WhatsApp sisteml\u0259rind\u0259 kritik z\u0259iflik qlobal qazanc \u2013 t\u0259xmini 3,5 milyard n\u0259f\u0259rin \u2013 profil m\u0259lumatlar\u0131n\u0131 v\u0259 telefon n\u00f6mr\u0259l\u0259rini idar\u0259 etm\u0259y\u0259 imkan verib. Bu k\u0259\u015ff Vyanada (Avstriya) universitetinin ekspertl\u0259ri il\u0259 apar\u0131lm\u0131\u015f t\u0259dqiqatda \u0259trafl\u0131 t\u0259svir edilmi\u015fdir. Aliml\u0259r poz\u011funlu\u011fu a\u015fkar edib v\u0259 onun 245 s\u0259viyy\u0259sind\u0259 miqyas\u0131n\u0131 t\u0259yin edib.<\/p>\n\n\n\n
T\u0259dqiqat g\u00f6st\u0259rib ki, z\u0259iflikd\u0259n istifad\u0259 \u00fc\u00e7\u00fcn istifad\u0259 hesablarla ba\u011fl\u0131 telefon n\u00f6mr\u0259l\u0259rin\u0259 deyil, h\u0259m d\u0259 profil \u015f\u0259kill\u0259rin\u0259 v\u0259 a\u00e7\u0131q statuslara daxil olmaq m\u00fcmk\u00fcnd\u00fcr. T\u0259tbiqin \u0259n b\u00f6y\u00fck bazarlar\u0131ndan biri Braziliya (t\u0259xmin\u0259n 206 milyon aktiv hesab) z\u0259r\u0259rli t\u0259sir\u0259 m\u0259ruz qalanlardan biri.<\/p>\n\n\n\n
Meta (WhatsApp-\u0131n ana \u015firk\u0259ti) problem bar\u0259d\u0259 m\u0259lumatland\u0131r\u0131l\u0131b v\u0259 2025-ci ilin sentyabr\u0131nda, t\u0259dqiqat\u00e7\u0131lar\u0131n s\u0131naq m\u0259rh\u0259l\u0259sind\u0259n bir ne\u00e7\u0259 ay sonra son d\u00fcz\u0259li\u015fl\u0259ri t\u0259tbiq edib. Kiber cinay\u0259tkarlar t\u0259r\u0259find\u0259n geni\u015f \u015f\u0259kild\u0259 istifad\u0259y\u0259 g\u00f6r\u0259 istifad\u0259y\u0259 he\u00e7 bir icaz\u0259 verilm\u0259s\u0259 d\u0259, t\u0259dqiqat kommunikasiya platformalar\u0131nda metadata idar\u0259etm\u0259si il\u0259 riskl\u0259r\u0259 n\u0259zar\u0259t edir.<\/p>\n\n\n\n
Aliml\u0259rin z\u0259ifliyinin miqyas\u0131n\u0131 \u00f6yr\u0259nm\u0259k \u00fc\u00e7\u00fcn istifad\u0259 edil\u0259n metod brute-force (brutal q\u00fcvv\u0259) metodu qurulub. Proses \u0259lav\u0259ki telefon n\u00f6mr\u0259l\u0259rinin standartlar\u0131na uy\u011fun r\u0259q\u0259msall\u0131qlar\u0131n avtomatik qurulmas\u0131ndan idi.<\/p>\n\n\n\n
Braziliyada s\u0259kkiz v\u0259 doqquz onlar\u0131n kombinasiyalar s\u0131naqdan ke\u00e7irildi ki, b\u00fct\u00fcn aktiv mobil telefon x\u0259tl\u0259ri m\u0259s\u0259l\u0259y\u0259 toxunsun. Bu yana\u015fma qlobal miqyasda on milyardlarla potensial n\u00f6mr\u0259nin ilkin m\u0259nb\u0259yi yaratma\u011fa imkan verib.<\/p>\n\n\n\n
Siyah\u0131 yarad\u0131lm\u0131\u015f sonra t\u0259dqiqat\u00e7\u0131lar WhatsApp serverin\u0259 \u0259lav\u0259 etm\u0259k \u00fc\u00e7\u00fcn alternativ proqram t\u0259minat\u0131ndan istifad\u0259 ed\u0259 bil\u0259rsiniz. Bu proqram saniy\u0259d\u0259 7000-\u0259 q\u0259d\u0259r n\u00f6mr\u0259ni yoxlayaraq, hans\u0131 n\u00f6mr\u0259l\u0259rin aktiv hesaba ba\u011fl\u0131 oldu\u011funu m\u00fc\u0259yy\u0259nl\u0259\u015fdirib.<\/p>\n\n\n\n
