{"id":5858,"date":"2015-12-04T12:36:19","date_gmt":"2015-12-04T12:36:19","guid":{"rendered":"https:\/\/ihs.com.tr\/blog\/?p=5858"},"modified":"2015-12-04T12:36:19","modified_gmt":"2015-12-04T12:36:19","slug":"1300-kisinin-paypal-hesabi-calindi","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/1300-kisinin-paypal-hesabi-calindi\/","title":{"rendered":"1300 Ki\u015finin PayPal Hesab\u0131 \u00c7al\u0131nd\u0131"},"content":{"rendered":"

Pazartesi g\u00fcn\u00fc Pastebin\u2019e g\u00f6nderilen isimsiz bir postta 1300 ki\u015finin e-posta adresleri ve parolalar\u0131n\u0131n \u00e7al\u0131nd\u0131\u011f\u0131 iddia edildi. Postta ayr\u0131ca i\u00e7inde milyarlarca PayPal<\/strong> hesab\u0131n\u0131n oldu\u011fu iddia edilen bir dosyaya sponsorlu link de bulunmaktayd\u0131.<\/span><\/p>\n

Pastebin\u2019e g\u00f6nderilen postta 23.873.667.087 adet hacklenmi\u015f hesab\u0131n indirilebilece\u011fi s\u00f6ylenen bir Ad Fly linki var. Bahsi ge\u00e7en link ise \u00f6l\u00fc, \u00e7\u00fcnk\u00fc art\u0131k \u00f6yle bir domain ad\u0131 bulunmamakta.<\/span><\/p>\n

Listenin ger\u00e7ekli\u011fiyle ilgili ise soru i\u015faretleri var. Dosyadaki baz\u0131 e-posta adresleri incelendi\u011finde tam listenin Pastebin\u2019e iddia edilen PayPal hesaplar\u0131 olmaks\u0131z\u0131n 28 Kas\u0131m g\u00fcn\u00fc g\u00f6nderildi\u011fi g\u00f6r\u00fcld\u00fc. Liste takip eden g\u00fcnler i\u00e7inde iki kez daha g\u00f6nderildi ama g\u00f6nderiler Madridninitoz ve Fall9100 nickli iki farkl\u0131 hacker taraf\u0131ndan yap\u0131ld\u0131.<\/span><\/p>\n

Ayr\u0131ca, listeyi g\u00f6nderen hackerlar bunun ya rastgele bir dizi e-posta kullan\u0131c\u0131 ad\u0131 ve parolas\u0131 oldu\u011funu, ya ele ge\u00e7irilmi\u015f PayPal hesaplar\u0131 oldu\u011funu ya da IMVU tabanl\u0131 al\u0131\u015fveri\u015flerle ba\u011flant\u0131l\u0131 PayPal hesaplar\u0131 oldu\u011funu iddia etti.<\/span><\/p>\n

Bilmeyenler i\u00e7in, IMVU Second Life\u2019a benzeyen, kendi ekonomisi ve para birimi olan bir sanal d\u00fcnya.<\/span><\/p>\n

Dolay\u0131s\u0131yla listelerin do\u011frulu\u011fu bir hayli \u015f\u00fcpheli. IMVU veya PayPal\u2019\u0131n hacklendi\u011fiyle ilgili somut bir kan\u0131t da yok. \u00dcstelik, d\u00fcnyada \u015fu an 7 milyar insan\u0131n ya\u015fad\u0131\u011f\u0131 d\u00fc\u015f\u00fcn\u00fcl\u00fcrse 23 milyar hesap olduk\u00e7a u\u00e7uk bir rakam.<\/span><\/p>\n

Salted Hash olayla ilgili yorumlar\u0131n\u0131 almak i\u00e7in IMVU ve PayPal\u2019a ula\u015ft\u0131 ve ellerindeki isim listesini ellerindeki verilerle kar\u015f\u0131la\u015ft\u0131rabilmeleri ve ortada bir sorun olup olmad\u0131\u011f\u0131n\u0131 teyit edebilmeleri i\u00e7in \u015firketlerle payla\u015ft\u0131.<\/span><\/p>\n

\u015eimdilik, e\u011fer bu web sitelerini kullan\u0131yorsan\u0131z ve hesaplar\u0131n\u0131zla ilgili endi\u015feniz varsa ne olur ne olmaz diyerek parolan\u0131z\u0131 de\u011fi\u015ftirmenizde fayda var.<\/span><\/p>\n

Tekrar edelim, listenin ve di\u011fer iddialar\u0131n do\u011frulu\u011fu \u015f\u00fcpheli, ancak 1300 ki\u015finin hesap bilgilerinin \u015fu anda internete d\u00fc\u015fm\u00fc\u015f oldu\u011fu ger\u00e7e\u011fi var.<\/span><\/p>\n

