{"id":4299,"date":"2026-05-22T14:31:20","date_gmt":"2026-05-22T11:31:20","guid":{"rendered":"https:\/\/www.gamermarkt.com\/blog\/?p=4299"},"modified":"2026-05-22T14:31:26","modified_gmt":"2026-05-22T11:31:26","slug":"psn-hesaplari-2fa-guvenlik-acigi-sosyal-muhendislik","status":"publish","type":"post","link":"https:\/\/www.gamermarkt.com\/blog\/tr\/psn-hesaplari-2fa-guvenlik-acigi-sosyal-muhendislik\/","title":{"rendered":"PSN Hesaplar\u0131 2FA&#8217;ya Ra\u011fmen Nas\u0131l \u00c7al\u0131n\u0131yor? Sony&#8217;nin Kritik G\u00fcvenlik A\u00e7\u0131\u011f\u0131"},"content":{"rendered":"\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">Sony&#8217;nin m\u00fc\u015fteri hizmetleri s\u00fcre\u00e7lerindeki zafiyet, sald\u0131rganlar\u0131n yaln\u0131zca bir eski i\u015flem numaras\u0131yla PSN hesaplar\u0131n\u0131 ele ge\u00e7irmesine olanak tan\u0131yor. \u0130ki ad\u0131ml\u0131 do\u011frulama bile bu a\u00e7\u0131\u011f\u0131 kapatam\u0131yor.<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">PlayStation Network&#8217;te milyonlarca oyuncuyu do\u011frudan etkileyen ciddi bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131 g\u00fcn y\u00fcz\u00fcne \u00e7\u0131kt\u0131. Sald\u0131rganlar, g\u00fc\u00e7l\u00fc \u015fifre ve iki ad\u0131ml\u0131 do\u011frulama (2FA) korumas\u0131na ra\u011fmen PSN hesaplar\u0131n\u0131 ele ge\u00e7irebiliyor. Sorunun kayna\u011f\u0131 yaz\u0131l\u0131msal bir hata de\u011fil: Sony&#8217;nin m\u00fc\u015fteri hizmetleri politikalar\u0131ndaki kimlik do\u011frulama zafiyeti. Eski IGN edit\u00f6r\u00fc ve Sacred Symbols podcast sunucusu Colin Moriarty, 18 May\u0131s 2026&#8217;da hesab\u0131n\u0131n bu y\u00f6ntemle \u00e7al\u0131nd\u0131\u011f\u0131n\u0131 a\u00e7\u0131klad\u0131.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sald\u0131rganlar PSN Hesaplar\u0131n\u0131 Nas\u0131l Ele Ge\u00e7iriyor?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Bu g\u00fcvenlik a\u00e7\u0131\u011f\u0131 klasik bir yaz\u0131l\u0131m s\u0131z\u0131nt\u0131s\u0131 ya da phishing y\u00f6ntemi de\u011fil. Sald\u0131rganlar &#8220;sosyal m\u00fchendislik&#8221; ad\u0131 verilen bir teknik kullan\u0131yor. \u0130htiya\u00e7 duyduklar\u0131 bilgi son derece basit: hedefin PSN kullan\u0131c\u0131 ad\u0131 (PSN ID) ve ge\u00e7mi\u015fte yap\u0131lm\u0131\u015f herhangi bir sat\u0131n alma i\u015flemine ait sipari\u015f numaras\u0131. Bu kadar\u0131, Sony m\u00fc\u015fteri hizmetlerini ikna etmek i\u00e7in yeterli oluyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sald\u0131rgan, bu bilgilerle Sony destek hatt\u0131n\u0131 veya \u00e7evrimi\u00e7i asistan\u0131 arayarak hesab\u0131n kendisine ait oldu\u011funu iddia ediyor. Destek ekibi, sipari\u015f numaras\u0131n\u0131 yeterli kan\u0131t olarak kabul edip hesab\u0131n kay\u0131tl\u0131 e-posta adresini de\u011fi\u015ftiriyor ve 2FA korumas\u0131n\u0131 kapat\u0131yor. Sony&#8217;nin chatbot&#8217;u bu i\u015flem s\u0131ras\u0131nda &#8220;Hesab\u0131n\u0131zdaki ekstra g\u00fcvenlik \u00f6nlemlerini devre d\u0131\u015f\u0131 b\u0131rakmam\u0131 ister misiniz?