{"id":7367,"date":"2022-04-08T18:42:04","date_gmt":"2022-04-08T15:42:04","guid":{"rendered":"https:\/\/kutaybilen.com.tr\/?p=7367"},"modified":"2022-04-08T18:42:04","modified_gmt":"2022-04-08T15:42:04","slug":"androidde-smsle-yayilan-bir-fidye-yazilimi-tespit-edildi","status":"publish","type":"post","link":"https:\/\/kutaybilen.com.tr\/?p=7367","title":{"rendered":"Android’de SMS’le Yay\u0131lan Bir Fidye Yaz\u0131l\u0131m\u0131 Tespit Edildi"},"content":{"rendered":"

Pazartesi g\u00fcn\u00fc ESET'teki siber g\u00fcvenlik uzmanlar\u0131, 'Android\/Filecoder.C' isimli bir ziyanl\u0131 yaz\u0131l\u0131m\u0131 ke\u015ffetti. 12 Temmuz 2019 tarihinden beri etkin oldu\u011fu tespit edilen ziyanl\u0131 yaz\u0131l\u0131m, Reddit ve XDA Developers \u00fczere forumlarda yay\u0131lmaya ba\u015flad\u0131.<\/p>\n

Etkiledi\u011fi ayg\u0131tlarda insanlar\u0131 cinsel i\u00e7erikleri indirtmeye ya da bit.ly linklerine y\u00f6nlendirmeye \u00e7al\u0131\u015fan bu ziyanl\u0131 yaz\u0131l\u0131m, ayg\u0131ta bir sefer girdikten sonra ki\u015finin rehberine girerek herkese SMS g\u00f6nderiyor. Telefondaki 'Rehber' ikonunu kullanan uygulama, i\u00e7erisine girildi\u011fi vakit ziyanl\u0131 yaz\u0131l\u0131m\u0131 telefon i\u00e7erisine yerle\u015ftiriyor.<\/p>\n

<\/p>\n

Etkilenen ayg\u0131t\u0131n lisan se\u00e7ene\u011fine nazaran ki\u015finin telefonunda bulunan t\u00fcm \u015fah\u0131slara g\u00f6nderiliyor. Ayr\u0131yeten g\u00f6nderilen bildirilerin bot iletisi oldu\u011fu anla\u015f\u0131lmamas\u0131 i\u00e7in bireylerin kay\u0131tl\u0131 isimleri de bildiri i\u00e7erisinde yer al\u0131yor. Ziyanl\u0131 yaz\u0131l\u0131m, 42 farkl\u0131 lisanda ileti g\u00f6nderebiliyor.<\/p>\n

\u0130letiler g\u00f6nderildikten sonra Filecoder ayg\u0131t\u0131 tarayarak depolanan t\u00fcm evraklar\u0131 tespit ediyor ve b\u00fcy\u00fck bir \u00e7o\u011funlu\u011funu de\u015fifre ediyor. Metin ve g\u00f6rsel evraklar\u0131n b\u00fcy\u00fck bir \u00e7o\u011funlu\u011funu \u00e7\u00f6z\u00fcmleyebilen yaz\u0131l\u0131m, .apk ya da .dex evraklar\u0131n\u0131 \u00e7\u00f6z\u00fcmleyemiyor.<\/p>\n

<\/p>\n

ESET, Filecoder isimli yaz\u0131l\u0131m\u0131n WannaCry isimli yaz\u0131l\u0131m\u0131n s\u0131rf bir kopyas\u0131 oldu\u011funu d\u00fc\u015f\u00fcn\u00fcyor. Do\u011fal ki burada bir mevzuyu a\u00e7\u0131kl\u0131\u011fa kavu\u015fturmakta yarar var; WannaCry isimli yaz\u0131l\u0131m \u00e7ok daha \u00f6nemli ziyanlar verebilen ve \u00e7ok daha yayg\u0131n bir yaz\u0131l\u0131m olarak biliniyor.<\/p>\n

T\u00fcm bu s\u00fcre\u00e7ler tamamland\u0131ktan sonra a\u015fa\u011f\u0131daki bildiri bireylere g\u00f6steriliyor. Ziyanl\u0131 yaz\u0131l\u0131m\u0131n yaz\u0131l\u0131mc\u0131lar\u0131, \u015fifrelenmi\u015f belgelerin geri iade edilmesi i\u00e7in 98 ila 188 dolar ortas\u0131nda de\u011fi\u015fen bir paran\u0131n kendilerine temin edilmesi sonucunda bilgilerin b\u0131rak\u0131laca\u011f\u0131n\u0131 belirtiyor.<\/p>\n

<\/p>\n

“Mevcut durum bilgisi<\/em><\/p>\n

Bu ayg\u0131ttaki ferd\u00ee dok\u00fcmanlar\u0131n\u0131z ve evraklar\u0131n\u0131z \u015fifrelendi. K\u00f6k belgeleriniz da b\u00fcsb\u00fct\u00fcn silindi. Belgeleri kurtarmak i\u00e7in a\u015fa\u011f\u0131daki metodu takip edin.”<\/em><\/p>\n

G\u00f6rd\u00fc\u011f\u00fcn\u00fcz \u00fczere bilgilerinizi para kar\u015f\u0131l\u0131\u011f\u0131nda size geri veren bu yaz\u0131l\u0131mdan kurtulman\u0131n yolu \u015fah\u0131slara para g\u00f6ndermek \u00fczere g\u00f6r\u00fcnse de ESET uzmanlar\u0131 para \u00f6demeden datalar\u0131n\u0131z\u0131 geri alman\u0131n m\u00fcmk\u00fcn oldu\u011funu belirtiyor. Evraklar\u0131n\u0131z\u0131n \u015fifrelenmedi\u011fini, s\u0131rf yanl\u0131\u015fl\u0131 bir formda a\u00e7\u0131lmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 belirten uzmanlar, uygulaman\u0131n silinmesi durumunda \u015fifreleme algoritmas\u0131n\u0131n \u015fifre \u00e7\u00f6zme algoritmas\u0131na \u00e7evrilerek bilgilere ula\u015f\u0131labilece\u011fini belirtiyor.<\/p>\n

ESET, yaz\u0131l\u0131m\u0131n b\u00fcy\u00fck bir tehdit olu\u015fturmad\u0131\u011f\u0131n\u0131 belirtse de yayg\u0131nla\u015fmas\u0131 durumunda Android ekosistemi i\u00e7in \u00f6nemli meseleler do\u011furabilece\u011fini tabir etti.<\/p>\n

<\/div>\n
\n
<\/div>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

Pazartesi g\u00fcn\u00fc ESET'teki siber g\u00fcvenlik uzmanlar\u0131, 'Android\/Filecoder.C' isimli bir ziyanl\u0131 yaz\u0131l\u0131m\u0131 ke\u015ffetti. 12 Temmuz 2019 …<\/p>\n","protected":false},"author":1,"featured_media":7368,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[854],"tags":[1194,1079,1237,1713],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/7367"}],"collection":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7367"}],"version-history":[{"count":1,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/7367\/revisions"}],"predecessor-version":[{"id":7369,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/7367\/revisions\/7369"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/media\/7368"}],"wp:attachment":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7367"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7367"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}