{"id":3269,"date":"2017-06-12T06:57:48","date_gmt":"2017-06-12T10:57:48","guid":{"rendered":"https:\/\/www.kaspersky.com.tr\/blog\/?p=3269"},"modified":"2019-11-15T14:50:37","modified_gmt":"2019-11-15T11:50:37","slug":"fireball-adware","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.tr\/blog\/fireball-adware\/3269\/","title":{"rendered":"Fireball: Potansiyel n\u00fckleer sonu\u00e7lar\u0131 olabilecek reklam vir\u00fcs\u00fc"},"content":{"rendered":"<p>Reklamlar bazen s\u0131k\u0131c\u0131 olabilir \u2013 bazen de zararl\u0131 olabilir. Reklam satarak para kazanan baz\u0131 i\u015fletmeler, reklam\u0131 sizin g\u00f6z\u00fcn\u00fcze sokmak i\u00e7in \u00e7ok ileri gidebilirler. Ara\u015ft\u0131rmac\u0131lar ge\u00e7enlerde b\u00f6yle b\u00fcy\u00fck bir pazarlama ajans\u0131 ke\u015ffettiler. Bu ajans olay\u0131 ileri g\u00f6t\u00fcr\u00fcp t\u00fcm d\u00fcnyadan 250 milyon Windows ve macOS bilgisayarlara reklam vir\u00fcs\u00fc y\u00fcklediler.<\/p>\n<p>Daha k\u00f6t\u00fcs\u00fc, bug\u00fcne kadar kimsenin fark etmedi\u011fi bu reklam vir\u00fcs\u00fc, kullan\u0131c\u0131y\u0131 ba\u015fka sitelere y\u00f6nlendirerek bilgisayarlar\u0131na vir\u00fcs de y\u00fckleyebiliyor.<\/p>\n<h2>Gizli Fireball (Alev topu)<\/h2>\n<p>Reklam vir\u00fcsleri, size reklam g\u00f6stererek veya hakk\u0131n\u0131zda veri toplayarak reklam ajanslar\u0131na, size reklam g\u00f6stermesi i\u00e7in satmak amac\u0131yla \u00fcretilen vir\u00fcslerdir. En yayg\u0131n \u015fekilde bilgisayarlara girme y\u00f6ntemi ise ba\u015fka yaz\u0131l\u0131mlar\u0131n yan\u0131nda y\u00fcklenmesidir. Bu yaz\u0131l\u0131m\u0131n geli\u015ftiricileri, sizlerin indirdi\u011finiz \u00fccretsiz uygulamalar\u0131n sahiplerine para \u00f6deyerek kendi \u00fcr\u00fcnlerini indirdi\u011finiz \u00fcr\u00fcn\u00fcn i\u00e7ine yerle\u015ftirirler. \u00dccretsiz uygulamalar\u0131n \u00fccretsiz olmas\u0131n\u0131n en belirgin sebeplerinden biri budur. Reklam vir\u00fcslerinden para kazanarak olabildi\u011fince \u00e7ok kullan\u0131c\u0131ya ula\u015fmak.<\/p>\n<p>Ancak bu \u00fcr\u00fcn birle\u015ftirme i\u015fi geli\u015ftiricilere ba\u011fl\u0131 olarak epey de\u011fi\u015fiklik g\u00f6sterebilir. Halbuki normalde indirdi\u011finiz uygulaman\u0131n yan\u0131nda \u2013 genellikle y\u00fckleme s\u0131ras\u0131nda \u2013 y\u00fcklenen di\u011fer uygulamalar hakk\u0131nda size bilgi verilir. Ancak bu Fireball kullan\u0131c\u0131ya y\u00fcklendi\u011fini bildirmedi\u011fi gibi y\u00fcklenmemesini de se\u00e7emiyorsunuz, haliyle gizlice bilgisayar\u0131n\u0131za y\u00fckleniyor. \u015eunu da belirtmekte fayda var, bu Firewall reklam vir\u00fcs\u00fc, indirdi\u011finiz \u00fccretsiz yaz\u0131l\u0131m ile beraber hemen y\u00fcklenmiyor. Daha sonra siz y\u00fcklemelere dikkat etmezken gizlice y\u00fckleniyor.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">My big fat adware cleaning (or why it's difficult to remove adware from your PC) \u2013 <a href=\"http:\/\/t.co\/LGtUqlKFgL\" target=\"_blank\" rel=\"noopener nofollow\">http:\/\/t.co\/LGtUqlKFgL<\/a> <a href=\"http:\/\/t.co\/wnSskYlXh2\" target=\"_blank\" rel=\"noopener nofollow\">pic.twitter.com\/wnSskYlXh2<\/a><\/p>\n<p>\u2014 KasperskyUK (@kasperskyuk) <a href=\"https:\/\/twitter.com\/kasperskyuk\/status\/562298359361576960?