Between November 4-6, Runbox experienced powerful DDoS attacks by a group calling themselves “Armada Collective”. Other security oriented email services such as ProtonMail, Hushmail, and Neomailbox were also attacked, as recently reported by Forbes.

The initial threats and attacks that attempted to extort money were withdrawn by the attackers on Saturday morning, when they offered an apology.

During the attacks we were focused on coordinating with our partners, putting in place countermeasures, and providing our customers with necessary information. Since the situation was unclear and evolved quickly, we decided to not publish any details that could inform the attackers in any way.

The situation is now under control and we are publishing this summary of the events as it may help shed light on what transpired against both Runbox and the other services that were attacked.

(more…)

Continue Reading →

We are currently being attacked again, and are working with our partners to deflect the attack. At the moment our email services are inaccessible.

We greatly appreciate your support and will do everything we can to resume normal operations.

If you can’t reach our regular websites, please see http://status.runbox.com and https://twitter.com/Runbox for updates.

(more…)

Continue Reading →

We had a DDoS (Distributed Denial of Service) attack on our email services today, preventing some users from accessing our servers for a short time.

Together with our server management and hosting partners we mitigated the attack. There might be more attacks in the coming days, so please check our blog, support page or Twitter page for updates if you can’t access our email services.

Continue Reading →

After careful consideration we have decided to adopt a stricter policy with regards to SPF (Sender Policy Framework) records for our own Runbox domains.

Note: This does not affect domains owned by our customers.

What are SPF records?

SPF records are used as a way to determine if email addresses are being spoofed in sent mail. They allow domain administrators (Runbox in this case) to specify which servers are allowed to send email for the domains they control.

(more…)

Continue Reading →

We are pleased to announce the start of the Open Beta Testing Phase of our new Dovecot IMAP servers.

We are introducing new IMAP servers to resolve errors that have been experienced by many customers, to simplify the set up in email clients and to improve IMAP performance.

We expect that customers using Apple Mail (OS X) and the native Mail app (iOS) on iPhones and iPads will see the most benefit from our new servers, but performance and reliability will be improved for all customers.

Problems we believe will be resolved are:

• Read/Unread synchronisation issues
• Moving messages from one folder to another resulted in a copy in the new and old locations
• Error messages of the kind “Cannot connect to server”
• With iOS the native Mail app would fail to update and would continue to show a date in the past

At some future date the current servers will be retired, and all customers will need to use the new IMAP servers.

If you would like to switch to the new servers now, and take part in our Beta testing phase, please see the information on the Open Beta Phase page (the previous link now directs to the official launch details). Please note that although the software is already thoroughly tested and performing well, changes and disruptions may occur as we continue improving it.

If you have any questions about these changes, please contact Runbox Support.

Continue Reading →