{"id":45541,"date":"2021-08-31T10:44:35","date_gmt":"2021-08-31T07:44:35","guid":{"rendered":"https:\/\/www.turhost.com/blog\/?p=45541"},"modified":"2023-07-18T17:06:38","modified_gmt":"2023-07-18T14:06:38","slug":"sosyal-muhendislik-saldirisi-nedir","status":"publish","type":"post","link":"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/","title":{"rendered":"Sosyal M\u00fchendislik Sald\u0131r\u0131s\u0131 Nedir?"},"content":{"rendered":"\n

Sosyal m\u00fchendislik sald\u0131r\u0131s\u0131 nedir? sorusu yolumuzu psikolojik manip\u00fclasyon taktikleri kullanan siber su\u00e7lulara \u00e7\u0131kar\u0131yor. Her ge\u00e7en g\u00fcn \u00e7e\u015fitlili\u011fi artan sosyal m\u00fchendislik y\u00f6ntemlerinin kurban\u0131 olmaman\u0131z i\u00e7in bilmeniz gereken detaylar\u0131 sizin i\u00e7in ara\u015ft\u0131rd\u0131k.<\/p>\n\n\n\n

Sosyal M\u00fchendislik Nedir?<\/h2>\n\n\n\n

Sosyal M\u00fchendislik (Social Engineering), kurban\u0131n g\u00fcvende veya bask\u0131 alt\u0131nda hissedip \u015fifre, banka kart\u0131 bilgileri gibi hassas verileri payla\u015fmas\u0131 i\u00e7in manip\u00fclatif uygulamalarla kand\u0131r\u0131lmas\u0131d\u0131r.<\/p>\n\n\n\n

Sosyal m\u00fchendislik, \u00e7o\u011fu siber sald\u0131r\u0131da oldu\u011fu gibi bir ki\u015fi ya da kurulu\u015fun g\u00fcvenlik \u00f6nlemlerini atlamay\u0131 ama\u00e7lar. Herkes bir sosyal m\u00fchendislik sald\u0131r\u0131s\u0131n\u0131n kurban\u0131 olabilir ancak genellikle teknik bilgi eksikli\u011fi olan ya\u015fl\u0131lar, daha az insan etkile\u015fimi olanlar ve d\u00fcrt\u00fcselli\u011fe yenik d\u00fc\u015fenler bu siber tehdit t\u00fcr\u00fc i\u00e7in kolay hedeflerdir.<\/p>\n\n\n\n

\u0130nsanlar\u0131n sosyal m\u00fchendislik su\u00e7lar\u0131na yenik d\u00fc\u015fme nedenleri aras\u0131nda genellikle a\u015fa\u011f\u0131dakilere rastlan\u0131r:<\/p>\n\n\n\n

\n
\n

A\u00e7g\u00f6zl\u00fcl\u00fck (bedava merak\u0131)<\/p>\n\n\n\n

Bilgi eksikli\u011fi<\/p>\n\n\n\n

G\u00fcvenme e\u011filimi<\/p>\n<\/div>\n\n\n\n

\n

G\u00fcvenli\u011fi tehlikeye atan, aciliyet hissi yaratan, panikleten bir senaryo <\/p>\n\n\n\n

Korku<\/p>\n\n\n\n

Endi\u015fe<\/p>\n<\/div>\n\n\n\n

\n

Sosyal bir sorumlulukmu\u015f gibi zorunluluk hissettiren senaryolar<\/p>\n\n\n\n

\u00d6fke<\/p>\n<\/div>\n<\/div>\n\n\n\n

Sosyal M\u00fchendislik Neden Yap\u0131l\u0131r?<\/h2>\n\n\n
\n
\"Sosyal
Sosyal m\u00fchendislik, \u00e7o\u011fu siber sald\u0131r\u0131da oldu\u011fu gibi bir ki\u015fi ya da kurulu\u015fun g\u00fcvenlik \u00f6nlemlerini atlamay\u0131 ama\u00e7lar. <\/figcaption><\/figure>\n<\/div>\n\n\n

Siber korsanlar sosyal m\u00fchendislik su\u00e7lar\u0131 i\u00e7in farkl\u0131 motivasyonlara sahip olabilir:<\/p>\n\n\n\n

