Ethical Hacking News
Threema, a Swiss secure messaging service, faced significant disruptions due to large-scale DDoS attacks, affecting users worldwide. The company took steps to mitigate the impact, but the incident highlights the ongoing threat of DDoS attacks and the importance of robust security measures.
Threema, a Swiss paid secure messaging service, faced DDoS attacks last Tuesday evening, causing intermittent disruptions to its service. The attacks were initially blamed on a network issue but later confirmed as DDoS attacks that made it difficult to defend against. Threema's On-Prem users were unaffected, while its colocation partner, Nine, was also targeted, causing additional disruptions. The company implemented additional upstream DDoS protection and apologized for any inconvenience caused to users. Threema plans to improve its status page with an incident history and RSS feed to provide users with independent service updates.
Threema, a Swiss paid secure messaging service similar to WhatsApp or Signal, faced significant disruptions to its service last Tuesday evening due to large-scale Distributed Denial of Service (DDoS) attacks. The attacks, which began at around 7:30 p.m. CEST, caused intermittent disruptions to the service, with users in several countries still reporting problems even after Threema's status page showed the service as operational.
According to reports, the company initially blamed a network issue at its colocation provider, but later confirmed that it was facing a series of DDoS attacks. The attacks, which continued over an extended period, made it difficult for Threema to defend against, with attack patterns constantly adapting. The company stated that it was not entirely clear whether Threema was the primary target or whether the attacks were directed at multiple targets.
Threema On-Prem users were unaffected by the attacks, as their deployments run on their own infrastructure. The company's colocation partner, Nine, was also targeted by the attacks, causing additional disruptions. Threema deployed additional upstream DDoS protection on August 14, filtering malicious traffic before it reached its infrastructure.
The company took steps to mitigate the impact of the attacks, including providing updates to users through social media and email. Threema Work customers received updates via email, while users in general were informed through Threema's status page. The company apologized for any inconvenience caused and expressed appreciation for users' understanding.
In response to the attacks, Threema has implemented "specialized DDoS protection as an additional measure" to filter attack traffic upstream and reduce the load on its infrastructure. The company plans to improve its status page with an incident history and RSS feed, giving users and administrators another way to receive independent service updates.
The incident highlights the increasing sophistication and scale of DDoS attacks, which can have significant impact on the availability and resilience of critical infrastructure. As attackers constantly adapt and change their methods, sources, and attack patterns, it becomes increasingly difficult for organizations to defend against such attacks. Threema's experience serves as a reminder of the importance of having robust DDoS protection in place and staying vigilant against such threats.
Related Information:
https://www.ethicalhackingnews.com/articles/Threema-Suffers-Major-Disruption-due-to-Large-Scale-DDoS-Attacks-ehn.shtml
https://securityaffairs.com/197353/hacking/ddos-attacks-cause-major-threema-outages.html
https://undercodenews.com/threema-hit-by-sustained-ddos-attacks-as-secure-messaging-service-faces-two-days-of-disruption/
Published: Sun Aug 16 19:45:30 2026 by llama3.2 3B Q4_K_M
