{"id":3691,"date":"2026-03-26T13:00:32","date_gmt":"2026-03-26T10:00:32","guid":{"rendered":"https:\/\/ekonomievreni.com\/?p=3691"},"modified":"2026-03-26T13:00:33","modified_gmt":"2026-03-26T10:00:33","slug":"kaspersky-corunanin-operation-triangulation-cercevesinin-guncellenmis-versiyonu-oldugunu-tespit-etti-2","status":"publish","type":"post","link":"https:\/\/ekonomievreni.com\/?p=3691","title":{"rendered":"Kaspersky, Coruna\u2019n\u0131n Operation Triangulation \u00e7er\u00e7evesinin g\u00fcncellenmi\u015f versiyonu oldu\u011funu tespit etti"},"content":{"rendered":"<p> <strong>Kaspersky\u2019nin K\u00fcresel Ara\u015ft\u0131rma ve Analiz Ekibi (GReAT), Coruna exploit kitine y\u00f6nelik ger\u00e7ekle\u015ftirdi\u011fi kod seviyesindeki analiz sonucunda, bu kitin Operation Triangulation siber casusluk kampanyas\u0131nda kullan\u0131lan \u00e7er\u00e7evenin g\u00fcncellenmi\u015f ve do\u011frudan bir versiyonu oldu\u011funu ortaya koydu. \u015eirket, Triangulation ve Coruna\u2019daki kernel exploit\u2019lerinin ayn\u0131 geli\u015ftirici taraf\u0131ndan olu\u015fturuldu\u011funu y\u00fcksek derecede emin.<\/strong><\/p>\n<p>Yap\u0131lan inceleme, kitte yer alan be\u015f \u00e7ekirdek (kernel ) exploit\u2019inden birinin, Kaspersky\u2019nin 2023 y\u0131l\u0131nda Operation Triangulation kapsam\u0131nda tespit etti\u011fi exploit\u2019in g\u00fcncellenmi\u015f bir versiyonu oldu\u011funu ortaya koydu. Kalan d\u00f6rt exploit \u2014 bunlar\u0131n ikisi Operation Triangulation kamuoyuna a\u00e7\u0131kland\u0131ktan sonra geli\u015ftirilmi\u015f \u2014 ayn\u0131 exploit \u00e7er\u00e7evesi \u00fczerine in\u015fa edilmi\u015f durumda. Kod benzerlikleri yaln\u0131zca kernel exploit\u2019leriyle s\u0131n\u0131rl\u0131 kalmay\u0131p Coruna\u2019n\u0131n di\u011fer bile\u015fenlerine de uzan\u0131yor. Bu durum, kit\u2019in farkl\u0131 kaynaklardan derlenmi\u015f par\u00e7alardan olu\u015fmad\u0131\u011f\u0131n\u0131, aksine orijinal \u00e7er\u00e7evenin s\u00fcrekli geli\u015ftirilen bir evrimi oldu\u011funu ortaya koyuyor.\u00a0<\/p>\n<p>Kod i\u00e7erisinde Apple\u2019\u0131n A17, M3, M3 Pro ve M3 Max i\u015flemcilerine destek bulundu\u011fu gibi, 2023 sonbahar ve k\u0131\u015f d\u00f6neminde yay\u0131mlanan iOS 17.2\u2019ye kadar olan s\u00fcr\u00fcmlere referanslar da yer al\u0131yor. Ayr\u0131ca Apple\u2019\u0131n, Kaspersky taraf\u0131ndan bildirilen zafiyetleri gidermek amac\u0131yla yay\u0131mlad\u0131\u011f\u0131 iOS 16.5 beta 4 s\u00fcr\u00fcm\u00fcne y\u00f6nelik \u00f6zel bir kontrol mekanizmas\u0131 da dikkat \u00e7ekiyor.