{"id":31304,"date":"2024-12-06T01:00:00","date_gmt":"2024-12-05T22:00:00","guid":{"rendered":"https:\/\/rockvell.com\/?p=31304"},"modified":"2024-12-06T10:35:35","modified_gmt":"2024-12-06T07:35:35","slug":"kaspersky-2025-ci-ild%c9%99-mur%c9%99kk%c9%99b-kiberhucumlarin-inkisafi-proqnozunu-t%c9%99qdim-edib","status":"publish","type":"post","link":"https:\/\/rockvell.com\/?p=31304","title":{"rendered":"Kaspersky 2025-ci ild\u0259 m\u00fcr\u0259kk\u0259b kiberh\u00fccumlar\u0131n inki\u015faf\u0131 proqnozunu t\u0259qdim edib"},"content":{"rendered":"\n

Haktivist birlikl\u0259ri, s\u00fcni intellekt v\u0259 yeni dill\u0259rd\u0259 z\u0259r\u0259rli proqamlar: Kaspersky 2025-ci ild\u0259 m\u00fcr\u0259kk\u0259b kiberh\u00fccumlar\u0131n inki\u015faf\u0131 proqnozunu t\u0259qdim edib <\/strong><\/p>\n\n\n\n

Kaspersky GReAT (Kaspersky Laboratoriyas\u0131n\u0131n Qlobal T\u0259hdidl\u0259rin T\u0259dqiqat\u0131 v\u0259 T\u0259hlili M\u0259rk\u0259zi) ekspertl\u0259rinin proqnozlar\u0131na g\u00f6r\u0259\u015fA 2025-ci ild\u0259 haktivist birlikl\u0259ri geni\u015fl\u0259nm\u0259y\u0259 davam ed\u0259c\u0259k<\/strong>. Al\u0259tl\u0259rin payla\u015f\u0131lmas\u0131 v\u0259 z\u0259r\u0259rli infrastruktura (m\u0259s\u0259l\u0259n, idar\u0259etm\u0259-serverl\u0259ri v\u0259 z\u0259r\u0259rli proqram t\u0259minat\u0131n\u0131n yay\u0131lmas\u0131 \u00fc\u00e7\u00fcn saytlar) \u00e7\u0131x\u0131\u015f strategiyas\u0131 haktivizmi daha da g\u00fccl\u0259ndirib. Buna g\u00f6r\u0259 d\u0259 daha t\u0259\u015fkilatlanm\u0131\u015f v\u0259 t\u0259sirli, o c\u00fcml\u0259d\u0259n \u015fifr\u0259l\u0259yicil\u0259rin t\u0259tbiqi il\u0259 kampaniyalar\u0131n h\u0259yata ke\u00e7irilm\u0259si g\u00f6zl\u0259nilir.<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

APT qruplar\u0131 tez-tez “\u018f\u015fyalar\u0131n \u0130nterneti” (IoT) qur\u011fular\u0131ndan istifad\u0259 etm\u0259kl\u0259 h\u00fccumlar h\u0259yata ke\u00e7ir\u0259c\u0259k.<\/strong> A\u011f\u0131ll\u0131 kameralar, s\u00f6nd\u00fcr\u00fcc\u00fcl\u0259r v\u0259 elektrik yuvalar\u0131 kimi vasit\u0259l\u0259rin populyarl\u0131\u011f\u0131n\u0131n artmas\u0131 il\u0259 internet\u0259 \u00e7oxsayl\u0131 yeni ba\u011flant\u0131lar yaran\u0131r v\u0259 h\u0259r biri potensial z\u0259if n\u00f6qt\u0259 ola bil\u0259r. Bu cihazlar\u0131 idar\u0259 etm\u0259k \u00fc\u00e7\u00fcn mobil t\u0259tbiql\u0259rin artmas\u0131 da \u0259lav\u0259 riskl\u0259r yarad\u0131r. M\u00f6vcud t\u0259tbiql\u0259rin \u00e7oxlu\u011fu onlar\u0131n etibarl\u0131l\u0131\u011f\u0131n\u0131 yoxlama\u011f\u0131 \u00e7\u0259tinl\u0259\u015fdirir v\u0259 kibercinay\u0259tkarlar IoT qur\u011fular\u0131na n\u0259zar\u0259ti \u0259l\u0259 ke\u00e7irm\u0259k \u00fc\u00e7\u00fcn r\u0259smi t\u0259tbiq ma\u011fazalar\u0131na saxta versiyalar y\u00fckl\u0259y\u0259 bil\u0259rl\u0259r. Bu sah\u0259d\u0259 t\u0259chizat z\u0259ncirinin komprometasiya riski d\u0259 narahatl\u0131q do\u011furur: kibercinay\u0259tkarlar z\u0259r\u0259rli proqram t\u0259minat\u0131n\u0131 b\u0259zi Android \u0259m\u0259liyyat sistemi \u0259sas\u0131nda \u00e7al\u0131\u015fan TV cihazlar\u0131nda etdikl\u0259ri kimi istehsal m\u0259rh\u0259l\u0259sind\u0259 yerl\u0259\u015fdir\u0259 bil\u0259rl\u0259r.<\/p>\n\n\n\n

