Wikileaks are back at it again with their cryptic puzzles. Lets dig straight in and see where they take us.
CLUE 1
e4b889 e4ba94 e4b883 e4b880 e4b883 e4ba94 e585ad e4b889 e585ab 2c20 e4b880 e4b889 e4b99d e4ba94 e4b889 e59b9b e4b99d e4ba8c e585ad e585ad
- This is a hexadecimal string of numbers that we can convert to UTF8 (Unicode Transform Format) characters using this tool.
Hexadecimal (also base 16, or hex) is a positional numeral system with a radix, or base, of 16. It uses sixteen distinct symbols, most often the symbols 0–9 to represent values zero to nine, and A–F (or alternatively a–f) to represent values ten to fifteen.
UTF-8 is a variable width character encoding capable of encoding all 1,112,064 valid code points in Unicode using one to four 8-bit bytes.
- These are a type of Chinese characters (Kanji when used in Japan).
三五七一七五六三八, 一三九五三四九二六六
- Which translates to:
Three five seven one seven five six three eight, one three nine five three four nine two six six (357175638, 1395349266)
- GPS Coordinates:
Long: 35.717564,
Lat: 139.534927
- This building is the Canon NishiTokyo Data Center in Japan.
2-4-11 Higashi Shinagawa Shinagawa-ku,
Tokyo Nomura Real Estate Tennozu Building
- A few days later Wikileaks confirmed this location was correct.
CLUE 2
2u55fq73azn2lhzm.onion/
MythicAirplanes
- This Tor address takes you to a single image of Dublin airport. A reference to to Mythic Airplanes hashtag.
- Hidden in the image metadata are GPS coordinates.
Latitude: 53°24'00.5"N
Longitude: 6°13'04.9"W
- These coordinates take you to a data center in Ireland ran by a company called GTT.
GTT is a US based
[GTT Communications, Inc.] (GTT), is a multinational telecommunications and internet provider company with headquarters in McLean, Virginia. GTT operates a Tier 1 IP network, and provides IP transit, MPLS transport services, managed services, voice and unified communications to enterprise, government, and carrier customers in over 100 countries.
United States : GTT Announces Award of Government Services Administrations IT Schedule 70 Contract | Highbeam - 07/10/2016
GTT Communications, Inc., the leading global cloud networking provider to multinational clients, announced today that it has been awarded an Information Technology Schedule 70 contract with the Government Services Administration. IT Schedule 70 is the largest acquisition vehicle in the U.S. federal government, providing government agencies with direct access to products and services from more than 5,000 industry partners.
The contract will allow federal, state, local and tribal government entities to select from GTTs comprehensive portfolio of Internet, wide area networking services, managed services and voice services, avoiding the traditionally lengthy service procurement process.
- To the side of the building tied to the fence of a service entrance is a sign that references ADSIL (Amazon Data Services Ireland Ltd).
Source
GTT Communications - Hibernia Atlantic,
Dublin International Exchange Center,
Dublin,
Ireland.
Wikileaks confirmed this location in a follow up tweet a few days later.
CLUE 3
33372e 373234 313738 2c2d31 32322e 333938 313935
- We use the same tool as before to convert the hex string to text.
- This gives us another set of coordinates.
37.724178,
-122.398195
United Layer
200 Paul Ave Suite 110 (HQ),
San Francisco,
CA 94124
- The United Layer data center boasts some pretty big clients.
Source
Again, Wikileaks confirmed this was the correct location in another follow up tweet a couple of days later.
CLUE 4
A smooth, knowledgeable operator Congen has located two firms interested, Their fingers burned before Spokesman declined to speculate on possibility of agreement
A - A smooth, knowledgeable operator:
Date: 1973 October 11, 13:30 (Thursday)
Title: ITAIPU
From: Brazil São Paulo
To: BRAISILIA | Brazil Rio De Janeiro | Department of Commerce | Department of State | Secretary of State
B - Congen has located two firms interested,:
Date: 1974 August 7, 20:05 (Wednesday)
Title: EXPORT PROMOTION - AVCO-LYCOMING GAS TURBINE ENGINES
From: Brazil São Paulo
To: Brazil Rio De Janeiro | Department of State | Secretary of State
C - Their fingers burned before
Date: 1973 November 13, 11:06 (Tuesday)
Title: UENF--CANADIAN POLISH LOGISTICS UNIT
From: Department of State
To: China Beijing | China United States Liaison Office Peking
D - Spokesman declined to speculate on possibility of agreement
Date: 1979 May 24, 00:00 (Thursday)
Title: ASSESSMENT ON RESUMPTION OF TRIPARTITE TALKS ON YACYRETA RESERVOIR AND BILATERAL AGREEMENT ON ITAIPU AND CORPUS DAMS
From: Brazil BRASILIA | Brazil Brasilia
To: STATE ASUNCION
CLUE 5
exceed Pandora southward retrospect uproot trombonist ammo Hamilton uproot Capricorn stagehand paperweight kickoff candidate chisel inertia tempest glossary klaxon disruptive
- These are words from a PGP word list.
The PGP Word List ("Pretty Good Privacy word list", also called a biometric word list for reasons explained below) is a list of words for conveying data bytes in a clear unambiguous way via a voice channel. They are analogous in purpose to the NATO phonetic alphabet used by pilots, except a longer list of words is used, each word corresponding to one of the 256 unique numeric byte values.
- You can convert the words into Hex using this list
5D A4 C6 C9 F2 E6 0C 6B F2 24 CF A5 7B 22 33 79 E1 65 7D 4D
-Searching a PGP public key server for this string returns a company name and an onion email address.
info:1:1
pub:5DA4C6C9F2E60C6BF224CFA57B223379E1657D4D:1:2048:1538889060:1601961060:
uid:Vandalay Industries vandalayindustries@3aikl3okh4znoz46.onion:1538889060::
- Vandalay Industries is a made up company name.
Source
- 3aikl3okh4znoz46.onion address takes you to a blank webpage but it you hold CTRL+A it reveals a hidden message.
----BEGIN PGP MESSAGE-----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=dI4a
-----END PGP MESSAGE-----
- Decoding this message using this base 64 decoder gives us an address.
address.txt 9651 Hornbaker Rd, Manassas, VA 20109
9651 Hornbaker Rd,
Manassas,
VA 20109
- This building is a data center ran by Evo Switch.
wikileaks has since confirmed the location
Summary
- All the clues point to specific data centers around the world.
- the data centers all appear to be 3 and 4 tier data centers.
- All the data centers are close to airports.
I think it's safe to assume their is an imminent release by Wikileaks that will relate to mass surveillance, data collection and storage.
FORTIFIED
THANK YOU FOR READING