Page 52 - Organize Dergi Ağustos 2026
P. 52
,ĂďĞƌ Ͳ News ,ĂďĞƌ DĞƌŬĞnjŝ Ͳ News Center
Both malware families are sold as a
service and promoted on darknet fo-
ƌƵŵƐ͘ /Ŷ ďŽƚŚ ĞĐŽƐLJƐƚĞŵƐ͕ ĂĸůŝĂƚĞƐ
receive a self-hosted management
panel that must be deployed on their
own server infrastructure. This requ-
ires a certain level of technical skill
ĨƌŽŵ ƚŚĞ ĂĸůŝĂƚĞƐ ĂŶĚ ŐƌĂŶƚƐ ƚŚĞŵ
ĚŝƌĞĐƚ ĐŽŶƚƌŽů ŽǀĞƌ ǀŝĐƟŵ ĚĂƚĂ ĂŶĚ
ƉĂLJůŽĂĚ ĚŝƐƚƌŝďƵƟŽŶ͘
tŚŝůĞ ĚŝƐƚƌŝďƵƟŽŶ ŵĞƚŚŽĚƐ ƵůƟŵĂ-
ƚĞůLJ ĚĞƉĞŶĚ ŽŶ ƚŚĞ ŝŶĚŝǀŝĚƵĂů Ăĸůŝ-
ate, ESET telemetry data has con-
sistently shown that both malware
families spread through a wide va-
riety of channels. The most common
ŵĞƚŚŽĚƐ ŝŶĐůƵĚĞ ĨĂŬĞ ƐŽŌǁĂƌĞ ƵƉ-
ŬŦƌŦůŵŦƔ LJĂnjŦůŦŵ LJƺŬůĞLJŝĐŝůĞƌŝ ǀĞ ƺĕƺŶĐƺ ƚĂƌĂĨ ŬƂƚƺ ĂŵĂĕůŦ LJĂnjŦůŦŵ
LJƺŬůĞLJŝĐŝůĞƌŝ LJĞƌ ĂůŵĂŬƚĂĚŦƌ͘ ĚĂƚĞƐ͕ ŝŶƐƚĂůůĞƌƐ ĨŽƌ ĐƌĂĐŬĞĚ ƐŽŌǁĂƌĞ͕ ĂŶĚ ƚŚŝƌĚͲƉĂƌƚLJ ŵĂůǁĂƌĞ
installers.
ŵĂĚĞLJ͕ LJĞŶŝĚĞŶ ĚĞƌůĞŵĞ ďĂƔŦŶĂ ƂĚĞŵĞ ŵŽĚĞůŝŶŝ ŬƵůůĂŶŦLJŽƌ͘
KƌƚĂŬůĂƌ ďŝƌ ůŝƐĂŶƐ ƐĂƨŶ ĂůĚŦŬƚĂŶ ƐŽŶƌĂ͕ LJĞŶŝ ďŝƌ ĚĞƌůĞŵĞ ŽůƵƔͲ ŵĂĚĞLJ ĞŵƉůŽLJƐ Ă ƉĂLJͲƉĞƌͲƌĞďƵŝůĚ ŵŽĚĞů͘ ŌĞƌ ƉƵƌĐŚĂƐŝŶŐ Ă