A\u00e7\u0131q m\u0259nb\u0259 kodlu layih\u0259l\u0259rd\u0259 t\u0259chizat z\u0259ncirin\u0259 h\u00fccumlar\u0131n art\u0131m\u0131.<\/strong> Bir \u00e7ox a\u00e7\u0131q m\u0259nb\u0259 kodlu layih\u0259l\u0259r c\u0259mi bir ne\u00e7\u0259 v\u0259 ya h\u0259tta t\u0259k bir t\u0259rtibat\u00e7\u0131 t\u0259r\u0259find\u0259n d\u0259st\u0259kl\u0259ndiyin\u0259 g\u00f6r\u0259 m\u00fcr\u0259kk\u0259b h\u0259d\u0259fli h\u00fccumlara qar\u015f\u0131 h\u0259ssasd\u0131r. T\u0259chizat z\u0259nciri h\u00fccumlar\u0131n\u0131n say\u0131 artmasa da, insidentl\u0259rin a\u015fkarlanmas\u0131 hallar\u0131 daha \u00e7ox ola bil\u0259r.<\/p>\n\n\n\n

\u201cC++\u201d v\u0259 \u201cGo\u201d dill\u0259rind\u0259 z\u0259r\u0259rli proqramlar.<\/strong> A\u00e7\u0131q m\u0259nb\u0259 kodlu layih\u0259l\u0259r getdikc\u0259 daha \u00e7ox \u201cC++\u201d v\u0259 \u201cGo\u201d dill\u0259rind\u0259n istifad\u0259 etdiyind\u0259n t\u0259cav\u00fczkarlar \u00f6z z\u0259r\u0259rli proqramlar\u0131n\u0131 bu populyar dill\u0259r\u0259 uy\u011funla\u015fd\u0131rmal\u0131 olacaqlar. 2025-ci ild\u0259 daha \u00e7ox kibercinay\u0259tkar qruplar v\u0259 f\u0259rdi t\u0259cav\u00fczkarlar \u201cC++\u201d v\u0259 \u201cGo\u201d dill\u0259rinin yeni versiyalar\u0131na ke\u00e7id ed\u0259c\u0259k, bu dill\u0259rin a\u00e7\u0131q m\u0259nb\u0259 kodlu layih\u0259l\u0259rd\u0259ki populyarl\u0131\u011f\u0131ndan faydalanma\u011fa \u00e7al\u0131\u015facaqlar. Bu dill\u0259r z\u0259r\u0259rli proqramlar\u0131n haz\u0131rlanmas\u0131nda \u0259sas rol oynayacaq, eyni zamanda t\u0259cav\u00fczkarlar onlardak\u0131 bo\u015fluqlardan sisteml\u0259r\u0259 n\u00fcfuz etm\u0259k v\u0259 m\u00fcdafi\u0259d\u0259n yay\u0131nmaq \u00fc\u00e7\u00fcn istifad\u0259 ed\u0259c\u0259kl\u0259r.<\/p>\n\n\n\n