Platformada s\u00fcr\u0259tli s\u00fcr\u0259ti mexanizml\u0259r bu q\u0259d\u0259r s\u00fcr\u0259tli tam m\u0259lumat toplamaq imkan verib v\u0259 \u015f\u0259b\u0259k\u0259 infrastrukturunu ciddi planla\u015fd\u0131rma ilkin olaraq planla\u015fd\u0131rmaya k\u00f6m\u0259k edir.<\/p>\n\n\n\n
T\u0259dqiqat Braziliya bazar\u0131nda 206 milyon n\u0259f\u0259rin potensial risk alt\u0131nda oldu\u011funu g\u00f6st\u0259rib. Toplanm\u0131\u015f m\u0259lumatlar\u0131n t\u0259hlili n\u0259tic\u0259sind\u0259 hesablar\u0131n oldu\u011funu 81,4%-nin Android, qalan 18,6%-nin iPhone cihazlar\u0131nda ortaya qoyub. Bu r\u0259q\u0259ml\u0259r smartfon bazar\u0131n\u0131n paylanmas\u0131n\u0131 t\u0259sirli v\u0259 z\u0259ifl\u0259d\u0259n yaln\u0131z bir \u0259m\u0259liyyat sistemi il\u0259 m\u0259hdudla\u015fmad\u0131\u011f\u0131n\u0131, geni\u015f \u00fcz\u0259rind\u0259ki bazas\u0131n\u0131 d\u0259yi\u015fdirdiyini g\u00f6st\u0259rir.<\/p>\n\n\n\n
\u018fn m\u00fch\u00fcm m\u0259lumatlardan biri profil \u015f\u0259kill\u0259rinin tam g\u00f6r\u00fcnm\u0259 tezliyidir. Sor\u011fuya, braziliyal\u0131 hesablar\u0131n 61%-d\u0259 profil \u015f\u0259kill\u0259ri n\u00f6mr\u0259ni g\u00f6r\u0259n h\u0259r k\u0259s\u0259 \u2013 buna g\u00f6r\u0259 d\u0259 \u0259lav\u0259 etm\u0259s\u0259 bel\u0259 \u2013 g\u00f6r\u00fcn\u00fcrd\u00fc. \u015e\u0259kill\u0259rl\u0259 yana\u015f\u0131, m\u0259xfilik parametrl\u0259ri \u0259ld\u0259 edil\u0259n status m\u0259tnl\u0259ri d\u0259 \u0259ld\u0259 edilib. Bu m\u0259lumat telefon n\u00f6mr\u0259si il\u0259 birl\u0259\u015f\u0259n sosial m\u00fch\u0259ndislikl\u0259ri v\u0259 ya h\u0259d\u0259fl\u0259nmi\u015f fi\u015finq kampaniyalar\u0131 \u00fc\u00e7\u00fcn istifad\u0259 oluna bil\u0259r.<\/p>\n\n\n\n
T\u0259dqiqat\u00e7\u0131larla \u0259laq\u0259 2024-c\u00fc ilin sentyabr\u0131nda, ilk z\u0259iflik bildiri\u015fi g\u00f6nd\u0259rilir. Lakin ilkin yum\u015fald\u0131c\u0131 t\u0259dbirl\u0259r yaln\u0131z 2025-ci ilin avqustunda, avstriyal\u0131 komandan\u0131n v\u0259ziyy\u0259tinin ciddiliyini bildirdikd\u0259n sonra h\u0259yata ke\u00e7irilib.<\/p>\n\n\n\n
\u015eirk\u0259t i\u015f\u00e7il\u0259rinin Bug Bounty proqram\u0131n\u0131n vaxt\u0131 verdiyi t\u00f6hf\u0259ni tan\u0131y\u0131b v\u0259 t\u0259dqiqat toplanm\u0131\u015f b\u00fct\u00fcn m\u0259lumatlar\u0131n t\u0259sdiqi v\u0259 etik protokollar\u0131na uy\u011fun olaraq silindiyini silinib.<\/p>\n\n\n\n