    \n
  • \u00c7ok \u00e7aba gerektirmeden h\u0131zl\u0131 finansal kazan\u00e7<\/strong><\/span> elde etme iste\u011fi<\/li>\n\n\n\n
  • Kendi kendini e\u011fitme, bilgi edinme heyecan\u0131yla<\/span><\/strong> veya sadece e\u011flence<\/strong><\/span> i\u00e7in sistemi yenme iste\u011fi<\/li>\n\n\n\n
  • \u0130ntikam<\/span><\/strong> alma (mutsuz ya da i\u015ften ayr\u0131lm\u0131\u015f \u00e7al\u0131\u015fanlar\u0131n \u015firkete bedel \u00f6detme iste\u011fi ya da bozulan bir ili\u015fkide kar\u015f\u0131 taraf\u0131 cezaland\u0131rma iste\u011fi)<\/li>\n\n\n\n
  • Su\u00e7 i\u015flemek i\u00e7in bask\u0131 alt\u0131nda kalmak <\/span><\/strong>(\u015fantaj, fidye, aile bask\u0131s\u0131, organize su\u00e7 gibi nedenlerle bireyin su\u00e7a y\u00f6nelmesi)<\/li>\n\n\n\n
  • \u0130deolojik, fanatik ama\u00e7larla<\/span><\/strong> hedef kitlede \u015fok yaratmak <\/li>\n\n\n\n
  • \u00d6zenti<\/span><\/strong> veya c\u00fcretkar bir eylemde bulunarak kahraman olma iste\u011fi<\/li>\n<\/ul>\n\n\n\n

    Sosyal M\u00fchendislik Sald\u0131r\u0131lar\u0131nda Kullan\u0131lan Y\u00f6ntemler<\/h2>\n\n\n
    \n
    \"Sosyal
    Sosyal m\u00fchendislik sald\u0131r\u0131lar\u0131; COVID-19 ve do\u011fal afetler gibi g\u00fcndemleri kullanarak, finansal sahtekarl\u0131k i\u00e7in kullan\u0131labilecek bilgileri verme konusunda kurban\u0131 ikna etmeye \u00e7al\u0131\u015fan senaryolardan faydalan\u0131r.<\/figcaption><\/figure>\n<\/div>\n\n\n

    Sosyal m\u00fchendislik; kimlik av\u0131, deepfake gibi \u00e7ok \u00e7e\u015fitli y\u00f6ntemlerin kombinasyonlar\u0131yla olu\u015fan siber g\u00fcvenlik sald\u0131r\u0131lar\u0131nda kendini g\u00f6sterebilir. \u00d6zellikle COVID-19 ve do\u011fal afetler gibi g\u00fcndemleri kullanarak, yetkili bir ki\u015fiden geliyor izlenimi veren, acil yan\u0131t verme zorunlulu\u011fu uyand\u0131ran ve finansal sahtekarl\u0131k i\u00e7in i\u015fe yarayabilecek bilgileri verme konusunda ki\u015fiyi ikna etmeye \u00e7al\u0131\u015fan senaryolar\u0131n kullan\u0131m\u0131 yayg\u0131nd\u0131r.<\/p>\n\n\n\n

