{"id":11308,"date":"2026-10-04T00:20:05","date_gmt":"2026-10-04T00:20:05","guid":{"rendered":"https:\/\/bitep.net\/blog\/2026\/10\/04\/android-17-nin-qabaqc%c4%b1l-m%c3%bchafiz%c9%99-rejimi-%c9%99l%c3%a7atanl%c4%b1q-xidm%c9%99tl%c9%99rini-yaln%c4%b1z-t%c9%99sdiql%c9%99n\/"},"modified":"2026-10-04T00:20:05","modified_gmt":"2026-10-04T00:20:05","slug":"android-17-nin-qabaqc%c4%b1l-m%c3%bchafiz%c9%99-rejimi-%c9%99l%c3%a7atanl%c4%b1q-xidm%c9%99tl%c9%99rini-yaln%c4%b1z-t%c9%99sdiql%c9%99n","status":"publish","type":"post","link":"https:\/\/bitep.net\/blog\/2026\/10\/04\/android-17-nin-qabaqc%c4%b1l-m%c3%bchafiz%c9%99-rejimi-%c9%99l%c3%a7atanl%c4%b1q-xidm%c9%99tl%c9%99rini-yaln%c4%b1z-t%c9%99sdiql%c9%99n\/","title":{"rendered":"Android 17-nin Qabaqc\u0131l M\u00fchafiz\u0259 rejimi \u0259l\u00e7atanl\u0131q xidm\u0259tl\u0259rini yaln\u0131z t\u0259sdiql\u0259nmi\u015f al\u0259tl\u0259rl\u0259 m\u0259hdudla\u015fd\u0131r\u0131r"},"content":{"rendered":"<h2>Mobil T\u0259hdid M\u0259nz\u0259r\u0259si: Android Accessibility API-nin Silahla\u015fd\u0131r\u0131lmas\u0131<\/h2>\n<p>Android \u0259m\u0259liyyat sisteminin &#8220;\u018fl\u00e7atanl\u0131q Xidm\u0259tl\u0259ri&#8221; (Accessibility Services) ilkin olaraq fiziki v\u0259 ya vizual m\u0259hdudiyy\u0259ti olan istifad\u0259\u00e7il\u0259rin cihazla qar\u015f\u0131l\u0131ql\u0131 \u0259laq\u0259sini asanla\u015fd\u0131rmaq m\u0259qs\u0259dil\u0259 layih\u0259l\u0259ndirilib. Bu API sistemi ekranda ba\u015f ver\u0259n h\u0259r bir hadis\u0259ni (UI event) oxumaq, daxil edil\u0259n m\u0259tnl\u0259ri qeyd\u0259 almaq, d\u00fcym\u0259l\u0259ri avtomatik s\u0131xmaq v\u0259 dig\u0259r t\u0259tbiql\u0259rin \u00fcz\u0259rind\u0259 vizual qatlar formala\u015fd\u0131rmaq s\u0259lahiyy\u0259tin\u0259 malikdir. Lakin bu geni\u015f s\u0259lahiyy\u0259t spektri uzun ill\u0259rdir ki, mobil platformalar \u00fc\u00e7\u00fcn \u0259n t\u0259hl\u00fck\u0259li h\u00fccum vektorlar\u0131ndan birin\u0259 \u00e7evrilib.<\/p>\n<p>Kibert\u0259hl\u00fck\u0259sizlik analitikl\u0259rinin m\u00fc\u015fahid\u0259l\u0259rin\u0259 g\u00f6r\u0259, m\u00fcasir bank troyanlar\u0131n\u0131n (m\u0259s\u0259l\u0259n, TeaBot, SharkBot, Godfather v\u0259 Anatsa ail\u0259l\u0259ri) dem\u0259k olar ki, 90%-d\u0259n \u00e7oxu \u0259sas h\u00fccum z\u0259ncirini m\u0259hz Accessibility API \u00fcz\u0259rind\u0259 qurur. \u0130stifad\u0259\u00e7i sosial m\u00fch\u0259ndislik f\u0259ndl\u0259ri il\u0259 bu xidm\u0259ti aktivl\u0259\u015fdirdiyi anda, t\u0259tbiq cihaz \u00fcz\u0259rind\u0259 faktiki olaraq tam n\u0259zar\u0259t \u0259ld\u0259 edir v\u0259 Android-in t\u0259tbiq t\u0259cridetm\u0259 (sandbox) mexanizml\u0259rini faktiki olaraq he\u00e7\u0259 endirir.