Cyberpolyglots

Multilingual OSINT Puzzles

Test your investigative skills by navigating foreign social media networks—such as Weibo or regional Telegram channels—to track down targets, geolocate photos, and capture flags.

(Note: Dedicated devices will be provided at the village so attendees can participate without needing to create personal accounts on these platforms.)

Open-Source Translation Sprints (Localization Hackathon)

Help make cybersecurity knowledge accessible globally! Organizations like OWASP are always looking for native speakers to translate critical documentation. Spend some time at our village translating these resources into your native language. Any Pull Requests (PRs) submitted during the sprint will use a special template highlighting the community volunteer work done right here at SecretCon.

Cultural Social Engineering (Phishing localized)

Host a workshop analyzing real-world phishing emails from different regions. Discuss how attackers use local slang, cultural nuances, and regional authorities (like a specific country's tax agency) to trick victims, and have participants try drafting hyper-localized phishing lures.

Threat Intel Challenges: Unmasking the Actor

Analyze sample logs and datasets to attribute threat actors to their region of origin based on linguistic and cultural artifacts. Put your analytical skills to the test across several domains:

• Web & Infrastructure: Spot Cyrillic characters in HTML, analyze meta tags, check charset declarations, and hunt through Shodan or Certificate Transparency (CT) logs for non-English language in SSL cert fields.
• Phishing & Social Engineering: Identify ESL (English as a Second Language) phrasing patterns and cultural markers, such as writing "Dear Mr. Sam," leaving days of the week uncapitalized, or using awkward syntax like "receive your approval" instead of "hear back from you."
• Malware Analysis: Dig into the code to find error strings in specific languages, file paths or registry keys using non-Latin characters, and timestamp compilations that denote foreign working hours.
• OPSEC Failures: Track down infrastructure regions through mixed-language use in emails, domain registration details, and localized SSL certificates.