      \n
    • E-doland\u0131r\u0131c\u0131l\u0131k<\/strong>, kimlik av\u0131<\/strong> ya da phishing<\/strong> olarak bilinen y\u00f6ntem, \u00f6zellikle \u00e7o\u011fu i\u015fletmenin birincil ileti\u015fim bi\u00e7imi olan e-postalar\u0131 hedefleyen bir sosyal m\u00fchendislik kategorisidir. Bu t\u00fcr sald\u0131r\u0131lar genellikle, me\u015fru bir g\u00f6ndericinin kimli\u011fine b\u00fcr\u00fcnmeye \u00e7al\u0131\u015fan ve al\u0131c\u0131y\u0131 gizli bilgileri if\u015fa etmeye veya k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m i\u00e7eren bir ba\u011flant\u0131ya veya eke t\u0131klamaya ikna etmeye \u00e7al\u0131\u015fan sahte e-postalar i\u00e7erir. Kimlik av\u0131 ile ilgili sosyal m\u00fchendislik taktikleri \u00e7ok karma\u015f\u0131k de\u011fildir, ancak etkilidirler. Sahte bir aciliyet ve korku duygusuyla birle\u015fti\u011finde, genellikle kurban\u0131 istenen eylemi yapmaya ikna etmek i\u00e7in yeterlidir.<\/li>\n<\/ul>\n\n\n\n
        \n
      • Smishing<\/strong> sald\u0131r\u0131lar\u0131, kurbanlar\u0131 SMS yoluyla hedef al\u0131r. Bu mesajlar genellikle k\u00f6t\u00fc ama\u00e7l\u0131 bir siteyi a\u00e7an veya dokunuldu\u011funda k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m indiren ba\u011flant\u0131lar i\u00e7erir. Smishing sald\u0131rganlar\u0131, bir mobil hizmet sa\u011flay\u0131c\u0131s\u0131n\u0131n veya ba\u015fka bir “resmi” kayna\u011f\u0131n kimli\u011fine b\u00fcr\u00fcnerek sosyal m\u00fchendisli\u011fi kullan\u0131r.<\/li>\n<\/ul>\n\n\n\n
          \n
        • Vishing<\/strong> sald\u0131r\u0131lar\u0131 metin tabanl\u0131 ortamlardan ziyade VoIP ve telekom\u00fcnikasyon hizmetlerini hedef al\u0131r. Sese dayal\u0131 sosyal m\u00fchendislik sald\u0131r\u0131lar\u0131 genellikle kurban\u0131n \u015fahsen tan\u0131d\u0131\u011f\u0131 birinin kimli\u011fine b\u00fcr\u00fcnmeye \u00e7al\u0131\u015fmaz; bunun yerine sald\u0131rganlar, kurbanlar\u0131n\u0131 bir bor\u00e7 tahsildar\u0131 gibi b\u00fcy\u00fck, iyi bilinen bir kurulu\u015ftan arad\u0131klar\u0131na ikna etmeye \u00e7al\u0131\u015f\u0131rlar. Ard\u0131ndan do\u011fum tarihi, kimlik numaras\u0131 veya kredi kart\u0131 bilgileri gibi hassas bilgileri vermesini isterler. Daha agresif senaryolarda, sald\u0131rgan kurban\u0131 banka havalesi yoluyla para g\u00f6ndermeye ikna etmeye \u00e7al\u0131\u015fabilir.<\/li>\n<\/ul>\n\n\n\n
            \n
          • Whaling<\/strong>, balina avc\u0131l\u0131\u011f\u0131 anlam\u0131na gelir. Balina av\u0131 sald\u0131r\u0131lar\u0131, en ba\u015far\u0131l\u0131 siber g\u00fcvenlik sald\u0131r\u0131lar\u0131 aras\u0131ndad\u0131r, \u00e7\u00fcnk\u00fc bir kurulu\u015ftaki y\u00f6netici ve \u00f6nemli \u00e7al\u0131\u015fanlar\u0131 hedefler. Sald\u0131rganlar bu ki\u015filer hakk\u0131nda mesleki ge\u00e7mi\u015f ve ki\u015fisel ya\u015fam tarz\u0131 dahil olabildi\u011fince fazla bilgi toplar. Ard\u0131ndan bu ki\u015filerden kritik bilgileri s\u0131zd\u0131rmaya \u00e7al\u0131\u015f\u0131rlar.<\/li>\n<\/ul>\n\n\n\n
              \n
            • Pharming <\/strong>sald\u0131r\u0131lar\u0131, me\u015fru bir web sitesinden k\u00f6t\u00fc ama\u00e7l\u0131 bir web sitesine y\u00f6nlendirme yap\u0131lmas\u0131 olarak tan\u0131mlanabilir. Genellikle bu sald\u0131r\u0131lar, sunucu dosyalar\u0131n\u0131 de\u011fi\u015ftiren k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlarla veya DNS \u00f6nbellek zehirlenmesi (DNS spoofing) denen bir teknik kullanarak ger\u00e7ekle\u015ftirilir. Pharming sald\u0131rganlar\u0131, sahte web sitesinin yasal web sitesinden ay\u0131rt edilmesini zorla\u015ft\u0131rmak i\u00e7in sosyal m\u00fchendisli\u011fi kullan\u0131r, b\u00f6ylece ziyaret\u00e7i do\u011fru yerde olmad\u0131\u011f\u0131n\u0131 fark edemez. Bir kullan\u0131c\u0131 k\u00f6t\u00fc ama\u00e7l\u0131 web sitesinde ne kadar uzun s\u00fcre kal\u0131rsa, sald\u0131rgan\u0131n veri toplamas\u0131 veya k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131 etkinle\u015ftirmesi o kadar k\u0131sa s\u00fcrer.<\/li>\n<\/ul>\n\n\n\n
                \n
              • Baiting<\/strong> (yemleme) sald\u0131r\u0131lar\u0131, g\u00fcvenlik \u00f6nlemlerini tehlikeye atmak i\u00e7in USB gibi fiziksel cihazlar\u0131 kullan\u0131r. \u00d6rne\u011fin, yere b\u0131rak\u0131lan veya hediye \u015feklinde postayla g\u00f6nderilen bir USB depolama ayg\u0131t\u0131 i\u00e7erebilir. Hedef ki\u015fi, cihaz\u0131 bir bilgisayara ba\u011flad\u0131\u011f\u0131nda, cihaz otomatik olarak bir bilgisayar vir\u00fcs\u00fc veya ba\u015fka t\u00fcr bir k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131 \u00e7al\u0131\u015ft\u0131racakt\u0131r. <\/li>\n<\/ul>\n\n\n\n
                  \n
                • Pretexting,<\/strong> sald\u0131rgan\u0131n ayr\u0131nt\u0131l\u0131 bir arka plan ile kurban\u0131n g\u00fcvenini kazanmas\u0131n\u0131 gerektirir. Teknoloji genellikle bu sald\u0131r\u0131lar i\u00e7in bir kataliz\u00f6rd\u00fcr; \u00f6rne\u011fin sald\u0131rganlar, anlatmaya \u00e7al\u0131\u015ft\u0131klar\u0131 hikayeyi destekleyen ikna edici bir internet varl\u0131\u011f\u0131 olu\u015fturmak i\u00e7in sosyal medya botlar\u0131n\u0131 kullanabilir. Bu t\u00fcr sald\u0131r\u0131lar\u0131n ay\u0131rt edici \u00f6zelli\u011fi, doland\u0131r\u0131c\u0131lar\u0131n kurban\u0131 kand\u0131rmak i\u00e7in bir hikaye veya bahane uydurmas\u0131d\u0131r. Bahanede, genellikle sald\u0131rgan, kurbana yard\u0131m etmeye \u00e7al\u0131\u015fan yetkili birisi rol\u00fcndedir. \u00d6rne\u011fin, ba\u015far\u0131s\u0131z oldu\u011fu iddia edilen bir otomatik fatura \u00f6demesi ve bunun sonucunda hatay\u0131 d\u00fczeltmemize yard\u0131mc\u0131 olmaya \u00e7al\u0131\u015fan samimi ve yard\u0131msever bir m\u00fc\u015fteri hizmetleri temsilcisi.

