Barshai Company Email Compromise Spreads Malicious Emails

Barshai Company Email Compromise Spreads Malicious Emails

Cyber News - Erez Dasa reports an email compromise incident affecting Barshai Company, a firm specializing in advanced transportation systems and public transport. Malicious emails are being distributed to users from a compromised Barshai mailbox.

While email compromises leading to malicious email distribution are common, Cyber News - Erez Dasa notes that the Israel National Cyber Directorate issued an alert, suggesting potential broader implications or a specific threat vector that warranted public attention this time. The exact nature of the unique element prompting the directorate’s alert remains unconfirmed by the source.

This incident underscores the persistent threat of business email compromise (BEC) and its use as an initial access vector for further attacks. Organizations must assume that a compromised mailbox will be leveraged immediately for phishing, credential harvesting, or malware distribution, often targeting supply chain partners or internal users.

What This Means For You

  • If your organization interacts with Barshai Company, you must alert your users to exercise extreme caution with any emails originating from their domain. Implement DMARC, DKIM, and SPF policies aggressively, and ensure your email security gateways are configured to detect anomalous sender behavior and suspicious links/attachments, even from trusted domains. This isn't a new attack, but it's effective because defenders get complacent.
Take action on this incident
πŸ“‘ Monitor barshai.co.il Free Β· 1 watchlist slot Β· instant alerts on new breaches πŸ” Threat intel on Barshai Company All breaches, IOCs & vendor exposure