{"id":9954,"date":"2021-08-26T11:48:00","date_gmt":"2021-08-26T08:48:00","guid":{"rendered":"https:\/\/www.kaspersky.com.tr\/blog\/?p=9954"},"modified":"2021-08-26T11:48:00","modified_gmt":"2021-08-26T08:48:00","slug":"fmwhatsapp-mod-downloads-malware","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.tr\/blog\/fmwhatsapp-mod-downloads-malware\/9954\/","title":{"rendered":"WhatsApp i\u00e7in geli\u015ftirilen FMWhatsApp modu Truva Atlar\u0131 indiriyor"},"content":{"rendered":"<p>K\u0131sa s\u00fcre \u00f6nce pop\u00fcler WhatsApp modu FMWhatsApp\u2019\u0131n bir s\u00fcr\u00fcm\u00fcnde yerle\u015fik bir Truva At\u0131 bulundu\u011funu <a href=\"https:\/\/securelist.com\/triada-trojan-in-whatsapp-mod\/103679\/\" target=\"_blank\" rel=\"noopener\">ke\u015ffettik<\/a>. Triada ad\u0131ndaki bu Truva at\u0131, di\u011fer k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131 kullan\u0131c\u0131lar\u0131n cihazlar\u0131na indiriyor. \u0130\u015fte bunun nas\u0131l yap\u0131ld\u0131\u011f\u0131 ve WhatsApp\u2019\u0131n de\u011fi\u015ftirilmi\u015f s\u00fcr\u00fcmlerini kullanman\u0131n tehlikeli olmas\u0131n\u0131n nedenleri.<\/p>\n<h2>Neden WhatsApp modlar\u0131 kullan\u0131l\u0131yor?<\/h2>\n<p>Kullan\u0131c\u0131lar\u0131n hepsi resmi WhatsApp uygulamas\u0131ndan memnun de\u011fil. Baz\u0131lar\u0131, kendi kendini imha eden mesajlar g\u00f6nderebilmeyi veya tam tersi, ba\u015fka bir kullan\u0131c\u0131n\u0131n sildi\u011fi mesajlar\u0131 g\u00f6r\u00fcnt\u00fcleyebilmeyi istiyor. Di\u011fer baz\u0131 kullan\u0131c\u0131lar dinamik temalar pe\u015findeyken ve baz\u0131lar\u0131 ise belirli yaz\u0131\u015fmalar\u0131 sohbet listesinden gizlemeyi veya mesajlar\u0131 otomatik olarak \u00e7evirmek istiyor.<\/p>\n<p>Do\u011fal olarak bu \u00f6zellikleri, WhatsApp\u2019\u0131n geli\u015ftiricilerinin uygulamaya dahil etmelerini beklemeden, hemen kullanmak istiyorlar. Bunun sonucunda baz\u0131 kullan\u0131c\u0131lar, olduk\u00e7a fazla say\u0131daki, bulunmas\u0131 zor olmayan de\u011fi\u015ftirilmi\u015f \u00e7evrimi\u00e7i WhatsApp istemcilerine y\u00f6neliyor.<\/p>\n<p>WhatsApp\u2019\u0131n bu t\u00fcr de\u011fi\u015fiklikler konusunda <a href=\"https:\/\/techcrunch.com\/2015\/01\/21\/whatsapp-cracks-down-on-third-party-apps-temporarily-bans-their-users-from-its-service\/\" target=\"_blank\" rel=\"noopener nofollow\">ara s\u0131ra yapt\u0131\u011f\u0131<\/a> <a href=\"https:\/\/www.notebookcheck.net\/WhatsApp-is-now-banning-users-of-third-party-apps-GBWhatsApp-WhatsApp-Plus.414489.0.html\" target=\"_blank\" rel=\"noopener nofollow\">bask\u0131lar<\/a> veya hesap yasaklama tehditleri bile Mod hayranlar\u0131n\u0131 cayd\u0131ram\u0131yor.<\/p>\n<p>WhatsApp modu geli\u015ftirenler de genellikle, kullan\u0131c\u0131lar\u0131n arad\u0131\u011f\u0131 \u00f6zelliklerle birlikte modun i\u00e7ine \u2014 anla\u015f\u0131labilir \u015fekilde \u2014 reklamlar yerle\u015ftiriyor. Ancak buradaki sorun, k\u00f6t\u00fc niyetli kodlar\u0131n geli\u015ftiricilerin radar\u0131na girebilece\u011fi \u00fc\u00e7\u00fcnc\u00fc taraf reklam mod\u00fcllerini kullanmalar\u0131ndan kaynaklan\u0131yor.<\/p>\n<p><strong><input type=\"hidden\" class=\"category_for_banner\" value=\"kisa-generic-2\"><\/strong><\/p>\n<h2>FMWhatsApp modundaki Triada ve di\u011fer Truva atlar\u0131<\/h2>\n<p>Pop\u00fcler bir WhatsApp modu olan FMWhatsApp\u2019ta da olan tam olarak buydu. 16.80.0 s\u00fcr\u00fcm\u00fcnde geli\u015ftiriciler, Truva At\u0131 i\u00e7eren \u00fc\u00e7\u00fcnc\u00fc taraf reklam mod\u00fcl\u00fcn\u00fc kulland\u0131lar.\u00a0<a href=\"https:\/\/www.kaspersky.com.tr\/mobile-security?icid=tr_kdailyplacehold_acq_ona_smm__onl_b2c_kdaily_wpplaceholder_sm-team___kisa____c8090141bf3f79f6\" target=\"_blank\" rel=\"noopener\">Mobil antivir\u00fcs<\/a> \u00e7\u00f6z\u00fcm\u00fcm\u00fcz bu k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131 Trojan.AndroidOS.Triada.ef olarak alg\u0131l\u0131yor.