{"id":46476,"date":"2026-07-13T03:00:00","date_gmt":"2026-07-13T00:00:00","guid":{"rendered":"https:\/\/rockvell.com\/?p=46476"},"modified":"2026-07-13T16:06:15","modified_gmt":"2026-07-13T13:06:15","slug":"qanuni-screenconnect-al%c9%99ti-uz%c9%99rind%c9%99n-troyan-yayan-genismiqyasli-kampaniya-askarlanib","status":"publish","type":"post","link":"https:\/\/rockvell.com\/?p=46476","title":{"rendered":"Qanuni \u201cScreenConnect\u201d al\u0259ti \u00fcz\u0259rind\u0259n troyan yayan geni\u015fmiqyasl\u0131 kampaniya a\u015fkarlan\u0131b"},"content":{"rendered":"\n<p class=\"has-medium-font-size\"><strong>Qanuni \u201cScreenConnect\u201d al\u0259ti \u00fcz\u0259rind\u0259n troyan yayan geni\u015fmiqyasl\u0131 kampaniya a\u015fkarlan\u0131b<\/strong><\/p>\n\n\n\n<p>Kaspersky \u201cScreenConnect\u201d uzaqdan idar\u0259etm\u0259 al\u0259tinin tan\u0131nm\u0131\u015f proqram m\u0259hsullar\u0131n\u0131n r\u0259smi s\u0259hif\u0259l\u0259rini t\u0259qlid ed\u0259n saxta veb-saytlar vasit\u0259sil\u0259 yay\u0131ld\u0131\u011f\u0131n\u0131 a\u015fkar edib. \u00dcmumilikd\u0259 \u015firk\u0259tin m\u00fct\u0259x\u0259ssisl\u0259ri rus dili d\u0259 daxil olmaqla, 10 dild\u0259 90-dan \u00e7ox domen m\u00fc\u0259yy\u0259n edibl\u0259r ki, bu da t\u0259cav\u00fczkarlar\u0131n d\u00fcnya \u00fczr\u0259 qurban \u015f\u0259b\u0259k\u0259sinin miqyas\u0131n\u0131n n\u0259 d\u0259r\u0259c\u0259d\u0259 b\u00f6y\u00fck oldu\u011funu g\u00f6st\u0259rir. Kampaniya h\u0259m \u201cWindows\u201d cihazlar\u0131ndan istifad\u0259 ed\u0259n f\u0259rdi istifad\u0259\u00e7il\u0259ri, h\u0259m d\u0259 t\u0259\u015fkilatlar\u0131 h\u0259d\u0259f al\u0131r.<\/p>\n\n\n\n<p><strong>Kampaniya nec\u0259 a\u015fkar edilib<\/strong>. Kaspersky m\u00fct\u0259x\u0259ssisl\u0259ri \u201cKaspersky Managed Detection and Response\u201d (MDR) xidm\u0259ti t\u0259r\u0259find\u0259n qeyd\u0259 al\u0131nan hadis\u0259ni t\u0259hlil ed\u0259r\u0259k \u201cAsyncRAT\u201d z\u0259r\u0259rli modulunu qura\u015fd\u0131rmaq v\u0259 i\u015f\u0259 salmaq \u00fc\u00e7\u00fcn qanuni \u201cScreenConnect\u201d uzaqdan idar\u0259etm\u0259 al\u0259tind\u0259n istifad\u0259 edildiyini a\u015fkar edibl\u0259r. Bu hadis\u0259nin \u0259trafl\u0131 t\u0259hlili g\u00f6st\u0259rib ki, h\u00fccum\u00e7ular \u201cOBS Studio\u201d, \u201cDNS Jumper\u201d, \u201cDS4Windows\u201d, \u201cGlary Utilities\u201d v\u0259 \u201cBandicam\u201d kimi m\u0259\u015fhur proqram t\u0259minatlar\u0131 kimi gizl\u0259dilmi\u015f qura\u015fd\u0131rma arxivl\u0259rini yaymaq \u00fc\u00e7\u00fcn saxta veb-saytlardan istifad\u0259 edirl\u0259r. Onlar resurslar\u0131n\u0131n axtar\u0131\u015f n\u0259tic\u0259l\u0259rind\u0259 \u00f6nd\u0259 g\u0259lm\u0259sini