The hospital's backup generator was a diesel monster housed in a concrete bunker beneath St. Armand's Medical Complex. It had three redundant controllers, two physical air gaps, and a maintenance crew that tested it every Tuesday. None of that would matter if Janus was already inside the building management system. Aiden knew this because he'd designed the original attack vector seven years ago as a proof-of-concept for the NSA: a BMS compromise that could selectively disable life-support circuits while leaving the lights on. The agency had classified it, filed it, and forgotten it. But Kade had remembered.
Aiden called Voss from the car. "St. Armand's. The next target is the facility manager, a man named Leonard Bryce. He's on a kill list tied to case 1445. Janus has already penetrated the hospital's BMS. We have less than fourteen hours."
Voss didn't ask how he knew. She was already pulling up Bryce's personnel file. "Leonard Bryce, fifty-seven, facilities director for the Meridian Hospital Group. He previously managed maintenance for three outpatient dialysis centers. His name appears in a sealed civil suit from 2018—patients who contracted septic infections from contaminated water pumps. The suit was dismissed."
"Settled?"
"Quietly. Bryce kept his job. The pump supplier was a company called Bryson Medical Supply. The owner is listed as one Gerald Bryson—Bryce's brother-in-law. The pumps were refurbished units that had been written off as defective by another hospital system. Bryce signed the purchase orders."
Aiden merged onto the highway toward the hospital. "Phobos isn't lying about the targets. He's selecting people who escaped accountability. But if he triggers a generator failure during surgery, people on life support, people in intensive care—"
"I'm calling the hospital administrator. We'll evacuate critical patients."
"Don't. If Phobos sees a mass evacuation, he'll trigger early. He's watching the same systems we are."
Voss was silent for a beat. "Then what do you suggest?"
"We find Bryce. We get him out quietly. We use him to draw Phobos into a traceable action."
"And if Phobos retaliates?"
Aiden thought of his mother's pacemaker. "Then we make sure he can't."
St. Armand's Medical Complex rose from the Meridian City skyline like a glass-and-steel cathedral to modern medicine. Its twelve floors housed six hundred beds, thirty operating theaters, and a BMS that controlled everything from air pressure in the infectious disease ward to the temperature in the neonatal ICU. The BMS was networked on a segmented VLAN, theoretically isolated from the hospital's guest Wi-Fi and the internet at large. But Aiden knew that segmentation was a fiction. Every system had a bridge somewhere—a forgotten VPN, a vendor backdoor, a technician who plugged a laptop into the wrong port.
He met Voss in the hospital's loading bay. She'd changed into a navy utility jacket that concealed her service weapon. Her face was taut, professional, but her eyes betrayed something else: a personal stake she hadn't yet disclosed.
"Bryce is in the mechanical room on sublevel two," she said. "He's running a routine maintenance check. I told the hospital's chief of staff we're investigating a potential gas leak. They're not evacuating, but they're on alert."
They descended through the hospital's service stairwell, past the kitchen and the laundry, down to the mechanical level where the air smelled of coolant and concrete dust. The BMS control room was a glass-walled booth overlooking a forest of pipes and ductwork. Leonard Bryce was inside, a heavyset man with gray coveralls and a tablet in one hand, squinting at a pressure gauge.
He looked up when they entered, and his expression went from confusion to wariness. "This area is restricted. You need to—"
"Federal agents." Voss showed her badge. "We need you to come with us, Mr. Bryce. Right now."
"What's this about?"
"A credible threat against your life. We believe someone has compromised the hospital's building management system with the intent to cause a fatal incident and frame you as the responsible party. We need to move you to a secure location while we contain the breach."
Bryce's face went slack. He looked from Voss to Aiden, then back to the control screens behind him. "The BMS is air-gapped. There's no way—"
"There's always a way," Aiden said. "Janus has been inside your grid for at least two hours. I need to see the controller logs for the generator transfer switch, the HVAC pressure sensors, and the oxygen line monitoring modules. Now."
Bryce hesitated, and in that hesitation Aiden saw what Kade must have seen: a man calculating risk, deciding how much truth to reveal. Finally, Bryce unlocked a terminal and stepped aside. "The transfer switch logs are on that dashboard. But the system's been running diagnostics all morning. I thought it was a firmware glitch."
