2025 Kaspersky G\u00fcvenlik B\u00fclteni, y\u0131l\u0131n \u00f6ne \u00e7\u0131kan siber g\u00fcvenlik trendlerini de\u011ferlendiriyor ve ilk b\u00f6l\u00fcm\u00fcnde finans sekt\u00f6r\u00fcne odaklanarak gelece\u011fe y\u00f6nelik \u00f6ng\u00f6r\u00fcler sunuyor. Rapora g\u00f6re finans sekt\u00f6r\u00fc, 2025 boyunca mesajla\u015fma uygulamalar\u0131 \u00fczerinden yay\u0131lan zararl\u0131 yaz\u0131l\u0131mlar, yapay zek\u00e2 destekli sald\u0131r\u0131lar, tedarik zinciri ihlalleri ve NFC tabanl\u0131 doland\u0131r\u0131c\u0131l\u0131k gibi h\u0131zla de\u011fi\u015fen bir tehdit ortam\u0131nda faaliyet g\u00f6sterdi.<\/p>\n
Kaspersky Security Network istatistiklerine (Kas\u0131m 2024 \u2013 Ekim 2025 d\u00f6nemi) g\u00f6re finans sekt\u00f6r\u00fcndeki kullan\u0131c\u0131lar\u0131n y\u00fczde 8,15\u2019i \u00e7evrim i\u00e7i tehditlerle, y\u00fczde 15,81\u2019i ise yerel (cihaz \u00fczerindeki) tehditlerle kar\u015f\u0131la\u015ft\u0131. \u015eirketin \u00e7\u00f6z\u00fcmleri taraf\u0131ndan toplam\u00a01.338.357 bankac\u0131l\u0131k truva at\u0131 sald\u0131r\u0131s\u0131\u00a0tespit edildi. Buna ek olarak B2B finans kurulu\u015flar\u0131n\u0131n y\u00fczde 12,8\u2019i bu d\u00f6nemde fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131s\u0131na maruz kald\u0131; bu oran, 2024\u2019\u00fcn ayn\u0131 d\u00f6nemine k\u0131yasla benzersiz kullan\u0131c\u0131 say\u0131s\u0131nda y\u00fczde\u00a035,7\u2019lik bir art\u0131\u015fa\u00a0i\u015faret ediyor.<\/p>\n
Kaspersky uzmanlar\u0131, 2025\u2019te finans sekt\u00f6r\u00fcn\u00fc \u015fekillendiren ba\u015fl\u0131ca\u00a0siber g\u00fcvenlik trendlerini ve vakalar\u0131\u00a0\u015f\u00f6yle \u00f6zetliyor:<\/p>\n
B\u00fcy\u00fck \u00f6l\u00e7ekli tedarik zinciri sald\u0131r\u0131lar\u0131:\u00a0Finans sekt\u00f6r\u00fc, \u00fc\u00e7\u00fcnc\u00fc taraf hizmet sa\u011flay\u0131c\u0131lar\u0131ndaki zafiyetlerin ulusal \u00f6deme a\u011flar\u0131na kadar uzanan zincirleme etkiler yaratt\u0131\u011f\u0131, e\u015fi g\u00f6r\u00fclmemi\u015f tedarik zinciri sald\u0131r\u0131lar\u0131yla kar\u015f\u0131la\u015ft\u0131. Bu sald\u0131r\u0131lar, \u00fc\u00e7\u00fcnc\u00fc taraflara y\u00f6nelik bir a\u00e7\u0131\u011f\u0131n kritik finansal sistemleri dahi etkileyebilece\u011fini ortaya koydu.<\/p>\n
Organize su\u00e7 ve siber su\u00e7un kesi\u015fimi:\u00a0Organize su\u00e7 gruplar\u0131 fiziksel ve dijital y\u00f6ntemleri birle\u015ftirerek daha sofistike ve koordineli sald\u0131r\u0131lar d\u00fczenliyor. Sosyal m\u00fchendislik, i\u00e7eriden manip\u00fclasyon ve teknik istismar\u0131n birle\u015fti\u011fi hibrit tehditler, finans kurulu\u015flar\u0131 i\u00e7in b\u00fcy\u00fcyen bir risk olu\u015fturdu.<\/p>\n