<\/p>\n<h3>Z\u0259r\u0259rvericil\u0259rin Sui-istifad\u0259 Mexanizml\u0259ri<\/h3>\n<ul>\n<li><strong>A\u00e7ar Vuru\u015flar\u0131n\u0131n Qeyd\u0259 Al\u0131nmas\u0131 (Keylogging):<\/strong> Z\u0259r\u0259rverici t\u0259tbiq klaviaturadan daxil edil\u0259n h\u0259r bir simvolu (\u015fifr\u0259l\u0259r, P\u0130N kodlar, kart rekvizitl\u0259ri) he\u00e7 bir \u0259lav\u0259 x\u00fcsusi icaz\u0259 t\u0259l\u0259b etm\u0259d\u0259n real vaxt rejimind\u0259 qeyd edir.<\/li>\n<li><strong>Avtomatla\u015fd\u0131r\u0131lm\u0131\u015f K\u00f6\u00e7\u00fcrm\u0259 Sisteml\u0259ri (ATS &#8211; Automated Transfer Systems):<\/strong> Bank t\u0259tbiqi a\u00e7\u0131ld\u0131qda, troyan arxa planda istifad\u0259\u00e7inin x\u0259b\u0259ri olmadan bank k\u00f6\u00e7\u00fcrm\u0259 \u0259mrl\u0259rini icra edir, daxil edilmi\u015f m\u0259bl\u0259\u011fi v\u0259 t\u0259yinat hesab\u0131n\u0131 \u00f6z xeyrin\u0259 d\u0259yi\u015fir.<\/li>\n<li><strong>2FA v\u0259 OTP Kodlar\u0131n\u0131n \u018fl\u0259 Ke\u00e7irilm\u0259si:<\/strong> Ekranda g\u00f6r\u00fcn\u0259n bildiri\u015fl\u0259ri v\u0259 SMS m\u0259tnl\u0259rini oxuyaraq autentifikasiya kodlar\u0131n\u0131 an\u0131nda z\u0259r\u0259rvericinin C2 (Command and Control) serverin\u0259 \u00f6t\u00fcr\u00fcr.<\/li>\n<li><strong>Statik T\u0259hl\u00fck\u0259sizlik X\u0259b\u0259rdarl\u0131qlar\u0131n\u0131n K\u0259narla\u015fd\u0131r\u0131lmas\u0131:<\/strong> \u0130stifad\u0259\u00e7i cihazdan z\u0259r\u0259rverici t\u0259tbiqi silm\u0259y\u0259 \u00e7al\u0131\u015fark\u0259n &#8220;Sil&#8221; d\u00fcym\u0259sinin bas\u0131lmas\u0131n\u0131 proqram t\u0259minat\u0131 s\u0259viyy\u0259sind\u0259 d\u0259rhal bloklay\u0131r v\u0259 ya ana ekrana qay\u0131d\u0131r.<\/li>\n<\/ul>\n<h2>Android 17 il\u0259 G\u0259l\u0259n \u0130nqilabi Baryer: T\u0259sdiql\u0259nmi\u015f Al\u0259tl\u0259r Ekosistemi<\/h2>\n<p>Google, ill\u0259rdir davam ed\u0259n bu kritik bo\u015flu\u011fu aradan qald\u0131rmaq m\u0259qs\u0259dil\u0259 Android 17 versiyas\u0131nda &#8220;Advanced Protection&#8221; (T\u0259kmil M\u00fchafiz\u0259) rejiminin i\u015f prinsipin\u0259 s\u0259rt d\u0259yi\u015fiklikl\u0259r t\u0259tbiq edir. Yeni arxitekturaya \u0259sas\u0259n, bu rejim aktiv olduqda \u018fl\u00e7atanl\u0131q Xidm\u0259tl\u0259ri yaln\u0131z Google t\u0259r\u0259find\u0259n r\u0259smi olaraq yoxlan\u0131lm\u0131\u015f, kriptoqrafik olaraq imzalanm\u0131\u015f v\u0259 x\u00fcsusi auditd\u0259n ke\u00e7mi\u015f \u0259l\u00e7atanl\u0131q al\u0259tl\u0259ri \u00fc\u00e7\u00fcn \u0259l\u00e7atan olacaq.