{"id":5770,"date":"2019-03-19T11:01:42","date_gmt":"2019-03-19T08:01:42","guid":{"rendered":"https:\/\/www.kaspersky.com.tr\/blog\/?p=5770"},"modified":"2019-11-15T14:31:49","modified_gmt":"2019-11-15T11:31:49","slug":"pirate-matryoshka-malware","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.tr\/blog\/pirate-matryoshka-malware\/5770\/","title":{"rendered":"Pirate Matryoshka: Pirate Bay&#8217;deki matru\u015fka Truva At\u0131"},"content":{"rendered":"<p>Torrent siteleriyle m\u00fccadele o kadar uzun s\u00fcredir devam ediyor ki torrent tehditlerine ili\u015fkin her t\u00fcrl\u00fc uyar\u0131, insanlarda \u015f\u00fcphe uyand\u0131r\u0131yor: \u201c\u0130\u015fte yine telif hakk\u0131 sahipleri, korku hikayeleri anlatmaya ba\u015flad\u0131!\u201d Ama her hikaye, yalan de\u011fildir.<\/p>\n<p>Andrew ile tan\u0131\u015f\u0131n. Andrew, bir torrent tracker\u2019dan \u00e7ok \u00f6nemli bir dosya indirmek istiyor. Ancak Andrew\u2019\u0131n bilmedi\u011fi bir \u015fey var: O, paras\u0131ndan tasarruf etmek i\u00e7in torrent kullan\u0131rken sosyal sorumluluk anlay\u0131\u015f\u0131na sahip olmayan baz\u0131 kimseler de Andrew\u2019\u0131 kullanarak para kazanman\u0131n derdinde. \u00d6rne\u011fin k\u0131sa s\u00fcre \u00f6nce The Pirate Bay\u2019de ke\u015ffetti\u011fimiz bir y\u00f6ntem doland\u0131r\u0131c\u0131lar\u0131n i\u015flerini g\u00f6rebilir. Bu y\u00f6ntemde doland\u0131r\u0131c\u0131lar, korsan yaz\u0131l\u0131m kopyalar\u0131n\u0131 seed etmeye ba\u015fl\u0131yor ancak orijinal kaynak dosyalar\u0131 kendi k\u00f6t\u00fc ama\u00e7l\u0131 dosyalar\u0131yla de\u011fi\u015ftiriyorlar.<\/p>\n<h2>Pirate Bay\u2019deki torrent k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131 Pirate Matryoshka nas\u0131l \u00e7al\u0131\u015f\u0131r<\/h2>\n<p>Andrew, hacker\u2019lar taraf\u0131ndan araya s\u0131k\u0131\u015ft\u0131r\u0131lan dosyay\u0131 \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131nda y\u00fckleyici, sahte bir Pirate Bay kimlik do\u011frulama penceresi g\u00f6r\u00fcnt\u00fcler. Kahraman\u0131m\u0131z, pencerenin do\u011fru olup olmad\u0131\u011f\u0131n\u0131 hi\u00e7 sorgulamadan kullan\u0131c\u0131 ad\u0131n\u0131 ve \u015fifresini girer, elbette bu bilgiler de do\u011frudan k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m geli\u015ftiricilerinin ellerine ge\u00e7mi\u015f olur. Art\u0131k Andrew\u2019\u0131n hesab\u0131, yeni sahte y\u00fcklemeler olu\u015fturmak i\u00e7in kullan\u0131labilir; i\u015fte bu nedenle yaln\u0131zca hesap kay\u0131t tarihine bakarak bir hesab\u0131n sahte olup olmad\u0131\u011f\u0131n\u0131 anlayamazs\u0131n\u0131z.<\/p>\n<div id=\"attachment_5772\" style=\"width: 557px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-5772\" class=\"wp-image-5772 size-full\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/03\/15134340\/pirate-matryoshka-phishing.png\" alt=\"\" width=\"547\" height=\"499\"><p id=\"caption-attachment-5772\" class=\"wp-caption-text\">Pirate Matryoshka k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131, Pirate Bay hesaplar\u0131n\u0131n kullan\u0131c\u0131 adlar\u0131n\u0131 ve \u015fifrelerini \u00e7almak i\u00e7in sahte kimlik av\u0131 pencereleri g\u00f6r\u00fcnt\u00fcler<\/p><\/div>\n<p>Ancak doland\u0131r\u0131c\u0131lar, hesap \u00e7alarak para kazanmaz. As\u0131l para kayna\u011f\u0131, kurban\u0131n bilgisayar\u0131na belirli bir yaz\u0131l\u0131m y\u00fcklendi\u011finde \u00f6deme yapan ortak programlard\u0131r. Yani Andrew, ger\u00e7ekten ihtiya\u00e7 duydu\u011fu uygulaman\u0131n yan\u0131 s\u0131ra birka\u00e7 ek uygulama daha indirir. Hatta bir s\u00fcr\u00fc ek uygulama\u2026<\/p>\n<p>As\u0131l uygulaman\u0131n yan\u0131nda gelen bu yaz\u0131l\u0131mlar, her zaman k\u00f6t\u00fc ama\u00e7l\u0131 olmasa