{"id":4367,"date":"2017-11-03T10:54:18","date_gmt":"2017-11-03T07:54:18","guid":{"rendered":"https:\/\/www.kaspersky.com.tr\/blog\/?p=4367"},"modified":"2019-11-15T14:47:04","modified_gmt":"2019-11-15T11:47:04","slug":"cryptoshuffler-bitcoin-stealer","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.tr\/blog\/cryptoshuffler-bitcoin-stealer\/4367\/","title":{"rendered":"166.666 USD de\u011ferinde Bitcoin \u00e7alan Truva At\u0131: CryptoShuffler"},"content":{"rendered":"<p>Pizza sat\u0131n almak i\u00e7in Bitcoin ile \u00f6deme yapmaya karar verdi\u011finizi hayal edin. Pizzac\u0131n\u0131n web sitesindeki c\u00fczdan adresini kopyalad\u0131n\u0131z, gereken tutar\u0131 girdiniz ve G\u00f6nder tu\u015funa bast\u0131n\u0131z. Aktar\u0131m ger\u00e7ekle\u015fti ama pizza gelmedi ve pizzac\u0131n\u0131n sahipleri \u00f6demeyi hi\u00e7 almad\u0131klar\u0131n\u0131 iddia ediyor. Peki bu nas\u0131l olur? Hemen pizzac\u0131lara sinirlenmeyin. \u00c7\u00fcnk\u00fc sorun CryptoShuffler olabilir. <\/p>\n<p>Kripto fidye yaz\u0131l\u0131mlar\u0131n\u0131n aksine bu Truva At\u0131 g\u00f6steri\u015fli efektlerden ka\u00e7\u0131n\u0131r hatta tam tersine fark edilmemek i\u00e7in elinden geleni yapar. Bilgisayar haf\u0131zas\u0131na sessizce yerle\u015fir ve kopyala\/yap\u0131\u015ft\u0131r i\u015flemlerinin ge\u00e7ici depolama alan\u0131 olan panoyu izlemeye ba\u015flar.<\/p>\n<p>CryptoShuffler, panoda bir kripto para birimi c\u00fczdan adresi alg\u0131lad\u0131\u011f\u0131 anda (bu adresleri sat\u0131r uzunlu\u011fu ve belirli karakterler arac\u0131l\u0131\u011f\u0131yla ay\u0131rt etmek \u00e7ok kolayd\u0131r) adresi bir ba\u015fkas\u0131yla de\u011fi\u015ftirir. Sonu\u00e7 olarak kripto para birimi aktar\u0131m\u0131, \u00f6deyen ki\u015finin girdi\u011fi tutarda ger\u00e7ekle\u015fir. Ancak \u00f6demeyi pizzac\u0131 de\u011fil CryptoShuffler&#8217;\u0131n arkas\u0131ndaki su\u00e7lular al\u0131r.<\/p>\n<p>Kaspersky Lab, bu Truva At\u0131&#8217;n\u0131 inceledikten sonra bu k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131n yaln\u0131zca Bitcoin&#8217;i de\u011fil ayn\u0131 zamanda Ethereum, Zcash, Monero, Dash ve Dogecoin gibi di\u011fer kripto para birimlerini de hedef ald\u0131\u011f\u0131n\u0131 ke\u015ffetti. Bitcoin c\u00fczdanlar\u0131n\u0131n yerini almak bu Truva At\u0131&#8217;n\u0131n en k\u00e2rl\u0131 faaliyeti. Bu makale yay\u0131nland\u0131\u011f\u0131 s\u0131rada, sald\u0131rganlar toplamda 23 BTC&#8217;den (g\u00fcn\u00fcm\u00fcz\u00fcn kuru ile 637,449.50 \u20ba &#8211; 166,666.67) biraz daha fazla paray\u0131 ele ge\u00e7irmi\u015flerdi. <\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2017\/11\/03104107\/cryptoshuffler-bitcoin-stats.png\" alt=\"\" width=\"1700\" height=\"300\" class=\"alignnone size-full wp-image-4369\" \/><\/p>\n<p>CryptoShuffler yaz\u0131l\u0131m\u0131n\u0131n yarat\u0131c\u0131lar\u0131na ait di\u011fer kripto para c\u00fczdanlar\u0131n\u0131n toplam tutar\u0131n\u0131n ise onlarca ve binlerce dolar aras\u0131nda de\u011fi\u015fti\u011fi ortaya \u00e7\u0131kt\u0131.<\/p>\n<p>Truva At\u0131&#8217;n\u0131n bu miktarda paray\u0131 toplamas\u0131 bir y\u0131ldan biraz daha uzun s\u00fcrd\u00fc. 2016&#8217;n\u0131n sonlar\u0131ndaki zirve noktas\u0131n\u0131n ard\u0131ndan bir d\u00fc\u015f\u00fc\u015f ger\u00e7ekle\u015fti. Ancak 2017 Haziran ay\u0131nda CryptoShuffler yeniden harekete ge\u00e7ti.