{"id":2756,"date":"2026-10-06T10:00:00","date_gmt":"2026-10-06T07:00:00","guid":{"rendered":"https:\/\/narhost.com\/blog\/?p=2756"},"modified":"2026-09-26T23:17:16","modified_gmt":"2026-09-26T20:17:16","slug":"fidye-yazilimi-nedir","status":"publish","type":"post","link":"https:\/\/narhost.com\/blog\/fidye-yazilimi-nedir\/","title":{"rendered":"Fidye Yaz\u0131l\u0131m\u0131 Nedir, Web Sitesi ve Sunucu Nas\u0131l Korunur"},"content":{"rendered":"<div id=\"ai-ozet\" class=\"ai-box\">\n<p class=\"ai-box-title\">K\u0131saca \u00f6zet<\/p>\n<ul>\n<li>Fidye yaz\u0131l\u0131m\u0131, dosyalar\u0131n\u0131z\u0131 \u015fifreleyip a\u00e7mak i\u00e7in para isteyen, \u00e7o\u011fu zaman \u015fifrelemeden \u00f6nce verinizi de kopyalay\u0131p yay\u0131mlamakla tehdit eden zararl\u0131 yaz\u0131l\u0131md\u0131r.<\/li>\n<li>Sunuculara en s\u0131k d\u0131\u015far\u0131ya a\u00e7\u0131k RDP ve SSH portu, tahmin edilebilir parola, g\u00fcncellenmemi\u015f eklenti ya da panel yaz\u0131l\u0131m\u0131 \u00fczerinden bula\u015f\u0131r.<\/li>\n<li>Ayn\u0131 sunucuda duran ya da a\u011f s\u00fcr\u00fcc\u00fcs\u00fc olarak ba\u011fl\u0131 yedek, fidye yaz\u0131l\u0131m\u0131 ile birlikte \u015fifrelenir; kurtaran yedek sunucu d\u0131\u015f\u0131nda, \u00e7evrimd\u0131\u015f\u0131 veya de\u011fi\u015ftirilemez oland\u0131r.<\/li>\n<li>Europol ve Hollanda polisinin y\u00fcr\u00fctt\u00fc\u011f\u00fc No More Ransom projesi fidye \u00f6denmemesini \u00f6neriyor; \u00f6deme, anahtar\u0131n gelece\u011fini ya da verinin s\u0131zd\u0131r\u0131lmayaca\u011f\u0131n\u0131 garanti etmez.<\/li>\n<li>Payla\u015f\u0131ml\u0131 hostingte sunucu g\u00fcvenli\u011fini sa\u011flay\u0131c\u0131 y\u00f6netir; VPS ve VDS&#8217;te root sizde oldu\u011fu i\u00e7in yama, g\u00fcvenlik duvar\u0131 ve yedek plan\u0131 da sizin i\u015finizdir.<\/li>\n<li>Sald\u0131r\u0131 fark edildi\u011finde ilk i\u015f a\u011f\u0131 kesmek ve kan\u0131t\u0131 korumakt\u0131r; sistemi silip yeniden kurmak, nereden girildi\u011fi anla\u015f\u0131lmadan yap\u0131l\u0131rsa sald\u0131rgan ayn\u0131 kap\u0131dan d\u00f6ner.<\/li>\n<\/ul>\n<\/div>\n<p>Sabah ofise geldiniz, payla\u015f\u0131lan klas\u00f6rdeki t\u00fcm dosyalar\u0131n uzant\u0131s\u0131 de\u011fi\u015fmi\u015f ve her klas\u00f6rde &#8220;dosyalar\u0131n\u0131z\u0131 geri almak i\u00e7in bize yaz\u0131n&#8221; ba\u015fl\u0131kl\u0131 bir metin duruyor. Ya da web sitenizin yerinde benzer bir not var ve veritaban\u0131 a\u00e7\u0131lm\u0131yor. Bu, bir ransomware sald\u0131r\u0131s\u0131n\u0131n tipik g\u00f6r\u00fcnt\u00fcs\u00fcd\u00fcr. Soru art\u0131k &#8220;kim yapt\u0131&#8221; de\u011fil, &#8220;hangi yede\u011fim sa\u011flam ve sald\u0131rgan nereden girdi&#8221; sorusudur. Bu iki sorunun cevab\u0131 sald\u0131r\u0131dan \u00f6nce haz\u0131rlanm\u0131\u015fsa kay\u0131p birka\u00e7 saatlik i\u015f olur; haz\u0131rlanmam\u0131\u015fsa i\u015fletmenin tamam\u0131n\u0131 durdurabilir.