THE END GAME

THE POLYMORPHIC GHOST

***

# CHAPTER 7: THE POLYMORPHIC GHOST

`11:21 AM.`

Tomi turned around.

His sneakers squeaked against the gritty linoleum. Beside him, Priya didn’t reach for a weapon; she reached for her iPhone, thumbing the flashlight icon and sweeping a blinding, clean beam of white LED light into the pitch-black southern corner of Room B-14.

Nothing moved.

The light cut through dancing motes of thirteen-year-old dust, illuminating a graveyard of decommissioned Dell PowerEdge 2950 servers, a cardboard box overflowing with tangled blue CAT5 cables, and a rusted green custodial locker with its door hanging off one hinge.

There was no assassin in a tactical turtleneck. There was no man with a suppressed pistol.

There was only the heavy, rhythmic *thrum-thrum-thrum* of the university’s master boiler system vibrating through the foundational concrete three rooms over.

"Oloyede," Priya whispered, her voice tight and dangerously thin. Her flashlight beam trembled against the rusted locker. "I am looking at an empty closet. Tell me why my tea is on that monitor."

Tomi didn’t answer her. He pivoted back to the beige OptiPlex tower.

His brain bypassed the visceral, human terror of being watched and dropped forcefully into the cold, binary logic of network forensics. *Software is physics,* Professor Vance always said. *Data does not teleport. It requires a copper bridge, a glass fiber, or an electromagnetic wave.*

"The OptiPlex has no network card," Tomi muttered, his fingers flying across the wired mechanical keyboard. "You snipped the RJ-45 leads. It has no Wi-Fi controller. It is physically deaf."

"Then the text was already on the drive," Priya said, stepping back to the bench.

"Cole had this drive inside a military-grade Faraday cage at Fort Meade," Tomi said. He opened a second terminal tab. "He handed it to me thirty minutes ago. How did a file written in 1998 know you put too much cardamom in your thermos *this morning*?"

He didn't wait for her theory. He typed:

`dmesg | tail -n 25`

The Linux kernel ring buffer rendered instantly, printing the exact hardware enumeration sequence that occurred the millisecond he had pushed the USB-C cable into the front of the Dell tower.

Tomi’s eyes tracked down the green typography until his breath caught against his collarbone.

```text

[ 142.104211] usb 1-1: new high-speed USB device number 3 using xhci_hcd

[ 142.251004] input: HID 04e6:5116 Virtual Keyboard as /devices/.../input0

[ 142.298412] input: HID 04e6:5116 Virtual Keyboard disconnected

[ 142.310022] scsi host2: usb-storage 1-1:1.0

[ 142.311540] scsi 2:0:0:0: Direct-Access SANDSTONE MASS STORAGE PQ: 0 ANSI: 6

```

"Look at line two," Tomi rasped.

Priya leaned over his shoulder, her binocular magnifiers still resting against her forehead. Her sharp intake of air sounded like a hiss.

"It registered as a Human Interface Device," she breathed. "A virtual keyboard."

"For forty-seven milliseconds," Tomi said, pointing at the micro-second timestamps. "The moment the drive drew five volts of bus power from the USB port, its onboard memory controller didn't mount the storage partition. It pretended to be a standard USB keyboard. It opened a background bash sub-shell, executed a string of automated keystrokes to generate `README_FIRST.txt`, spoofed the 1998 file modification metadata using a basic `touch -t` command, terminated the virtual keyboard bridge, and *then* mounted the mass storage drive."

"A polymorphic BadUSB payload," Priya said. She reached out and pulled the braided USB cable straight out of the Dell tower. The monitor went blank. "It wrote the file on the fly."

"Which means the drive’s logic board has a secondary receiver built into the PCB," Tomi said.

Priya didn't say another word. She grabbed the matte-black military SSD, set it flat on the wooden workbench, and picked up a #4 Torx precision driver.

*Crack.* She didn't unscrew the housing gently; she levered the driver into the seam of the ruggedized aluminum casing and popped the backplate off with a violent, metallic snap.

She swung her binocular magnifiers down over her eyes and clicked on her overhead bench lamp.

"Cole didn't vet this hardware," Priya said softly, her fine-tip tweezers hovering over the exposed green printed circuit board. "Look right here. Soldered directly to the secondary power rail, parallel to the NAND flash controller."

Tomi leaned down.

Sitting nestled between two tiny black capacitors was a square, silver micro-chip no larger than a pinky fingernail. Stamped across its surface in microscopic laser typography was: **QUALCOMM MDM9206 // NB-IOT.**

"An IoT cellular baseband modem," Tomi said, a cold bead of sweat rolling down his neck. "With an embedded global eSIM."

"It operates on low-frequency 700MHz Long-Term Evolution bands," Priya explained, her tweezers tracing the hair-thin copper antenna trace routed along the edge of the drive casing. "It doesn't need high-speed data. It doesn't need a Wi-Fi handshake. Even inside David Cole’s cheap commercial Faraday bag, the second you stepped out of that parking garage into the open air on Harrison Street, this modem caught a low-bandwidth cellular ping from a local downtown tower."

