{"id":15064,"date":"2026-02-07T09:04:49","date_gmt":"2026-02-07T06:04:49","guid":{"rendered":"https:\/\/www.inetmar.com\/blog\/?p=15064"},"modified":"2026-02-07T10:38:13","modified_gmt":"2026-02-07T07:38:13","slug":"notepad-hacklendi","status":"publish","type":"post","link":"https:\/\/www.inetmar.com\/blog\/notepad-hacklendi\/","title":{"rendered":"Notepad++ Hacklendi!"},"content":{"rendered":"

Yaz\u0131l\u0131m d\u00fcnyas\u0131n\u0131n en g\u00fcvenilir kalelerinden biri olan Notepad++<\/strong>\u00a02025 y\u0131l\u0131na yay\u0131lan ve son derece sofistike y\u00f6ntemlerle y\u00fcr\u00fct\u00fclen bir siber casusluk operasyonunun hedefi oldu. Projenin mimar\u0131 Don Ho<\/strong>, pop\u00fcler metin edit\u00f6r\u00fcn\u00fcn g\u00fcncelleme altyap\u0131s\u0131n\u0131n k\u00f6t\u00fc niyetli yaz\u0131l\u0131mlar da\u011f\u0131tmak amac\u0131yla manip\u00fcle edildi\u011fini resmen do\u011frulad\u0131.<\/p>\n

Sald\u0131r\u0131 Nas\u0131l Ger\u00e7ekle\u015fti?<\/h2>\n

Yap\u0131lan teknik incelemeler, sald\u0131r\u0131n\u0131n rastgele bir hacker giri\u015fimi de\u011fil, cerrahi bir titizlikle y\u00fcr\u00fct\u00fclen bir tedarik zinciri sald\u0131r\u0131s\u0131<\/strong> oldu\u011funu g\u00f6steriyor.<\/p>\n

    \n
  • Zaman Aral\u0131\u011f\u0131:<\/strong> Haziran – Aral\u0131k 2025.<\/li>\n
  • Y\u00f6ntem:<\/strong> Notepad++ web sitesindeki bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131ndan yararlanan sald\u0131rganlar, g\u00fcncelleme talebi g\u00f6nderen kullan\u0131c\u0131lar\u0131n bir k\u0131sm\u0131n\u0131 kendi zararl\u0131 sunucular\u0131na y\u00f6nlendirdi.<\/li>\n
  • Hedef Kitle:<\/strong> Sald\u0131r\u0131 t\u00fcm kullan\u0131c\u0131lar\u0131 de\u011fil; \u00f6zellikle Do\u011fu Asya<\/strong> odakl\u0131 \u00e7al\u0131\u015fan stratejik kurumlar\u0131 hedef ald\u0131.<\/li>\n<\/ul>\n

    Failin Kimli\u011fi: “Lotus Blossom”<\/h2>\n

    G\u00fcvenlik devi Rapid7<\/strong> taraf\u0131ndan yap\u0131lan analizler, oklar\u0131 \u00c7in h\u00fck\u00fcmetiyle ba\u011flant\u0131l\u0131 oldu\u011fu iddia edilen Lotus Blossom<\/strong> grubuna \u00e7eviriyor. Ge\u00e7mi\u015fte havac\u0131l\u0131k, telekom ve kritik devlet altyap\u0131lar\u0131na y\u00f6nelik operasyonlar\u0131yla tan\u0131nan bu grubun, Notepad++ \u00fczerinden elde etti\u011fi eri\u015fimle uzun s\u00fcreli bir istihbarat faaliyeti y\u00fcr\u00fctt\u00fc\u011f\u00fc tahmin ediliyor.<\/p>\n

    Kritik Not:<\/strong> G\u00fcvenlik ara\u015ft\u0131rmac\u0131s\u0131 Kevin Beaumont, enfekte olan s\u00fcr\u00fcmlerin sald\u0131rganlara do\u011frudan sistem kontrol\u00fc sa\u011flad\u0131\u011f\u0131n\u0131 ve bu durumun kurumsal a\u011flar i\u00e7in “arka kap\u0131” anlam\u0131na geldi\u011fini belirtti.<\/p><\/blockquote>\n