Eski zararl\u0131 yaz\u0131l\u0131mlar, yeni da\u011f\u0131t\u0131m kanallar\u0131:\u00a0Siber su\u00e7lular, e-posta kimlik avc\u0131l\u0131\u011f\u0131ndan sosyal kanallara y\u00f6nelerek pop\u00fcler mesajla\u015fma uygulamalar\u0131n\u0131 k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m yaymak i\u00e7in kullanmaya ba\u015flad\u0131. Bankac\u0131l\u0131k truva atlar\u0131, mesajla\u015fma platformlar\u0131n\u0131 yeni da\u011f\u0131t\u0131m vekt\u00f6r\u00fc olarak kullanacak \u015fekilde yeniden yaz\u0131l\u0131yor ve geni\u015f \u00f6l\u00e7ekli enfeksiyonlara yol a\u00e7\u0131yor.<\/p>\n
Yapay zek\u00e2 ile \u00f6l\u00e7eklenen k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar:\u00a02025\u2019te yapay zek\u00e2 destekli zararl\u0131 yaz\u0131l\u0131mlar, otomatik yay\u0131l\u0131m ve ka\u00e7\u0131nma yetenekleri kazand\u0131. Bu durum, sald\u0131r\u0131lar\u0131n daha h\u0131zl\u0131 yay\u0131lmas\u0131n\u0131 ve daha fazla hedefe ula\u015fmas\u0131n\u0131 sa\u011fl\u0131yor. Otomasyon, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m \u00fcretimi ile da\u011f\u0131t\u0131m\u0131 aras\u0131ndaki s\u00fcreyi de belirgin \u015fekilde k\u0131salt\u0131yor.<\/p>\n
Mobil bankac\u0131l\u0131k sald\u0131r\u0131lar\u0131 ve NFC doland\u0131r\u0131c\u0131l\u0131\u011f\u0131:\u00a0ATS (Automated Transfer System) tekni\u011fini kullanan Android k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131, kullan\u0131c\u0131 fark etmeden i\u015flem tutarlar\u0131n\u0131 ve al\u0131c\u0131lar\u0131n\u0131 ger\u00e7ek zamanl\u0131 olarak de\u011fi\u015ftirebiliyor. NFC tabanl\u0131 sald\u0131r\u0131lar ise hem kalabal\u0131k alanlarda fiziksel doland\u0131r\u0131c\u0131l\u0131k hem de sosyal m\u00fchendislik ve sahte banka uygulamalar\u0131 \u00fczerinden uzaktan doland\u0131r\u0131c\u0131l\u0131k \u015feklinde \u00f6ne \u00e7\u0131kt\u0131.<\/p>\n
Blokzincir tabanl\u0131 C2 altyap\u0131s\u0131n\u0131n y\u00fckseli\u015fi:\u00a0Su\u00e7 gruplar\u0131, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlara ili\u015fkin komutlar\u0131 blokzincir ak\u0131ll\u0131 s\u00f6zle\u015fmelerine g\u00f6merek Web3 ortam\u0131n\u0131 hedef al\u0131yor ve kripto para h\u0131rs\u0131zl\u0131\u011f\u0131 yap\u0131yor. Bu y\u00f6ntem, altyap\u0131n\u0131n kal\u0131c\u0131l\u0131\u011f\u0131n\u0131 art\u0131r\u0131yor ve kald\u0131r\u0131lmas\u0131n\u0131 neredeyse imk\u00e2ns\u0131z hale getiriyor. Blokzincir tabanl\u0131 C2 yap\u0131lar\u0131, geleneksel sunucular kapat\u0131lsa dahi sald\u0131rganlar\u0131n kontrol\u00fc s\u00fcrd\u00fcrmesine olanak tan\u0131yor.<\/p>\n
