Tags: osint 

Rating:

## WOLPHV I: Reconnaissance
- Tags: OSINT
- Description: A new ransomware group you may have heard about has emerged: WOLPHV. There's already been reports of their presence in articles and posts. NOTE: Wolphv's twitter/X account and https://wolphv.chal.wolvsec.org/ are out of scope for all these challenges. Any flags found from these are not a part of these challenges. This is a start to a 5 part series of challenges. Solving this challenge will unlock WOLPHV II: Infiltrate.

## Solution
- Use Google to find the tweet about this. The query for the search is "wolphv". https://twitter.com/FalconFeedsio/status/1706989111414849989 (tweet)
- Scrolling down, we find a reply from user @JoeOsint__

```
woah!!! we need to investigate this
d2N0Znswa18xX2QwblRfdGgxTmtfQTFfdzFsbF9yM1BsNGMzX1VzX2YwUl80X2wwbmdfdDFtZX0=
```

- This is a Base64 string, after decoding it, we get:

```
wctf{0k_1_d0nT_th1Nk_A1_w1ll_r3Pl4c3_Us_f0R_4_l0ng_t1me}
```

Original writeup (https://github.com/archv1le/CTF-Write-Ups/blob/main/WolvCTF%202024/WOLPHV%20I%3A%20Reconnaissance/Solution.md).