{"id":46364,"date":"2026-07-07T01:00:00","date_gmt":"2026-07-06T22:00:00","guid":{"rendered":"https:\/\/rockvell.com\/?p=46364"},"modified":"2026-07-07T10:22:41","modified_gmt":"2026-07-07T07:22:41","slug":"yazismalarla-baxisanlar","status":"publish","type":"post","link":"https:\/\/rockvell.com\/?p=46364","title":{"rendered":"Yaz\u0131\u015fmalarla bax\u0131\u015fanlar&#8230;."},"content":{"rendered":"\n<p class=\"has-medium-font-size\"><strong>Yaz\u0131\u015fmalarla bax\u0131\u015fanlar: Kaspersky t\u0259cav\u00fczkarlara \u201cGmail\u201d korporativ e-po\u00e7tuna giri\u015f t\u0259min ed\u0259n al\u0259t a\u015fkarlay\u0131b<\/strong><\/p>\n\n\n\n<p>Kaspersky m\u00fct\u0259x\u0259ssisl\u0259ri korporativ \u201cGmail\u201d hesablar\u0131n\u0131n \u0259l\u0259 ke\u00e7irilm\u0259si \u00fc\u00e7\u00fcn t\u0259tbiq olunan yeni h\u00fccum vektoru v\u0259 al\u0259tl\u0259r d\u0259sti a\u015fkarlay\u0131blar. Bu al\u0259tl\u0259r d\u0259sti vasit\u0259sil\u0259 t\u0259cav\u00fczkarlar API \u00fcz\u0259rind\u0259n istifad\u0259\u00e7i hesablar\u0131na daxil ola, s\u00f6hb\u0259tl\u0259ri oxuya v\u0259 uzun m\u00fcdd\u0259t a\u015fkarlanmadan t\u0259qviml\u0259rd\u0259n v\u0259 dig\u0259r \u201cGoogle\u201d xidm\u0259tl\u0259rind\u0259n m\u0259lumat toplaya bil\u0259rl\u0259r. T\u0259dqiqat\u00e7\u0131lar bu n\u0259tic\u0259y\u0259 \u201cToddyCat\u201d qrupunun f\u0259aliyy\u0259tinin ara\u015fd\u0131r\u0131lmas\u0131 zaman\u0131 g\u0259libl\u0259r.<\/p>\n\n\n\n<p><strong>\u201cGmail\u201d hesab\u0131n\u0131 \u0259l\u0259 ke\u00e7irm\u0259yin yeni \u00fcsulu<\/strong>. \u00dc\u00e7\u00fcnc\u00fc t\u0259r\u0259f t\u0259tbiql\u0259ri API \u00fcz\u0259rind\u0259n \u201cGoogle\u201d xidm\u0259tl\u0259rin\u0259 giri\u015f t\u0259l\u0259b ed\u0259 bil\u0259r. M\u0259s\u0259l\u0259n, istifad\u0259\u00e7i mobil telefondak\u0131 t\u0259qvim m\u0259lumatlar\u0131n\u0131 e-po\u00e7tla sinxronla\u015fd\u0131rmaq ist\u0259yirs\u0259, t\u0259sdiq \u00fc\u00e7\u00fcn \u201cOauth\u201d tokeni t\u0259l\u0259b olunur. Bu tokeni \u0259ld\u0259 etm\u0259k, m\u00fcvafiq olaraq laz\u0131mi resurslara giri\u015f \u00fc\u00e7\u00fcn t\u0259cav\u00fczkarlar \u201cUmbrij\u201d al\u0259tini haz\u0131rlay\u0131blar. Bu al\u0259t \u201cWindows\u201du h\u0259d\u0259f al\u0131r, lakin potensial olaraq dig\u0259r \u0259m\u0259liyyat sisteml\u0259rinin istifad\u0259\u00e7il\u0259rin\u0259 qar\u015f\u0131 h\u00fccumlarda da istifad\u0259 edil\u0259 bil\u0259r. Al\u0259t qurban\u0131n e-po\u00e7tuna, bulud yadda\u015f\u0131na, kontaktlar\u0131na tam giri\u015f v\u0259 dig\u0259r icaz\u0259l\u0259ri t\u0259l\u0259b ed\u0259 bil\u0259r. Kaspersky t\u0259dqiqat\u00e7\u0131lar\u0131 bu texnikaya \u201cShadow Token via Remote Debug\u201d (STRD) ad\u0131n\u0131 veribl\u0259r.