ƚƵƌŵĂůĂƌŦ ŐĞƌĞŬƟŒŝŶĚĞ ;ƂƌŶĞŒŝŶ͕ LJĞŶŝ ďŝƌ Θ ƐƵŶƵĐƵƐƵŶĂ ŐĞĕŝƔ ůŝĐĞŶƐĞ͕ ĂĸůŝĂƚĞƐ ƉĂLJ ĂŶ ĂĚĚŝƟŽŶĂů ĨĞĞ ĞĂĐŚ ƟŵĞ ƚŚĞLJ ŶĞĞĚ ƚŽ
LJĂƉĂƌŬĞŶͿ ŚĞƌ ƐĞĨĞƌŝŶĚĞ ĞŬ ďŝƌ ƺĐƌĞƚ ƂĚƺLJŽƌ͘ ŝŒĞƌ ďŝƌ ĚĞLJŝƔůĞ generate a new build (for example, when switching to a new
ŵĂĚĞLJ ŽƉĞƌĂƚƂƌůĞƌŝ ŝƔ ŽƌƚĂŬůĂƌŦŶĂ ďŝƌ ĚĞƌůĞŵĞ ĂƌĂĐŦ ƐĂŒůĂŵĂͲ Θ ƐĞƌǀĞƌͿ͘ /Ŷ ŽƚŚĞƌ ǁŽƌĚƐ͕ ŵĂĚĞLJ ŽƉĞƌĂƚŽƌƐ ĚŝĚ ŶŽƚ ƉƌŽǀŝĚĞ
ĚŦ͖ ďƵŶƵŶ LJĞƌŝŶĞ͕ ƂƌŶĞŬůĞƌ ŚĞƌ ŝƔ ŽƌƚĂŒŦ ŝĕŝŶ ƚĂůĞƉ ƺnjĞƌŝŶĞ ĚĞƌͲ Ă ďƵŝůĚ ƚŽŽů ƚŽ ƚŚĞŝƌ ĂĸůŝĂƚĞƐ͖ ŝŶƐƚĞĂĚ͕ ƐĂŵƉůĞƐ ǁĞƌĞ ĐŽŵƉŝůĞĚ
ůĞŶĚŝ͘ ,ŝnjŵĞƚ͕ ĚĂŚĂ ĨĂnjůĂ ǀĞƌŝ ƐŦnjĚŦƌŵĂ ǀĞ ĞƌŝƔŝŵ ŝĕŝŶ ƺĕ ŵŽĚƺů ŽŶ ĚĞŵĂŶĚ ĨŽƌ ĞĂĐŚ ĂĸůŝĂƚĞ͘ dŚĞ ƐĞƌǀŝĐĞ ŽīĞƌƐ ƚŚƌĞĞ ŵŽĚƵůĞƐ
ƐƵŶĂƌ͗ WĂŶŽLJĂ ŝnjůĞŵĞ ŵŽĚƺůƺ͕ ŬŝŵůŝŬ ďŝůŐŝƐŝ ŚŦƌƐŦnjůŦŒŦ ŵŽĚƺůƺ ǀĞ ĨŽƌ ĨƵƌƚŚĞƌ ĚĂƚĂ ĞdžĮůƚƌĂƟŽŶ ĂŶĚ ĂĐĐĞƐƐ͗ Ă ĐůŝƉďŽĂƌĚ ŵŽŶŝƚŽƌŝŶŐ
sE ƚĂďĂŶůŦ ƵnjĂŬƚĂŶ ĞƌŝƔŝŵ ŵŽĚƺůƺ͘ ,ŝnjŵĞƟŶ ƚĞŬ ďŝƌ ůŝƐĂŶƐ ŝĕŝŶ ŵŽĚƵůĞ͕ Ă ĐƌĞĚĞŶƟĂůͲƐƚĞĂůŝŶŐ ŵŽĚƵůĞ͕ ĂŶĚ Ă sE ͲďĂƐĞĚ ƌĞŵŽƚĞ
ĮLJĂƨ ŝƚĐŽŝŶ ĐŝŶƐŝŶĚĞŶ ϲϬϬ ĚŽůĂƌŦĚŦƌ ǀĞ ŚĞƌ LJĞŶŝĚĞŶ ĚĞƌůĞͲ ĂĐĐĞƐƐ ŵŽĚƵůĞ͘ dŚĞ ƉƌŝĐĞ ŽĨ ƚŚĞ ƐĞƌǀŝĐĞ ŝƐ ϲϬϬ h^ ;ƉĂLJĂďůĞ ŝŶ
ŵĞ ŝĕŝŶ ĞŬ ϱϬ ĚŽůĂƌŦ ƺĐƌĞƚ ĂůŦŶŦLJŽƌ͘ ŝƚĐŽŝŶͿ ĨŽƌ Ă ƐŝŶŐůĞ ůŝĐĞŶƐĞ͕ ǁŝƚŚ ĂŶ ĂĚĚŝƟŽŶĂů ĨĞĞ ŽĨ ϱϬ h^
charged for each rebuild.