t\u0259min etm\u0259k \u00fc\u00e7\u00fcn axtar\u0131\u015f m\u00fch\u0259rrikinin optimalla\u015fd\u0131r\u0131lmas\u0131 (SEO) \u00fcsullar\u0131ndan istifad\u0259 edirl\u0259r. Proqram\u0131 y\u00fckl\u0259m\u0259y\u0259 c\u0259hd ed\u0259n istifad\u0259\u00e7il\u0259r cihazlar\u0131nda \u201cScreenConnect\u201din z\u0259r\u0259rli modul kimi maskalanm\u0131\u015f versiyas\u0131n\u0131 \u0259ld\u0259 edibl\u0259r. Bu proqram t\u0259minat\u0131ndan istifad\u0259 ed\u0259r\u0259k h\u00fccum\u00e7ular cihazlara dayan\u0131lq\u0131 giri\u015f yarad\u0131r v\u0259 \u0259l\u0259 ke\u00e7irilmi\u015f cihazlar\u0131 tam idar\u0259 etm\u0259y\u0259 imkan ver\u0259n a\u00e7\u0131q m\u0259nb\u0259li \u201cAsyncRAT\u201d troyan\u0131n\u0131 yerl\u0259\u015fdirirl\u0259r. Bu c\u00fcr domenl\u0259rin qeydiyyat say\u0131 2026-c\u0131 ilin fevral ay\u0131nda pik h\u0259dd\u0259 \u00e7at\u0131b v\u0259 2025-ci ild\u0259 eyni h\u00fccum\u00e7ular z\u0259r\u0259rli qura\u015fd\u0131r\u0131c\u0131lar\u0131 oyun kimi gizl\u0259tm\u0259k \u00fc\u00e7\u00fcn saxta saytlardan istifad\u0259 edibl\u0259r.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"650\" height=\"433\" src=\"https:\/\/rockvell.com\/wp-content\/uploads\/2023\/05\/Kaspersky.png\" alt=\"\" class=\"wp-image-11072\" style=\"width:431px;height:auto\" srcset=\"https:\/\/rockvell.com\/wp-content\/uploads\/2023\/05\/Kaspersky.png 650w, https:\/\/rockvell.com\/wp-content\/uploads\/2023\/05\/Kaspersky-300x200.png 300w, https:\/\/rockvell.com\/wp-content\/uploads\/2023\/05\/Kaspersky-360x240.png 360w\" sizes=\"(max-width: 650px) 100vw, 650px\" \/><\/figure><\/div>\n\n\n<p>Yoluxma qanuni imzalanm\u0131\u015f \u201cMicrosoft\u201d fayl\u0131 v\u0259 install.res.1033.dll kitabxanas\u0131n\u0131 ehtiva ed\u0259n z\u0259r\u0259rli arxivl\u0259r vasit\u0259sil\u0259 ba\u015f verir. Bu kitabxana DLL y\u00fckl\u0259m\u0259 \u0259lav\u0259si il\u0259 y\u00fckl\u0259nir v\u0259 t\u0259cav\u00fczkarlardan \u0259lav\u0259 t\u0259limatlar g\u00f6zl\u0259y\u0259n \u201cScreenConnect\u201d xidm\u0259tini yerl\u0259\u015fdirir.<\/p>\n\n\n\n<p>&#8220;Kampaniya h\u0259m internetd\u0259n pulsuz al\u0259tl\u0259r y\u00fckl\u0259y\u0259n s\u0131ravi istifad\u0259\u00e7il\u0259ri, h\u0259m d\u0259 uzaqdan giri\u015f al\u0259tl\u0259rinin tez-tez a\u011f siyah\u0131ya al\u0131nd\u0131\u011f\u0131 v\u0259 y\u00fcks\u0259k imtiyazlara malik oldu\u011fu korporativ \u015f\u0259b\u0259k\u0259l\u0259ri h\u0259d\u0259f al\u0131r. Bu, t\u0259hl\u00fck\u0259lidir, \u00e7\u00fcnki geni\u015f h\u0259cmd\u0259 hesab m\u0259lumatlar\u0131 o\u011furlu\u011funa v\u0259 sisteml\u0259r\u0259 icaz\u0259siz giri\u015f\u0259 s\u0259b\u0259b ola bil\u0259r. O\u011furlanm\u0131\u015f m\u0259lumatlar is\u0259 daha sonra k\u00f6lg\u0259 bazarlar\u0131nda yenid\u0259n sat\u0131la bil\u0259r&#8221;, &#8211; dey\u0259 Kaspersky-nin kibert\u0259hl\u00fck\u0259sizlik \u00fczr\u0259 m\u00fct\u0259x\u0259ssisi Denis Kulik qeyd edir.