{"id":1744,"date":"2026-11-05T09:43:14","date_gmt":"2026-11-05T06:43:14","guid":{"rendered":"https:\/\/teknolata.com\/?p=1744"},"modified":"2026-11-05T09:43:14","modified_gmt":"2026-11-05T06:43:14","slug":"darksword-saldirisi-ios-ve-android-cihazlari-hedef-aldi","status":"publish","type":"post","link":"https:\/\/teknolata.com\/index.php\/2026\/11\/05\/darksword-saldirisi-ios-ve-android-cihazlari-hedef-aldi\/","title":{"rendered":"DarkSword Sald\u0131r\u0131s\u0131 iOS ve Android Cihazlar\u0131 Hedef Ald\u0131"},"content":{"rendered":"

G\u00fcvenlik ara\u015ft\u0131rmac\u0131lar\u0131, DarkSword<\/strong> ad\u0131 verilen bir siber sald\u0131r\u0131 kampanyas\u0131nda, daha \u00f6nce giderilmi\u015f iOS ve Android g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n hedef al\u0131nd\u0131\u011f\u0131n\u0131 bildirdi. Ara\u015ft\u0131rmac\u0131lar\u0131n de\u011ferlendirmesine g\u00f6re kampanya, Kremlin\u2019le ba\u011flant\u0131l\u0131 olabilecek sald\u0131rganlar taraf\u0131ndan y\u00fcr\u00fct\u00fclm\u00fc\u015f olabilir. Bu ili\u015fki i\u00e7in bildirilen g\u00fcven d\u00fczeyi \u201corta ile y\u00fcksek\u201d olarak ifade ediliyor; dolay\u0131s\u0131yla bu, kesinle\u015fmi\u015f bir sonu\u00e7 de\u011fil, mevcut bulgulara dayanan bir de\u011ferlendirmedir.<\/p>\n

Sald\u0131r\u0131da, ziyaret\u00e7ileri hedeflenen internet sitelerine y\u00f6nlendiren bir y\u00f6ntem kullan\u0131ld\u0131\u011f\u0131 aktar\u0131ld\u0131. Hedefler aras\u0131nda Rusya\u2019n\u0131n Ukrayna\u2019ya kar\u015f\u0131 y\u00fcr\u00fctt\u00fc\u011f\u00fc sava\u015fla ba\u011flant\u0131l\u0131 oldu\u011fu belirtilen baz\u0131 siteler ve ABD\u2019nin 250. ba\u011f\u0131ms\u0131zl\u0131k y\u0131l d\u00f6n\u00fcm\u00fcn\u00fc kutlamaya y\u00f6nelik america250.org da yer ald\u0131. Sald\u0131r\u0131n\u0131n dikkat \u00e7eken y\u00f6nlerinden biri, kullan\u0131c\u0131n\u0131n \u00f6zel olarak bir dosya indirmesi gerekmeksizin, etkilenmi\u015f bir siteyi ziyaret etmesinin cihaz\u0131n incelenmesini ba\u015flatabilmesiydi.<\/p>\n

Bir site ziyaretiyle ba\u015flayan sald\u0131r\u0131 zinciri<\/h2>\n

Ara\u015ft\u0131rmac\u0131lar\u0131n aktard\u0131\u011f\u0131 y\u00f6ntemde sald\u0131rganlar, hedef al\u0131nan internet sitelerinin ziyaret\u00e7ilerine ula\u015fmak i\u00e7in sayfalara zararl\u0131 JavaScript kodu ekledi. S\u00f6z konusu kod, siteyi a\u00e7an cihaz hakk\u0131nda bilgi toplamak ve hangi i\u015fletim sistemi ya da taray\u0131c\u0131n\u0131n kullan\u0131ld\u0131\u011f\u0131n\u0131 belirlemek i\u00e7in \u00e7al\u0131\u015fabiliyor. Kampanyan\u0131n y\u00fczlerce siteyi kapsama ihtimali bulundu\u011fu belirtilse de bu say\u0131, do\u011frulanm\u0131\u015f ve eksiksiz bir hedef listesi olarak de\u011ferlendirilmemeli.<\/p>\n

