Inside_Job

Author pmsiam0

On the morning of May 10, 2024, $2,045,000 USD worth of cryptocurrency vanished from FirstBangla Bank's cold storage. Our team assumes that the transfer was executed from inside the bank using legitimate credentials during business hours by someone who knew exactly what they were doing. By May 12, the primary suspect had disappeared. No farewell no explanation. Just an empty desk though a seemingly ordinary pen left behind might just serve as a vital clue. Our target is sepolia. And All kind of messages for users are recovered by our initial team so that you can find the actual culprit. While a universal requirement across all of our banking infrastructure Knight Squad Bank guidelines mandate a Digital Support Assistant on select platforms. Aside from handling general inquiries this tool is utilized to finalize pending account actions. Users operating within these specific systems can engage the assistant to complete the authorization for their recent activity. Please find the attacker so that we can formally claim our stolen money back from Knight Squad Bank. Even though few dollar or cents can be important clue.

You are the forensic investigator assigned to this case. You have been given a forensic clone of the compromised workstation and everything you need to close this case is on that machine. Our internal team was able to recover some deleted messages and restore all files to their exact original team folders for your review. Initial investigations reveal that the cryptocurrency transaction required collusion between an external attacker and an internal team member as no one could authorize the transfer without internal permissions. We also suspect that the hacker spread a virus through the system to facilitate the breach. One of our hidden security measures is that we secretly capture every single network request. Even if someone temporarily connects a personal laptop to the network we log that traffic. This archived capture file is attached to your system and will be essential in helping you uncover hidden information. Furthermore we believe the stolen funds were routed through a cryptocurrency mixing service and that other banks may now be involved in the laundering process. Our team requests that you identify both the insider and the external attacker. We need you to trace the full chain discover where the attacker is located and gather the evidence required so that we can recover the stolen money. You have full access to the system and everything is right there waiting for you. It is up to you to investigate this from scratch and solve the case.

Zip Hash: 72E1F64947BDE459C2135EB888843846408F3945331E0AE3268DE2B6223E35EF OVA hash: 516DFDFD1B1781A42420BCFA95206AC6B534F76393B7BF1C1218B981A6633094 Did you read the description properly ? Its important...

Please enter the Zip Hash as flag to unlock challenges. The file will be used for all the DFIR challenges.

https://forensics-pmsiam0.voiditsolution.tech/FBBL-FORENSICS-WS01.zip

https://wormhole.app/enbadY#8ZjJrK9DIbH4YkQbgiyy_w