{"id":6533,"date":"2019-10-10T10:53:51","date_gmt":"2019-10-10T07:53:51","guid":{"rendered":"https:\/\/www.kaspersky.com.tr\/blog\/?p=6533"},"modified":"2019-11-15T14:23:14","modified_gmt":"2019-11-15T11:23:14","slug":"no-more-ransom-yatron-fortunecrypt","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.tr\/blog\/no-more-ransom-yatron-fortunecrypt\/6533\/","title":{"rendered":"Yatron ve FortuneCrypt fidye yaz\u0131l\u0131mlar\u0131na yard\u0131m ediyoruz"},"content":{"rendered":"<p>Fidye yaz\u0131l\u0131mlar\u0131 hem kullan\u0131c\u0131lar\u0131n hem de uzmanlar\u0131n ba\u015f\u0131n\u0131 a\u011fr\u0131tmaya devam ediyor. Fidye yaz\u0131l\u0131mlar\u0131 taraf\u0131ndan \u015fifrelenen dosyalar\u0131 geri d\u00f6nd\u00fcrmek kolay bir i\u015f de\u011fil, hatta \u00e7o\u011funlukla imkans\u0131z. Fakat Yatron ve FortuneCrypt k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n\u0131n ma\u011fdurlar\u0131 i\u00e7in iyi haberlerimiz var: Kaspersky uzmanlar\u0131, bu k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n \u015fifreledi\u011fi dosyalar i\u00e7in \u015fifre \u00e7\u00f6z\u00fcc\u00fcler geli\u015ftirdi ve yay\u0131nlad\u0131.<\/p>\n<h2>Yatron taraf\u0131ndan \u015fifrelenen dosyalar\u0131n \u015fifresi nas\u0131l \u00e7\u00f6z\u00fcl\u00fcr<\/h2>\n<p>Yatron fidye yaz\u0131l\u0131m\u0131, <a href=\"https:\/\/www.kaspersky.com\/blog\/ded-cryptor-ransomware\/12526\/\" target=\"_blank\" rel=\"noopener nofollow\">al\u0131\u015f\u0131lmad\u0131k bir hikayesi olan<\/a> bir ba\u015fka \u015fifreliyiciye, Hidden Tear\u2019a dayan\u0131yor. Birka\u00e7 y\u0131l \u00f6nce, T\u00fcrk ara\u015ft\u0131rmac\u0131 Utku Sen, bu k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131 e\u011fitim ve ara\u015ft\u0131rma amac\u0131yla yaratt\u0131 ve kaynak kodunu internete y\u00fckledi. Bu yaz\u0131l\u0131m\u0131n miras\u0131 hala bizlerle; uzmanlar hala buna dayal\u0131 yeni fidye yaz\u0131l\u0131mlar\u0131 bulmaya devam ediyor, Yatron da bunlardan biri.<\/p>\n<p>Neyse ki Yatron kodunda a\u00e7\u0131klar bulundu ve uzmanlar\u0131m\u0131z bu a\u00e7\u0131klardan faydalanarak bir \u015fifre \u00e7\u00f6z\u00fcc\u00fc geli\u015ftirdi. Kilitli dosyalardan birinde *.yatron uzant\u0131s\u0131 g\u00f6r\u00fcrseniz dosyalar\u0131n\u0131z\u0131 geri d\u00f6nd\u00fcrecek \u015fifre \u00e7\u00f6z\u00fcc\u00fcy\u00fc indirmek i\u00e7in <a href=\"https:\/\/www.nomoreransom.org\/en\/decryption-tools.html\" target=\"_blank\" rel=\"noopener nofollow\">No More Ransom<\/a> sitesini ziyaret edin.<\/p>\n<h2>FortuneCrypt ile \u015fifrelenen dosyalar\u0131n \u015fifresi nas\u0131l \u00e7\u00f6z\u00fcl\u00fcr<\/h2>\n<p>\u0130kinci fidye yaz\u0131l\u0131m\u0131 paketine de bir ba\u015f yap\u0131t demek zor. FortuneCrypt\u2019in yarat\u0131c\u0131lar\u0131, C\/C++ ve Python gibi geli\u015fmi\u015f diller kullanmak yerine yaz\u0131l\u0131m\u0131 bir t\u00fcr turbo BASIC olan basit bir dille, BlitzMax ile yazm\u0131\u015f. K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m ara\u015ft\u0131rma ge\u00e7mi\u015fimiz boyunca bu dille daha \u00f6nce hi\u00e7 kar\u015f\u0131la\u015fmad\u0131k.