Cipher: Lethal Algorithm (US Marshals: Task Force 9, #2)

1. The Zero-Day

The Zero-Day

IVY

Money doesn’t talk. It screams.

It howls through the fiber-optic cables beneath the Atlantic. It whimpers as it’s washed clean in the Cayman Islands. It roars as it floods into the accounts of men who trade in human misery.

Right now, the scream is deafening.

My current state: The Venetian Macao, fourteenth floor. Floor-to-ceiling glass, the Pearl River Delta going dark and humid beyond it. Monsoon rains slamming against the windows as if they want to be let in.

My desk is a ruin of my making—three monitors curved into a semicircle, the router’s green constellation of lights, a rig I assembled from components bought across four countries and shipped to a freight forwarder in Kuala Lumpur under a name I burned six months ago.

The Herman Miller chair I dragged from the business center down the hall three days ago cradles me in luxury, because the desk chair that was here is ergonomically unacceptable for a twelve-hour operational window, and I have standards.

The espresso is a mistake I’ve been making since 2:00 AM. I brewed it strong and left it to go lukewarm because the burn is ninety seconds from completion and I’m not missing the number I’ve been waiting six weeks to pull.

Six weeks of coding architecture. Six long, arduous weeks of learning the Consortium’s Cyprus server routing like the floorplan of a building I intend to torch. The financial flows of eleven shell entities thread through four tax jurisdictions.

I’ve mapped every corridor, every emergency exit, every weight-bearing wall. I know which accounts drain first. Which ones trigger automated alerts and at what threshold. I know, to the second, how long I have before Cyprus wakes up.

I’ve done this forty-seven times.

The ritual doesn’t get old.

I sip the lukewarm espresso and tap the enter key.

Execute.

On the three monitors, my code cascades like green rain. It’s beautiful. It’s organic. It’s a digital vine, rooting itself into the bedrock of the server, twisting around the firewalls, squeezing until the security protocols suffocate.

Access Granted.

I lean back in the Herman Miller chair and the numbers roll.

One hundred million dollars.

Two hundred.

Three years of this.

Three years since the Gemini Foundation file landed in a dead drop from a contact I trusted.

The Foundation runs as a charity—medical visas, safe passage for people with nowhere left to go.

It’s the Consortium’s front door. The intake photograph.

The entry marked liquidated. What the Consortium’s money actually represents isn’t currency.

It’s not even crime. It’s the machinery by which people who have nothing are converted into a line item, sold, and then erased.

I can’t undo what’s already been done. I’ve tried to find other ways to hold them accountable. I haven’t found one that works.

What I can do is make the machine expensive. Make it painful. Cost them enough, in enough places, that the operating model bleeds.

Two hundred million dollars in Consortium funds is justice by attrition.

It’s a message. It’s a fire. It’s the only answer I know how to give.

The money routes through a thousand shell companies, bouncing off satellites in low Earth orbit, fracturing the data packets until they are nothing but digital dust.

I’m not stealing the Consortium’s money. I’m burning it.

Outside the floor-to-ceiling windows, the neon skyline of Macau bleeds into the heavy monsoon rain. The Pearl River Delta is dark and restless, much like the men I’m currently robbing.

I check the time. 03:00 local.

The Consortium’s accountants in Cyprus are waking up. They’re pouring their coffee. They’re logging in.

In thirty seconds, someone spills that coffee.

Alert. Intrusion Detected.

A red window pops up on my secondary screen.

My jaw tightens.

It isn’t the system admin. The admin is lazy; he uses a standard brute-force detection script I bypassed three days ago.

This is a probe. Sharp. Fast. Surgical.

I pull a diagnostic on the secondary screen and run the intrusion signature against the known pattern libraries.

Law enforcement standard suite: no.

Commercial penetration software: no.

Military-grade architecture: closer, but the movement is wrong. Military code advances in formation. This is a single operator, improvising in real time.

I know what improvisation looks like because I do it myself.

The probe hits my honeypot layer—a convincing false directory structure I built for exactly this scenario—and passes through it as if it wasn’t there.

Not broken through. Through, around, as though the honeypot was a thin coat of paint on a surface the probe already had a prior sketch of.

My honeypots are good. I spent a month on them.

The cold moving through my chest is the recognition of a problem I haven’t seen before, which is rarer than fear and considerably more dangerous.

He’s not using a toolkit. He built one. Don’t know why I think he’s a “he,” but female coders, like me, are rare, especially in the darker corners of the web.

That takes resources, or it takes a very particular kind of mind—the kind that looks at an established system and sees the assumptions it runs on.

I know that mind.

I have it.

I’ve never run into it pointing the other direction before. Meaning, pointing at me.

I lean forward, putting the coffee down. My fingers hover over the mechanical keyboard.

“Who are you?”

The intrusion signature is aggressive—tearing through my outer decoy layers like a knife through wet paper. It’s a hunter.

Someone was tracking the money. Now, they’re tracking me.

I type a counter-command. Misdirection.exe.

I throw up a mirror server, a digital hall of mirrors designed to send the tracer ping-ponging between a server in North Korea and a toaster in Idaho.

The intruder ignores it.

He—the arrogant, loud signature—sidesteps the trap, and goes straight for the kernel. He’s trying to override my lockdown. He wants the keys to the vault.

“Clever. But sloppy.”

He’s fast, but he lacks finesse. He codes like a fed. It’s all straight lines and hard angles. He believes in authority. He believes he has the right of way.

I don’t believe in rights. I believe in leverage.

I open the command line.

I could cut the connection. I could go dark, wipe the hard drives, and disappear into the humid Macau night before he gets a fix on my IP address. That’s a survivor’s play.

