Di\u011fer bir deyi\u015fle porno \u00f6zel bir kitleye y\u00f6nelik, gizli ve tabula\u015ft\u0131r\u0131lm\u0131\u015f bir i\u00e7erik t\u00fcr\u00fcnden herkese a\u00e7\u0131k sitelerinkine benzer bir kitleye sahip ana ak\u0131m e\u011flence bi\u00e7imi haline gelmektedir. Reklamc\u0131l\u0131k sekt\u00f6r\u00fcnde dedikleri gibi cinsellik her zaman satar. Ancak siber alanda cinsellik, yaln\u0131zca sat\u0131\u015f olu\u015fturmakla kalmaz ayn\u0131 zamanda k\u00f6t\u00fc ama\u00e7l\u0131 eylemler i\u00e7in bir ara\u00e7 olarak kullan\u0131l\u0131r.<\/p>\n
Bu, yeni bir geli\u015fme de\u011fildir. Hatta Kaspersky Lab, internette yeti\u015fkinlere y\u00f6nelik i\u00e7erikler yer almaya ba\u015flad\u0131\u011f\u0131ndan beri su\u00e7lular\u0131n pornografik i\u00e7erikleri k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar i\u00e7in yem olarak kulland\u0131\u011f\u0131n\u0131 g\u00f6zlemlemi\u015ftir. Ancak \u015fimdiye kadar bu sorunu derinlemesine inceleme \u015fans\u0131 bulamam\u0131\u015ft\u0131k.<\/p>\n
Bu genel incelemeyi yapma fikri, tamamen farkl\u0131 bir i\u015fle u\u011fra\u015f\u0131rken akl\u0131m\u0131za geldi. Dark Web\u2019teki yeralt\u0131 ve yar\u0131 yeralt\u0131 pazarlarda sat\u0131lan yasal ve yasa d\u0131\u015f\u0131 mal t\u00fcrleriyle ilgili bilgi ararken uyu\u015fturucu, silahlar, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar vb. mallar\u0131n aras\u0131nda pornografik web sitelerine giri\u015f bilgilerinin de sat\u0131\u015f i\u00e7in sunuldu\u011funu fark ettik. Dark Web \u00fczerine sat\u0131n alabilece\u011finiz di\u011fer dijital mallar\u0131n aksine bu hesaplar, s\u0131n\u0131rs\u0131z say\u0131da ve \u00e7ok d\u00fc\u015f\u00fck fiyatlara sat\u0131lmaktayd\u0131. Kendimize \u015fu soruyu sorduk: Bu kadar \u00e7ok hesap nereden geliyor?<\/p>\n
Bunun kayna\u011f\u0131, do\u011frudan pornografik web sitelerinin kendileri olabilirdi. A\u00e7\u0131k kaynak istihbarat\u0131n\u0131 kullanarak yapt\u0131\u011f\u0131m\u0131z k\u0131sa ara\u015ft\u0131rmada 2016 y\u0131l\u0131ndan itibaren, yeti\u015fkinlere y\u00f6nelik web siteleri i\u00e7in 72 milyondan fazla hesap bilgisinin \u00e7al\u0131nd\u0131\u011f\u0131n\u0131 ve daha sonra bu bilgilerin internette ortaya \u00e7\u0131kt\u0131\u011f\u0131n\u0131 \u00f6\u011frendik. Bu hesaplar; Cams.com (62,6 milyon), Penthouse.com (7,1 milyon), Stripshow (1,42 milyon), 380.000 adet xHamster<\/a> hesab\u0131 ve Brazzers<\/a> verilerinden yakla\u015f\u0131k 791.000 hesab\u0131 i\u00e7eriyordu<\/a>. Bu istatistikler, AdultFriendFinder web sitesinden \u00e7al\u0131nan yakla\u015f\u0131k 400 milyon hesap bilgisini kapsam\u0131yor. AdultFriendFinder, izleyicilere i\u00e7erik sunmak yerine kullan\u0131c\u0131lar\u0131n ger\u00e7ek hayatta g\u00f6r\u00fc\u015fmelerini sa\u011flayan bir sitedir.<\/p>\n Peki hepsi bu kadar m\u0131? Premium porno web sitesi hesab\u0131n\u0131n bilgilerini kaybetmek (ve bunun sonucundan if\u015fa ve \u015fantaj tehdidiyle kar\u015f\u0131la\u015fmak), kullan\u0131c\u0131lar\u0131n \u00e7evrimi\u00e7i pronografi nedeniyle maruz kald\u0131\u011f\u0131 tek risk mi? Bu sorunun cevab\u0131n\u0131 bulmaya karar verdik. Bu ama\u00e7la siber su\u00e7lular\u0131n eylemlerinde yeti\u015fkinlere y\u00f6nelik i\u00e7erikleri nas\u0131l, hangi \u00f6l\u00e7\u00fcde ve hangi ama\u00e7la kulland\u0131klar\u0131n\u0131 \u00f6\u011frenmek i\u00e7in k\u00f6t\u00fc ama\u00e7l\u0131 tehdit ortam\u0131n\u0131 incelemeye ba\u015flad\u0131k. Bu genel incelemenin temel amac\u0131, siber su\u00e7lular i\u00e7in kolay bir hedef haline gelebilecek yeti\u015fkinlere y\u00f6nelik i\u00e7erik t\u00fcketicilerinin siber g\u00fcvenlik fark\u0131ndal\u0131\u011f\u0131n\u0131 art\u0131rmakt\u0131r.<\/p>\n Masa\u00fcst\u00fc kullan\u0131c\u0131lar\u0131na y\u00f6nelik tehditler:<\/strong><\/p>\n Mobil kullan\u0131c\u0131lara y\u00f6nelik tehditler:<\/strong><\/p>\n Yeralt\u0131 d\u00fcnyas\u0131na h\u0131zl\u0131 bir bak\u0131\u015f:<\/strong><\/p>\n 1. B\u00f6l\u00fcm: Masa\u00fcst\u00fc kullan\u0131c\u0131lar\u0131na y\u00f6nelik tehditler\n<\/p> Kullan\u0131c\u0131lar\u0131n masa\u00fcst\u00fc bir bilgisayarda pornografik i\u00e7erikleri kullan\u0131rken kar\u015f\u0131la\u015fabilece\u011fi tehditleri, kimlik av\u0131 ve k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m olmak \u00fczere iki ana kategoriye ay\u0131rabiliriz. PC kullan\u0131c\u0131lar\u0131n\u0131n k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlarla kar\u015f\u0131la\u015fma olas\u0131l\u0131\u011f\u0131 Mac kullan\u0131c\u0131lar\u0131na g\u00f6re daha y\u00fcksek olmas\u0131na ra\u011fmen kimlik av\u0131 sald\u0131r\u0131lar\u0131, her iki platform i\u00e7in de yayg\u0131n bir tehdittir. Dolay\u0131s\u0131yla bu b\u00f6l\u00fcme kimlik av\u0131 sald\u0131r\u0131lar\u0131n\u0131 ele alarak ba\u015fl\u0131yoruz.<\/p>\n Pornografik kimlik av\u0131 sald\u0131r\u0131lar\u0131<\/strong><\/p>\n Kimlik av\u0131 parolalar, kredi kart\u0131 bilgileri, banka kart\u0131 bilgileri ve di\u011fer gizli bilgiler gibi kullan\u0131c\u0131 kimlik verilerini ele ge\u00e7irmek amac\u0131yla kullan\u0131lan bir t\u00fcr internet doland\u0131r\u0131c\u0131l\u0131\u011f\u0131d\u0131r. Kimlik av\u0131 sald\u0131r\u0131lar\u0131n\u0131n \u00e7o\u011fu pornografik i\u00e7eriklerle ilgili de\u011fildir. Bu sald\u0131r\u0131lar, genellikle bankalardan, hizmet sa\u011flay\u0131c\u0131lar\u0131ndan ve di\u011fer kurulu\u015flardan gelen ve al\u0131c\u0131y\u0131 ki\u015fisel verilerinde acil bir de\u011fi\u015fiklik yapmas\u0131 konusunda bilgilendiren sahte e-postalar\u0131 temel al\u0131r. Baz\u0131 siber su\u00e7lular, kimlik av\u0131 sald\u0131r\u0131lar\u0131nda pornografik i\u00e7erikleri kullan\u0131r. Ancak bu t\u00fcr durumlarda porno, genellikle kullan\u0131c\u0131lara \u201cscareware\u201d ad\u0131 verilen yaz\u0131l\u0131mlar\u0131 g\u00f6ndermek veya bazen k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131 bilgisayarlar\u0131na y\u00fcklemek i\u00e7in insanlar\u0131 kand\u0131rmak amac\u0131yla kullan\u0131l\u0131r.<\/p>\n Scareware yaz\u0131l\u0131mlar\u0131, \u015fu \u015fekilde \u00e7al\u0131\u015f\u0131r: Bir kullan\u0131c\u0131, porno ararken kimlik av\u0131 ba\u011flant\u0131s\u0131na t\u0131klar. Kullan\u0131c\u0131, ba\u015fka bir sayfaya y\u00f6nlendirilir ve bu sayfada cihaz\u0131na olduk\u00e7a tehlikeli bir vir\u00fcs bula\u015ft\u0131\u011f\u0131na dair bir uyar\u0131 ta\u015f\u0131yan pop-up penceresiyle kar\u015f\u0131la\u015f\u0131r.