t2'16: Challenge to be released 2016-09-10 10:00 EEST

"Tomi Tuominen" <[email protected]> Tue, 30 Aug 2016 22:48:21 +0300
Newsgroups gmane.comp.security.penetration
Message-ID <[email protected]>
--=_MailMate_B9350022-969E-4739-8EFA-7E6E672D0479_=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

It is that time of the year again.

Unicorns attract competitors, copycats and charlatans. For a VC, the road=
 to losing the principal is paved with poor decisions, bad luck and ultim=
ately betting on the wrong horse. One of the challengers in the unregulat=
ed pay-per-hitchhike app industry, Astley Auto Association, has been tryi=
ng to raise a C round. Its founder and CEO, a controversial character, is=
 claimed to represent the darker side of the booming startup scene. While=
 his fans cheer the sticking-it-to-the-man attitude R. Astley has demonst=
rated to the regulators, there are critics, including many notable ventur=
e capitalists and angel investors, who say the man embodies the lack of i=
ntegrity and honesty.

With circumstances as messy as those of a publicly funded open source pro=
ject, it gets even messier. An unknown actor has compromised the e-mail s=
erver of Astley Auto Association. To prove they have the whole archive, c=
hosen mails from CEO of AAA, R. Astley, and other employees were collecte=
d to a dump.
A disgruntled employee, competitor, VC trying to bring down the valuation=
, angry customer, or a random opportunist - clearly an attribution questi=
on so difficult it can only be solved by world leading threat intelligenc=
e companies.

Luckily we are more interested in a good hacklog and thorough compromise.=
 A properly placed string tells sometimes defenders and investigators mor=
e than thousand words in a compliance report. The mission, should you cho=
ose to accept it, is to analyse the e-mail dump and uncover the clues lef=
t by the unknown actor, which demonstrate the devastating level of contro=
l they have over the environment.

For more information, please refer to https://t2.fi/challenge/t216-challe=
nge/

The Challenge will be released on 2016-09-10 10:00 EEST right here at htt=
ps://t2.fi/

Good luck,

  T

-- =

Tomi 'T' Tuominen | Founder @ t2 infosec conference | https://t2.fi


--=_MailMate_B9350022-969E-4739-8EFA-7E6E672D0479_=
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename=signature.asc
Content-Type: application/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----
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=CKwL
-----END PGP SIGNATURE-----

--=_MailMate_B9350022-969E-4739-8EFA-7E6E672D0479_=--