&#8221; diye soruyor ve onay verildi\u011finde passkey dahil t\u00fcm korumalar kald\u0131r\u0131l\u0131yor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0130\u015fin kritik noktas\u0131 \u015fu: destek ekibi bu s\u00fcre\u00e7te kullan\u0131c\u0131n\u0131n tam ad\u0131n\u0131, do\u011fum tarihini ya da g\u00fcvenlik sorusunun cevab\u0131n\u0131 sormuyor. Yaln\u0131zca bir eski i\u015flem numaras\u0131 veya kredi kart\u0131n\u0131n son d\u00f6rt hanesi gibi kolayca elde edilebilir veriler &#8220;sahiplik kan\u0131t\u0131&#8221; olarak kabul ediliyor.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Colin Moriarty Olay\u0131: Uyar\u0131lmas\u0131na Ra\u011fmen \u00c7al\u0131nd\u0131<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Colin Moriarty, olaydan iki g\u00fcn \u00f6nce daha \u00f6nce hacklenen ba\u015fka bir kullan\u0131c\u0131dan uyar\u0131 mesaj\u0131 ald\u0131. Mesajda &#8220;Bilgilerine sahipler, bug\u00fcn hesab\u0131n\u0131 alacaklar&#8221; deniyordu. Moriarty hemen \u015fifresini de\u011fi\u015ftirdi ve t\u00fcm \u00f6nlemlerini ald\u0131. Ancak saatler sonra e-posta kutusu aniden y\u00fczlerce spam mesajla doldu. Bu taktik, Sony&#8217;den gelen &#8220;E-posta adresiniz de\u011fi\u015ftirildi&#8221; bildirimini g\u00f6zden ka\u00e7\u0131rmas\u0131 i\u00e7in kullan\u0131ld\u0131.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ard\u0131ndan 2FA&#8217;n\u0131n kapat\u0131ld\u0131\u011f\u0131na dair bir SMS geldi ve hesap tamamen el de\u011fi\u015ftirdi. Sald\u0131rganlar, \u00e7al\u0131nan hesap \u00fczerinden Moriarty&#8217;nin podcast orta\u011f\u0131 Dustin Furman&#8217;a &#8220;S\u0131rada sen vars\u0131n&#8221; mesaj\u0131 g\u00f6nderdi. Sony m\u00fc\u015fteri hizmetleri \u00e7\u00f6z\u00fcm\u00fcn \u00fc\u00e7 haftay\u0131 bulabilece\u011fini s\u00f6yledi; ancak Moriarty, sekt\u00f6rdeki ki\u015fisel ba\u011flant\u0131lar\u0131 sayesinde hesab\u0131n\u0131 k\u0131sa s\u00fcrede geri ald\u0131. Bunu a\u00e7\u0131k\u00e7a &#8220;s\u0131radan bir oyuncunun sahip olmad\u0131\u011f\u0131 bir ayr\u0131cal\u0131k&#8221; olarak nitelendirdi.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u0130lk Vaka De\u011fil: Numerama Gazetecisi \u0130ki Kez Hacklendi<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Bu g\u00fcvenlik a\u00e7\u0131\u011f\u0131 ilk kez Aral\u0131k 2025&#8217;te Frans\u0131z Numerama gazetecisi Nicolas Lellouche taraf\u0131ndan kamuoyuyla payla\u015f\u0131ld\u0131. Lellouche&#8217;un passkey ile korunan hesab\u0131, ayn\u0131 y\u00f6ntemle ele ge\u00e7irildi. Sald\u0131rgan, hesab\u0131n e-postas\u0131n\u0131 ve \u015fifresini de\u011fi\u015ftirmenin yan\u0131 s\u0131ra ba\u011fl\u0131 \u00f6deme y\u00f6ntemiyle izinsiz al\u0131\u015fveri\u015f yapt\u0131.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Lellouche, Sony deste\u011fiyle ileti\u015fime ge\u00e7erek hesab\u0131n\u0131 kurtard\u0131; ancak bir saat i\u00e7inde ayn\u0131 a\u00e7\u0131k kullan\u0131larak ikinci kez hacklendi. Sald\u0131rganla bizzat ileti\u015fime ge\u00e7ti\u011finde, hack&#8217;in kayna\u011f\u0131n\u0131n 2023&#8217;te \u00e7evrimi\u00e7i payla\u015ft\u0131\u011f\u0131 bir ekran g\u00f6r\u00fcnt\u00fcs\u00fcndeki i\u015flem numaras\u0131 oldu\u011funu \u00f6\u011frendi. Sony&#8217;nin hesab\u0131 &#8220;y\u00fcksek riskli&#8221; olarak i\u015faretleyerek m\u00fc\u015fteri hizmetlerinin m\u00fcdahale etmemesini sa\u011flayaca\u011f\u0131 s\u00f6ylendi; ancak bu koruma yaln\u0131zca alt\u0131 ay s\u00fcrd\u00fc ve May\u0131s 2026&#8217;da hesap \u00fc\u00e7\u00fcnc\u00fc kez ele ge\u00e7irildi.