Depolog

Depolog is an Israeli company that operates within the shipping and logistics sector. The firm provides services that facilitate the movement of goods through various transport modes, supporting both domestic supply chains and international trade flows. As part of Israel’s logistics industry, Depolog contributes to the coordination of freight handling, customs procedures, and distribution networks that connect producers with markets. While the exact breadth of its service portfolio is not detailed in the available sources, its inclusion among Israeli shipping and logistics firms indicates a role in the nation’s logistics ecosystem. The company’s headquarters are located in Israel, anchoring its operational base within the country’s commercial infrastructure. Depolog’s activities are situated within a sector that is critical to the country’s economy, given Israel’s reliance on maritime and overland transport for imports and exports. Its positioning suggests interaction with ports, warehouses, and customs authorities as part of routine logistics operations. The firm’s presence in the sector places it alongside other providers that manage cargo consolidation, tracking, and last‑mile delivery for a range of industries.

In April 2023, Depolog was identified as one of several Israeli shipping and logistics firms that fell victim to a watering hole attack attributed with low confidence to the Iranian threat group Tortoiseshell. The attackers compromised legitimate websites frequented by the sector’s visitors and injected malicious JavaScript code designed to harvest technical data from anyone who accessed those sites. The harvested information included details such as IP addresses, browser type, and screen resolution, which the threat actors likely used to build profiles of potential targets for subsequent, more tailored intrusions. This method of compromise reflects a tactic previously observed in Tortoiseshell’s operations, where legitimate web resources are repurposed as delivery mechanisms for surveillance payloads. The incident was reported by cybersecurity news outlets, highlighting the increasing focus of state‑aligned groups on Israel’s logistics and maritime infrastructure. Although the confidence level in the attribution is low, the attack underscores the digital exposure faced by companies that maintain public‑facing web presences as part of their business operations. The event serves as a reminder that even firms primarily engaged in physical goods movement must defend their online assets against sophisticated cyber threats. Depolog’s experience adds to the growing body of evidence that logistics firms are attractive targets for espionage‑motivated cyber campaigns.