                  <\/li>\n\n\n\n
                • Scareware<\/strong> sald\u0131r\u0131lar\u0131, ki\u015fileri cihazlar\u0131n\u0131n veya yaz\u0131l\u0131mlar\u0131n\u0131n risk alt\u0131nda oldu\u011funa inand\u0131rmak i\u00e7in korku taktiklerini kullan\u0131r. Sald\u0131r\u0131, kurban\u0131 kritik bir yaz\u0131l\u0131m \u201cg\u00fcncelle\u015ftirmesini\u201d indirmeye te\u015fvik eden bir a\u00e7\u0131l\u0131r pencere veya cihazlar\u0131n\u0131n g\u00fcvenli\u011finin ihlal edilmi\u015f olabilece\u011fine dair bir uyar\u0131 \u015feklinde gelebilir. Kullan\u0131c\u0131n\u0131n yan\u0131t olarak yapt\u0131\u011f\u0131 herhangi bir eylem, sald\u0131r\u0131y\u0131 ba\u015flatmakla sonu\u00e7lanacakt\u0131r.<\/li>\n<\/ul>\n\n\n\n
                    \n
                  • Deepfake<\/strong> sald\u0131r\u0131lar\u0131, sosyal m\u00fchendislikle ortaya \u00e7\u0131kan sofistike bir trendi temsil etmektedir. Derin sahtekarl\u0131k anlam\u0131na gelen Deepfake, \u00f6nemli birinin foto\u011fraflar\u0131n\u0131, videolar\u0131n\u0131 ve ses kay\u0131tlar\u0131n\u0131 yapay zeka ve derin \u00f6\u011frenmeden yararlanarak kimli\u011fe b\u00fcr\u00fcnme arac\u0131 olarak kullanmaya yarar. \u00c7o\u011fu derin sahtekarl\u0131\u011f\u0131, farketmek neredeyse imkans\u0131zd\u0131r. Deepfake taktikleri, kurbanlar\u0131 daha etkili bir \u015fekilde aldatmak i\u00e7in genellikle sahte reklam ya da telefonla ya da g\u00f6r\u00fcnt\u00fcl\u00fc arama gibi di\u011fer sosyal m\u00fchendislik stratejileriyle birlikte kullan\u0131l\u0131r ve \u015firketleri, toplumlar\u0131, \u00fclkeleri kaosa s\u00fcr\u00fckleme potansiyeli nedeniyle \u00e7ok tehlikelidir.<\/li>\n<\/ul>\n\n\n\n

                    Ayr\u0131ca internet ba\u011flant\u0131s\u0131n\u0131n kesildi\u011fini bildirmek gibi bahanelerle geri bildirim isteyen sahte formlar<\/strong>, sald\u0131rgan\u0131n kendini gizlice konumland\u0131rarak ileti\u015fimi dinledi\u011fi senaryolar, hatta dumpster dal\u0131\u015f\u0131<\/strong> denen \u00e7al\u0131\u015fan kay\u0131tlar\u0131, organizasyon \u015femalar\u0131 gibi yararl\u0131 belgelerin bulunabilece\u011fi eski sabit s\u00fcr\u00fcc\u00fcler, USB s\u00fcr\u00fcc\u00fcler gibi kullan\u0131lmayan ekipmanlar\u0131n finansal avantaj veya intikam i\u00e7in mevcut veya eski \u00e7al\u0131\u015fanlar taraf\u0131ndan ele ge\u00e7irilmesi dahil \u00e7ok fazla y\u00f6ntem sosyal m\u00fchendislik sald\u0131r\u0131lar\u0131nda kullan\u0131lmaktad\u0131r. <\/p>\n\n\n\n

                    Sosyal M\u00fchendislik Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/h2>\n\n\n\n

