{"id":5422,"date":"2018-11-23T15:25:38","date_gmt":"2018-11-23T12:25:38","guid":{"rendered":"https:\/\/www.kaspersky.com.tr\/blog\/?p=5422"},"modified":"2019-11-15T14:36:18","modified_gmt":"2019-11-15T11:36:18","slug":"black-friday-phishing-2018","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.tr\/blog\/black-friday-phishing-2018\/5422\/","title":{"rendered":"\u0130ndirim d\u00f6neminde al\u0131\u015fveri\u015f ve doland\u0131r\u0131c\u0131l\u0131k"},"content":{"rendered":"

Kas\u0131m, y\u0131l\u0131n en yo\u011fun al\u0131\u015fveri\u015f sezonunun ilk ay\u0131d\u0131r. Her \u015fey, \u00c7in\u2019de Bekarlar G\u00fcn\u00fc olarak bilinen 11.11\u2019de ba\u015flam\u0131\u015f ve d\u00fcnya \u00fczerindeki en b\u00fcy\u00fck \u00e7evrimi\u00e7i (ve \u00e7evrimd\u0131\u015f\u0131) al\u0131\u015fveri\u015f g\u00fcnlerinden biri haline gelmi\u015ftir. Hemen ard\u0131ndan, bu sene 23 Kas\u0131m\u2019a denk gelen Black Friday, onun arkas\u0131ndan ise, Noel ve Y\u0131lba\u015f\u0131 g\u00fcndeme gelmektedir. Her seferinde indirim ve promosyon kullanarak al\u0131\u015fveri\u015f yapan insanlar i\u00e7in y\u0131l\u0131n bu d\u00f6nemi harika bir zamand\u0131r. T\u00fcm bu cazip tekliflerin dezavantaj\u0131 nedir? \u00c7o\u011fu insan gard\u0131n\u0131 d\u00fc\u015f\u00fcr\u00fcr ve siber su\u00e7lular i\u00e7in kolay av bir haline gelir.<\/p>\n

Doland\u0131r\u0131c\u0131l\u0131k istatistikleri<\/h2>\n

Son y\u0131llarda, finansal doland\u0131r\u0131c\u0131l\u0131k y\u0131l boyunca ger\u00e7ekle\u015ftirilen doland\u0131r\u0131c\u0131l\u0131k sald\u0131r\u0131lar\u0131n\u0131n tamam\u0131n\u0131n en az\u0131ndan d\u00f6rtte birini olu\u015fturmaktad\u0131r. 2017\u2019de finansal doland\u0131r\u0131c\u0131l\u0131k, toplam sald\u0131r\u0131 say\u0131s\u0131n\u0131n yar\u0131s\u0131ndan daha fazlas\u0131n\u0131 olu\u015fturmu\u015ftur.<\/p>\n

\"\"

Son y\u0131llarda finansal doland\u0131r\u0131c\u0131l\u0131k oran\u0131ndaki art\u0131\u015f<\/p><\/div>\n

Grafik finansal doland\u0131r\u0131c\u0131l\u0131k oran\u0131n\u0131n 2014\u2019ten bu yana her y\u0131l artt\u0131\u011f\u0131n\u0131 g\u00f6stermektedir. Giderek artan bu e\u011filimin 2018\u2019in geri kalan\u0131nda da devam edece\u011fini s\u00f6ylemek yerinde olur.<\/p>\n

\u0130nternetten al\u0131\u015fveri\u015f yapan m\u00fc\u015fterileri ve \u00f6deme sistemlerini hedef alan sald\u0131r\u0131lar\u0131n say\u0131s\u0131 indirim d\u00f6nemi boyunca ciddi oranda artmaktad\u0131r. \u0130statistiklerimize g\u00f6re, bu d\u00f6nemde ger\u00e7ekle\u015fen finansal doland\u0131r\u0131c\u0131l\u0131k say\u0131s\u0131 toplam sald\u0131r\u0131 say\u0131s\u0131nda %10\u2019luk bir ek dilime sahiptir. \u0130ndirim sezonu d\u0131\u015f\u0131nda doland\u0131r\u0131c\u0131lar banka m\u00fc\u015fterilerini tercih etmektedir.<\/p>\n

Bekarlar G\u00fcn\u00fc\u2019nde, \u00e7\u00f6z\u00fcmlerimizin kullan\u0131c\u0131lar\u0131 tehlikeli kaynaklardan uzak tutmak i\u00e7in engelledi\u011fi sald\u0131r\u0131 giri\u015fimi say\u0131s\u0131nda ani bir art\u0131\u015f g\u00f6zlemledik.<\/p>\n

\"\"