<\/p>\n \u015eekil 1: Scareware pornografik kimlik av\u0131 \u00f6rne\u011fi<\/p><\/div>\n Ayn\u0131 mesaj, cihaz\u0131 vir\u00fcslerden temizlemek ve dosyalar\u0131 korumak i\u00e7in kullan\u0131c\u0131y\u0131, Microsoft\u2019un teknik destek hizmeti gibi g\u00f6r\u00fcnen bir numaray\u0131 aramaya te\u015fvik eder. Mesajda bu numaray\u0131 araman\u0131n \u00fccretsiz oldu\u011fu s\u00f6ylense de genellikle durum b\u00f6yle de\u011fildir. Telefon numaras\u0131, \u00fccretsiz olsa bile ma\u011fduru doland\u0131r\u0131c\u0131ya ba\u011flar ve doland\u0131r\u0131c\u0131 kullan\u0131c\u0131n\u0131n ki\u015fisel veya bankac\u0131l\u0131k verilerini almak i\u00e7in sosyal m\u00fchendislik tekniklerini uygular.<\/p>\n Bir ba\u015fka senaryoda ise \u201cteknik destek\u201d \u00e7al\u0131\u015fan\u0131, kullan\u0131c\u0131ya teknik destek sa\u011flar ve sundu\u011fu hizmet kar\u015f\u0131l\u0131\u011f\u0131nda ma\u011fdurdan \u00fccret ister.<\/p>\n \u00d6l\u00e7\u00fcmlerimizde g\u00f6rd\u00fc\u011f\u00fcm\u00fcz kadar\u0131yla bu t\u00fcr doland\u0131r\u0131c\u0131l\u0131klar, son derece yayg\u0131nd\u0131r ve hem PC hem de Mac kullan\u0131c\u0131lar\u0131n\u0131 tehdit etmektedir.<\/p>\n \u015eekil 2: Mac kullan\u0131c\u0131lar\u0131na g\u00f6sterilen scareware pornografik kimlik av\u0131 \u00f6rne\u011fi<\/p><\/div>\n Kullan\u0131c\u0131lar\u0131n porno ararken kar\u015f\u0131la\u015fma riskinin bulundu\u011fu bir ba\u015fka kimlik av\u0131 t\u00fcr\u00fc, kullan\u0131c\u0131n\u0131n bilgisayar\u0131na Flash Player g\u00fcncellemesi g\u00f6r\u00fcn\u00fcm\u00fcndeki k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131 bula\u015ft\u0131rmay\u0131 ama\u00e7lar. Flash Player, kullan\u0131c\u0131n\u0131n arad\u0131\u011f\u0131 videoyu oynatmak i\u00e7in gereken yaz\u0131l\u0131m uygulamas\u0131d\u0131r.<\/p>\n \u015eekil 3: Kimlik av\u0131 doland\u0131r\u0131c\u0131l\u0131\u011f\u0131 \u00f6rne\u011fi. Kullan\u0131c\u0131lar\u0131 Flash Player g\u00fcncellemesi g\u00f6r\u00fcn\u00fcm\u00fcndeki k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131 y\u00fcklemek i\u00e7in kand\u0131rmay\u0131 ama\u00e7lar<\/p><\/div>\n Bu doland\u0131r\u0131c\u0131l\u0131k t\u00fcr\u00fc, \u00e7ok uzun y\u0131llard\u0131r g\u00f6r\u00fclmektedir ve \u201c\u00e7\u0131plak g\u00f6zle\u201d kolayca tespit edilebilir. Ancak tespit teknolojilerimizin bu t\u00fcr sayfalar\u0131 d\u00fczenli olarak tespit etmeye devam etmesinden yola \u00e7\u0131karak su\u00e7lular\u0131n, bu t\u00fcr\u00fc de\u011ferli bir yakla\u015f\u0131m olarak g\u00f6rd\u00fc\u011f\u00fcn\u00fc d\u00fc\u015f\u00fcnebiliriz.<\/p>\n Baz\u0131 kimlik av\u0131 doland\u0131r\u0131c\u0131l\u0131klar\u0131, cinsel arkada\u015fl\u0131k hizmetlerini taklit eder. Doland\u0131r\u0131c\u0131l\u0131k, genellikle bir porno sitesindeki reklamla ba\u015flar. Bu reklam, yak\u0131nlarda ya\u015fayan ve arkada\u015fl\u0131k arayan bir kad\u0131nla h\u0131zl\u0131 ve kolay bir randevu ayarlamay\u0131 teklif eder. Kullan\u0131c\u0131 reklama t\u0131klad\u0131\u011f\u0131nda ba\u015fka bir sayfaya y\u00f6nlendirilir. Bu sayfada bir ba\u015fka kullan\u0131c\u0131n\u0131n randevu i\u00e7in haz\u0131r oldu\u011fu yazar.<\/p>\n \u015eekil 4: \u00c7ok a\u015famal\u0131 arkada\u015fl\u0131k hizmeti kimlik av\u0131 doland\u0131r\u0131c\u0131l\u0131\u011f\u0131<\/p><\/div>\n Ancak ma\u011fdurdan, potansiyel randevuyla g\u00f6r\u00fc\u015febilmesi i\u00e7in re\u015fit oldu\u011funu kan\u0131tlamak gibi nedenler \u00f6ne s\u00fcr\u00fclerek kredi kart\u0131 bilgileri istenir. Bu bilgiler verildikten sonra karttan hi\u00e7bir \u00fccret \u00e7ekilmeyece\u011fi iddia edilir ve bu i\u015flem, hizmeti kullanman\u0131n zorunlu bir bile\u015feni olarak g\u00f6sterilir. Tabii ki veriler girildikten sonra oturum sona erer. Ma\u011fdur, \u00f6deme bilgilerinin ele ge\u00e7irilmesiyle ortada kal\u0131r.<\/p>\n Porno i\u00e7erikli kimlik av\u0131 sald\u0131r\u0131lar\u0131n\u0131n en geli\u015fmi\u015f tehdit t\u00fcr\u00fc olmad\u0131\u011f\u0131n\u0131 s\u00f6ylemek do\u011fru olur. S\u00f6z konusu doland\u0131r\u0131c\u0131l\u0131k sald\u0131r\u0131lar\u0131n\u0131n arkas\u0131ndaki su\u00e7lular, genellikle siber d\u00fcnyay\u0131 \u00e7ok anlamayan kullan\u0131c\u0131lar\u0131 hedef al\u0131r. Be\u015f-alt\u0131 y\u0131l \u00f6ncesine k\u0131yasla bu t\u00fcr kullan\u0131c\u0131lar\u0131 bulmak daha zordur. Belki de tehdit ortam\u0131n\u0131 analiz ederken porno i\u00e7erikli kimlik av\u0131 sald\u0131r\u0131lar\u0131na daha az rastlamam\u0131z\u0131n nedeni budur. Ancak k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlarda durum b\u00f6yle de\u011fildir.<\/p>\n K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar ve porno<\/strong><\/p>\n K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar s\u00f6z konusu oldu\u011funda, pornografik i\u00e7erikler iki temel amaca hizmet eder:<\/p>\n Porno sitelerinin, farkl\u0131 k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar i\u00e7in \u201cwatering hole\u201d (su kayna\u011f\u0131) sald\u0131r\u0131lar\u0131na hizmet etti\u011fine de bir\u00e7ok kez \u015fahit olduk. Bu sald\u0131r\u0131 plan\u0131 olduk\u00e7a basittir. Siber su\u00e7lu \u00f6ncelikle porno sitesini veya porno sitesinin sayfalar\u0131nda reklam g\u00f6stermek i\u00e7in kullan\u0131lan reklam platformunu ele ge\u00e7irir. Siber su\u00e7lular, daha sonra bir yeniden y\u00f6nlendirme mekanizmas\u0131 kurarak ziyaret\u00e7iyi otomatik bir \u015fekilde k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131 bula\u015ft\u0131ran web sayfas\u0131na y\u00f6nlendirir.<\/p>\n Bu y\u00f6ntem, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131 yayman\u0131n en kullan\u0131\u015fl\u0131 yollar\u0131ndan biridir ve siber su\u00e7lular taraf\u0131ndan s\u0131kl\u0131kla tercih edilir. Tam olarak hangi s\u0131kl\u0131kla kullan\u0131ld\u0131\u011f\u0131n\u0131 belirlemek i\u00e7in derin bir ara\u015ft\u0131rma yapmad\u0131k. Ancak k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m koleksiyonumuza h\u0131zl\u0131ca g\u00f6z att\u0131\u011f\u0131m\u0131z anda porno siteleri arac\u0131l\u0131\u011f\u0131yla yay\u0131lan birden \u00e7ok k\u00f6t\u00fc ama\u00e7l\u0131 ara\u00e7 tespit ettik. \u00c7o\u011fu vakada bu siteler 2porno-in.ru, pornopriz.loan, pornohd24.com vb. gibi \u00e7ok pop\u00fcler olmayan sitelerdi. Bu sitelerin bir\u00e7o\u011funun, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131 yaymak i\u00e7in \u00f6zel olarak kurulma ihtimali y\u00fcksektir. Ancak k\u0131sa zaman \u00f6nce kar\u015f\u0131la\u015ft\u0131\u011f\u0131m\u0131z birka\u00e7 vakada, PornHub gibi pop\u00fcler web sitelerinden yay\u0131lan tehlikeli k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlara \u015fahit olmu\u015ftuk. PornHub, ge\u00e7en y\u0131l k\u0131sa bir s\u00fcre i\u00e7in Trojan.Win32.Kovter<\/strong> olarak bilinen k\u00f6t\u00fc ama\u00e7l\u0131 reklam yaz\u0131l\u0131m\u0131n\u0131 yaymak i\u00e7in kullan\u0131lm\u0131\u015ft\u0131<\/a>.