                    Sosyal m\u00fchendislik sald\u0131r\u0131lar\u0131 tek bir ad\u0131mda ger\u00e7ekle\u015ftirilebilir, ancak genellikle daha karma\u015f\u0131k a\u015famalara sahiptir. Siber su\u00e7lular, sosyal m\u00fchendislik sald\u0131r\u0131lar\u0131n\u0131 ba\u015flat\u0131rken genellikle \u00f6ng\u00f6r\u00fclebilir bir d\u00f6ng\u00fc kullan\u0131r. Ba\u015flang\u0131\u00e7 a\u015famas\u0131, sald\u0131r\u0131y\u0131 ger\u00e7ekle\u015ftirmek i\u00e7in kullanabilecek bilgilerin ara\u015ft\u0131r\u0131lmas\u0131n\u0131 i\u00e7erir b\u00f6ylece, sistemin potansiyel giri\u015f noktalar\u0131 veya zay\u0131f a\u011f g\u00fcvenlik protokolleri tespit edilir. Sonraki ad\u0131mda sald\u0131rgan, toplad\u0131\u011f\u0131 bilgileri kullanarak hedefle ileti\u015fim kurmaya, duygusal manip\u00fclasyonla ki\u015fiyi ikna etmeye \u00e7al\u0131\u015f\u0131r. <\/p>\n\n\n\n

                    Bilgi toplama<\/strong><\/span> \u2013 Sisteme eri\u015fmeyi sa\u011flayacak telefon rehberi, do\u011fum tarihleri, organizasyon \u015femalar\u0131, personel kay\u0131tlar\u0131, sosyal faaliyetler gibi verileri elde etmeye \u00e7al\u0131\u015fma
                    <\/td><\/tr>
                    \u0130li\u015fkinin geli\u015fimi<\/span><\/strong> \u2013 Su\u00e7lular\u0131n kendilerini, g\u00fcven unsurunu g\u00fc\u00e7lendirerek k\u0131demli ki\u015filer gibi sunmas\u0131<\/td><\/tr>
                    \u0130li\u015fkinin istismar\u0131<\/span><\/strong> \u2013 Ma\u011fdurun manip\u00fcle edilerek kullan\u0131c\u0131 ad\u0131 ve \u015fifre gibi hassas bilgilerinin ele ge\u00e7irilmesi<\/td><\/tr>
                    Amaca ula\u015fmak i\u00e7in y\u00fcr\u00fctme<\/span><\/strong> \u2013 Edinilen ki\u015fisel\/hassas bilgileri, sisteme eri\u015fmek ve yasa d\u0131\u015f\u0131 eylemi tamamlamak i\u00e7in kullanma<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

                    Sosyal M\u00fchendislik Sald\u0131r\u0131lar\u0131 Nas\u0131l \u00d6nlenir?<\/h2>\n\n\n
                    \n
                    \"Sosyal
                    Ki\u015fileri taklit etme konusunda deepfake gibi ikna edici y\u00f6ntemler kullan\u0131ld\u0131\u011f\u0131ndan mesaj\u0131n do\u011frudan ger\u00e7ek g\u00f6ndericiden geldi\u011finden emin olmak i\u00e7in g\u00f6nderene ba\u015fka bir ileti\u015fim bi\u00e7imi arac\u0131l\u0131\u011f\u0131yla ula\u015f\u0131lmas\u0131 \u00f6nerilir.<\/span> <\/span><\/figcaption><\/figure>\n<\/div>\n\n\n

                    En g\u00fc\u00e7l\u00fc g\u00fcvenlik sistemleri bile, personel ya da yetkili ki\u015filer oturum a\u00e7ma bilgileri veya hesap ayr\u0131nt\u0131lar\u0131 gibi hassas bilgileri vermek \u00fczere kand\u0131r\u0131ld\u0131\u011f\u0131nda savunmas\u0131z kalmaktad\u0131r. Sosyal m\u00fchendislik sald\u0131r\u0131lar\u0131n\u0131n tuza\u011f\u0131na d\u00fc\u015fmemek i\u00e7in dikkat edilmesi gerekenler \u015fu \u015fekilde s\u0131ralanabilir:<\/p>\n\n\n\n

                      \n
                    1. Sosyal m\u00fchendislik tekniklerinden biriyle kar\u015f\u0131 kar\u015f\u0131ya oldu\u011funuzu g\u00f6steren en \u00f6nemli ipucu bu sald\u0131r\u0131lar\u0131n genellikle korku<\/strong> uyand\u0131rmaya \u00e7al\u0131\u015fan, aciliyet <\/strong>hissi do\u011furan senaryolarla olu\u015fturulmas\u0131d\u0131r. Polis, vergi dairesi memuru veya banka \u00e7al\u0131\u015fan\u0131 gibi bir otorite fig\u00fcr\u00fcnden geliyormu\u015f gibi g\u00f6r\u00fcnen \u015f\u00fcpheli e-postalar, telefonlar ve mesajlarda ki\u015fisel bilgi veya para talepleri<\/strong> varsa dikkatli olunmal\u0131d\u0131r. Finansal bilgi veya \u015fifre taleplerine yan\u0131t verilmemeli, me\u015fru kurulu\u015flar\u0131n ki\u015fisel bilgi isteyen bir mesaj g\u00f6ndermeyece\u011fi unutulmamal\u0131d\u0131r.