Fidye yaz\u0131l\u0131mlar\u0131n\u0131n varl\u0131\u011f\u0131n\u0131 s\u00fcrd\u00fcrmesi:\u00a0Finans sekt\u00f6r\u00fcnde fidye yaz\u0131l\u0131mlar\u0131 h\u00e2l\u00e2 ciddi bir tehdit olu\u015fturuyor. Kas\u0131m 2024 \u2013 Ekim 2025 d\u00f6neminde B2B finans kurulu\u015flar\u0131n\u0131n y\u00fczde 12,8\u2019i bu sald\u0131r\u0131lardan etkilendi.<\/p>\n
Baz\u0131 zararl\u0131 yaz\u0131l\u0131m ailelerinin ortadan kaybolmas\u0131:\u00a0Belirli zararl\u0131 yaz\u0131l\u0131m ailelerinin, faaliyetleri do\u011frudan ilgili su\u00e7 gruplar\u0131n\u0131n operasyonlar\u0131na ba\u011fl\u0131 oldu\u011fu i\u00e7in zamanla ortadan kalkmas\u0131 bekleniyor.<\/p>\n
Kaspersky GReAT Amerika ve Avrupa Birimleri Ba\u015fkan\u0131 Fabio Assolini\u00a0\u015funlar\u0131 s\u00f6yledi:\u00a0\u201c2025\u2019te finansal siber tehditler hem i\u015fletmeleri hem de son kullan\u0131c\u0131lar\u0131 etkileyen son derece karma\u015f\u0131k bir manzara haline geldi. Su\u00e7 gruplar\u0131 dijital ara\u00e7lar\u0131, i\u00e7eriden eri\u015fimi, yapay zek\u00e2y\u0131 ve blokzinciri bir araya getirerek operasyonlar\u0131n\u0131 \u00f6l\u00e7eklendirdi. Bu durum, kurumlar\u0131n yaln\u0131zca sistemlerini de\u011fil, bu sistemleri destekleyen insan a\u011flar\u0131n\u0131 da g\u00fcvence alt\u0131na almas\u0131n\u0131 zorunlu k\u0131l\u0131yor.\u201d<\/p>\n
Kaspersky\u2019nin 2026 finans sekt\u00f6r\u00fc i\u00e7in \u00f6ng\u00f6r\u00fcleri<\/p>\n
WhatsApp \u00fczerinden da\u011f\u0131t\u0131lmak \u00fczere yeniden yaz\u0131lan bankac\u0131l\u0131k truva atlar\u0131:\u00a0Su\u00e7 gruplar\u0131n\u0131n bankac\u0131l\u0131k truva atlar\u0131n\u0131 yeniden yaz\u0131p WhatsApp gibi mesajla\u015fma uygulamalar\u0131 arac\u0131l\u0131\u011f\u0131yla da\u011f\u0131tmas\u0131 bekleniyor. Bu y\u00f6ntem \u00f6zellikle masa\u00fcst\u00fc tabanl\u0131 \u00e7evrim i\u00e7i bankac\u0131l\u0131\u011fa ba\u011f\u0131ml\u0131 kurum ve kamu yap\u0131lar\u0131 i\u00e7in risk olu\u015fturacak.<\/p>\n
Derin sahte\/AI tabanl\u0131 sosyal m\u00fchendislik hizmetlerinde art\u0131\u015f:\u00a0Ger\u00e7ek\u00e7i deepfake \u00fcretimi ve yapay zek\u00e2 destekli sosyal m\u00fchendislik kampanyalar\u0131n\u0131n yeralt\u0131 pazar\u0131nda b\u00fcy\u00fcmesi; sahte i\u015f g\u00f6r\u00fc\u015fmeleri, sahte teklif doland\u0131r\u0131c\u0131l\u0131klar\u0131 ve KYC do\u011frulamalar\u0131n\u0131 a\u015fmaya y\u00f6nelik ara\u00e7lar\u0131n yayg\u0131nla\u015fmas\u0131 bekleniyor.<\/p>\n
