Kaspersky, RenEngine \u00f6rneklerini ilk kez Mart 2025\u2019te tespit etti\u011fini ve o tarihten bu yana g\u00fcvenlik \u00e7\u00f6z\u00fcmlerinin kullan\u0131c\u0131lar\u0131 s\u00f6z konusu tehdide kar\u015f\u0131 koruma alt\u0131na ald\u0131\u011f\u0131n\u0131 a\u00e7\u0131klad\u0131.<\/p>\n
Son raporlarda \u00f6ne \u00e7\u0131kan korsan oyunlar\u0131n \u00f6tesine ge\u00e7en Kaspersky ara\u015ft\u0131rmac\u0131lar\u0131, sald\u0131rganlar\u0131n RenEngine\u2019i da\u011f\u0131tmak amac\u0131yla aralar\u0131nda CorelDRAW gibi grafik d\u00fczenleme yaz\u0131l\u0131mlar\u0131n\u0131n da bulundu\u011fu korsan yaz\u0131l\u0131mlar sunan onlarca web sitesi olu\u015fturdu\u011funu belirledi. Bu durum, sald\u0131r\u0131 y\u00fczeyinin yaln\u0131zca oyuncu toplulu\u011fuyla s\u0131n\u0131rl\u0131 kalmad\u0131\u011f\u0131n\u0131; lisanss\u0131z yaz\u0131l\u0131m arayan t\u00fcm kullan\u0131c\u0131lar\u0131 kapsayacak \u015fekilde geni\u015fledi\u011fini ortaya koyuyor.<\/p>\n
Kaspersky, Rusya, Brezilya, T\u00fcrkiye, \u0130spanya ve Almanya dahil olmak \u00fczere \u00e7e\u015fitli \u00fclkelerde olay kaydetti. Da\u011f\u0131t\u0131m modeli, hedefli operasyonlardan ziyade f\u0131rsat\u00e7\u0131 sald\u0131r\u0131 yakla\u015f\u0131m\u0131na i\u015faret ediyor.<\/p>\n
REN\u2019PY TABANLI SAHTE OYUNLAR \u00dcZER\u0130NDEN \u00c7OK A\u015eAMALI ZARARLI YAZILIM DA\u011eITIMI<\/strong><\/p>\n Kaspersky\u2019nin RenEngine\u2019i ilk tespit etti\u011fi d\u00f6nemde s\u00f6z konusu zararl\u0131 yaz\u0131l\u0131m, Lumma Stealer adl\u0131 bilgi h\u0131rs\u0131z\u0131n\u0131 da\u011f\u0131t\u0131yordu. G\u00fcncel sald\u0131r\u0131larda ise nihai y\u00fck olarak ACR Stealer\u2019\u0131n da\u011f\u0131t\u0131ld\u0131\u011f\u0131, baz\u0131 enfeksiyon zincirlerinde ise Vidar Stealer\u2019\u0131n da yer ald\u0131\u011f\u0131 g\u00f6zlemlendi.<\/p>\n Kampanya, Ren\u2019Py g\u00f6rsel roman motoru \u00fczerine in\u015fa edilmi\u015f oyunlar\u0131n de\u011fi\u015ftirilmi\u015f s\u00fcr\u00fcmlerini istismar ediyor. Kullan\u0131c\u0131lar enfekte y\u00fckleyicileri \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131nda, arka planda k\u00f6t\u00fc ama\u00e7l\u0131 komut dosyalar\u0131 y\u00fcr\u00fct\u00fcl\u00fcrken sahte bir y\u00fckleme ekran\u0131 g\u00f6r\u00fcnt\u00fcleniyor. Bu komut dosyalar\u0131, sanal ortam (sandbox) tespit yetenekleri sahip. S\u00fcre\u00e7te, mod\u00fcler bir k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m da\u011f\u0131t\u0131m arac\u0131 olan HijackLoader kullan\u0131l\u0131yor.<\/p>\n \u201cPOTANS\u0130YEL KURBAN HAVUZU C\u0130DD\u0130 \u00d6L\u00c7\u00dcDE B\u00dcY\u00dcYOR\u201d<\/strong><\/p>\n Kaspersky Tehdit Ara\u015ft\u0131rmalar\u0131 K\u0131demli Zararl\u0131 Yaz\u0131l\u0131m Analisti Pavel Sinenko, konuya ili\u015fkin \u015fu a\u00e7\u0131klamalarda bulundu: “Bu tehdit sadece korsan oyunlarla s\u0131n\u0131rl\u0131 de\u011fil; sald\u0131rganlar ayn\u0131 teknikle crack’li verimlilik yaz\u0131l\u0131mlar\u0131n\u0131 da hedef al\u0131yor. Bu da potansiyel kurban havuzunu ciddi \u00f6l\u00e7\u00fcde b\u00fcy\u00fct\u00fcyor. Oyun ar\u015fiv formatlar\u0131 motorlara ve oyunun ad\u0131na g\u00f6re de\u011fi\u015fiklik g\u00f6sterir. E\u011fer bir motor kendi kaynaklar\u0131n\u0131n b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc kontrol etmiyorsa, sald\u0131rganlar ‘oynat’ butonuna bast\u0131\u011f\u0131n\u0131z anda devreye girecek zararl\u0131 yaz\u0131l\u0131mlar\u0131 sisteme kolayca yerle\u015ftirebilir.”