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Rekor Sahibi Trophy Hunter&#8217;\u0131n Hesab\u0131 Kal\u0131c\u0131 Olarak Yasakland\u0131<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Be\u015f kez Guinness D\u00fcnya Rekoru sahibi Kanadal\u0131 oyuncu David Tremblay, bu g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n en dramatik ma\u011fdurlar\u0131ndan biri. Ekim 2025&#8217;te hesab\u0131 ayn\u0131 y\u00f6ntemle \u00e7al\u0131nd\u0131. Sald\u0131rgan, hesap i\u00e7indeyken kendi alt hesaplar\u0131na PlayStation hizmet \u015fartlar\u0131n\u0131 ihlal eden mesajlar g\u00f6nderdi ve bu mesajlar\u0131 gizledi. Tremblay hesab\u0131n\u0131 geri ald\u0131ktan sonra bile gizli mesajlar Sony&#8217;nin sisteminde kald\u0131.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Mart 2026&#8217;da PCMag&#8217;in PSN g\u00fcvenlik ara\u015ft\u0131rmas\u0131na kat\u0131lan Tremblay&#8217;a, sald\u0131rgan misilleme olarak gizledi\u011fi mesajlar\u0131 a\u00e7\u0131\u011fa \u00e7\u0131kard\u0131 ve Sony&#8217;ye bildirdi. Sony kal\u0131c\u0131 bir yasak verdi. 432.000&#8217;den fazla kupa ve 16.352 platin kupas\u0131 bir anda s\u0131f\u0131rland\u0131. Tremblay itiraz s\u00fcrecini ba\u015flatt\u0131 ancak Sony hen\u00fcz konuyla ilgili resmi bir a\u00e7\u0131klama yapmad\u0131.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sony Neden H\u00e2l\u00e2 Sessiz?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Bu g\u00fcvenlik a\u00e7\u0131\u011f\u0131 Aral\u0131k 2025&#8217;ten bu yana kamuoyunda biliniyor. Birden fazla medya kurulu\u015fu, ba\u011f\u0131ms\u0131z ara\u015ft\u0131rmac\u0131 ve etkilenen kullan\u0131c\u0131 durumu belgeledi. Ancak Sony, May\u0131s 2026 itibar\u0131yla resmi bir a\u00e7\u0131klama yapmad\u0131 ve m\u00fc\u015fteri hizmetleri do\u011frulama s\u00fcre\u00e7lerinde k\u00f6kl\u00fc bir de\u011fi\u015fiklik uygulamad\u0131.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Moriarty, 20 May\u0131s 2026&#8217;da yapt\u0131\u011f\u0131 g\u00fcncellemede, toplad\u0131\u011f\u0131 verileri do\u011frudan Sony y\u00f6netimiyle payla\u015ft\u0131\u011f\u0131n\u0131 ve konunun ciddiye al\u0131nmas\u0131 i\u00e7in u\u011fra\u015ft\u0131\u011f\u0131n\u0131 belirtti. Ancak \u015firketin sistematik bir d\u00fczeltme yap\u0131p yapmayaca\u011f\u0131 belirsizli\u011fini koruyor.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">PSN Hesab\u0131n\u0131z\u0131 Korumak \u0130\u00e7in Neler Yapabilirsiniz?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Bu a\u00e7\u0131k Sony&#8217;nin m\u00fc\u015fteri hizmetleri politikas\u0131ndan kaynakland\u0131\u011f\u0131 i\u00e7in kullan\u0131c\u0131 taraf\u0131nda yap\u0131labilecekler s\u0131n\u0131rl\u0131. Yine de riskinizi \u00f6nemli \u00f6l\u00e7\u00fcde azaltabilirsiniz:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Eski faturalar\u0131, sipari\u015f numaralar\u0131n\u0131 ve sat\u0131n al\u0131m ekran g\u00f6r\u00fcnt\u00fclerini asla \u00e7evrimi\u00e7i payla\u015fmay\u0131n.