The Meridian City call came at 7:52 AM, just as Aiden finished cross-referencing the third water utility SCADA vendor against the address Phobos had dropped onto his phone. He hadn't slept. The Faraday cage office had become a bunker, the walls pinned with printed schematics of pressure zones and smart-meter mesh networks. His coffee had gone cold twice.
Agent Voss didn't bother with pleasantries when she rang. "A woman named Maya Halstead is dead in Meridian City. Drowned in her own basement. The smart valve on her main water line opened at maximum pressure for eleven minutes, then closed and wiped its own logs. I'm sending a car. You're coming with me."
Aiden looked at the address on her text. It matched the pin Phobos had given him.
"I'll be outside," he said.
The drive to Meridian City took three hours through the gray winter scrub of the Rust Belt. Voss drove while Aiden read the preliminary report on a tablet. Maya Halstead, fifty-three, environmental attorney, lived alone in a restored Victorian in the old mill district. Her basement had been converted into a document archive and safe room—fireproof door, reinforced concrete, the kind of place you built when you'd spent a career making powerful enemies. The irony was structural: the safe room had become a cistern. Water had filled it to the ceiling in under four minutes, and the electronic lock had seized, trapping her inside. Cause of death: drowning. Time of death: approximately 2:14 AM.
"The smart valve was a HydroLink 9400," Aiden said, scrolling. "Municipal-grade, installed by Meridian Water as part of the smart-city grant two years ago. It's got an LTE modem for remote shutoff. The logs show it received a firmware update at 2:02 AM. Then a remote open command at 2:03 AM. Then nothing."
"We have the update package?"
"Quarantined. Meridian Water's IT director is screaming that it's digitally signed with their own code-signing certificate."
Voss tightened her grip on the wheel. "Same methodology as Marwood. Valid credentials, surgical targeting, no trace."
"It's the same toolset," Aiden said. He hesitated, then added, "I've been analyzing the artifact from the NAWP workstation. The framework is called Janus. It's... something I encountered years ago. Nation-state grade. It has modules for power grids, water systems, gas distribution, even hospital building management. This isn't a script. It's a weaponized platform."
Voss was silent for a long stretch of highway. "You knew about this before tonight."
"I suspected. Now I'm sure."
"And the person who built it?"
Aiden watched the gray horizon. "Someone who used to be on our side."
They arrived at Maya Halstead's house just before noon. The street was cordoned off, local PD milling alongside Meridian Water engineers in high-vis vests. The house was a dark green Victorian with a sagging porch and a hand-painted sign in the front garden: HALSTEAD ENVIRONMENTAL LAW. PRO BONO CONSULTATIONS WEDNESDAYS.
Inside, the basement stairs descended into a nightmare. The safe room door had been forced open by rescue crews, revealing a space that still dripped from every surface. Boxes of legal documents had swollen into pulp. A floating desk chair had wedged against the ceiling. The smell was cold and mineral, like a flooded cave.
Voss interviewed the local investigators while Aiden examined the HydroLink controller mounted on the basement wall. The device was a nondescript gray box with a small LCD screen, now dark. He unscrewed the faceplate and connected a portable logic analyzer to the JTAG debug port. The firmware was still there, mostly intact. He dumped it to his hardened tablet and began comparing it against the known-good image he'd pulled from HydroLink's public repository during the drive.
The differences were subtle. A function had been patched inside the valve-actuation routine: the firmware now accepted a secondary authentication token, one that wasn't part of any HydroLink specification. When it received that token over the LTE modem, it would ignore all safety limits—maximum flow rate, pressure cutoff, manual override—and open the valve completely. Then, after a configurable delay, it would execute a wipe routine that zeroed out the event log and rebooted into the original firmware image, leaving no trace of the modification.
It was elegant. It was devastating. And it was Janus. The patched function had the same calling convention and memory footprint as the GOOSE-spoofing module Aiden had seen at Marwood. The code even contained a string that matched Janus's internal build stamp: JNS-WTR-3.4.1.
Aiden saved the evidence and climbed back upstairs. Voss was in the living room, talking to a Meridian PD detective. She broke off when she saw Aiden's face.
"It's the same," he said. "Janus has a water module. It pushed a malicious firmware update through Meridian Water's own update server, then issued a kill command. The valve obeyed, then erased itself."
"Can you trace where the update originated?"
"Not from here. The LTE traffic would have gone through the utility's carrier gateway. I'll need access to Meridian Water's core network and their telecom provider's logs. And I'll need to find out who Maya Halstead really was."
