DDoS attack against FastMail

nachoig · 8 Nov 2015, 09:38 AM

It seems the same group which was attacking VFEmail, ProtonMail, Hushmail and Runbox is looking to FastMail now too.

http://www.fastmailstatus.com/services/general

Details?

David · 8 Nov 2015, 09:46 AM

Thanks for the info nachoig.

It seems that Fastmail are dealing with these DDos attacks more better than many other providers have done.

Surfwriter · 8 Nov 2015, 09:57 AM

Quote:

Originally Posted by David

Thanks for the info nachoig.

It seems that Fastmail are dealing with these DDos attacks more better than many other providers have done.

Well the status report posted around 20 minutes ago sez everything is back to normal ... EXCEPT I still can't connect to the server.

jofallon · 8 Nov 2015, 10:41 AM

Still down now...

n5bb · 8 Nov 2015, 10:53 AM

Back up for me. It's been up and down the last few minutes due to the attacks.

Bill

Surfwriter · 8 Nov 2015, 11:16 AM

Quote:

Originally Posted by Surfwriter

Well the status report posted around 20 minutes ago sez everything is back to normal ... EXCEPT I still can't connect to the server.

Back up again but slow loading into my email client (Thunderbird). We shall wait and hope for the best. Cheers

David · 8 Nov 2015, 11:57 AM

Quote:

Originally Posted by Surfwriter

Well the status report posted around 20 minutes ago sez everything is back to normal ... EXCEPT I still can't connect to the server.

OK: I am in Canada and my service has been uninterrupted.

n5bb · 8 Nov 2015, 12:06 PM

I believe the problem is too much network traffic interfering with the Fastmail incoming servers. So it probably has nothing to do with your location. As Fastmail reroutes things to get around the problem we might have erratic service from time to time.

Bill

n5bb · 8 Nov 2015, 12:32 PM

Status seems to be normal now:
http://www.fastmailstatus.com/services/general

Quote:

8 Nov 2015 04:14:06 UTC
Network access has been normal for the last hour. We're satisfied that everything is fine for now and will continue to monitor.

Bill

BritTim · 8 Nov 2015, 04:09 PM

These were pretty major attacks. FM did well to deal with them with relatively short interruptions of service. I have known bigger players than FM more or less offline for a day in such cases. Anyone any idea why FM was targeted? Was it just a large scale spamming exercise?

rharha · 8 Nov 2015, 05:45 PM

Quote:

Originally Posted by BritTim

These were pretty major attacks. FM did well to deal with them with relatively short interruptions of service. I have known bigger players than FM more or less offline for a day in such cases. Anyone any idea why FM was targeted? Was it just a large scale spamming exercise?

They successfully extorted money from Protonmail to stop the attack. Probably the reason why others (Zoho as well) have to endure this now. Glad to see that FM appears well prepared for this.

DumbGuy · 8 Nov 2015, 06:17 PM

I too have wondered how focused this was. Just FM? Just independent email providers (as suggested by the OP)? What's the motive - financial?

FM has spoken highly of NY Internet, their primary datacenter, in the past. With the sky-high expertise of both FM and NYI combined, I guess they mitigated the attack relatively quickly. All the more reason FM rocks.

17pm · 8 Nov 2015, 07:21 PM

At this point, since ProtonMail stupidly paid them money (or so it's said), they're probably trying to get some more.

Hopefully no1 else is as moronic as ProtonMail.

DumbGuy · 8 Nov 2015, 07:38 PM

From ProtonMail's blog:

"At this point, we were placed under a lot of pressure by third parties to just pay the ransom, which we grudgingly agreed to... We hoped that by paying, we could spare the other companies impacted by the attack against us, but the attacks continued nevertheless. This was clearly a wrong decision so let us be clear to all future attackers – ProtonMail will NEVER pay another ransom."

Their attack started on 03-Nov. Hard to say if it's the same attackers as today on FM.

lauricat · 9 Nov 2015, 08:41 AM

Down again...

8 Nov 2015, 09:38 AM	#1
nachoig Junior Member Join Date: Dec 2014 Posts: 15	DDoS attack against FastMail It seems the same group which was attacking VFEmail, ProtonMail, Hushmail and Runbox is looking to FastMail now too. http://www.fastmailstatus.com/services/general Details?

8 Nov 2015, 10:41 AM	#4
jofallon Junior Member Join Date: Nov 2007 Posts: 26	Fm ddos Still down now...

8 Nov 2015, 07:38 PM	#14
DumbGuy Essential Contributor Join Date: Oct 2008 Posts: 212	From ProtonMail's blog: "At this point, we were placed under a lot of pressure by third parties to just pay the ransom, which we grudgingly agreed to... We hoped that by paying, we could spare the other companies impacted by the attack against us, but the attacks continued nevertheless. This was clearly a wrong decision so let us be clear to all future attackers – ProtonMail will NEVER pay another ransom." Their attack started on 03-Nov. Hard to say if it's the same attackers as today on FM. Last edited by DumbGuy : 8 Nov 2015 at 07:39 PM. Reason: typo

8 Nov 2015, 09:46 AM	#2
David Ultimate Contributor Join Date: Dec 2001 Location: Canada. Posts: 10,355	Thanks for the info nachoig. It seems that Fastmail are dealing with these DDos attacks more better than many other providers have done.

8 Nov 2015, 10:53 AM	#5
n5bb Intergalactic Postmaster Join Date: May 2004 Location: Irving, Texas Posts: 8,930	Back up for me. It's been up and down the last few minutes due to the attacks. Bill

8 Nov 2015, 12:06 PM	#8
n5bb Intergalactic Postmaster Join Date: May 2004 Location: Irving, Texas Posts: 8,930	I believe the problem is too much network traffic interfering with the Fastmail incoming servers. So it probably has nothing to do with your location. As Fastmail reroutes things to get around the problem we might have erratic service from time to time. Bill

8 Nov 2015, 04:09 PM	#10
BritTim The "e" in e-mail Join Date: May 2003 Location: mostly in Thailand Posts: 3,095	These were pretty major attacks. FM did well to deal with them with relatively short interruptions of service. I have known bigger players than FM more or less offline for a day in such cases. Anyone any idea why FM was targeted? Was it just a large scale spamming exercise?

8 Nov 2015, 06:17 PM	#12
DumbGuy Essential Contributor Join Date: Oct 2008 Posts: 212	I too have wondered how focused this was. Just FM? Just independent email providers (as suggested by the OP)? What's the motive - financial? FM has spoken highly of NY Internet, their primary datacenter, in the past. With the sky-high expertise of both FM and NYI combined, I guess they mitigated the attack relatively quickly. All the more reason FM rocks.

8 Nov 2015, 07:21 PM	#13
17pm Cornerstone of the Community Join Date: Sep 2013 Posts: 536	At this point, since ProtonMail stupidly paid them money (or so it's said), they're probably trying to get some more. Hopefully no1 else is as moronic as ProtonMail.

9 Nov 2015, 08:41 AM	#15
lauricat Member Join Date: Oct 2012 Posts: 30	Down again...