<\/p>\n S\u0131ra d\u0131\u015f\u0131 ama\u00e7lara sahip Bankac\u0131l\u0131k Truva Atlar\u0131<\/strong><\/p>\n Siber d\u00fcnyada \u00e7ok say\u0131da casusluk yaz\u0131l\u0131m\u0131 ve Truva At\u0131n\u0131n oldu\u011fu ve bunlar\u0131n ma\u011fdurun bilgisayar\u0131ndaki her t\u00fcrl\u00fc kimlik bilgisini hedef ald\u0131\u011f\u0131 herkes\u00e7e bilinen bir ger\u00e7ektir. Bankac\u0131l\u0131k Truva Atlar\u0131, bu t\u00fcr k\u00f6t\u00fc ama\u00e7l\u0131 programlar\u0131n aras\u0131nda \u00f6zel bir yere sahiptir. Bu k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m t\u00fcr\u00fc, \u00f6zellikle internet bankac\u0131l\u0131\u011f\u0131n\u0131 hedef al\u0131r. K\u00f6t\u00fc ama\u00e7l\u0131 program, kurban\u0131n bilgisayar\u0131na y\u00fcklendikten sonra taray\u0131c\u0131da hangi sayfalar\u0131n a\u00e7\u0131ld\u0131\u011f\u0131n\u0131 izleyebilir ve kurban\u0131n ne zaman internet bankac\u0131l\u0131\u011f\u0131 sayfalar\u0131n\u0131 a\u00e7t\u0131\u011f\u0131n\u0131 g\u00f6rebilir. K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m, ma\u011fdurun taray\u0131c\u0131s\u0131na y\u00fcklenen web sayfas\u0131n\u0131n baz\u0131 k\u0131s\u0131mlar\u0131n\u0131 de\u011fi\u015ftirerek kullan\u0131c\u0131n\u0131n kimlik bilgilerini sahte oturum a\u00e7ma\/parola alanlar\u0131na girmesini sa\u011flar. Bu i\u015flemden sonra k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m, edindi\u011fi bilgileri su\u00e7lulara g\u00f6nderir.<\/p>\n Bu y\u00f6ntem, bir\u00e7ok farkl\u0131 k\u00f6t\u00fc ama\u00e7l\u0131 bankac\u0131l\u0131k Truva At\u0131 taraf\u0131ndan kullan\u0131lan yayg\u0131n bir tekniktir. Bu t\u00fcr Truva Atlar\u0131n\u0131n her biri, \u00e7e\u015fitli \u00f6zel web eklentilerine sahiptir. Bu eklentiler, ger\u00e7ek kodun yerine internet bankac\u0131l\u0131\u011f\u0131 web sayfas\u0131n\u0131n koduna eklenen kod par\u00e7alar\u0131d\u0131r. Her internet bankac\u0131l\u0131\u011f\u0131 sistemi kendi benzersiz koduna sahiptir. Bu nedenle kimlik bilgilerinin \u00e7al\u0131nabilmesi i\u00e7in \u00f6zel bir web eklentisi gereklidir. En g\u00fc\u00e7l\u00fc bankac\u0131l\u0131k Truva Atlar\u0131, genellikle kullan\u0131c\u0131lar\u0131n di\u011fer banka hesaplar\u0131na sald\u0131rmak i\u00e7in onlarca farkl\u0131 web eklentisiyle donat\u0131lm\u0131\u015ft\u0131r. Bu \u00f6zellik, bir\u00e7ok bankac\u0131l\u0131k Truva At\u0131\u2019nda bulunan klasik bir \u00f6zelliktir. Dolay\u0131s\u0131yla bankac\u0131l\u0131k yerine porno sitelerini hedef alan \u00f6rnekler buldu\u011fumuzda olduk\u00e7a \u015fa\u015f\u0131rd\u0131k. Toplamda bu ilgin\u00e7 hedef tercihine sahip olan \u00fc\u00e7 farkl\u0131 bankac\u0131l\u0131k Truva At\u0131 ailesinden (betabot, Neverquest ve Panda) 27 farkl\u0131 \u00e7e\u015fit tespit ettik.<\/p>\n \u015eekil 5: \u00d6zellikle pop\u00fcler porno sitelerinin kimlik bilgilerini hedef alan k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m ailelerine \u00f6rnekler<\/p><\/div>\n Bu \u00e7e\u015fitlerden on tanesi \u00f6zellikle PornHub.com hesaplar\u0131n\u0131; be\u015f tanesi Brazzers.com hesaplar\u0131n\u0131; \u00fc\u00e7 tanesi chatrubate.com hesaplar\u0131n\u0131 ve geri kalan 12 tanesi Xvideos.com, Xnxx.com, Motherless.com, Youporn.com ve Myfreecams.com gibi di\u011fer pop\u00fcler siteleri hedef al\u0131yordu.<\/p>\n Kaspersky Lab \u00f6l\u00e7\u00fcmlerine g\u00f6re 2017 y\u0131l\u0131nda bu 27 k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m par\u00e7as\u0131, 307.868 kez tespit edilmi\u015f ve d\u00fcnya genelinde 50.000\u2019den fazla bilgisayara bula\u015fmaya \u00e7al\u0131\u015fm\u0131\u015ft\u0131r.<\/p>\n Ayda on binlerce hatta y\u00fcz binlerce kez tespit edilen geleneksel bankac\u0131l\u0131k Truva Atlar\u0131 gibi di\u011fer k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m t\u00fcrlerinin tipik da\u011f\u0131l\u0131m \u00f6l\u00e7e\u011fine bak\u0131ld\u0131\u011f\u0131nda bu rakamlar olduk\u00e7a d\u00fc\u015f\u00fckt\u00fcr. Dolay\u0131s\u0131yla porno sitelerinin kimlik bilgilerini hedef alan bu k\u00f6t\u00fc ama\u00e7l\u0131 programlar\u0131n, ne anlama geldi\u011fini \u00e7\u00f6zmek olduk\u00e7a g\u00fc\u00e7t\u00fcr. Bu, yaln\u0131zca yeni bankac\u0131l\u0131k k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m \u00e7e\u015fitlerini test eden su\u00e7lular\u0131n olu\u015fturdu\u011fu bir yap\u0131 olabilir. Bu yap\u0131larda banka web eklentileri, ge\u00e7ici olarak di\u011fer siteler i\u00e7in web eklentileriyle de\u011fi\u015ftiriliyor olabilir. Ya da su\u00e7lular, \u00fccretli porno sitelerinin kimlik bilgilerini \u00e7al\u0131p hacker forumlar\u0131nda satarak para kazanman\u0131n yeni yollar\u0131n\u0131 test ediyor olabilir. En pop\u00fcler porno sitelerinin, on milyonlarca kullan\u0131c\u0131dan olu\u015fan geni\u015f bir toplulu\u011fa sahip oldu\u011fu ve daha bir\u00e7ok kullan\u0131c\u0131n\u0131n premium eri\u015fim i\u00e7in \u00f6deme yapmaya haz\u0131r oldu\u011fu d\u00fc\u015f\u00fcn\u00fcld\u00fc\u011f\u00fcnde hesap bilgilerini \u00e7alma fikri, su\u00e7lular i\u00e7in olduk\u00e7a cazip g\u00f6r\u00fcnebilir.<\/p>\n Porno sitesi hesap bilgilerini hedef alan k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n hedefi ne olursa olsun porno sitesi kullan\u0131c\u0131lar\u0131n\u0131n, siber su\u00e7lular\u0131n ilgisini \u00e7ekti\u011fi a\u015fikard\u0131r. Android kullan\u0131c\u0131lar\u0131n\u0131 hedef alan k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131 inceledi\u011fimizde bu ger\u00e7ek daha da belirgin bir \u015fekilde ortaya \u00e7\u0131kar.<\/p>\n Mobil tehditler, Android kullan\u0131c\u0131lar\u0131n\u0131 hedef alan k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlard\u0131r. K\u00f6t\u00fc ama\u00e7l\u0131 programlar\u0131 y\u00fcklemek i\u00e7in porno i\u00e7erikleri yem olarak kullanan k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar s\u00f6z konusu oldu\u011funda Android tehdit ortam\u0131, masa\u00fcst\u00fcne g\u00f6re \u00e7ok daha canl\u0131d\u0131r.