Author
Message
addlepated
Unfictologist
Joined: 17 Aug 2003 Posts: 1885 Location: Austin, Texas
[Phantomhack] "Down the Rabbithole" - email
Quote:
Envelope-to: meSPLAT addlepated.net
Subject: Down the Rabbithole?
To: (email addresses deleted by Addie for their privacy but include some ARG regulars that I recognize)
Date: Tue, 10 Aug 2004 01:41:39 -0700
From: phantomhackSPLAT fastmail.fm
X-Sasl-Enc: 6NGuWe4TPFSZJDcJyYpfvg 1092127299
Hello everyone, if this message is unwelcome, please accept my earnest
apologies. However, I believe I have a serious problem on my hands and I
was told that among all of you, I may have a solution. It took me quite
a while, in my brain addled state, to admit that I should call for help.
I am nothing of importance, a simple white hat hacker from Detroit. In
my recent activities, which I log at my journal (see below), I stumbled
upon a strange message between two fellows with a steganographic message
inside of the attached picture. In vague, but also certain, terms I
believe these men may be terrorists. Due to my technically illegal
actions, I am reluctant to report any of this to the authorities. That's
where you come in.
I was told you like Alternate Reality Games, or whatever they're called.
Since this has all the markers of a game - secretive messages high-tech
methods of concealing information, etc - I was wondering if any of you
could be so kind as to take a look at the message below and compare it
to rumored or currently existing games, so that I can rest assured that
nobody is causing problems. If this isn't one of your games, though, I'd
greatly appreciate any help I can get at piecing this thing together. I
mean, that's what you're good at, right?
You already have my email, but you can also contact me through my
livejournal which is at http://www.livejournal.com/user/phantomhack . As
promised, here is the email I intercepted. I figured that if I attached
the stegged picture, some of you might consider it malicious, since I am
a stranger and admit to being a hacker, so only upon request will I send
a copy of the picture. Thank you all for at least reading this far, and
thank you again if you decide to help me.
- Phantomhack
Return-Path: <dannyboyx@fastmail.fm>
Received: from server3.fastmail.fm (server3.internal [10.202.2.134])
by server3.fastmail.fm (Cyrus v2.3-alpha) with LMTPA;
Mon, 09 Aug 2004 04:44:39 -0400
X-Sieve: CMU Sieve 2.3
X-Attached: flag~1.jpg
X-Mail-from: dannyboyxSPLAT fastmail.fm
Received: by server3.messagingengine.com (Postfix, from userid 99)
id CA64718600D; Mon, 9 Aug 2004 04:44:38 -0400 (EDT)
Content-Transfer-Encoding: 7bit
Content-Type: multipart/mixed; boundary="_----------=_1092041078202860";
charset="ISO-8859-1"
MIME-Version: 1.0
X-Mailer: MIME::Lite 1.4 (F2.72; T1.001; A1.62; B3.01; Q3.01)
Subject: Free Ireland Forever
To: mickeymousexSPLAT fastmail.fm
Date: Mon, 09 Aug 2004 01:44:38 -0700
From: dannyboyxSPLAT fastmail.fm
X-Sasl-Enc: 17+B4PzFVK7a6ssSZ9QZSw 1092041078
Message-Id: <1092041078.20286.201956419@webmail.messagingengine.com>
The situation is in hand. Your
Passphrase is secure. There
Is no need to worry. Check
The account logs again to be sure. Remember,
Subject matters like this should not be repeated. Fall in
Line on this operation, Mick.
- Dan
--
dannyboyxSPLAT fastmail.fm
--
phantomhackSPLAT fastmail.fm
Interesting! You think the "brain-addled state" was directed at me?
Posted: Tue Aug 10, 2004 4:48 am
addlepated
Unfictologist
Joined: 17 Aug 2003 Posts: 1885 Location: Austin, Texas
BTW, the URL in the mail is wrong:
http://www.livejournal.com/user/phantomhack
should be
http://www.livejournal.com/users/phantomhack
in case you're clicking through.
Posted: Tue Aug 10, 2004 5:06 am
addlepated
Unfictologist
Joined: 17 Aug 2003 Posts: 1885 Location: Austin, Texas
I am looking at this when I should be sleeping.
Subj: Free Ireland Forever
The situation is in hand. Your
Passphrase is secure. There
Is no need to worry. Check
The account logs again to be sure. Remember,
Subject matters like this should not be repeated. Fall in
Line on this operation, Mick.
The only repeated letter in the subject is 'E'. "Fall in line" down the message and add "E" and it anagrams to "SPITTLE".
I've emailed to ask for the stegged file.
Posted: Tue Aug 10, 2004 5:18 am
AndyA
Boot
Joined: 09 Oct 2003 Posts: 14 Location: UK
Going down the lines, the first words spell 'the passphrase is the subject line'.
Just on the off-chance that hadn't been spotted. I expect you'd noticed, but since it wasn't explicit...
Andy
_________________ARG cliche #2: I don't know if this is new or not, but...
ARG cliche #5: Maybe someone can make something of this.
ARG cliche #8: I'd call but I'm at work.
Posted: Tue Aug 10, 2004 5:44 am
Wishi-san
Unfettered
Joined: 20 Oct 2003 Posts: 602 Location: UK. Southwards.
Did you err, forget to attach the attachment to the forum?
_________________Given that God is infinite, and that the universe is also infinite... would you like a toasted tea cake?
Wishi-san x Wishi-san x Wishi-san
Posted: Tue Aug 10, 2004 6:42 am
sequoya
Unfettered
Joined: 27 Jul 2004 Posts: 548 Location: Land of haggis, kilts, neds and Irn-Bru
Wishi-san wrote:
Did you err, forget to attach the attachment to the forum?
