{"id":16611,"date":"2026-09-10T11:11:00","date_gmt":"2026-09-10T08:11:00","guid":{"rendered":"https:\/\/fxknews.com\/?p=16611"},"modified":"2026-09-10T11:11:52","modified_gmt":"2026-09-10T08:11:52","slug":"trezor-kullanicilarina-siber-saldiri-uyarisi-sahte-guvenlik-e-postalari-dolasimda","status":"publish","type":"post","link":"https:\/\/fxknews.com\/?p=16611","title":{"rendered":"Trezor Kullan\u0131c\u0131lar\u0131na Siber Sald\u0131r\u0131 Uyar\u0131s\u0131: Sahte G\u00fcvenlik E-Postalar\u0131 Dola\u015f\u0131mda"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Bitcoin donan\u0131m c\u00fczdan\u0131 \u00fcreticisi Trezor, \u00fc\u00e7\u00fcnc\u00fc taraf e-posta sa\u011flay\u0131c\u0131s\u0131n\u0131n siber sald\u0131r\u0131ya u\u011frad\u0131\u011f\u0131n\u0131 ve sald\u0131rganlar\u0131n bu altyap\u0131y\u0131 kullanarak kullan\u0131c\u0131lara sahte g\u00fcvenlik uyar\u0131lar\u0131 g\u00f6nderdi\u011fini a\u00e7\u0131klad\u0131.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u015eirket, \u00f6zellikle <strong>\u201cCritical Security Alert: STM32 Entropy Vulnerability\u201d<\/strong> ba\u015fl\u0131\u011f\u0131yla g\u00f6nderilen e-postalar\u0131n Trezor taraf\u0131ndan haz\u0131rlanmad\u0131\u011f\u0131n\u0131 ve kimlik av\u0131 giri\u015fimi oldu\u011funu belirterek kullan\u0131c\u0131lar\u0131 uyard\u0131.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Trezor ayr\u0131ca sald\u0131r\u0131da kullan\u0131lan alan ad\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rakt\u0131\u011f\u0131n\u0131 ve sald\u0131rganlar\u0131n e-posta altyap\u0131s\u0131na nas\u0131l eri\u015fim sa\u011flad\u0131\u011f\u0131n\u0131 ara\u015ft\u0131rd\u0131\u011f\u0131n\u0131 duyurdu.<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_87_1 counter-hierarchy ez-toc-counter ez-toc-transparent ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title ez-toc-toggle\" style=\"cursor:pointer\">\u0130\u00e7indekiler<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/fxknews.com\/?p=16611\/#Sahte_E-postada_Ne_Iddia_Edildi\" >Sahte E-postada Ne \u0130ddia Edildi?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/fxknews.com\/?p=16611\/#Asil_Risk_Donanim_Degil_Kimlik_Avi\" >As\u0131l Risk Donan\u0131m De\u011fil, Kimlik Av\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/fxknews.com\/?p=16611\/#BitBox_Kullanicilari_da_Hedef_Alindi\" >BitBox Kullan\u0131c\u0131lar\u0131 da Hedef Al\u0131nd\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/fxknews.com\/?p=16611\/#Coldcard_Acigi_Firsata_Cevrildi\" >Coldcard A\u00e7\u0131\u011f\u0131 F\u0131rsata \u00c7evrildi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/fxknews.com\/?p=16611\/#Trezor_Daha_Once_de_Veri_Sizintisi_Uyarisi_Yapmisti\" >Trezor Daha \u00d6nce de Veri S\u0131z\u0131nt\u0131s\u0131 Uyar\u0131s\u0131 Yapm\u0131\u015ft\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/fxknews.com\/?p=16611\/#Kullanicilarin_En_Buyuk_Hatasi_Ne_Olabilir\" >Kullan\u0131c\u0131lar\u0131n En B\u00fcy\u00fck Hatas\u0131 Ne Olabilir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/fxknews.com\/?p=16611\/#Kripto_Guvenliginde_Yeni_Cephe\" >Kripto G\u00fcvenli\u011finde Yeni Cephe<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Sahte_E-postada_Ne_Iddia_Edildi\"><\/span>Sahte E-postada Ne \u0130ddia Edildi?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Sald\u0131rganlar\u0131n g\u00f6nderdi\u011fi sahte mesajda, Trezor cihazlar\u0131nda kullan\u0131lan <strong>STM32 mikrodenetleyicilerinde kritik bir donan\u0131m g\u00fcvenlik a\u00e7\u0131\u011f\u0131<\/strong> bulundu\u011fu \u00f6ne s\u00fcr\u00fcld\u00fc.