da kullan\u0131c\u0131n\u0131n hayat\u0131n\u0131 kolayla\u015ft\u0131rd\u0131\u011f\u0131 da s\u00f6ylenemez (tahminlerimize g\u00f6re k\u00f6t\u00fc ama\u00e7l\u0131 uygulamalar, t\u00fcm uygulamalar\u0131n yaln\u0131zca be\u015fte birini olu\u015fturur). Yaz\u0131l\u0131m\u0131 indirdi\u011fi andan itibaren Andrew, ekran\u0131n\u0131 reklamlarla kaplayan optimizasyon programlar\u0131, ana sayfas\u0131n\u0131 de\u011fi\u015ftiren ve her web sitesine banner\u2019lar ekleyen taray\u0131c\u0131 ara\u00e7 \u00e7ubuklar\u0131 ve hatta Truva Atlar\u0131 ile m\u00fccadele etmek zorunda kal\u0131r.<\/p>\n<div id=\"attachment_5773\" style=\"width: 982px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-5773\" class=\"wp-image-5773 size-full\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/03\/15134413\/pirate-matyoshka-partner.png\" alt=\"\" width=\"972\" height=\"489\"><p id=\"caption-attachment-5773\" class=\"wp-caption-text\">Pirate Matryoshka, kullan\u0131c\u0131n\u0131n bilgisayar\u0131na aralar\u0131nda k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n da bulundu\u011fu bir s\u00fcr\u00fc rahats\u0131z edici uygulama y\u00fckler.<\/p><\/div>\n<p>Andrew, ba\u015fka bir yerden benzer bir dosya indirseydi bunlardan ka\u00e7mak i\u00e7in bir \u015fans\u0131 olabilirdi; ortak yaz\u0131l\u0131m y\u00fckleyicileri, yasal olarak belirsiz bir alanda bulunsalar da kullan\u0131c\u0131ya y\u00fcklemeyi reddetme se\u00e7ene\u011fini sunarlar. Fakat bu se\u00e7ene\u011fi bulmak biraz zordur:<\/p>\n<div id=\"attachment_5774\" style=\"width: 940px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-5774\" class=\"wp-image-5774 size-full\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/03\/15145113\/pirate-matryoshka-additional-options.png\" alt=\"\" width=\"930\" height=\"468\"><p id=\"caption-attachment-5774\" class=\"wp-caption-text\">\u0130ndirmek istedi\u011finiz uygulaman\u0131n yan\u0131nda bir s\u00fcr\u00fc ek yaz\u0131l\u0131m gelir. Pirate Matryoshka, size bu iyili\u011fi reddetme f\u0131rsat\u0131n\u0131 sunmaz.<\/p><\/div>\n<p>Ancak Pirate Matryoshka ad\u0131n\u0131 verdi\u011fimiz Pirate Bay vir\u00fcs\u00fcnde, ek yaz\u0131l\u0131mlardan ka\u00e7man\u0131n hi\u00e7bir yolu yoktur, \u00e7\u00fcnk\u00fc <a href=\"https:\/\/securelist.com\/piratebay-malware\/89740\/\" target=\"_blank\" rel=\"noopener\">bu vir\u00fcs belirli \u00f6zelliklere sahiptir<\/a>. K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m, y\u00fckleme s\u00fcrecini ba\u015flatmadan \u00f6nce her kutucu\u011fu otomatik olarak i\u015faretleyen otomatik t\u0131klay\u0131c\u0131 mod\u00fcllerini \u00e7al\u0131\u015ft\u0131r\u0131r ve se\u00e7enekleri reddetme \u015fans\u0131n\u0131 elinizden al\u0131r.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5775\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2019\/03\/15145159\/pirate-matryoshka-infographics.png\" alt=\"\" width=\"1500\" height=\"1500\"><\/p>\n<h2>Sonu\u00e7<\/h2>\n<p>Torrent tracker\u2019lardan bir dosya indirirken k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlarla kar\u015f\u0131la\u015fmaya da haz\u0131r olun. Bu durum, \u00f6zellikle y\u00fcr\u00fct\u00fclebilir dosyalar i\u00e7ermek zorunda olan yaz\u0131l\u0131m dosyalar\u0131 i\u00e7in ge\u00e7erlidir.<\/p>\n<p>Fakat yine de torrentlerden ve korsan yaz\u0131l\u0131mlardan uzak durunca Andrew\u2019\u0131n k\u00f6t\u00fc talihinden kurtulabilece\u011finizi zannetmek de naifliktir. \u201cOrtak y\u00fckleyiciler\u201d, neredeyse <a href=\"https:\/\/securelist.com\/file-partner-programs\/87136\/\" target=\"_blank\" rel=\"noopener\">her yerde<\/a> kar\u015f\u0131n\u0131za \u00e7\u0131kabilir. Yani ya internetten indirilen t\u00fcm y\u00fcr\u00fct\u00fclebilir dosyalardan ka\u00e7\u0131nmak zorundas\u0131n\u0131z ya da elinizde g\u00fcvenilir bir antivir\u00fcs arac\u0131 bulundurmal\u0131s\u0131n\u0131z. \u00d6rne\u011fin, <a href=\"https:\/\/www.kaspersky.com.tr\/internet-security?icid=tr_kdailyplacehold_acq_ona_smm__onl_b2c_kasperskydaily_wpplaceholder____kismd___\" target=\"_blank\" rel=\"noopener\">Kaspersky Internet Security<\/a> Pirate Matryoshka ve benzerlerinin t\u00fcm bile\u015fenlerini tespit edebilir ve etkisiz hale getirebilir.