<\/p>\n<p>Benzer bir durumu, 2021 bahar\u0131nda, geli\u015ftiricileri do\u011frulanmam\u0131\u015f bir kayna\u011fa ait reklam mod\u00fcl\u00fc kullanan ve b\u00f6ylece <a href=\"https:\/\/www.kaspersky.com.tr\/blog\/infected-apkpure\/9515\/\" target=\"_blank\" rel=\"noopener\">geli\u015ftirdikleri uygulama ma\u011fazas\u0131na ve dolay\u0131s\u0131yla kullan\u0131c\u0131lara Triada Truva At\u0131 bula\u015ft\u0131ran<\/a> (biraz farkl\u0131 bir s\u00fcr\u00fcm\u00fc olsa da), resmi olmayan APKPure uygulama ma\u011fazas\u0131nda g\u00f6rd\u00fck.<\/p>\n<p>Vir\u00fcs bula\u015fm\u0131\u015f APKPure\u2019da oldu\u011fu gibi, FMWhatsApp modunun tehlikeli versiyonundaki Triada Truva At\u0131 da bir arac\u0131 i\u015flevi g\u00f6r\u00fcyor. \u00d6nce kullan\u0131c\u0131n\u0131n cihaz\u0131 hakk\u0131nda veri topluyor ve ard\u0131ndan bu bilgilere ba\u011fl\u0131 olarak ba\u015fka bir Truva At\u0131 indiriyor.<\/p>\n<p>Triada beraberinde, \u00e7ok \u00e7e\u015fitli nitelikteki \u201cekstralar\u0131\u201d getiriyor \u2014 FMWhatsApp\u2019\u0131n vir\u00fcsl\u00fc s\u00fcr\u00fcm\u00fc, cihazlara \u00e7e\u015fitli k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m t\u00fcrleri indiriyor:<\/p>\n<ul>\n<li>Di\u011fer k\u00f6t\u00fc ama\u00e7l\u0131 mod\u00fclleri indiren ve \u00e7al\u0131\u015ft\u0131ran bir Truva At\u0131 olan Trojan-Downloader.AndroidOS.Agent.ic,<\/li>\n<li>Di\u011fer k\u00f6t\u00fc ama\u00e7l\u0131 mod\u00fclleri indirip \u00e7al\u0131\u015ft\u0131ran ve ayr\u0131ca beklenmedik anlarda tam ekran reklam g\u00f6sterebilen Trojan-Downloader.AndroidOS.Gapac.e,<\/li>\n<li><a href=\"https:\/\/securelist.com\/unkillable-xhelper-and-a-trojan-matryoshka\/96487\/\" target=\"_blank\" rel=\"noopener\">xHelper<\/a> Truva at\u0131n\u0131n y\u00fckleyici mod\u00fcl\u00fcn\u00fc indirip \u00e7al\u0131\u015ft\u0131ran ve arka planda g\u00f6r\u00fcnmez reklamlar \u00e7al\u0131\u015ft\u0131ran Trojan-Downloader.AndroidOS.Helper.a,<\/li>\n<li>\u00dccretli aboneliklere kaydolan Trojan.AndroidOS.MobOk.i truva at\u0131,<\/li>\n<li>\u00dccretli aboneliklere kaydolan bir di\u011fer Truva at\u0131 Trojan.AndroidOS.Subscriber.l,<\/li>\n<li>Kurban\u0131n telefonundaki WhatsApp hesab\u0131nda oturum a\u00e7an ve oturum a\u00e7ma onay metnini ele ge\u00e7iren, listedeki en karma\u015f\u0131k Truva at\u0131 Trojan.AndroidOS.Whatreg.b. Cihaz daha sonra spam da\u011f\u0131t\u0131m\u0131 veya yasa d\u0131\u015f\u0131 ticaret gibi \u00e7e\u015fitli yasa d\u0131\u015f\u0131 faaliyetler i\u00e7in bir site haline gelebiliyor.<\/li>\n<\/ul>\n<p><a href=\"https:\/\/securelist.com\/triada-trojan-in-whatsapp-mod\/103679\/\" target=\"_blank\" rel=\"noopener\">Securelist\u2019te payla\u015f\u0131\u011f\u0131m\u0131z yaz\u0131da<\/a>, FMWhatsapp modunun Triada Truva At\u0131 hakk\u0131nda daha fazla bilgi yer al\u0131yor.<\/p>\n<h2>Bu t\u00fcr sald\u0131r\u0131lara kar\u015f\u0131 kendinizi nas\u0131l savunursunuz?<\/h2>\n<p>Dikkatli olmak ve cihaz\u0131n\u0131z\u0131 g\u00fcvenli bir \u015fekilde kullanmak, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131 ve di\u011fer mobil zararl\u0131lar\u0131 telefonunuzdan uzak tutma konusunda kilit rol oynar. Genel anlamda konu\u015fursak, sorun ya\u015famamak i\u00e7in \u015fu ipu\u00e7lar\u0131n\u0131 izleyin:<\/p>\n<ul>\n<li>Resmi olmayan kaynaklardan uygulama y\u00fcklemekten ka\u00e7\u0131n\u0131n ve cihaz\u0131n\u0131z\u0131n ayarlar\u0131ndan, bu kaynaklardan uygulama y\u00fcklenebilmesine ili\u015fkin izni kapat\u0131n. (Resmi bir ma\u011faza d\u0131\u015f\u0131ndan bir uygulama y\u00fcklemeniz gerekiyorsa, bu izni ge\u00e7ici olarak etkinle\u015ftirin ve ard\u0131ndan tekrar devre d\u0131\u015f\u0131 b\u0131rak\u0131n),<\/li>\n<li>Yaln\u0131zca resmi mesajla\u015fma uygulamalar\u0131n\u0131 kullan\u0131n ve bunlar\u0131 yaln\u0131zca resmi uygulama ma\u011fazalar\u0131ndan indirin \u2014 baz\u0131 \u00f6zelliklerden yoksun olabilirler ancak en az\u0131ndan vir\u00fcslerin telefonunuzu sarmas\u0131na neden