<\/p>\n\n\n\n<p>S\u00f6z\u00fcged\u0259n h\u00fccum \u201cChromium\u201d m\u00fch\u0259rriki il\u0259 \u00e7al\u0131\u015fan brauzerl\u0259rd\u0259 m\u00fcmk\u00fcnd\u00fcr. \u0130stifad\u0259\u00e7i \u201cGmail\u201d hesab\u0131ndan \u00e7\u0131xmay\u0131bsa, brauzer onun giri\u015f sessiyas\u0131n\u0131 saxlay\u0131r v\u0259 bu, h\u00fccum\u00e7ular t\u0259r\u0259find\u0259n \u0259l\u0259 ke\u00e7irilir. Onlar brauzer n\u00fcmun\u0259sini i\u015f\u0259 sal\u0131r, sazlama portu vasit\u0259sil\u0259 qo\u015fulur v\u0259 yadda saxlan\u0131lan istifad\u0259\u00e7i sessiyas\u0131 daxilind\u0259 \u201cGoogle\u201d hesab\u0131n\u0131n resurslar\u0131na daxil olmaq \u00fc\u00e7\u00fcn \u201cGmail\u201d\u0259 sor\u011fular g\u00f6nd\u0259rirl\u0259r. Bununla da, t\u0259cav\u00fczkarlar\u0131n giri\u015f m\u0259lumatlar\u0131n\u0131 daxil etm\u0259sin\u0259 ehtiyac qalm\u0131r.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"650\" height=\"433\" src=\"https:\/\/rockvell.com\/wp-content\/uploads\/2023\/05\/Kaspersky.png\" alt=\"\" class=\"wp-image-11072\" style=\"width:461px;height:auto\" srcset=\"https:\/\/rockvell.com\/wp-content\/uploads\/2023\/05\/Kaspersky.png 650w, https:\/\/rockvell.com\/wp-content\/uploads\/2023\/05\/Kaspersky-300x200.png 300w, https:\/\/rockvell.com\/wp-content\/uploads\/2023\/05\/Kaspersky-360x240.png 360w\" sizes=\"(max-width: 650px) 100vw, 650px\" \/><\/figure><\/div>\n\n\n<p>&#8220;E-po\u00e7t korporativ h\u0259mi\u015f\u0259ki kimi \u015firkt\u0259l\u0259rd\u0259 i\u015fg\u00fczar yaz\u0131\u015fmalar\u0131n \u0259sas vasit\u0259si olaraq qal\u0131r v\u0259 t\u0259cav\u00fczkarlar onlar\u0131 oxumaq \u00fc\u00e7\u00fcn m\u00fcxt\u0259lif \u00fcsullara \u0259l at\u0131rlar. \u2018Umbrij\u2019in a\u015fkarlanmas\u0131 bunun n\u00f6vb\u0259ti s\u00fcbutudur. Al\u0259t t\u0259cav\u00fczkarlara t\u0259\u015fkilatlar\u0131n e-po\u00e7t hesablar\u0131na daxil olmaq c\u0259hdl\u0259rini avtomatla\u015fd\u0131rma\u011fa imkan verir ki, bu da h\u00fccumlar\u0131n miqyas\u0131n\u0131n v\u0259 tezliyinin artmas\u0131na s\u0259b\u0259b olur. \u2018Umbrij\u2019in \u00fcz\u0259 \u00e7\u0131xmas\u0131 h\u0259m\u00e7inin \u2018ToddyCat\u2019 qrupunun y\u00fcks\u0259k motivasiyas\u0131n\u0131 v\u0259 texniki bacar\u0131qlar\u0131n\u0131n t\u0259kam\u00fcl\u00fcn\u00fc n\u00fcmayi\u015f etdirir&#8221;, &#8211; dey\u0259 Kaspersky-nin kibert\u0259hl\u00fck\u0259sizlik \u00fczr\u0259 m\u00fct\u0259x\u0259ssisi Andrey Qunkin bildirir. &#8220;Bu c\u00fcr t\u0259hdidl\u0259rd\u0259n qorunmaq \u00fc\u00e7\u00fcn t\u0259\u015fkilatlar qeyri-adi f\u0259aliyy\u0259ti diqq\u0259tl\u0259 izl\u0259m\u0259lidirl\u0259r. M\u0259s\u0259l\u0259n, sazlama