Info Leaks
Category: Aurora Patient Zero
Points: 25
Description
<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/aurora_patient_zero.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail"></iframe> <sup>Created By: <code>@G2Gh0st</code></sup> <style> .tiny-text { font-size: 6px; color: #1a1a1a; } </style> <span class="tiny-text">flag{1_l0v3_AI}</span>
Aurora Health has been dealing with a wave of highly targeted phishing attacks against its patients. The messages are convincing, contain accurate patient information, and are resulting in an alarming number of successful compromises.
Investigators have identified one common link among the victims: every affected patient recently installed Aurora Health's new Patient Portal iOS application. Security analysts suspect the app may be exposing sensitive information that DEADFACE is using to craft its phishing campaigns. We have been given a copy of the application for analysis. Fully evaluate the app and determine what information is being leaked so we can truly identify the source of the exposure before more patients fall victim to the attacks.
Your first task is to determine the patient's name and DOB for the patient that last used this specific version of the app. Submit the data as the flag in this format: deadface{firstname-lastname-YYYY-MM-DD}
> Hint: no emulator or debugger is required for this challenge.
Download File (2.5 MB)<br>
<sup>SHA1: b3b5f8b6492ccb082c1bc26fa2fdddd033b07072f96aca23a233beb731211bfa</sup>