{"id":6092,"date":"2022-12-19T07:00:00","date_gmt":"2022-12-19T04:00:00","guid":{"rendered":"https:\/\/rockvell.com\/?p=6092"},"modified":"2022-12-19T09:59:32","modified_gmt":"2022-12-19T06:59:32","slug":"agilli-cihazlar-ucun-acarlar","status":"publish","type":"post","link":"https:\/\/rockvell.com\/?p=6092","title":{"rendered":"A\u011f\u0131ll\u0131 cihazlar \u00fc\u00e7\u00fcn a\u00e7arlar"},"content":{"rendered":"\n<p class=\"has-medium-font-size\"><strong>A\u011f\u0131ll\u0131 cihazlar \u00fc\u00e7\u00fcn a\u00e7arlar: t\u0259cav\u00fczkarlar daha \u00e7ox hans\u0131 login v\u0259 \u015fifr\u0259 kombinasiyalar\u0131ndan istifad\u0259 edirl\u0259r<\/strong><\/p>\n\n\n\n<p>Kaspersky m\u00fct\u0259x\u0259ssisl\u0259ri 2022-ci ild\u0259 t\u0259cav\u00fczkarlara t\u0259l\u0259 qurmaq \u00fc\u00e7\u00fcn istifad\u0259 edil\u0259n &#8220;honeypots&#8221; (bal k\u00fcp\u00fc)* h\u0259llin\u0259 qar\u015f\u0131 h\u00fccumlar\u0131n statistikas\u0131n\u0131 \u00f6yr\u0259nib. Onlar \u018f\u015fyalar\u0131n \u0130nterneti (IoT) cihazlar\u0131n\u0131 t\u0259qlid edirl\u0259r. Bal k\u00fcpl\u0259rinin t\u0259hlili g\u00f6st\u0259rib ki, t\u0259cav\u00fczkarlar \u00e7ox vaxt \u00e7ox sad\u0259 texnikadan &#8211; \u015fifr\u0259 sadalanmas\u0131 v\u0259 ya kobud g\u00fccd\u0259n (brut-force) istifad\u0259 edirl\u0259r.<\/p>\n\n\n\n<p>Kaspersky-nin statistikas\u0131na g\u00f6r\u0259**, cihaz v\u0259 xidm\u0259tl\u0259r\u0259 m\u00fcdaxil\u0259 c\u0259hdl\u0259ri \u00fc\u00e7\u00fcn \u0259n \u00e7ox istifad\u0259 edil\u0259n login v\u0259 \u015fifr\u0259 kombinasiyalar\u0131 a\u015fa\u011f\u0131dak\u0131lard\u0131r:<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/rockvell.com\/wp-content\/uploads\/2022\/12\/image-3.png\" alt=\"\" class=\"wp-image-6093\" width=\"650\" height=\"366\" srcset=\"https:\/\/rockvell.com\/wp-content\/uploads\/2022\/12\/image-3.png 975w, https:\/\/rockvell.com\/wp-content\/uploads\/2022\/12\/image-3-300x169.png 300w, https:\/\/rockvell.com\/wp-content\/uploads\/2022\/12\/image-3-768x432.png 768w, https:\/\/rockvell.com\/wp-content\/uploads\/2022\/12\/image-3-360x203.png 360w\" sizes=\"(max-width: 650px) 100vw, 650px\" \/><\/figure><\/div>\n\n\n<p><strong>Kobud g\u00fcc (brut-force) h\u00fccumu nec\u0259 ba\u015f verir<\/strong>. T\u0259cav\u00fczkarlar tez-tez istifad\u0259 olunan simvol birl\u0259\u015fm\u0259l\u0259rinin x\u00fcsusi l\u00fc\u011f\u0259tl\u0259rind\u0259n istifad\u0259 ed\u0259r\u0259k \u015fifr\u0259l\u0259ri s\u0131nay\u0131rlar. Onlar h\u0259m\u00e7inin uy\u011fun bir \u015fifr\u0259 tap\u0131lana q\u0259d\u0259r m\u00fcxt\u0259lif sat\u0131c\u0131lar\u0131n standart \u015fifr\u0259 l\u00fc\u011f\u0259tl\u0259rind\u0259n istifad\u0259 edirl\u0259r. M\u0259s\u0259l\u0259n, IoT cihazlar\u0131na d\u0259f\u0259l\u0259rl\u0259 h\u00fccum ed\u0259n Mirai z\u0259r\u0259rli proqram\u0131 \u015fifr\u0259l\u0259ri s\u0131nd\u0131ra bilir.<\/p>\n\n\n\n<p><strong>N\u0259 etm\u0259li.