Cihaz\u0131n \u00f6zellikleri belirlendikten sonra sald\u0131rganlar, kullan\u0131lan platforma uygun bir sonraki a\u015famay\u0131 devreye sokabiliyor. Ba\u015fka bir deyi\u015fle iPhone ve Android cihazlara mutlaka ayn\u0131 kod ya da ayn\u0131 zararl\u0131 yaz\u0131l\u0131m g\u00f6nderilmiyor. Platforma g\u00f6re farkl\u0131la\u015ft\u0131r\u0131lan bu yakla\u015f\u0131m, sald\u0131r\u0131n\u0131n hedef cihazla uyumlu bi\u00e7imde ilerlemesini ve kullan\u0131c\u0131 a\u00e7\u0131s\u0131ndan fark edilmesinin zorla\u015fmas\u0131n\u0131 sa\u011flayabilir.<\/p>\n

Hedeflenen bilgiler ve olas\u0131 etkiler<\/h2>\n

Ara\u015ft\u0131rma bulgular\u0131na g\u00f6re sald\u0131r\u0131 bile\u015fenleri, taray\u0131c\u0131 \u00e7erezleri gibi bilgileri ele ge\u00e7irmeye \u00e7al\u0131\u015fabiliyor. \u00c7erezler, baz\u0131 internet hizmetlerinde oturum durumunu korumak i\u00e7in kullan\u0131ld\u0131\u011f\u0131ndan, bunlar\u0131n k\u00f6t\u00fcye kullan\u0131lmas\u0131 hesaplara eri\u015fim veya kullan\u0131c\u0131 etkinli\u011fini izleme gibi riskler do\u011furabilir. Ancak bir verinin hedeflenmesi, her sald\u0131r\u0131 vakas\u0131nda ba\u015far\u0131yla \u00e7al\u0131nd\u0131\u011f\u0131 anlam\u0131na gelmez.<\/p>\n

Baz\u0131 sald\u0131r\u0131 senaryolar\u0131nda Wi-Fi parolalar\u0131 ve cihazda bulunan ba\u015fka mobil verilerin de hedef al\u0131nabilece\u011fi bildirildi. Hangi verilerin toplanabilece\u011fi, cihaz\u0131n i\u015fletim sistemine, kullan\u0131lan a\u00e7\u0131klar\u0131n t\u00fcr\u00fcne ve sald\u0131r\u0131n\u0131n o cihazda hangi a\u015famaya kadar ilerledi\u011fine ba\u011fl\u0131d\u0131r. Bu nedenle b\u00fct\u00fcn DarkSword hedeflerinin ayn\u0131 bilgilere eri\u015fti\u011fini ya da her ziyaret\u00e7inin cihaz\u0131ndan veri al\u0131nd\u0131\u011f\u0131n\u0131 s\u00f6ylemek do\u011fru olmaz.<\/p>\n

america250.org adresi nas\u0131l taklit edildi?<\/h2>\n

Aktar\u0131lan bulgular aras\u0131nda, america250.org sitesinin taklit edilmesi de yer al\u0131yor. Sald\u0131rganlar\u0131n, ger\u00e7ek internet adresine benzeyen america250[.]holiday<\/strong> alan ad\u0131n\u0131 kaydettirdi\u011fi bildirildi. K\u00f6\u015feli parantez i\u00e7indeki nokta, g\u00fcvenlik yaz\u0131lar\u0131nda zararl\u0131 olabilecek bir adresin yanl\u0131\u015fl\u0131kla t\u0131klanmas\u0131n\u0131 \u00f6nlemek amac\u0131yla kullan\u0131lan bir yaz\u0131m bi\u00e7imidir.<\/p>\n