Kullan\u0131c\u0131lar\u0131 doland\u0131r\u0131c\u0131l\u0131k sitelerine y\u00f6nlendirmeyi ama\u00e7layan ve \u00e7\u00f6z\u00fcmlerimiz taraf\u0131ndan engellenen sald\u0131r\u0131 giri\u015fimi say\u0131s\u0131<\/p><\/div>\n

9 Kas\u0131m\u2019da ani bir art\u0131\u015f ya\u015fanm\u0131\u015ft\u0131r; siber su\u00e7lular\u0131n sald\u0131r\u0131lar\u0131 i\u00e7in her zaman \u00f6nceden haz\u0131rl\u0131k yapt\u0131klar\u0131 g\u00f6z \u00f6n\u00fcnde bulunduruldu\u011funda, bu art\u0131\u015f hi\u00e7 \u015fa\u015f\u0131rt\u0131c\u0131 de\u011fildir. Kitlesel sald\u0131r\u0131lar genellikle indirimli sat\u0131\u015f g\u00fcnlerinden hemen \u00f6nce ger\u00e7ekle\u015ftirilmektedir.<\/p>\n

Yaln\u0131zca Alibaba Group m\u00fc\u015fterilerine kar\u015f\u0131 ger\u00e7ekle\u015ftirilen sald\u0131r\u0131lara bak\u0131ld\u0131\u011f\u0131nda bile ba\u015frol\u00fcn Bekarlar G\u00fcn\u00fc\u2019nde oldu\u011fu g\u00f6r\u00fclebilir, e\u011filim tamamen ayn\u0131 seyirde devam eder; bu d\u00f6nemde ger\u00e7ekle\u015fen sald\u0131r\u0131lar\u0131n say\u0131s\u0131 Kas\u0131m ay\u0131nda ger\u00e7ekle\u015fen ortalama sald\u0131r\u0131 say\u0131s\u0131n\u0131n yakla\u015f\u0131k iki kat\u0131 b\u00fcy\u00fckl\u00fc\u011f\u00fcndedir.<\/p>\n

\"\"

Alibaba Group hizmetlerini taklit ederek kullan\u0131c\u0131lar\u0131 doland\u0131r\u0131c\u0131l\u0131k kaynaklar\u0131na y\u00f6nlendirmeyi ama\u00e7layan ve \u00e7\u00f6z\u00fcmlerimiz taraf\u0131ndan engellenen sald\u0131r\u0131 giri\u015fimi say\u0131s\u0131<\/p><\/div>\n

11.11 Bekarlar G\u00fcn\u00fc doland\u0131r\u0131c\u0131l\u0131\u011f\u0131<\/h2>\n

Siber d\u00fcnyan\u0131n k\u00f6t\u00fc karakterleri, olu\u015fturduklar\u0131 say\u0131s\u0131z doland\u0131r\u0131c\u0131l\u0131k sitesiyle, gayriresmi \u201cD\u00fcnya Al\u0131\u015fveri\u015f G\u00fcn\u00fc\u201d olarak da bilinen Bekarlar G\u00fcn\u00fc i\u00e7in \u201chaz\u0131r ol\u201dda bekliyordu.<\/p>\n

\"\"

Alibaba kullan\u0131c\u0131 hesab\u0131 verilerini elde etmeyi ama\u00e7layan bir doland\u0131r\u0131c\u0131l\u0131k web sitesi<\/p><\/div>\n

Yukar\u0131daki ekran g\u00f6r\u00fcnt\u00fcs\u00fcnde, standart sosyal m\u00fchendislik tekniklerini kullanan bir web sitesinde yer alan temel unsurlar g\u00f6r\u00fclebilir: dikkatsiz veya saf kullan\u0131c\u0131lar\u0131n kafas\u0131n\u0131 kar\u0131\u015ft\u0131rma amac\u0131yla URL i\u00e7erisine yerle\u015ftirilmi\u015f birden fazla \u201calibaba\u201d ifadesi, sahicilik katma amac\u0131yla yerle\u015ftirilmi\u015f \u015firket logosu ve kullan\u0131c\u0131lar\u0131n dikkatini da\u011f\u0131tma amac\u0131yla kullan\u0131lm\u0131\u015f \u015fa\u015faal\u0131 bir resim. A\u015fa\u011f\u0131daki ekran g\u00f6r\u00fcnt\u00fcs\u00fc ise benzer bir doland\u0131r\u0131c\u0131l\u0131k sayfas\u0131n\u0131 \u00f6rneklemektedir.<\/p>\n

\"\"

S\u00f6zde Amazon indirimleri sunan doland\u0131r\u0131c\u0131 site<\/p><\/div>\n