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">E-postada, s\u00f6z konusu a\u00e7\u0131\u011f\u0131n baz\u0131 cihazlarda kurtarma ifadelerinin olu\u015fturulmas\u0131 s\u0131ras\u0131nda kullan\u0131lan rastgelelik seviyesini zay\u0131flatabilece\u011fi ve kullan\u0131c\u0131lar\u0131n varl\u0131klar\u0131n\u0131 riske atabilece\u011fi iddia edildi.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu y\u00f6ntemle kullan\u0131c\u0131lar\u0131n endi\u015felendirilerek sahte ba\u011flant\u0131lara y\u00f6nlendirilmesinin ama\u00e7land\u0131\u011f\u0131 de\u011ferlendiriliyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Trezor ise s\u00f6z konusu e-postan\u0131n ger\u00e7ek olmad\u0131\u011f\u0131n\u0131 belirterek kullan\u0131c\u0131lar\u0131ndan herhangi bir ba\u011flant\u0131ya t\u0131klamamalar\u0131n\u0131 istedi.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Asil_Risk_Donanim_Degil_Kimlik_Avi\"><\/span>As\u0131l Risk Donan\u0131m De\u011fil, Kimlik Av\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Buradaki kritik nokta, olay\u0131n do\u011frudan Trezor cihazlar\u0131n\u0131n ele ge\u00e7irilmesi anlam\u0131na gelmemesi.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sald\u0131r\u0131n\u0131n merkezinde \u015firketin kulland\u0131\u011f\u0131 <strong>\u00fc\u00e7\u00fcnc\u00fc taraf e-posta altyap\u0131s\u0131n\u0131n<\/strong> bulunmas\u0131, kullan\u0131c\u0131lar a\u00e7\u0131s\u0131ndan as\u0131l tehdidin kimlik av\u0131 ve sosyal m\u00fchendislik oldu\u011funu g\u00f6steriyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sald\u0131rganlar\u0131n amac\u0131, ger\u00e7ek bir g\u00fcvenlik problemi ya\u015fan\u0131yormu\u015f izlenimi olu\u015fturarak kullan\u0131c\u0131lar\u0131 i\u015flem yapmaya ikna etmek ve nihai olarak kurtarma ifadelerine ula\u015fmak.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kripto c\u00fczdanlarda kurtarma ifadesinin ele ge\u00e7irilmesi halinde sald\u0131rganlar, cihaz\u0131n kendisine fiziksel olarak eri\u015fmeden de kullan\u0131c\u0131 varl\u0131klar\u0131n\u0131 kontrol edebilir.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"BitBox_Kullanicilari_da_Hedef_Alindi\"><\/span>BitBox Kullan\u0131c\u0131lar\u0131 da Hedef Al\u0131nd\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Olay\u0131n yaln\u0131zca Trezor ile s\u0131n\u0131rl\u0131 kalmam\u0131\u015f olabilece\u011fine ili\u015fkin de\u011ferlendirmeler de g\u00fcndeme geldi.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Casa&#8217;n\u0131n kurucu orta\u011f\u0131 ve CEO&#8217;su Nick Neuman, BitBox kullan\u0131c\u0131lar\u0131n\u0131n da benzer i\u00e7erikte mesajlar ald\u0131\u011f\u0131n\u0131 belirtti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bitcoin g\u00fcvenlik ara\u015ft\u0131rmac\u0131s\u0131 Jameson Lopp ise Trezor ve BitBox taraf\u0131ndan kullan\u0131lan e-posta sa\u011flay\u0131c\u0131lar\u0131n\u0131n sald\u0131rganlar taraf\u0131ndan hedef al\u0131nm\u0131\u015f olabilece\u011fi ihtimaline dikkat \u00e7ekti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu ihtimal do\u011fruysa, sald\u0131r\u0131n\u0131n tek bir donan\u0131m c\u00fczdan\u0131 \u00fcreticisine kar\u015f\u0131 d\u00fczenlenen bir kampanyadan \u00e7ok, <strong>kripto \u015firketlerinin kulland\u0131\u011f\u0131 e-posta ve pazarlama altyap\u0131lar\u0131n\u0131 hedefleyen daha geni\u015f bir sald\u0131r\u0131<\/strong> olabilece\u011fi anlam\u0131na geliyor.