Bu alan ad\u0131n\u0131n, ger\u00e7ek sitenin i\u00e7eri\u011fini ziyaret\u00e7iye aktaran bir ters proxy gibi \u00e7al\u0131\u015ft\u0131\u011f\u0131 belirtildi. Bu y\u00f6ntemde ziyaret\u00e7i sahte adrese ba\u011flan\u0131rken sayfa i\u00e7eri\u011fi ger\u00e7ek siteden al\u0131nabilir; araya eklenen zararl\u0131 kod da sayfayla birlikte sunulabilir. B\u00f6ylece sayfa g\u00f6r\u00fcn\u00fc\u015fte tan\u0131d\u0131k ve me\u015fru durabilir, ancak ziyaret\u00e7inin ba\u011flant\u0131 kurdu\u011fu adres ger\u00e7ek alan ad\u0131 de\u011fildir. Kullan\u0131c\u0131lar\u0131n adres \u00e7ubu\u011funu kontrol etmesi bu t\u00fcr taklitleri fark etmeye yard\u0131mc\u0131 olabilir.<\/p>\n

america250.org, ABD\u2019nin ba\u011f\u0131ms\u0131zl\u0131\u011f\u0131n\u0131n 250. y\u0131l d\u00f6n\u00fcm\u00fcn\u00fc kutlamaya y\u00f6nelik bir giri\u015fimle ili\u015fkilendiriliyor. Hedefler aras\u0131nda bu adresin bulunmas\u0131, sald\u0131r\u0131 kampanyas\u0131n\u0131n yaln\u0131zca tek bir siyasi ya da co\u011frafi temayla s\u0131n\u0131rl\u0131 olmayabilece\u011fini g\u00f6steriyor. Bununla birlikte, bir sitenin hedef al\u0131nm\u0131\u015f olmas\u0131 siteyi i\u015fletenlerin sald\u0131r\u0131yla ba\u011flant\u0131l\u0131 oldu\u011fu anlam\u0131na gelmez; \u00e7o\u011fu durumda site, ziyaret\u00e7ilere ula\u015fmak i\u00e7in k\u00f6t\u00fcye kullan\u0131lan bir ara\u00e7 konumundad\u0131r.<\/p>\n

Yamalar ve g\u00fcncelleme \u00f6nlemleri<\/h2>\n

DarkSword kampanyas\u0131nda kullan\u0131ld\u0131\u011f\u0131 bildirilen a\u00e7\u0131klar\u0131n daha \u00f6nce yamalanm\u0131\u015f olmas\u0131 \u00f6nemli bir ayr\u0131nt\u0131. G\u00fcvenlik yamas\u0131, yaz\u0131l\u0131m \u00fcreticisinin bilinen bir zay\u0131fl\u0131\u011f\u0131 gidermek i\u00e7in yay\u0131mlad\u0131\u011f\u0131 d\u00fczeltmedir. Bir a\u00e7\u0131k yamaland\u0131ktan sonra g\u00fcncel cihazlar bu a\u00e7\u0131\u011fa kar\u015f\u0131 korunabilir; ancak g\u00fcncelleme y\u00fcklenmemi\u015f cihazlar savunmas\u0131z kalabilir. Bu nedenle \u201ca\u00e7\u0131k yamalanm\u0131\u015f\u201d ifadesi, t\u00fcm cihazlar\u0131n otomatik olarak g\u00fcvende oldu\u011fu anlam\u0131na gelmez.<\/p>\n

iPhone ve Android kullan\u0131c\u0131lar\u0131n\u0131n i\u015fletim sistemi g\u00fcncellemelerini ve g\u00fcvenlik d\u00fczeltmelerini geciktirmeden y\u00fcklemesi temel bir \u00f6nlemdir. Uygulamalar\u0131 da resmi ma\u011fazalardan edinmek, \u015f\u00fcpheli ba\u011flant\u0131lara kar\u015f\u0131 dikkatli olmak ve ziyaret edilen adresin do\u011fru alan ad\u0131 oldu\u011fundan emin olmak riski azaltabilir. Kurumlar a\u00e7\u0131s\u0131ndan ise web sitelerinin i\u00e7erik b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc denetlemek ve sayfalara izinsiz kod eklenip eklenmedi\u011fini takip etmek \u00f6nem ta\u015f\u0131r.<\/p>\n