^ƚĞĂůĐ ŝƐĞ ŝƔ ŽƌƚĂŬůĂƌŦŶĂ ĚĂŚĂ ĚŽƐƚĂŶĞ ďŝƌ LJĂŬůĂƔŦŵ ďĞŶŝŵƐĞŵŝƔ
ǀĞ ĂďŽŶĞůŝŬ ŬĂƉƐĂŵŦŶĚĂ ƐŦŶŦƌƐŦnj ĚĞƌůĞŵĞ ŽůƵƔƚƵƌŵĂ ŝŵŬąŶŦ ƐƵͲ Stealc, on the other hand, has adopted a more partner-friend-
ŶƵLJŽƌ͘ Ƶ͕ Θ ĂůƚLJĂƉŦƐŦŶŦ ĚĞŒŝƔƟƌŵĞŶŝŶ ŽƉĞƌĂƐLJŽŶĞů ŵĂůŝLJĞͲ ůLJ ĂƉƉƌŽĂĐŚ͕ ŽīĞƌŝŶŐ ƵŶůŝŵŝƚĞĚ ďƵŝůĚ ŐĞŶĞƌĂƟŽŶ ĂƐ ƉĂƌƚ ŽĨ ŝƚƐ
ƟŶŝ ĚƺƔƺƌŵƺƔ ǀĞ ŝƔ ŽƌƚĂŬůĂƌŦŶŦŶ ŝŚƟLJĂĕ ĚƵLJĚƵŬůĂƌŦ ĂŶĚĂ LJĞŶŝ ƐƵďƐĐƌŝƉƟŽŶ͘ dŚŝƐ ƌĞĚƵĐĞƐ ƚŚĞ ŽƉĞƌĂƟŽŶĂů ĐŽƐƚ ŽĨ ŵŽĚŝĨLJŝŶŐ ƚŚĞ
ƂƌŶĞŬůĞƌ ŽůƵƔƚƵƌŵĂƐŦŶŦ ŬŽůĂLJůĂƔƨƌŦLJŽƌ͘ tĞď ƚĂƌĂLJŦĐŦůĂƌŦ͕ ĞͲƉŽƐƚĂ C&C infrastructure and makes it easier for partners to generate
ŝƐƚĞŵĐŝůĞƌŝ͕ &dW ŝƐƚĞŵĐŝůĞƌŝ͕ ŽLJƵŶ ƉůĂƞŽƌŵůĂƌŦ͕ ŬƌŝƉƚŽ ƉĂƌĂ ĐƺnjͲ new samples whenever needed. It targets a wide range of data
ĚĂŶŦ ĚŽƐLJĂůĂƌŦ ǀĞ ƚĂƌĂLJŦĐŦ ƵnjĂŶƨůĂƌŦ ƚĂƌĂķŶĚĂŶ ĚĞƉŽůĂŶĂŶ ŬŝŵůŝŬ ƐŽƵƌĐĞƐ͕ ŝŶĐůƵĚŝŶŐ ĐƌĞĚĞŶƟĂůƐ ƐƚŽƌĞĚ ďLJ ǁĞď ďƌŽǁƐĞƌƐ͕ ĞŵĂŝů
ďŝůŐŝůĞƌŝ ĚąŚŝů ŽůŵĂŬ ƺnjĞƌĞ ĕŽŬ ĕĞƔŝƚůŝ ǀĞƌŝ ŬĂLJŶĂŬůĂƌŦŶŦ ŚĞĚĞŇŝͲ ĐůŝĞŶƚƐ͕ &dW ĐůŝĞŶƚƐ͕ ŐĂŵŝŶŐ ƉůĂƞŽƌŵƐ͕ ĐƌLJƉƚŽĐƵƌƌĞŶĐLJ ǁĂůůĞƚ
LJŽƌ͘ ^ƚĞĂůĐ͕ ĂLJůŦŬ ĂďŽŶĞůŝŬ ŽůĂƌĂŬ ƐĂƨůŦLJŽƌ ǀĞ ĞŶ ƵĐƵnj ĂďŽŶĞůŝŬ ĮůĞƐ͕ ĂŶĚ ďƌŽǁƐĞƌ ĞdžƚĞŶƐŝŽŶƐ͘ ^ƚĞĂůĐ ŝƐ ƐŽůĚ ǀŝĂ ŵŽŶƚŚůLJ ƐƵďƐĐ-
Ăůƨ ĂLJ ŝĕŝŶ ϭ͘ϬϬϬ ĚŽůĂƌŦ͘ ƌŝƉƟŽŶ͕ ǁŝƚŚ ƚŚĞ ůŽǁĞƐƚͲƉƌŝĐĞĚ ŽƉƟŽŶ ĐŽƐƟŶŐ Ψϭ͕ϬϬϬ h^ ĨŽƌ
six months.