<\/strong> Bu c\u00fcr h\u00fccumlarla m\u00fcbariz\u0259nin \u0259sas \u00fcsulu a\u011f\u0131ll\u0131 cihazdan istifad\u0259 etm\u0259zd\u0259n \u0259vv\u0259l istehsal\u00e7\u0131 t\u0259r\u0259find\u0259n m\u00fc\u0259yy\u0259n edilmi\u015f login v\u0259 \u015fifr\u0259l\u0259rin d\u0259yi\u015fdirilm\u0259sidir. Ancaq insanlar bunu \u00e7ox vaxt ciddi q\u0259bul etm\u0259dikl\u0259ri \u00fc\u00e7\u00fcn t\u0259cav\u00fczkarlar\u0131n g\u00fcc t\u0259tbiqinin k\u00f6m\u0259yi il\u0259 u\u011fur qazanmas\u0131 asanla\u015f\u0131r.<\/p>\n\n\n\n<p><strong>\u015e\u0259b\u0259k\u0259 protokollar\u0131na h\u00fccumlar\u0131n statistikas\u0131<\/strong>. IoT cihazlar\u0131n\u0131n m\u00fch\u00fcm komponenti \u015f\u0259b\u0259k\u0259 protokollar\u0131d\u0131r. Onlar sistemi uzaqdan idar\u0259 etm\u0259y\u0259 imkan verir. X\u00fcsusil\u0259 Telnet v\u0259 SSH bu sah\u0259d\u0259 daha \u00e7ox tan\u0131n\u0131r. 2022-ci ilin \u0259vv\u0259lind\u0259n Kaspersky m\u00fct\u0259x\u0259ssisl\u0259ri Telnet protokoluna kobud g\u00fcc medotu il\u0259 bir milyondan \u00e7ox, SSH protokoluna t\u0259xmin\u0259n 60 000 h\u00fccum edildiyini qeyd\u0259 al\u0131b.<\/p>\n\n\n\n<p>\u201cUzun, m\u00fcr\u0259kk\u0259b, unikal \u015fifr\u0259 t\u0259hl\u00fck\u0259sizliyin \u0259sas\u0131n\u0131 t\u0259\u015fkil edir. Standart istifad\u0259\u00e7i ad\u0131 v\u0259 \u015fifr\u0259ni d\u0259yi\u015fdirm\u0259k \u00e7ox vacibdir. \u015eifr\u0259 uzun olmal\u0131d\u0131r, \u0259n az\u0131 12 simvola malik olmal\u0131, yaln\u0131z h\u0259rf v\u0259 r\u0259q\u0259ml\u0259ri deyil, h\u0259m d\u0259 x\u00fcsusi simvollar\u0131 ehtiva etm\u0259lidir. Ev heyvan\u0131n\u0131n ad\u0131 v\u0259 ya u\u015faqlar\u0131n adlar\u0131 kimi \u015f\u0259xsi m\u0259lumatlar\u0131 daxil etm\u0259yin. Bundan \u0259lav\u0259, loqin v\u0259 \u015fifr\u0259ni tamamil\u0259 eynil\u0259\u015fdirm\u0259k son d\u0259r\u0259c\u0259 t\u0259hl\u00fck\u0259lidir\u201d, &#8211; dey\u0259 Kaspersky ICS CERT-in eksperti Vladimir Da\u015f\u015fenko xat\u0131rlad\u0131r.<\/p>\n\n\n\n<p>\u201c\u00dcmumiyy\u0259tl\u0259 \u018f\u015fyalar\u0131n \u0130nternetin\u0259 aid olan t\u0259hl\u00fck\u0259l\u0259r \u018f\u015fyalar\u0131n S\u0259naye \u0130nterneti \u00fc\u00e7\u00fcn d\u0259 xarakterikdir v\u0259 onlar h\u0259mi\u015f\u0259 \u00e7\u0259tin deyil. \u015eifr\u0259nin t\u0259xmin edilm\u0259si kimi sad\u0259 \u00fcsullar\u0131 g\u00f6zard\u0131 ed\u0259 bilm\u0259zsiniz. Giri\u015f m\u0259lumatlar\u0131 t\u0259cav\u00fczkarlar \u00fc\u00e7\u00fcn vacib m\u0259lumatd\u0131r v\u0259 onlar\u0131 \u0259ld\u0259 etm\u0259yi \u00e7\u0259tinl\u0259\u015fdirm\u0259k laz\u0131md\u0131r. Ancaq kiberimmun sisteml\u0259rd\u0259n, y\u0259ni ilkin olaraq y\u00fcks\u0259k dayan\u0131ql\u0131l\u0131q t\u0259l\u0259bl\u0259ri n\u0259z\u0259r\u0259 al\u0131nmaqla haz\u0131rlanm\u0131\u015f sisteml\u0259rd\u0259n dan\u0131\u015f\u0131r\u0131qsa, o zaman onlar kobud g\u00fcc h\u00fccumlar\u0131ndan \u00e7\u0259kinmirl\u0259r. S\u0259naye m\u00fchiti \u00fc\u00e7\u00fcn bel\u0259 m\u0259hsullar art\u0131q m\u00f6vcuddur. Bu, x\u00fcsus\u0259n d\u0259 KasperskyOS \u0259m\u0259liyyat sistemin\u0259 \u0259saslanan kiberimmun \u015fl\u00fczd\u00fcr\u201d, &#8211; dey\u0259 KasperskyOS-un biznesin inki\u015faf\u0131 \u00fczr\u0259 direktoru Andrey Suvorov \u0259lav\u0259 edir.