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Coldcard_Acigi_Firsata_Cevrildi\"><\/span>Coldcard A\u00e7\u0131\u011f\u0131 F\u0131rsata \u00c7evrildi<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Sald\u0131r\u0131n\u0131n zamanlamas\u0131 da dikkat \u00e7ekiyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ge\u00e7ti\u011fimiz d\u00f6nemde Coldcard donan\u0131m c\u00fczdanlar\u0131n\u0131 etkileyen g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n g\u00fcndeme gelmesinin ard\u0131ndan, kripto kullan\u0131c\u0131lar\u0131n\u0131n donan\u0131m c\u00fczdanlar\u0131na ili\u015fkin g\u00fcvenlik endi\u015feleri artm\u0131\u015ft\u0131.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sald\u0131rganlar\u0131n da bu ortam\u0131 kullanarak ger\u00e7ek bir g\u00fcvenlik tart\u0131\u015fmas\u0131n\u0131 sahte bir uyar\u0131ya d\u00f6n\u00fc\u015ft\u00fcrd\u00fc\u011f\u00fc g\u00f6r\u00fcl\u00fcyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Buradaki temel y\u00f6ntem olduk\u00e7a basit: Ger\u00e7ek bir g\u00fcvenlik konusunu referans g\u00f6ster, kullan\u0131c\u0131da aciliyet duygusu olu\u015ftur ve onu sahte bir ba\u011flant\u0131ya y\u00f6nlendir.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Trezor_Daha_Once_de_Veri_Sizintisi_Uyarisi_Yapmisti\"><\/span>Trezor Daha \u00d6nce de Veri S\u0131z\u0131nt\u0131s\u0131 Uyar\u0131s\u0131 Yapm\u0131\u015ft\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Trezor\u2019un g\u00fcvenlik konusunda kar\u015f\u0131la\u015ft\u0131\u011f\u0131 tek risk bu de\u011fil.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A\u011fustos ay\u0131nda \u015firket, lojistik hizmet sa\u011flay\u0131c\u0131s\u0131 ShipMonk\u2019ta ya\u015fanan bir g\u00fcvenlik ihlalinin sonucunda <strong>80.689 m\u00fc\u015fteriye ait verilerin<\/strong> a\u00e7\u0131\u011fa \u00e7\u0131kt\u0131\u011f\u0131n\u0131 bildirmi\u015fti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">S\u0131zd\u0131r\u0131lan bilgiler aras\u0131nda isim, e-posta adresi, telefon numaras\u0131 ve g\u00f6nderim adresleri gibi verilerin bulundu\u011fu belirtilmi\u015fti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu t\u00fcr bilgilerin tek ba\u015f\u0131na c\u00fczdan\u0131 ele ge\u00e7irmesi m\u00fcmk\u00fcn olmasa da sald\u0131rganlar\u0131n daha hedefli ve inand\u0131r\u0131c\u0131 kimlik av\u0131 mesajlar\u0131 haz\u0131rlamas\u0131n\u0131 kolayla\u015ft\u0131rabilece\u011fi konusunda uyar\u0131lar yap\u0131lm\u0131\u015ft\u0131.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Kullanicilarin_En_Buyuk_Hatasi_Ne_Olabilir\"><\/span>Kullan\u0131c\u0131lar\u0131n En B\u00fcy\u00fck Hatas\u0131 Ne Olabilir?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Donan\u0131m c\u00fczdan kullan\u0131c\u0131lar\u0131 a\u00e7\u0131s\u0131ndan en kritik g\u00fcvenlik kural\u0131 de\u011fi\u015fmiyor:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Kurtarma ifadesi hi\u00e7bir ko\u015fulda bir web sitesine, e-posta formuna veya ba\u015fka bir ki\u015fiye verilmemeli.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bir mesaj\u0131n resmi \u015firket adresinden geliyor gibi g\u00f6r\u00fcnmesi de tek ba\u015f\u0131na yeterli de\u011fil. Sald\u0131rganlar, \u00fc\u00e7\u00fcnc\u00fc taraf e-posta sistemlerini ele ge\u00e7irerek son derece ger\u00e7ek\u00e7i mesajlar haz\u0131rlayabiliyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00d6zellikle kullan\u0131c\u0131dan kurtarma ifadesini yeniden girmesini, do\u011frulamas\u0131n\u0131 veya bir ba\u011flant\u0131 \u00fczerinden c\u00fczdan\u0131n\u0131 kurtarmas\u0131n\u0131 isteyen mesajlar ciddi bir tehdit i\u015fareti.