<\/p>\n<p>Bu yenilik x\u00fcsusil\u0259 \u00fc\u00e7\u00fcnc\u00fc t\u0259r\u0259f m\u0259nb\u0259l\u0259rd\u0259n qura\u015fd\u0131r\u0131lan (sideloading) APK fayllar\u0131n\u0131n v\u0259 ya Play Store-un avtomatla\u015fd\u0131r\u0131lm\u0131\u015f filtrl\u0259rind\u0259n yay\u0131na bil\u0259n &#8220;dropper&#8221; tipli proqramlar\u0131n h\u00fccum potensial\u0131n\u0131 minimuma endirir. Art\u0131q t\u0259sdiql\u0259nm\u0259mi\u015f he\u00e7 bir t\u0259tbiq istifad\u0259\u00e7ini aldadaraq bu x\u00fcsusi API-y\u0259 \u00e7\u0131x\u0131\u015f \u0259ld\u0259 ed\u0259 bilm\u0259y\u0259c\u0259k.<\/p>\n<h3>Texniki M\u00fcqayis\u0259: T\u0259hl\u00fck\u0259sizlik Siyas\u0259tinin T\u0259kam\u00fcl\u00fc<\/h3>\n<table>\n<tr>\n<th>X\u00fcsusiyy\u0259t<\/th>\n<th>Android 13\u201316 (M\u00f6vcud Model)<\/th>\n<th>Android 17 (Advanced Protection Aktiv)<\/th>\n<\/tr>\n<tr>\n<td>Sideloaded T\u0259tbiql\u0259r \u00fc\u00e7\u00fcn \u0130caz\u0259<\/td>\n<td>\u0130stifad\u0259\u00e7i &#8220;M\u0259hdudla\u015fd\u0131r\u0131lm\u0131\u015f t\u0259nziml\u0259m\u0259l\u0259r&#8221; menyusundan \u0259l il\u0259 a\u00e7a bilir.<\/td>\n<td>Sistem s\u0259viyy\u0259sind\u0259 q\u0259ti \u015f\u0259kild\u0259 bloklan\u0131r; bypass m\u00fcmk\u00fcn deyil.<\/td>\n<\/tr>\n<tr>\n<td>T\u0259tbiq T\u0259sdiqi (Verification)<\/td>\n<td>Play Protect-in \u0259sas skanlama alqoritmi il\u0259 m\u0259hdudla\u015f\u0131r.<\/td>\n<td>Kriptoqrafik metadata v\u0259 t\u0259sdiql\u0259nmi\u015f \u0259l\u00e7atanl\u0131q sertifikat\u0131 t\u0259l\u0259b olunur.<\/td>\n<\/tr>\n<tr>\n<td>ATS v\u0259 Overlay M\u00fcdafi\u0259si<\/td>\n<td>Qism\u0259n (Flag secure v\u0259 h\u0259d\u0259f SDK m\u0259hdudiyy\u0259tl\u0259ri il\u0259).<\/td>\n<td>Tam izolyasiya: Yaln\u0131z t\u0259sdiql\u0259nmi\u015f utilitl\u0259r UI hadis\u0259l\u0259rini oxuya bil\u0259r.<\/td>\n<\/tr>\n<tr>\n<td>Korporativ \u0130dar\u0259etm\u0259 (MDM)<\/td>\n<td>M\u00fcr\u0259kk\u0259b siyas\u0259tl\u0259r v\u0259 x\u00fcsusi blacklist t\u0259l\u0259b edir.<\/td>\n<td>T\u0259k bir siyas\u0259t (policy) vasit\u0259sil\u0259 tam bloklama t\u0259min edilir.