National CSIRT-CY | National Computer Security Incident Response Team of Cyprus

Η Εθνική Ομάδα Αντιμετώπισης Ηλεκτρονικών Επιθέσεων προβλέπει την αύξηση της ηλεκτρονικής ασφαλείας ενισχύοντας την προστασία του κυβερνοχώρου των Εθνικών Κρίσιμων Πληροφοριακών Υποδομών, των τραπεζών και των παροχών επικοινωνίας της Κυπριακής Δημοκρατίας.

Russia Blocks ProtonMail and ProtonVPN

03 Φεβρουαρίου 2020

Proton Technologies’ security-focused ProtonMail end-to-end encrypted email service and ProtonVPN VPN service have been blocked by the Russian government since yesterday.

“On January 29, based on the requirements of the General Prosecutor’s Office of the Russian Federation, Roskomnadzor will restrict access to the mail service Protonmail.com (Switzerland),” Roskomnadzor, Russia’s telecommunications watchdog, said in a press release.

“This email service was used by cybercriminals both in 2019 and especially actively in January 2020 to send false messages under the guise of reliable information about mass mining of objects in the Russian Federation,” Roskomnadzor added.

The block was prompted by Proton Technologies’ refusal to register their services with state authorities — something that was asked from all VPN providers operating in the country as we reported last year — and to provide information about the owners of the mailboxes used to send the bombing threats per Roskomnadzor’s statement.

“In accordance with the procedure enshrined in the legislation, Roskomnadzor consistently restricts access to resources used by criminals to destabilize the situation in the country and increase tension, and expects effective interaction with all parties involved,” the press release further explains.

Proton Technologies’ response

The Swiss company behind ProtonMail and ProtonVPN published an incident on its status page, which currently lists partial outages for most services needed by the company’s products to work properly.

“We have received reports that Proton is currently blocked in Russia. We are reaching out to the appropriate authorities to get the block lifted as soon as possible,” the company says.

“This block affects ProtonMail and ProtonVPN users who were not logged in before the block was implemented. For now, we recommend using the TOR network (via the TOR Browser) to access our services.”

ProtonMail also said in a statement to Reuters that they “condemn this block as a misguided measure which only serves to harm ordinary people.”

Although access to both services is restricted for any Russian users, Proton Technologies says that ways to get around this block are available.

ProtonMail and ProtonVPN users are advised to access the two services using the Tor service specifically is designed to help circumvent censorship.

To get access to Proton’s services using the Tor Browser you will have to follow these steps:

  1. Download the TOR browser for your device here: https://www.torproject.org/download/
  2. Install the TOR browser
  3. Once the browser is installed, launch it and you will be able to access the Proton websites

ProtonVPN users who cannot log in into the app will have to manually set up an OpenVPN connection for their device until the block is lifted:

  1. Open the TOR browser
  2. Navigate to the ProtonVPN Knowledge Base: https://protonvpn.com/support/
  3. Search for the OpenVPN guide for your OS, for instance type “Windows OpenVPN”
  4. Open the guide and follow the steps to set up a manual connection on your device
  5. Connect using your OpenVPN/IKEv2 credentials
The information contained in this website is for general information purposes only. The information is gathered from BLEEPING COMPUTER, while we endeavour to keep the information up to date and correct, we make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability or availability with respect to the website or the information, products, services, or related graphics contained on the website for any purpose. Any reliance you place on such information is therefore strictly at your own risk.  Through this website, you are able to link to other websites which are not under the control of CSIRT-CY. We have no control over the nature, content and availability of those sites. The inclusion of any links does not necessarily imply a recommendation or endorse the views expressed within them. Every effort is made to keep the website up and running smoothly. However, CSIRT-CY takes no responsibility for, and will not be liable for, the website being temporarily unavailable due to technical issues beyond our control.

Cyber threats require heightened defences

Working towards a trusted and cyber secure Europe

Protect your cyber hygiene

Cyber Europe 2022 [exercise]