<\/p>\n Android Truva Atlar\u0131, kullan\u0131c\u0131lar\u0131n b\u00fcy\u00fck ihtimalle ger\u00e7ek sitelerdeki reklamlar arac\u0131l\u0131\u011f\u0131yla y\u00f6nlendirildi\u011fi sahte porno siteleri arac\u0131l\u0131\u011f\u0131yla da\u011f\u0131t\u0131lan porno temalar\u0131n\u0131 kullan\u0131r. Yay\u0131lman\u0131n nas\u0131l ger\u00e7ekle\u015fti\u011finin tam olarak bilinememesinin nedeni, yeniden y\u00f6nlendirmenin bir\u00e7ok parametreye (\u00f6r. mobil operat\u00f6r, \u00fclke, cihaz t\u00fcr\u00fc vb.) ba\u011fl\u0131 olmas\u0131d\u0131r. Bu durum, kullan\u0131c\u0131n\u0131n izledi\u011fi yolun tamam\u0131n\u0131 yeniden olu\u015fturmay\u0131 zorla\u015ft\u0131r\u0131r. Ayr\u0131ca yeniden y\u00f6nlendirme zincirindeki reklamc\u0131l\u0131k sunucular\u0131n\u0131n her biri, reklamlar\u0131 istedikleri anda de\u011fi\u015ftirebilir. Bunun sonucunda sald\u0131rganlar\u0131 takip etmek giderek zorla\u015f\u0131r.<\/p>\n Ara\u015ft\u0131rmam\u0131z s\u0131ras\u0131nda a\u011f\u0131rl\u0131kl\u0131 olarak pornografik i\u00e7erikleri kullanan 23 farkl\u0131 Android k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m ailesi tespit ettik. Bu aileler be\u015f b\u00fcy\u00fck t\u00fcre aitti: t\u0131klay\u0131c\u0131lar (WAP abonelik k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131), bankac\u0131l\u0131k Truva Atlar\u0131, fidye yaz\u0131l\u0131mlar\u0131, rooting Truva Atlar\u0131, premium SMS k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131, sahte porno abonelikleri ve herhangi bir gruba dahil edemedi\u011fimiz bir t\u00fcr daha. Koleksiyonumuzdaki Android k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m ailesi say\u0131s\u0131n\u0131n toplamda 1.024.23 oldu\u011fu d\u00fc\u015f\u00fcn\u00fcl\u00fcrse yeti\u015fkinlere y\u00f6nelik i\u00e7eriklerin arkas\u0131na s\u0131\u011f\u0131nan k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n say\u0131s\u0131n\u0131n olduk\u00e7a d\u00fc\u015f\u00fck oldu\u011fu g\u00f6r\u00fclebilir. Ancak bu k\u00f6t\u00fc ama\u00e7l\u0131 uygulamalar\u0131n da\u011f\u0131t\u0131m \u00f6l\u00e7e\u011fine bakt\u0131\u011f\u0131m\u0131zda durumun daha farkl\u0131 oldu\u011funu g\u00f6rebiliriz. Yaln\u0131zca 2017 y\u0131l\u0131nda 1,2 milyondan fazla kullan\u0131c\u0131, bu 23 ailedeki uygulamalardan birine en az bir kez rastlam\u0131\u015ft\u0131r. Ayn\u0131 d\u00f6nemdeki tespit olaylar\u0131n\u0131n say\u0131s\u0131, 4,5 milyonun \u00fczerindedir.<\/p>\n 2017 y\u0131l\u0131nda toplamda yakla\u015f\u0131k 4,9 milyon kullan\u0131c\u0131 bir t\u00fcr Android k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131yla kar\u015f\u0131la\u015fm\u0131\u015ft\u0131r. Buna g\u00f6re bu kullan\u0131c\u0131lar\u0131n en az %25,4\u2019\u00fc, bir \u015fekilde yeti\u015fkinlere y\u00f6nelik i\u00e7erikleri kullanan k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m par\u00e7alar\u0131na maruz kalm\u0131\u015ft\u0131r.<\/p>\n 2017 y\u0131l\u0131nda farkl\u0131 porno k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131 taraf\u0131ndan sald\u0131r\u0131ya u\u011frayan kullan\u0131c\u0131lar\u0131n da\u011f\u0131l\u0131m\u0131:<\/p>\n \u015eekil 6: Yeti\u015fkinlere y\u00f6nelik uygulama g\u00f6r\u00fcn\u00fcm\u00fcndeki k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m t\u00fcrleriyle kar\u015f\u0131la\u015fan kullan\u0131c\u0131lar\u0131n da\u011f\u0131l\u0131m\u0131.<\/p><\/div>\n Yukar\u0131daki \u015fema, kullan\u0131c\u0131lar\u0131n yeti\u015fkinlere y\u00f6nelik i\u00e7erikler sunmay\u0131 vaat eden bilinmeyen bir uygulamada ne t\u00fcr tehditlerle kar\u015f\u0131la\u015fma riskini g\u00f6ze ald\u0131klar\u0131n\u0131 g\u00f6sterir. A\u015fa\u011f\u0131da bu k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m \u00f6rneklerinin nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ayr\u0131nt\u0131l\u0131 olarak inceledik.<\/p>\n T\u0131klay\u0131c\u0131\/WAP abonelik k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131<\/strong><\/p>\n 2017 y\u0131l\u0131nda porno i\u00e7erikli k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m t\u00fcrleriyle kar\u015f\u0131la\u015fan kullan\u0131c\u0131lar\u0131n %45,8\u2019ini olu\u015fturur<\/em><\/p>\n T\u0131klay\u0131c\u0131 olarak adland\u0131r\u0131lan yaz\u0131l\u0131mlar\u0131n temel i\u015flevi, kullan\u0131c\u0131n\u0131n bilgisi olmadan bir web sayfas\u0131n\u0131 a\u00e7mak ve baz\u0131 d\u00fc\u011fmelere t\u0131klamakt\u0131r. Bunu yaparken iki \u015feyi ama\u00e7lar:<\/p>\n \u0130lk bak\u0131\u015fta yaln\u0131zca reklam ba\u011flant\u0131lar\u0131na t\u0131klayan ve para \u00e7almayan bir Truva At\u0131\u2019n\u0131n neden bu kadar \u00f6zel oldu\u011funu anlamak zordur.<\/p>\n \u015eekil 7: T\u0131klay\u0131c\u0131 k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m a\u011f trafi\u011fi<\/p><\/div>\n Ancak bu t\u00fcr bir Truva At\u0131\u2019n\u0131n analizini yaparken bu yaz\u0131l\u0131m\u0131n, bir gecede t\u0131klama yoluyla 100 Mb mobil trafi\u011fi t\u00fcketti\u011fini ve pil g\u00fcc\u00fcn\u00fc tamamen bitirdi\u011fini ke\u015ffettik! Bunun yaln\u0131zca bir gecede oldu\u011funu hesaba katarsak kurban\u0131n bir veya iki hafta sonraki internet trafi\u011fi faturas\u0131n\u0131n nas\u0131l olaca\u011f\u0131n\u0131 hayal etmek zor de\u011fildir.<\/p>\n Bunlara ek olarak t\u0131klay\u0131c\u0131lar ki\u015filer, \u00e7a\u011fr\u0131 ge\u00e7mi\u015fi ve konum gibi cihaz verilerini toplayabilir, komut sunucusundan al\u0131nan JS dosyalar\u0131yla web sayfalar\u0131na s\u0131zabilir, uygulamalar y\u00fckleyebilir ve gelen SMS\u2019leri silebilir. T\u0131klay\u0131c\u0131lar, baz\u0131 durumlarda mod\u00fcler bir yap\u0131ya sahiptir. Bu yap\u0131daki baz\u0131 unsurlar a\u011f\u0131rl\u0131kl\u0131 olarak savunmadan ve sitelere t\u0131klamaktan sorumludur. \u201cT\u0131klay\u0131c\u0131\u201d t\u00fcr\u00fcndeki Truva Atlar\u0131, \u00e7o\u011funlukla y\u00f6netici haklar\u0131n\u0131 kullanarak kendilerini i\u015fletim sisteminden kald\u0131rmay\u0131 zorla\u015ft\u0131r\u0131r. Hatta Android\u2019in eski s\u00fcr\u00fcmleri s\u00f6z konusu oldu\u011funda bu programlar\u0131 kald\u0131rmak imkans\u0131z hale gelebilir.<\/p>\n T\u0131klay\u0131c\u0131 yaz\u0131l\u0131mlar\u0131n en iyi \u00f6rneklerinden biri yak\u0131n zamanda ortaya \u00e7\u0131km\u0131\u015ft\u0131r: Trojan.AndroidOS.Loapi<\/strong>. Bu mod\u00fcler bir Truva At\u0131\u2019d\u0131r ve davran\u0131\u015flar\u0131, sald\u0131rgan\u0131n sunucusundan indirilen ek mod\u00fcllere ba\u011fl\u0131d\u0131r. Loapi\u2019nin temel i\u015flevi, reklamlara t\u0131klamak ve WAP aboneli\u011fi web sayfalar\u0131d\u0131r. Bu Truva At\u0131, ayn\u0131 zamanda kripto para madencili\u011fi yapabilir. Genellikle kullan\u0131\u015fl\u0131 programlar veya oyunlar g\u00f6r\u00fcn\u00fcm\u00fcnde yay\u0131lan bu Truva At\u0131\u2019n\u0131n, do\u011frudan porno temal\u0131 web sayfalar\u0131ndan indirildi\u011fi vakalar da vard\u0131r.