{"id":355,"title":"Unicorn Sosyal M\u00fchendisli\u011fin Sihirli Arac\u0131","content":"<p><iframe style=\"width: 776px; height: 435px;\" src=\"https:\/\/www.youtube.com\/embed\/5afj34PKCSo\" width=\"776\" height=\"435\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<h1>Sessiz Tehdit: Unicorn ve Office Makrolar\u0131yla Gelen Siber Sald\u0131r\u0131lar<\/h1>\n<p>Siber sald\u0131r\u0131lar\u0131n giderek daha <strong>basit ama daha etkili<\/strong> h&acirc;le geldi\u011fi bir d&ouml;nemdeyiz. Art\u0131k karma\u015f\u0131k exploit zincirlerine gerek kalmadan, yaln\u0131zca <strong>bir Microsoft Office belgesi<\/strong> &uuml;zerinden kurum a\u011flar\u0131na s\u0131zmak m&uuml;mk&uuml;n. Bu noktada &ouml;ne &ccedil;\u0131kan ara&ccedil;lardan biri de <strong>Unicorn<\/strong>.<\/p>\n<p>Unicorn, siber sald\u0131rganlar\u0131n g&uuml;&ccedil;l&uuml; <strong>PowerShell betiklerini<\/strong>, masum gibi g&ouml;r&uuml;nen bir <strong>Office makrosu<\/strong> i&ccedil;ine gizlemesine imk&acirc;n tan\u0131r. Kullan\u0131c\u0131 a&ccedil;\u0131s\u0131ndan bak\u0131ld\u0131\u011f\u0131nda ortada yaln\u0131zca bir Word ya da Excel dosyas\u0131 vard\u0131r. Ancak perde arkas\u0131nda, sistemin kontrol&uuml;n&uuml; ele ge&ccedil;irmeye y&ouml;nelik ciddi bir sald\u0131r\u0131 ba\u015flat\u0131l\u0131r.<\/p>\n<hr>\n<h2>Unicorn Nas\u0131l &Ccedil;al\u0131\u015f\u0131r?<\/h2>\n<p>Unicorn&rsquo;un &ccedil;al\u0131\u015fma mant\u0131\u011f\u0131 teknik olarak karma\u015f\u0131k de\u011fildir; ancak etkisi olduk&ccedil;a y\u0131k\u0131c\u0131d\u0131r:<\/p>\n<ol>\n<li>\n<p><strong>Oltalama (Phishing)<\/strong><br>Kurban, genellikle e-posta yoluyla g&ouml;nderilen bir Office dosyas\u0131n\u0131 a&ccedil;ar.<\/p>\n<\/li>\n<li>\n<p><strong>Makrolar\u0131n Etkinle\u015ftirilmesi<\/strong><br>&ldquo;\u0130&ccedil;eri\u011fi g&ouml;r&uuml;nt&uuml;lemek i&ccedil;in makrolar\u0131 etkinle\u015ftirin&rdquo; uyar\u0131s\u0131, sosyal m&uuml;hendisli\u011fin klasik ama h&acirc;l&acirc; en etkili y&ouml;ntemlerinden biridir.<\/p>\n<\/li>\n<li>\n<p><strong>Arka Planda PowerShell &Ccedil;al\u0131\u015ft\u0131r\u0131lmas\u0131<\/strong><br>Makro etkinle\u015ftirildi\u011fi anda, gizlenmi\u015f PowerShell komutlar\u0131 sessizce &ccedil;al\u0131\u015f\u0131r.<\/p>\n<\/li>\n<li>\n<p><strong>Kod Karma\u015f\u0131kla\u015ft\u0131rma (Obfuscation)<\/strong><br>Zararl\u0131 kod, imza tabanl\u0131 antivir&uuml;s sistemlerinden ka&ccedil;acak \u015fekilde karma\u015f\u0131kla\u015ft\u0131r\u0131lm\u0131\u015ft\u0131r.<\/p>\n<\/li>\n<\/ol>\n<p>Sonu&ccedil; olarak kullan\u0131c\u0131 hi&ccedil;bir \u015fey fark etmezken, sald\u0131rgan sistem &uuml;zerinde komut &ccedil;al\u0131\u015ft\u0131rabilir, arka kap\u0131 b\u0131rakabilir veya a\u011f i&ccedil;inde yatay hareket edebilir.<\/p>\n<hr>\n<h2>Neden Unicorn Bu Kadar Tehlikeli?<\/h2>\n<p>Unicorn&rsquo;u tehlikeli yapan \u015fey s\u0131f\u0131r g&uuml;n a&ccedil;\u0131klar\u0131 de\u011fil; <strong>insan davran\u0131\u015f\u0131n\u0131 hedef almas\u0131d\u0131r<\/strong>.<\/p>\n<ul>\n<li>\n<p>Office dosyalar\u0131 h&acirc;l&acirc; en &ccedil;ok g&uuml;venilen dosya t&uuml;rleri aras\u0131nda<\/p>\n<\/li>\n<li>\n<p>PowerShell, Windows&rsquo;un yerle\u015fik ve g&uuml;&ccedil;l&uuml; bir bile\u015feni<\/p>\n<\/li>\n<li>\n<p>Makrolar, bir&ccedil;ok kurumda h&acirc;l&acirc; aktif<\/p>\n<\/li>\n<\/ul>\n<p>Bu &uuml;&ccedil;l&uuml; bir araya geldi\u011finde, sald\u0131r\u0131 <strong>me\u015fru bir i\u015flem gibi<\/strong> g&ouml;r&uuml;n&uuml;r.