<\/p>\n\n\n\n<p><em>&nbsp;<\/em><em>* Honeypot (ingilis dilind\u0259n &#8220;bal k\u00fcp\u00fc&#8221;) &#8211; k\u00f6vr\u0259k cihaz v\u0259 ya xidm\u0259ti t\u0259qlid ed\u0259r\u0259k t\u0259cav\u00fczkarlara qurulan t\u0259l\u0259. Kibert\u0259hl\u00fck\u0259sizlik m\u00fct\u0259x\u0259ssisl\u0259ri kibert\u0259hl\u00fck\u0259l\u0259ri \u00f6yr\u0259nm\u0259k v\u0259 g\u0259l\u0259c\u0259kd\u0259 onlardan s\u0259m\u0259r\u0259li \u015f\u0259kild\u0259 qorunmaq \u00fc\u00e7\u00fcn bal k\u00fcpl\u0259rind\u0259n istifad\u0259 edirl\u0259r. Onlar\u0131n k\u00f6m\u0259yi il\u0259 h\u00fccumlar\u0131 v\u0259 t\u0259l\u0259 il\u0259 qar\u015f\u0131l\u0131ql\u0131 \u0259laq\u0259 yaradaraq dig\u0259r c\u0259hdl\u0259ri t\u0259hlil ed\u0259 bil\u0259rsiniz. M\u0259s\u0259l\u0259n, t\u0259cav\u00fczkar\u0131n, onun \u0130nternet provayderinin IP \u00fcnvan\u0131n\u0131, onun hans\u0131 vasit\u0259l\u0259rd\u0259n istifad\u0259 etdiyini v\u0259 hans\u0131 m\u0259qs\u0259dl\u0259ri g\u00fcdd\u00fcy\u00fcn\u00fc \u00f6yr\u0259n\u0259 bil\u0259rsiniz. Kaspersky t\u0259cav\u00fczkarlar \u00fc\u00e7\u00fcn \u00f6z t\u0259l\u0259 sistemind\u0259n istifad\u0259 edir.<\/em><\/p>\n\n\n\n<p><em>**<\/em><em> 1 yanvar \u2013 30 noyabr 2022-ci il tarixin\u0259 olan m\u0259lumatlar<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A\u011f\u0131ll\u0131 cihazlar \u00fc\u00e7\u00fcn a\u00e7arlar: t\u0259cav\u00fczkarlar daha \u00e7ox hans\u0131 login v\u0259 \u015fifr\u0259 kombinasiyalar\u0131ndan istifad\u0259 edirl\u0259r Kaspersky m\u00fct\u0259x\u0259ssisl\u0259ri 2022-ci ild\u0259 t\u0259cav\u00fczkarlara t\u0259l\u0259 qurmaq \u00fc\u00e7\u00fcn istifad\u0259 edil\u0259n &#8220;honeypots&#8221; (bal k\u00fcp\u00fc)* h\u0259llin\u0259 qar\u015f\u0131 h\u00fccumlar\u0131n statistikas\u0131n\u0131 \u00f6yr\u0259nib. Onlar \u018f\u015fyalar\u0131n \u0130nterneti&#8230;<\/p>\n","protected":false},"author":2,"featured_media":5602,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/6092"}],"collection":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6092"}],"version-history":[{"count":3,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/6092\/revisions"}],"predecessor-version":[{"id":6098,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/6092\/revisions\/6098"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/media\/5602"}],"wp:attachment":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6092"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6092"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6092"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}