<\/p>\n Loapi\u2019nin yan\u0131 s\u0131ra be\u015f farkl\u0131 Truva At\u0131 (Trojan.AndroidOS.Agent.rx<\/strong>, Trojan-SMS.AndroidOS.Gudex<\/strong>, Trojan-Spy.AndroidOS.SmForw.gr<\/strong>, Trojan.AndroidOS.Hiddad.de<\/strong>, Trojan-SMS.AndroidOS.Podec.a<\/strong>), porno uygulamalar\u0131nda ve video oynat\u0131c\u0131larda gizlenerek kullan\u0131c\u0131lar\u0131n verilerini ve paras\u0131n\u0131 \u00e7almaya \u00e7al\u0131\u015f\u0131r.<\/p>\n Bankac\u0131l\u0131k Truva Atlar\u0131 ve fidye yaz\u0131l\u0131mlar\u0131<\/strong><\/p>\n 2017 y\u0131l\u0131nda porno i\u00e7erikli k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m t\u00fcrleriyle kar\u015f\u0131la\u015fan kullan\u0131c\u0131lar\u0131n %30,38\u2019ini olu\u015fturur<\/em><\/p>\n Bankac\u0131l\u0131k Truva Atlar\u0131 ve fidye yaz\u0131l\u0131mlar\u0131, yay\u0131lmak i\u00e7in uzun s\u00fcredir pornografik i\u00e7erikleri kullanmaktad\u0131r. Bunlar \u00e7o\u011funlukla belirli bir porno oynat\u0131c\u0131s\u0131 gibi gizlenerek porno i\u00e7eri\u011fi g\u00f6stermek yerine sald\u0131r\u0131lan cihaz\u0131n g\u00fcvenli\u011fini ve cihazdaki finansal verileri ele ge\u00e7irir. Genel olarak kimlik av\u0131 pencereleri g\u00f6sterme, bankalardan gelen SMS\u2019leri \u00e7alma vb. gibi di\u011fer mobil k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlarla ayn\u0131 i\u015flevlere sahiptir. Ancak bankac\u0131l\u0131k Truva Atlar\u0131\u2019n\u0131n ve fidye yaz\u0131l\u0131m\u0131 Truva Atlar\u0131\u2019n\u0131n aras\u0131nda baz\u0131 farklar vard\u0131r. Bankac\u0131l\u0131k Truva Atlar\u0131, \u00e7o\u011funlukla kendilerini yaymak i\u00e7in porno sitelerini kullan\u0131r veya kendilerini yeti\u015fkinlere y\u00f6nelik bir videoyu ba\u015flatmak i\u00e7in gerekli bir video oynat\u0131c\u0131 olarak g\u00f6sterir. Fidye yaz\u0131l\u0131mlar\u0131 ise normal porno uygulamalar\u0131n\u0131n k\u0131l\u0131\u011f\u0131na girer.<\/p>\n \u015eekil 9: Ger\u00e7ek PornHub uygulamas\u0131 g\u00f6r\u00fcn\u00fcm\u00fcndeki fidye yaz\u0131l\u0131m uygulamas\u0131 \u00f6rne\u011fi. Y\u00fcklendikten sonra cihaz\u0131 kilitler.<\/p><\/div>\n Bu yaz\u0131l\u0131mlar, bir\u00e7ok vakada \u201cscareware\u201d taktiklerine de ba\u015fvurur. Cihaz\u0131n ekran\u0131n\u0131 kilitledikten sonra cihazda yasa d\u0131\u015f\u0131 i\u00e7eriklerin (\u00e7o\u011funlukla \u00e7ocuk pornosu) tespit edildi\u011fini ve cihaz\u0131n kilitlendi\u011fini belirten bir ileti g\u00f6sterilir. Sald\u0131r\u0131ya u\u011frayan ki\u015fi, cihaz\u0131n kilidini a\u00e7mak i\u00e7in fidye \u00f6demek zorundad\u0131r. Bu ileti, genellikle ger\u00e7ek \u00e7ocuk pornosu videolar\u0131ndan al\u0131nan ekran g\u00f6r\u00fcnt\u00fclerini de i\u00e7erir.<\/p>\n Yak\u0131n zamanda bu taktikleri kullanan iki b\u00fcy\u00fck fidye yaz\u0131l\u0131m\u0131 ailesi tespit ettik: Svpeng ve Small. Small yaz\u0131l\u0131m\u0131n\u0131n hedefleri, \u00e7o\u011funlukla Rusya ve kom\u015fu \u00fclkelerinde ya\u015farken Svpeng, kullan\u0131c\u0131lara FBI\u2019dan gelmi\u015f gibi g\u00f6r\u00fcnen bir mesaj\u0131 g\u00f6stererek ABD vatanda\u015flar\u0131n\u0131 hedef almaktad\u0131r. Bu durum, \u00f6l\u00e7\u00fcmlerimizle de kan\u0131tlanm\u0131\u015ft\u0131r. Bu k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131ma maruz kalan kullan\u0131c\u0131lar\u0131n b\u00fcy\u00fck bir \u00e7o\u011funlu\u011fu (%95\u2019ten daha fazlas\u0131) ABD\u2019de ya\u015famaktad\u0131r.<\/p>\n Mobil fidye yaz\u0131l\u0131mlar\u0131n\u0131n en korkutucu \u00f6zelli\u011fi, bu Truva Atlar\u0131n\u0131n cihaz PIN kodunu rastgele bir kodla de\u011fi\u015ftirmesi veya rastgele bir kod belirlemesidir. Dolay\u0131s\u0131yla kullan\u0131c\u0131 Truva At\u0131\u2019n\u0131 silse bile telefonun kilidini a\u00e7amaz.<\/p>\n Rooting (k\u00f6k eri\u015fimi) k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131<\/strong><\/p>\n 2017 y\u0131l\u0131nda kullan\u0131c\u0131lar\u0131n %22,38\u2019i bu tehditle kar\u015f\u0131la\u015fm\u0131\u015ft\u0131r<\/em><\/p>\n Tehlikeli Truva Atlar\u0131 konusundan devam edelim. Rooting k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131 da yay\u0131lmak i\u00e7in aktif olarak pornografik i\u00e7eriklerden faydalan\u0131r. Bu yaz\u0131l\u0131mlar, kurban\u0131n cihaz\u0131na y\u00fcklendikten sonra Android cihaz\u0131ndaki g\u00fcvenlik a\u00e7\u0131klar\u0131ndan faydalanabilir ve cihaz\u0131 neredeyse \u201ctanr\u0131 moduna\u201d al\u0131r. Bu modda, sald\u0131rgan kullan\u0131c\u0131 cihaz\u0131ndaki her t\u00fcrl\u00fc veriye eri\u015fim iznini elde eder, fark edilmeden uygulama y\u00fckleyebilir ve uzaktan eri\u015fim yetkisine sahip olabilir. Kaspersky Lab ara\u015ft\u0131rmalar\u0131na g\u00f6re bu t\u00fcr\u00fcn en aktif iki ailesi \u015funlard\u0131r:<\/p>\n \u015eekil 11: \u201cEverything you want online video collection\u201d ad\u0131na sahip bir uygulama olarak gizlenen rooting k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131 (Ztorg).<\/p><\/div>\n Rooting k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n\u0131n en ilgin\u00e7 \u00f6zelli\u011fi, bu uygulamalar\u0131n genellikle normal uygulamalar\u0131n bir par\u00e7as\u0131 olarak yay\u0131lmas\u0131d\u0131r. Siber su\u00e7lular, bir porno uygulamas\u0131 ve buna uygun k\u00f6t\u00fc ama\u00e7l\u0131 bir yaz\u0131l\u0131m se\u00e7er ve bunu normal bir uygulama gibi da\u011f\u0131t\u0131r.<\/p>\n Abonelikle eri\u015filen pornografik i\u00e7erikler ve di\u011fer premium SMS Truva Atlar\u0131<\/strong><\/p>\n 2017 y\u0131l\u0131nda pornografik i\u00e7erikli k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m t\u00fcrleriyle kar\u015f\u0131la\u015fan kullan\u0131c\u0131lar\u0131n %2,81\u2019ini olu\u015fturur<\/em><\/p>\n Bu ilkel Truva Atlar\u0131, yaln\u0131zca nas\u0131l SMS g\u00f6nderebileceklerini ve porno sitelerine eri\u015fim i\u00e7in \u00fccretli numaralara nas\u0131l \u00e7a\u011fr\u0131 yapabileceklerini bilir. Asl\u0131nda bu sitelerin i\u00e7eriklerine eri\u015fim genellikle \u00fccretsizdir. 2014 ile 2016 y\u0131llar\u0131 aras\u0131ndaki d\u00f6nemde, \u00e7ok say\u0131da SMS Truva At\u0131 bulunuyordu. Bunlar\u0131n \u00e7o\u011fu, PornoVideo.apk, XXXVideo.apk, XXXPORN.apk, PornXXXVideo.apk, Porevo.apk, Znoynye_temnokozhie_lesbiyanki.apk, Trah_v_bane.apk, Kamasutra_3D.apk, and Russkoe_analnoe_porno.apk<\/em> gibi ilgi \u00e7ekici porno adlar\u0131yla yay\u0131l\u0131yordu.<\/p>\n Android SMS Truva Atlar\u0131, Trojan-SMS.AndroidOS.FakePlayer.a<\/strong> ile ba\u015flad\u0131. 