<\/p>\n<p>Bu Truva At\u0131, vir\u00fcsl\u00fc bir bilgisayar\u0131n veya ak\u0131ll\u0131 telefonunun mutlaka yava\u015flamas\u0131 veya fidye mesajlar\u0131 g\u00f6stermesi gerekmedi\u011fini a\u00e7\u0131k\u00e7a g\u00f6sterir. Tam aksine bir\u00e7ok k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m t\u00fcr\u00fc dikkat \u00e7ekmemeye ve m\u00fcmk\u00fcn oldu\u011funca gizli hareket etmeye \u00e7al\u0131\u015f\u0131r. Ne kadar uzun s\u00fcre tespit edilemezlerse tasar\u0131mc\u0131lar\u0131na o kadar \u00e7ok para kazand\u0131r\u0131rlar. <\/p>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"android-malware\" \/>\n<p>Bu nedenle t\u00fcm kripto para kullan\u0131c\u0131lar\u0131na dikkatli olmalar\u0131n\u0131 ve kendilerini korumalar\u0131n\u0131 \u00f6neriyoruz. \u00dcr\u00fcnlerimiz, CryptoShuffler yaz\u0131l\u0131m\u0131n\u0131 Trojan-Banker.Win32.CryptoShuffler.gen olarak tespit eder ve tabii ki bu yaz\u0131l\u0131m\u0131n b\u00fct\u00fcn faaliyetlerini engeller.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Pizza sat\u0131n almak i\u00e7in Bitcoin ile \u00f6deme yapmaya karar verdi\u011finizi hayal edin. Pizzac\u0131n\u0131n web sitesindeki c\u00fczdan adresini kopyalad\u0131n\u0131z, gereken tutar\u0131 girdiniz ve G\u00f6nder tu\u015funa bast\u0131n\u0131z. Aktar\u0131m ger\u00e7ekle\u015fti ama pizza gelmedi ve pizzac\u0131n\u0131n sahipleri \u00f6demeyi hi\u00e7 almad\u0131klar\u0131n\u0131 iddia ediyor. Peki bu nas\u0131l olur? Hemen pizzac\u0131lara sinirlenmeyin. \u00c7\u00fcnk\u00fc sorun CryptoShuffler olabilir. <\/p>\n","protected":false},"author":40,"featured_media":4368,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1351],"tags":[667,374,1427,625,1336,241],"class_list":{"0":"post-4367","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-threats","8":"tag-arastirma","9":"tag-bitcoin","10":"tag-cryptoshuffler","11":"tag-koruma","12":"tag-kripto-para-birimi","13":"tag-trojan"},"hreflang":[{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/cryptoshuffler-bitcoin-stealer\/4367\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/cryptoshuffler-bitcoin-stealer\/11740\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/cryptoshuffler-bitcoin-stealer\/9780\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/cryptoshuffler-bitcoin-stealer\/13137\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/cryptoshuffler-bitcoin-stealer\/12048\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/cryptoshuffler-bitcoin-stealer\/11686\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/cryptoshuffler-bitcoin-stealer\/14701\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/cryptoshuffler-bitcoin-stealer\/14430\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/cryptoshuffler-bitcoin-stealer\/19112\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/cryptoshuffler-bitcoin-stealer\/19976\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/cryptoshuffler-bitcoin-stealer\/9732\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/cryptoshuffler-bitcoin-stealer\/8467\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/cryptoshuffler-bitcoin-stealer\/15144\/"},{"hreflang":"zh","url":"https:\/\/www.kaspersky.com.cn\/blog\/cryptoshuffler-bitcoin-stealer\/8792\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/cryptoshuffler-bitcoin-stealer\/18579\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/cryptoshuffler-bitcoin-stealer\/19013\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/cryptoshuffler-bitcoin-stealer\/19005\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.tr\/blog\/tag\/bitcoin\/","name":"bitcoin"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/4367","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/users\/40"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=4367"}],"version-history":[{"count":2,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/4367\/revisions"}],"predecessor-version":[{"id":7011,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/4367\/revisions\/7011"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media\/4368"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=4367"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=4367"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=4367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}