<\/p>\n\n\n\n<p>Kampaniya haqq\u0131nda tam hesabat <a href=\"https:\/\/securelist.ru\/tr\/the-soc-files-screenconnect-campaign-with-asyncrat\/116159\/\">Securelist<\/a> ayt\u0131nda m\u00f6vcuddur.<\/p>\n\n\n\n<p>Kaspersky t\u0259\u015fkilatlara t\u00f6vsiy\u0259 edir:<\/p>\n\n\n\n<ul>\n<li>proqram t\u0259minat\u0131 qura\u015fd\u0131r\u0131lmas\u0131na ciddi n\u0259zar\u0259t t\u0259tbiq edin (t\u0259sdiql\u0259nmi\u015f proqram t\u0259minat\u0131 siyah\u0131lar\u0131, t\u0259sdiql\u0259nm\u0259mi\u015f fayllardan MSI paketl\u0259rinin qura\u015fd\u0131r\u0131lmas\u0131n\u0131n bloklanmas\u0131);<\/li>\n\n\n\n<li>yeni uzaqdan idar\u0259etm\u0259 xidm\u0259tl\u0259ri v\u0259 planla\u015fd\u0131r\u0131lm\u0131\u015f tap\u015f\u0131r\u0131qlar \u00fc\u00e7\u00fcn m\u00fcnt\u0259z\u0259m monitorinq apar\u0131n;<\/li>\n\n\n\n<li>nam\u0259lum domenl\u0259r\u0259 v\u0259 IP \u00fcnvanlar\u0131na ged\u0259n trafiki s\u00fczg\u0259cd\u0259n ke\u00e7irin;<\/li>\n\n\n\n<li>i\u015f\u00e7il\u0259ri m\u00f6vcud kibert\u0259hdidl\u0259r bar\u0259d\u0259 m\u0259lumatland\u0131r\u0131n, bu i\u015fd\u0259, m\u0259s\u0259l\u0259n, <a href=\"https:\/\/lp.kaspersky.com\/ru\/awareness\/#courses\">Kaspersky Automated Security Awareness Platform<\/a>-dan istifad\u0259 etm\u0259k olar;<\/li>\n\n\n\n<li>proqram t\u0259minat\u0131 m\u0259nb\u0259l\u0259rinin h\u0259qiqiliyini yoxlay\u0131n;<\/li>\n\n\n\n<li>m\u00f6vcud t\u0259hl\u00fck\u0259sizlik t\u0259dbirl\u0259rin\u0259 mexaniki a\u015fkarlama v\u0259 24\/7 \u0259sasda monitorinq, a\u015fkarlama, ara\u015fd\u0131rma v\u0259 m\u00fcr\u0259kk\u0259b kiberh\u00fccumlara s\u00fcr\u0259tli reaksiya t\u0259min ed\u0259n <a href=\"https:\/\/www.kaspersky.ru\/enterprise-security\/managed-detection-and-response\">Kaspersky Managed Detection and Response<\/a> (MDR) kimi h\u0259ll\u0259rin k\u00f6m\u0259yi il\u0259 qlobal kibert\u0259hdid analitikas\u0131 \u0259lav\u0259 edin;<\/li>\n\n\n\n<li>\u0259l\u0259 ke\u00e7irilmi\u015f hesab v\u0259 ya sistem\u0259 giri\u015f m\u0259lumatlar\u0131 t\u0259\u015fkilata qar\u015f\u0131 sonrak\u0131 h\u00fccumlar \u00fc\u00e7\u00fcn kanala \u00e7evril\u0259 bil\u0259c\u0259yind\u0259n hesab m\u0259lumatlar\u0131n\u0131 s\u0131nd\u0131r\u0131lma \u0259lam\u0259tl\u0259rin\u0259 qar\u015f\u0131 monitorinq edin. <a href=\"https:\/\/dfi.kaspersky.ru\/\">Kaspersky Digital Footprint Intelligence<\/a> internet v\u0259 qaranl\u0131q \u015f\u0259b\u0259k\u0259 m\u0259nb\u0259l\u0259rinin davaml\u0131 monitorinqini t\u0259min edir v\u0259 potensial t\u0259hdidl\u0259r\u0259 vaxt\u0131nda cavab verm\u0259y\u0259 imkan verir.