<\/p>\n<h2>Fidye Yaz\u0131l\u0131m\u0131 Nedir ve Nas\u0131l \u00c7al\u0131\u015f\u0131r<\/h2>\n<p>Fidye yaz\u0131l\u0131m\u0131 (ransomware), bir sisteme s\u0131zd\u0131ktan sonra dosyalar\u0131 g\u00fc\u00e7l\u00fc bir \u015fifrelemeyle kilitleyen ve \u00e7\u00f6zme anahtar\u0131 kar\u015f\u0131l\u0131\u011f\u0131nda \u00f6deme isteyen zararl\u0131 yaz\u0131l\u0131m t\u00fcr\u00fcd\u00fcr. \u015eifreleme matematiksel olarak sa\u011flamd\u0131r; anahtar olmadan dosyay\u0131 a\u00e7mak \u00e7o\u011fu durumda m\u00fcmk\u00fcn de\u011fildir. Kurtarma ihtimali ya sald\u0131rgan\u0131n hatas\u0131na, ya g\u00fcvenlik ara\u015ft\u0131rmac\u0131lar\u0131n\u0131n yay\u0131mlad\u0131\u011f\u0131 bir \u00e7\u00f6z\u00fcc\u00fcye ya da sizin yede\u011finize ba\u011fl\u0131d\u0131r.<\/p>\n<p>Son y\u0131llarda sald\u0131r\u0131lar iki a\u015famal\u0131 h\u00e2le geldi. Sald\u0131rgan \u00f6nce veriyi kendi sunucusuna kopyalar, ard\u0131ndan \u015fifreler. Yedekten d\u00f6nen i\u015fletmeye bu kez &#8220;\u00f6demezseniz m\u00fc\u015fteri verinizi yay\u0131mlar\u0131z&#8221; bask\u0131s\u0131 yap\u0131l\u0131r. Bu y\u00fczden mesele yaln\u0131zca bir yedekleme sorunu de\u011fil, ayn\u0131 zamanda ki\u015fisel veri s\u0131z\u0131nt\u0131s\u0131 riskidir. M\u00fc\u015fteri bilgisi tutan bir sitede s\u0131z\u0131nt\u0131n\u0131n yasal bildirim y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc de do\u011fabilir.<\/p>\n<div class=\"highlight-box\">\n<p class=\"label\">Bilgi<\/p>\n<p>Bu t\u00fcr zararl\u0131lar \u00e7o\u011fu zaman sisteme girdi\u011fi g\u00fcn \u00e7al\u0131\u015fmaz. Sald\u0131rgan g\u00fcnlerce, bazen haftalarca a\u011fda dola\u015f\u0131r, yedeklerin yerini \u00f6\u011frenir ve \u00f6nce onlar\u0131 siler. \u015eifreleme en son ad\u0131md\u0131r. Bu y\u00fczden &#8220;yede\u011fim var&#8221; demek yetmez; yede\u011fin sald\u0131rgan\u0131n ula\u015famayaca\u011f\u0131 bir yerde olmas\u0131 gerekir.<\/p>\n<\/div>\n<h2>Sunucuya ve Web Sitesine Hangi Yollardan Bula\u015f\u0131r<\/h2>\n<p>Bula\u015fma yollar\u0131, \u00e7o\u011fu ki\u015finin sand\u0131\u011f\u0131 gibi karma\u015f\u0131k a\u00e7\u0131klardan de\u011fil, basit ihmallerden ge\u00e7er. A\u015fa\u011f\u0131daki tablo sunucu, web sitesi ve ofis bilgisayar\u0131 taraf\u0131nda en s\u0131k g\u00f6r\u00fclen giri\u015f noktalar\u0131n\u0131 ve her birinin kar\u015f\u0131s\u0131ndaki \u00f6nlemi \u00f6zetliyor.