I’m an arsonist. I don’t like it when someone tries to piss on my fire.

I type a string of code. A payload.

It’s a piece of malware I wrote when I was nineteen. I call it The Kudzu.

Send

The intruder catches the packet. He thinks it’s the encryption key. He grabs it.

Gotcha

The Kudzu activates. It blooms inside his system. It won’t destroy his computer—that would be rude—but it’ll lock his screen and freeze his OS. For the next ten seconds, it will display a single, looping animation of a green vine, twisting around his cursor, choking it into submission.

I bare my teeth in the reflection of the monitor.

“Chew on that, Boy Scout.”

The text cursor on my screen blinks.

I have chat disabled. I have the ports closed.

Letters appear. Typing. Live.

> Nice trick. Is that Poison Ivy or just a weed?

My heart kicks against my ribs.

He didn’t freeze. He sandboxed the malware, isolated it, analyzed it, and used the open connection to message me back.

In under five seconds.

The Kudzu is not a toy. I built it at nineteen with a library card, a vendor-leaked compiler, and a specific kind of fury. It has brought down six hardened systems without once being sandboxed. Never in five seconds. Never by someone who then had the presence of mind to send a message.

He’s not a fed. Feds aren’t this funny.

I should close the connection. I have the drive. I have the ledger. The smart play is to vanish before he gets a better fix on the routing.

I type back.

> It’s an invasive species. You should wear gloves.

Four seconds. Then:

> I prefer bare hands. Who are you?

Bare hands.

I type.

> I’m the Chaos Agent.

Immediately:

> Unlikely. That’s my title. You’re stealing my vibe.

I go completely still.

Chaos Agent.

Coined at sixteen in a public library in Duluth. Written once in a notebook I burned two years later. Never posted, never used as a handle, never spoken aloud.

He either arrived at the same language independently—our minds working in patterns close enough to be alarming—or he’s been inside something I’ve never shown anyone.

> I’m not trespassing. I’m fumigating. This money is dirty.

> That’s not why I’m here. Stop the burn.

Not why I’m here. Not here for the money—but still ordering me to stop. He’s asserting authority over something that has nothing to do with the Consortium’s funds.

It has everything to do with me.

It’s dangerously interesting.

I type before I’ve finished being unsettled by it.

> Make me.

I shouldn’t have sent that.

The connection spikes.

He launches an inverted Denial of Service attack. He’s not flooding me with traffic; he’s sucking the bandwidth out of the room. He’s crashing the router by starving it.

The lights on my modem flicker.

“Oh, you want to play rough?”

The modem goes amber. My secondary monitor drops frames. He’s collapsing the available bandwidth around me—a technique I designed two years ago in a hotel room in Lisbon and discarded as too aggressive for solo operations. He’s using it without hesitation. His version is cleaner. Faster.

I hate that I love it.

I stand. I grab the external hard drive containing the master ledger I just siphoned from the Cyprus server.

I kick the power strip.

Spark. Pop.

The monitors go black. The hum of the tower dies. The room plunges into darkness, lit only by the neon glow of the casino across the street.

I severed the link. He can’t trace a dead machine.

I grab my go-bag. It’s always packed. Cash. Passports. A Glock 43 I hate using but keep for the moments when code fails.

I move to the door.

My phone vibrates in my pocket.

My number is a burner. It changes every forty-eight hours. No one has this number except the broker in Singapore.

I pull it out.

The screen is black. Then, a single line of green text scrolls across it.

FOUND YOU.

I stare at the phone.

He backtraced the power surge. Hopped from the router to the local cell tower. Triangulated the only active device in the room.

He knows I’m in Macau.

Cold survival logic slithers down my spine.

“Okay. Game on.”

I drop the phone into the half-full cup of espresso. It sizzles and dies.

I open the hotel room door.

The hallway at 03:22 is hollow, the specific quality of expensive hotels in the early hours, when the serious gamblers haven’t slept and the recreational ones haven’t conceded.

A couple at the far end of the corridor moves slowly.

A service cart sits outside 1426. I move through it without hurrying.

Running looks like evidence, and evidence is something I’ve been careful about for three years.

I step out into the hallway. I walk fast, head down, blending into the late-night traffic of room service carts and stumbling drunks.

Stairs. Not the elevator. The elevator has a facial record on every floor’s call.

I mapped the stairwell access three days ago during a walk under the Mireille Fontaine legend.

Two hours, a casino membership card, everything filed under I like walking in the way that every choice I make has a reason that isn’t I’m planning to run.

But fourteen flights of stairs take too long. The trace was fast, and the corridor is quiet. I have to trust the quick change—the new jacket, the hair pinned up—is enough to scramble the facial recognition.

New rig. New face. New burner. All of it already built.

I have always done this.

What I don’t have—what I’ve never had to account for, in forty-seven operations across three years—is any idea who triangulated me.

As I step into the elevator and hit the button for the garage, a smile tugs at the corner of my mouth.

Three years a ghost. No one noticed the strings.

But he caught my signature.

Whoever he is... a Boy Scout with the sharp code... he caught me.

Bare hands. As if I’d let his bare hands anywhere near me. I’d like to see him try.

The elevator is mirrored on three sides. My reflection looks back from three angles—the new jacket, hair up, the go-bag, the specific flatness in my expression cultivated over three years of being somewhere between a ghost and a weapon.

My pulse is still elevated. I’ve been attributing it to the operational pressure.

That’s not the only correct explanation.

The elevator doors close.

I check the magazine in the Glock.

Let him come.

I’m the dragon. If he wants the gold, he’s going to have to fight me for it.