<\/li>\n<\/ul>\n\n\n\n<p>Kaspersky f\u0259rdi istifad\u0259\u00e7il\u0259r\u0259 m\u0259sl\u0259h\u0259t g\u00f6r\u00fcr:<\/p>\n\n\n\n<ul>\n<li>proqram t\u0259minat\u0131n\u0131 v\u0259 media fayllar\u0131n\u0131 yaln\u0131z etibarl\u0131 m\u0259nb\u0259l\u0259rd\u0259n y\u00fckl\u0259yin;<\/li>\n\n\n\n<li>effektivliyi m\u00fcst\u0259qil <a href=\"https:\/\/www.kaspersky.ru\/about\/press-releases\/laboratoriya-kasperskogo-lidiruet-po-kolichestvu-pervyh-mest-v-mire-po-itogam-nezavisimyh-otraslevyh-testov-2025-goda\">s\u0131naqlarla<\/a> t\u0259sdiql\u0259nmi\u015f b\u00fct\u00fcn cihazlarda <a href=\"https:\/\/www.kaspersky.ru\/premium\">etibarl\u0131 t\u0259hl\u00fck\u0259sizlik h\u0259llind\u0259n<\/a> istifad\u0259 edin;<\/li>\n\n\n\n<li>hesab idar\u0259etm\u0259si v\u0259 maliyy\u0259 t\u0259tbiql\u0259rind\u0259 ikifaktorlu identifikasiyan\u0131 aktivl\u0259\u015fdirin v\u0259 icaz\u0259siz f\u0259aliyy\u0259tin m\u00f6vcudlu\u011funu izl\u0259m\u0259k \u00fc\u00e7\u00fcn hesabatlar\u0131 m\u00fcnt\u0259z\u0259m olaraq yoxlay\u0131n;<\/li>\n\n\n\n<li>URL format\u0131n\u0131 v\u0259 t\u0259\u015fkilat adlar\u0131n\u0131n d\u00fczg\u00fcn yaz\u0131l\u0131\u015f\u0131n\u0131 diqq\u0259tl\u0259 yoxlay\u0131n.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Qanuni \u201cScreenConnect\u201d al\u0259ti \u00fcz\u0259rind\u0259n troyan yayan geni\u015fmiqyasl\u0131 kampaniya a\u015fkarlan\u0131b Kaspersky \u201cScreenConnect\u201d uzaqdan idar\u0259etm\u0259 al\u0259tinin tan\u0131nm\u0131\u015f proqram m\u0259hsullar\u0131n\u0131n r\u0259smi s\u0259hif\u0259l\u0259rini t\u0259qlid ed\u0259n saxta veb-saytlar vasit\u0259sil\u0259 yay\u0131ld\u0131\u011f\u0131n\u0131 a\u015fkar edib. \u00dcmumilikd\u0259 \u015firk\u0259tin m\u00fct\u0259x\u0259ssisl\u0259ri rus dili d\u0259 daxil olmaqla,&#8230;<\/p>\n","protected":false},"author":2,"featured_media":11072,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/46476"}],"collection":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=46476"}],"version-history":[{"count":1,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/46476\/revisions"}],"predecessor-version":[{"id":46477,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/46476\/revisions\/46477"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/media\/11072"}],"wp:attachment":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=46476"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=46476"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=46476"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}