Cicada 3301 is the most baffling and enigmatic mystery on the internet that appeared on the 4th of January, 2012, and was ended after one month. A user on 4chan posted this image to the site’s infamous /b/ or random board. The anonymous author, who went by the four-digit pseudonym 3301, challenged users to uncover a message hidden within the image. In a white text on a black background, and this was the beginning of the message: “Hello. We are looking for highly intelligent individuals. To find them, we have devised a test.”
Cicada 3301 Repetition
Within minutes of the image being posted someone discovered that by opening the file using a text editor and an appended string of readable text could be found. The string contained a cipher that, once deciphered, formed a link to yet another image. At first, this appeared to be a dead-end but using an application knows as OutGuess users were able to extract hidden information embedded within the first image. The extracted information lead to a Reddit which in turn contained information about a book.
The book along with a code could then be used to uncover a phone number that, when called, played this prerecorded message.“Very good you have done well there is three prime number associated with the original final, jpg image 3301 is one of them you will have to find the other two multiply all three of there number together and add .com on the end to find the next step good luck goodbye”.
To pass them you had to know something about coding, or cryptography, or just have general smarts when it comes to wordplay and references. Who is doing this? A cult? The government? was this the work of the dark arts? Was it dangerous? Will we ever find out who was behind it? There are also rumors that an organization such as the NSA or MI6 could be doing it as a recruitment strategy, or that some cyber-cult was just messing with people’s heads.
The two missing numbers mentioned in the recording proved to be the dimensions of the original image. After multiplying the width and height with 3301 and using the product as a web address, users were taken to a website. The website consisted of a countdown as well as an image of a cicada. When the countdown reached zero, the page was updated with a list of coordinates. The coordinates pointed to locations around the globe. 14 locations in 5 different countries. It was new up to participants living near the specified coordinates to rise from their comfortable armchairs and venture outside.
At each location was a poster with the cicada symbol and a QR code. The codes linked to an image, the image contained a riddle, the riddle lead to a book, and the book leads to a website. But here, the puzzle took an unexpected turn. Only a select group of first arrivals to this website were accepted into the final stane of the puzzle. The site eventually closed down with the message: “We want the best, not the followers”
The finalists were also warned not to collaborate with others nor to share the details of this private stage of the puzzle. Well, given that we know this, it’s safe to say that not everyone heeded that warning. But those who did presumably advanced through the final stages before reaching the very end of the puzzle. After nearly a month of silence, an image appeared on the Reddit announcing the conclusion of the puzzle and, just like that, the hunt was over.
Cicada had supposedly found the “highly intelligent individuals” they were looking for and whatever happened to them is a bit of a mystery but more on that in a moment. The lack of an explanation was perceived by many as confirmation that the puzzle had been nothing but a wild goose chase intent on wasting everyone’s time.
The Second Puzzle
Whoever was behind this intricate game had the foresight to include an authentication code known as the PGP signature along with every clue. This allowed users to verify that an immature message was actually from cicada as opposed to some impostor seeking to derail or hijacked the puzzle. Cicada had repeatedly warned of such “false paths” and insisted that any message lacking a valid PGP signature should promptly be disregarded.
That’s why this image posted exactly a year and a day after the first provoked such a frenzy. After a year of lackluster imitations, this image finally matched the official PGP signature. Cicada out was back and it was time for round two. The second Puzzle was not too dissimilar from the first. The image enclose a message, the message led to a book the book produced a link, and gradually the Puzzle unfolded.
At one point, a recording titled “The Instar Emergence” was uncovered. Another clue leads to a cryptic Twitter account which then leads to an image. The image proved vital to the progression of the puzzle but the inclusion of this runic alphabet would remain a mystery for quite some time. Much like the first puzzle, the second swelled into the physical world when a list coordinates compelled participants to, once again, take to the streets in search of enigmatic posters.
This time it was 8 locations in 4 different countries Okinawa Japan, Moscow Russia, Little Rock, AR, USA and Columbus, GA, USA. But eventually, the trail went cold once again. Another select group of first arrivals had been accepted into a final private stage of the puzzle. Unlike the first puzzle, the second did not conclude with an official message from Cicada. The trail merely went cold and Cicada vanished once more leaving us no closer to an explanation. However, this was still not the end.
The Third Puzzle
At the beginning of 2014, it was time for round three. Once again the image enclosed a message, the message leads to a book, the book produced a link, and suffice it to say, it was more of the same. Except, this time the puzzle seemed to revolve around a strange book. The book was titled, Liber Primus, meaning First Book in Latin, and was evidently written by Cicada.
The runic alphabet uncovered in 2013 finally made sense as the book was primarily written in runes. Even so, the meaning of the translated pages was cryptic at best. The book consisted of various philosophical and ideological ideas and appeared to be their manifesto. Many have since compared the strange writings to that of a cult. Nevertheless, the book also comprised a myriad of clues and codes.
For example, this page advised participants to seek out a website on the deep web but the site remains undiscovered. Another page leads to a website containing yet another recording titled “interconnectedness.” However, a significant portion of the book has yet to be translated. The runic text on some of the pages appears to be obfuscated by layers of encryption that has yet to be decrypted. Of the 74 pages featuring runes, only 19 have been successfully translated.
