{"id":31139,"date":"2022-05-22T19:30:04","date_gmt":"2022-05-22T16:30:04","guid":{"rendered":"https:\/\/kutaybilen.com.tr\/?p=31139"},"modified":"2022-05-22T19:30:04","modified_gmt":"2022-05-22T16:30:04","slug":"microsoft-siber-atak-raporunu-yayinladi","status":"publish","type":"post","link":"https:\/\/kutaybilen.com.tr\/?p=31139","title":{"rendered":"Microsoft, Siber Atak Raporunu Yay\u0131nlad\u0131"},"content":{"rendered":"

Microsoft, y\u0131llarca siber g\u00fcvenlik alan\u0131ndaki b\u00fcy\u00fck etkinliklere ve trendlere g\u00f6z at\u0131lmas\u0131n\u0131 sa\u011flayan Microsoft Security Intelligence Report<\/strong>‘u 2018 y\u0131l\u0131nda emekliye ay\u0131rm\u0131\u015ft\u0131. \u015eirket, yapt\u0131\u011f\u0131 bu yan\u0131lg\u0131 bug\u00fcn geri d\u00f6nd\u00fc ve Microsoft Digital Defence Report<\/strong> olarak yine markaland\u0131rd\u0131.<\/p>\n

\u015eirket, Temmuz 2019 \u2013 Haziran 2020 datalar\u0131n\u0131n de d\u00e2hil oldu\u011fu 88 sayfal\u0131k bir rapor yay\u0131nlad\u0131. \u015eirket, yay\u0131nlad\u0131\u011f\u0131 bu raporunda \u015firketlerin y\u00fczle\u015fmek zorunda kald\u0131\u011f\u0131 genel tehditlerin bir foto\u011fraf\u0131n\u0131 \u00e7\u0131kard\u0131<\/strong>.<\/p>\n

Microsoft’un siber taarruzlar raporu<\/b><\/p>\n

<\/p>\n

Microsoft, siber kabahat k\u00fcmelerinin bu sene COVID-19<\/strong> salg\u0131n\u0131n\u0131 kullan\u0131c\u0131lar\u0131 yemlemek i\u00e7in kulland\u0131\u011f\u0131n\u0131 lakin bunlar\u0131n, genel ziyanl\u0131 yaz\u0131l\u0131m ekosisteminin yaln\u0131zca bir k\u0131sm\u0131 oldu\u011funu a\u00e7\u0131klad\u0131. Zdnet’te yer alan habere nazaran salg\u0131n, bu y\u0131lki berbat emelli yaz\u0131l\u0131m ak\u0131nlar\u0131nda minimal bir rol oynad\u0131<\/strong>.<\/p>\n

\u0130\u015fletmelere y\u00f6nelik e-posta \u015fifre avc\u0131l\u0131\u011f\u0131 (email phishing) b\u00fcy\u00fcmeye devam ederek bask\u0131n bir vekt\u00f6r oldu. \u015eirket, 2019 y\u0131l\u0131nda 13 milyardan fazla<\/strong> ziyanl\u0131 ve ku\u015fkulu e-postay\u0131 engelledi\u011fini a\u00e7\u0131klad\u0131. Bu e-postalardan 1 milyardan fazlas\u0131nda \u015fifre avc\u0131l\u0131\u011f\u0131 gayesiyle olu\u015fturulmu\u015f URL’ler bulunuyordu.<\/p>\n

\u015eirket, hacker’lar\u0131n ayr\u0131yeten IMAP ve SMTP e-posta protokollerine kar\u015f\u0131 \u015fifre tekrar kullan\u0131m\u0131 ve \u015fifre sprey taarruzlar\u0131n\u0131 (password spray attacks) benimsemeye ba\u015flad\u0131klar\u0131n\u0131 s\u00f6yledi. Bu h\u00fccumlar\u0131n pop\u00fclerle\u015fmesinin sebebi ise IMAP ve SMTP’nin \u00e7ok fakt\u00f6rl\u00fc do\u011frulama<\/strong> \u00f6zelli\u011fini desteklememesinden \u00f6t\u00fcr\u00fc sald\u0131rganlar\u0131n bunu baypas edebilmesi.<\/p>\n

Fidye yaz\u0131l\u0131mlar<\/b><\/p>\n

<\/p>\n

Teknoloji devi, ge\u00e7ti\u011fimiz y\u0131lki en y\u0131k\u0131c\u0131 siber c\u00fcr\u00fcm tehdidinin fidye yaz\u0131l\u0131m \u00e7eteleri<\/strong> oldu\u011funu a\u00e7\u0131klad\u0131. Microsoft’un en \u00e7ok ba\u015f\u0131n\u0131 a\u011fr\u0131tanlar ise “big game hunters” ve “human-operated ransomware” olarak bilinen k\u00fcmeler oldu. Bu k\u00fcmeler, bilhassa b\u00fcy\u00fck \u015firketlere ya da devlet tertiplerine ili\u015fkin a\u011flar\u0131 gaye ald\u0131.<\/p>\n

