{"id":22731,"date":"2024-04-16T03:00:00","date_gmt":"2024-04-16T00:00:00","guid":{"rendered":"https:\/\/rockvell.com\/?p=22731"},"modified":"2024-04-16T11:17:47","modified_gmt":"2024-04-16T08:17:47","slug":"podratcilar-vasit%c9%99sil%c9%99-kiberhucumlar","status":"publish","type":"post","link":"https:\/\/rockvell.com\/?p=22731","title":{"rendered":"Podrat\u00e7\u0131lar vasit\u0259sil\u0259 kiberh\u00fccumlar&#8230;."},"content":{"rendered":"\n<p class=\"has-medium-font-size\"><strong>Podrat\u00e7\u0131lar vasit\u0259sil\u0259 kiberh\u00fccumlar 2023-c\u00fc ild\u0259 t\u0259cav\u00fczkarlar\u0131n korporativ \u015f\u0259b\u0259k\u0259y\u0259 m\u00fcdaxil\u0259sinin \u0259n geni\u015f yay\u0131lm\u0131\u015f \u00fcsullar\u0131ndan biri olub<\/strong><\/p>\n\n\n\n<p>Ke\u00e7\u0259n il \u0259rzind\u0259 \u0259n \u00e7ox istifad\u0259 olunan ilkin h\u00fccum vektorlar\u0131n\u0131n ilk \u00fc\u00e7l\u00fcy\u00fcn\u0259 daha \u00e7ox ki\u00e7ik v\u0259 orta biznes\u0259 aid podrat\u00e7\u0131lar vasit\u0259sil\u0259 edil\u0259n h\u00fccumlar daxil olub. \u00a0Bu m\u0259lumat Kaspersky-nin komp\u00fcter insidentl\u0259rin\u0259 cavab \u00fczr\u0259 komandas\u0131n\u0131n (Global Emergency Response Team) illik hesabat\u0131nda yer al\u0131r. \u015eirk\u0259tl\u0259rin insidentl\u0259r\u0259 cavab yard\u0131m\u0131 \u00fc\u00e7\u00fcn m\u00fcraci\u0259t s\u0259b\u0259bl\u0259ri aras\u0131nda m\u0259lumat s\u0131zmas\u0131, h\u0259m\u00e7inin \u015fifr\u0259l\u0259m\u0259 n\u0259tic\u0259sind\u0259 m\u0259lumatlara daxil ola bilm\u0259m\u0259k daha \u00e7ox qeyd\u0259 al\u0131n\u0131b.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"682\" src=\"https:\/\/rockvell.com\/wp-content\/uploads\/2023\/03\/Kaspersky-2.png\" alt=\"\" class=\"wp-image-8743\" style=\"width:461px;height:auto\" srcset=\"https:\/\/rockvell.com\/wp-content\/uploads\/2023\/03\/Kaspersky-2.png 1024w, https:\/\/rockvell.com\/wp-content\/uploads\/2023\/03\/Kaspersky-2-300x200.png 300w, https:\/\/rockvell.com\/wp-content\/uploads\/2023\/03\/Kaspersky-2-768x512.png 768w, https:\/\/rockvell.com\/wp-content\/uploads\/2023\/03\/Kaspersky-2-360x240.png 360w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/div>\n\n\n<p><strong>Podrat\u00e7\u0131lar vasit\u0259sil\u0259 h\u00fccumlara \u0259vv\u0259ll\u0259r d\u0259 rast g\u0259linib, lakin bu il bu c\u00fcr hadis\u0259l\u0259rin pay\u0131 artaraq 7% t\u0259\u015fkil edib<\/strong>. Bu vektor t\u0259cav\u00fczkarlara b\u0259z\u0259n m\u00fcdafi\u0259si s\u0131nd\u0131r\u0131lm\u0131\u015f bir t\u0259\u015fkilat vasit\u0259sil\u0259 onlarla qurbana \u00e7\u0131x\u0131\u015f \u0259ld\u0259 etm\u0259y\u0259 imkan verir. Bu c\u00fcr hadis\u0259l\u0259ri a\u015fkar etm\u0259k daha \u00e7ox vaxt t\u0259l\u0259b edir, \u00e7\u00fcnki t\u0259sir\u0259 m\u0259ruz qalan t\u0259\u015fkilat \u00fc\u00e7\u00fcn t\u0259cav\u00fczkarlar\u0131n h\u0259r\u0259k\u0259tl\u0259ri \u00e7ox vaxt podrat\u00e7\u0131n\u0131n i\u015f\u00e7il\u0259rinin qanuni h\u0259r\u0259k\u0259tl\u0259rin\u0259 \u00e7ox b\u0259nz\u0259yir.