This page contains information on the Cicada 3301 mystery, and provides a chronological guide to the clues. == The Original Message == On the 5th January 2012, an [http://i.imgur.com/1CcV1.jpg image] was posted on 4chan's /b/ board with the message Hello. We are looking for highly intelligent individuals. To find them we have devised a test. There is a message hidden in this image. Find it and it will lead you on the road to finding us. We look forward to meeting the few who will make it all the way through. Good Luck. 3301 == The Duck Decoy, The Caesar and OutGuess == When the image is opened in wordpad, the final line of text reads TIBERIVS CLAVDIVS CAESAR says "lxxt>33m2mqkyv2gsq3q=w]O2ntk" Using a Caesar cypher, the text lxxt>33m2mqkyv2gsq3q=w]O2ntk is revealed to be a link to a second [http://i.imgur.com/m9sYK.jpg image]. This appears at first to be a dead end. However the text contains the words "out" and "guess". The image can be decoded using the steganography software OutGuess. When decoded the image contains a [http://pastebin.com/aXYZzzcv message]. The message contains a Book Code and a [http://www.reddit.com/r/a2e7j6ic78h0j/ link to a subreddit]. == The Subreddit, King Arthur and the Holy Grail == The Subreddit contains strings of text and also two images; [http://i.imgur.com/KXLOP.jpg "Welcome"] and [http://i.imgur.com/8D7hN.jpg "Problems"]. Problems is a a sterogram of a chalice made from images of King Arthur. Welcome and Problems each contain an OutGuess message; [http://pastebin.com/sJiGQEPM Welcome], [http://pastebin.com/2xkvnPER Problems]. The subreddit image header and the title of the page are different representations of the same sequence of numbers: 10, 2, 14, 7, 19, 6, 18, 12, 7, 8, 17, 0, 19, 7, 14, 18, 14, 19, 13, 0, 1, 2, 0 This code is a key by which the text posted on the subreddit can be decoded to reveal another [http://pastebin.com/iiiAWyNQ a story about king Arthur.] This is the "book" the book code is used with. When the the book code is used, a phone number is revealed; (214) 390-9608. == The Phone Number, The Message and The Primes == When (214) 390-9608 is called a [http://www.youtube.com/watch?v=k24ZrFR2IUQ recording] plays which says: Very good. You have done well. There are three prime numbers associated with the original final.jpg image. 3301 is one of them. You will have to find the other two. Multiply all three of these numbers together and add a .com to find the next step. Good luck. Goodbye. The phone number has since been deactivated. The original image was 509x503 pixels, 509 and 503 are the other two primes. The product of 509, 503 and 3301 is 845145127. == The Website, The Cicada and The Countdown == At [http://845145127.com/ the website] there was on [http://845145127.com/cicada.jpg image] of a cicada and a countdown. The image of the cidada contain an OutGuess message. You have done well to come this far. Patience is a virtue. Check back at 17:00 on Monday, 9 January 2012 UTC. At the designated time, the site changed to reveal a string of numbers. == The Coordinates, The Symbol and The QR Codes == These numbers refer to coordinates all around the world. At these locations