olmazlar,<\/li>\n<li>Y\u00fckl\u00fc uygulamalara hangi izinleri verdi\u011finizi kontrol edin \u2014 <a href=\"https:\/\/www.kaspersky.com.tr\/blog\/android-8-permissions-guide\/5356\/\" target=\"_blank\" rel=\"noopener\">baz\u0131 izinler ger\u00e7ek bir tehdit olu\u015fturabilir<\/a>,<\/li>\n<li>Telefonunuza\u00a0<a href=\"https:\/\/www.kaspersky.com.tr\/mobile-security?icid=tr_kdailyplacehold_acq_ona_smm__onl_b2c_kdaily_wpplaceholder_sm-team___kisa____c8090141bf3f79f6\" target=\"_blank\" rel=\"noopener\">g\u00fcvenilir bir mobil antivir\u00fcs uygulamas\u0131<\/a> y\u00fckleyin ve uygulaman\u0131n yapt\u0131\u011f\u0131 uyar\u0131lar\u0131 dikkate al\u0131n.<\/li>\n<\/ul>\n<p><strong><input type=\"hidden\" class=\"category_for_banner\" value=\"android-malware\"><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Pop\u00fcler WhatsApp bir modu olan FMWhatsApp, Truva atlar\u0131n\u0131 ak\u0131ll\u0131 telefonlara indiren vir\u00fcsl\u00fc bir reklam mod\u00fcl\u00fc kullan\u0131yor.<\/p>\n","protected":false},"author":2624,"featured_media":9955,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1351],"tags":[105,691,2401,1986,531],"class_list":{"0":"post-9954","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-threats","8":"tag-android","9":"tag-mesajlasma-uygulamalari","10":"tag-triada","11":"tag-truva-atlari","12":"tag-whatsapp"},"hreflang":[{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/fmwhatsapp-mod-downloads-malware\/9954\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/fmwhatsapp-mod-downloads-malware\/23215\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/fmwhatsapp-mod-downloads-malware\/18702\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/fmwhatsapp-mod-downloads-malware\/9354\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/fmwhatsapp-mod-downloads-malware\/25250\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/fmwhatsapp-mod-downloads-malware\/23319\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/fmwhatsapp-mod-downloads-malware\/22677\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/fmwhatsapp-mod-downloads-malware\/25859\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/fmwhatsapp-mod-downloads-malware\/25378\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/fmwhatsapp-mod-downloads-malware\/31296\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/fmwhatsapp-mod-downloads-malware\/41334\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/fmwhatsapp-mod-downloads-malware\/17995\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/fmwhatsapp-mod-downloads-malware\/15171\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/fmwhatsapp-mod-downloads-malware\/27232\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/fmwhatsapp-mod-downloads-malware\/31471\/"},{"hreflang":"nl","url":"https:\/\/www.kaspersky.nl\/blog\/fmwhatsapp-mod-downloads-malware\/27439\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/fmwhatsapp-mod-downloads-malware\/24262\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/fmwhatsapp-mod-downloads-malware\/29589\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/fmwhatsapp-mod-downloads-malware\/29394\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.tr\/blog\/tag\/android\/","name":"android"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/9954","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/users\/2624"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=9954"}],"version-history":[{"count":3,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/9954\/revisions"}],"predecessor-version":[{"id":9958,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/posts\/9954\/revisions\/9958"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media\/9955"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=9954"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=9954"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=9954"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}