Kaspersky, A\u011fustos 2025\u2019te Frogblight ad\u0131 verilen yeni bir Android bankac\u0131l\u0131k Truva At\u0131 ke\u015ffetti. Zararl\u0131 yaz\u0131l\u0131m, Eyl\u00fcl 2025 boyunca h\u0131zl\u0131 bir geli\u015ftirme s\u00fcrecinden ge\u00e7ti. Bu mobil k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m, \u00f6zellikle T\u00fcrkiye\u2019deki kullan\u0131c\u0131lar\u0131 hedef alarak \u201cdava dosyas\u0131 g\u00f6r\u00fcnt\u00fcleme\u201d, sosyal destek uygulamalar\u0131 veya Chrome taray\u0131c\u0131s\u0131 gibi orijinal Android uygulamalar\u0131n\u0131 taklit eden APK dosyalar\u0131 \u015feklinde da\u011f\u0131t\u0131l\u0131yor. \u00a0Kullan\u0131c\u0131lar\u0131n bankac\u0131l\u0131k bilgilerini \u00e7almak, hassas cihaz verilerini toplamak, SMS g\u00f6ndermek ve ba\u015fka k\u00f6t\u00fc ama\u00e7l\u0131 i\u015flemler ger\u00e7ekle\u015ftirmek \u00fczere tasarlanan Frogblight, b\u00f6lgedeki mobil kullan\u0131c\u0131lar i\u00e7in ciddi bir tehdit olu\u015fturuyor.<\/p>\n
T\u00fcrkiye\u2019deki kullan\u0131c\u0131lar\u0131n bildirdi\u011fi oltalama vakalar\u0131n\u0131 inceleyen Kaspersky ara\u015ft\u0131rmac\u0131lar\u0131, zararl\u0131 yaz\u0131l\u0131m\u0131n olas\u0131 da\u011f\u0131t\u0131m y\u00f6ntemlerinden birinin smishing (SMS \u00fczerinden oltalama) kampanyalar\u0131 olabilece\u011fini belirledi. Bu senaryoda kurbanlar, bir mahkeme s\u00fcrecine dahil olduklar\u0131n\u0131 iddia eden ve iletilen ba\u011flant\u0131y\u0131 takip ederek bir uygulama y\u00fcklemelerini isteyen aldat\u0131c\u0131 SMS\u2019ler al\u0131yor. Bu y\u00f6ntemle da\u011f\u0131t\u0131ld\u0131\u011f\u0131 de\u011ferlendirilen Frogblight \u00f6rneklerinden biri, ba\u015flat\u0131ld\u0131ktan sonra dava dosyalar\u0131na eri\u015fim bahanesiyle SMS\u2019lere ve cihaz depolamas\u0131na eri\u015fim izni talep ediyor. Ard\u0131ndan resmi bir devlet web sayfas\u0131n\u0131 y\u00fckleyerek kullan\u0131c\u0131ya yerel bir \u00e7evrimi\u00e7i bankac\u0131l\u0131k hizmeti \u00fczerinden giri\u015f yapmas\u0131n\u0131 \u00f6neriyor. Zararl\u0131 yaz\u0131l\u0131m, bu giri\u015f denemeleri s\u0131ras\u0131nda \u00f6zellikle bankac\u0131l\u0131k kimlik bilgilerini kaydediyor.<\/p>\n
K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131n yeni varyantlar\u0131, Chrome taray\u0131c\u0131s\u0131 ya da sosyal destek uygulamalar\u0131 k\u0131l\u0131\u011f\u0131na girerek kullan\u0131c\u0131lar\u0131 yan\u0131ltmaya devam ediyor. Ayr\u0131ca Kaspersky, Frogblight\u2019\u0131n kontrol panelini de ortaya \u00e7\u0131kard\u0131. \u201cfr0g\u201d olarak adland\u0131r\u0131lan, kurba\u011fa temal\u0131 bu panel Trojan\u2019a ismini veren unsur oldu. Bunun yan\u0131 s\u0131ra, Frogblight\u2019\u0131n da\u011f\u0131t\u0131m\u0131nda kullan\u0131lan oltalama siteleri de tespit edildi; bu sitelerin kaynak kodlar\u0131n\u0131n GitHub\u2019da herkese a\u00e7\u0131k oldu\u011fu ve Coper gibi di\u011fer k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlarla ili\u015fkili depolarla ba\u011flant\u0131lar i\u00e7erdi\u011fi g\u00f6r\u00fcld\u00fc. Bu durum, sald\u0131r\u0131n\u0131n k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m hizmeti modeliyl (malware-as-a-service (MaaS)) ili\u015fkili olabilece\u011fine i\u015faret ediyor.<\/p>\n