<ŝŵůŝŬ ƐĂŚƚĞŬąƌůŦŒŦ ĚŽůĂŶĚŦƌŦĐŦůŦŬůĂƌŦŶĚĂŶ ŬĂĕŦŶŵĂLJĂ ĕĂůŦƔĂŶ ŚĞƌ
ŝŬŝ ŽƉĞƌĂƚƂƌ ĚĞ ĚĂƌŬŶĞƚ ĨŽƌƵŵůĂƌŦŶĚĂŬŝ ƉŽƚĂŶƐŝLJĞů ŝƔ ŽƌƚĂŬůĂƌŦŶĂ ^ĞĞŬŝŶŐ ƚŽ ĂǀŽŝĚ ŝŵƉĞƌƐŽŶĂƟŽŶ ƐĐĂŵƐ͕ ďŽƚŚ ŽƉĞƌĂƚŽƌƐ ĞdžƉůŝĐŝƚ-
ŬĞŶĚŝůĞƌŝLJůĞ LJĂůŶŦnjĐĂ ƌĞƐŵŠ ŬĂŶĂůůĂƌ ĂƌĂĐŦůŦŒŦLJůĂ ŝůĞƟƔŝŵĞ ŐĞĕŵĞͲ ůLJ ŝŶƐƚƌƵĐƚĞĚ ƉŽƚĞŶƟĂů ƉĂƌƚŶĞƌƐ ŽŶ ĚĂƌŬŶĞƚ ĨŽƌƵŵƐ ƚŽ ĐŽŶƚĂĐƚ
ůĞƌŝ ŬŽŶƵƐƵŶĚĂ ĂĕŦŬĕĂ ƚĂůŝŵĂƚ ǀĞƌĚŝ͘ ŵĂĚĞLJ͕ ĂůŦĐŦůĂƌŦ ƺƌƺŶƺŶ ƚŚĞŵ ŽŶůLJ ƚŚƌŽƵŐŚ ŽĸĐŝĂů ĐŚĂŶŶĞůƐ͘ tŚŝůĞ ŵĂĚĞLJ ĚŝƌĞĐƚĞĚ
ƚĂŶŦƨůĚŦŒŦ ĚĂƌŬŶĞƚ ĨŽƌƵŵƵŶĚĂŬŝ ƂnjĞů ŵĞƐĂũůĂƌĂ LJƂŶůĞŶĚŝƌŝƌŬĞŶ buyers to private messages on the darknet forum where the
^ƚĞĂůĐ ŝƐĞ ĚĂƌŬŶĞƚ ĨŽƌƵŵůĂƌŦŶĚĂŬŝ ƂnjĞů ŵĞƐĂũůĂƌŦ ǀĞLJĂ dĞůĞŐƌĂŵ͛Ŧ ƉƌŽĚƵĐƚ ǁĂƐ ĂĚǀĞƌƟƐĞĚ͕ ^ƚĞĂůĐ ƵƟůŝnjĞĚ ĞŝƚŚĞƌ ƉƌŝǀĂƚĞ ŵĞƐƐĂŐĞƐ
ŬƵůůĂŶĚŦ͘ on darknet forums or Telegram.
^ d ǁŝůů ĐŽŶƟŶƵĞ ƚŽ ŵŽŶŝƚŽƌ ƚŚĞ ĂĐƟǀŝƟĞƐ ŽĨ ďŽƚŚ ĨĂŵŝůŝĞƐ ĂŶĚ
^ d͕ ŚĞƌ ŝŬŝ ĂŝůĞŶŝŶ ĨĂĂůŝLJĞƚůĞƌŝŶŝ ŝnjůĞŵĞLJĞ ĚĞǀĂŵ ĞĚĞĐĞŬ ǀĞ
ŽƉĞƌĂƐLJŽŶƵŶ ĚƵƌĚƵƌƵůŵĂƐŦŶŦŶ ĂƌĚŦŶĚĂŶ ŽƉĞƌĂƐLJŽŶĞů ĂůƚLJĂƉŦLJŦ ƚƌĂĐŬ ĂŶLJ ĂƩĞŵƉƚƐ ƚŽ ƌĞͲĞƐƚĂďůŝƐŚ ŽƉĞƌĂƟŽŶĂů ŝŶĨƌĂƐƚƌƵĐƚƵƌĞ
LJĞŶŝĚĞŶ ŬƵƌŵĂ ŐŝƌŝƔŝŵůĞƌŝŶŝ ƚĂŬŝƉ ĞĚĞĐĞŬ͘ ĨŽůůŽǁŝŶŐ ƚŚĞ ĚŝƐƌƵƉƟŽŶ ŽĨ ƚŚĞŝƌ ŽƉĞƌĂƟŽŶƐ͘
ϱϬ ŒƵƐƚŽƐ Ͳ ƵŐƵƐƚ ϮϬϮϲ