2012 y\u0131l\u0131ndan bu yana etkin olan bu Truva At\u0131, zaman i\u00e7inde hi\u00e7bir yenilik \u00f6zellik kazanmad\u0131 ve genellikle \u201cpornoplayer\u201d ad\u0131ndaki bir video oynat\u0131c\u0131 g\u00f6r\u00fcn\u00fcm\u00fcnde yay\u0131lmaya devam ediyor. Buldu\u011fumuz bir ba\u015fka \u00f6rnek, Trojan-SMS.AndroidOS.Erop.a<\/strong>, ise genellikle \u201cxxx_porno_player\u201d[RU1] gibi adlarla porno oynat\u0131c\u0131 g\u00f6r\u00fcn\u00fcm\u00fcnde yay\u0131l\u0131yor. Bu t\u00fcre ba\u015fka bir \u00f6rnek ise porno temal\u0131 sitelerden AdobeFlash ad\u0131yla yay\u0131lan Trojan-SMS.AndroidOS.Agent.abi<\/strong> Truva At\u0131\u2019d\u0131r.<\/p>\n \u015eekil 12: Video oynat\u0131c\u0131 g\u00f6r\u00fcn\u00fcm\u00fcndeki basit bir SMS Truva At\u0131.<\/p><\/div>\n \u0130lk kez Kaspersky Lab taraf\u0131ndan 2012 y\u0131l\u0131nda ke\u015ffedilen daha geli\u015fmi\u015f SMS Truva Atlar\u0131n\u0131n say\u0131s\u0131, son zamanlarda artmaya ba\u015flam\u0131\u015ft\u0131r. Trojan-SMS.AndroidOS.Vidro, not-a-virus: RiskTool.AndroidOS.SMSreg.mq<\/strong> ve Trojan-SMS.AndroidOS.Skanik.a<\/strong> \u00fc\u00e7l\u00fcs\u00fc, porno sitelerinden indirilen porno uygulamalar\u0131 g\u00f6r\u00fcn\u00fcm\u00fcnde yay\u0131lm\u0131\u015ft\u0131r. Bu yaz\u0131l\u0131mlar\u0131n as\u0131l amac\u0131 \u00fccretli bir SMS g\u00f6ndermek (ve mobil operat\u00f6rden gelen SMS \u00fccreti bilgisini silmek) oldu\u011fu i\u00e7in SIM kart olmadan \u00e7al\u0131\u015fmaz. Pornografik video sitesi, ancak SIM kart tak\u0131ld\u0131ktan sonra a\u00e7\u0131labilir.<\/p>\n \u015eekil 13: SIM kart olmadan \u00e7al\u0131\u015fmay\u0131 reddeden cracker yaz\u0131l\u0131m\u0131 \u00f6rne\u011fi<\/p><\/div>\n Bu t\u00fcr k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n en karl\u0131 \u00f6rneklerinden biri Trojan.AndroidOS.Pawen.a<\/strong> yaz\u0131l\u0131m\u0131 ve bundan yola \u00e7\u0131karak geli\u015ftirilen Trojan.AndroidOS.Agent.gp<\/strong> yaz\u0131l\u0131m\u0131d\u0131r. Bunlar, \u00fccretli numaralar\u0131 aray\u0131p kurbanlar\u0131n\u0131n b\u00fct\u00e7esini zorlayabilir. Bu uygulamalar\u0131n ilgin\u00e7 \u00f6zelliklerinden biri simgelerinin olmamas\u0131d\u0131r. Dolay\u0131s\u0131yla bunlar\u0131 bulmak olduk\u00e7a zordur. Ayr\u0131ca uygulama, cihaz\u0131n y\u00f6netici haklar\u0131n\u0131 kulland\u0131\u011f\u0131 i\u00e7in bunlar\u0131 kald\u0131rmak da zor olabilir.<\/p>\n Truva At\u0131 SMS\u2019leri, basitli\u011fine ve demode yakla\u015f\u0131m\u0131na ra\u011fmen y\u0131llard\u0131r varl\u0131\u011f\u0131n\u0131 s\u00fcrd\u00fcrmektedir. Belirli bir noktadan sonra h\u00fccresel ileti\u015fim \u015firketlerinin ald\u0131\u011f\u0131 doland\u0131r\u0131c\u0131l\u0131k kar\u015f\u0131t\u0131 \u00f6nlemler sayesinde bu say\u0131, giderek azalmaya ba\u015flad\u0131. Ancak SMS Truva Atlar\u0131, ortadan kaybolmad\u0131. Kaspersky Lab \u00f6l\u00e7\u00fcmlerine g\u00f6re 2017 y\u0131l\u0131nda d\u00fcnya genelindeki binlerce kullan\u0131c\u0131, porno uygulamas\u0131 g\u00f6r\u00fcn\u00fcm\u00fcndeki bu k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlardan \u00fcr\u00fcnlerimiz sayesinde korundu.<\/p>\n Gizemli Soceng<\/strong><\/p>\n Android k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m b\u00f6l\u00fcm\u00fcm\u00fcz\u00fc sonland\u0131r\u0131rken yukar\u0131daki kategorilerin hi\u00e7birine girmeyen ilgin\u00e7 bir Truva At\u0131\u2019ndan bahsedebiliriz: Trojan.AndroidOS.Soceng.f<\/strong>. Bu k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m, yay\u0131lmak i\u00e7in genellikle oyun veya program k\u0131l\u0131\u011f\u0131na girse de bazen porno g\u00f6r\u00fcn\u00fcm\u00fcn\u00fc de tercih ediyor. Ara\u015ft\u0131rmam\u0131z s\u0131ras\u0131nda analiz edilen \u00f6rnekte bu yaz\u0131l\u0131m, ba\u015flat\u0131ld\u0131ktan sonra kurban\u0131n rehberindeki herkese \u015fu SMS\u2019i g\u00f6nderdi: \u201cHEY!!! {kullan\u0131c\u0131 ad\u0131} Elite sizi hackledi. \u0130taat edin veya hacklenin.<\/em>\u201d Daha sonra haf\u0131za kart\u0131ndaki t\u00fcm dosyalar\u0131 sildi ve Facebook, Google talk, WhatsApp ve MMS uygulamalar\u0131n\u0131 kendi penceresiyle kaplad\u0131.<\/p>\n \u015eekil 14: Trojan.AndroidOS.Soceng.f yaz\u0131l\u0131m\u0131n\u0131n ekran g\u00f6r\u00fcnt\u00fcleri<\/p><\/div>\n Bu k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mla herhangi bir finansal kazan\u00e7 elde etme giri\u015fimi tespit edemedik. Bu yaz\u0131l\u0131m\u0131n tek amac\u0131, kurbanlar\u0131n\u0131n dijital hayat\u0131n\u0131 mahvetmek gibi g\u00f6r\u00fcn\u00fcyor. Ya da hen\u00fcz bilinmeyen bir siber su\u00e7 eyleminin test giri\u015fimi olabilir.<\/p>\n T\u00fcm bunlar\u0131n yan\u0131 s\u0131ra yukar\u0131da listelenen k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n, Android kullan\u0131c\u0131lar\u0131n\u0131 tehdit eden di\u011fer k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlardan farkl\u0131 oldu\u011fu s\u00f6ylenemez. Bu yaz\u0131l\u0131mlar da di\u011ferleriyle ayn\u0131d\u0131r. Bunlar\u0131n tek ilgin\u00e7 yan\u0131, bahsetti\u011fimiz \u00f6rneklerin yay\u0131lma stratejilerinde yeti\u015fkinlere y\u00f6nelik i\u00e7erikleri temel almas\u0131d\u0131r. Belki de bu stratejilerinin etkili olmas\u0131n\u0131 sa\u011flayan \u015fey de bu i\u00e7eriklerdir. Pornografik uygulamalar\u0131n da\u011f\u0131l\u0131m oran\u0131na bakt\u0131\u011f\u0131m\u0131zda bunu daha net bir \u015fekilde g\u00f6rebiliriz. \u0130ncelememizin bu b\u00f6l\u00fcm\u00fcyle ilgili bir ba\u015fka ilgin\u00e7 bulgu ise Android k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n\u0131n arkas\u0131ndaki siber su\u00e7lular\u0131n, kimlik bilgilerini \u00e7almakla pek ilgilenmemesidir. En az\u0131ndan biz, \u00f6zel olarak porno sitelerin hesap bilgilerini hedefleyen bir k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar tespit edemedik. Android platformundaki su\u00e7lular, genellikle kurbanlar\u0131n\u0131 bir doland\u0131r\u0131c\u0131l\u0131k tuza\u011f\u0131na d\u00fc\u015f\u00fcrmek veya fidye almak i\u00e7in yeti\u015fkinlere y\u00f6nelik i\u00e7erikleri kullan\u0131yor.<\/p>\n Ancak PC k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n\u0131 incelerken pornoyla ilgili \u00e7ok az say\u0131da tehdit g\u00f6rmemiz ve mobil tehdit ortam\u0131nda bu say\u0131n\u0131n \u00e7ok daha y\u00fcksek olmas\u0131, porno sekt\u00f6r\u00fcn\u00fcn mobil ortama ta\u015f\u0131nd\u0131\u011f\u0131n\u0131 g\u00f6sterir. Bu \u00e7\u0131kar\u0131m, 2017 y\u0131l\u0131nda web sitelerindeki mobil trafikte \u00f6nemli bir art\u0131\u015f oldu\u011funu belirten sekt\u00f6r liderinin verileriyle de uyu\u015fuyor.