Cyber Security Research Hub

The Insider’s Trail


Security team has noticed suspicious social media chatter about an insider leaking sensitive data. The attacker claims they’ve hidden a “proof-of-leak” on the open internet likely on google maps. Your job as a digital investigator is to trace the breadcrumbs left by the suspect across different OSINT sources and recover the hidden flag. The attacker uses multiple aliases online, but one username keeps showing up: purplebox23

Flag Format: BUBT-CTF{secret}
Hint

Find the provided exact image or location into Google Maps.

Enter your flag

Please enter the correct flag below. Make sure there are no extra spaces!

Flags are checked regardless of capitalisation: IWin is the same as iwin.