<\/p>\n<table>\n<thead>\n<tr>\n<th>Giri\u015f yolu<\/th>\n<th>Tipik hedef<\/th>\n<th>Nas\u0131l istismar edilir<\/th>\n<th>Temel \u00f6nlem<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u0130nternete a\u00e7\u0131k RDP<\/td>\n<td>Windows sunucu, VDS<\/td>\n<td>Otomatik parola denemeleri, s\u0131zd\u0131r\u0131lm\u0131\u015f kimlik bilgileri<\/td>\n<td>Varsay\u0131lan portu kapatmak, VPN veya IP k\u0131s\u0131tlamas\u0131, hesap kilitleme<\/td>\n<\/tr>\n<tr>\n<td>Zay\u0131f SSH veya panel parolas\u0131<\/td>\n<td>Linux VPS, cPanel ve Plesk hesaplar\u0131<\/td>\n<td>Kaba kuvvet ve parola listesi denemeleri<\/td>\n<td>Anahtarla giri\u015f, iki ad\u0131ml\u0131 do\u011frulama, benzersiz uzun parola<\/td>\n<\/tr>\n<tr>\n<td>G\u00fcncellenmemi\u015f yaz\u0131l\u0131m<\/td>\n<td>WordPress eklentisi, tema, panel, sunucu servisi<\/td>\n<td>Bilinen a\u00e7\u0131k \u00fczerinden dosya y\u00fckleme ve komut \u00e7al\u0131\u015ft\u0131rma<\/td>\n<td>D\u00fczenli g\u00fcncelleme, kullan\u0131lmayan eklentiyi silmek<\/td>\n<\/tr>\n<tr>\n<td>Oltalama e-postas\u0131<\/td>\n<td>Ofis bilgisayar\u0131<\/td>\n<td>Ekli dosya veya sahte giri\u015f sayfas\u0131<\/td>\n<td>Kullan\u0131c\u0131 e\u011fitimi, makro k\u0131s\u0131tlamas\u0131, e-posta filtresi<\/td>\n<\/tr>\n<tr>\n<td>A\u011f s\u00fcr\u00fcc\u00fcs\u00fcne ba\u011fl\u0131 bilgisayar<\/td>\n<td>Dosya sunucusu, NAS<\/td>\n<td>Tek bir bilgisayardan b\u00fct\u00fcn payla\u015f\u0131ma yay\u0131lma<\/td>\n<td>En az yetki, payla\u015f\u0131mlar\u0131 salt okunur ay\u0131rmak<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Windows sunucularda en s\u0131k rastlanan senaryo, uzak masa\u00fcst\u00fc portunun internete a\u00e7\u0131k b\u0131rak\u0131lmas\u0131 ve y\u00f6netici hesab\u0131na g\u00fcnlerce s\u00fcren parola denemesidir. Parola bir kez tutunca sald\u0131rgan sunucuya ger\u00e7ek bir kullan\u0131c\u0131 gibi girer; g\u00fcvenlik yaz\u0131l\u0131m\u0131n\u0131 kapat\u0131r ve i\u015fini yapar. Parola denemelerinin nas\u0131l i\u015fledi\u011fini <a href=\"https:\/\/narhost.com\/blog\/brute-force-nedir\/\" title=\"Brute Force Nedir \u2014 Narhost Blog\">brute force sald\u0131r\u0131s\u0131 yaz\u0131s\u0131nda<\/a>, iyi bir parolan\u0131n neden uzunluktan ge\u00e7ti\u011fini <a href=\"https:\/\/narhost.com\/blog\/guclu-sifre-neden-onemli\/\" title=\"G\u00fc\u00e7l\u00fc \u015eifre Neden \u00d6nemli \u2014 Narhost Blog\">g\u00fc\u00e7l\u00fc \u015fifre rehberinde<\/a> ayr\u0131nt\u0131l\u0131 bulabilirsiniz.<\/p>\n<div class=\"warn-box\">\n<p class=\"label\">Dikkat<\/p>\n<p>RDP portunu 3389&#8217;dan ba\u015fka bir numaraya ta\u015f\u0131mak otomatik taramalar\u0131n bir k\u0131sm\u0131n\u0131 azalt\u0131r ama tek ba\u015f\u0131na koruma de\u011fildir. G\u00fc\u00e7l\u00fc parola, hesap kilitleme ve m\u00fcmk\u00fcnse eri\u015fimi yaln\u0131z belirli IP adreslerine a\u00e7mak birlikte uygulanmal\u0131d\u0131r.