    \"\"<\/p>\n

    SolarWinds Vakas\u0131 Tekerr\u00fcr m\u00fc Ediyor?<\/h2>\n

    Uzmanlar bu olay\u0131, 2020’de ABD devlet kurumlar\u0131n\u0131 sarsan SolarWinds<\/strong> felaketine benzetiyor. Her iki vakada da sald\u0131rganlar, yaz\u0131l\u0131m\u0131n kendisine sald\u0131rmak yerine, yaz\u0131l\u0131m\u0131n kullan\u0131c\u0131ya ula\u015ft\u0131\u011f\u0131 “g\u00fcvenli kanal\u0131” (g\u00fcncelleme mekanizmas\u0131n\u0131) zehirlemeyi tercih etti.<\/p>\n\n\n\n\n\n\n\n
    Detay<\/th>\nDurum<\/th>\n<\/tr>\n<\/thead>\n
    G\u00fcvenlik A\u00e7\u0131\u011f\u0131<\/strong><\/td>\nKas\u0131m 2025’te kapat\u0131ld\u0131.<\/td>\n<\/tr>\n
    Eri\u015fim Engeli<\/strong><\/td>\nAral\u0131k ba\u015f\u0131nda sald\u0131rganlar sistemden at\u0131ld\u0131.<\/td>\n<\/tr>\n
    Geli\u015ftirici Yan\u0131t\u0131<\/strong><\/td>\nDon Ho \u00f6z\u00fcr dileyerek yaln\u0131zca resmi ve g\u00fcncel s\u00fcr\u00fcmlerin kullan\u0131lmas\u0131n\u0131 \u00f6nerdi.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    Kullan\u0131c\u0131lar Ne Yapmal\u0131?<\/h2>\n

    E\u011fer sisteminizde Notepad++ y\u00fckl\u00fcyse, yaz\u0131l\u0131m\u0131n en g\u00fcncel s\u00fcr\u00fcm\u00fcne<\/strong> sahip oldu\u011funuzdan emin olun. Geli\u015ftirici ekip, eski a\u00e7\u0131\u011f\u0131n kapat\u0131ld\u0131\u011f\u0131n\u0131 ve yeni giri\u015fimlerin engellendi\u011fini belirtse de, kurumsal cihazlarda tam bir g\u00fcvenlik taramas\u0131 yap\u0131lmas\u0131 tavsiye ediliyor.<\/p>\n

    Kaynak:<\/strong> notepad-plus-plus.org<\/p>\n","protected":false},"excerpt":{"rendered":"

    Yaz\u0131l\u0131m d\u00fcnyas\u0131n\u0131n en g\u00fcvenilir kalelerinden biri olan Notepad++\u00a02025 y\u0131l\u0131na yay\u0131lan ve son derece sofistike y\u00f6ntemlerle y\u00fcr\u00fct\u00fclen bir siber casusluk operasyonunun hedefi oldu. Projenin mimar\u0131 Don Ho, pop\u00fcler metin edit\u00f6r\u00fcn\u00fcn g\u00fcncelleme altyap\u0131s\u0131n\u0131n k\u00f6t\u00fc niyetli yaz\u0131l\u0131mlar da\u011f\u0131tmak...<\/p>\n","protected":false},"author":2,"featured_media":15065,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[52],"tags":[],"class_list":["post-15064","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guvenlik"],"_links":{"self":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts\/15064","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/comments?post=15064"}],"version-history":[{"count":2,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts\/15064\/revisions"}],"predecessor-version":[{"id":15068,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts\/15064\/revisions\/15068"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/media\/15065"}],"wp:attachment":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/media?parent=15064"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/categories?post=15064"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/tags?post=15064"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}