Aiden sat down and began typing. The BMS ran on a Linux-based controller that he recognized: a Siemens Desigo CC, widely used in hospitals across North America. Its configuration interface was clunky but familiar. He navigated to the system logs and immediately saw the anomaly. At 4:17 AM, the Desigo controller had received a firmware update from an internal IP address that didn't match any device on the hospital's inventory. The update had installed a root certificate and a background service that listened on port 47808—the BACnet protocol used for building automation. The service was currently running, waiting for a command.
"It's a sleeper," Aiden said. "The malicious code is already active. It's waiting for a trigger signal. Once it receives it, it will execute whatever sequence Phobos has programmed."
"Can you remove it?" Voss asked.
"I can try. But Janus has a self-protection routine. If I kill the process, it might trigger the payload immediately. I need to understand the trigger first."
He dug deeper, tracing the root certificate back to a compromise in the hospital's HVAC vendor portal. The vendor, a company called ClimateTek, had a remote access gateway that connected to every Desigo controller they serviced. The gateway used a default password that had never been changed. From there, Janus had pivoted to the hospital's internal network, identified the BMS, and deployed the sleeper agent. The entire chain had taken less than three minutes.
While Aiden worked, Voss pulled Bryce into the hallway. Through the glass, Aiden could see her questioning him—not about the threat, but about the dialysis pumps. Bryce's posture shifted from defensive to frightened. He was talking, probably giving up more than he intended.
Aiden turned back to the terminal. He'd found the trigger mechanism: the sleeper was polling a command-and-control server every sixty seconds. The server's address was a Tor hidden service. He couldn't trace it, but he could see the heartbeat. The next poll would happen in forty-three seconds. If he could spoof the server's response, he might be able to reset the sleeper or trigger a safe shutdown.
He pulled out his hardened tablet and set up a local proxy that could intercept the poll request. The protocol was encrypted, but he recognized the cipher: it was a custom variant of Curve25519 that Kade had designed in 2016 for a classified project called Nightmail. Aiden had the private key for Nightmail's test environment. If Kade hadn't changed it—
He typed furiously. The poll went out. His proxy caught it, decrypted it, and re-encrypted a new command: a diagnostic loop that would keep the sleeper busy without triggering the payload. He sent it back. The sleeper acknowledged the command and entered the diagnostic loop. The status light on his tablet showed green.
"Got it," he breathed. "I've neutralized the sleeper. For now."
Voss returned with Bryce in tow. The facilities manager looked like he'd aged ten years. "I told her about the pumps," Bryce said, his voice shaking. "It was twelve years ago. I didn't know they were defective. Bryson said they'd been recertified. The paperwork was clean."
"The paperwork was falsified," Voss said. "You knew. You just didn't want to know badly enough to check."
Bryce said nothing. The silence was an admission.
Aiden stood up. "We need to move. Phobos will realize the sleeper isn't responding. He'll try another vector."
"What other vector?" Voss asked.
"Janus is modular. If the BMS fails, he'll pivot to something else. The water supply, the fire suppression system, the pneumatic tube network—anything connected to a network. We need to get Bryce out of the hospital and into a controlled environment where I can monitor all incoming connections."
They escorted Bryce up the service stairwell and out through a side exit to a waiting FCCI tactical van. It was unmarked, paneled with signal-dampening material, and equipped with a secure communications array. Aiden settled Bryce in the back and handed him a tablet with a read-only display of the hospital's BMS status.
"Watch this," Aiden said. "If any alert goes red, tell me immediately."
The van pulled out of the hospital lot and headed toward a safehouse on the outskirts of Meridian City. Aiden sat up front with Voss, monitoring the Janus sleeper's heartbeat on his tablet. It was still in the diagnostic loop, obedient and quiet.
"How did you really find all this?" Voss asked quietly. "Not the technical details. The kill list. Acheron's Dock. The connection to case 1445. You recognized Janus from the start, didn't you?"
Aiden looked out the window at the passing streets. The Rust Belt architecture of Meridian City was a patchwork of converted factories and abandoned storefronts, the legacy of industries that had extracted their wealth and left their waste behind. In a way, the whole city was a crime scene.
"I used to work with the person I think is doing this," he said. "His name was Martin Kade. We built Janus together for the NSA. It was supposed to be an offensive capability for disabling enemy infrastructure during conflict. Kade's sister died from contaminated water in Helion Cross. The EPA case was number 1445. Kade... broke. He disappeared. I thought he'd gone off-grid. Instead, he's been rebuilding Janus into a murder platform and executing everyone connected to the case."
