Tags: osint 

Rating:

WOLPHV I: Reconnaissance

  • Tags: OSINT
  • Description: A new ransomware group you may have heard about has emerged: WOLPHV. There's already been reports of their presence in articles and posts. NOTE: Wolphv's twitter/X account and https://wolphv.chal.wolvsec.org/ are out of scope for all these challenges. Any flags found from these are not a part of these challenges. This is a start to a 5 part series of challenges. Solving this challenge will unlock WOLPHV II: Infiltrate.

Solution

  • Use Google to find the tweet about this. The query for the search is "wolphv". https://twitter.com/FalconFeedsio/status/1706989111414849989 (tweet)
  • Scrolling down, we find a reply from user @JoeOsint__
woah!!! we need to investigate this
d2N0Znswa18xX2QwblRfdGgxTmtfQTFfdzFsbF9yM1BsNGMzX1VzX2YwUl80X2wwbmdfdDFtZX0=
  • This is a Base64 string, after decoding it, we get:
wctf{0k_1_d0nT_th1Nk_A1_w1ll_r3Pl4c3_Us_f0R_4_l0ng_t1me}
Original writeup (https://github.com/archv1le/CTF-Write-Ups/blob/main/WolvCTF%202024/WOLPHV%20I%3A%20Reconnaissance/Solution.md).