<\/p>\n Kaspersky \u00e7\u00f6z\u00fcmleri RenEngine\u2019i Trojan.Python.Agent.nb ve HEUR:Trojan.Python.Agent.gen olarak; HijackLoader\u2019\u0131 ise Trojan.Win32.Penguish ve Trojan.Win32.DllHijacker olarak tespit ediyor.<\/p>\n GER\u00c7EK BEDEL G\u00dcVENL\u0130\u011e\u0130N\u0130Z OLMASIN<\/strong><\/p>\n Kaspersky, oyun ve yaz\u0131l\u0131mlar\u0131n yaln\u0131zca resmi ve g\u00fcvenilir kaynaklardan indirilmesi gerekti\u011fini vurguluyor. Korsan i\u00e7eriklerin, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n en yayg\u0131n da\u011f\u0131t\u0131m kanallar\u0131ndan biri oldu\u011funa dikkat \u00e7ekiliyor.<\/p>\n \u015eirket, g\u00fcvenilir bir g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fc olarak Kaspersky Premium\u2019un Davran\u0131\u015fsal Tespit (Behavior Detection) bile\u015feni sayesinde me\u015fru yaz\u0131l\u0131m gibi gizlenen tehditleri, zararl\u0131 faaliyetleri \u00fczerinden tespit edebildi\u011fini ve RenEngine benzeri tehditlere kar\u015f\u0131 koruma sa\u011flad\u0131\u011f\u0131n\u0131 belirtiyor.<\/p>\n Ayr\u0131ca bilinen g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n kapat\u0131lmas\u0131 i\u00e7in i\u015fletim sistemi ve uygulamalar\u0131n g\u00fcncel tutulmas\u0131 \u00f6neriliyor. Kullan\u0131c\u0131lar\u0131n \u201c\u00fccretsiz\u201d tekliflere kar\u015f\u0131 temkinli olmas\u0131 gerekti\u011fi hat\u0131rlat\u0131l\u0131rken, \u00fccretli bir oyun ya da yaz\u0131l\u0131m\u0131n resmi olmayan platformlarda \u00fccretsiz sunulmas\u0131n\u0131n ciddi g\u00fcvenlik riskleri bar\u0131nd\u0131rabilece\u011fi ifade ediliyor.<\/p>\n Kaspersky, RenEngine \u00f6rneklerini ilk kez Mart 2025\u2019te tespit etti\u011fini ve o tarihten bu yana g\u00fcvenlik \u00e7\u00f6z\u00fcmlerinin kullan\u0131c\u0131lar\u0131 s\u00f6z konusu tehdide kar\u015f\u0131 koruma alt\u0131na ald\u0131\u011f\u0131n\u0131 a\u00e7\u0131klad\u0131. Son raporlarda \u00f6ne \u00e7\u0131kan korsan oyunlar\u0131n \u00f6tesine ge\u00e7en …<\/p>\n","protected":false},"author":1,"featured_media":71549,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[5382,278,1105,1217,7902],"class_list":["post-71548","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ekonomi","tag-kaspersky","tag-oyun","tag-tespit","tag-yazilim","tag-yazilimlar"],"_links":{"self":[{"href":"https:\/\/bihavadis.com\/index.php\/wp-json\/wp\/v2\/posts\/71548","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bihavadis.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bihavadis.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bihavadis.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bihavadis.com\/index.php\/wp-json\/wp\/v2\/comments?post=71548"}],"version-history":[{"count":1,"href":"https:\/\/bihavadis.com\/index.php\/wp-json\/wp\/v2\/posts\/71548\/revisions"}],"predecessor-version":[{"id":71550,"href":"https:\/\/bihavadis.com\/index.php\/wp-json\/wp\/v2\/posts\/71548\/revisions\/71550"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bihavadis.com\/index.php\/wp-json\/wp\/v2\/media\/71549"}],"wp:attachment":[{"href":"https:\/\/bihavadis.com\/index.php\/wp-json\/wp\/v2\/media?parent=71548"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bihavadis.com\/index.php\/wp-json\/wp\/v2\/categories?post=71548"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bihavadis.com\/index.php\/wp-json\/wp\/v2\/tags?post=71548"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}