This is the ProtonMail team here. Tutanota dosn't have the proper protection in place. But they might not need it either, the criminal gangs that hit all the other email providers in the past couple weeks were mostly using Tutanota. It seems Tutanota has become the favored email service for criminal activity as they do not take action against criminals using their service. Most of the email providers that have come under attack this week have been in communications with each other recently and it has come up more than once that people find it odd that Tutanota was not hit given that they are one of the most vulnerable to this type of attack.
Copied below is the header of the email sent to ProtonMail by the Armada Collective (sent from Tutanota). We are providing in the hopes that the Tutanota team will take some action to assist with the police investigation.
Date: Thu, 5 Nov 2015 05:02:10 +0000 From: Armada Collective [email protected] To: [email protected], [email protected], [email protected], [email protected] Message-ID: [email protected] Subject: Last message... Content-Type: multipart/alternative; boundary="----=_Part_27804_1682092767.1446699730359" Return-Path: [email protected] X-MS-Exchange-Organization-PRD: keemail.me Received-SPF: Pass (CERNMX11.cern.ch: domain of [email protected] designates 81.3.6.162 as permitted sender) receiver=CERNMX11.cern.ch; client-ip=81.3.6.162; helo=w1.tutanota.de; X-MS-Exchange-Organization-Antispam-Report: v=2.1 cv=Rqv8ckWK c=1 sm=1 tr=0 a=NWjJFkBqKFwfqIhIqLNzug==:117 a=NWjJFkBqKFwfqIhIqLNzug==:17 a=MKtGQD3n3ToA:10 a=1oJP67jkp3AA:10 a=ZZnuYtJkoWoA:10 a=qtqOOiqGOCEA:10 a=GhuoowTfsbGEfy5yA3EA:9 a=d5UN2CflisHT9Wd-:21 a=dwtZwxxnUTYM3Zhs:21 a=QEXdDO2ut3YA:10 a=nZ9GeCKu-gjkM2uc5NsA:9 a=6d7D8z3b27SR0vjC:21 a=_W_S_7VecoQA:10;OrigIP:81.3.6.162;SCL:0 X-MS-Exchange-Organization-AVStamp-Mailbox: MSFTFF;1;0;0 0 0 X-MS-Exchange-Organization-SCL: 0 X-MS-Exchange-Organization-SenderIdResult: PASS X-MS-Exchange-Organization-AuthSource: CERNMX11.cern.ch X-MS-Exchange-Organization-AuthAs: Anonymous MIME-Version: 1.0