S\u00fcni intellektd\u0259n daha aktiv istifad\u0259.<\/strong> B\u00f6y\u00fck dil modell\u0259rinin (LLM) istifad\u0259si t\u0259hl\u00fck\u0259sizlik m\u00fct\u0259x\u0259ssisl\u0259rinin kiber t\u0259hl\u00fck\u0259sizlik strategiyalar\u0131nda s\u00fcni intellekt v\u0259 ma\u015f\u0131n \u00f6yr\u0259nm\u0259sini daha \u00e7ox t\u0259tbiq etm\u0259si kimi t\u0259cav\u00fczkarlar \u00fc\u00e7\u00fcn d\u0259 adi praktika olacaq. T\u0259cav\u00fczkarlar, ehtimal ki, LLM-d\u0259n k\u0259\u015ffiyyat m\u0259rh\u0259l\u0259sind\u0259 istifad\u0259 ed\u0259r\u0259k bo\u015fluqlar\u0131n avtomatla\u015fd\u0131r\u0131lm\u0131\u015f axtar\u0131\u015f\u0131n\u0131 v\u0259 h\u0259d\u0259fl\u0259rind\u0259ki z\u0259if n\u00f6qt\u0259l\u0259ri daha tez tapmaq \u00fc\u00e7\u00fcn onlara laz\u0131m olan texnologiyalar bar\u0259d\u0259 m\u0259lumat toplanmas\u0131n\u0131 h\u0259yata ke\u00e7ir\u0259c\u0259k. H\u0259m\u00e7inin, t\u0259cav\u00fczkarlar h\u0259d\u0259fl\u0259rin\u0259 daha asan \u00e7atmaq \u00fc\u00e7\u00fcn s\u00fcni intellektd\u0259n daha \u00e7ox z\u0259r\u0259rli skriptl\u0259rin haz\u0131rlanmas\u0131 v\u0259 post-komprometasiya m\u0259rh\u0259l\u0259sind\u0259 komanda yarad\u0131lmas\u0131 \u00fc\u00e7\u00fcn istifad\u0259 ed\u0259c\u0259kl\u0259r. Onlar lokal LLM modell\u0259ri yaratmaq v\u0259 ya a\u00e7\u0131q platformalarda (m\u0259s\u0259l\u0259n, Google, OpenAI, Microsoft) bir ne\u00e7\u0259 hesab istifad\u0259 etm\u0259k vasit\u0259sil\u0259 sor\u011fular\u0131 diqq\u0259tl\u0259 haz\u0131rlamaq v\u0259 \u00f6t\u00fcr\u00fcl\u0259n m\u0259lumatlar\u0131 minimuma endirm\u0259kl\u0259 h\u0259r\u0259k\u0259tl\u0259rini maskalaya bil\u0259rl\u0259r.<\/p>\n\n\n\n

D\u0259rin saxtakarl\u0131qlar (Deepfake).<\/strong> Kiber qruplar \u00f6zl\u0259rini laz\u0131m olan \u015f\u0259xsl\u0259r kimi g\u00f6st\u0259rm\u0259k, inand\u0131r\u0131c\u0131 m\u00fcraci\u0259tl\u0259r v\u0259 ya videolar yaratmaq \u00fc\u00e7\u00fcn bu texnologiyadan daha tez-tez istifad\u0259 ed\u0259c\u0259kl\u0259r. Burada \u0259sas m\u0259qs\u0259d onlar i\u015f\u00e7il\u0259ri aldatmaq, m\u0259xfi m\u0259lumatlar\u0131 o\u011furlamaq v\u0259 dig\u0259r z\u0259r\u0259rli h\u0259r\u0259k\u0259tl\u0259ri h\u0259yata ke\u00e7irm\u0259kdir.<\/p>\n\n\n\n

S\u00fcni intellekt modell\u0259rind\u0259 arxa qap\u0131lar (Backdoor).<\/strong>
A\u00e7\u0131q m\u0259nb\u0259 kodlu s\u00fcni intellekt modell\u0259rinin geni\u015f yay\u0131lmas\u0131 onlar\u0131n troyanlar v\u0259 ya arxa qap\u0131lar vasit\u0259sil\u0259 yoluxma riskini art\u0131r\u0131r. 2025-ci ild\u0259 kiber qruplar m\u0259\u015fhur s\u00fcni intellekt modell\u0259rini v\u0259 a\u00e7\u0131q m\u0259lumat d\u0259stl\u0259rini z\u0259r\u0259rli kod v\u0259 ya q\u0259r\u0259zli m\u0259lumatlarla komprometasiya etm\u0259y\u0259 \u00e7al\u0131\u015facaqlar. Bel\u0259 z\u0259r\u0259rli versiyalar geni\u015f yay\u0131la v\u0259 a\u015fkarlanmas\u0131 \u00e7\u0259tin ola bil\u0259r.<\/p>\n\n\n\n