<\/p>\n\n\n\n<p><strong>2023-c\u00fc ild\u0259 ilkin qanunsuz m\u00fcdaxil\u0259l\u0259rin \u0259n \u00e7ox yay\u0131lm\u0131\u015f metodu (insidentl\u0259rin 42%-i) ictimai \u0259l\u00e7atan t\u0259tbiql\u0259rd\u0259 &#8211; elektron po\u00e7t v\u0259 veb serverl\u0259rd\u0259, uzaqdan giri\u015f serverl\u0259rind\u0259 v\u0259 s. z\u0259iflikl\u0259r olaraq qal\u0131b<\/strong> (onlar\u0131n \u00fc\u00e7d\u0259 biri art\u0131q m\u0259lum olan z\u0259iflikl\u0259r vasit\u0259sil\u0259 h\u00fccuma m\u0259ruz qal\u0131b). \u0130kinci yerd\u0259 (29%) \u015fifr\u0259l\u0259rin m\u00fc\u0259yy\u0259n edilm\u0259si \u00fcsulu il\u0259 edil\u0259n h\u00fccumlar da daxil olmaqla, o\u011furlanm\u0131\u015f istifad\u0259\u00e7i m\u0259lumatlar\u0131n\u0131n istifad\u0259si g\u0259lir.<\/p>\n\n\n\n<p><strong>Kriptoqraflar ist\u0259nil\u0259n s\u0259nayed\u0259n olan t\u0259\u015fkilatlar \u00fc\u00e7\u00fcn \u0259sas t\u0259hl\u00fck\u0259 olaraq qal\u0131r.<\/strong> 2023-c\u00fc ild\u0259 h\u0259r \u00fc\u00e7\u00fcnc\u00fc insident (33%) onlarla ba\u011fl\u0131 olub. H\u00fccumlar aras\u0131nda \u201cLockbit\u201d (kriptoqraf h\u00fccumlar\u0131n\u0131n \u00fcmumi say\u0131n\u0131n 28%-i), \u201cBlackCat\u201d (13%), \u201cPhobos\u201d (9%) v\u0259 \u201cZeppelin\u201d (9%) t\u0259r\u0259find\u0259n edil\u0259n h\u00fccumlar daha \u00e7ox qeyd\u0259 al\u0131n\u0131b. B\u00fct\u00fcn fidy\u0259 proqramlar\u0131 h\u00fccumlar\u0131n\u0131n yar\u0131s\u0131 ictimaiyy\u0259t \u00fc\u00e7\u00fcn \u0259l\u00e7atan olan t\u0259tbiql\u0259rin s\u0131nd\u0131r\u0131lmas\u0131 il\u0259 ba\u015flay\u0131b, h\u00fccumlar\u0131n daha 40%-i \u0259l\u0259 ke\u00e7irilmi\u015f istifad\u0259\u00e7i m\u0259lumatlar\u0131ndan istifad\u0259 edib, qalan 10%-d\u0259 is\u0259 h\u00fccum fi\u015finq v\u0259 ya etibarl\u0131 \u0259laq\u0259l\u0259rd\u0259n istifad\u0259 vasit\u0259sil\u0259 ba\u015f verib. M\u0259lumatlar\u0131n \u015fifr\u0259l\u0259nm\u0259si il\u0259 edil\u0259n h\u00fccumlar\u0131n \u0259ks\u0259riyy\u0259ti 24 saat (43%) v\u0259 ya g\u00fcnl\u0259r (33%) \u0259rzind\u0259 ba\u015fa \u00e7at\u0131b, h\u00fccumlar\u0131n 13%-i h\u0259ft\u0259l\u0259r, 11%-i is\u0259 bir aydan \u00e7ox davam edib.<\/p>\n\n\n\n<p>H\u0259ft\u0259l\u0259rl\u0259 v\u0259 aylarla davam ed\u0259n, dem\u0259k olar ki, b\u00fct\u00fcn uzunm\u00fcdd\u0259tli fidy\u0259 proqram\u0131 h\u00fccumlar\u0131nda m\u0259lumatlar t\u0259kc\u0259 \u015fifr\u0259l\u0259nm\u0259yib, h\u0259m d\u0259 s\u0131zd\u0131r\u0131l\u0131b. <strong>M\u0259lumat s\u0131zmas\u0131 il\u0259 \u00fczl\u0259\u015f\u0259n \u015firk\u0259tl\u0259rin pay\u0131 artaraq hadis\u0259l\u0259rin \u00fcmumi say\u0131n\u0131n 21%-ni t\u0259\u015fkil edib<\/strong>.