                      <\/li>\n\n\n\n
                    2. Bir uygulamaya, oyuna veya programa \u00fccretsiz <\/strong>eri\u015fim sunulmas\u0131 gibi kar\u015f\u0131 konulmaz f\u0131rsatlar<\/strong>, genellikle k\u00f6t\u00fc ama\u00e7l\u0131 kod i\u00e7erir. \u00c7evrimi\u00e7i ad\u0131mlar\u0131n\u0131z\u0131 izleyen casus yaz\u0131l\u0131mlar ve yazd\u0131klar\u0131n\u0131z\u0131 kayda ge\u00e7iren klavye \/ tu\u015f kaydediciler gibi k\u00f6t\u00fc ama\u00e7l\u0131 kodlar; indirilen dosya veya uygulaman\u0131n i\u00e7ine gizlenerek oturum a\u00e7ma bilgilerinize eri\u015fmek i\u00e7in kullan\u0131labilir. Kazan\u00e7l\u0131 bir i\u015f f\u0131rsat\u0131ndan bahseden senaryolar da yayg\u0131n doland\u0131r\u0131c\u0131l\u0131k t\u00fcrleri aras\u0131nda oldu\u011fundan bu tip mesajlar kar\u015f\u0131s\u0131nda uyan\u0131k olunmal\u0131d\u0131r.

                      <\/li>\n\n\n\n
                    3. G\u00fcvenilir g\u00fcncel vir\u00fcsten koruma yaz\u0131l\u0131mlar\u0131, DMARC protokol\u00fc ve yeni nesil g\u00fcvenlik duvar\u0131 <\/strong>ara\u00e7lar\u0131 kullanmak, sald\u0131rganlar\u0131n sistemlerinize ula\u015fmas\u0131n\u0131 engelleyebilir. \u015eirketler bir belgeye, bir klas\u00f6re veya a\u011f\u0131n bir k\u0131sm\u0131na eri\u015fimi, baz\u0131 \u00e7al\u0131\u015fanlar i\u00e7in k\u0131s\u0131tlayan sistem protokolleri kurabilir. Ek olarak, finansal i\u015flemler i\u00e7in, transferi i\u015flemlerinden \u00f6nce yetkiye dayal\u0131 do\u011frulamalar\u0131n istendi\u011fi sistemler uygulanabilir.

                      <\/li>\n\n\n\n
                    4. Bu t\u00fcr sald\u0131r\u0131lar\u0131 \u00f6nlemenin en etkili yolu, \u00e7al\u0131\u015fanlar\u0131n sosyal m\u00fchendislik taktikleri hakk\u0131nda bilgilendirilmesidir. G\u00fcnl\u00fck tempo ne kadar h\u0131zl\u0131 olursa olsun personelin herhangi bir i\u015flem yapmadan \u00f6nce ayr\u0131nt\u0131lar\u0131 dikkatlice g\u00f6zden ge\u00e7irmeye zaman ay\u0131rmas\u0131 \u00f6nemlidir. Bir SMS veya e-postada aciliyet hissi olsa bile, orijinalli\u011finden emin olmad\u0131k\u00e7a mesajlar\u0131n yan\u0131tlanmamas\u0131, ba\u011flant\u0131lara t\u0131klanmamas\u0131 veya eklerin a\u00e7\u0131lmamas\u0131 konusunda, \u00e7al\u0131\u015fanlar<\/strong> uyar\u0131lmal\u0131d\u0131r. \u0130letinin do\u011frudan ger\u00e7ek g\u00f6ndericiden geldi\u011finden emin olmak i\u00e7in g\u00f6nderene ba\u015fka bir ileti\u015fim bi\u00e7imi arac\u0131l\u0131\u011f\u0131yla ula\u015f\u0131lmas\u0131 \u00f6nerilir. Sald\u0131rganlar\u0131n ki\u015fileri taklit etme konusunda deepfake gibi ikna edici y\u00f6ntemler kulland\u0131\u011f\u0131 unutulmamal\u0131d\u0131r.

                      <\/li>\n\n\n\n
                    5. Sosyal medya <\/strong>hesaplar\u0131n\u0131zda payla\u015ft\u0131\u011f\u0131n\u0131z bilgiler, sald\u0131rganlar taraf\u0131ndan sosyal m\u00fchendislik ama\u00e7lar\u0131 do\u011frultusunda kullan\u0131labilir, kendinizi veya kurulu\u015funuzu kolay bir hedef haline getirebilir.