B\u00f6lgesel bilgi h\u0131rs\u0131zlar\u0131n\u0131n ortaya \u00e7\u0131k\u0131\u015f\u0131:\u00a0Lumma, Redline ve di\u011fer bilgi h\u0131rs\u0131zlar\u0131n\u0131n faaliyetlerinin s\u00fcrmesiyle birlikte belirli \u00fclke ve b\u00f6lgeleri hedef alan yeni b\u00f6lgesel bilgi h\u0131rs\u0131zlar\u0131n\u0131n ortaya \u00e7\u0131kmas\u0131 ve bu alan\u0131n hizmet olarak zararl\u0131 yaz\u0131l\u0131m (MaaS) modelini geni\u015fletmesi bekleniyor.<\/p>\n
NFC \u00f6demelerine y\u00f6nelik sald\u0131r\u0131larda art\u0131\u015f:\u00a0NFC, \u00f6deme sistemlerinin temel teknolojilerinden biri olmaya devam ettik\u00e7e bu alana y\u00f6nelik ara\u00e7lar, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar ve sald\u0131r\u0131 t\u00fcrlerinin \u00e7e\u015fitlenmesi \u00f6ng\u00f6r\u00fcl\u00fcyor.<\/p>\n
Agentic AI yapay zek\u00e2 k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n\u0131n y\u00fckseli\u015fi:\u00a0Bu yeni nesil k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar, \u00e7al\u0131\u015fma an\u0131nda davran\u0131\u015f\u0131n\u0131 dinamik olarak de\u011fi\u015ftirebiliyor. \u00d6nceden tan\u0131ml\u0131 komutlara ba\u011fl\u0131 olmayan Agentic AI zararl\u0131lar bulundu\u011fu ortama g\u00f6re analiz yaparak taktiklerini de\u011fi\u015ftirebiliyor; bu sayede tek bir zararl\u0131 yaz\u0131l\u0131m hem s\u0131zma hem veri s\u0131zd\u0131rma hem de sistem bozma gibi farkl\u0131 yetenekleri duruma g\u00f6re sergileyebiliyor.<\/p>\n
Klasik doland\u0131r\u0131c\u0131l\u0131k y\u00f6ntemlerinin yeni da\u011f\u0131t\u0131m kanallar\u0131:\u00a0Doland\u0131r\u0131c\u0131l\u0131k kullan\u0131c\u0131lar i\u00e7in \u00f6nemli bir tehdit olmaya devam edecek, ancak sald\u0131rganlar mesajla\u015fma platformlar\u0131 ve yeni dijital hizmetlere h\u0131zla uyum sa\u011flayarak y\u00f6ntemlerini de\u011fi\u015ftirecek.<\/p>\n
Fabrika \u00c7\u0131k\u0131\u015fl\u0131 (\u00d6nceden) Enfekte Cihaz Tehdidinin S\u00fcrmesi:\u00a0Triada\u00a0gibi truva atlar\u0131n\u0131 bar\u0131nd\u0131ran sahte ya da kay\u0131t d\u0131\u015f\u0131 ak\u0131ll\u0131 cihazlar\u0131n (telefon, TV vb.) piyasaya s\u00fcr\u00fclmesi de devam edecek. Bu cihazlar, bankac\u0131l\u0131k bilgilerini \u00e7alabilen geli\u015fmi\u015f k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlarla \u00f6nceden enfekte halde geliyor.<\/p>\n
Kaspersky uzmanlar\u0131 g\u00fcvenli\u011fi sa\u011flamak i\u00e7in \u015fu \u00f6nerilerde bulunuyor:<\/p>\n
\tHesaplar\u0131n\u0131z\u0131 ve finansal i\u015flemlerinizi d\u00fczenli olarak takip ederek \u015f\u00fcpheli aktiviteleri kontrol edin.
\n\tUygulamalar\u0131 yaln\u0131zca resmi ma\u011fazalardan indirin ve geli\u015ftirici bilgilerinin do\u011frulu\u011funu teyit edin.