<\/p>\n<p><strong>Kaspersky GReAT Ba\u015f G\u00fcvenlik Ara\u015ft\u0131rmac\u0131s\u0131 Boris Larin\u00a0<\/strong>konuya ili\u015fkin \u015funlar\u0131 s\u00f6yledi:<\/p>\n<p>\u201c<em>Coruna ilk ortaya \u00e7\u0131kt\u0131\u011f\u0131nda, mevcut bulgular kodun Triangulation ile ba\u011flant\u0131s\u0131n\u0131 net \u015fekilde kurmak i\u00e7in yeterli de\u011fildi \u2014 yaln\u0131zca ortak zafiyetler, ortak bir geli\u015ftirici oldu\u011fu anlam\u0131na gelmez. Ancak ikili dosyalar\u0131n detayl\u0131 analiziyle tablo de\u011fi\u015fti. Coruna, herkese a\u00e7\u0131k exploit\u2019lerin bir araya getirilmi\u015f hali de\u011fil; Operation Triangulation \u00e7er\u00e7evesinin s\u00fcrekli geli\u015ftirilen bir devam\u0131d\u0131r. M3 gibi yeni i\u015flemciler ve g\u00fcncel iOS s\u00fcr\u00fcmlerine y\u00f6nelik kontrollerin bulunmas\u0131, orijinal geli\u015ftiricilerin bu kod taban\u0131n\u0131 aktif \u015fekilde geni\u015fletti\u011fini g\u00f6steriyor. Ba\u015flang\u0131\u00e7ta son derece hedefli bir siber casusluk arac\u0131 olan bu yap\u0131, art\u0131k ayr\u0131m g\u00f6zetmeksizin kullan\u0131lmaya ba\u015flanm\u0131\u015f durumda.<\/em>\u201d<\/p>\n<p>Kaspersky, t\u00fcm iPhone kullan\u0131c\u0131lar\u0131na en g\u00fcncel iOS s\u00fcr\u00fcm\u00fcn\u00fc derhal y\u00fcklemeleri \u00e7a\u011fr\u0131s\u0131nda bulunuyor. Coruna taraf\u0131ndan istismar edilen zafiyetler Apple taraf\u0131ndan giderilmi\u015f olsa da g\u00fcncelleme yap\u0131lmam\u0131\u015f cihazlar risk alt\u0131nda kalmaya devam ediyor.<\/p>\n<p>Operation Triangulation, ilk olarak Haziran 2023\u2019te ortaya \u00e7\u0131kar\u0131lan ve iOS cihazlar\u0131n\u0131 hedef alan geli\u015fmi\u015f kal\u0131c\u0131 tehdit (APT) kampanyas\u0131d\u0131r. Kaspersky, s\u00f6z konusu kampanyay\u0131 kendi kurumsal Wi-Fi a\u011f\u0131 \u00fczerindeki trafik analizleri s\u0131ras\u0131nda ke\u015ffetti; tehdit akt\u00f6r\u00fcn\u00fcn, Kaspersky \u00e7al\u0131\u015fanlar\u0131na ait \u00e7ok say\u0131da iOS cihaz\u0131n\u0131 hedef ald\u0131\u011f\u0131 belirlendi. Ara\u015ft\u0131rmac\u0131lar, kampanya kapsam\u0131nda Apple \u00fcr\u00fcnlerinin geni\u015f bir yelpazesini etkileyen d\u00f6rt adet s\u0131f\u0131r\u0131nc\u0131 g\u00fcn (zero-day) zafiyetinin istismar edildi\u011fini tespit etti.<\/p>\n<p>Kaspersky ara\u015ft\u0131rmac\u0131lar\u0131, bilinen veya bilinmeyen tehdit akt\u00f6rlerinin hedefli sald\u0131r\u0131lar\u0131na kurban gitmemek i\u00e7in \u015fu \u00f6nlemlerin al\u0131nmas\u0131n\u0131 tavsiye ediyor:<\/p>\n<ul>\n<li>Bilinen g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 kapatmak i\u00e7in i\u015fletim sisteminizi, uygulamalar\u0131n\u0131z\u0131 ve g\u00fcvenlik yaz\u0131l\u0131mlar\u0131n\u0131z\u0131 d\u00fczenli olarak g\u00fcncelleyin.<\/li>\n<\/ul>\n<ul>\n<li>G\u00fcvenlik olaylar\u0131na kar\u015f\u0131 kapsaml\u0131 g\u00f6r\u00fcn\u00fcrl\u00fck elde etmek ve operasyonel performans\u0131 art\u0131rmak i\u00e7in\u00a0Kaspersky SIEM\u00a0gibi \u00e7\u00f6z\u00fcmler kullanarak t\u00fcm altyap\u0131n\u0131zdaki olay izleme s\u00fcre\u00e7lerini merkezile\u015ftirin.