<\/strong> Forum payla\u015f\u0131mlar\u0131, sosyal medya postlar\u0131 ve blog yaz\u0131lar\u0131, sald\u0131rganlar\u0131n i\u015flem numaralar\u0131n\u0131 bulmas\u0131n\u0131n en yayg\u0131n yolu.<\/li>\n\n\n\n<li><strong>PSN ID&#8217;nizi m\u00fcmk\u00fcn oldu\u011funca gizli tutun.<\/strong> Kullan\u0131c\u0131 ad\u0131n\u0131z sald\u0131rganlar\u0131n ihtiya\u00e7 duydu\u011fu iki temel bilgiden biri.<\/li>\n\n\n\n<li><strong>Konsol seri numaran\u0131z\u0131 payla\u015fmay\u0131n.<\/strong> Sony deste\u011fi, ilk konsolun seri numaras\u0131n\u0131 da sahiplik kan\u0131t\u0131 olarak kabul ediyor.<\/li>\n\n\n\n<li><strong>\u00d6n \u00f6demeli kartlar kullan\u0131n.<\/strong> Kredi kart\u0131 bilgilerinizin son hanelerinin sald\u0131rganlar taraf\u0131ndan kullan\u0131lmas\u0131n\u0131 zorla\u015ft\u0131r\u0131r.<\/li>\n\n\n\n<li><strong>2FA&#8217;y\u0131 yine de aktif tutun.<\/strong> Bu a\u00e7\u0131k 2FA&#8217;y\u0131 a\u015fabiliyor olsa da, 2FA olmadan hesab\u0131n\u0131z \u00e7ok daha kolay hedef haline gelir.<\/li>\n\n\n\n<li><strong>Passkey kullanmaya ge\u00e7in.<\/strong> Passkey tek ba\u015f\u0131na bu a\u00e7\u0131\u011f\u0131 kapatm\u0131yor ancak standart \u015fifre giri\u015finden daha g\u00fcvenli bir katman ekliyor.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Dijital Oyun K\u00fct\u00fcphaneleri Ger\u00e7ekten Risk Alt\u0131nda m\u0131?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Fiziksel oyunlar\u0131n yerini b\u00fcy\u00fck \u00f6l\u00e7\u00fcde dijital sat\u0131n al\u0131mlar\u0131n ald\u0131\u011f\u0131 g\u00fcn\u00fcm\u00fczde, bir PSN hesab\u0131n\u0131n \u00e7al\u0131nmas\u0131 y\u00fczlerce hatta binlerce dolarl\u0131k oyun k\u00fct\u00fcphanesinin kaybedilmesi anlam\u0131na gelebiliyor. PCMag&#8217;in ara\u015ft\u0131rmas\u0131nda 20.000 dolar de\u011ferinde dijital oyun k\u00fct\u00fcphanesini kaybeden bir kullan\u0131c\u0131n\u0131n vakas\u0131 belgelendi. Sony&#8217;nin &#8220;yard\u0131mc\u0131 olamay\u0131z&#8221; yan\u0131t\u0131yla kar\u015f\u0131la\u015fan bu oyuncu, konsolunu kullan\u0131lamaz hale gelmi\u015f olarak tan\u0131mlad\u0131.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00c7al\u0131nan hesaplar Telegram ve karaborsa forumlar\u0131nda y\u00fczlerce ila binlerce dolara sat\u0131l\u0131yor. \u00d6zellikle eski ve de\u011ferli PSN kullan\u0131c\u0131 adlar\u0131na sahip hesaplar, 2005&#8217;ten bu yana PSN&#8217;in kuruldu\u011fu d\u00f6nemde olu\u015fturulmu\u015f hesaplar hedef al\u0131n\u0131yor.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Oyuncular\u0131n S\u0131k\u00e7a Merak Etti\u011fi Konular<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">2FA a\u00e7\u0131kken hesab\u0131m nas\u0131l \u00e7al\u0131nabilir?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Sald\u0131rganlar teknik olarak 2FA&#8217;y\u0131 &#8220;k\u0131rm\u0131yor.&#8221; Bunun yerine Sony m\u00fc\u015fteri hizmetlerini arayarak eski bir i\u015flem numaras\u0131yla hesap sahipli\u011fini iddia edip destek ekibinin 2FA&#8217;y\u0131 kapatmas\u0131n\u0131 sa\u011fl\u0131yor. Sorun yaz\u0131l\u0131mda de\u011fil, do\u011frulama politikas\u0131nda.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Sony bu a\u00e7\u0131\u011f\u0131 ne zaman kapatacak?