<\/p>\n Bu incelemenin ba\u015f\u0131nda anlatt\u0131\u011f\u0131m\u0131z gibi siber tehditlerin pornografik i\u00e7eriklerle ili\u015fkisini inceleme fikri, Dark Web sitelerinde nelerin sat\u0131ld\u0131\u011f\u0131na bakarken sat\u0131\u015fa \u00e7\u0131kar\u0131lan porno hesaplar\u0131n\u0131 fark etmemizle ortaya \u00e7\u0131kt\u0131. Bu nedenle konunun ayr\u0131nt\u0131lar\u0131n\u0131, kapsaml\u0131 bir \u015fekilde incelemek istedik.<\/p>\n Alan\u0131 daha iyi anlamak i\u00e7in en iyi 29 Tor pazar\u0131n\u0131 analiz ettik. Bu liste, Dark Web pazar\u0131yla ilgili haberleri i\u00e7eren a\u00e7\u0131k Tor sitesi DeepDotWeb<\/a> adresinde kolayl\u0131kla bulunabilir. Bu sitede kara borsa listesindeki de\u011fi\u015fiklikleri de takip edebilirsiniz (yasa d\u0131\u015f\u0131 ma\u011fazalar\u0131n yap\u0131s\u0131 ve say\u0131s\u0131 s\u00fcrekli de\u011fi\u015fir). Pazarlar\u0131n dereceleri kay\u0131t kriterleri ve yorumlar, kay\u0131t ve gezinme kolayl\u0131\u011f\u0131, sat\u0131c\u0131 teminat\u0131 ve komisyonu gibi \u00f6l\u00e7\u00fctlere ba\u011fl\u0131 olarak Tor y\u00f6neticileri taraf\u0131ndan her ma\u011fazan\u0131n de\u011ferlendirilmesiyle belirlenir.<\/p>\n \u015eekil 15: En iyi Tor pazarlar\u0131n\u0131n listesi<\/p><\/div>\n Ara\u015ft\u0131rmam\u0131z s\u0131ras\u0131nda, buldu\u011fumuz pazarlar\u0131n aras\u0131nda en fazla se\u00e7ene\u011fi sunan d\u00f6rt pazar\u0131 belirledik. Bu d\u00f6rt pazar, 1500\u2019den fazla sat\u0131l\u0131k hesap sunarken di\u011fer pazarlar, iyi bilinen ve pek bilinmeyen porno sitelerinden yaln\u0131zca k\u0131s\u0131tl\u0131 kullan\u0131c\u0131 verilerini sunuyordu. Tor\u2019un temel amac\u0131 uyu\u015fturucu, silah ve k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m satmak oldu\u011fu i\u00e7in bu sonu\u00e7lar\u0131 bekliyorduk.<\/p>\n Analiz i\u00e7in en fazla say\u0131da sat\u0131\u015f teklifine sahip be\u015f b\u00fcy\u00fck pazar\u0131 se\u00e7tik. Elimizde toplamda pop\u00fcler porno sitelerinden bir veya daha fazla hesap sat\u0131n alabilece\u011fimiz 5239 benzersiz teklif kald\u0131. Kullan\u0131labilir ger\u00e7ek miktar, her zaman net de\u011fildi. Bazen sat\u0131c\u0131lar, ka\u00e7 tane hesap bilgisine sahip olduklar\u0131n\u0131 a\u00e7\u0131klamaz. Ancak ger\u00e7ek hesap say\u0131s\u0131n\u0131 a\u00e7\u0131klayan \u00f6rneklere bakarak bir sat\u0131\u015f teklifinin, maksimum on bin hesap bilgisi i\u00e7erdi\u011fini s\u00f6yleyebiliriz.<\/p>\n Bu bilgilerden yola \u00e7\u0131kt\u0131k ve yeralt\u0131 pazarlarda en \u00e7ok sat\u0131lan porno hesaplar\u0131n\u0131n ilk be\u015fini listeledik (teklif say\u0131s\u0131na g\u00f6re azalan s\u0131rada):<\/p>\n Naughty America (2575 sat\u0131\u015f teklifi) Bu s\u0131ralama, bu web sitelerinin veya bu web sitesi kullan\u0131c\u0131lar\u0131n\u0131n siber sald\u0131r\u0131lara kar\u015f\u0131 daha savunmas\u0131z oldu\u011funu ve bu nedenle pazarda bu kadar \u00e7ok teklifin bulundu\u011funu g\u00f6stermez. Bu liste, bizlere yaln\u0131zca Dark Web pazarlar\u0131n\u0131n al\u0131c\u0131lar\u0131 aras\u0131nda bu web sitelerinin pop\u00fclerli\u011fini g\u00f6sterebilir.<\/p>\n \u015eekil 16: Dark Web pazarlar\u0131n\u0131n birinde bilinmeyen bir miktarda sat\u0131lan porno hesaplar\u0131<\/p><\/div>\n Al\u0131c\u0131lardan bahsetmi\u015fken \u015fu soru akl\u0131m\u0131za gelebilir: Porno hesaplar\u0131 yasal kaynaklardan istenilen miktarda sat\u0131n al\u0131nabiliyorsa insanlar bu hesaplar\u0131 neden Dark Web pazarlar\u0131ndan almaya \u00e7al\u0131\u015f\u0131r? Bunun arkas\u0131nda iki ana neden oldu\u011funu d\u00fc\u015f\u00fcn\u00fcyoruz:<\/p>\n Birincisi, tabii ki fiyat\u0131. G\u00f6zlemlerimize dayal\u0131 olarak pop\u00fcler bir resmi sitenin (Brazzers, RealityKings vb.) ortalama abonelik \u00fccreti \u015fu \u015fekildedir:<\/p>\n Bu tutarlar genel olarak \u00e7ok pahal\u0131 olmasa da Dark Web pazarlar\u0131nda ayn\u0131 hesaplar, \u00e7ok daha d\u00fc\u015f\u00fck bir fiyata sunuluyor. 10 USD kar\u015f\u0131l\u0131\u011f\u0131nda bir\u00e7ok s\u0131n\u0131rs\u0131z eri\u015fim teklifi g\u00f6rd\u00fck. Yani ekonomik a\u00e7\u0131dan karaborsada \u00e7al\u0131nt\u0131 bir hesab\u0131 sat\u0131n almak son derece mant\u0131kl\u0131.<\/p>\n Karaborsadaki porno hesaplar\u0131n\u0131n pop\u00fclerli\u011finin bir di\u011fer nedeni de bu pazarlar\u0131n anonimli\u011fi olabilir. Baz\u0131 yasal web siteleri, m\u00fc\u015fterilerine anonim abonelik sat\u0131n alma \u015fans\u0131 sunsa da Dark Web pazarlar\u0131nda kripto parayla al\u0131\u015fveri\u015f yapabilirsiniz. Bu sayede aboneli\u011finiz kredi kart\u0131\u015f ge\u00e7mi\u015finizde g\u00f6r\u00fcnmez. G\u00fcn\u00fcm\u00fczde porno, ana ak\u0131m haline gelmi\u015f olmas\u0131na ra\u011fmen bu t\u00fcr i\u00e7eriklerle ilgili alg\u0131, her zaman tarafs\u0131z de\u011fildir.<\/p>\n Ancak Dark Web pazarlar\u0131nda sat\u0131lan bu t\u00fcr mallar\u0131n sat\u0131n al\u0131nmas\u0131, m\u00fc\u015fteri a\u00e7\u0131s\u0131ndan baz\u0131 riskler ta\u015f\u0131r. \u00d6ncelikle hesaplar\u0131n tamam\u0131n\u0131n veya \u00e7o\u011funun ba\u015fka kullan\u0131c\u0131lardan veya web sitelerinin kendisinden \u00e7al\u0131nd\u0131\u011f\u0131 d\u00fc\u015f\u00fcn\u00fcld\u00fc\u011f\u00fcnde s\u00f6z konusu al\u0131\u015fveri\u015f yasa d\u0131\u015f\u0131d\u0131r. \u0130kincisi risk ise kullan\u0131c\u0131lar\u0131n, sat\u0131n al\u0131nan hesaplar\u0131n ge\u00e7erlili\u011fine g\u00f6lge d\u00fc\u015f\u00fcrmesidir. Hesab\u0131 \u00e7al\u0131nan kullan\u0131c\u0131, er ya da ge\u00e7 durumu anlay\u0131p sat\u0131c\u0131ya bildirecek ve ele ge\u00e7irilen hesap engellenecektir. Ayn\u0131 durum web sitesi sahipleri s\u0131z\u0131nt\u0131y\u0131 fark etti\u011finde de ge\u00e7erlidir. Ele ge\u00e7irilen hesaplar, fark edildikten hemen sonra engellenir. Di\u011fer bir ifadeyle Dark Web pazarlar\u0131n\u0131n m\u00fc\u015fterileri, kar\u015f\u0131l\u0131\u011f\u0131nda hi\u00e7bir \u015fey almadan \u00f6deme yapma riskine maruz kal\u0131r. \u00c7\u00fcnk\u00fc Dark Web pazar\u0131 sat\u0131c\u0131lar\u0131, g\u00f6rd\u00fc\u011f\u00fcm\u00fcz vakalar\u0131n \u00e7o\u011funda baz\u0131 istisnalar d\u0131\u015f\u0131nda iade se\u00e7ene\u011fi sunmuyordu. M\u00fc\u015fteriler, hesab\u0131 resmi fiyattan daha d\u00fc\u015f\u00fck bir fiyata sat\u0131n alma avantaj\u0131 kar\u015f\u0131l\u0131\u011f\u0131nda engellenmi\u015f bir hesaba para \u00f6deme riskini g\u00f6ze al\u0131r.