{"id":2085,"date":"2016-05-20T09:34:30","date_gmt":"2016-05-20T13:34:30","guid":{"rendered":"https:\/\/www.kaspersky.com.tr\/blog\/?p=2085"},"modified":"2019-11-15T15:01:33","modified_gmt":"2019-11-15T12:01:33","slug":"teslacrypt-master-key","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.tr\/blog\/teslacrypt-master-key\/2085\/","title":{"rendered":"B\u00fcy\u00fck final: Bye bye, TeslaCrypt"},"content":{"rendered":"<p>Olas\u0131l\u0131k teorisine g\u00f6re, garip olaylar \u015fimdi veya sonra elbet olacakt\u0131r. \u00d6zel garip bir \u015feyin ve bizim tuhaf diyece\u011fimiz sonsuz say\u0131da olay\u0131n olmas\u0131 i\u00e7in k\u00fc\u00e7\u00fck bir \u015fans var. Bazen bu garip olaylar olduk\u00e7a iyidir \u2013 \u00f6rne\u011fin, TeslaCrypt vir\u00fcs\u00fcn\u00fcn arkas\u0131ndaki siber su\u00e7lular\u0131n birdenbire t\u00fcm TeslaCrypt fidye yaz\u0131l\u0131m\u0131ndan etkilenmi\u015f dosyalar\u0131 a\u00e7an tek bir anahtar kod yay\u0131mlamas\u0131n\u0131n haberi. Bu ana anahtar\u0131 kullanarak TeslaCrypt taraf\u0131ndan \u015fifrelenmi\u015f dosyalar\u0131n \u015fifresini herkes k\u0131rabilir. Ger\u00e7ekten \u00e7ok \u015fa\u015f\u0131rt\u0131c\u0131.<\/p>\n<p>G\u00f6r\u00fcnen o ki, bir ama\u00e7 u\u011fruna siber su\u00e7lular TeslaCrypt da\u011f\u0131t\u0131m\u0131n\u0131 durdurdular \u2013 ki bu t\u00fcr\u00fcn\u00fcn en k\u00f6t\u00fclerinden biri olarak de\u011ferlendirilen bir vir\u00fcs. Kurbanlar\u0131na TeslaCrypt bula\u015ft\u0131ran da\u011f\u0131t\u0131m \u015firketleri onun yerine CryptXXX tercih etmeye ba\u015flad\u0131. (Ki, daha \u00f6nceki <a href=\"https:\/\/www.kaspersky.com.tr\/blog\/cryptxxx-decryption-20\/2058\/\" target=\"_blank\" rel=\"noopener noreferrer\">yaz\u0131lar\u0131m\u0131zdan<\/a> hat\u0131rlayaca\u011f\u0131n\u0131z \u00fczere, Kaspersky Lab buna bir \u00e7\u00f6z\u00fcm buldu.)<\/p>\n<p>ESET\u2019teki ara\u015ft\u0131rmac\u0131lar bunu farkedince, TeslaCrypt\u2019in TOR yard\u0131m sitesini kullanarak siber su\u00e7lulara ana anahtar\u0131 \u2018kibarca\u2019 verip veremeyeceklerini sordular\u2026 ve onlar da kabul etti. \u015eimdi ise, kapat\u0131lm\u0131\u015f olan yard\u0131m sitesinde sadece ana anahtar ve iki not var: \u201cProje durduruldu\u201d ve \u201c\u00dczg\u00fcn\u00fcz!\u201d<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2087\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2016\/05\/06014218\/teslacrypt-closed.png\" alt=\"teslacrypt-closed\" width=\"1229\" height=\"430\"><\/p>\n<p>Ama ortalama bir bilgisayar kullan\u0131c\u0131s\u0131 i\u00e7in anahtar\u0131n biraz kod olmadan hi\u00e7bir i\u015flevi yok. BleepingComputer kullan\u0131c\u0131s\u0131 BloodDolly bu y\u00fczden kendi TeslaDecoder\u2019\u0131n\u0131 g\u00fcncellemek i\u00e7in bu anahtar\u0131 kulland\u0131, daha \u00f6nceden TeslaCrypt ile \u015fifrelenmi\u015f dosyalar\u0131 \u00e7\u00f6zmek i\u00e7in yaz\u0131l\u0131m yazmay\u0131 denemi\u015fti.<\/p>\n<p>Yaz\u0131l\u0131m\u0131 kullanmas\u0131 olduk\u00e7a kolay. Dosyalar\u0131n\u0131z\u0131n \u015fifresini \u00e7\u00f6zmek i\u00e7in, anahtar\u0131 gireceksiniz, TeslaCrypt\u2019in \u015fifrelemek i\u00e7in kulland\u0131\u011f\u0131 dosya uzant\u0131s\u0131n\u0131 se\u00e7eceksiniz ve sonra \u015fifreli dosyalar\u0131n\u0131z\u0131n nerede oldu\u011funu programa gireceksiniz \u2013 ya da sadece yaz\u0131l\u0131m ile bilgisayar\u0131 tarars\u0131n\u0131z.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Master decryption key released for <a href=\"https:\/\/twitter.com\/hashtag\/TeslaCrypt?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">#TeslaCrypt<\/a> <a href=\"https:\/\/twitter.com\/hashtag\/ransomware?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">#ransomware<\/a> via <a href=\"https:\/\/twitter.com\/threatpost?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">@threatpost<\/a> <a href=\"https:\/\/t.co\/YTqlZeYZ6z\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/t.co\/YTqlZeYZ6z<\/a> <a href=\"https:\/\/t.co\/I9wsK2cq3J\" target=\"_blank\" rel=\"noopener nofollow\">pic.twitter.com\/I9wsK2cq3J<\/a><\/p>\n<p>\u2014 Kaspersky (@kaspersky) <a href=\"https:\/\/twitter.com\/kaspersky\/status\/733337632135073794?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">May 19, 2016<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>BloodDolly\u2019nin TeslaDecoder\u2019\u0131n\u0131 <a href=\"http:\/\/download.bleepingcomputer.com\/BloodDolly\/TeslaDecoder.zip\" target=\"_blank\" rel=\"noopener nofollow\">BleepingComputer<\/a>\u2018dan indirebilirsiniz.