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Sony, May\u0131s 2026 itibar\u0131yla konuyla ilgili resmi bir a\u00e7\u0131klama yapmad\u0131. G\u00fcvenlik ara\u015ft\u0131rmac\u0131lar\u0131 ve etkilenen kullan\u0131c\u0131lar durumu do\u011frudan \u015firket y\u00f6netimiyle payla\u015f\u0131yor ancak somut bir takvim verilmedi.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Hesab\u0131m \u00e7al\u0131nd\u0131ysa ne yapmal\u0131y\u0131m?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">PlayStation Deste\u011fi&#8217;nin \u00e7evrimi\u00e7i asistan\u0131 \u00fczerinden hemen ileti\u015fime ge\u00e7in. Do\u011fum tarihinizi, orijinal e-posta adresinizi ve olabildi\u011fince fazla hesap bilgisini haz\u0131r bulundurun. T\u00fcrkiye&#8217;deki kullan\u0131c\u0131lar 0850 969 82 77 numaras\u0131n\u0131 arayarak da destek alabilir. Ba\u011fl\u0131 kredi kartlar\u0131n\u0131z\u0131 bankan\u0131z arac\u0131l\u0131\u011f\u0131yla derhal iptal ettirin.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Passkey kullanmak yeterli mi?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Passkey, standart \u015fifreden daha g\u00fcvenli bir giri\u015f y\u00f6ntemi sunuyor ancak bu spesifik a\u00e7\u0131k kar\u015f\u0131s\u0131nda tek ba\u015f\u0131na yeterli de\u011fil. \u00c7\u00fcnk\u00fc Sony&#8217;nin destek ekibi, passkey korumas\u0131n\u0131 da devre d\u0131\u015f\u0131 b\u0131rakabiliyor. Yine de passkey kullanmak, hesab\u0131n\u0131za eklenen genel g\u00fcvenlik katman\u0131n\u0131 art\u0131r\u0131r.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Sony&#8217;nin m\u00fc\u015fteri hizmetleri s\u00fcre\u00e7lerindeki zafiyet, sald\u0131rganlar\u0131n yaln\u0131zca bir eski i\u015flem numaras\u0131yla PSN hesaplar\u0131n\u0131 ele ge\u00e7irmesine olanak tan\u0131yor. \u0130ki ad\u0131ml\u0131 do\u011frulama bile bu a\u00e7\u0131\u011f\u0131 kapatam\u0131yor.<\/p>\n","protected":false},"author":5,"featured_media":4300,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[319],"tags":[],"class_list":["post-4299","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-genel"],"_links":{"self":[{"href":"https:\/\/www.gamermarkt.com\/blog\/tr\/wp-json\/wp\/v2\/posts\/4299","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gamermarkt.com\/blog\/tr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gamermarkt.com\/blog\/tr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gamermarkt.com\/blog\/tr\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gamermarkt.com\/blog\/tr\/wp-json\/wp\/v2\/comments?post=4299"}],"version-history":[{"count":1,"href":"https:\/\/www.gamermarkt.com\/blog\/tr\/wp-json\/wp\/v2\/posts\/4299\/revisions"}],"predecessor-version":[{"id":4301,"href":"https:\/\/www.gamermarkt.com\/blog\/tr\/wp-json\/wp\/v2\/posts\/4299\/revisions\/4301"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gamermarkt.com\/blog\/tr\/wp-json\/wp\/v2\/media\/4300"}],"wp:attachment":[{"href":"https:\/\/www.gamermarkt.com\/blog\/tr\/wp-json\/wp\/v2\/media?parent=4299"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gamermarkt.com\/blog\/tr\/wp-json\/wp\/v2\/categories?post=4299"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gamermarkt.com\/blog\/tr\/wp-json\/wp\/v2\/tags?post=4299"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}