Voss raised an eyebrow. "She was a lawyer."
"She was a target," Aiden said. "Elias Croft wasn't just a discrimination case witness. He was connected to a toxic waste cover-up in a town called Merrion Hills, near Helion Cross. He signed off on illegal disposal contracts. Now a woman who spent her career suing polluters dies by drowning in her own archive. There's a pattern here."
They spent the afternoon inside Meridian Water's network operations center, a windowless bunker beneath the city hall. Aiden worked with the utility's reluctant IT staff to pull server logs, firewall records, and the digital certificate audit trail. The firmware update had been pushed from an internal IP address assigned to the engineering department's build server—a server that hadn't been patched in eighteen months and was running a vulnerable version of a continuous-integration tool. The attacker had compromised the build server, signed the malicious firmware with a stolen certificate, and pushed it through the legitimate update channel. Every connected HydroLink device in Meridian City had briefly received the malicious firmware at 2:02 AM. But only one valve—Maya Halstead's—had received the open command.
"It was a targeted poisoning," Aiden explained to Voss. "They infected every device to hide the real target in the noise. By morning, every HydroLink in the city had been rebooted back to clean firmware. Except Halstead's. Her valve received the kill command before the wipe sequence could trigger, so the malicious firmware persisted long enough for us to capture."
"They wanted us to find it," Voss said.
"Or they don't care if we do. The technical forensics don't lead anywhere. The build server compromise used a zero-day in the CI tool that's never been seen before. The certificate theft left no trace beyond a single anomalous login from a VPN node in Tallinn. This is a ghost."
That evening, Aiden sat in a borrowed office at the Meridian City field office, combing through Maya Halstead's digital life. Her laptop had been recovered from the main floor, undamaged. It was a treasure trove of environmental litigation: lawsuits against chemical companies, mining conglomerates, agricultural processors. But hidden in an encrypted volume—which Aiden cracked in twelve minutes using a flaw in the disk utility's random number generator—was a folder labeled "Archived." Inside were old forum posts, dating back nearly a decade, from a site called WhistleWall.
WhistleWall had been a haven for anonymous whistleblowers in the mid-2010s, before it was shut down by a coordinated takedown in 2019. It operated on the Tor network and used a custom anonymity protocol that had never been broken. Its users posted under cryptographic pseudonyms and discussed everything from corporate fraud to government misconduct. Halstead's archived folder contained posts from an account named "Mercury_44," which had detailed, over the course of three years, a massive cover-up involving illegal dumping, falsified water-quality reports, and bribed regulators in a town called Merrion Hills. The posts named companies, executives, and mid-level managers. One of those managers was Elias Croft.
Mercury_44 had also posted about a lawyer who had once represented the victims but later switched sides, accepting a settlement from the polluters and burying evidence that could have led to criminal charges. The lawyer wasn't named in the posts, but a follow-up message contained a single phrase: "She took their money and left the children to die. The case number was 1445. I will not forget."
Aiden's throat tightened. Case 1445. The same number embedded in Janus's build stamp. The children's oncology ward at St. Jude's. The contamination that killed Martin Kade's sister.
Maya Halstead was that lawyer.
He stared at the screen, piecing it together. Kade's sister had died in Helion Cross, but the contamination there was linked to the same corporate network as Merrion Hills. The EPA case 1445 had been a consolidated investigation covering multiple towns. Maya Halstead had started as a crusading environmental attorney, representing the families. Then something changed. She took a settlement. She buried the evidence. And the criminal case collapsed. The polluters walked. The children kept dying.
And now, years later, someone—Kade, Phobos, whoever—was executing every person involved. Not for money. Not for ideology in the abstract. For justice. Cold, algorithmic justice delivered through the infrastructure those same corporations had poisoned.
Aiden spent the next hour tracing WhistleWall's digital remnants. The site was long gone, but its user database had been partially leaked in the 2019 takedown, and those hashes had been cross-referenced against other breaches. He found Mercury_44's public key fingerprint in an old PGP keyserver. The key had been used to sign a message on a darknet forum just six months ago. The message was a bid. The forum was called Acheron's Dock.
He navigated to the hidden service address he found referenced in the signature metadata. The page that loaded was stark: a black background with a single line of text.
ACHERON'S DOCK BROKERAGE FOR ACCIDENTAL RESOLUTIONS INVITATION ONLY
Below it was a login prompt. No username. No password. Just a field asking for a "Proof of Solvency"—a cryptographic signature proving ownership of a specific amount of untraceable cryptocurrency, currently pegged at 500 Monero.
