{"id":3007,"date":"2017-03-09T06:53:47","date_gmt":"2017-03-09T11:53:47","guid":{"rendered":"https:\/\/www.kaspersky.com.tr\/blog\/?p=3007"},"modified":"2019-11-15T14:52:50","modified_gmt":"2019-11-15T11:52:50","slug":"tr-crypt0l0cker","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.tr\/blog\/tr-crypt0l0cker\/3007\/","title":{"rendered":"T\u00fcrkiye&#8217;yi etkisi alt\u0131na alan yeni fidye yaz\u0131l\u0131m\u0131 tehdidi"},"content":{"rendered":"<p>Son birka\u00e7 g\u00fcnd\u00fcr T\u00fcrkiye\u2019deki i\u015fletmeleri farkl\u0131 mailler ve farkl\u0131 Dropbox linkleri ile tehdit eden bir yaz\u0131l\u0131m var, bu yaz\u0131l\u0131m kendisine Cypt0L0cker diyor.<\/p>\n<p>Cypt0L0cker fidye yaz\u0131l\u0131m\u0131n\u0131 di\u011ferlerinden ay\u0131ran \u00f6nemli bir \u00f6zellik var, bu fidye yaz\u0131l\u0131m\u0131 T\u00fcrk\u00e7e mailler ile bula\u015f\u0131yor, talep etti\u011fi fidye mesaj\u0131n\u0131 da T\u00fcrk\u00e7e g\u00f6steriyor. Ancak daha \u00e7ok ilgimi \u00e7eken \u015fey su\u00e7lu ya da su\u00e7lular\u0131n kulland\u0131klar\u0131 dil oldu. Bozuk bir T\u00fcrk\u00e7e kullanarak yaz\u0131lan mailler ve fidye talep mesajlar\u0131 su\u00e7lular\u0131n T\u00fcrk olmama ihtimallerini d\u00fc\u015f\u00fcnd\u00fcr\u00fcyor.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-3008\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2017\/03\/06013359\/2.jpg\" alt=\"\" width=\"1847\" height=\"718\"><\/p>\n<p>\u0130ki g\u00fcn i\u00e7erisinde say\u0131s\u0131z mail adresinden, y\u00fczlerce farkl\u0131 \u015fekillerde g\u00f6nderilen Dropbox linkleri ile ziplenmi\u015f \u015fekilde .js uzant\u0131l\u0131 bir dosya g\u00f6nderiliyor. Bu dosya \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131\u011f\u0131nda arka planda dosyalar\u0131n\u0131z farkl\u0131 uzant\u0131lar ile \u015fifreleniyor.<\/p>\n<p>Olay\u0131n di\u011fer \u00f6nemli noktas\u0131 da, bu zararl\u0131 yaz\u0131l\u0131m\u0131 da\u011f\u0131tan mail adreslerinin uzant\u0131lar\u0131 \u015f\u00fcphe \u00e7eken uzant\u0131lar de\u011filler. Hatta iyi bilinen ve kullan\u0131lan mail uzant\u0131lar\u0131. Anla\u015f\u0131ld\u0131\u011f\u0131 \u00fczere iyi bilinen firmalar hackleniyor, hacklenen mail adreslerinden daha \u00f6nce mail g\u00f6nderilmi\u015f kullan\u0131c\u0131lara genelde eski maillere ayn\u0131 konu ba\u015fl\u0131\u011f\u0131 ile cevap veriliyor. Maili alan sunucu, daha \u00f6nce de bu adresten mail ald\u0131\u011f\u0131 i\u00e7in spam olarak alg\u0131lam\u0131yor. G\u00fcvenilir uzant\u0131lardan gelen mailler de kullan\u0131c\u0131lar\u0131 ikna etmenin \u00f6nemli bir noktas\u0131n\u0131 olu\u015fturuyor.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-3009\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2017\/03\/06013358\/1.jpg\" alt=\"\" width=\"997\" height=\"307\"><\/p>\n<p>Her zaman s\u00f6yl\u00fcyoruz ancak tekrar belirtmekte fayda var;<\/p>\n<ul>\n<li>Fidye yaz\u0131l\u0131m\u0131 ve di\u011fer tehditler hakk\u0131nda bilgilenin ve sevdiklerinizi <a href=\"https:\/\/www.kaspersky.com.tr\/blog\/ransomware-for-dummies\/2713\/\" target=\"_blank\" rel=\"noopener noreferrer\">bilgilendirin<\/a>.<\/li>\n<li>Ald\u0131\u011f\u0131n\u0131z maillerin uzant\u0131lar\u0131n\u0131 mutlaka kontrol edin.<\/li>\n<li>\u015e\u00fcpheli ekleri bilgisayar\u0131n\u0131za indirmeyin.<\/li>\n<li>Dosyalar\u0131n\u0131z\u0131 mutlaka d\u00fczenli olarak yedekleyin.<\/li>\n<li>G\u00fc\u00e7l\u00fc bir anti vir\u00fcs \u00e7\u00f6z\u00fcm\u00fc kullan\u0131n.