\n\tNFC \u00f6zelli\u011fini kullanmad\u0131\u011f\u0131n\u0131z durumlarda kapat\u0131n ve yetkisiz ileti\u015fimi engelleyen c\u00fczdan \u00e7\u00f6z\u00fcmlerinden yararlan\u0131n.
\n\tKaspersky Premium\u2019un\u00a0Safe Money \u00f6zelli\u011fini kullanarak finansal i\u015flemlerinizi g\u00fcvence alt\u0131na al\u0131n. Bu \u00f6zellik, bilinen \u00e7evrimi\u00e7i \u00f6deme sistemlerinin ve bankac\u0131l\u0131k sitelerinin do\u011frulu\u011funu kontrol eder.<\/p>\n
Finansal kurumlar, insanlar\u0131, s\u00fcre\u00e7leri ve teknolojiyi bir araya getiren ekosistem temelli bir siber g\u00fcvenlik stratejisi benimseyebilir:<\/p>\n
\tT\u00fcm altyap\u0131y\u0131 kapsaml\u0131 \u015fekilde de\u011ferlendirerek zafiyetleri giderin ve gizli riskleri ortaya \u00e7\u0131karabilecek d\u0131\u015f uzmanlar\u0131n deste\u011fini de\u011ferlendirin.
\n\tT\u00fcm sald\u0131r\u0131 vekt\u00f6rlerinin izlenmesi ve kontrol\u00fc i\u00e7in entegre platformlar kullan\u0131n; h\u0131zl\u0131 tespit ve h\u0131zl\u0131 m\u00fcdahaleyi m\u00fcmk\u00fcn k\u0131l\u0131n. Bu ama\u00e7la\u00a0\u00a0Kaspersky Next\u00a0\u00fcr\u00fcn ailesi, ger\u00e7ek zamanl\u0131 koruma, tehdit g\u00f6r\u00fcn\u00fcrl\u00fc\u011f\u00fc, analiz, EDR\/XDR ve \u00f6l\u00e7eklenebilirlik sa\u011flayarak her b\u00fcy\u00fckl\u00fckteki ve her sekt\u00f6rdeki organizasyonlar i\u00e7in \u00e7\u00f6z\u00fcm sunar.
\n\tTehdit ortam\u0131n\u0131 yak\u0131ndan takip etmek i\u00e7in\u00a0Kaspersky threat intelligence\u00a0ve analitik hizmetlerinden yararlan\u0131n; d\u00fczenli fark\u0131ndal\u0131k e\u011fitimleriyle tehditleri tan\u0131yabilen ve g\u00fcvenlik politikalar\u0131n\u0131 uygulayan bir \u201cinsan g\u00fcvenlik duvar\u0131\u201d olu\u015fturun.<\/p>\n
Riskleri azaltmaya y\u00f6nelik uygun siber g\u00fcvenlik \u00e7\u00f6z\u00fcmleri hakk\u0131nda daha fazla bilgi edinmek i\u00e7in finansal kurulu\u015flar\u00a0web sitesini\u00a0ziyaret edebilir.<\/p>\n
\u00a0<\/p>\n
\u00a0<\/p>\n
Kaynak: (BYZHA) Beyaz Haber Ajans\u0131<\/p>\n","protected":false},"excerpt":{"rendered":"
2025 Kaspersky G\u00fcvenlik B\u00fclteni, y\u0131l\u0131n \u00f6ne \u00e7\u0131kan siber g\u00fcvenlik trendlerini de\u011ferlendiriyor ve ilk b\u00f6l\u00fcm\u00fcnde finans sekt\u00f6r\u00fcne odaklanarak gelece\u011fe y\u00f6nelik \u00f6ng\u00f6r\u00fcler sunuyor.<\/p>\n","protected":false},"author":1,"featured_media":37298,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[2270,365,244,245,4284],"class_list":["post-37297","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-saglik","tag-amacli","tag-finans","tag-guvenlik","tag-kaspersky","tag-zararli"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t