![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2021\/08\/04163730\/malware-link-under-the-picture-letter.jpg\")
K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131ma ait ba\u011flant\u0131n\u0131n yer ald\u0131\u011f\u0131 e-posta<\/p><\/div>\n
\u00a0<\/p>\n
Ek yap\u0131lan PDF\u2019i g\u00f6r\u00fcyor musunuz? Asl\u0131nda bakt\u0131\u011f\u0131n\u0131z \u015feyin bir ekle alakas\u0131 yok. Outlook, e-posta eklerini buna benzer \u015fekilde g\u00f6r\u00fcnt\u00fcler ancak burada \u015f\u00f6yle bir tak\u0131m farkl\u0131l\u0131klar s\u00f6z konusu:<\/p>\n
- \n
- Ek yap\u0131lan dosyan\u0131n simgesi, sisteminizde PDF dosyalar\u0131n\u0131 a\u00e7mak i\u00e7in kulland\u0131\u011f\u0131n\u0131z uygulaman\u0131n simgesiyle e\u015fle\u015fmelidir. E\u015flemiyorsa; ya bu bir ek de\u011fildir ya da eklenen PDF dosyas\u0131 de\u011fildir,<\/li>\n
- Farenizi ger\u00e7ek ekin \u00fczerine getirdi\u011finizde dosyayla ilgili isim, t\u00fcr, boyut gibi ayr\u0131nt\u0131lar g\u00f6r\u00fcnmelidir, \u015f\u00fcpheli bir internet sitesine ait bir ba\u011flant\u0131 de\u011fil,<\/li>\n
- Dosya ad\u0131n\u0131n yan\u0131ndaki ok renklendirilmi\u015f ve i\u00e7erik men\u00fcs\u00fcn\u00fc a\u00e7an bir buton i\u015flevine sahip olmal\u0131d\u0131r,<\/li>\n
- Yap\u0131lan ek, e-posta metninin i\u00e7inde de\u011fil, \u015funa benzer \u015fekilde metinden ayr\u0131 bir yerde g\u00f6r\u00fcnmelidir:<\/li>\n<\/ul>\n
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2021\/08\/04163754\/malware-link-under-the-picture-attachment.jpg\")
Ger\u00e7ek bir PDF eki<\/p><\/div>\n
\u00a0<\/p>\n
PDF eki olarak gizlenen bu nesne, asl\u0131nda normal bir g\u00f6r\u00fcnt\u00fc dosyas\u0131ndan ba\u015fka bir \u015fey de\u011fil. Farenizle mesaj\u0131n b\u00f6l\u00fcmlerini se\u00e7meyi veya Ctrl-A\u2019y\u0131 kullanarak t\u00fcm\u00fcn\u00fc se\u00e7meyi denedi\u011finizde, yaln\u0131zca se\u00e7ilen k\u0131sm\u0131 kadar\u0131 g\u00f6r\u00fcn\u00fcr olur.<\/p>\n
![\"\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/91\/2021\/08\/04163815\/malware-link-under-the-picture-image.jpg\")
PDF eki gibi g\u00f6r\u00fcnen bir g\u00f6r\u00fcnt\u00fc<\/p><\/div>\n
\u00a0<\/p>\n
G\u00f6r\u00fcnt\u00fcde, k\u00f6t\u00fc ama\u00e7l\u0131 bir programa giden bir k\u00f6pr\u00fc ba\u011flant\u0131 gizli. Bu ba\u011flant\u0131ya t\u0131kland\u0131\u011f\u0131nda Truva At\u0131 bir casus yaz\u0131l\u0131m indirilir.<\/p>\n
Sald\u0131r\u0131 y\u00fck\u00fc<\/h2>\n
Bu \u00f6rnek \u00f6zelinde, k\u00f6t\u00fc ama\u00e7l\u0131 ba\u011flant\u0131, Kaspersky taraf\u0131ndan olduk\u00e7a yayg\u0131n bir Truva At\u0131 casus yaz\u0131l\u0131m\u0131 olarak tan\u0131mlanan ve 2017\u2019den beri bilinen, sald\u0131rganlar\u0131n giri\u015f formlar\u0131ndaki parolalar\u0131 ve di\u011fer bilgileri \u00e7almas\u0131n\u0131 sa\u011flayan Trojan-Spy.Win32.Noon<\/a> Truva At\u0131na ait bir y\u00fckleyicinin yer ald\u0131\u011f\u0131 Swift_Banco_Unicredit_Wire_sepa_export_000937499223.cab adl\u0131 bir ar\u015fiv dosyas\u0131na y\u00f6nlendirilmi\u015f.<\/p>\n
Kendinizi koruman\u0131n yollar\u0131<\/h2>\n
Truva At\u0131 casus yaz\u0131l\u0131mlar\u0131n \u015firketinize zarar vermesini, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n \u00e7al\u0131\u015fmas\u0131n\u0131 \u00f6nlemek i\u00e7in internet eri\u015fimi olan her cihaza g\u00fcvenilir bir g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fc<\/a> kurun.<\/p>\n