<\/td>\n<\/tr>\n<\/table>\n<h2>Korporativ T\u0259hl\u00fck\u0259sizlik v\u0259 MDM\/MAM Sisteml\u0259rin\u0259 T\u0259siri<\/h2>\n<p>M\u00fc\u0259ssis\u0259 s\u0259viyy\u0259sind\u0259 (Enterprise) bu d\u0259yi\u015fiklik korporativ t\u0259hl\u00fck\u0259sizlik arxitekturas\u0131na \u0259h\u0259miyy\u0259tli d\u0259r\u0259c\u0259d\u0259 m\u00fcsb\u0259t t\u0259sir g\u00f6st\u0259r\u0259c\u0259k. BYOD (Bring Your Own Device) v\u0259 COPE (Corporate-Owned, Personally-Enabled) modell\u0259rind\u0259 mobil cihazlar korporativ \u015f\u0259b\u0259k\u0259y\u0259 daxil olmaq \u00fc\u00e7\u00fcn \u0259n z\u0259if h\u0259lq\u0259 hesab olunurdu. \u0130\u015f\u00e7il\u0259rin ehtiyats\u0131zl\u0131qdan cihazlar\u0131na y\u00fckl\u0259dikl\u0259ri z\u0259r\u0259rverici proqramlar Accessibility API vasit\u0259sil\u0259 korporativ VPN \u015fifr\u0259l\u0259rini, SSO sessiya tokenl\u0259rini v\u0259 e-po\u00e7t m\u0259lumatlar\u0131n\u0131 \u0259l\u0259 ke\u00e7ir\u0259 bilirdi.<\/p>\n<p>MDM (Mobile Device Management) v\u0259 EMM (Enterprise Mobility Management) inzibat\u00e7\u0131lar\u0131 \u00fc\u00e7\u00fcn Android 17-nin bu x\u00fcsusiyy\u0259ti yeni konfiqurasiya imkanlar\u0131 yarad\u0131r. T\u0259\u015fkilatlar Advanced Protection siyas\u0259tini b\u00fct\u00fcn idar\u0259 olunan profill\u0259r\u0259 m\u0259cburi t\u0259tbiq ed\u0259r\u0259k, daxili \u0259l\u00e7atanl\u0131q ehtiyaclar\u0131n\u0131 yaln\u0131z sertifikatla\u015fd\u0131r\u0131lm\u0131\u015f daxili al\u0259tl\u0259r vasit\u0259sil\u0259 t\u0259min ed\u0259 bil\u0259c\u0259kl\u0259r.<\/p>\n<h3>Praktiki N\u0259zar\u0259t v\u0259 T\u0259hl\u00fck\u0259sizlik Audit \u018fmrl\u0259ri<\/h3>\n<p>Kibert\u0259hl\u00fck\u0259sizlik m\u00fct\u0259x\u0259ssisl\u0259ri v\u0259 sistem inzibat\u00e7\u0131lar\u0131 Android Debug Bridge (ADB) vasit\u0259sil\u0259 cihazda aktiv olan v\u0259 potensial risk da\u015f\u0131yan \u0259l\u00e7atanl\u0131q xidm\u0259tl\u0259rini yoxlaya v\u0259 onlar\u0131 m\u0259cburi qaydada idar\u0259 ed\u0259 bil\u0259rl\u0259r:<\/p>\n<pre><code class=\"language-bash\"># Cihazda haz\u0131rda aktiv olan b\u00fct\u00fcn \u018fl\u00e7atanl\u0131q Xidm\u0259tl\u0259rinin siyah\u0131s\u0131n\u0131 \u0259ld\u0259 etm\u0259k\nadb shell settings get secure enabled_accessibility_services\n\n# \u015e\u00fcbh\u0259li v\u0259 ya t\u0259sdiql\u0259nm\u0259mi\u015f t\u0259tbiqin \u0259l\u00e7atanl\u0131q xidm\u0259tini d\u0259rhal deaktiv etm\u0259k\nadb shell settings put secure enabled_accessibility_services com.android.talkback\/.TalkBackService\n\n# T\u0259tbiqin t\u0259hl\u00fck\u0259sizlik icaz\u0259l\u0259rini v\u0259 Advanced Protection statusunu yoxlamaq\nadb shell dumpsys package com.example.suspiciousapp | grep -i accessibility\n\n# Cihazda m\u00f6vcud olan icaz\u0259 m\u0259hdudiyy\u0259tl\u0259rini audit etm\u0259k\nadb shell cmd appops get com.example.suspiciousapp ACCESS_RESTRICTED_SETTINGS<\/code><\/pre>\n<h2>BITEP T\u0259hlil