Aiden had Monero. He kept a wallet from his consulting days, funded anonymously. He generated the proof-of-solvency signature and submitted it. The screen flickered, and a new page loaded.
It was a marketplace. Listings scrolled down the page, each one a human life distilled into a title: "Regional Compliance Officer — Midwest Petrochemical," "Former EPA Liaison — Southeast Division," "Logistics Director — Waste Disposal Contracts." Each listing had a status: OPEN, FUNDED, IN PROGRESS, or RESOLVED. The funding came from anonymous bidders who pooled cryptocurrency into a contract that would only pay out when the target's death was confirmed by a decentralized oracle—a network of scrapers that monitored news obituaries, death certificates, and hospital records.
Maya Halstead's listing was marked RESOLVED. Payment released: 1,200 Monero. Confirmed at 3:17 AM.
Elias Croft's listing was marked RESOLVED. Payment released: 900 Monero. Confirmed at 8:43 PM, the night of the Marwood blackout.
And there were more. A dozen OPEN listings. Another six FUNDED and IN PROGRESS. The last IN PROGRESS listing was for a target in Meridian City: "Facility Manager — St. Armand's Medical Complex." The status had been updated three minutes ago. A new bid had been placed.
Aiden felt the room narrow. St. Armand's Medical Complex was the largest hospital in Meridian City. And someone had already funded a kill. The method wasn't specified—Acheron's Dock didn't list methods—but the category tag said "Critical Infrastructure — BMS." Building Management System. The same systems that controlled HVAC, fire suppression, and backup power.
And the backup power at a hospital, if deliberately sabotaged, could kill dozens during surgery. Not just a single target. A massacre disguised as an accident.
He grabbed his phone to call Voss. But before he could dial, a new message appeared in the corner of the Acheron's Dock interface. A direct message from a user whose handle made his blood freeze.
Phobos: "You found the Dock. I knew you would. Don't stop the hospital. The target isn't the patients. I'm not a monster. I'm a surgeon. The facility manager signed purchase orders for contaminated water pumps at three dialysis centers. He knew the pumps were failing. He renewed the contract because the supplier was his brother-in-law. Twelve people died from septic infections. He's listed as ACCIDENTAL in their obituaries. I intend to correct the record."
Aiden's fingers hovered over the keyboard. He typed: "This isn't justice. This is murder by algorithm."
Phobos: "Justice is a word the powerful use to describe whatever they get away with. I use different words. Precision. Accountability. Closure. You of all people should understand. You built half the tools I'm using. You just never had the stomach to pull the trigger."
Aiden: "I built them to stop attacks, not carry them out."
Phobos: "And how many people died while you stopped attacks? How many polluters got richer while you wrote memos for the NSA? Don't lecture me about ethics, Aiden. You're already complicit. Every line of Janus's code has your fingerprints on it. The only difference between us is that I'm honest about what I'm doing."
Aiden: "What are you doing?"
Phobos: "Closing case 1445. One name at a time. There are seventeen names on the list. Croft and Halstead were numbers one and two. The facility manager is number three. After that, the real targets begin. The executives. The regulators. The politicians who took the bribes. By the time I'm done, everyone who let a town die will know what it feels like to drown in the dark."
Aiden: "And if I try to stop you?"
Phobos: "You won't. Because after you see the evidence on the next target, you won't want to. And if you still do... remember that Janus is running on a mesh network now. I can trigger any device, anywhere. Including the pacemaker your mother had installed last year. Sleep well, Aiden. The next kill goes live in fourteen hours."
The direct message window closed. The listing for the hospital facility manager still showed IN PROGRESS. The decentralized timer on the contract read 13:58:42 and counting.
Aiden sat motionless. Outside the window, the lights of Meridian City blinked on as dusk fell—every one of them a potential weapon. His mother lived in a retirement community in Ashford, two states away. She'd had a pacemaker installed in November. He'd never told anyone at the agency. He'd never mentioned it in any communication. But Phobos knew. Phobos had access to medical records, to the mesh networks that connected implantable devices, to the invisible web of infrastructure that made modern life possible.
And Phobos was Martin Kade. It couldn't be anyone else. Only Kade knew about Aiden's mother's heart condition. They'd talked about it once, late at night in a SCIF, years ago, when Kade's sister was still alive and they were both still pretending the work they did made the world safer.
Now Kade had become the threat they'd been trained to stop. And Aiden had fourteen hours to decide whose side he was really on.
No comments yet. Be the first to comment!