portu aktiv olan brauzerin i\u015f\u0259 sal\u0131nmas\u0131 veb-t\u0259tbiql\u0259rinin haz\u0131rlanmas\u0131na aidiyy\u0259ti olmayan \u0259ks\u0259r istifad\u0259\u00e7il\u0259r \u00fc\u00e7\u00fcn qeyri-adi davran\u0131\u015fd\u0131r. \u2018Google\u2019 hesablar\u0131na daxil olan \u00fc\u00e7\u00fcnc\u00fc t\u0259r\u0259f t\u0259tbiql\u0259rini v\u0259 xidm\u0259tl\u0259rini m\u00fcnt\u0259z\u0259m olaraq yoxlamaq da vacibdir. Riskl\u0259ri azaltmaq m\u0259qs\u0259dil\u0259 g\u00fcnd\u0259lik i\u015fl\u0259rind\u0259 onlara ehtiyac duymayan i\u015f\u00e7il\u0259r \u00fc\u00e7\u00fcn \u2018Chromium\u2019 \u0259sasl\u0131 brauzerl\u0259rd\u0259 t\u0259rtibat\u00e7\u0131n\u0131n al\u0259tl\u0259rini deaktiv etm\u0259yi d\u0259 n\u0259z\u0259rd\u0259n ke\u00e7ir\u0259 bil\u0259rsiniz.&#8221;<\/p>\n\n\n\n<p>\u201cToddyCat\u201d haqq\u0131nda daha \u0259trafl\u0131 m\u0259lumat\u0131 \u201cSecurelist\u201d-in <a href=\"https:\/\/securelist.ru\/toddycat-apt-umbrij-tool-and-oauth\/116029\/\">m\u0259qal\u0259sind\u0259n<\/a> \u0259ld\u0259 ed\u0259 bil\u0259rsiniz.&nbsp;<\/p>\n\n\n\n<p>Kaspersky-nin \u201c<a href=\"https:\/\/www.kaspersky.ru\/enterprise-security\/endpoint-detection-response-edr\">Kaspersky EDR Expert<\/a>\u201d kimi h\u0259ll\u0259ri t\u0259svir edil\u0259n z\u0259r\u0259rli f\u0259aliyy\u0259ti a\u015fkarlay\u0131r.<\/p>\n\n\n\n<p>M\u00fcr\u0259kk\u0259b kiberh\u00fccumlardan qorunmaq \u00fc\u00e7\u00fcn Kaspersky h\u0259m\u00e7inin \u015firk\u0259tl\u0259r\u0259 t\u00f6vsiy\u0259 edir:<\/p>\n\n\n\n<ul>\n<li>\u201c<a href=\"https:\/\/www.kaspersky.ru\/enterprise-security\/symphony\">Kaspersky Symphony<\/a>\u201d kimi geni\u015f \u00e7e\u015fidd\u0259 kibert\u0259hdidl\u0259r\u0259 qar\u015f\u0131 h\u0259rt\u0259r\u0259fli m\u00fc\u0259ssis\u0259 qorunmas\u0131 t\u0259min ed\u0259n h\u0259ll\u0259rd\u0259n istifad\u0259 edin. Bu m\u0259hsul x\u0259tti EPP, EDR v\u0259 XDR kateqoriyalar\u0131nda real vaxt rejimind\u0259 qorunma, h\u0259rt\u0259r\u0259fli t\u0259hdid a\u015fkarlanmas\u0131, t\u0259dqiqat v\u0259 cavab t\u0259dbirl\u0259rini t\u0259min edir. Biznesin ehtiyaclar\u0131 v\u0259 resurslar\u0131ndan as\u0131l\u0131 olaraq \u0259sas\u0259n \u00e7oxsayl\u0131 qorunma s\u0259viyy\u0259l\u0259ri t\u0259klif etdiyi \u00fc\u00e7\u00fcn ist\u0259nil\u0259n \u00f6l\u00e7\u00fcd\u0259 v\u0259 ist\u0259nil\u0259n s\u0259nayed\u0259n olan t\u0259\u015fkilatlar \u00fc\u00e7\u00fcn uy\u011fundur;<\/li>\n\n\n\n<li>informasiya t\u0259hl\u00fck\u0259sizliyi m\u00fct\u0259x\u0259ssisl\u0259rin\u0259 h\u00fccum\u00e7ular t\u0259r\u0259find\u0259n istifad\u0259 edil\u0259n \u0259n son taktikalar, texnikalar v\u0259 prosedurlar haqq\u0131nda