<\/li>\n<\/ul>\n<p>Fidyecilere para \u00f6demeyin. Sizi bir defa zor durumda b\u0131rakan su\u00e7lulara g\u00fcvenmeniz mant\u0131kl\u0131 bir davran\u0131\u015f olmaz. Ayr\u0131ca \u00f6deme yapman\u0131za ra\u011fmen dosyalar\u0131n\u0131z\u0131 geri alamama ihtimalinizi de <a href=\"https:\/\/www.kaspersky.com.tr\/blog\/no-no-ransom\/2582\/\" target=\"_blank\" rel=\"noopener noreferrer\">unutmay\u0131n<\/a>.<\/p>\n<p>Kaspersky \u00fcr\u00fcnleri bu zararl\u0131 yaz\u0131l\u0131m\u0131 Trojan.Win32.Bazon.a olarak tespit ediyor. A\u015fa\u011f\u0131da test videosunu bulabilirsiniz.<br>\nBireysel kullan\u0131c\u0131lar <a href=\"http:\/\/kas.pr\/kdkistr\" target=\"_blank\" rel=\"noopener noreferrer\">Kaspersky Internet Security<\/a> \u00fcr\u00fcn\u00fcm\u00fcz ile cihazlar\u0131n\u0131 koruyabilirler. \u0130\u015fletmeniz i\u00e7in ise \u00fccretsiz fidye yaz\u0131l\u0131mlar\u0131na kar\u015f\u0131 koruma arac\u0131m\u0131z\u0131 <a href=\"https:\/\/kas.pr\/vdi1\" target=\"_blank\" rel=\"noopener noreferrer\">buraya<\/a> t\u0131klayarak indirebilirsiniz.<\/p>\n<p><span class=\"embed-youtube\" style=\"text-align:center; display: block;\"><iframe class=\"youtube-player\" type=\"text\/html\" width=\"640\" height=\"390\" src=\"https:\/\/www.youtube.com\/embed\/2Gq7W7AHy8s?version=3&amp;rel=1&amp;fs=1&amp;showsearch=0&amp;showinfo=1&amp;iv_load_policy=1&amp;wmode=transparent\" frameborder=\"0\" allowfullscreen=\"true\"><\/iframe><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Son birka\u00e7 g\u00fcnd\u00fcr T\u00fcrkiye\u2019deki i\u015fletmeleri farkl\u0131 mailler ve farkl\u0131 Dropbox linkleri ile tehdit eden bir yaz\u0131l\u0131m var, bu yaz\u0131l\u0131m kendisine Cypt0L0cker diyor. Cypt0L0cker fidye yaz\u0131l\u0131m\u0131n\u0131 di\u011ferlerinden ay\u0131ran \u00f6nemli bir \u00f6zellik var, bu fidye yaz\u0131l\u0131m\u0131 T\u00fcrk\u00e7e mailler ile bula\u015f\u0131yor, talep etti\u011fi fidye mesaj\u0131n\u0131 da T\u00fcrk\u00e7e g\u00f6steriyor. Ancak daha \u00e7ok ilgimi \u00e7eken \u015fey su\u00e7lu ya da su\u00e7lular\u0131n kulland\u0131klar\u0131 dil oldu. Bozuk bir T\u00fcrk\u00e7e kullanarak yaz\u0131lan mailler ve fidye talep mesajlar\u0131 su\u00e7lular\u0131n T\u00fcrk olmama ihtimallerini d\u00fc\u015f\u00fcnd\u00fcr\u00fcyor.<\/p>\n","protected":false},"author":706,"featured_media":3010,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1284,1351],"tags":[1159,1156,591,1157,447,659,1158],"class_list":{"0":"post-3007","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-tips","8":"category-threats","9":"tag-anti-ransomware-tool","10":"tag-crypt0l0cker","11":"tag-fidye-yazilimi","12":"tag-fidye-yazilimi-araci","13":"tag-ransomware","14":"tag-turkiye","15":"tag-ucretsiz-fidye-yazilimi-araci"},"hreflang":[{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/tr-crypt0l0cker\/3007\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.tr\/blog\/tag\/fidye-yazilimi\/","name":"Fidye Yaz\u0131l\u0131m\u0131"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/3007","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/users\/706"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=3007"}],"version-history":[{"count":2,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/3007\/revisions"}],"predecessor-version":[{"id":7082,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/3007\/revisions\/7082"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media\/3010"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=3007"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=3007"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=3007"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}