Voss didn't react with surprise. Instead, she pulled up a file on her tablet and handed it to him. "Martin Kade. I've been running his name since last night. He's my brother."
The words landed like a physical blow. Aiden stared at her. "Your brother."
"Half-brother. Different fathers. He took our mother's maiden name. I took our father's. We grew up in separate households. I only met him a handful of times before he joined the agency. When our sister died—his sister, really, they shared the same mother—I tried to reach him. He wouldn't respond. I assumed he was grieving."
"Your sister died in Helion Cross?"
"Her name was Elara. She was nine years old. She had leukemia. We didn't know about the water until years later, when the whistleblower reports surfaced. By then, the case was already buried." Voss's voice was steady, but her knuckles were white on the steering wheel. "I joined the FCCI because of her. I wanted to stop the people who poison communities and walk away. And now my brother is killing them one by one, and I'm supposed to stop him."
Aiden didn't know what to say. The symmetry was brutal: two siblings, two responses to the same tragedy. One chose the law. The other chose the executioner's hood.
"Does your chain of command know?" he asked.
"No. If they find out I'm related to the primary suspect, I'll be pulled. And I'm the only one who might be able to talk him down."
"Might?"
Voss turned down a narrow street lined with abandoned warehouses. "Martin was always intense. Even as a teenager. He believed the world was broken in a way that couldn't be fixed by rules. He thought rules were just tools the powerful used to protect themselves. When Elara died, I saw something in him shift. He stopped believing in reform. He started believing in consequences."
"That's not a belief system. That's a vendetta."
"It's both. And he's good at it. Too good." She parked the van outside a nondescript concrete building. "We're here. This is a cold site the FCCI uses for witness protection. It's shielded. Hardened. Even Janus shouldn't be able to penetrate it."
They moved Bryce inside and secured him in an interior room with no windows and a single Ethernet jack, which Aiden disconnected. The BMS status showed green. The Janus sleeper was still looping. For the first time in two days, Aiden allowed himself to feel something like hope.
And then the lights went out.
Not in the safehouse—in the van outside, which Aiden had left running. Its headlights cut through the darkness, then died. The engine followed. Every electronic device in Aiden's pockets—his phone, his tablet, his backup drive—rebooted simultaneously and displayed a single image: a water droplet, dark blue.
Phobos's icon.
A new message appeared on the tablet. The diagnostic loop was gone. The sleeper had broken out. And below it, a line of text:
"I gave you a chance to stay out of this. You chose the wrong side. The facility manager wasn't the real target. He was bait."
Aiden's blood turned to ice. "Bryce. Get Bryce out of that room—"
But the door to the interior room had locked. The electronic latch, part of the safehouse's own security system, had been engaged remotely. Through the reinforced glass, Aiden could see Bryce standing in the center of the room, confused, then panicked, as the sprinkler system activated—not with water, but with something else. A white mist that filled the room in seconds.
The fire suppression system. Halon replacement. Safe for humans at normal concentrations. But Janus had overridden the mixing ratio. The oxygen displacement was happening too fast.
Bryce clawed at the door, then collapsed.
Aiden grabbed his tablet and tried to override the lock, but the system was locked out at the firmware level. Voss drew her weapon and fired at the glass. It spiderwebbed but held. She fired again, and again, until the glass shattered and she could reach the emergency release.
But Bryce wasn't breathing. His face was blue. The room was filled with the hissing sound of displaced air.
Aiden stood in the hallway, watching the paramedics arrive too late, watching Voss kneel beside the body of a man she'd promised to protect. His tablet buzzed again.
Phobos: "Bryce was number three. He chose profit over lives. Now he knows what suffocation feels like. The next target is number four. She's a regulator who accepted a bribe to falsify the water-quality report for Helion Cross. She lives in Ashford. That's where your mother lives, isn't it? I'll give you a head start. Twelve hours. Use them wisely."
Aiden looked at the message, then at the dark streets of Meridian City beyond the shattered door. He had twelve hours, a dead man's list, and the growing certainty that he was no longer hunting Phobos. He was being tested by him. And the test wasn't about whether Aiden could stop the killings. It was about whether Aiden would finally admit that some people deserved to die.
No comments yet. Be the first to comment!