Cybercrime, Incident response, Network security, TDR

ProtonMail hit with ransom demand after DDoS attacks

Greg MastersNovember 6, 2015

ProtonMail, a Switzerland-based provider of a free encrypted email service founded by scientists from Cern, was hit with a ransom demand after experiencing two apparent DDoS attacks that shut the site down, according to ITProPortal.

In a statement, the company explained it was hit by two separate groups, one likely a nation-state actor, and paid a ransom demand of 15 bitcoin (around $6,000), but the attack continued.

"DDoS for Bitcoin groups have taken their tactics from old-time protection schemes," Terrence Gareau, chief scientist at Nexusguard, told SCMagazine.com. "Instead of knee caps, they DDoS your infrastructure. Sometimes before they offer the ransom and sometimes after, yet under no circumstances should the ransom ever be paid. They will keep raising the price until it is impossible to pay."

ProtonMail claimed it had not been breached, only disabled, and that all user data was safe.

Greg Masters

Email security

Target of North Korean APT attack spills details of recent Kimsuky campaign

Simon HenderyJune 8, 2023

North Korean scholars are targeted by North Korean state-sponsored advanced persistent threat group.

North Korea flag is depicted on the screen with the program code. The concept of modern technology and site development

Threat intelligence

North Korean-linked APT groups focus on financial gain, intelligence gathering

Steve ZurierJune 7, 2023

Researchers report on two separate North Korean-linked APT groups – one financially motivated, while the other focused on gathering strategic intelligence.