                      <\/li>\n\n\n\n
                    6. M\u00fcmk\u00fcn oldu\u011funda \u00e7ok fakt\u00f6rl\u00fc kimlik do\u011frulama<\/strong> kullan\u0131lmal\u0131d\u0131r. Parola, pin numaras\u0131, jeton, parmak izi, retina taramas\u0131, avu\u00e7 i\u00e7i izi, GPS konumu gibi kimli\u011finizi do\u011frulamak i\u00e7in farkl\u0131 kombinasyonlar\u0131n kullan\u0131lmas\u0131 siber sald\u0131r\u0131larla m\u00fccadelede etkilidir. Bunlar, oturum a\u00e7ma i\u015flemine, sald\u0131rgan\u0131n eri\u015fim sa\u011flayamayaca\u011f\u0131 ek bir ad\u0131m ekledi\u011finden hassas bilgilerinizin bir k\u0131sm\u0131 ele ge\u00e7irilse bile sald\u0131rgan\u0131n ilerlemesini engelleyecektir.

                      <\/li>\n\n\n\n
                    7. Bir sosyal m\u00fchendislik sald\u0131r\u0131s\u0131n\u0131 \u00f6nlemenin bir ba\u015fka etkili yolu, s\u0131zma testi<\/strong> (penetration test) yapmak ve kurulu\u015fun \u00e7e\u015fitli g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 tespit etmektir.<\/li>\n<\/ol>\n\n\n\n

                      \u00d6zet<\/h2>\n\n\n\n

                      Sosyal m\u00fchendislik, siber sald\u0131r\u0131 ger\u00e7ekle\u015ftirmek i\u00e7in doland\u0131r\u0131c\u0131lar\u0131n, insanlar\u0131n korku ve zaaflar\u0131ndan yararlanmas\u0131d\u0131r. Bunun i\u00e7in siber su\u00e7lular insanlar\u0131n g\u00fcvenlik riskleri olu\u015fturacak hatalar yapmalar\u0131na neden olacak psikolojik manip\u00fclasyon y\u00f6ntemleri kullan\u0131r.<\/p>\n\n\n\n

