{"id":1350,"date":"2026-08-29T11:04:03","date_gmt":"2026-08-29T08:04:03","guid":{"rendered":"https:\/\/www.tayfnews.tech\/tr\/?p=1350"},"modified":"2026-08-29T11:04:03","modified_gmt":"2026-08-29T08:04:03","slug":"terminalfix-kampanyasi-cok-asamali-saldiri-ile-ters-tunel-kuruyor","status":"publish","type":"post","link":"https:\/\/www.tayfnews.tech\/tr\/technology\/terminalfix-kampanyasi-cok-asamali-saldiri-ile-ters-tunel-kuruyor\/","title":{"rendered":"TerminalFix Kampanyas\u0131, \u00c7ok A\u015famal\u0131 Sald\u0131r\u0131 ile Ters T\u00fcnel Kuruyor"},"content":{"rendered":"<p>Microsoft Threat Intelligence, <strong>TerminalFix kampanyas\u0131<\/strong> olarak izlenen geli\u015fmi\u015f bir tehdit faaliyetine ili\u015fkin ayr\u0131nt\u0131l\u0131 bir analiz yay\u0131nlad\u0131. 28.08.2026 tarihinde yay\u0131nlanan bilgilendirme notu, k\u00f6t\u00fc ama\u00e7l\u0131 akt\u00f6rlerin sosyal m\u00fchendislik taktiklerini nas\u0131l kulland\u0131\u011f\u0131na, \u00f6zellikle de kullan\u0131c\u0131lar\u0131 kand\u0131rarak hedef al\u0131nan kurumsal veya bireysel ortamlarda nihayetinde ters t\u00fcnel (reverse tunnel) olu\u015fturan \u00e7ok a\u015famal\u0131 s\u0131zma i\u015flemlerini ba\u015flatmalar\u0131n\u0131 sa\u011flayan sahte CAPTCHA istemlerini nas\u0131l ara\u00e7 haline getirdiklerine \u0131\u015f\u0131k tutuyor.<\/p>\n<h2>TerminalFix \u00c7ok A\u015famal\u0131 S\u0131zma \u0130\u015fleminin Anatomisi<\/h2>\n<p>TerminalFix kampanyas\u0131, standart \u00e7evre savunmalar\u0131n\u0131 atlatmak ve kurban u\u00e7 noktalar\u0131nda keyfi kod \u00e7al\u0131\u015ft\u0131rmak i\u00e7in tasarlanm\u0131\u015f, dikkatle kurgulanm\u0131\u015f bir olaylar dizisine dayan\u0131yor. Aldat\u0131c\u0131 kullan\u0131c\u0131 etkile\u015fim vekt\u00f6rlerini geli\u015fmi\u015f kal\u0131c\u0131l\u0131k ve y\u00fcr\u00fctme teknikleriyle birle\u015ftiren tehdit akt\u00f6rleri, ele ge\u00e7irilen a\u011flar i\u00e7inde g\u00fcvenilir bir dayanak noktas\u0131 olu\u015fturuyor.<\/p>\n<p>Microsoft analizinde tespit edilen temel teknik bile\u015fenler ve taktikler \u015funlard\u0131r:<\/p>\n<ul>\n<li><strong>Sahte CAPTCHA \u0130stemleri:<\/strong> Kullan\u0131c\u0131lar\u0131 insan varl\u0131\u011f\u0131n\u0131 do\u011frulama bahanesiyle komut \u00e7al\u0131\u015ft\u0131rmaya veya k\u00f6t\u00fc ama\u00e7l\u0131 y\u00fckler indirmeye y\u00f6nlendirmek i\u00e7in tasarlanm\u0131\u015f sosyal m\u00fchendislik tuzaklar\u0131.<\/li>\n<li><strong>DLL Yan Y\u00fckleme (DLL Sideloading):<\/strong> Me\u015fru uygulamalar\u0131n k\u00f6t\u00fc ama\u00e7l\u0131 dinamik ba\u011flant\u0131 kitapl\u0131klar\u0131n\u0131 y\u00fcklemesiyle tehdit akt\u00f6rlerinin gizlice kod \u00e7al\u0131\u015ft\u0131rmas\u0131na ve g\u00fcvenlik yaz\u0131l\u0131mlar\u0131n\u0131n tespitinden ka\u00e7mas\u0131na olanak tan\u0131yan bir teknik.<\/li>\n<li><strong>Ters T\u00fcnelleme (Reverse Tunneling):<\/strong> A\u011f adresi \u00e7evirisini ve g\u00fcvenlik duvarlar\u0131n\u0131 atlayan, sald\u0131rganlara dahili kaynaklara kal\u0131c\u0131 uzaktan eri\u015fim sa\u011flayan giden ba\u011flant\u0131lar\u0131n kurulmas\u0131.<\/li>\n<li><strong>Tehdit \u0130stihbarat\u0131 Tespitleri:<\/strong> G\u00fcvenlik operasyon merkezlerinin devam eden ihlalleri belirlemesine ve hafifletmesine yard\u0131mc\u0131 olmak i\u00e7in Microsoft taraf\u0131ndan sa\u011flanan \u00f6zel telemetri g\u00f6stergeleri ve arama rehberli\u011fi.