G\u00fcvenlik ara\u015ft\u0131rmac\u0131lar\u0131n\u0131n a\u00e7\u0131klad\u0131\u011f\u0131 bulgular, g\u00fcncel olmayan mobil cihazlar\u0131n bilinen a\u00e7\u0131klar \u00fczerinden hedef al\u0131nabilece\u011fini bir kez daha ortaya koyuyor. Bununla birlikte sald\u0131r\u0131n\u0131n kapsam\u0131, her hedefteki ba\u015far\u0131 oran\u0131 ve Rus istihbarat\u0131yla olas\u0131 ba\u011flant\u0131s\u0131 konusunda kesin h\u00fck\u00fcm vermek i\u00e7in mevcut kan\u0131tlar\u0131n s\u0131n\u0131rlar\u0131n\u0131 g\u00f6zetmek gerekiyor. En g\u00fcvenli yakla\u015f\u0131m, cihazlar\u0131 g\u00fcncel tutmak ve \u015f\u00fcpheli ya da taklit alan adlar\u0131na kar\u015f\u0131 temkinli davranmakt\u0131r.<\/p>\n

TAGS: <\/strong>america250.org taklidi<\/a><\/span>Android g\u00fcvenlik a\u00e7\u0131\u011f\u0131<\/a><\/span>DarkSword sald\u0131r\u0131s\u0131<\/a><\/span>iOS g\u00fcvenlik a\u00e7\u0131\u011f\u0131<\/a><\/span>Kremlin ba\u011flant\u0131l\u0131 hackerlar<\/a><\/span>mobil cihaz g\u00fcvenli\u011fi<\/a><\/span>mobil siber sald\u0131r\u0131<\/a><\/span>ters proxy<\/a><\/span>yaz\u0131l\u0131m g\u00fcncellemesi<\/a><\/span>zararl\u0131 JavaScript<\/a> <\/div>\n","protected":false},"excerpt":{"rendered":"

DarkSword sald\u0131r\u0131s\u0131n\u0131n iOS ve Android cihazlar\u0131n\u0131 nas\u0131l hedef ald\u0131\u011f\u0131n\u0131, kullan\u0131c\u0131lar\u0131 bekleyen riskleri ve korunma yollar\u0131n\u0131 ke\u015ffedin.<\/p>\n","protected":false},"author":1,"featured_media":1745,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,1],"tags":[3496,1465,3494,664,3499,2964,3495,3497,669,3498],"class_list":["post-1744","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-mobil","category-tumu","tag-america250-org-taklidi","tag-android-guvenlik-acigi","tag-darksword-saldirisi","tag-ios-guvenlik-acigi","tag-kremlin-baglantili-hackerlar","tag-mobil-cihaz-guvenligi","tag-mobil-siber-saldiri","tag-ters-proxy","tag-yazilim-guncellemesi","tag-zararli-javascript"],"_links":{"self":[{"href":"https:\/\/teknolata.com\/index.php\/wp-json\/wp\/v2\/posts\/1744","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teknolata.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teknolata.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teknolata.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/teknolata.com\/index.php\/wp-json\/wp\/v2\/comments?post=1744"}],"version-history":[{"count":1,"href":"https:\/\/teknolata.com\/index.php\/wp-json\/wp\/v2\/posts\/1744\/revisions"}],"predecessor-version":[{"id":1746,"href":"https:\/\/teknolata.com\/index.php\/wp-json\/wp\/v2\/posts\/1744\/revisions\/1746"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teknolata.com\/index.php\/wp-json\/wp\/v2\/media\/1745"}],"wp:attachment":[{"href":"https:\/\/teknolata.com\/index.php\/wp-json\/wp\/v2\/media?parent=1744"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teknolata.com\/index.php\/wp-json\/wp\/v2\/categories?post=1744"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teknolata.com\/index.php\/wp-json\/wp\/v2\/tags?post=1744"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}