<\/p>\n<p>TeslaCrypt\u2019in art\u0131k i\u015f g\u00f6rm\u00fcyor olmas\u0131 g\u00fczel bir haber \u00e7\u00fcnk\u00fc vir\u00fcs\u00fcn \u015fifreleme metotlar\u0131 piyasaya girdi\u011fi tarih olan \u015eubat 2015\u2019ten beri geli\u015fiyord\u0131u. Kaspersky Daily olarak biz TeslaCrypt\u2019in \u00fc\u00e7 versiyonunu ele ald\u0131k. Birincisi i\u00e7in ara\u015ft\u0131rmac\u0131m\u0131z \u00e7\u00f6z\u00fcm bulsa da, ikinci ve \u00fc\u00e7\u00fcnc\u00fc t\u00fcrleri i\u00e7in ayn\u0131 \u00e7\u00f6z\u00fcm\u00fc elde edemedik. Ama ana anahtar yay\u0131mland\u0131\u011f\u0131 i\u00e7in art\u0131k \u00e7\u00f6z\u00fcm bulabiliriz.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/twitter.com\/hashtag\/TeslaCrypt?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">#TeslaCrypt<\/a>: Round Three \u2013 <a href=\"https:\/\/t.co\/LAPH359dZp\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/t.co\/LAPH359dZp<\/a>  <a href=\"https:\/\/twitter.com\/hashtag\/ransomware?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">#ransomware<\/a> <a href=\"https:\/\/t.co\/6m1MdgfmSz\" target=\"_blank\" rel=\"noopener nofollow\">pic.twitter.com\/6m1MdgfmSz<\/a><\/p>\n<p>\u2014 Kaspersky (@kaspersky) <a href=\"https:\/\/twitter.com\/kaspersky\/status\/676774484158881792?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">December 15, 2015<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Su\u00e7lular\u0131n insanlara verdi\u011fi zarar\u0131 farkedip hatalar\u0131n\u0131n fark\u0131na vard\u0131klar\u0131 pek g\u00f6r\u00fclmese de, umar\u0131z bu olay vir\u00fcs yayanlar\u0131n hatalar\u0131ndan cayd\u0131\u011f\u0131 son olay olmaz. D\u0131\u015far\u0131da \u00e7ok say\u0131da birbirinden farkl\u0131 vir\u00fcs var ve k\u00fc\u00e7\u00fck bir \u015fansla en az\u0131ndan bir siber su\u00e7lu belki de hata yapt\u0131\u011f\u0131n\u0131n fark\u0131na var\u0131r. Bu k\u00fc\u00e7\u00fck \u015fanslar\u0131n hepsinin toplam\u0131 bize daha b\u00fcy\u00fck bir \u015fey sunuyor, yani umutlar\u0131m\u0131z sebepsiz de\u011fil.<\/p>\n<p>\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Olas\u0131l\u0131k teorisine g\u00f6re, garip olaylar \u015fimdi veya sonra elbet olacakt\u0131r. \u00d6zel garip bir \u015feyin ve bizim tuhaf diyece\u011fimiz sonsuz say\u0131da olay\u0131n olmas\u0131 i\u00e7in k\u00fc\u00e7\u00fck bir \u015fans var. Bazen bu garip<\/p>\n","protected":false},"author":696,"featured_media":2086,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1287,1284,1351],"tags":[827,819,591,828,829,830],"class_list":{"0":"post-2085","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"category-tips","9":"category-threats","10":"tag-decryptor","11":"tag-fidye-yazilim-cozucu","12":"tag-fidye-yazilimi","13":"tag-sifre-cozucu","14":"tag-sifre-kirici","15":"tag-teslacrypt"},"hreflang":[{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/teslacrypt-master-key\/2085\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/teslacrypt-master-key\/7167\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/teslacrypt-master-key\/7222\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/teslacrypt-master-key\/7148\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/teslacrypt-master-key\/8355\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/teslacrypt-master-key\/8221\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/teslacrypt-master-key\/11979\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/teslacrypt-master-key\/12160\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/teslacrypt-master-key\/5688\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/teslacrypt-master-key\/7722\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/teslacrypt-master-key\/11443\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/teslacrypt-master-key\/11979\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/teslacrypt-master-key\/12160\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/teslacrypt-master-key\/12160\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.tr\/blog\/tag\/decryptor\/","name":"decryptor"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/2085","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/users\/696"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=2085"}],"version-history":[{"count":2,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/2085\/revisions"}],"predecessor-version":[{"id":7200,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/2085\/revisions\/7200"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media\/2086"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=2085"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=2085"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=2085"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}