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">February 2, 2015<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Fireball i\u00e7in taray\u0131c\u0131 d\u00fc\u015fman\u0131 diyebiliriz. \u00c7\u00fcnk\u00fc sizin taray\u0131c\u0131n\u0131z\u0131, vir\u00fcs geli\u015ftiricilerinin istedi\u011fi gibi d\u00fczenliyor. D\u00fczenleme derken, giri\u015f sayfan\u0131z\u0131n de\u011fi\u015ftirilmesi, varsay\u0131lan arama motorunuzun de\u011fi\u015ftirilmesi, d\u00fczelmek i\u00e7in yapt\u0131\u011f\u0131n\u0131z giri\u015fimleri engelleme gibi \u015feylerden bahsediyoruz. Size g\u00f6sterdi\u011fi ger\u00e7ek arama motoruna ba\u011fl\u0131 sahte arama motoru arac\u0131l\u0131\u011f\u0131yla, yapt\u0131\u011f\u0131n\u0131z aramalar\u0131 takip edip verileri toparlayarak, reklam g\u00f6sterme konusunda kullan\u0131l\u0131yor. Ayn\u0131 zamanda, Fireball bula\u015fm\u0131\u015f bilgisayarlarda istedi\u011fi kodu \u00e7al\u0131\u015ft\u0131rarak istedi\u011fi taray\u0131c\u0131 eklentisini veya ba\u015fka program\u0131 y\u00fckleyebiliyor.<\/p>\n<p>As\u0131l ilgin\u00e7 olan ise, Fireball zararl\u0131 bir yaz\u0131l\u0131m olmas\u0131na ra\u011fmen sahip oldu\u011fu dijital sertifikalar\u0131n yasal olmas\u0131. B\u00f6ylelikle yaz\u0131l\u0131m zararl\u0131 oldu\u011fu anla\u015f\u0131lm\u0131yor. Ayr\u0131ca ba\u015fka ara\u00e7lar ve teknikler kullanarak g\u00fcvenlik \u00e7\u00f6z\u00fcmlerinin g\u00f6z\u00fcnden ka\u00e7\u0131yor ve \u201czararl\u0131\u201d olarak i\u015faretlenmekten ka\u00e7\u0131yor. Bu y\u00fczden salg\u0131n gibi yay\u0131lmas\u0131na ra\u011fmen fark edilemedi \u2013 Fireball tamamen normal bir uygulama gibi alg\u0131lan\u0131yor.<\/p>\n<h2>Fireball niye bu kadar tehlikeli<\/h2>\n<p>Fazla reklam ve takip edilmek rahats\u0131z edici ancak zarars\u0131z g\u00f6z\u00fck\u00fcyor. Ancak, Fireball\u2019\u0131n bula\u015ft\u0131\u011f\u0131 cihazlarda istedi\u011fi taray\u0131c\u0131 eklentisini y\u00fckleyebilmesi ve istedi\u011fi kodu \u00e7al\u0131\u015ft\u0131rabilmesi, cihazlarda bir backdoor \u2013 arka kap\u0131 olmas\u0131na sebep oluyor. Bu arka kap\u0131 da bir\u00e7ok farkl\u0131 \u015fekilde kullan\u0131labilir: genellikle bilgisayar\u0131n\u0131za zararl\u0131 \u015feyler y\u00fckleyerek, kritik bilgileri toplarlar veya ba\u015fka zararl\u0131 yaz\u0131l\u0131mlar y\u00fcklerler.<\/p>\n<p>Fireball\u2019\u0131 ke\u015ffeden ara\u015ft\u0131rmac\u0131lara g\u00f6re, \u015fimdiye kadar t\u00fcm d\u00fcnyadan 250 milyondan fazla cihaz\u0131 etkiledi ve her be\u015f kurumsal a\u011fdan birinde bulunuyor. E\u011fer bu program\u0131n geli\u015ftiricileri casusluk yapmak isterlerse, k\u00fcresel \u00f6l\u00e7ekte bir faciaya sebep olabilirler.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Fireball malware infects 250 million computers worldwide \u2013 <a href=\"https:\/\/t.co\/41FE02cqlO\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/t.co\/41FE02cqlO<\/a><\/p>\n<p>\u2014 Threatpost (@threatpost) <a href=\"https:\/\/twitter.com\/threatpost\/status\/870620418083889153?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">June 2, 2017<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<h2>Etkilenip etkilenmedi\u011fimi nas\u0131l anlayabilirim?<\/h2>\n<p>Fireball\u2019\u0131n gizlili\u011fine ra\u011fmen, ke\u015ffetmesi olduk\u00e7a kolay. Taray\u0131c\u0131n\u0131z\u0131 a\u00e7\u0131n ve ana sayfas\u0131na g\u00f6z at\u0131n \u2013 sizin ayarlad\u0131\u011f\u0131n\u0131z giri\u015f sayfas\u0131 m\u0131? Peki varsay\u0131lan arama motoru? Bunlar\u0131 istedi\u011finiz gibi de\u011fi\u015ftirebiliyor musunuz? E\u011fer bu sorulara cevab\u0131n\u0131z \u201chay\u0131r\u201d ise, bu yaz\u0131l\u0131mdan etkilenmi\u015f olabilirsiniz. Tabi ba\u015fka zararl\u0131 yaz\u0131l\u0131m da olabilir.<\/p>\n<p>E\u011fer cevab\u0131n\u0131z \u201cevet\u201d ise, b\u00fcy\u00fck ihtimalle Fireball\u2019dan etkilenmemi\u015fsinizdir. Ama yine de g\u00fczel bir tarama yapman\u0131zda fayda var. Sonradan pi\u015fman olaca\u011f\u0131n\u0131za, \u00f6nceden temkinli olun.<\/p>\n<h2>Kalkanlar ve Alev toplar\u0131<\/h2>\n<p>E\u011fer RPG (Role Playing Game) oyunlar\u0131n\u0131 seviyorsan\u0131z, alev toplar\u0131na kar\u015f\u0131 en iyi savunman\u0131n b\u00fcy\u00fc kalkanlar\u0131 oldu\u011funu biliriniz. Bu durumda da iyi bir g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fc sizin b\u00fcy\u00fc kalkan\u0131n\u0131z oluyor.