BYOVD (Bring Your Own Vulnerable Driver) istismarlar\u0131n\u0131n populyarl\u0131\u011f\u0131n\u0131n artmas\u0131.<\/strong> BYOVD texnikas\u0131 2024-c\u00fc ild\u0259 t\u0259cav\u00fczkarlar aras\u0131nda \u0259n populyar \u00fcsullardan birin\u0259 \u00e7evrilib. Bu \u00fcsulla onlar drayverl\u0259rd\u0259ki bo\u015fluqlar\u0131 istismar ed\u0259r\u0259k s\u0259lahiyy\u0259tl\u0259rini art\u0131r\u0131r, m\u00fcdafi\u0259d\u0259n yay\u0131n\u0131r v\u0259 \u015fifr\u0259l\u0259yici h\u00fccumlar\u0131 v\u0259 ya APT kampaniyalar\u0131nda m\u00fcr\u0259kk\u0259b z\u0259r\u0259rli y\u00fckl\u0259m\u0259l\u0259r h\u0259yata ke\u00e7irirl\u0259r. 2025-ci ild\u0259 BYOVD texnikas\u0131ndan istifad\u0259nin davam ed\u0259c\u0259yi g\u00f6zl\u0259nilir. T\u0259cav\u00fczkarlar\u0131n a\u015fa\u011f\u0131 s\u0259viyy\u0259li komponentl\u0259rd\u0259 bo\u015fluqlar\u0131n istismar\u0131 \u00fc\u00e7\u00fcn bacar\u0131qlar\u0131 inki\u015faf etdikc\u0259 bu h\u00fccumlar\u0131n m\u00fcr\u0259kk\u0259bliyi d\u0259 artacaq. H\u0259m\u00e7inin, bu texnikan\u0131 k\u00f6hn\u0259lmi\u015f v\u0259 ya \u00fc\u00e7\u00fcnc\u00fc t\u0259r\u0259f drayverl\u0259rin t\u0259tbiqi il\u0259 daha t\u0259kmil variantlar\u0131n\u0131n yaranmas\u0131 m\u00fcmk\u00fcnd\u00fcr, \u00e7\u00fcnki bu c\u00fcr drayverl\u0259r ad\u0259t\u0259n bo\u015fluqlar bax\u0131m\u0131ndan kifay\u0259t q\u0259d\u0259r yoxlan\u0131lm\u0131r.<\/p>\n\n\n\n

\u201cBu ilin \u0259n m\u0259\u015fhur kampaniyalar\u0131ndan biri a\u00e7\u0131q m\u0259nb\u0259 kodlu m\u0259\u015fhur m\u0259lumat s\u0131xma al\u0259ti olan v\u0259 Linux paylay\u0131c\u0131lar\u0131nda tez-tez rast g\u0259lin\u0259n \u201cXZ\u201d proqram\u0131na arxa qap\u0131n\u0131n (backdoor) yerl\u0259\u015fdirilm\u0259si olub. T\u0259cav\u00fczkarlar sosial m\u00fch\u0259ndislik metodlar\u0131ndan istifad\u0259 ed\u0259r\u0259k bu proqram t\u0259minat\u0131n\u0131n haz\u0131rlanma prosesin\u0259 m\u00fcnt\u0259z\u0259m giri\u015f \u0259ld\u0259 edibl\u0259r v\u0259 bir ne\u00e7\u0259 il \u0259rzind\u0259 a\u015fkar edilm\u0259d\u0259n f\u0259aliyy\u0259t g\u00f6st\u0259ribl\u0259r. Bu kampaniya a\u00e7\u0131q m\u0259nb\u0259 kodlu layih\u0259l\u0259rin m\u0259zmununun daha diqq\u0259tli monitorinqin\u0259 ehtiyac oldu\u011funu n\u00fcmayi\u015f etdirir. Bundan \u0259lav\u0259, t\u0259cav\u00fczkarlar \u00e7ox sayda qorunmayan “\u018f\u015fyalar\u0131n \u0130nterneti” (IoT) cihazlar\u0131n\u0131 istismar etm\u0259y\u0259 davam ed\u0259c\u0259kl\u0259r. Bu cihazlar\u0131n bir \u00e7oxu k\u00f6hn\u0259lmi\u015f v\u0259 m\u0259lum bo\u015fluqlar\u0131 olan kitabxanalara \u0259saslan\u0131r ki, bu da onlar\u0131 s\u0131nd\u0131r\u0131lmas\u0131n\u0131 asanla\u015fd\u0131r\u0131r\u201d, – dey\u0259 Kaspersky GreAT-in direktoru \u0130qor Kuznetsov bildirir.<\/p>\n\n\n\n