<\/li>\n<h2>Geli\u015fen Sosyal M\u00fchendislik Taktiklerine Kar\u015f\u0131 Savunma<\/h2>\n<p>Modern tehdit akt\u00f6rleri; sahte do\u011frulama istekleri ve aldat\u0131c\u0131 taray\u0131c\u0131 bildirimleri gibi geleneksel sosyal m\u00fchendisli\u011fi, DLL yan y\u00fckleme gibi teknik y\u00fcr\u00fctme vekt\u00f6rleriyle giderek daha fazla harmanl\u0131yor. TerminalFix kampanyas\u0131, kullan\u0131c\u0131lar k\u00f6t\u00fc ama\u00e7l\u0131 web \u00f6\u011feleriyle etkile\u015fime girmeleri i\u00e7in ba\u015far\u0131l\u0131 bir \u015fekilde manip\u00fcle edildi\u011finde g\u00fcvenlik ekiplerinin kar\u015f\u0131la\u015ft\u0131\u011f\u0131 devam eden zorlu\u011fun alt\u0131n\u0131 \u00e7iziyor.<\/p>\n<p>Kurulu\u015flar\u0131n, bu \u00e7ok a\u015famal\u0131 faaliyetle ili\u015fkili g\u00f6stergeler i\u00e7in ortamlar\u0131n\u0131 taramak amac\u0131yla Microsoft Threat Intelligence taraf\u0131ndan sa\u011flanan tespit imza imzalar\u0131n\u0131 ve arama paketlerini incelemeleri tavsiye ediliyor. Anormal giden t\u00fcnel ba\u011flant\u0131lar\u0131n\u0131n ve ola\u011fand\u0131\u015f\u0131 DLL y\u00fckleme davran\u0131\u015f\u0131n\u0131n proaktif olarak izlenmesi, bu t\u00fcr sald\u0131r\u0131lar\u0131n yanal harekete ula\u015fmadan \u00f6nce etkisiz hale getirilmesi a\u00e7\u0131s\u0131ndan kritik \u00f6nem ta\u015f\u0131maya devam ediyor.<\/p>\n<p><em>Kaynak: <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/08\/28\/terminalfix-campaign-deploys-reverse-tunnel-through-multistage-intrusion\/\" target=\"_blank\" rel=\"noopener noreferrer\">Orijinal Makale<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft Threat Intelligence, sahte CAPTCHA istemleri, DLL yan y\u00fckleme, ters t\u00fcneller ve g\u00fcvenlik \u00f6nerileri i\u00e7eren TerminalFix kampanyas\u0131n\u0131 analiz ediyor.<\/p>\n","protected":false},"author":1,"featured_media":1349,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"googlesitekit_rrm_CAowrrDMDA:productID":"","tayfnews_source_url":"","footnotes":"","rank_math_focus_keyword":"TerminalFix kampanyas\u0131, Microsoft Threat Intelligence, ters t\u00fcnel, Siber G\u00fcvenlik, Zararl\u0131 Yaz\u0131l\u0131m, Teknoloji","rank_math_title":"TerminalFix Kampanyas\u0131, \u00c7ok A\u015famal\u0131 Sald\u0131r\u0131 ile Ters T\u00fcnel Kuruyor","rank_math_description":"Microsoft Threat Intelligence, sahte CAPTCHA istemleri, DLL yan y\u00fckleme, ters t\u00fcneller ve g\u00fcvenlik \u00f6nerileri i\u00e7eren TerminalFix kampanyas\u0131n\u0131 analiz ediyor."},"categories":[2],"tags":[],"class_list":["post-1350","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/posts\/1350","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/comments?post=1350"}],"version-history":[{"count":1,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/posts\/1350\/revisions"}],"predecessor-version":[{"id":1351,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/posts\/1350\/revisions\/1351"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/media\/1349"}],"wp:attachment":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/media?parent=1350"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/categories?post=1350"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/tags?post=1350"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}