<\/p>\n \u0130ncelememiz, siber su\u00e7lular\u0131n yeti\u015fkinlere y\u00f6nelik i\u00e7erikleri kimlik av\u0131, PC k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131 ve Android k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n\u0131 i\u00e7eren doland\u0131r\u0131c\u0131l\u0131k tuzaklar\u0131na \u00e7ekmek i\u00e7in bir ara\u00e7 olarak kulland\u0131\u011f\u0131n\u0131 g\u00f6stermi\u015ftir. Kullan\u0131c\u0131lar, bu tuzaklar\u0131n sonunda finansal veri kayb\u0131 veya do\u011frudan para kayb\u0131 ve gizlili\u011fin ihlal edilmesi gibi sorunlarla kar\u015f\u0131la\u015fabilir. Bu noktada, yeti\u015fkinlere y\u00f6nelik i\u00e7erikler kullanan veya kullanmayan di\u011fer k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m sald\u0131r\u0131lar\u0131nda da benzer sonu\u00e7larla kar\u015f\u0131la\u015f\u0131labilece\u011fini s\u00f6ylememiz gereklidir. Buradaki temel fark \u015fudur: Ba\u015fta \u201cscareware\u201d t\u00fcr\u00fc sald\u0131r\u0131lar olmak \u00fczere pornografik i\u00e7erikli k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m ma\u011fdurlar\u0131n\u0131n, bu su\u00e7u yetkililere bildirme olas\u0131l\u0131\u011f\u0131 daha d\u00fc\u015f\u00fckt\u00fcr. \u00c7\u00fcnk\u00fc bildirmeleri durumunda pornografik i\u00e7erikleri arad\u0131klar\u0131n\u0131 veya izlediklerini kabul etmek zorunda kal\u0131rlar. Daha \u00f6nce s\u00f6yledi\u011fimiz gibi pornografik i\u00e7erikleri izlemek, her zaman gururla s\u00f6ylenebilecek veya ba\u015fkalar\u0131na duyurulacak bir \u015fey de\u011fildir. Belki de su\u00e7lular\u0131n, sald\u0131r\u0131lar\u0131nda yeti\u015fkinlere y\u00f6nelik i\u00e7erikleri bu kadar etkin bir \u015fekilde kullanmas\u0131n\u0131n nedeni budur. Siber su\u00e7lular, pornonun kendili\u011finden \u00e7ok say\u0131da kullan\u0131c\u0131y\u0131 \u00e7ekti\u011fini ve pornoyla ilgili k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlara maruz kalanlar\u0131n, bunu a\u00e7\u0131klamak yerine sessiz kalmay\u0131 tercih edeceklerini bilir.<\/p>\n\n Yeti\u015fkinlere y\u00f6nelik i\u00e7erikler s\u00f6z konusu oldu\u011funda k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlardan ve siber doland\u0131r\u0131c\u0131l\u0131ktan ka\u00e7\u0131nmak i\u00e7in kullan\u0131c\u0131lar\u0131n a\u015fa\u011f\u0131daki tavsiyeleri uygulamas\u0131n\u0131 \u00f6neririz:<\/p>\n Her zaman insan k\u00fclt\u00fcr\u00fcn\u00fcn bir par\u00e7as\u0131 olan pornografi, varl\u0131\u011f\u0131n\u0131 dijital \u00e7a\u011fda da s\u00fcrd\u00fcrmektedir. \u0130nternetle birlikte yeti\u015fkinlere y\u00f6nelik i\u00e7erikler, h\u0131zla evlerdeki koleksiyonlardan ve video ma\u011fazalar\u0131n\u0131n \u00fcst raflar\u0131ndan web ve mobil uygulamalara ta\u015f\u0131nm\u0131\u015ft\u0131r.<\/p>\n","protected":false},"author":2706,"featured_media":5574,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1287,1351],"tags":[667,612,625,1199,730,820,241,553],"class_list":{"0":"post-5573","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"category-threats","9":"tag-arastirma","10":"tag-dolandiricilik","11":"tag-koruma","12":"tag-porno","13":"tag-rapor","14":"tag-tehdit","15":"tag-trojan","16":"tag-zararli-yazilim-2"},"hreflang":[{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/porn-themed-threats-report\/5573\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/porn-themed-threats-report\/12376\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/porn-themed-threats-report\/10246\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/porn-themed-threats-report\/14537\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/porn-themed-threats-report\/12775\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/porn-themed-threats-report\/20891\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/porn-themed-threats-report\/19477\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/porn-themed-threats-report\/19480\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.tr\/blog\/tag\/porno\/","name":"Porno"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/5573","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/users\/2706"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=5573"}],"version-history":[{"count":2,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/5573\/revisions"}],"predecessor-version":[{"id":6855,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/5573\/revisions\/6855"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media\/5574"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=5573"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=5573"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=5573"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Temel Bulgular<\/h2>\n
\n
\n
\n
\nNaughty America, Brazzers, Mofos, Reality Kings ve Pornhub sitelerinin hesap bilgileri,<\/li>\nBu bulgularla ilgili daha fazla bilgiyi raporumuzda bulabilirsiniz.\n<\/h2>
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16184614\/180130-porn-themed-threats-report-1.png\")
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16184720\/180130-porn-themed-threats-report-2.png\")
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16184758\/180130-porn-themed-threats-report-2-5.jpg\")
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16184900\/180130-porn-themed-threats-report-3.png\")
\n
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16190203\/180130-porn-themed-threats-report-3-5.jpg\")
2. B\u00f6l\u00fcm: Mobil kullan\u0131c\u0131lara y\u00f6nelik tehditler<\/h2>\n
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16194332\/180130-porn-themed-threats-report-4-1.png\")
\n
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16195347\/180130-porn-themed-threats-report-5.png\")
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16195500\/180130-porn-themed-threats-report-5-5.jpg\")
<\/p>\n![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16200403\/180130-porn-themed-threats-report-6.png\")
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16200512\/180130-porn-themed-threats-report-7.png\")
<\/p>\n\n
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16200640\/180130-porn-themed-threats-report-8.png\")
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16200809\/180130-porn-themed-threats-report-9.png\")
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16200845\/180130-porn-themed-threats-report-10.png\")
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16201058\/180130-porn-themed-threats-report-11.png\")
3. B\u00f6l\u00fcm: Yeralt\u0131na h\u0131zl\u0131 bir bak\u0131\u015f<\/h2>\n
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16201318\/180130-porn-themed-threats-report-12.png\")
\nBrazzers (1228 sat\u0131\u015f teklifi)
\nMofos (789 sat\u0131\u015f teklifi)
\nReality Kings (294 sat\u0131\u015f teklifi)
\nPornhub (153 sat\u0131\u015f teklifi)<\/p>\n![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/01\/16201431\/180130-porn-themed-threats-report-13.png\")
\n
Sonu\u00e7lar ve Tavsiyeler<\/h2>\n
\n