Threema DDoS attacks cripple secure messaging service, users face extended outage

Earlier this week, a series of coordinated DDoS floods hammered the Threema DDoS attacks, temporarily shutting down its encrypted chat platform.

Threema DDoS attacks expose vulnerabilities in secure messaging

Users reported login failures, message delays, and a complete outage lasting up to six hours. The onslaught, attributed to a botnet of compromised IoT devices, peaked with traffic spikes that pushed bandwidth consumption beyond the service’s capacity thresholds. Analysts at Reuters noted a ↓ 40% dip in active sessions during the peak hour.

“Such attacks test the resilience of end‑to‑end encryption at scale,” said a cybersecurity expert.

Threema’s engineering team activated mitigation protocols, rerouting traffic through scrubbing centers and restoring partial functionality within two hours. The incident reignites debate over whether privacy‑focused apps can sustain prolonged volumetric assaults without compromising user experience. Bloomberg warns that repeat assaults could erode confidence in encrypted messaging, prompting providers to invest heavily in DDoS defense infrastructure.