                      Ki\u015filerin ve i\u015fletmelerin, g\u00fcvenlik sistemlerinde en zay\u0131f halka olma e\u011filiminde olan insanlar\u0131 kand\u0131rmakla ilgilenen siber su\u00e7lulardan korunmak ad\u0131na ” Sosyal m\u00fchendislik sald\u0131r\u0131s\u0131 nedir? ” sorusunun yan\u0131tlar\u0131ndan yola \u00e7\u0131karak g\u00fcncel \u00f6nlemleri ara\u015ft\u0131rmalar\u0131 \u00f6nerilir.<\/p>\n","protected":false},"excerpt":{"rendered":"Sosyal m\u00fchendislik, siber sald\u0131r\u0131larda kurbanlar\u0131n g\u00fcvenlik risklerine neden olacak hatalar yapmalar\u0131na yol a\u00e7an psikolojik manip\u00fclasyon tekniklerinin kullan\u0131lmas\u0131d\u0131r.\n","protected":false},"author":1,"featured_media":47467,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_relevanssi_hide_post":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"63175,2671,42311,46607,44596,43938","_relevanssi_noindex_reason":"","footnotes":""},"categories":[656,654,657,655,138],"tags":[],"class_list":{"0":"post-45541","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-alpha-ssl","8":"category-comodo-ssl","9":"category-ev-ssl","10":"category-globalsign-ssl","11":"category-ipuclari"},"yoast_head":"\nSosyal M\u00fchendislik Sald\u0131r\u0131s\u0131 Nedir? • Turhost Blog<\/title>\n<meta name=\"description\" content=\"Sosyal m\u00fchendislik, siber sald\u0131r\u0131 ger\u00e7ekle\u015ftirmek i\u00e7in doland\u0131r\u0131c\u0131lar\u0131n, insanlar\u0131n korku ve zaaflar\u0131ndan yararlanmas\u0131d\u0131r.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Sosyal M\u00fchendislik Sald\u0131r\u0131s\u0131 Nedir? • Turhost Blog\" \/>\n<meta property=\"og:description\" content=\"Sosyal m\u00fchendislik, siber sald\u0131r\u0131 ger\u00e7ekle\u015ftirmek i\u00e7in doland\u0131r\u0131c\u0131lar\u0131n, insanlar\u0131n korku ve zaaflar\u0131ndan yararlanmas\u0131d\u0131r.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/\" \/>\n<meta property=\"og:site_name\" content=\"Turhost Blog\" \/>\n<meta property=\"article:published_time\" content=\"2021-08-31T07:44:35+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-07-18T14:06:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/08\/kapak-5.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"740\" \/>\n\t<meta property=\"og:image:height\" content=\"740\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Turhost\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Turhost\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/\",\"url\":\"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/\",\"name\":\"Sosyal M\u00fchendislik Sald\u0131r\u0131s\u0131 Nedir? • Turhost Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.turhost.com/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/08\/kapak-5.jpg\",\"datePublished\":\"2021-08-31T07:44:35+00:00\",\"dateModified\":\"2023-07-18T14:06:38+00:00\",\"author\":{\"@id\":\"https:\/\/www.turhost.com/blog\/#\/schema\/person\/dd8970d865df6ed4f742fe30c308ad1c\"},\"description\":\"Sosyal m\u00fchendislik, siber sald\u0131r\u0131 ger\u00e7ekle\u015ftirmek i\u00e7in doland\u0131r\u0131c\u0131lar\u0131n, insanlar\u0131n korku ve zaaflar\u0131ndan yararlanmas\u0131d\u0131r.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/#primaryimage\",\"url\":\"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/08\/kapak-5.jpg\",\"contentUrl\":\"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/08\/kapak-5.jpg\",\"width\":740,\"height\":740},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/www.turhost.com/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u0130pu\u00e7lar\u0131\",\"item\":\"https:\/\/www.turhost.com/blog\/ipuclari\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Sosyal M\u00fchendislik Sald\u0131r\u0131s\u0131 Nedir?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.turhost.com/blog\/#website\",\"url\":\"https:\/\/www.turhost.com/blog\/\",\"name\":\"Turhost Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.turhost.com/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.turhost.com/blog\/#\/schema\/person\/dd8970d865df6ed4f742fe30c308ad1c\",\"name\":\"Turhost\",\"sameAs\":[\"http:\/\/www.turhost.com\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Sosyal M\u00fchendislik Sald\u0131r\u0131s\u0131 Nedir? • Turhost Blog","description":"Sosyal m\u00fchendislik, siber sald\u0131r\u0131 ger\u00e7ekle\u015ftirmek i\u00e7in doland\u0131r\u0131c\u0131lar\u0131n, insanlar\u0131n korku ve zaaflar\u0131ndan yararlanmas\u0131d\u0131r.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/","og_locale":"tr_TR","og_type":"article","og_title":"Sosyal M\u00fchendislik Sald\u0131r\u0131s\u0131 Nedir? • Turhost Blog","og_description":"Sosyal m\u00fchendislik, siber sald\u0131r\u0131 ger\u00e7ekle\u015ftirmek i\u00e7in doland\u0131r\u0131c\u0131lar\u0131n, insanlar\u0131n korku ve zaaflar\u0131ndan yararlanmas\u0131d\u0131r.","og_url":"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/","og_site_name":"Turhost Blog","article_published_time":"2021-08-31T07:44:35+00:00","article_modified_time":"2023-07-18T14:06:38+00:00","og_image":[{"width":740,"height":740,"url":"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/08\/kapak-5.jpg","type":"image\/jpeg"}],"author":"Turhost","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Turhost","Tahmini okuma s\u00fcresi":"8 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/","url":"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/","name":"Sosyal M\u00fchendislik Sald\u0131r\u0131s\u0131 Nedir? • Turhost Blog","isPartOf":{"@id":"https:\/\/www.turhost.com/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/#primaryimage"},"image":{"@id":"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/#primaryimage"},"thumbnailUrl":"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/08\/kapak-5.jpg","datePublished":"2021-08-31T07:44:35+00:00","dateModified":"2023-07-18T14:06:38+00:00","author":{"@id":"https:\/\/www.turhost.com/blog\/#\/schema\/person\/dd8970d865df6ed4f742fe30c308ad1c"},"description":"Sosyal m\u00fchendislik, siber sald\u0131r\u0131 ger\u00e7ekle\u015ftirmek i\u00e7in doland\u0131r\u0131c\u0131lar\u0131n, insanlar\u0131n korku ve zaaflar\u0131ndan yararlanmas\u0131d\u0131r.","breadcrumb":{"@id":"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/"]}]},{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/#primaryimage","url":"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/08\/kapak-5.jpg","contentUrl":"https:\/\/www.turhost.com/blog\/wp-content\/uploads\/2021\/08\/kapak-5.jpg","width":740,"height":740},{"@type":"BreadcrumbList","@id":"https:\/\/www.turhost.com/blog\/sosyal-muhendislik-saldirisi-nedir\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.turhost.com/blog\/"},{"@type":"ListItem","position":2,"name":"\u0130pu\u00e7lar\u0131","item":"https:\/\/www.turhost.com/blog\/ipuclari\/"},{"@type":"ListItem","position":3,"name":"Sosyal M\u00fchendislik Sald\u0131r\u0131s\u0131 Nedir?"}]},{"@type":"WebSite","@id":"https:\/\/www.turhost.com/blog\/#website","url":"https:\/\/www.turhost.com/blog\/","name":"Turhost Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.turhost.com/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":"Person","@id":"https:\/\/www.turhost.com/blog\/#\/schema\/person\/dd8970d865df6ed4f742fe30c308ad1c","name":"Turhost","sameAs":["http:\/\/www.turhost.com\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/posts\/45541","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/comments?post=45541"}],"version-history":[{"count":163,"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/posts\/45541\/revisions"}],"predecessor-version":[{"id":64268,"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/posts\/45541\/revisions\/64268"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/media\/47467"}],"wp:attachment":[{"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/media?parent=45541"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/categories?post=45541"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.turhost.com/blog\/wp-json\/wp\/v2\/tags?post=45541"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}