It says he'll only send the picture 'on request'.. so I guess that is the next step, right?
EDIT : In Phantomhack's journal, he says that he found a text file stegged in the picture saying:
Spoiler (Rollover to View):
The Boss handed me new orders.
Our target is a ways away, but we set up here.
The embassy and the chief, nov. 10th.
Hmm.
Posted: Tue Aug 10, 2004 12:10 pm
addlepated
Unfictologist
Joined: 17 Aug 2003 Posts: 1885 Location: Austin, Texas
AndyA wrote:
Going down the lines, the first words spell 'the passphrase is the subject line'.
Just on the off-chance that hadn't been spotted. I expect you'd noticed, but since it wasn't explicit...
Talk about not seeing the forest for the trees.
Posted: Tue Aug 10, 2004 2:39 pm
mr_cottons_parrot
Boot
Joined: 10 Aug 2004 Posts: 10 Location: UK
I just looked through his LJ and hes got abit of a theory on the email:
'I don't normally spook that easily, but hell. "Dannyboy" saying Free Ireland Forever talking about orders involving an embassy as a target? That's fucking scary. I'll be checking with some sources to see what the hell is going on. I hope I'm not reading this right.'
i thought it was interesting, but maybe this 'embasy' isnt an embasy in the building sense, but represents something else? I thought this because the text in the stegged file uses pretty good puncuation - capital leters on names etc, but not for 'embasy'. Were my years of english lessons wasted on me or should this have a capital?
Paranoa? i think so!
The more i looked through his LJ account, the more it seemed like a game. Esspecially his most recent post (10 Aug). It sais he got another email from them, and he suggested he should 'skip town for a while'
_________________"You tried so hard to be someone that you forgot who you are. You tried to fill some emptiness 'til all you had spilled over"
Posted: Tue Aug 10, 2004 5:19 pm
addlepated
Unfictologist
Joined: 17 Aug 2003 Posts: 1885 Location: Austin, Texas
mr_cottons_parrot wrote:
I thought this because the text in the stegged file uses pretty good puncuation - capital leters on names etc, but not for 'embasy'. Were my years of english lessons wasted on me or should this have a capital?
I'm not sure why you think it should be capitalized. It's not a proper noun. Am I missing something?
Posted: Tue Aug 10, 2004 5:27 pm
kenbo
Decorated
Joined: 26 Sep 2002 Posts: 171
I noticed BriEnigma http://forums.unfiction.com/forums/profile.php?mode=viewprofile&u=670 has afew posts in his friends link
_________________
I don't find excessive sanity to be a virtue.
http://kenspage1.tripod.com
Posted: Tue Aug 10, 2004 5:28 pm
mr_cottons_parrot
Boot
Joined: 10 Aug 2004 Posts: 10 Location: UK
addlepated wrote:
mr_cottons_parrot wrote:
I thought this because the text in the stegged file uses pretty good puncuation - capital leters on names etc, but not for 'embasy'. Were my years of english lessons wasted on me or should this have a capital?
I'm not sure why you think it should be capitalized. It's not a proper noun. Am I missing something?
names of places and organisations etc should be capitalised.
I supose we can just link it to paranoia then
_________________"You tried so hard to be someone that you forgot who you are. You tried to fill some emptiness 'til all you had spilled over"
Posted: Tue Aug 10, 2004 5:40 pm
addlepated
Unfictologist
Joined: 17 Aug 2003 Posts: 1885 Location: Austin, Texas
mr_cottons_parrot wrote:
names of places and organisations etc should be capitalised.
I supose we can just link it to paranoia then
If they're specific - he just "an embassy", not "The Ukrainian Embassy". It's like "I attended a university" vs. "I went to the University of Texas". Not sure if the rules are different in the UK, but AFAIK that's the American way to do it.
Posted: Tue Aug 10, 2004 6:12 pm
addlepated
Unfictologist
Joined: 17 Aug 2003 Posts: 1885 Location: Austin, Texas
I received a file back from him:
Quote:
Sure thing, friend. Thanks a lot for helping out.
-phantom
On Tue, 10 Aug 2004 04:05:40 -0500, "D. Cook" <me@addlepated.net> said:
> Thanks for your mail. Please do send me a copy of the stegged
> picture when you get a chance. Thanks!
>
> -D.
> --
This is the one which is supposed to be stegged. I don't think there's much out there for the Mac in the way of destegging, so if someone wants to take a look, that'd be great.
Posted: Wed Aug 11, 2004 2:56 pm
karmajay
Veteran
Joined: 05 Aug 2004 Posts: 81 Location: St. Pete, FL
I just received this also. Actually, if you dont mind, I sent an email saying I was YOUR friend and also wanted to help him! hehe
I have never tryed it, but I will work on destegging it here at work.
Posted: Wed Aug 11, 2004 2:57 pm
aliendial
Unfictologist
Joined: 29 Sep 2002 Posts: 3438 Location: Far Far Away. Nowhere Near You. Really.
Let me just point out that sending around emails talking about embassies and what can happen to them, and which sound real-world-ish, is way less innocent-sounding than rabid Halo fans discussing bees and AIs and blown up space ships. The NSA email sniffers look for some things, you know.
Be circumspect, or better still make sure it's clear you are playing a game!
_________________aliendial
Posted: Wed Aug 11, 2004 3:01 pm
Display posts from previous: All Posts 1 Day 1 Week 2 Weeks 1 Month 3 Months 6 Months 1 Year Sort by: Post Time Post Subject Author Ascending Descending