Dola\u015f\u0131ma giren bu listedeki t\u00fcm hesaplar \u201cHave I Been Pwned?\u201d veritaban\u0131na girilmi\u015f durumda. Bu hesaplar art\u0131k i\u015faretli olarak g\u00f6z\u00fckecek.<\/span><\/p>\n

PayPal listeyi incelemeye ald\u0131klar\u0131n\u0131 ve yeni bilgiler toplamakta olduklar\u0131n\u0131 do\u011frulad\u0131. Di\u011fer yandan, b\u00fcnyeleri dahilinde bir g\u00fcvenlik ihlali oldu\u011funu hen\u00fcz teyit etmi\u015f de\u011filler, ayr\u0131ca milyarlarca hesab\u0131n \u00e7al\u0131nd\u0131\u011f\u0131 iddias\u0131na da \u015f\u00fcpheyle yakla\u015f\u0131yorlar \u00e7\u00fcnk\u00fc PayPal\u2019\u0131n yaln\u0131zca 173 milyon aktif \u00fcyesi var.<\/span><\/p>\n

\u00d6te yandan, daha fazla bilgiye ula\u015fmak isteyen Salted Hash bahsi ge\u00e7en listenin bir kopyas\u0131na yar\u0131 \u00f6zel bir forumda rastlad\u0131. Listeyi postalayan, \u201cm0rg4n\u201d nickli ki\u015fi ayr\u0131ca \u0130srail\u2019de ele ge\u00e7irilmi\u015f Facebook hesaplar\u0131, \u00e7e\u015fitli \u00e7al\u0131nt\u0131 kredi kart\u0131 hesap bilgileri ve Kosta Rika\u2019daki bir televizyon kanal\u0131na ait veritaban\u0131 konfig\u00fcrasyonunu payla\u015f\u0131yor.<\/span><\/p>\n

B\u00fct\u00fcn bunlar\u0131n PayPal ve IMVU h\u0131rs\u0131zl\u0131klar\u0131yla bir ilgisi olmayabilir. \u015eu an bu \u015firketlere ait bilgilerin \u00e7al\u0131nd\u0131\u011f\u0131na dair h\u0131rs\u0131zlar\u0131n kendi iddialar\u0131ndan ba\u015fka bir delil yok. Yine de payla\u015f\u0131lan verinin bir oltalama kampanyas\u0131n\u0131n bir par\u00e7as\u0131 oldu\u011fu, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m bula\u015fm\u0131\u015f bilgisayarlardan topland\u0131\u011f\u0131 veya her ikisinin birden ger\u00e7ekle\u015fti\u011fi \u00f6ne s\u00fcr\u00fclebilir.<\/span><\/p>\n

PayPal\u2019dan bir s\u00f6zc\u00fc, \u015firketin g\u00fcvenlik uzmanlar\u0131n\u0131n m\u00fc\u015fteri bilgilerinin \u00e7al\u0131nd\u0131\u011f\u0131na dair iddialar\u0131 i\u00e7eren raporlar\u0131 inceledi\u011fini ve bu raporlar\u0131n ger\u00e7e\u011fi yans\u0131tmad\u0131\u011f\u0131n\u0131 d\u00fc\u015f\u00fcnd\u00fcklerini s\u00f6yledi.<\/span><\/p>\n

Bunun yan\u0131 s\u0131ra, bu hesaplar\u0131n do\u011frudan PayPal\u2019la de\u011fil, PayPal\u2019la ba\u011flant\u0131l\u0131 \u00fc\u00e7\u00fcnc\u00fc bir partiyle ilgili olabilece\u011fine y\u00f6nelik sorular da g\u00fcndemde. PayPal\u2019\u0131n kendilerine iletilen listedeki hesaplar\u0131n aktif PayPal m\u00fc\u015fterilerine ait olup olmad\u0131\u011f\u0131 veya herhangi bir PayPal \u00fcr\u00fcn\u00fc veya hizmetiyle bir ba\u011flant\u0131s\u0131 olup olmad\u0131\u011f\u0131 sorular\u0131na verece\u011fi yan\u0131t bekleniyor.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Pazartesi g\u00fcn\u00fc Pastebin\u2019e g\u00f6nderilen isimsiz bir postta 1300 ki\u015finin e-posta adresleri ve parolalar\u0131n\u0131n \u00e7al\u0131nd\u0131\u011f\u0131 iddia edildi. Postta ayr\u0131ca i\u00e7inde milyarlarca PayPal hesab\u0131n\u0131n…<\/p>\n","protected":false},"author":3,"featured_media":5859,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-5858","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-haberler"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/5858","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=5858"}],"version-history":[{"count":3,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/5858\/revisions"}],"predecessor-version":[{"id":5873,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/5858\/revisions\/5873"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/5859"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=5858"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=5858"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=5858"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}