<\/p>\n<hr>\n<h2>En Zay\u0131f Halka: \u0130nsan Fakt&ouml;r&uuml;<\/h2>\n<p>Teknik &ouml;nlemler ne kadar g&uuml;&ccedil;l&uuml; olursa olsun, sald\u0131r\u0131n\u0131n ilk ad\u0131m\u0131 genellikle ayn\u0131d\u0131r:<\/p>\n<blockquote>\n<p><strong>&ldquo;Kullan\u0131c\u0131 dosyay\u0131 a&ccedil;t\u0131.&rdquo;<\/strong><\/p>\n<\/blockquote>\n<p>Bu nedenle makalelerde ve ger&ccedil;ek vaka analizlerinde tekrar tekrar vurgulanan nokta \u015fudur:<br><strong>En zay\u0131f halka h&acirc;l&acirc; insand\u0131r.<\/strong><\/p>\n<hr>\n<h2>Unicorn ve Benzeri Sald\u0131r\u0131lara Kar\u015f\u0131 Al\u0131nabilecek &Ouml;nlemler<\/h2>\n<h3>1. Kullan\u0131c\u0131 Fark\u0131ndal\u0131k E\u011fitimi<\/h3>\n<ul>\n<li>\n<p>Phishing e-postalar\u0131n\u0131n nas\u0131l ay\u0131rt edilece\u011fi<\/p>\n<\/li>\n<li>\n<p>Makro uyar\u0131lar\u0131n\u0131n neden tehlikeli oldu\u011fu<\/p>\n<\/li>\n<li>\n<p>&ldquo;Acil&rdquo;, &ldquo;fatura&rdquo;, &ldquo;kargo&rdquo; gibi tetikleyici ba\u015fl\u0131klara kar\u015f\u0131 dikkat<\/p>\n<\/li>\n<\/ul>\n<p>E\u011fitim, tek seferlik de\u011fil <strong>s&uuml;rekli<\/strong> olmal\u0131d\u0131r.<\/p>\n<hr>\n<h3>&nbsp;2. Office Makrolar\u0131n\u0131 Devre D\u0131\u015f\u0131 B\u0131rakma<\/h3>\n<p>Kurumsal ortamlarda:<\/p>\n<ul>\n<li>\n<p>\u0130nternetten gelen Office belgelerinde makrolar\u0131 varsay\u0131lan olarak kapatmak<\/p>\n<\/li>\n<li>\n<p>Sadece imzal\u0131 ve g&uuml;venilir makrolara izin vermek<\/p>\n<\/li>\n<\/ul>\n<p>Bu ad\u0131m, Unicorn gibi ara&ccedil;lar\u0131n etkisini ciddi &ouml;l&ccedil;&uuml;de azalt\u0131r.<\/p>\n<hr>\n<h3>&nbsp;3. Uygulama Kontrol&uuml; (AppLocker vb.)<\/h3>\n<ul>\n<li>\n<p>Yetkisiz PowerShell &ccedil;al\u0131\u015ft\u0131r\u0131lmas\u0131n\u0131 k\u0131s\u0131tlamak<\/p>\n<\/li>\n<li>\n<p>Kullan\u0131c\u0131 ba\u011flam\u0131nda script &ccedil;al\u0131\u015ft\u0131rmay\u0131 s\u0131n\u0131rlamak<\/p>\n<\/li>\n<li>\n<p>Sadece onayl\u0131 uygulamalara izin vermek<\/p>\n<\/li>\n<\/ul>\n<p>Bu yakla\u015f\u0131m, sald\u0131r\u0131 ba\u015far\u0131l\u0131 olsa bile <strong>etki alan\u0131n\u0131 daralt\u0131r<\/strong>.<\/p>\n<hr>\n<h2>Teknoloji De\u011fil, Al\u0131\u015fkanl\u0131klar Hedefte<\/h2>\n<p>Unicorn &ouml;rne\u011fi bize \u015funu net \u015fekilde g&ouml;steriyor:<\/p>\n<blockquote>\n<p><strong>Siber sald\u0131r\u0131lar art\u0131k sistemi de\u011fil, kullan\u0131c\u0131y\u0131 hack&rsquo;liyor.<\/strong><\/p>\n<\/blockquote>\n<p>G&uuml;venlik;<\/p>\n<ul>\n<li>\n<p>Sadece firewall,<\/p>\n<\/li>\n<li>\n<p>Sadece antivir&uuml;s,<\/p>\n<\/li>\n<li>\n<p>Sadece EDR de\u011fildir.<\/p>\n<\/li>\n<\/ul>\n<p>Ger&ccedil;ek g&uuml;venlik, <strong>fark\u0131ndal\u0131k + politika + teknik kontrol<\/strong> birle\u015fimidir.<\/p>\n<p>Makrolar, PowerShell ve insan davran\u0131\u015f\u0131 bir araya geldi\u011finde olu\u015fan bu sessiz tehdidi ciddiye almak, bug&uuml;n al\u0131nabilecek en do\u011fru kararlardan biridir.<\/p>","excerpt":"","created_at":"2025-11-28 09:07:55","updated_at":"2026-09-07 20:39:28","category_id":15,"view_count":470,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-11-28 06:07:00","featured_image":"9f66b0a47cf70f8d4b8e4eafd7b09a07.png","slug":"unicorn-sosyal-muhendisligin-sihirli-araci","category_name":"Bilgi G\u00fcvenligi","category_slug":"bilgi-guvenligi","category_color":"#894376"}