<\/p>\n\n\n\n<p>\u201cPodrat\u00e7\u0131lar vasit\u0259sil\u0259 m\u00fcdafi\u0259nin s\u0131nd\u0131r\u0131lmas\u0131 il\u0259 ba\u011fl\u0131 insidentl\u0259rin m\u00fcr\u0259kk\u0259bliyi ondan ibar\u0259tdir ki, m\u00fc\u015ft\u0259ril\u0259rin\u0259 onlar\u0131n vasit\u0259sil\u0259 h\u00fccuma edil\u0259n \u015firk\u0259tl\u0259rin he\u00e7 d\u0259 ham\u0131s\u0131 geni\u015fmiqyasl\u0131 t\u0259hlil aparmaq v\u0259 \u0259m\u0259kda\u015fl\u0131q etm\u0259k z\u0259rur\u0259tini ba\u015fa d\u00fc\u015fm\u00fcr. \u018fks\u0259r hallarda \u00fcmumi h\u00fccum vektorlar\u0131 vasit\u0259sil\u0259 m\u00fcdaxil\u0259 riski, m\u0259s\u0259l\u0259n, a\u00e7\u0131q t\u0259tbiql\u0259rd\u0259ki bo\u015fluqlar\u0131n istismar\u0131, o\u011furlanm\u0131\u015f hesablar, z\u0259r\u0259rli e-po\u00e7tlar qabaqlay\u0131c\u0131 t\u0259dbirl\u0259rl\u0259 &#8211; yenil\u0259m\u0259l\u0259rin vaxt\u0131nda idar\u0259 edilm\u0259si, \u00e7oxfaktorlu autentifikasiyan\u0131n istifad\u0259si, antifi\u015finq h\u0259ll\u0259rinin t\u0259tbiqi v\u0259 i\u015f\u00e7il\u0259rin r\u0259q\u0259msal savadl\u0131l\u0131\u011f\u0131n\u0131n art\u0131r\u0131lmas\u0131 il\u0259 azald\u0131la bil\u0259r&#8221;, &#8211; dey\u0259 Kaspersky-nin komp\u00fcter insidentl\u0259rin\u0259 cavab \u00fczr\u0259 qlobal komandas\u0131n\u0131n r\u0259hb\u0259ri Konstantin Sapronov bildirir.<\/p>\n\n\n\n<p>\u015eirk\u0259ti kiberh\u00fccumlardan qorumaq \u00fc\u00e7\u00fcn Kaspersky t\u00f6vsiy\u0259 edir:<\/p>\n\n\n\n<ul>\n<li>g\u00fccl\u00fc \u015fifr\u0259 siyas\u0259ti v\u0259 \u00e7oxfaktorlu autentifikasiya t\u0259tbiq etm\u0259k;<\/li>\n\n\n\n<li>k\u0259nar giri\u015fd\u0259n idar\u0259etm\u0259 portlar\u0131n\u0131 ba\u011flamaq;<\/li>\n\n\n\n<li>proqram t\u0259minat\u0131 yenil\u0259m\u0259l\u0259rini qura\u015fd\u0131rmaq v\u0259 ya \u015f\u0259b\u0259k\u0259 perimetrind\u0259 xidm\u0259tl\u0259r \u00fc\u00e7\u00fcn \u0259lav\u0259 m\u00fchafiz\u0259 t\u0259dbirl\u0259rind\u0259n istifad\u0259 etm\u0259k;<\/li>\n\n\n\n<li>i\u015f\u00e7il\u0259rin informasiya t\u0259hl\u00fck\u0259sizliyi m\u0259s\u0259l\u0259l\u0259rin\u0259 dair m\u0259lumatl\u0131l\u0131\u011f\u0131n\u0131 art\u0131rmaq;<\/li>\n\n\n\n<li>t\u0259cav\u00fczkarlar t\u0259r\u0259find\u0259n istifad\u0259 edil\u0259n qanuni al\u0259tl\u0259ri a\u015fkar etm\u0259k qaydalar\u0131ndan istifad\u0259 etm\u0259k;<\/li>\n\n\n\n<li>EDR v\u0259 XDR sinif h\u0259ll\u0259rind\u0259n istifad\u0259 etm\u0259k;<\/li>\n\n\n\n<li>m\u00fct\u0259madi olaraq t\u0259cav\u00fczkarlar\u0131n \u00fcmumi \u00fcsul v\u0259 taktikalar\u0131ndan istifad\u0259 ed\u0259r\u0259k kiber t\u0259liml\u0259r ke\u00e7irm\u0259k;<\/li>\n\n\n\n<li>korporativ \u015f\u0259b\u0259k\u0259 daxilind\u0259 h\u00fccum ed\u0259nl\u0259r d\u0259stind\u0259n proqram t\u0259minat\u0131n\u0131n istifad\u0259sini m\u0259hdudla\u015fd\u0131rmaq;<\/li>\n\n\n\n<li>m\u0259lumatlar\u0131n ehtiyat n\u00fcsx\u0259sini \u00e7\u0131xarmaq;<\/li>\n\n\n\n<li>SLA il\u0259 insidentl\u0259r\u0259 cavab verm\u0259y\u0259 abun\u0259 olmaq;<\/li>\n\n\n\n<li>t\u0259lim v\u0259 kibert\u0259dris t\u0259dbirl\u0259ri vasit\u0259sil\u0259 insidentl\u0259r\u0259 cavab \u00fczr\u0259 komandan\u0131n haz\u0131rl\u0131q s\u0259viyy\u0259sini qorumaq.