the picture of the cicada and a QR code can be found. ''Locations marked "FOUND" have had the clues recovered'' * 52.216802, 21.018334 --- [http://maps.google.co.uk/maps?rlz=1C1AFAB_enGB451GB451&q=52.216802,+21.018334&um=1&ie=UTF-8&hq=&hnear=0x471ecce652dc03d3:0xc2a8b5aedbebff9b,%2B52%C2%B0+13'+0.80%22,+%2B21%C2%B0+1'+5.77%22&gl=uk&ei=BYkMT4rRK--Q4gTC78GXBg&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CB4Q8gEwAA Oleandrów 6, 01-001 Warsaw, Poland] FOUND * 48.85057059876962, 2.406892329454422 --- [http://maps.google.co.uk/maps?rlz=1C1AFAB_enGB451GB451&q=48.85057059876962,+2.406892329454422&um=1&ie=UTF-8&hq=&hnear=0x47e6727ebb5c3595:0x130b82c3491845c0,%2B48%C2%B0+51'+2.16%22,+%2B2%C2%B0+24'+24.77%22&gl=uk&ei=SokMT9j_BaTY4QTkhritBg&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CB4Q8gEwAA 89-91 Rue de la Plaine, 75020 Paris, France] FOUND * 48.85030144151387, 2.407538741827011 --- [http://maps.google.co.uk/maps?rlz=1C1AFAB_enGB451GB451&q=48.85030144151387,+2.407538741827011&um=1&ie=UTF-8&hq=&hnear=0x47e6727e9ba49f3d:0xc51aa053a05ee457,%2B48%C2%B0+51'+1.10%22,+%2B2%C2%B0+24'+27.78%22&gl=uk&ei=c4kMT8-bB6HP4QSC-pmbBg&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CB4Q8gEwAA 36 Rue des Maraîchers, 75020 Paris, France] * 47.664196, -122.313301 --- [http://maps.google.co.uk/maps?rlz=1C1AFAB_enGB451GB451&q=47.664196,+-122.313301&um=1&ie=UTF-8&hq=&hnear=0x54901461da48833d:0xca6142409f68544a,%2B47%C2%B0+39'+51.14%22,+-122%C2%B0+18'+47.61%22&gl=uk&ei=sokMT7fEEYWA4gTzq6mgBg&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CB4Q8gEwAA 4739 University Way NE, Seattle, WA 98105, USA] * 47.637520, -122.346277 --- [http://maps.google.co.uk/maps?rlz=1C1AFAB_enGB451GB451&q=47.637520,+-122.346277&um=1&ie=UTF-8&hq=&hnear=0x54901510daa2c70d:0x64f489563af8a9ba,%2B47%C2%B0+38'+15.43%22,+-122%C2%B0+20'+46.64%22&gl=uk&ei=-IkMT-7PNc_44QSAvomaBg&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CB4Q8gEwAA 514 Crockett St, Seattle, WA 98109, USA] * * 47.622993, -122.312576 --- [http://maps.google.co.uk/maps?rlz=1C1AFAB_enGB451GB451&q=47.622993,+-122.312576&um=1&ie=UTF-8&hq=&hnear=0x5490152b9e5a8aa3:0xbba36b6cce34f346,%2B47%C2%B0+37'+22.82%22,+-122%C2%B0+18'+45.08%22&gl=uk&ei=DYoMT62TIeWC4gSWpoGkBg&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CB4Q8gEwAA 428 15th Ave E, Seattle, WA 98112, USA] * * 37.577070, 126.813122 --- [http://maps.google.co.uk/maps?rlz=1C1AFAB_enGB451GB451&q=37.577070,+126.813122&um=1&ie=UTF-8&hq=&hnear=0x357c9c9cdcd40bc1:0xcd99ce89efd38fbb,%2B37%C2%B0+34'+37.97%22,+%2B126%C2%B0+48'+47.17%22&gl=uk&ei=HYoMT52bDYPE4gSQydH1BQ&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CB4Q8gEwAA South Korea, Seoul, Gangseo-gu, Banghwa-dong, 830-8] * * 37.5196666666667, 126.995 --- [http://maps.google.co.uk/maps?rlz=1C1AFAB_enGB451GB451&q=37.5196666666667,+126.995&um=1&ie=UTF-8&hq=&hnear=0x357ca22c8ddb4e0d:0x2e2f7b41388aeaf8,%2B37%C2%B0+31'+10.64%22,+%2B126%C2%B0+59'+41.86%22&gl=uk&ei=LYoMT46WIsrg4QTP8ZCzBg&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CB4Q8gEwAA South Korea, Seoul, Yongsan-gu, Seobinggo-dong, 287-1] * * 36.0665472222222, -94.1726416666667 --- [http://maps.google.co.uk/maps?rlz=1C1AFAB_enGB451GB451&q=36.0665472222222,+-94.1726416666667&um=1&ie=UTF-8&hq=&hnear=0x87c96ee745b12671:0x8471686542fe0999,%2B36%C2%B0+3'+59.93%22,+-94%C2%B0+10'+21.49%22&gl=uk&ei=PYoMT-DnKuiO4gTAr8yjBg&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CB4Q8gEwAA 853-899 W Dickson St, University of Arkansas, Fayetteville, AR 72701, USA] FOUND * 33.966808, -117.650488 --- [http://maps.google.co.uk/maps?rlz=1C1AFAB_enGB451GB451&q=33.966808,+-117.650488&um=1&ie=UTF-8&hq=&hnear=0x80dccc7df274f701:0x4227af0cc2eebaee,%2B33%C2%B0+58'+0.50%22,+-117%C2%B0+39'+1.92%22&gl=uk&ei=TYoMT8fTGOeL4gSy_ICfBg&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CB4Q8gEwAA 15717-15735 Euclid Ave, Chino, CA 91708, USA] * * 29.909098706850486, -89.99312818050384 --- [http://maps.google.co.uk/maps?rlz=1C1AFAB_enGB451GB451&q=29.909098706850486,+-89.99312818050384&um=1&ie=UTF-8&hq=&hnear=0x889e1d8c36f07605:0x8a32f1f454ff5614,%2B29%C2%B0+54'+32.66%22,+-89%C2%B0+59'+35.41%22&gl=uk&ei=WooMT63oEuPU4QTV5NW7Bg&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CB4Q8gEwAA State Highway 407, New Orleans, LA 70131, USA] * * 25.684702, -80.441289 --- [http://maps.google.co.uk/maps?rlz=1C1AFAB_enGB451GB451&q=25.684702,+-80.441289&um=1&ie=UTF-8&hq=&hnear=0x88d9c0322c954a39:0x9f37396dad41a5df,%2B25%C2%B0+41'+4.94%22,+-80%C2%B0+26'+28.50%22&gl=uk&ei=b4oMT4vHMoWK4gS3-KS8Bg&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CB4Q8gEwAA 8718-8798 SW 152nd Ave, Miami, FL 33193, USA] FOUND * 21.584069, -158.104211 --- [http://maps.google.co.uk/maps?rlz=1C1AFAB_enGB451GB451&q=21.584069,+-158.104211&um=1&ie=UTF-8&hq=&hnear=0x7c005f2e99031ef5:0x1c0f6edc5e6ff293,%2B21%C2%B0+34'+56.78%22,+-158%C2%B0+6'+11.15%22&gl=uk&ei=iooMT7uwJoKQ4gS8uIWXBg&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CB4Q8gEwAA 66-420 Kamehameha Hwy, Haleiwa, HI 96712, USA] * * -33.90281, 151.18421 --- [http://maps.google.co.uk/maps?rlz=1C1AFAB_enGB451GB451&q=-33.90281,+151.18421&um=1&ie=UTF-8&hq=&hnear=0x6b12b0357f1a7be5:0x13017d67e589a0b1,-33%C2%B0+54'+10.12%22,+%2B151%C2%B0+11'+3.18%22&gl=uk&ei=nooMT-zjBOig4gSXzumVBg&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CB4Q8gEwAA 143 George St, Erskineville NSW 2043, Australia] FOUND ''If you live next to one of the location marked with an asterisk and wish to help by providing pictures and QR codes from there, feel free to join the IRC channel (http://n0v4.com/irc.web.php?client=qweb&channel=cicada3310)'' == The Locations, The Links and The Poems == People checked out some of those locations and found notes attached to a lightpole with the cicada image and a QR-Code, which look like this. For some locations, no image is currently available. *[http://i.imgur.com/BxVYf.jpg Warsaw, Poland] *[http://i.imgur.com/XdNGo.jpg Paris, France] *[http://i.imgur.com/cAuUz.jpg Miami, USA] *[http://i.imgur.com/sppR9.jpg Either Arkansas OR Sydney] The QR codes all link to unique URLs which all contain the same image of a circada, and the text "3301". When decoded using OutGuess these images contain messages. Some images contain duplicate messages. Two messages have been found so far, 1 and 2. *[http://pastebin.com/HcLcAeYW Message 1] was was found from the [http://845145127.com/935691396441.jpg Arkansas] and [http://845145127.com/876873892385.jpg Miami] images. *[http://pastebin.com/r5L2YrXK Message 2] was found from the [http://845145127.com/316744223127.jpg Warsaw] and [http://845145127.com/162667212858.jpg Sydney] images. == The TOR Website == The poem in [http://pastebin.com/r5L2YrXK this pastebin] was found to be "[http://www.williamgibsonbooks.com/source/agrippa.asp Agrippa]" by William Gibson. A TOR address with the indications: http://sq6wmgv2zcsrix6t.onion/cgi-bin/get_email was extracted which led us to: *[http://sadpanda.us/images/806863-U0BL8MJ.jpg Image 1] The site contains instructions to enter an email address. Several days passed with no word, until people started reporting email arriving. All reported it only once, before dropping out of the collective solving all together. == The Mail == The mail contained a number.This number, added to the Tor URL, redirected to another page telling you the following message: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This message will only be displayed once. Here is a message that has been encrypted with RSA (the Crypt::RSA Perl module available in CPAN) : - -----BEGIN COMPRESSED RSA ENCRYPTED MESSAGE----- Version: 1.99 Scheme: Crypt::RSA::ES::OAEP [Crypted message in here] - -----END COMPRESSED RSA ENCRYPTED MESSAGE----- Here is the public key used to encrypt it. Note that it has a low bit modulus and is therefore breakable: $VAR1 = bless( { 'e' => 65537, 'n' => '[The key]', 'Version' => '1.99', 'Identity' => '' }, 'Crypt::RSA::Key::Public' ); The encrypted message is a number. Break the decryption key, then come back to this same URL and enter the decrypted message to continue. Each person who has come this far has received a unique message encrypted with a unique key. You are not to collaborate. Sharing your message or key will result in not receiving the next step. There is a second chance to get your own RSA message and key. Follow the "Numbers dot TK" hint to find it. There are many fake messages out there. Only messages signed with public key ID 7A35090F are valid. Good luck. 3301 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBAgAGBQJPEi5gAAoJEBgfAeV6NQkPMrQP/3LMYv8rg44LBR/ept5G4obG Y05S/b+tYxNXgII2NjrDJOJdT8A56369ffiIFV/Auq41Y2oWVjJnCT7f3VFC9T8L jYXijNoLo/1CT/slhXHZHBo2vgPoN+ucYeY3V67mtluTwy2cCImzOGNG5D5Q2IJG eQfvWVYHvxK0o6eMdgtZ83dwMlUWOyHOAxTFM7kR2WCccWBF+o+ErrD/eeDJJXuN ryh11bpodnzLzj/rWgnujMUpVRG+MsqPPqo3/SL9cBe54KSrGkL+wD7GjDpu1YK3 VSLsX6pQ0UW3CJgwO3PfrxB48U/JfRaSN4bJNCh8Kg65cd6fQ2fN14KIyXRrJXU1 j9CylKcBj/DYwBpv/J/j3KgcWRYQftZ7L42FY6+I34EgorFiRGx8hoZf1AoLb4Y3 boUZITIaGytm7iNpnSA0fBnCybxblOiKaPs193mdW+B5IlbvqBg0JUi61Dpa4J3G 8b5fAXMiw1fCJHixgBd/v7eZSjnDYGrFQTP857hdU8koHtJRWCskhreDBGHwZgy+ Whj8CnNfss8hxTlOxm8EGD2InhVVct9KW/mMFEP9KB/RnBugqL+E5JOhkhNvS4mk yNKZLBhwLInr/91AZKSd9D1NcvbC+aCDNXp68+tG2d/+lMD2dghtv8zJpi0QFw6Z RLFBgCDpdk08LuEPLzhB =eQt+ -----END PGP SIGNATURE----- == Future == Cicada 3301 has been dark for weeks, with no new information for those who did not receive emails. Everyone else is left wondering what the email contained and what came of the "lucky" few to receive them? herpderp signing off