v\u0259 N\u0259tic\u0259<\/h2>\n<p>Google-un Android 17-d\u0259 \u018fl\u00e7atanl\u0131q Xidm\u0259tl\u0259rini yaln\u0131z t\u0259sdiql\u0259nmi\u015f t\u0259tbiql\u0259r \u00fc\u00e7\u00fcn m\u0259hdudla\u015fd\u0131rmaq add\u0131m\u0131 gecikmi\u015f, lakin son d\u0259r\u0259c\u0259 z\u0259ruri bir t\u0259hl\u00fck\u0259sizlik t\u0259kam\u00fcl\u00fcd\u00fcr. Bu d\u0259yi\u015fiklik kiberf\u0131r\u0131ldaq\u00e7\u0131lar\u0131n \u0259n \u00e7ox g\u00fcv\u0259ndiyi &#8220;Accessibility abuse&#8221; modelini b\u00f6y\u00fck \u00f6l\u00e7\u00fcd\u0259 s\u0131radan \u00e7\u0131xaracaq. N\u0259tic\u0259d\u0259, mobil bank\u00e7\u0131l\u0131q t\u0259tbiql\u0259rinin saxta k\u00f6\u00e7\u00fcrm\u0259l\u0259rd\u0259n qorunmas\u0131 t\u0259min edil\u0259c\u0259k, korporativ m\u00fchitd\u0259 is\u0259 s\u0131f\u0131r etibar (Zero Trust) arxitekturas\u0131n\u0131n mobil seqmenti daha da m\u00f6hk\u0259ml\u0259n\u0259c\u0259kdir.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Mobil T\u0259hdid M\u0259nz\u0259r\u0259si: Android Accessibility API-nin Silahla\u015fd\u0131r\u0131lmas\u0131 Android \u0259m\u0259liyyat sisteminin &#8220;\u018fl\u00e7atanl\u0131q Xidm\u0259tl\u0259ri&#8221; (Accessibility Services) ilkin olaraq fiziki v\u0259 ya vizual m\u0259hdudiyy\u0259ti olan istifad\u0259\u00e7il\u0259rin cihazla qar\u015f\u0131l\u0131ql\u0131 \u0259laq\u0259sini asanla\u015fd\u0131rmaq m\u0259qs\u0259dil\u0259 layih\u0259l\u0259ndirilib. Bu API sistemi ekranda ba\u015f ver\u0259n h\u0259r bir hadis\u0259ni (UI event) oxumaq, daxil edil\u0259n m\u0259tnl\u0259ri qeyd\u0259 almaq, d\u00fcym\u0259l\u0259ri avtomatik s\u0131xmaq v\u0259 dig\u0259r t\u0259tbiql\u0259rin \u00fcz\u0259rind\u0259 vizual qatlar [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":11307,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-11308","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/bitep.net\/blog\/wp-content\/uploads\/2026\/10\/android-17-protection-1791073199004.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts\/11308","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/comments?post=11308"}],"version-history":[{"count":0,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts\/11308\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/media\/11307"}],"wp:attachment":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/media?parent=11308"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/categories?post=11308"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/tags?post=11308"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}