<\/p>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"gandalf30\">\n","protected":false},"excerpt":{"rendered":"<p>Pirate Matryoshka k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131n\u0131n ayr\u0131nt\u0131l\u0131 bir incelemesi ve korsan ba\u011f\u0131ml\u0131lar\u0131n\u0131n bile torrent tracker&#8217;lardan korsan yaz\u0131l\u0131m indirmemesi i\u00e7in sebepler.<\/p>\n","protected":false},"author":2506,"featured_media":5771,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1287,1351],"tags":[1087,36,1880,1881,1879,537,1882,553],"class_list":{"0":"post-5770","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"category-threats","9":"tag-adware","10":"tag-malware-2","11":"tag-partner-programs","12":"tag-pirate-bay","13":"tag-reklam-virusleri","14":"tag-tehditler","15":"tag-torrents-pirate-matryoshka","16":"tag-zararli-yazilim-2"},"hreflang":[{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/pirate-matryoshka-malware\/5770\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/pirate-matryoshka-malware\/15377\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/pirate-matryoshka-malware\/12944\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/pirate-matryoshka-malware\/6143\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/pirate-matryoshka-malware\/17317\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/pirate-matryoshka-malware\/15472\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/pirate-matryoshka-malware\/14166\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/pirate-matryoshka-malware\/17999\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/pirate-matryoshka-malware\/17014\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/pirate-matryoshka-malware\/22374\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/pirate-matryoshka-malware\/25905\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/pirate-matryoshka-malware\/11495\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/pirate-matryoshka-malware\/11559\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/pirate-matryoshka-malware\/10451\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/pirate-matryoshka-malware\/18709\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/pirate-matryoshka-malware\/22753\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/pirate-matryoshka-malware\/18063\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/pirate-matryoshka-malware\/22249\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/pirate-matryoshka-malware\/22184\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.tr\/blog\/tag\/tehditler\/","name":"tehditler"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/5770","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/users\/2506"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=5770"}],"version-history":[{"count":4,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/5770\/revisions"}],"predecessor-version":[{"id":6823,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/5770\/revisions\/6823"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media\/5771"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=5770"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=5770"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=5770"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}