Microsoft, bu sene fidye yaz\u0131l\u0131m \u00e7etelerinin epeyce etkin oldu\u011funu ve bir sald\u0131r\u0131y\u0131 ba\u015flatmak i\u00e7in muhta\u00e7l\u0131klar\u0131 olan vakti bir epey daraltt\u0131klar\u0131n\u0131 lisana getirdi. \u015eirket, bu ak\u0131nlardan kimilerinin 45 dakikadan<\/strong> daha k\u0131sa s\u00fcrd\u00fc\u011f\u00fcn\u00fc a\u00e7\u0131klad\u0131.<\/p>\n

Tedarik zinciri g\u00fcvenli\u011fi<\/b><\/p>\n

<\/p>\n

Microsoft’un raporunda dikkat \u00e7ekti\u011fi bir \u00f6b\u00fcr ak\u0131n da tedarik zinciri ataklar\u0131 oldu. Bu taarruz tipinde, sald\u0131rgan bir amaca sald\u0131rd\u0131ktan sonra maksad\u0131n\u0131n kendi altyap\u0131s\u0131n\u0131 kullanarak<\/strong> t\u00fcm m\u00fc\u015fterilerine tek tek ya da e\u015f vakitli olarak ataklar ger\u00e7ekle\u015ftiriyor.<\/p>\n

\u015eirket, bu h\u00fccumlarda bir art\u0131\u015f oldu\u011funu lisana getirse de tedarik zinciri taarruzlar\u0131<\/strong>, toplam\u0131n i\u00e7erisinde epey k\u00fc\u00e7\u00fck bir hisseye sahip. Nat\u00fcrel her ne olursa olsun bu, gerekli tedbirlerin al\u0131nmamas\u0131 i\u00e7in bir mazeret olu\u015fturmuyor.<\/p>\n

Ulus devlet k\u00fcmeleri<\/b><\/p>\n

<\/p>\n

Yay\u0131nlanan raporda ulus devlet hack k\u00fcmelerinin<\/strong> hayli a\u011f\u0131r bir sene ge\u00e7irdi\u011fi tabir edildi. \u015eirket, Temmuz 2019 \u2013 Haziran 2020 ortas\u0131nda kullan\u0131c\u0131lar\u0131na 13 binden fazla<\/strong> ulus devlet bildirimleri g\u00f6nderdi\u011fini lisana getirdi. Microsoft, ayr\u0131yeten bu taarruzlar\u0131n b\u00fcy\u00fck bir \u00e7o\u011funlu\u011funun Rusya takviyeli hack k\u00fcmeleri oldu\u011funu ve gayelerin \u00e7o\u011funlu\u011funun da ABD’de oldu\u011funu a\u00e7\u0131klad\u0131.<\/p>\n

Raporda yer alan enteresan bilgilerden bir tanesi de bu h\u00fccumlar\u0131n ama\u00e7lar\u0131yd\u0131. Rapora nazaran bu ulus devlet k\u00fcmelerinin ana ama\u00e7lar\u0131 devlete ili\u015fkin olmayan tertiplere y\u00f6nelikti. Bir \u00f6b\u00fcr enteresan nokta ise bu taarruzlar\u0131n kritik altyap\u0131 kesimlerinin d\u0131\u015f\u0131ndaki tertipleri<\/strong> gaye almas\u0131 oldu.<\/p>\n

Sonu\u00e7 olarak ise Microsoft, hata k\u00fcmelerinin ge\u00e7en y\u0131l boyunca muvaffakiyet oranlar\u0131n\u0131 art\u0131rmak i\u00e7in tekniklerini geli\u015ftirdiklerini a\u00e7\u0131klad\u0131. \u015eirketin yay\u0131nlad\u0131\u011f\u0131 raporun tamam\u0131na buradan ula\u015fabilirsiniz.<\/p>\n

<\/div>\n","protected":false},"excerpt":{"rendered":"

Microsoft, y\u0131llarca siber g\u00fcvenlik alan\u0131ndaki b\u00fcy\u00fck etkinliklere ve trendlere g\u00f6z at\u0131lmas\u0131n\u0131 sa\u011flayan Microsoft Security Intelligence Report’u …<\/p>\n","protected":false},"author":1,"featured_media":31140,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[15],"tags":[1091,1239,5062,1605,946],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/31139"}],"collection":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=31139"}],"version-history":[{"count":1,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/31139\/revisions"}],"predecessor-version":[{"id":31141,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/31139\/revisions\/31141"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/media\/31140"}],"wp:attachment":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=31139"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=31139"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=31139"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}