Kaspersky K\u00f6t\u00fc Ama\u00e7l\u0131 Yaz\u0131l\u0131m Analisti Georgy Bubenok: \u201cKullan\u0131c\u0131 bilgilerinin \u00e7al\u0131nmas\u0131, geli\u015fmi\u015f casus yaz\u0131l\u0131m yetenekleri ve aktif geli\u015ftirme s\u00fcreciyle Frogblight, mobil bankac\u0131l\u0131k tehditlerinde endi\u015fe verici bir a\u015famay\u0131 temsil ediyor. Zararl\u0131 yaz\u0131l\u0131m\u0131n, ma\u011fdurlar\u0131 kand\u0131rmak i\u00e7in resmi devlet portallar\u0131n\u0131 kullanmas\u0131, b\u00f6lgesel kullan\u0131c\u0131lar\u0131 hedef alan siber su\u00e7lular\u0131n giderek artan sofistikasyonunu g\u00f6zler \u00f6n\u00fcne seriyor. Elde etti\u011fimiz bulgular Frogblight\u2019\u0131n daha geni\u015f \u00e7apta da\u011f\u0131t\u0131ma ge\u00e7meden \u00f6nce son r\u00f6tu\u015flardan ge\u00e7ti\u011fini d\u00fc\u015f\u00fcnd\u00fcr\u00fcyor. Finansal kay\u0131plar\u0131n \u00f6n\u00fcne ge\u00e7mek i\u00e7in kullan\u0131c\u0131lar\u0131n derhal dikkatli davranmas\u0131 gerekti\u011fini vurguluyoruz.\u201d\u00a0dedi.<\/p>\n
Kaspersky, Frogblight ve benzeri tehditlere kar\u015f\u0131 korunmak i\u00e7in \u015fu \u00f6nerilerde bulunuyor:<\/p>\n
\tUygulamalar\u0131 yaln\u0131zca resmi uygulama ma\u011fazalar\u0131ndan indirin; SMS yoluyla g\u00f6nderilen ba\u011flant\u0131lardan veya g\u00fcvenilir olmayan sitelerden APK y\u00fcklemekten ka\u00e7\u0131n\u0131n.
\n\t\u00d6zellikle SMS eri\u015fimi isteyen uygulama izinlerini dikkatle inceleyin.
\n\tAndroid cihazlarda\u00a0Kaspersky Premium\u00a0gibi g\u00fcvenilir bir antivir\u00fcs yaz\u0131l\u0131m\u0131 kullan\u0131n. Kaspersky\u2019nin oltalama tespit mekanizmalar\u0131, kullan\u0131c\u0131lar\u0131n a\u00e7t\u0131\u011f\u0131 her ba\u011flant\u0131y\u0131 \u00e7ok katmanl\u0131 bir yap\u0131yla korur. \u00d6rne\u011fin bildirim korumas\u0131, mesajla\u015fma uygulamalar\u0131 ve SMS dahil t\u00fcm uygulamalardaki gelen bildirimleri analiz ederek kullan\u0131c\u0131 uygulamay\u0131 a\u00e7madan \u00f6nce doland\u0131r\u0131c\u0131l\u0131k ama\u00e7l\u0131 veya \u015f\u00fcpheli ba\u011flant\u0131lar\u0131 tespit eder ve engeller.<\/p>\n
\u00a0<\/p>\n
\u00a0<\/p>\n
Kaynak: (BYZHA) Beyaz Haber Ajans\u0131<\/p>\n","protected":false},"excerpt":{"rendered":"
Kaspersky, A\u011fustos 2025\u2019te Frogblight ad\u0131 verilen yeni bir Android bankac\u0131l\u0131k Truva At\u0131 ke\u015ffetti.<\/p>\n","protected":false},"author":1,"featured_media":10178,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1213,460,4549,245,1212],"class_list":["post-10177","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-saglik","tag-amacli","tag-bankacilik","tag-frogblight","tag-kaspersky","tag-yazilim"],"_links":{"self":[{"href":"https:\/\/vansondakikahaberler.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/10177","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vansondakikahaberler.com.tr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vansondakikahaberler.com.tr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vansondakikahaberler.com.tr\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vansondakikahaberler.com.tr\/index.php\/wp-json\/wp\/v2\/comments?post=10177"}],"version-history":[{"count":0,"href":"https:\/\/vansondakikahaberler.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/10177\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vansondakikahaberler.com.tr\/index.php\/wp-json\/wp\/v2\/media\/10178"}],"wp:attachment":[{"href":"https:\/\/vansondakikahaberler.com.tr\/index.php\/wp-json\/wp\/v2\/media?parent=10177"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vansondakikahaberler.com.tr\/index.php\/wp-json\/wp\/v2\/categories?post=10177"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vansondakikahaberler.com.tr\/index.php\/wp-json\/wp\/v2\/tags?post=10177"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}