Edil\u0259n d\u00fcz\u0259li\u015fl\u0259r t\u0259tbiqind\u0259 g\u00fcnd\u0259lik istifad\u0259sin\u0259 t\u0259sir g\u00f6st\u0259rm\u0259k n\u0259tic\u0259sind\u0259 \u0259ld\u0259 edil\u0259n m\u0259lumatlar\u0131n t\u0259mizl\u0259nm\u0259si alma\u011fa y\u00f6n\u0259lib. Meta yem\u0259k ki, s\u00f6hb\u0259tl\u0259rin m\u0259zmunu yuxar\u0131dan qorunub saxlama il\u0259 v\u0259 bu z\u0259iflikd\u0259n t\u0259sirl\u0259nm\u0259yib.<\/p>\n\n\n\n
\u0130lk bildiri\u015fd\u0259n tam h\u0259ll\u0259 q\u0259d\u0259r t\u0259xmin\u0259n bir il ke\u00e7ib. Vyanada universiteti il\u0259 2024-c\u00fc ilin sentyabr\u0131nda r\u0259smil\u0259\u015fdirilmi\u015f sistem v\u0259 mesajla\u015fma platformas\u0131n\u0131n saxlanmas\u0131 potensial siqnal\u0131 verilib.<\/p>\n\n\n\n
2024-c\u00fc ilin dekabr\u0131ndan 2025-ci ilin aprelin\u0259 q\u0259d\u0259r t\u0259dqiqat\u00e7\u0131lar bir ne\u00e7\u0259 d\u0259f\u0259 say\u011fac testl\u0259ri apararaq u\u011fursuzluqlar\u0131n miqyas\u0131n\u0131 m\u00fc\u0259yy\u0259n edib v\u0259 \u00f6l\u00e7\u00fcb.<\/p>\n\n\n\n
Meta k\u00fctl\u0259vi avtomatik axtar\u0131\u015flara qar\u015f\u0131 ilk m\u00fcdafi\u0259 mexanizml\u0259ri yaln\u0131z 2025-ci ilin avqustunda t\u0259tbiq edilir \u2013 ilk m\u0259lumatdan bir il sonra.<\/p>\n\n\n\n
N\u0259hay\u0259t, 2025-ci ilin sentyabr\u0131nda \u015firk\u0259tin profili v\u0259 \u015f\u0259kill\u0259ri tan\u0131mayanlar\u0131n bax\u0131\u015f\u0131na daha s\u0259rt \u015f\u0259kild\u0259 t\u0259tbiq olunan m\u00fcdafi\u0259ni g\u00fccl\u0259ndirib. B\u00fct\u00fcn qlobal m\u0259lumatlarla tam t\u0259dqiqat noyabr 2025-ci ild\u0259 d\u0259rc olunub v\u0259 z\u0259iflik n\u0259tic\u0259sind\u0259 m\u0259lum olub.<\/p>\n\n\n\n
Mesajlar\u0131n ba\u011flanmas\u0131 pozulmasa da, telefon n\u00f6mr\u0259si, profil \u015f\u0259kli, status v\u0259 aktivl\u0259\u015fdirm\u0259 kimi metadatalar\u0131n al\u0131nmas\u0131n\u0131n m\u0259xfilik \u00fc\u00e7\u00fcn ciddi risk yarad\u0131r. \u00d6z-\u00f6z\u00fcn\u0259 z\u0259r\u0259rsiz g\u00f6r\u00fcn\u0259n bu m\u0259lumat \u0259ld\u0259 edil\u0259n insanlar\u0131n \u0259trafl\u0131 profill\u0259ri \u00fc\u00e7\u00fcn istifad\u0259 oluna v\u0259 spam kampaniyalar\u0131, fi\u015finq h\u00fccumlar\u0131 v\u0259 dig\u0259r kiberh\u00fccumlar \u00fc\u00e7\u00fcn asan h\u0259d\u0259f\u0259 \u00e7evril\u0259 bil\u0259r.<\/p>\n\n\n\n
T\u0259dqiqat zaman\u0131 WhatsApp istifad\u0259sinin bir ne\u00e7\u0259 \u0259trafl\u0131 icmal\u0131 \u0259ld\u0259 edildi. Hindistan 749 milyon aktiv hesabla \u0259n b\u00f6y\u00fck bazar kimi se\u00e7ilib, ard\u0131nca \u0130ndoneziya 235 milyonla g\u0259lir.<\/p>\n\n\n\n