<\/p>\n<p>Uzmanlar\u0131m\u0131z, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131n \u015fifreleme algoritmas\u0131n\u0131n olduk\u00e7a kusurlu oldu\u011funu fark ederek buna y\u00f6nelik bir \u015fifre \u00e7\u00f6z\u00fcc\u00fc geli\u015ftirdi. Yatron\u2019da oldu\u011fu gibi, FortuneCrypt ma\u011fdurlar\u0131 da <a href=\"https:\/\/www.nomoreransom.org\/en\/decryption-tools.html\" target=\"_blank\" rel=\"noopener nofollow\">No More Ransom<\/a> portal\u0131ndan \u015fifre \u00e7\u00f6z\u00fcc\u00fclerini indirebilirler.<\/p>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"kis-trial-ransomware\">\n<h2>Bilgisayar\u0131n\u0131zdaki fidye yaz\u0131l\u0131mlar\u0131 hakk\u0131nda ne yapabilirsiniz<\/h2>\n<p>Her \u015feyden \u00f6nce, <a href=\"https:\/\/www.kaspersky.com.tr\/blog\/no-no-ransom\/2582\/\" target=\"_blank\" rel=\"noopener\">fidyeyi \u00f6demeyin<\/a>. \u00d6deme yaparak yaln\u0131zca su\u00e7lular\u0131 cesaretlendirmi\u015f olursunuz; verilerini geri alaca\u011f\u0131n\u0131z\u0131n garantisi yoktur. Yap\u0131lacak en iyi \u015fey, fidye yaz\u0131l\u0131m\u0131 kurbanlar\u0131n\u0131n ma\u011fduriyetini giderebilmek i\u00e7in Kasperaky, Interpol ve Hollanda polisi de dahil d\u00fcnyan\u0131n d\u00f6rt bir yan\u0131ndan bir\u00e7ok siber g\u00fcvenlik \u015firketinden ve emniyet te\u015fkilat\u0131ndan uzmanlar taraf\u0131ndan olu\u015fturulan <a href=\"https:\/\/www.nomoreransom.org\/en\/decryption-tools.html\" target=\"_blank\" rel=\"noopener nofollow\">No More Ransom<\/a> web sitesini ziyaret etmektir. Web sitesinde y\u00fczlerce fidye yaz\u0131l\u0131m\u0131 program\u0131na y\u00f6nelik \u015fifre \u00e7\u00f6z\u00fcc\u00fcler yer al\u0131yor ve elbette hepsi \u00fccretsiz.<\/p>\n<h2>Fidye yaz\u0131l\u0131m\u0131 \u015fantajc\u0131lar\u0131ndan kendinizi nas\u0131l koruyabilirsiniz<\/h2>\n<p>Son olarak, ma\u011fdur olmaman\u0131z i\u00e7in birka\u00e7 ipucu:<\/p>\n<ul>\n<li>Bilinmeyen ve \u015f\u00fcpheli sitelerden program indirmeyin. Program\u0131n ismi do\u011fru g\u00f6r\u00fcnse bile paket i\u00e7erisinde tamamen farkl\u0131 ve tehlikeli \u015feyler olabilir.<\/li>\n<li>Bilinmeyen g\u00f6ndericilerden gelen ba\u011flant\u0131lara t\u0131klamay\u0131n, e-posta eklerini a\u00e7may\u0131n. Bir arkada\u015f\u0131n\u0131zdan veya meslekta\u015f\u0131n\u0131zdan \u015f\u00fcpheli ve beklenmeyen bir mesaj al\u0131rsan\u0131z dosyan\u0131n g\u00fcvenli olup olmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in bu ki\u015fiyi aray\u0131n.<\/li>\n<li>\u0130\u015fletim sisteminiz ve d\u00fczenli olarak kulland\u0131\u011f\u0131n\u0131z programlar i\u00e7in son g\u00fcncellemeleri y\u00fckledi\u011finizden emin olun. Bu sayede fidye yaz\u0131l\u0131m\u0131 geli\u015ftirenlerin faydaland\u0131\u011f\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131ndan sak\u0131nm\u0131\u015f olursunuz.<\/li>\n<li><a href=\"http:\/\/kas.pr\/kdkistr\" target=\"_blank\" rel=\"noopener\">G\u00fcvenilir bir antivir\u00fcs uygulamas\u0131<\/a> kurun ve belirli programlar devre d\u0131\u015f\u0131 b\u0131rakman\u0131z\u0131 istese bile asla devre d\u0131\u015f\u0131 b\u0131rakmay\u0131n.<\/li>\n<li>\u00d6nemli verileri yedekleyin ve bu verileri bulutta, flash bellekte veya harici bir bellekte saklay\u0131n.<\/li>\n<\/ul>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"kis-top3\">\n","protected":false},"excerpt":{"rendered":"<p>Yatron ve FortuneCrypt fidye yaz\u0131l\u0131m\u0131 ma\u011fdurlar\u0131, \u015fifrelenen dosyalar\u0131n\u0131 geri d\u00f6nd\u00fcrmek i\u00e7in No More Ransom web sitesinden \u015fifre \u00e7\u00f6z\u00fcc\u00fc indirebilir.