The Suspicious Reviewer
1 minute to read
We have this challenge description:
A suspicious social media profile has been flagged for potential astroturfing and fake review manipulation. The profile “TechReviewer2024” on SocialConnect appears to be artificially created to spread negative reviews about specific technology companies. Your task is to investigate this profile and uncover the contact information hidden within their social media presence. “Trainee, We’ve identified a potentially fraudulent social media profile that may be part of a larger astroturfing campaign. The profile “TechReviewer2024” on SocialConnect shows several red flags indicating artificial creation and coordinated inauthentic behavior. Your mission is to investigate this profile thoroughly and extract any contact information that could lead to the real person behind this fake account. Submit your findings in the (case insensitive) format:
HTB{contactemail}. Example:HTB{Gonzalo.Ramirez@email.com}. – Training Division Digital Forensics Unit”
Enumeration
We are given the following web page with a profile for the user TechReviewer2024:

There are a lot of posts and comments, but everything looks like a placeholder. According to the description of the challenge, we need to find their contact information, so let’s go to “About”:

Nice, we can see a link to “Show Contact”. If we click it, we will see their email address:

Flag
And that’s it, the flag is:
HTB{alex.morgan@tempmail.com}