<\/li>\n<\/ul>\n<ul>\n<li>Siber g\u00fcvenlik ekibinize, kurumu hedef alan tehditler konusunda derinlemesine g\u00f6r\u00fcn\u00fcrl\u00fck sa\u011flay\u0131n. En g\u00fcncel\u00a0Kaspersky Threat Intelligence\u00a0(Threat Intelligence), olay y\u00f6netimi d\u00f6ng\u00fcs\u00fc boyunca zengin ve anlaml\u0131 bir ba\u011flam sunarak risklerin h\u0131zla tespit edilmesine yard\u0131mc\u0131 olur.<\/li>\n<\/ul>\n<ul>\n<li>En g\u00fcncel hedefli tehditlerle ba\u015fa \u00e7\u0131kabilmeleri i\u00e7in siber g\u00fcvenlik ekibinizi pratik odakl\u0131\u00a0Kaspersky Cybersecurity Training\u00a0ile yetkinle\u015ftirin.<\/li>\n<\/ul>\n<ul>\n<li>G\u00fc\u00e7l\u00fc bir u\u00e7 nokta korumas\u0131 ve olay m\u00fcdahale kabiliyeti olu\u015fturmak i\u00e7in\u00a0Kaspersky Next\u00a0\u00fcr\u00fcn ailesinden yararlan\u0131n. Bu \u00e7\u00f6z\u00fcmler; temel EDR i\u015flevleri, geli\u015fmi\u015f kontroller, yama y\u00f6netimi ve bulut g\u00fcvenli\u011fi ile tehdit g\u00f6r\u00fcn\u00fcrl\u00fc\u011f\u00fc sunarak i\u015fletmelerin karma\u015f\u0131k sald\u0131r\u0131lar\u0131 minimum kaynakla h\u0131zla bertaraf etmesine olanak tan\u0131r.<\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<p>Kaynak: (BYZHA) Beyaz Haber Ajans\u0131<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Kaspersky\u2019nin K\u00fcresel Ara\u015ft\u0131rma ve Analiz Ekibi (GReAT), Coruna exploit kitine y\u00f6nelik ger\u00e7ekle\u015ftirdi\u011fi kod seviyesindeki analiz sonucunda, bu kitin Operation Triangulation siber casusluk kampanyas\u0131nda kullan\u0131lan \u00e7er\u00e7evenin g\u00fcncellenmi\u015f ve do\u011frudan bir versiyonu oldu\u011funu ortaya koydu.<\/p>\n","protected":false},"author":1,"featured_media":3694,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[32],"tags":[],"class_list":["post-3691","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji"],"_links":{"self":[{"href":"https:\/\/ekonomievreni.com\/index.php?rest_route=\/wp\/v2\/posts\/3691","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ekonomievreni.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ekonomievreni.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ekonomievreni.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ekonomievreni.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3691"}],"version-history":[{"count":1,"href":"https:\/\/ekonomievreni.com\/index.php?rest_route=\/wp\/v2\/posts\/3691\/revisions"}],"predecessor-version":[{"id":3695,"href":"https:\/\/ekonomievreni.com\/index.php?rest_route=\/wp\/v2\/posts\/3691\/revisions\/3695"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ekonomievreni.com\/index.php?rest_route=\/wp\/v2\/media\/3694"}],"wp:attachment":[{"href":"https:\/\/ekonomievreni.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3691"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ekonomievreni.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3691"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ekonomievreni.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3691"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}