<\/p>\n","protected":false},"author":40,"featured_media":6534,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1287,1351],"tags":[591,559,1093,1304,935,537],"class_list":{"0":"post-6533","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"category-threats","9":"tag-fidye-yazilimi","10":"tag-haberler-2","11":"tag-no-more-ransom","12":"tag-sifre-cozuculer","13":"tag-sifreleyiciler","14":"tag-tehditler"},"hreflang":[{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/no-more-ransom-yatron-fortunecrypt\/6533\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/no-more-ransom-yatron-fortunecrypt\/16765\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/no-more-ransom-yatron-fortunecrypt\/14154\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/no-more-ransom-yatron-fortunecrypt\/6545\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/no-more-ransom-yatron-fortunecrypt\/18752\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/no-more-ransom-yatron-fortunecrypt\/16799\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/no-more-ransom-yatron-fortunecrypt\/15117\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/no-more-ransom-yatron-fortunecrypt\/19041\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/no-more-ransom-yatron-fortunecrypt\/17899\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/no-more-ransom-yatron-fortunecrypt\/23758\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/no-more-ransom-yatron-fortunecrypt\/28896\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/no-more-ransom-yatron-fortunecrypt\/12114\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/no-more-ransom-yatron-fortunecrypt\/12431\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/no-more-ransom-yatron-fortunecrypt\/11228\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/no-more-ransom-yatron-fortunecrypt\/20342\/"},{"hreflang":"zh","url":"https:\/\/www.kaspersky.com.cn\/blog\/no-more-ransom-yatron-fortunecrypt\/10195\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/no-more-ransom-yatron-fortunecrypt\/23875\/"},{"hreflang":"nl","url":"https:\/\/www.kaspersky.nl\/blog\/no-more-ransom-yatron-fortunecrypt\/24668\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/no-more-ransom-yatron-fortunecrypt\/19221\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/no-more-ransom-yatron-fortunecrypt\/23534\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/no-more-ransom-yatron-fortunecrypt\/23384\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.tr\/blog\/tag\/haberler-2\/","name":"haberler"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/6533","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/users\/40"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=6533"}],"version-history":[{"count":2,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/6533\/revisions"}],"predecessor-version":[{"id":6715,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/6533\/revisions\/6715"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media\/6534"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=6533"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=6533"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=6533"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}