Protonmail currently under massive DDoS attack - out of service 36 hours and counting.

[Millard]

Protonmail has been under a massive DDoS attack that has taken its services offline for over 36 hours and counting. It has emphasized that all data is "safe and untouched" but it is seeking outside assistance to mitigate the attack and looking for other datacenters in Switzerland "brave enough" to host its servers. Protonmail's twitter page is the source of updates:

https://twitter.com/ProtonMail

 

[jaymaximus]

I read this earlier. This is killin me. Proton was my #1 and safemail was my backup. Now I have no email (besides gmail).

 

[gr8whitetrukker]

DDos?

 

[jaymaximus]

https://protonmaildotcom.wordpress.com/

For people who don’t know what a DDOS attack is, here is a metaphor that best illustrates it:

Imagine yourself as a car on the freeway. You want to access ProtonMail, so you are driving to visit our site that’s located in Switzerland. Because the internet is amazing, it takes less than a second to arrive. During a DDOS attack, millions of fake cars join you on the freeway and cause a massive traffic jam. The result is that ProtonMail is unharmed and perfectly fine, but no one can visit because of the grid-lock.

 

[Millard]

It's back online.

 

[DTdr2]

I can't help but wonder which gov/agency could be responsible. Proton must be doing something right.

 

[Millard]

I can't help but wonder which gov/agency could be responsible. Proton must be doing something right.

The two posts on Protonmail's twitter time line immediately before the DDoS posts were about USA/CISA and UK/Investigatory Powers Bill.

 

[pumpingiron22]

I noticed this. do you think gov hired hackers????

 

[caveman72]

ya its my first safe encryption email. how safe honestlu is out emails

 

[Millard]

I can't help but wonder which gov/agency could be responsible. Proton must be doing something right.

Protonmail is under DDoS attack again. It says it is a sophisticated attack with "capabilities more commonly possessed by state sponsored actors."

They have set up a gofundme page to raise donations for top-of-the-line DDoS prevention solutions:

https://www.gofundme.com/protonmaildefense

The attack conducted against us was the most sophisticated attack ever seen in Switzerland and displayed capabilities more commonly possessed by state sponsored actors. In order to defend against future attacks of this scale, we will need to utilize top-of-the-line solutions typically used by large companies such as Twitter, Facebook, etc.

These solutions are unfortunately very expensive and can run over $100,000 per year. Despite the cost, we have already begun to implement them, but this has placed an unexpected strain on our budget. Given our mission, and the capabilities of our adversaries, it is necessary to invest in these technologies to ensure that online privacy can never be denied. With your support, we can ensure that ProtonMail is better protected against future attacks and can continue to provide privacy for all.

 

[jaymaximus]

Protonmail is under DDoS attack again. It says it is a sophisticated attack with "capabilities more commonly possessed by state sponsored actors."

They have set up a gofundme page to raise donations for top-of-the-line DDoS prevention solutions:

https://www.gofundme.com/protonmaildefense

Damn. I went on trying to check and it was down again.

I read that they paid a 6000 bitcoin ransom earlier to get them to stop. Then the attack started back up.

Looks like I may have to find a new email service.

 

[MindlessWork]

Damn. I went on trying to check and it was down again.

I read that they paid a 6000 bitcoin ransom earlier to get them to stop. Then the attack started back up.

Looks like I may have to find a new email service.

No email service is safe these days. What about tutanota? They getting attacked too?

 

[Darman]

No email service is safe these days. What about tutanota? They getting attacked too?

I just joined Tutanota, they are fine. Guess in this day and age we need multiple protected accounts

 

[LifeSTRONG]

I just joined Tutanota, they are fine. Guess in this day and age we need multiple protected accounts

I have them but from my understanding they don't have pgp encryption available at least from what I've seen.. Just end to end encryption. Man I was looking into proton mail too... That's crazy how you going to pay a 6000 btc random... Then ask to gofundme after you give away your Bitcoin.. Your only inviting more attackers..

 

[heady muscle]

Proton is still down for me. Good heads up Millard. First Safemail and now this. What the fuck is going on? The Feds are going nuts.

 

[Millard]

Damn. I went on trying to check and it was down again.

I read that they paid a 6000 bitcoin ransom earlier to get them to stop. Then the attack started back up.

That's crazy how you going to pay a 6000 btc random... Then ask to gofundme after you give away your Bitcoin.. Your only inviting more attackers..

That looks like what happened. Some think a second group started a DDoS attack after Protonmail paid the first group.

 

[ROB581211]

I just got into my account

 

[Millard]

Details about the attacks and BTC ransom are available on protonmail blog (wordpress):

https://protonmaildotcom.wordpress.com/2015/11/05/protonmail-statement-about-the-ddos-attack/

You can follow the movement of the ransom payment on the blockchain here:

https://blockchain.info/address/1FxHcZzW3z9NRSUnQ9Pcp58ddYaSuN1T2y

 

[Darman]

I just got into my account

Still down for me, that's weird

 

[gr8whitetrukker]

I'm good. Just logged in