{"id":49444,"date":"2016-01-23T16:48:15","date_gmt":"2016-01-23T13:48:15","guid":{"rendered":"https:\/\/www.enerjigazetesi.ist\/?p=49444"},"modified":"2016-01-23T16:48:15","modified_gmt":"2016-01-23T13:48:15","slug":"ukraynada-elektrik-dagitim-sistemi-siber-saldiriya-ugradi","status":"publish","type":"post","link":"https:\/\/www.enerjigazetesi.ist\/en\/ukraynada-elektrik-dagitim-sistemi-siber-saldiriya-ugradi\/","title":{"rendered":"(Turkish) Ukrayna\u2019da Elektrik Da\u011f\u0131t\u0131m Sistemi Siber Sald\u0131r\u0131ya U\u011frad\u0131…"},"content":{"rendered":"

Sorry, this entry is only available in Turkish<\/a>. For the sake of viewer convenience, the content is shown below in the alternative language. You may click the link to switch the active language.<\/p>

<\/p>\n

23 Aral\u0131k 2015 tarihinde Ukrayna\u2019n\u0131n Ivano-Frankivsk b\u00f6lgesinde 700 bin ki\u015fi, enerji da\u011f\u0131t\u0131m \u015firketlerine y\u00f6nelik siber sald\u0131r\u0131 sonucu saatlerce elektriksiz kald\u0131.<\/strong><\/p>\n

ESET, s\u00f6zkonusu sald\u0131r\u0131da, daha \u00f6nceki sald\u0131r\u0131larda tespit edilen BlackEnergy truva at\u0131n\u0131n kullan\u0131ld\"ukraynada-elektrik-dagitim-sistemi-siber-saldiriya-ugradi\"<\/a>\u0131\u011f\u0131n\u0131 belirledi. Ancak analizlere g\u00f6re BlackEnergy bu kez yaln\u0131z \u00e7al\u0131\u015fm\u0131yor, tam bir yok edici g\u00f6revine sahip KillDisk truva at\u0131 ile i\u015fbirli\u011fi yap\u0131yor.<\/p>\n

Aral\u0131k ay\u0131nda Ukrayna\u2019n\u0131n elektrik da\u011f\u0131t\u0131m \u015firketleri, e\u015f zamanl\u0131 olarak siber sald\u0131r\u0131lara maruz kald\u0131lar. Global antivir\u00fcs yaz\u0131l\u0131m kurulu\u015fu ESET\u2019in ara\u015ft\u0131rmac\u0131lar\u0131na g\u00f6re bu sald\u0131r\u0131lar, bilgisayarlar\u0131n yeniden ba\u015flat\u0131lmas\u0131n\u0131 engelleyen k\u00f6t\u00fc ama\u00e7l\u0131 KillDisk yaz\u0131l\u0131m\u0131 kullan\u0131larak ger\u00e7ekle\u015ftirildi. Sald\u0131rganlar, KillDisk\u2019i hedeflenen bilgisayarlara y\u00fckleyebilmek i\u00e7in ise BlackEnergy truva at\u0131ndan faydaland\u0131.<\/p>\n

BlackEnergy<\/strong><\/p>\n

BlackEnergy truva at\u0131, belirli g\u00f6revler i\u00e7in y\u00fcklenebilir farkl\u0131 bile\u015fenleri bulunan mod\u00fcler bir yaz\u0131l\u0131m olarak \u00f6ne \u00e7\u0131k\u0131yor. 2015 y\u0131l\u0131nda Ukrayna\u2019n\u0131n y\u00fcksek profilli firmalar\u0131na, devlet kurumlar\u0131na ve haber ajanslar\u0131na kar\u015f\u0131 yap\u0131lan siber sald\u0131r\u0131larda kullan\u0131lm\u0131\u015ft\u0131. Elektrik da\u011f\u0131t\u0131m \u015firketlerine y\u00f6nelik son sald\u0131r\u0131larda ise daha \u00f6nce BlackEnergy truva at\u0131 bula\u015fm\u0131\u015f sistemler \u00fczerinde KillDisk yaz\u0131l\u0131m\u0131, \u00f6l\u00fcmc\u00fcl etki g\u00f6revini \u00fcstlendi.<\/p>\n

KillDisk<\/strong><\/p>\n

BlackEnergy ve KillDisk aras\u0131ndaki ba\u011flant\u0131 ilk olarak Kas\u0131m 2015\u2019te, Ukrayna\u2019n\u0131n siber g\u00fcvenlik ajans\u0131 CERT-UA taraf\u0131ndan raporland\u0131. Rapor, 2015 y\u0131l\u0131nda yap\u0131lan Ukrayna\u2019daki yerel se\u00e7imlerde medya \u015firketlerinin bu sald\u0131r\u0131lardan etkilendi\u011fini ve sald\u0131r\u0131 sonucu \u00e7ok say\u0131da video ve dok\u00fcman\u0131n tahrip oldu\u011funu bildiriyor.<\/p>\n