<\/p>\n<\/div>\n<h2>Fidye Yaz\u0131l\u0131m\u0131 Bir Web Sitesini Nas\u0131l Etkiler<\/h2>\n<p>Payla\u015f\u0131ml\u0131 hostingteki bir web sitesinde sald\u0131r\u0131 genellikle masa\u00fcst\u00fcndekinden farkl\u0131 g\u00f6r\u00fcn\u00fcr. Sald\u0131rgan a\u00e7\u0131k bir eklentiden i\u00e7eri girer, site dosyalar\u0131n\u0131 \u015fifreler ya da veritaban\u0131 tablolar\u0131n\u0131 silip yerine fidye notu b\u0131rak\u0131r. Sunucunun kendisi de\u011fil, sizin hesab\u0131n\u0131zdaki dosyalar etkilenir. \u0130yi yap\u0131land\u0131r\u0131lm\u0131\u015f payla\u015f\u0131ml\u0131 sunucularda hesaplar birbirinden yal\u0131t\u0131ld\u0131\u011f\u0131 i\u00e7in kom\u015fu bir sitenin sorunu sizin dosyalar\u0131n\u0131za s\u0131\u00e7ramaz.<\/p>\n<p>VPS ve VDS&#8217;te tablo de\u011fi\u015fir. Root yetkisi ele ge\u00e7irilmi\u015fse sunucudaki b\u00fct\u00fcn siteler, veritabanlar\u0131 ve sunucu \u00fczerinde duran yedekler ayn\u0131 anda \u015fifrelenebilir. Y\u00f6netimsiz bir sunucuda bu riski y\u00f6netmek, i\u015fletim sistemini g\u00fcncel tutmak ve a\u00e7\u0131k portlar\u0131 kapatmak sunucu sahibinin sorumlulu\u011fundad\u0131r.<\/p>\n<div class=\"senaryo-block\">\n<p class=\"label\">\u00d6rnek senaryo<\/p>\n<p>Otuz ki\u015filik bir muhasebe b\u00fcrosu, m\u00fc\u015fteri dosyalar\u0131n\u0131 bir Windows VDS \u00fczerinde tutuyor ve personel evden uzak masa\u00fcst\u00fcyle ba\u011flan\u0131yor. Y\u00f6netici hesab\u0131n\u0131n parolas\u0131 ofisin ad\u0131 ile kurulu\u015f y\u0131l\u0131ndan olu\u015fuyor. Bir cuma gecesi sald\u0131rgan giri\u015f yap\u0131yor, sunucudaki g\u00f6lge kopyalar\u0131 ve ayn\u0131 diskte duran haftal\u0131k yedek klas\u00f6r\u00fcn\u00fc siliyor, ard\u0131ndan b\u00fct\u00fcn dosyalar\u0131 \u015fifreliyor. B\u00fcronun elinde yaln\u0131zca sunucu d\u0131\u015f\u0131na al\u0131nm\u0131\u015f, \u00fc\u00e7 hafta \u00f6nceki bir yedek var. \u00dc\u00e7 haftal\u0131k i\u015f yeniden giriliyor; o yedek de olmasayd\u0131 kay\u0131p tamamen olacakt\u0131.<\/p>\n<\/div>\n<figure class=\"nh-sema\"><img loading=\"lazy\" src=\"https:\/\/narhost.com\/blog\/wp-content\/uploads\/2026\/09\/fidye-yazilimi-nedir-sema-narhost.webp\" alt=\"fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131s\u0131na kar\u015f\u0131 a\u00e7\u0131k portlar\u0131 kapatma, g\u00fc\u00e7l\u00fc giri\u015f, g\u00fcncelleme ve sunucu d\u0131\u015f\u0131 yedek katmanlar\u0131n\u0131 g\u00f6steren \u015fema\" width=\"1200\" height=\"500\" loading=\"lazy\" decoding=\"async\"><figcaption>Riskini d\u00fc\u015f\u00fcren d\u00f6rt katman: kapal\u0131 portlar, g\u00fc\u00e7l\u00fc giri\u015f, g\u00fcncel yaz\u0131l\u0131m ve sald\u0131rgan\u0131n ula\u015famad\u0131\u011f\u0131 yedek.<\/figcaption><\/figure>\n<h2>Fidye Yaz\u0131l\u0131m\u0131na Kar\u015f\u0131 Yedek Nas\u0131l Kurgulan\u0131r<\/h2>\n<p>Fidye yaz\u0131l\u0131m\u0131na kar\u015f\u0131 en belirleyici \u00f6nlem, sald\u0131rgan\u0131n ula\u015famad\u0131\u011f\u0131 bir yedektir. Burada kilit kavram yede\u011fin nerede durdu\u011fudur. Ayn\u0131 diskte ya da ayn\u0131 sunucuda tutulan kopya, sunucuyu ele ge\u00e7iren ki\u015fi i\u00e7in yaln\u0131zca silinecek bir klas\u00f6rd\u00fcr. Dosya e\u015fitleme servisleri de yedek say\u0131lmaz; \u015fifrelenen dosya birka\u00e7 saniye i\u00e7inde e\u015fitlenen her cihaza ayn\u0131 \u015fekilde yaz\u0131l\u0131r.