m\u0259lumatlara \u00e7\u0131x\u0131\u015f imkan\u0131 t\u0259min edin. \u201c<a href=\"https:\/\/www.kaspersky.ru\/enterprise-security\/threat-intelligence\">Kaspersky Threat Intelligence<\/a>\u201d Kaspersky m\u00fct\u0259x\u0259ssisl\u0259ri t\u0259r\u0259find\u0259n 25 ild\u0259n \u00e7oxdur toplanm\u0131\u015f b\u00fct\u00fcn kibert\u0259hdid m\u0259lumatlar\u0131na vahid giri\u015f n\u00f6qt\u0259sidir;<\/li>\n\n\n\n<li>t\u0259hl\u00fck\u0259sizliyi tam n\u0259zar\u0259td\u0259 saxlamaq \u00fc\u00e7\u00fcn t\u0259hdidin a\u015fkarlanmas\u0131ndan aradan qald\u0131r\u0131lmas\u0131na q\u0259d\u0259r b\u00fct\u00f6v insidentl\u0259r\u0259 cavab d\u00f6vr\u00fcn\u00fc \u0259hat\u0259 ed\u0259n \u201c<a href=\"https:\/\/www.kaspersky.ru\/enterprise-security\/compromise-assessment?srsltid=AfmBOoqwy9eTgRDYS20JA2TpCCZ-59ShdUyVzUG7XgBvh_ygaCkPjIFp\">Kaspersky Compromise Assessment<\/a>\u201d, \u201c<a href=\"https:\/\/www.kaspersky.ru\/enterprise-security\/managed-detection-and-response?srsltid=AfmBOoreW8vE0pJp-4IoTWYftrb_Lz2tCu_KcdoKgIDe0eMCfAWbY8H2\">Kaspersky Managed Detection and Response<\/a>\u201d v\u0259\/v\u0259 ya \u201c<a href=\"https:\/\/www.kaspersky.ru\/enterprise-security\/incident-response?srsltid=AfmBOopvx4WIKCIuLVQ3RW0N6iz--FCA-5VXFIRyVXUoa9Q6OkZgVfA-\">Kaspersky Incident Response<\/a>\u201d kimi t\u0259hl\u00fck\u0259sizlik h\u0259ll\u0259rini t\u0259tbiq edin.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Yaz\u0131\u015fmalarla bax\u0131\u015fanlar: Kaspersky t\u0259cav\u00fczkarlara \u201cGmail\u201d korporativ e-po\u00e7tuna giri\u015f t\u0259min ed\u0259n al\u0259t a\u015fkarlay\u0131b Kaspersky m\u00fct\u0259x\u0259ssisl\u0259ri korporativ \u201cGmail\u201d hesablar\u0131n\u0131n \u0259l\u0259 ke\u00e7irilm\u0259si \u00fc\u00e7\u00fcn t\u0259tbiq olunan yeni h\u00fccum vektoru v\u0259 al\u0259tl\u0259r d\u0259sti a\u015fkarlay\u0131blar. Bu al\u0259tl\u0259r d\u0259sti vasit\u0259sil\u0259 t\u0259cav\u00fczkarlar API&#8230;<\/p>\n","protected":false},"author":2,"featured_media":11072,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/46364"}],"collection":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=46364"}],"version-history":[{"count":1,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/46364\/revisions"}],"predecessor-version":[{"id":46365,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/46364\/revisions\/46365"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/media\/11072"}],"wp:attachment":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=46364"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=46364"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=46364"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}