As 2015 came and went without the launch of a new puzzle, many came to suspect the Liber Primus had to be completed if Cicada was to return. This was more or less confirmed at the beginning of 2016 when Cicade encouraged a reexamination of the book. More than six years have now gone by with minimal progress and near-complete silence from Canada. the question raised by the original image has gone ignored. What is the purpose of these puzzles? Who’s behind them? what happens when you reach the end?
The End Of Cicada
When the initial image appeared on 4chan back in 2012 many assumed Cicada 3301 to be an alternate reality game designed by a corporation to promote a new service or product. For example, Microsoft developed an elaborate ARG back in 2001 to promote the film Artificial Intelligence and a similar viral marketing campaign was used to promote the release of Halo 2.
But the release of subsequent puzzles and the complete lack of commercialization has more or less eliminated that possibility. If we choose to believe some of the leaked information from the private end-stage of each puzzle than we do gain some insight into who this group might be. For example, at the end of the first puzzle, finalists supposedly received this email.
In it, Cicada themselves as an international group who believe that privacy is an inalienable right. The aim of each puzzle is to recruit like-minded individuals in an effort to develop privacy-conscious solutions. The email then concludes with three questions. The PGP signature, which would have confirmed the authenticity of the email, was conveniently removed by the leaker.
If a version with a valid signature does exist online I was unable to find it. But regardless of its legitimacy, I find this question a bit odd. It reads: “Do you believe that information should be free?” Assuming the expected answer is yes then the very first sentence. “DO NOT SHARE THIS INFORMATION!” it seems a bit hypocritical. While the idea of a secret society recruiting individuals by means of elaborate cryptographic puzzles may seem a bit absurd or even conspiratorial it’s not entirely unfounded.
Who Is Behind The Cicada 3301
Corporations and governments alike have employed similar recruitment techniques since at least the second World War. In 2013, the British intelligence agency GCHQ launched a recruitment program known as participants had to decrypt a number of cryptograms hidden across the internet and those who managed to solve the entire puzzle were offered a prize or a position at the agency. Google did something similar with enigmatic billboards back in 2004 and the US Navy launched a near-identical project in 2014.
Okay, but then, what about the recruits? Why have we not heard from these chosen few? It’s just that separating a legitimate finalist from an impostor is virtually impossible. In a 2015 interview with Rolling Stone, two alleged winners of the first puzzle chronicled the events beyond the final stage.
After receiving an email from Cicada they were taken to a forum on the dark web. Here, they could communicate with some twenty some odd recruits as well as a handful of established members of Cicada. They were told that Cicada 3301 had been founded by a group of friends who shared common ideas about security, privacy, and censorship. The goal was to work as a collective to develop software applications in line with that ideology. As a friend recruited friends, this secret society quickly expanded into a decentralized international organization.
The recruits were then tasked with developing software that fit the ideology of the group and members of Cicada would oversee their progress. But without the allure of a puzzle to be solved, the recruits quickly lost interest. By the end of 2012, all but one had left and a few months later the site was gone. They never heard from Cicada again.
What Happens To The Winners?
One of the two winners, named Marcus Wanner, later elaborated further in a video by YouTuber Nox Populi. Furthermore, Nox Populi himself claims to be a winner of the second puzzle so we reached out to him and this is some of what he had to say. After completing the final stage of the second puzzle Nox Popli received an invitation to join Cicada 3301.
However, he was not invited to a website but was instead merely told to be patient. Then, around May of 2013, all communication with Cicada abruptly ceased. This was around the same time as when the website dedicated to the winners of the first puzzle was suddenly taken down. Nox Populi later contacted other winners of the second puzzle to compare notes and their experiences were identical.
In his own words: “All the stories were the same, we were invited to join 3301, then something happened and silence followed a request for patience.” Nox Populi supposes that roughly five others completed the second puzzle in contrast to the twenty-odd winners of the first. In regard to who or what Cicada is, Nox Populi believes they could be a remnant of the cypherpunk movement of the late 80s and 90s.
Essentially a small group of activists advocating widespread use of strong cryptography and privacy-enhancing technologies but he admits that there is no way to know for certain. If you want a far more comprehensive walkthrough of these puzzles as opposed to our brief overview, While these accounts cannot be verified they do make for a very compelling argument as to what Cicada 3301 is.
Future Of The Cicada 3301
A group of anonymous developers seeking to develop privacy-conscious applications by recruiting talented individuals via cryptographic puzzles. Sure, it is not nearly as a shadow government seeking world domination or any of the more fantastical theories but it is certainly more plausible. You have to keep in mind that no parts of these puzzles would have required more than one person.
The posters are often pointed to as evidence that this must be the work of some international organization but I beg to differ. I mean, right now, I could use any number of services to hire random people around the globe to install posters for me. Although given that no posters were located more than an hour away from an airport leads me to believe that one or multiple persons actually traveled to these locations.
Some of the posters were found within walking distance of an international airport. The fact is that anyone with a disposable income and enough time on their hands would be able to create the illusion of a vast secret network spanning the globe. Not saying that is the case with Cicada 3301 but it is nonetheless a possibility that cannot be discounted. with all of that being said, I personally think a loose-knit group of privacy-minded hobby cryptographers to be the most plausible explanation.
Cicada made their last public statement April of 2017, merely warning against disinformation, but the current status of the third puzzle and the possibility of a fourth remain clouded in mystery.
[…] might have guessed this is the guy we’d have at number one, as he’s kind of a mythological hacker. Looking at security websites such as Kaspersky, they all agree that this man deserves a lot of […]