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Kripto_Guvenliginde_Yeni_Cephe\"><\/span>Kripto G\u00fcvenli\u011finde Yeni Cephe<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Trezor olay\u0131, kripto sekt\u00f6r\u00fcndeki g\u00fcvenlik risklerinin yaln\u0131zca blokzincir veya donan\u0131m a\u00e7\u0131klar\u0131ndan ibaret olmad\u0131\u011f\u0131n\u0131 g\u00f6steriyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">E-posta servisleri, lojistik \u015firketleri ve di\u011fer \u00fc\u00e7\u00fcnc\u00fc taraf hizmet sa\u011flay\u0131c\u0131lar\u0131 da sald\u0131rganlar\u0131n hedefi haline geliyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu nedenle g\u00fcvenlik yakla\u015f\u0131m\u0131n\u0131n yaln\u0131zca c\u00fczdan cihaz\u0131na odaklanmas\u0131 yeterli olmayabilir. <strong>Kullan\u0131c\u0131 verilerinin tutuldu\u011fu sistemlerden \u015firketlerin ileti\u015fim altyap\u0131lar\u0131na kadar t\u00fcm zincirin g\u00fcvenli\u011fi kritik hale geliyor.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Trezor vakas\u0131 ayr\u0131ca \u00f6nemli bir ger\u00e7e\u011fi ortaya koyuyor: <strong>Kripto kullan\u0131c\u0131lar\u0131n\u0131 hedefleyen sald\u0131r\u0131larda teknik a\u00e7\u0131k kadar korku ve aciliyet duygusu yaratmak da g\u00fc\u00e7l\u00fc bir silah haline geldi.<\/strong><\/p>\n<p style=\"border-left:4px solid #3b82f6;padding:14px 16px;border-radius:6px;color:#cbd5e1;font-weight:normal;line-height:1.6\">\ud83d\udca1 <strong style=\"color:#93c5fd\">Bilgi Notu:<\/strong> Kimlik av\u0131, sahte e-posta veya mesajlarla sizi kand\u0131r\u0131p \u015fifre, tek kullan\u0131ml\u0131k kod ya da kurtarma ifadesi gibi bilgileri ele ge\u00e7irme giri\u015fimidir. Sosyal m\u00fchendislik ise teknik bir a\u00e7\u0131k bulmadan, insanlar\u0131 korku ve acele hissiyle yanl\u0131\u015f i\u015flem yapmaya y\u00f6nlendirme y\u00f6ntemidir.<\/p>","protected":false},"excerpt":{"rendered":"<p>Bitcoin donan\u0131m c\u00fczdan\u0131 \u00fcreticisi Trezor, \u00fc\u00e7\u00fcnc\u00fc taraf e-posta sa\u011flay\u0131c\u0131s\u0131n\u0131n siber sald\u0131r\u0131ya u\u011frad\u0131\u011f\u0131n\u0131 ve sald\u0131rganlar\u0131n bu altyap\u0131y\u0131 kullanarak kullan\u0131c\u0131lara sahte g\u00fcvenlik<\/p>\n","protected":false},"author":1,"featured_media":16612,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","fxk_merge_backup":"","footnotes":""},"categories":[7],"tags":[23,24],"class_list":["post-16611","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kripto-paralar","tag-bitcoin","tag-kripto-para"],"_links":{"self":[{"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/posts\/16611","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=16611"}],"version-history":[{"count":2,"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/posts\/16611\/revisions"}],"predecessor-version":[{"id":16676,"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/posts\/16611\/revisions\/16676"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/media\/16612"}],"wp:attachment":[{"href":"https:\/\/fxknews.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=16611"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=16611"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=16611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}