaln\u0131zca eri\u015fime ihtiya\u00e7 duyan cihazlardan yerel a\u011f ba\u011flant\u0131lar\u0131na izin vererek a\u011f depolama cihaz\u0131na eri\u015fimi k\u0131s\u0131tlay\u0131n. M\u00fcmk\u00fcnse NAS\u2019\u0131 ayr\u0131 bir a\u011f segmentine al\u0131n. Ak\u0131ll\u0131 Ev Monit\u00f6r\u00fc<\/a> \u00f6zelli\u011fi Kaspersky Plus<\/a> ve Kaspersky Premium<\/a>\u00a0i\u00e7inde ev a\u011f\u0131n\u0131z i\u00e7in ek koruma sa\u011flayabilir; yerel a\u011f\u0131n\u0131zdaki t\u00fcm cihazlar\u0131 g\u00f6sterir ve yeni, tan\u0131mad\u0131\u011f\u0131n\u0131z cihazlar ba\u011fland\u0131\u011f\u0131nda bunu alg\u0131lar.<\/p>\n Verilerinizi nas\u0131l saklamal\u0131 ve korumal\u0131s\u0131n\u0131z? Di\u011fer makalelerimizi okuyun:<\/p>\n C3RB3R fidye yaz\u0131l\u0131m\u0131, g\u00fcncel olmayan i\u015fletim sistemleri \u00e7al\u0131\u015ft\u0131ran Synology a\u011fa ba\u011fl\u0131 depolama (NAS) cihazlar\u0131na sald\u0131r\u0131yor ve bu cihazlarda saklanan dosyalar\u0131 \u015fifreliyor. Hangi NAS cihazlar\u0131n\u0131n risk alt\u0131nda oldu\u011funu, sald\u0131r\u0131dan nas\u0131l korunaca\u011f\u0131n\u0131z\u0131 ve verileriniz zaten \u015fifrelendiyse ne yapman\u0131z gerekti\u011fini a\u00e7\u0131kl\u0131yoruz.<\/p>\n","protected":false},"author":2698,"featured_media":15026,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1351],"tags":[2886,591,715,728,1483,2236],"class_list":["post-15025","post","type-post","status-publish","format-standard","has-post-thumbnail","category-threats","tag-aga-bagli-depolama","tag-fidye-yazilimi","tag-kisisel-veriler","tag-kotu-amacli-yazilim","tag-nas","tag-yedeklemeler"],"hreflang":[{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/synology-c3rb3r-attack\/15025\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/synology-c3rb3r-attack\/31202\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/synology-c3rb3r-attack\/26233\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/synology-c3rb3r-attack\/13776\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/synology-c3rb3r-attack\/31044\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/synology-c3rb3r-attack\/29595\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/synology-c3rb3r-attack\/32578\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/synology-c3rb3r-attack\/31116\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/synology-c3rb3r-attack\/42962\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/synology-c3rb3r-attack\/56663\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/synology-c3rb3r-attack\/24508\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/synology-c3rb3r-attack\/25429\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/synology-c3rb3r-attack\/33948\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/synology-c3rb3r-attack\/36945\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/synology-c3rb3r-attack\/36613\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.tr\/blog\/tag\/fidye-yazilimi\/","name":"Fidye Yaz\u0131l\u0131m\u0131"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/15025","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/users\/2698"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=15025"}],"version-history":[{"count":3,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/15025\/revisions"}],"predecessor-version":[{"id":15031,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/15025\/revisions\/15031"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media\/15026"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=15025"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=15025"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=15025"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
Bula\u015fmadan sonra dosyalara ne oluyor?<\/h2>\n
![\"C3RB3R](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2026\/11\/10165406\/synology-c3rb3r-attack-01.png\" "\\"C3RB3R")
<\/a>![\"C3RB3R](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2026\/11\/10165233\/synology-c3rb3r-attack-02.png\" "\\"C3RB3R")
<\/a>Fidye yaz\u0131l\u0131m\u0131 Synology NAS\u2019\u0131n\u0131za zaten bula\u015ft\u0131ysa ne yapmal\u0131s\u0131n\u0131z?<\/h2>\n
\n
1. NAS\u2019\u0131n t\u00fcm a\u011f ba\u011flant\u0131lar\u0131n\u0131 hemen kesin (ancak cihaz\u0131 kapatmay\u0131n)<\/h3>\n
2. NAS\u2019\u0131 kapat\u0131p kapatmayaca\u011f\u0131n\u0131za karar verin<\/h3>\n
\n
sudo ps -ef<\/code>), fidye yaz\u0131l\u0131m\u0131 i\u015flemini belirleyin, PID\u2019sini (process ID\/i\u015flem kimli\u011fi) bulun ve i\u015flemi sonland\u0131rmadan \u015fifrelemeyi duraklat\u0131n (sudo kill -STOP PID<\/code>, burada PID fidye yaz\u0131l\u0131m\u0131 i\u015fleminin kimli\u011fidir). Ard\u0131ndan t\u00fcm i\u015flem i\u015f par\u00e7ac\u0131klar\u0131n\u0131n durdu\u011funu (durum T<\/code>) do\u011frulay\u0131n ve bellek d\u00f6k\u00fcm\u00fcn\u00fc kaydetmek i\u00e7in C3RB3R \/ .L0CK3D fidye yaz\u0131l\u0131m\u0131 kurtarma<\/a> talimatlar\u0131n\u0131 izleyin. \u015eifrelemeyi durduramazsan\u0131z NAS\u2019\u0131 kapat\u0131n<\/strong>.<\/li>\n3. \u015eifrelenmi\u015f dosyalar\u0131 ve fidye notunu kaydedin<\/h3>\n
4. Fidye yaz\u0131l\u0131m\u0131 kald\u0131r\u0131lana kadar dosyalar\u0131 geri y\u00fcklemeyin ve yedeklerin bulundu\u011fu s\u00fcr\u00fcc\u00fcleri ba\u011flamay\u0131n<\/h3>\n
5. Sald\u0131r\u0131 durdurulduktan sonra Snapshot Replication\u2019daki anl\u0131k g\u00f6r\u00fcnt\u00fclerinizi kontrol edin<\/h3>\n
6. Ele ge\u00e7irilmi\u015f NAS\u2019\u0131 silin ve DSM\u2019yi yeniden y\u00fckleyin<\/h3>\n
7. Ele ge\u00e7irilmi\u015f olabilecek hesaplar\u0131 kontrol edin<\/h3>\n
8. NAS\u2019\u0131 yeniden a\u011fa ba\u011flamadan \u00f6nce gereksiz uzaktan eri\u015fimi devre d\u0131\u015f\u0131 b\u0131rak\u0131n<\/h3>\n
QuickConnect\u2019i devre d\u0131\u015f\u0131 b\u0131rak\u0131n<\/h4>\n
NAS\u2019\u0131n y\u00f6nlendiriciniz \u00fczerinden internete a\u00e7\u0131k olup olmad\u0131\u011f\u0131n\u0131 kontrol edin<\/h4>\n
UPnP \u00fczerinden otomatik port a\u00e7may\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131n<\/h4>\n
Ek kontroller<\/h4>\n
9. \u00dccretsiz bir \u015fifre \u00e7\u00f6z\u00fcc\u00fc olup olmad\u0131\u011f\u0131n\u0131 d\u00fczenli olarak kontrol edin<\/h3>\n
Kendi NAS sistemini kuranlar ne yapmal\u0131?<\/h2>\n
Hem NAS\u2019\u0131n\u0131z\u0131 hem de ki\u015fisel verilerinizi nas\u0131l korursunuz?<\/h2>\n
\n
\n