ABD\u2019nin internetten al\u0131\u015fveri\u015f piyasas\u0131ndaki devi Amazon, hem yapt\u0131\u011f\u0131 sat\u0131\u015flar\/uygulad\u0131\u011f\u0131 promosyonla hem de \u015firket sitelerinin sahte versiyonlar\u0131n\u0131 yaratmaya \u00e7al\u0131\u015fan siber su\u00e7lular aras\u0131ndaki pop\u00fclaritesi a\u00e7\u0131s\u0131ndan Alibaba\u2019yla e\u015fde\u011fer.<\/p>\n

\"\"

Kaspersky kullan\u0131c\u0131lar\u0131n\u0131 amazon temal\u0131 doland\u0131r\u0131c\u0131l\u0131k sitelerine y\u00f6nlendirmeyi ama\u00e7layan ve \u00e7\u00f6z\u00fcmlerimiz taraf\u0131ndan engellenen sald\u0131r\u0131 giri\u015fimlerinin grafi\u011fi<\/p><\/div>\n

Siber su\u00e7lular doland\u0131r\u0131c\u0131l\u0131k sald\u0131r\u0131lar\u0131nda benzer bir form\u00fcl kullanma e\u011filimindedir. Tuzaklar\u0131nda kulland\u0131klar\u0131 ilk yem, kazan\u00e7l\u0131 tekliflerdir. Fakat kullan\u0131c\u0131lardan bu f\u0131rsattan yararlanmadan \u00f6nce adres ve telefon numaras\u0131 gibi t\u00fcm ki\u015fisel ayr\u0131nt\u0131lar\u0131n\u0131 talep eden bir bilgi formu doldurmalar\u0131 istenir. Kullan\u0131c\u0131lar formu doldurdu\u011funda, bu ba\u011flant\u0131y\u0131 arkada\u015flar\u0131na iletmeleri y\u00f6n\u00fcnde bir istemle kar\u015f\u0131la\u015f\u0131r. Kullan\u0131c\u0131lar\u0131n s\u00f6z konusu f\u0131rsattan hi\u00e7bir \u015fekilde yararlanamad\u0131\u011f\u0131n\u0131 s\u00f6ylemeye gerek bile yok. Kurban say\u0131s\u0131z gereksiz anket doldurarak o siteden bu siteye savrulur durur.<\/p>\n

\"\"

S\u00f6zde Amazon indirimleri sunan doland\u0131r\u0131c\u0131 site<\/p><\/div>\n

Black Friday doland\u0131r\u0131c\u0131l\u0131\u011f\u0131<\/h2>\n

Black friday\u2019in resmi g\u00fcn\u00fc 23 Kas\u0131m\u2019d\u0131r fakat bir\u00e7ok ma\u011faza, indirimlerini birka\u00e7 g\u00fcn \u00f6nceden ba\u015flat\u0131r. \u0130statistikleri g\u00f6z \u00f6n\u00fcnde bulundurdu\u011fumuzda Black Friday \u00f6ncesindeki d\u00f6nemde doland\u0131r\u0131c\u0131l\u0131k sald\u0131r\u0131lar\u0131nda ciddi bir art\u0131\u015f \u00f6ng\u00f6rmekteyiz. Ayr\u0131ca, blackfridayscom.tld ve black-fridaywalmart.tld gibi bir\u00e7ok kay\u0131tl\u0131 (ve \u015fimdiye kadar ke\u015ffedilmemi\u015f) site mevcuttur. Black Friday\u2019e yakla\u015ft\u0131\u011f\u0131m\u0131z tarihlerde bu web siteleri, masum m\u00fc\u015fterilerin ki\u015fisel bilgilerini ve hesap bilgilerini ele ge\u00e7irmeyi ama\u00e7layan siber su\u00e7lular\u0131n olu\u015fturdu\u011fu i\u00e7eriklerle dolup ta\u015fmaktad\u0131r.<\/p>\n

Asl\u0131na bakarsan\u0131z, Black Friday 2018 ile ilgili doland\u0131r\u0131c\u0131l\u0131k faaliyetleri g\u00f6rmeye ba\u015flad\u0131k bile. Doland\u0131r\u0131c\u0131lar, Black Friday\u2019e \u00f6zel indirim sunan sahte sitelere ve taklit\u00e7i ma\u011fazalara y\u00f6nlendiren doland\u0131r\u0131c\u0131l\u0131k e-postalar\u0131yla kendilerini g\u00f6stermeye ba\u015flad\u0131.<\/p>\n

\"\"

Latin Amerika\u2019n\u0131n pop\u00fcler sanal pazar alanlar\u0131ndan biri olan Mercado Livre kullan\u0131c\u0131lar\u0131na y\u00f6nelik doland\u0131r\u0131c\u0131l\u0131k sald\u0131r\u0131s\u0131<\/p><\/div>\n

