Flag4All - Projet FOX Trouble From the East

Category

OSINT

Description

Les services de contre-espionnage ont appris que 3 pilotes de la Bundeswehr ont été recrutés par S. B., un homme d’affaires chinois et fils d’un officier de l’Armée Populaire de Libération. Afin d’être payés, nous savons qu’ils ont chacun établi une société écran. Vous avez pour tâche de retrouver l’identité de chacune de ces entreprises.

Format du flag : FLAG{nom de l’entreprise/nom de l’entreprise/nom de l’entreprise} (par ordre alphabétique)

Difficulty

Medium - 448 points

• Author: Projet FOX

Write up

The Story

This challenges needs a lot of understanding of the story beneath. The beginning is tough, because we do not have clear information. Just go and Google dork: "Bundeswehr" "son of a People's Liberation Army officer"

We then find this article on fist link

To recap:

• Su Bin, a chinese businessman, has employed three ex-Bundeswehr pilots for its own business in China.
• The pilots are accused of spying for China.
• This story comes from 2013.
• This was written by two german journals: spiegel.de and zdf.de

The three men are not fully identified, but they are called:

• Alexander “Limey” H.
• Dirk J. (Tornado pilot)
• Peter S.

In both articles, we learn that proofs have been found in the Panama papers, a massive offshore data leaks.

We could probably find their companies in those data.

Panama Papers

The first article specifies that it is in the Panama Papers - Mossack Fonseca that the leak provides, and that their companies were based in the Seychelles.

This link is where this database can be found. Here with filters to find our Dirk. I couldn’t apply more filters, because the site refuses to expand the menus, so I had to Ctrl+F a lot in those results.

I was searching for:

• Dirk J
• Mossack Fonseca leak
• Juridiction: Seychelles
• Linked to Hong Kong
• From 2013

Dirk Janssen and its company GATOR CONSULTING LTD fully matched the first.

Same research for Alexander H leads us to Alexander Hoening and Phamivity Consult Ltd

Peter S. gave too many results. So I had to Google dork, using his previous camarades pages: "peter" "PANAMA PAPERS - MOSSACK FONSECA" "Hong Kong" "26-AUG-2013"

This gives us only one, and good result: Peter Helmut Schmitt and its company FlyHi Consulting LTD