<\/li>\n<\/ul>\n\n\n\n<p><strong>Kaspersky Incident Response haqq\u0131nda<\/strong><\/p>\n\n\n\n<p><a href=\"https:\/\/www.kaspersky.ru\/enterprise-security\/incident-response\" target=\"_blank\" rel=\"noopener\" title=\"\">Kaspersky Incident Response<\/a> \u2014 insidentin b\u00fct\u00f6v reaksiya d\u00f6vr\u00fcn\u00fc \u0259hat\u0259 ed\u0259n t\u0259f\u0259rr\u00fcatl\u0131 m\u0259nz\u0259r\u0259sini \u0259ld\u0259 etm\u0259y\u0259 y\u00f6n\u0259lmi\u015f xidm\u0259tdir. Buraya s\u00fcbutlar\u0131n toplanmas\u0131 v\u0259 insidentl\u0259 ba\u011fl\u0131 erk\u0259n reaksiyadan tutmu\u015f haker h\u00fccumunun \u0259lav\u0259 izl\u0259rinin m\u00fc\u0259yy\u0259n edilm\u0259sin\u0259 v\u0259 h\u00fccumun n\u0259tic\u0259l\u0259rini yum\u015faltmaq \u00fc\u00e7\u00fcn plan\u0131n haz\u0131rlanmas\u0131na q\u0259d\u0259r m\u00fcxt\u0259lif prosesl\u0259r daxildir.<em>*Hesabatda t\u0259qdim olunan statistika Kaspersky-nin insidentl\u0259r\u0259 reaksiya \u00fczr\u0259 komandas\u0131n\u0131n 2023-c\u00fc ild\u0259 insidentl\u0259r \u00fcz\u0259rind\u0259 apard\u0131\u011f\u0131 i\u015fl\u0259r n\u0259tic\u0259sind\u0259 \u0259ld\u0259 edil\u0259n m\u0259lumatlara \u0259saslan\u0131r.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Podrat\u00e7\u0131lar vasit\u0259sil\u0259 kiberh\u00fccumlar 2023-c\u00fc ild\u0259 t\u0259cav\u00fczkarlar\u0131n korporativ \u015f\u0259b\u0259k\u0259y\u0259 m\u00fcdaxil\u0259sinin \u0259n geni\u015f yay\u0131lm\u0131\u015f \u00fcsullar\u0131ndan biri olub Ke\u00e7\u0259n il \u0259rzind\u0259 \u0259n \u00e7ox istifad\u0259 olunan ilkin h\u00fccum vektorlar\u0131n\u0131n ilk \u00fc\u00e7l\u00fcy\u00fcn\u0259 daha \u00e7ox ki\u00e7ik v\u0259 orta biznes\u0259 aid podrat\u00e7\u0131lar&#8230;<\/p>\n","protected":false},"author":2,"featured_media":8743,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/22731"}],"collection":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=22731"}],"version-history":[{"count":1,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/22731\/revisions"}],"predecessor-version":[{"id":22732,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/22731\/revisions\/22732"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/media\/8743"}],"wp:attachment":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=22731"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=22731"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=22731"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}