Proqnozlar\u0131n tam siyah\u0131s\u0131n\u0131 Securelist-d\u0259 g\u00f6r\u0259 bil\u0259rsiniz: https:\/\/securelist.ru\/ksb-apt-predictions-2025\/111090\/<\/a>.<\/p>\n\n\n\n

Kaspersky GReAT haqq\u0131nda<\/strong>
Kaspersky-nin Qlobal T\u0259hdidl\u0259rin T\u0259dqiqat\u0131 v\u0259 T\u0259hlili M\u0259rk\u0259zi (GReAT) 2008-ci ild\u0259 yarad\u0131l\u0131b. M\u0259rk\u0259zin v\u0259zif\u0259l\u0259ri s\u0131ras\u0131na \u0259n m\u00fcr\u0259kk\u0259b h\u00fccumlar\u0131, kibercasusluq kampaniyalar\u0131n\u0131, yeni yoluxma metodlar\u0131n\u0131 v\u0259 s\u0131f\u0131r-g\u00fcn (zero-day) bo\u015fluqlar\u0131ndan istifad\u0259 ed\u0259n istismarlar\u0131 ara\u015fd\u0131rmaq v\u0259 t\u0259hlil etm\u0259k daxildir. Haz\u0131rda m\u0259rk\u0259zin komandas\u0131nda Avropa, Rusiya, \u015eimali v\u0259 C\u0259nubi Amerika, Asiya v\u0259 Yax\u0131n \u015e\u0259rqd\u0259 f\u0259aliyy\u0259t g\u00f6st\u0259r\u0259n 40-dan \u00e7ox ekspert f\u0259aliyy\u0259t g\u00f6st\u0259rir. Onlar \u0259n m\u00fcr\u0259kk\u0259b h\u00fccumlar\u0131n, o c\u00fcml\u0259d\u0259n kibercasusluq v\u0259 kibersabotaj kampaniyalar\u0131n\u0131n t\u0259dqiqat\u0131nda \u0259ld\u0259 etdikl\u0259ri nailiyy\u0259tl\u0259rl\u0259 tan\u0131n\u0131rlar.<\/p>\n","protected":false},"excerpt":{"rendered":"

Haktivist birlikl\u0259ri, s\u00fcni intellekt v\u0259 yeni dill\u0259rd\u0259 z\u0259r\u0259rli proqamlar: Kaspersky 2025-ci ild\u0259 m\u00fcr\u0259kk\u0259b kiberh\u00fccumlar\u0131n inki\u015faf\u0131 proqnozunu t\u0259qdim edib Kaspersky GReAT (Kaspersky Laboratoriyas\u0131n\u0131n Qlobal T\u0259hdidl\u0259rin T\u0259dqiqat\u0131 v\u0259 T\u0259hlili M\u0259rk\u0259zi) ekspertl\u0259rinin proqnozlar\u0131na g\u00f6r\u0259\u015fA 2025-ci ild\u0259 haktivist birlikl\u0259ri…<\/p>\n","protected":false},"author":2,"featured_media":11072,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/31304"}],"collection":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=31304"}],"version-history":[{"count":2,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/31304\/revisions"}],"predecessor-version":[{"id":31306,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/31304\/revisions\/31306"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/media\/11072"}],"wp:attachment":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=31304"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=31304"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=31304"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}