<\/p>\n<p>G\u00fcvenilir bir d\u00fczen i\u00e7in yayg\u0131n yakla\u015f\u0131m 3-2-1 kural\u0131d\u0131r: verinin \u00fc\u00e7 kopyas\u0131, iki farkl\u0131 ortam, en az bir kopya fiziksel olarak ba\u015fka bir yerde. Fidye yaz\u0131l\u0131m\u0131 d\u00f6neminde bu kurala bir madde daha eklendi: kopyalardan biri \u00e7evrimd\u0131\u015f\u0131 ya da de\u011fi\u015ftirilemez (silinmesi ve \u00fczerine yaz\u0131lmas\u0131 belirli bir s\u00fcre engellenmi\u015f) olmal\u0131d\u0131r. Nesne depolaman\u0131n s\u00fcr\u00fcm tutma ve kilitleme \u00f6zellikleri bu ama\u00e7la kullan\u0131labilir.<\/p>\n<p>Yede\u011fin geri y\u00fcklenebildi\u011fini de d\u00fczenli olarak denemek gerekir. Hi\u00e7 denenmemi\u015f bir yedek, sald\u0131r\u0131 g\u00fcn\u00fc bozuk \u00e7\u0131kt\u0131\u011f\u0131nda hi\u00e7bir i\u015fe yaramaz. Yedek s\u0131kl\u0131\u011f\u0131n\u0131 belirlerken sorulacak soru \u015fudur: ka\u00e7 g\u00fcnl\u00fck veriyi yeniden girmeyi g\u00f6ze alabilirsiniz? E-ticaret sitesi i\u00e7in bu s\u00fcre saatlerle, kurumsal tan\u0131t\u0131m sitesi i\u00e7in haftalarla \u00f6l\u00e7\u00fcl\u00fcr.<\/p>\n<h2>Fidye \u00d6demek Mant\u0131kl\u0131 m\u0131<\/h2>\n<p>Fidye \u00f6demek, dosyalar\u0131 geri getirmenin garantili bir yolu de\u011fildir. Avrupa Birli\u011fi polis te\u015fkilat\u0131 Europol ile Hollanda polisinin y\u00fcr\u00fctt\u00fc\u011f\u00fc <a href=\"https:\/\/www.nomoreransom.org\/tr\/index.html\" title=\"No More Ransom \u2014 Europol ve Hollanda polisi fidye yaz\u0131l\u0131m\u0131 projesi\" target=\"_blank\" rel=\"noopener\">No More Ransom projesi<\/a> genel tavsiye olarak fidyenin \u00f6denmemesini \u00f6neriyor; \u00f6deme, su\u00e7lulara bu y\u00f6ntemin i\u015fe yarad\u0131\u011f\u0131n\u0131 g\u00f6steriyor ve \u00e7\u00f6zme anahtar\u0131n\u0131n gelmemesi de m\u00fcmk\u00fcn. Ayn\u0131 sitede baz\u0131 zararl\u0131 yaz\u0131l\u0131m aileleri i\u00e7in \u00fccretsiz \u00e7\u00f6z\u00fcc\u00fcler ve \u015fifreli dosyan\u0131n hangi aileye ait oldu\u011funu tespit eden bir ara\u00e7 bulunuyor. \u00d6deme karar\u0131ndan \u00f6nce buraya bakmak gerekir.<\/p>\n<p>\u00d6deme yap\u0131lsa bile iki risk s\u00fcrer. Birincisi, anahtar gelse de \u015fifre \u00e7\u00f6z\u00fcc\u00fc yava\u015f veya hatal\u0131 \u00e7al\u0131\u015fabilir. \u0130kincisi, sald\u0131rgan veriyi zaten kopyalam\u0131\u015ft\u0131r ve yay\u0131mlamama s\u00f6z\u00fc tutulmak zorunda de\u011fildir. T\u00fcrkiye&#8217;de siber olaylar Ulusal Siber Olaylara M\u00fcdahale Merkezi <a href=\"https:\/\/www.usom.gov.tr\/\" title=\"USOM \u2014 Ulusal Siber Olaylara M\u00fcdahale Merkezi resm\u00ee sitesi\" target=\"_blank\" rel=\"noopener\">USOM<\/a> ve Emniyet Genel M\u00fcd\u00fcrl\u00fc\u011f\u00fc&#8217;n\u00fcn siber su\u00e7larla m\u00fccadele birimlerine bildirilebilir. Ki\u015fisel veri etkilendiyse KVKK kapsam\u0131ndaki bildirim y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc i\u00e7in hukuk dan\u0131\u015fman\u0131n\u0131zla g\u00f6r\u00fc\u015f\u00fcn.