Tam bir yok edici<\/strong><\/p>\n

KillDisk yaz\u0131l\u0131m\u0131n\u0131n varyantlar\u0131, Ukrayna elektrik da\u011f\u0131t\u0131m \u015firketlerine kar\u015f\u0131 yap\u0131lan siber sald\u0131r\u0131da kullan\u0131l\u0131rken, yaz\u0131l\u0131m\u0131n farkl\u0131 fonksiyonlar i\u00e7erdi\u011fi de g\u00f6zlemlendi. Sistemin yeniden ba\u015flat\u0131lmas\u0131na engel olmak i\u00e7in sistem dosyalar\u0131n\u0131 silmesinin yan\u0131 s\u0131ra tam bir yok edici truva at\u0131 olarak \u00e7al\u0131\u015f\u0131yor ve \u00f6zellikle end\u00fcstriyel sistemleri sabote etmek i\u00e7in belirli kodlar i\u00e7eriyor.<\/p>\n

Konuyu de\u011ferlendiren ESET Zararl\u0131 Yaz\u0131l\u0131m Ara\u015ft\u0131rmac\u0131s\u0131 Anton Cherepanov, \u201cBildi\u011fimiz KillDisk fonksiyonlar\u0131ndan ayr\u0131 olarak yaz\u0131l\u0131m ayr\u0131ca end\u00fcstriyel kontrol sistemlerinde kullan\u0131lan s\u00fcre\u00e7leri durdurmaya \u00e7al\u0131\u015fmaktad\u0131r\u201c a\u00e7\u0131klamas\u0131n\u0131 yapt\u0131. Bu i\u015flemler hedef sisteme ula\u015f\u0131rsa, truva at\u0131 sadece s\u00fcre\u00e7leri durdurmak ile kalmay\u0131p ayn\u0131 zamanda sistemin restorasyonunu daha zor hale getirmek i\u00e7in sabit diskteki y\u00fcr\u00fct\u00fclebilir dosya i\u00e7erisine rastgele \u015fekilde veri yaz\u0131yor.<\/p>\n

Sistemleri kapatma \u00f6zelli\u011fini sahip<\/strong><\/p>\n

Anton Cherepanov, \u201cKillDisk yaz\u0131l\u0131m\u0131 \u00fczerinde yapt\u0131\u011f\u0131m\u0131z analizlere g\u00f6re, elektrik da\u011f\u0131t\u0131m \u015firketlerine yap\u0131lan sald\u0131r\u0131da ve daha \u00f6nce Ukrayna medya \u015firketlerine yap\u0131lan sald\u0131r\u0131da kullan\u0131lan yaz\u0131l\u0131m\u0131n ayn\u0131 ara\u00e7lar\u0131 kulland\u0131\u011f\u0131 ortaya \u00e7\u0131kt\u0131. Bu yaz\u0131l\u0131m\u0131n ayr\u0131ca kritik sistemleri kapatabilme yetene\u011fi de var\u201c bilgisini payla\u015ft\u0131.<\/p>\n

Ukrayna elektrik da\u011f\u0131t\u0131m \u015firketlerine yap\u0131lan sald\u0131r\u0131 ve BlackEnergy\/KillDisk yaz\u0131l\u0131m\u0131 hakk\u0131nda daha fazla bilgiyi ESET WeLiveSecurity blogundan okuyabilirsiniz:<\/p>\n

http:\/\/www.welivesecurity.com\/2016\/01\/04\/blackener\u2026<\/p>\n

Kaynak: B\u00fcltenler<\/p>\n

<\/p>","protected":false},"excerpt":{"rendered":"

Sorry, this entry is only available in Turkish. For the sake of viewer convenience, the content is shown below in the alternative language. You may click the link to switch the active language. 23 Aral\u0131k 2015 tarihinde Ukrayna\u2019n\u0131n Ivano-Frankivsk b\u00f6lgesinde 700 bin ki\u015fi, enerji da\u011f\u0131t\u0131m \u015firketlerine y\u00f6nelik siber sald\u0131r\u0131 sonucu saatlerce elektriksiz kald\u0131. ESET, s\u00f6zkonusu […]<\/p>\n","protected":false},"author":1,"featured_media":49445,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[51,53],"tags":[4462,28109,68,1266,61,19638,1451,2873,63,67,1009,2698,165,28110,19577,2584],"views":826,"_links":{"self":[{"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/posts\/49444"}],"collection":[{"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/comments?post=49444"}],"version-history":[{"count":1,"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/posts\/49444\/revisions"}],"predecessor-version":[{"id":49446,"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/posts\/49444\/revisions\/49446"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/media\/49445"}],"wp:attachment":[{"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/media?parent=49444"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/categories?post=49444"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.enerjigazetesi.ist\/en\/wp-json\/wp\/v2\/tags?post=49444"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}