ProtonMail recovers from DDoS punch after being extorted

The well-intended encrypted email service encountered the worst people on the Web this week

The last few days have not been easy for ProtonMail, the Geneva-based encrypted email service that launched last year.

Earlier this week, the service was extorted by one group of attackers, then taken offline in a large distributed denial-of-service (DDoS) attack by a second group that it suspects may be state sponsored.

ProtonMail offers a full, end-to-end encrypted email service. It raised more than US$500,000 last year after a blockbuster crowdfunding campaign that sought just $100,000. 

Now, it bills itself as the largest secure email provider, with more than 500,000 users. Creating an account is free, although ProtonMail plans to eventually introduce a paid-for service with additional features.

Interest in encrypted email has risen sharply since 2013, when former U.S. National Security Agency contractor Edward Snowden leaked documents that showed vast data-collection operations by western spy agencies.

It's unclear why ProtonMail, whose motivations many would consider to be right and just, would be attacked. But its experience, if anything, shows that no service, no matter how noble, is off limits these days.

ProtonMail described the strange chain of events in a blog post on Thursday.

Late Tuesday, the company received an email asking for a ransom by group that was planning a distributed denial-of-service attack (DDoS).

The next day, ProtonMail fell under a brief, 15-minute attack. Then later that afternoon, a massive attack was launched against its ISP, other upstream providers and data centers.

The second, 100Gps-attack brought down the ISP, its routers and data center, causing problems for other companies.

"At this point, we were placed under a lot of pressure by third parties to just pay the ransom," it wrote. "We hoped that by paying, we could spare the other companies impacted by the attack against us, but the attacks continued nevertheless."

So ProtonMail paid the ransom, in bitcoin. Then things took an odd turn.

The group that was paid a ransom noticed the second, larger attack and felt bad.

That attack became "so serious that the criminals who extorted us previously even found it necessary to write us to deny responsibility for the second attack." 

Working with Swiss government agencies and other companies, ProtonMail concluded the first DDoS was just an assault on their IP address range. The second, however, was "technically much more sophisticated" and likely came from a different group.

The second group exhibited "capabilities more commonly possessed by state-sponsored actors. It also shows that the second attackers were not afraid of causing massive collateral damage in order to get at us."

ProtonMail has launched a donations campaign to raise money to put in place a better defense against DDoS attacks. Such systems can cost up to $100,000 a year, it said.

"Over the next several weeks, we will begin putting in place the sophisticated protections that are necessary to withstand large-scale attacks like this to ensure that online privacy can't be taken down."

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?