<\/p>\n<h2>Sald\u0131r\u0131 Fark Edildi\u011finde \u0130lk Saatlerde Ne Yap\u0131lmal\u0131<\/h2>\n<p>\u0130lk refleks sistemi hemen kapat\u0131p silmek olur; bu do\u011fru de\u011fildir. \u00d6nce etkilenen sunucunun ya da bilgisayar\u0131n a\u011f ba\u011flant\u0131s\u0131n\u0131 kesin ki \u015fifreleme ba\u015fka makinelere yay\u0131lmas\u0131n. Ard\u0131ndan parolalar\u0131, etkilenmemi\u015f bir cihazdan de\u011fi\u015ftirin. G\u00fcnl\u00fck kay\u0131tlar\u0131 ve fidye notunu saklay\u0131n; nereden girildi\u011fini bu kay\u0131tlar g\u00f6sterir. Windows sunucuda ilk bir saatte yap\u0131lacaklar\u0131n s\u0131ral\u0131 listesi <a href=\"https:\/\/narhost.com\/destek\/windows-sunucuda-saldiri-var-ne-yapmali\/\" title=\"Windows Sunucuda Sald\u0131r\u0131 \u015e\u00fcphesi \u2014 Narhost Destek Merkezi\">Windows sunucuda sald\u0131r\u0131 \u015f\u00fcphesi kart\u0131nda<\/a> duruyor.<\/p>\n<p>Giri\u015f noktas\u0131 kapat\u0131lmadan yedekten d\u00f6nmek, sald\u0131rgan\u0131n ayn\u0131 kap\u0131dan yeniden girmesine davetiye \u00e7\u0131kar\u0131r. Web sitesi taraf\u0131nda temizlik, hacklenen bir sitede izlenecek genel yol haritas\u0131yla ayn\u0131d\u0131r; <a href=\"https:\/\/narhost.com\/blog\/site-hacklenirse-ne-yapmali\/\" title=\"Site Hacklenirse Ne Yapmal\u0131 \u2014 Narhost Blog\">site hacklenirse ne yapmal\u0131 rehberi<\/a> bu s\u0131ray\u0131 ad\u0131m ad\u0131m veriyor.<\/p>\n<div class=\"success-box\">\n<p class=\"label\">Sonu\u00e7<\/p>\n<p>Fidye yaz\u0131l\u0131m\u0131 ile ba\u015f etmenin yolu sald\u0131r\u0131 g\u00fcn\u00fc de\u011fil, ondan aylar \u00f6nce kurulur. A\u00e7\u0131k portlar\u0131 kapatmak, benzersiz parola ve iki ad\u0131ml\u0131 do\u011frulama kullanmak, yaz\u0131l\u0131m\u0131 g\u00fcncel tutmak ve sunucu d\u0131\u015f\u0131nda, silinemeyen bir yedek bulundurmak riskin b\u00fcy\u00fck b\u00f6l\u00fcm\u00fcn\u00fc ortadan kald\u0131r\u0131r. Bunlar yerindeyse fidye notu bir felaket de\u011fil, bir geri y\u00fckleme i\u015fidir.<\/p>\n<\/div>\n<h2>Kontrol Listesi, Fidye Yaz\u0131l\u0131m\u0131na Haz\u0131r m\u0131s\u0131n\u0131z<\/h2>\n<ul class=\"kontrol-listesi\">\n<li>RDP, SSH ve veritaban\u0131 portlar\u0131ndan hangisinin internete a\u00e7\u0131k oldu\u011funu listeleyin, gereksiz olanlar\u0131 kapat\u0131n.<\/li>\n<li>Panel, sunucu ve e-posta hesaplar\u0131nda iki ad\u0131ml\u0131 do\u011frulamay\u0131 a\u00e7\u0131n.<\/li>\n<li>Y\u00f6netici parolalar\u0131n\u0131 benzersiz ve en az 16 karakter olacak \u015fekilde yenileyin.