Braziliyada \u0259razi axtar\u0131\u015f\u0131 il\u0259 ba\u011fl\u0131 ara\u015fd\u0131rmalar apar\u0131l\u0131b v\u0259 \u00f6lk\u0259nin b\u00fct\u00fcn \u0259razisind\u0259 r\u0259q\u0259msal kombinasiyalar\u0131 edilib. Pik saatlarda server sor\u011fular\u0131n\u0131n h\u0259cmi saatda 100 milyon n\u00f6mr\u0259y\u0259 q\u0259d\u0259r.<\/p>\n\n\n\n
T\u0259hl\u00fck\u0259sizliyi art\u0131rmaq \u00fc\u00e7\u00fcn Metalamaql\u0131 giri\u015f modell\u0259rini daha effektiv a\u015fkar etm\u0259k \u00fc\u00e7\u00fcn daxili alqoritml\u0259rini t\u0259nziml\u0259m\u0259k. Bu, f\u0259aliyy\u0259t zaman dam\u011falar\u0131n\u0131n monitorinqini v\u0259 qur\u011fusunu a\u00e7\u0131q a\u00e7arlar\u0131na giri\u015f \u00fcsulunu d\u0259yi\u015fdirir ki, bu da g\u0259l\u0259c\u0259kd\u0259 k\u00fctl\u0259vi m\u0259lumat toplamaq onlara qar\u015f\u0131 \u0259lav\u0259 qoruma s\u0259viyy\u0259sini \u0259lav\u0259 edir.<\/p>","protected":false},"excerpt":{"rendered":"
WhatsApp sisteml\u0259rind\u0259 kritik z\u0259iflik qlobal qazanc \u2013 t\u0259xmini 3,5 milyard n\u0259f\u0259rin \u2013 profil m\u0259lumatlar\u0131n\u0131 v\u0259 telefon n\u00f6mr\u0259l\u0259rini idar\u0259 etm\u0259y\u0259 imkan verib. Bu k\u0259\u015ff Vyanada (Avstriya) universitetinin ekspertl\u0259ri il\u0259 apar\u0131lm\u0131\u015f t\u0259dqiqatda \u0259trafl\u0131 t\u0259svir edilmi\u015fdir. Aliml\u0259r poz\u011funlu\u011fu a\u015fkar edib v\u0259 onun 245 s\u0259viyy\u0259sind\u0259 miqyas\u0131n\u0131 t\u0259yin edib. T\u0259dqiqat g\u00f6st\u0259rib ki, z\u0259iflikd\u0259n istifad\u0259 etm\u0259k m\u0259qs\u0259d\u0259uy\u011fun hesablarla ba\u011fl\u0131 telefon n\u00f6mr\u0259l\u0259rin\u0259 deyil, [\u2026]<\/p>","protected":false},"author":1,"featured_media":6813,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[179,144],"class_list":["post-6808","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber-security","tag-cybersecurity","tag-sbk-hucumu"],"_links":{"self":[{"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/posts\/6808","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/comments?post=6808"}],"version-history":[{"count":1,"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/posts\/6808\/revisions"}],"predecessor-version":[{"id":6810,"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/posts\/6808\/revisions\/6810"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/media\/6813"}],"wp:attachment":[{"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/media?parent=6808"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/categories?post=6808"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/tags?post=6808"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}