Walmart\u2019\u0131 taklit eden bu sahte ma\u011fazan\u0131n alan ad\u0131, olu\u015fturulma amac\u0131 hakk\u0131nda \u00e7ok fazla \u015fey anlat\u0131yor. Site tipik doland\u0131r\u0131c\u0131l\u0131k form\u00fcl\u00fcn\u00fc takip etmektedir. Yepyeni bir televizyon i\u00e7in sundu\u011fu kar\u015f\u0131 konulmaz indirimle m\u00fc\u015fterilerini avlamaktad\u0131r. Al\u0131\u015fveri\u015f s\u00fcreci ba\u015flad\u0131\u011f\u0131nda, m\u00fc\u015fteriler gizli bilgilerine ili\u015fkin formlar\u0131 doldurmakta ve fark\u0131nda olmadan \u00f6zel bir \u00e7evrimi\u00e7i c\u00fczdana \u00f6deme yapmaktad\u0131r.<\/p>\n

\"\"

Walmart\u2019\u0131n web sitesini taklit eden doland\u0131r\u0131c\u0131l\u0131k sayfas\u0131<\/p><\/div>\n

Doland\u0131r\u0131c\u0131l\u0131k e-postalar\u0131yla ilgili olarak, Netflix\u2019e iki ayl\u0131k \u00fccretsiz \u00fcyelik sunan bir sahte Black Friday promosyonu ke\u015ffettik. Promosyondan faydalanmak isteyen kullan\u0131c\u0131lar kredi kart\u0131 bilgilerini ve di\u011fer ki\u015fisel bilgilerini girmeleri istenen sahte bir Netflix sitesine y\u00f6nlendirilir. Doland\u0131r\u0131c\u0131l\u0131k kurbanlar\u0131 hi\u00e7bir \u015fey elde edemezken, b\u00fct\u00fcn bu veriler sald\u0131rganlar\u0131n eline ge\u00e7er. Kullan\u0131c\u0131lar, \u00fccretsiz bir Netflix \u00fcyeli\u011fi yerine doland\u0131r\u0131c\u0131lar taraf\u0131ndan ele ge\u00e7irilen banka hesaplar\u0131yla y\u00fczle\u015fir.<\/p>\n

\"\"

Netflix\u2019i taklit eden bir doland\u0131r\u0131c\u0131l\u0131k kayna\u011f\u0131: banka ve di\u011fer gizli bilgilere ili\u015fkin talep<\/p><\/div>\n

Black Friday \u00f6ncesinde, k\u00fcresel markalarda a\u011f\u0131z suland\u0131r\u0131c\u0131 indirimler sunan \u00e7e\u015fitli sahte internet ma\u011fazas\u0131 da bulunmaktad\u0131r.<\/p>\n

\"\"

Pop\u00fcler bir markan\u0131n s\u0131cak tutan bir k\u0131\u015f ceketi i\u00e7in olduk\u00e7a \u00e7\u0131lg\u0131n fakat bir o kadar da sahte bir indirim teklifi<\/p><\/div>\n

\u0130nternetten yapt\u0131\u011f\u0131n\u0131z al\u0131\u015fveri\u015flerde bir \u015fey ger\u00e7ek olamayacak kadar cazipse, muhtemelen ger\u00e7ek de\u011fildir. Buradaki durum da tam olarak budur. Sepetimize \u00fcr\u00fcnleri koyarak, \u00f6deme sayfas\u0131na ilerledik. Web sitesi tasar\u0131mc\u0131lar\u0131 do\u011frulama simgeleri konusunda kesinlikle cimri davranmaz.<\/p>\n

Fakat asl\u0131nda, bu simgeler t\u0131klanamayan resimlerdir. Dikkatli bir kullan\u0131c\u0131 bu durumu hemen fark eder. Dikkatli kullan\u0131c\u0131lar kadar tedbirli olmayan ziyaret\u00e7iler standart bir g\u00f6nderi formu dolduracak ve al\u0131\u015fveri\u015flerini tamamlamak i\u00e7in \u00f6deme bilgilerini gireceklerdir. T\u00fcm bu bilgiler doland\u0131r\u0131c\u0131lara aktar\u0131l\u0131r ve \u0131s\u0131t\u0131c\u0131 k\u0131\u015f ceketi hayali de oldu\u011fu gibi suya d\u00fc\u015fer.<\/p>\n

\"\"

Sahte bir ma\u011fazan\u0131n sitesi \u00fczerindeki banka kart\u0131 bilgilerini \u00e7almay\u0131 ama\u00e7layan sahte bir sayfa. Do\u011frulama simgelerinin \u00e7o\u011fu resimdir.<\/p><\/div>\n

Bir ma\u011fazan\u0131n ger\u00e7ek veya sahte oldu\u011fu nas\u0131l anla\u015f\u0131l\u0131r?<\/h2>\n