<\/li>\n<li>WordPress \u00e7ekirde\u011fi, eklentiler ve temalar i\u00e7in g\u00fcncelleme takvimi belirleyin, kullan\u0131lmayanlar\u0131 silin.<\/li>\n<li>En az bir yede\u011fi sunucu d\u0131\u015f\u0131nda ve silinemeyecek \u015fekilde tutun.<\/li>\n<li>Yedekten geri y\u00fcklemeyi \u00fc\u00e7 ayda bir deneyin ve s\u00fcresini not edin.<\/li>\n<li>Sald\u0131r\u0131 an\u0131nda kimin kimi arayaca\u011f\u0131n\u0131 ve hangi sistemin \u00f6nce kapat\u0131laca\u011f\u0131n\u0131 yaz\u0131l\u0131 h\u00e2le getirin.<\/li>\n<\/ul>\n<div class=\"kb-faq\">\n<h2>S\u0131k\u00e7a sorulan sorular<\/h2>\n<h3>Fidye yaz\u0131l\u0131m\u0131 bula\u015fan dosyalar yedek olmadan kurtar\u0131labilir mi?<\/h3>\n<p>Bazen. Baz\u0131 fidye yaz\u0131l\u0131m\u0131 aileleri i\u00e7in g\u00fcvenlik ara\u015ft\u0131rmac\u0131lar\u0131 ve kolluk birimleri \u00fccretsiz \u00e7\u00f6z\u00fcc\u00fcler yay\u0131ml\u0131yor; No More Ransom sitesi bunlar\u0131 topluyor ve \u015fifreli dosyay\u0131 y\u00fckleyerek t\u00fcr\u00fcn\u00fc tespit etmenize yard\u0131m ediyor. G\u00fcncel ve iyi yaz\u0131lm\u0131\u015f t\u00fcrlerde ise anahtar olmadan \u00e7\u00f6z\u00fcm \u00e7o\u011fu zaman m\u00fcmk\u00fcn de\u011fildir. Bu y\u00fczden as\u0131l g\u00fcvence sunucu d\u0131\u015f\u0131nda tutulan yedektir.<\/p>\n<h3>Payla\u015f\u0131ml\u0131 hostingteki site fidye yaz\u0131l\u0131m\u0131ndan etkilenir mi?<\/h3>\n<p>Etkilenebilir, ancak genellikle hesap d\u00fczeyinde kal\u0131r. Sald\u0131rgan g\u00fcncellenmemi\u015f bir eklenti ya da zay\u0131f bir panel parolas\u0131 \u00fczerinden sizin dosyalar\u0131n\u0131z\u0131 \u015fifreleyebilir veya veritaban\u0131n\u0131z\u0131 silebilir. Sunucunun i\u015fletim sistemi ve kom\u015fu hesaplar sa\u011flay\u0131c\u0131n\u0131n yal\u0131t\u0131m \u00f6nlemleriyle korunur. Sizin taraf\u0131n\u0131zda yap\u0131lacak i\u015f eklentileri g\u00fcncel tutmak, g\u00fc\u00e7l\u00fc parola kullanmak ve hesap yede\u011fini d\u00fczenli indirmektir.<\/p>\n<h3>Antivir\u00fcs yaz\u0131l\u0131m\u0131 fidye yaz\u0131l\u0131m\u0131n\u0131 durdurur mu?<\/h3>\n<p>Bilinen t\u00fcrleri \u00e7o\u011fu zaman yakalar ama tek ba\u015f\u0131na yeterli de\u011fildir. Sald\u0131rgan sunucuya y\u00f6netici olarak girdiyse g\u00fcvenlik yaz\u0131l\u0131m\u0131n\u0131 kapatabilir. Yeni ya da de\u011fi\u015ftirilmi\u015f t\u00fcrler imza tabanl\u0131 taramadan ge\u00e7ebilir. Antivir\u00fcs bir katmand\u0131r; a\u00e7\u0131k portlar\u0131n kapat\u0131lmas\u0131, iki ad\u0131ml\u0131 do\u011frulama, g\u00fcncelleme ve sunucu d\u0131\u015f\u0131 yedek ile birlikte anlam kazan\u0131r.<\/p>\n<h3>Bulut depolamadaki dosyalar fidye yaz\u0131l\u0131m\u0131ndan korunur mu?