<\/p>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"gandalf30\">\n<p>\u00d6rne\u011fin, bilgisayar\u0131n\u0131z\u0131 reklam vir\u00fcslerinden korumak i\u00e7in, Kaspersky Internet Security ayarlar\u0131ndan potansiyel istenmeyen programlar\u0131 engelleyebilirsiniz. Sonras\u0131nda program, bilgisayar\u0131n\u0131za izinsiz y\u00fcklenmeye \u00e7al\u0131\u015facak olan her t\u00fcrl\u00fc reklam yaz\u0131l\u0131m\u0131n\u0131 engelleyecektir. Nas\u0131l ayarlayaca\u011f\u0131n\u0131z\u0131 \u00f6\u011frenmek i\u00e7in linke t\u0131klayabilirsiniz.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Reklamlar bazen s\u0131k\u0131c\u0131 olabilir \u2013 bazen de zararl\u0131 olabilir. Reklam satarak para kazanan baz\u0131 i\u015fletmeler, reklam\u0131 sizin g\u00f6z\u00fcn\u00fcze sokmak i\u00e7in \u00e7ok ileri gidebilirler. Ara\u015ft\u0131rmac\u0131lar ge\u00e7enlerde b\u00f6yle b\u00fcy\u00fck bir pazarlama ajans\u0131 ke\u015ffettiler. Bu ajans olay\u0131 ileri g\u00f6t\u00fcr\u00fcp t\u00fcm d\u00fcnyadan 250 milyon Windows ve macOS bilgisayarlara reklam vir\u00fcs\u00fc y\u00fcklediler.<\/p>\n","protected":false},"author":675,"featured_media":3270,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1287,1351],"tags":[1248,1204,1170,36,791,1247,113,553],"class_list":{"0":"post-3269","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"category-threats","9":"tag-fireball","10":"tag-hijacking","11":"tag-macos","12":"tag-malware-2","13":"tag-reklam","14":"tag-reklam-virusu","15":"tag-windows","16":"tag-zararli-yazilim-2"},"hreflang":[{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/fireball-adware\/3269\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/fireball-adware\/7863\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/fireball-adware\/4282\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/fireball-adware\/11510\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/fireball-adware\/10597\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/fireball-adware\/10513\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/fireball-adware\/13086\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/fireball-adware\/13160\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/fireball-adware\/17777\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/fireball-adware\/17015\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/fireball-adware\/8858\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/fireball-adware\/9141\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/fireball-adware\/6855\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/fireball-adware\/13233\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/fireball-adware\/15987\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/fireball-adware\/17015\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/fireball-adware\/17015\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.tr\/blog\/tag\/malware-2\/","name":"malware"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/3269","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/users\/675"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=3269"}],"version-history":[{"count":5,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/3269\/revisions"}],"predecessor-version":[{"id":7052,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/3269\/revisions\/7052"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media\/3270"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=3269"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=3269"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=3269"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}