She looked up at Tomi, her dark eyes wide behind the magnifying lenses.

"Someone sent a single SMS text payload to this drive while you were walking across campus. The modem stored the text string in volatile cache. The moment you plugged it into my Dell and gave it power, the BadUSB controller typed the text message onto your screen."

The sheer, suffocating scale of the trap settled over the damp room.

David Cole thought he was handing Tomi an immutable historical artifact retrieved from a secure vault at Fort Meade. Instead, the entity that had woken up the 1998 Sandstone protocol three weeks ago had already compromised the Defense Cyber Crime Center’s physical hardware chain.

They weren't hiding from the government.

The government was unknowingly carrying the adversary's microphone in their pocket.

"Hand me the soldering iron," Tomi said.

"Tomi—"

"Hand me the iron, Priya."

She reached across the bench, flipped the dial on the Hakko soldering station to **400°C**, and handed him the yellow foam-grip pen.

Tomi didn't hesitate. He brought the smoking, tinned copper tip down directly onto the center of the Qualcomm cellular modem.

*Sssssssss.* A sharp, acrid plume of burnt silicon and vaporized flux shot into the air, smelling intensely of burnt hair and ozone. The silver micro-chip blackened, blistered, and split down the center with a tiny, audible *pop*.

"There," Tomi said, setting the iron back in its cradle. "Now it’s just a hard drive."

He pushed the bare, stripped circuit board back into the braided USB cable and re-inserted it into the air-gapped Dell OptiPlex.

The drive mounted cleanly this time. No virtual keyboard handshake. No ghost sub-shells.

`Mounted partition: /media/airgap/SANDSTONE`

Tomi bypassed the terminal and opened the file manager graphical interface. He double-clicked the largest compressed archive: `sandstone_master_table_v1.tar.gz`.

The Tails extraction tool spun for six seconds, unpacking 1.4 gigabytes of raw, uncompiled 1998 source files into a clean directory.

At the root of the folder sat an executable database schema labeled: `LIQUIDITY_MAP_1998_Y2K.sql`.

Tomi opened it in a standard text editor.

It wasn't a communication network architecture. It wasn't a telecommunications routing grid.

It was a master ledger of the entire United States Federal Reserve Interbank Settlement System, mapped out with chilling, surgical precision. The code header contained a plain-text declaration signed by the project's original steering committee:

```text

/* PROJECT SANDSTONE // AUTOMATED LIQUIDITY DISTRIBUTION ENGINE

PURPOSE: In the event of catastrophic Y2K system failure across commercial

banking sectors, this daemon will forcefully override standard clearing hold

times and distribute sovereign liquidity to designated regional survival nodes. */

```

Beneath the header sat a static routing table consisting of exactly twelve numbered nodes.

Beside each node was a hardcoded American commercial banking routing number, a corresponding Treasury routing identifier, and an automated status trigger.

Tomi scrolled down the list.

`NODE 01 // CITIBANK NY // ALLOCATION: $12,000,000.00 // STATUS: EXECUTED (2001-09-14)`

`NODE 02 // WACHOVIA NC // ALLOCATION: $31,500,000.00 // STATUS: EXECUTED (2008-10-02)`

`NODE 03 // SVB CA // ALLOCATION: $84,100,000.00 // STATUS: EXECUTED (2020-03-18)`

`NODE 04 // VESPER IL // ALLOCATION: $48,000,000.00 // STATUS: EXECUTED (2026-11-26)`

Tomi stopped scrolling. His finger hovered over the trackpad.

Node 04 was Vesper—the exact staging server meltdown Marcus had shown him on Reddit three hours ago. The entity wasn't randomly hacking fintech startups; they were systematically walking down a twenty-eight-year-old federal Y2K emergency checklist, triggering the automated payouts one by one.

He scrolled down to the fifth line.

`NODE 05 // MIDWEST UNION PEORIA IL // ALLOCATION: $112,450,000.00`

`STATUS: ARMED`

`EXECUTION_WINDOW_UNIX_TIMESTAMP: 1801267200`

Priya pulled her smartphone out of her back pocket, opened a local Python IDE app, and typed the Unix timestamp into a quick conversion script.

She looked up, the harsh fluorescent light reflecting off her glasses.

"1801267200," Priya whispered. "That converts to precisely 06:00:00 AM Central Standard Time. This coming Tuesday."

Tomi stared at the glowing green numbers on the screen.

Seventy-one hours.

In seventy-one hours, an automated 1998 Y2K failsafe script was going to forcefully drain one hundred and twelve million dollars out of the United States Treasury general fund and dump it into a tiny regional credit union two hundred miles south of Chicago.

And if David Cole’s compromised DC3 unit didn't catch the thief before the wire cleared, the federal routing logs wouldn't point to a ghost baseband modem or a dead programmer named Pendelton.

They were going to point directly to the F-1 student visa record of Tomiwa Oloyede.

***