<\/h3>\n<p>E\u015fitleme yapan bulut klas\u00f6rleri korumaz, \u00e7\u00fcnk\u00fc bilgisayarda \u015fifrelenen dosya buluta da \u015fifreli h\u00e2liyle y\u00fcklenir. Koruma, bulut servisinin s\u00fcr\u00fcm ge\u00e7mi\u015fi tutmas\u0131 ve eski s\u00fcr\u00fcmlerin silinmesini engelleyen ayarlar\u0131n a\u00e7\u0131k olmas\u0131yla gelir. Yedek i\u00e7in kulland\u0131\u011f\u0131n\u0131z hesab\u0131n parolas\u0131n\u0131n ve iki ad\u0131ml\u0131 do\u011frulamas\u0131n\u0131n ayr\u0131 olmas\u0131 da gerekir.<\/p>\n<h3>Fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131s\u0131 KVKK kapsam\u0131nda bildirilmeli mi?<\/h3>\n<p>Sald\u0131r\u0131da ki\u015fisel veriler kanuni olmayan yollarla ele ge\u00e7irildiyse 6698 say\u0131l\u0131 Kanun&#8217;un 12. maddesinin be\u015finci f\u0131kras\u0131, veri sorumlusunun durumu en k\u0131sa s\u00fcrede ilgili ki\u015filere ve Ki\u015fisel Verileri Koruma Kurulu&#8217;na bildirmesini ister. Bildirimin kapsam\u0131 ve zamanlamas\u0131 olay\u0131n niteli\u011fine g\u00f6re de\u011ferlendirilir. G\u00fcncel mevzuat\u0131 ve hukuk dan\u0131\u015fman\u0131n\u0131z\u0131n g\u00f6r\u00fc\u015f\u00fcn\u00fc esas al\u0131n.<\/p>\n<\/div>\n<div class=\"cta-box\">\n<p class=\"label\">Narhost&#8217;ta<\/p>\n<p>Web hosting paketlerimizde \u00fccretsiz SSL, haftal\u0131k yedekleme ve JetBackup bulunan cPanel gelir; tam hesap yede\u011finizi indirip kendi sunucu d\u0131\u015f\u0131 kopyan\u0131z\u0131 da tutabilirsiniz.<\/p>\n<p><a class=\"cta-btn\" href=\"https:\/\/narhost.com\/web-hosting\" title=\"Narhost Web Hosting paketleri\">Web hosting paketlerini incele<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Fidye yaz\u0131l\u0131m\u0131, dosyalar\u0131n\u0131z\u0131 \u015fifreleyip a\u00e7mak i\u00e7in para isteyen, \u00e7o\u011fu zaman verinizi de kopyalay\u0131p yay\u0131mlamakla tehdit eden zararl\u0131 yaz\u0131l\u0131md\u0131r. Sunucu ve web sitesine hangi yollardan bula\u015ft\u0131\u011f\u0131 ve hangi yede\u011fin ger\u00e7ekten kurtard\u0131\u011f\u0131 bu rehberde.<\/p>\n","protected":false},"author":1,"featured_media":2757,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[],"class_list":["post-2756","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guvenlik"],"_links":{"self":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/2756","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/comments?post=2756"}],"version-history":[{"count":1,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/2756\/revisions"}],"predecessor-version":[{"id":2758,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/2756\/revisions\/2758"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/media\/2757"}],"wp:attachment":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/media?parent=2756"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/categories?post=2756"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/tags?post=2756"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}