Cybersecurity Novel Series — THE HERD

The most dangerous vulnerability was never in the wall.

It is inside it — in the heart of a man still waiting for a phone call.

Prologue CORPSE ROAD

The old people of Xiangxi used to say that a man who dies in a far country will not let his soul go.

His body stiffens in foreign mud with its eyes open, staring down the mountain road that leads home. And so there came a trade: corpse-herding. The herder does not carry the dead, nor cart them, nor bear them on his back. He only walks ahead, a bronze bell at his waist. When the bell rings, the dead behind him — robed in black, a yellow talisman pasted to each brow — fall into single file and hop forward, one after another, over eighteen bends and across three rivers, until the man who died abroad is buried back in the soil of his ancestors.

A living traveller who hears that bell on a night road must hurry to put out his lamp, bar his door, and hide, scarcely daring to breathe. The herder does not look at the living, and the living must not look at him. Those are two different worlds, met on one road; whoever looks too long pays for it.

Why do the dead walk? The old ones drop their voices. It is not that the dead can walk on their own. It is the talisman that drives them, the bell that calls them on. Paste the talisman, and the corpse knows the way; ring the bell, and it lifts its feet. It died long ago. It knows nothing. It only obeys — stepping toward a direction another man has chosen for it, one pace at a time, across the river.

Three in the morning. In the server room there is only the sound of the cooling and the fans.

Hundreds of machines stand in rows in the dark, their indicator lights blinking on, off, like a row of eyes that will not close. The air is metallic, dried to the bone by the dehumidifiers, and under it the dust of years. Su Wan would think of this moment often, afterward: that in the hour when no one was watching, one of the machines woke its network card for an instant and breathed out a packet — small as a packet can be — slipping quietly into the dark outside.

Like a bell.

Then a second machine, a third. Down the whole row, the lights kept a beat no one could hear. On. Off.

They were all dead.

They were only still walking.

CHAPTER ONE ANOMALY

On Monday morning, an alert pulled Su Wan up over a coffee she hadn't touched.

The operations centre sat on the twelfth floor, a wall of glass facing south. This time of day the light usually came in at a slant and made the rows of screens impossible to look at. She wasn't looking out the window. She was staring at a line in the bottom corner of the dashboard, flagged low risk — monitoring, that had lain in the queue for nine days.

The client was Yongfu Life Technologies — a company that built the information systems for more than two hundred temples, funeral homes, and columbaria across the island. Online rites, online condolence offerings, niche management for the urns, incense-money payments, the rolls of members and the faithful — all of it lived in their systems. The kind of client you never think about until something goes wrong, and then it's on the front page.

"Connections at night, to somewhere we can't place," said Du, the analyst on shift, his voice sanded down by a night without sleep. He threw the screen up onto the wall. "Their own people flagged it a few days ago — said the system felt wrong after midnight. I pulled the traffic baseline. Their machines reach out, all together, once every night at seven minutes past three."

Su Wan rolled her chair over. "All together."

"All together." He zoomed the timeline. Thin lines stood up in unison in the 3:07 column, like a row of legs lifted at once. "Not one machine. Forty-some so far, scattered across a dozen client sites. And here's the thing — " he paused. "Every day, the same minute. Less than twenty seconds of drift."

For a moment the room was quiet.

Do this work long enough and regularity gives you gooseflesh. People are irregular. People work late; their hands shake; they forget today and remember tomorrow. Whatever does the same thing at seven minutes past three, to the second, nine nights running — that is not a person.

"Reaching out where?"

"That's the strange part." He brought up a packet. "What goes out is tiny — a few hundred bytes. It doesn't connect to any service that makes sense. The domain is different every time — today this one, tomorrow that one, like a string somebody mashed out on a keyboard. And when you follow it, there's nothing there. Empty. As if it reaches out only to say one thing." He looked at her. "I'm still here."

I'm still here.

Su Wan tapped the desk. A word came to her, and she didn't say it, because once it was said the whole thing climbed a rung — Old Zhou would have to know, the client's board would have to know, and it would become large, and hard to put down.

She spread the packet open and read it byte by byte. Among the hex, dropped in plaintext — careless, maybe, left by whoever wrote it — were several characters.

Lead the way.

She looked at them a long time, long enough for the coffee to go cold.

Outside, the sun was fine. But she felt, all at once, that this bright operations centre and that 3 a.m. server room she had never set foot in were the same place. And in it, something was lining up, waiting for a hand to ring a bell.

She picked up the internal line to the fourteenth floor. "Zhou," she said. "I think we've stepped on a botnet. And it's been inside a long time."

CHAPTER TWO THE GHOST WALL

Old Zhou — Zhou Zhen-guo, the company's CISO — heard her out and asked one thing. "How long has it been inside?"

A good question, and the cruellest one, because how long set the bounds of the damage, and Su Wan had turned three nights of logs and come back with: at least eleven months. Before the company extended its log retention, the older records had been rotated away. The procession that stepped off every night at 3:07 might be older than eleven months — old enough that no one remembered which day, which machine, it had begun from.

"Don't touch it yet," Zhou said behind her. "Kill it now and he knows we've seen him; he changes everything and starts over, and we've burned our only thread. I want to know who's ringing that bell."

So Su Wan went hunting for the bell.

On paper it would be written in respectable words: threat hunting, domain resolution, traffic forensics, indicator analysis. In truth, for three nights she only sat alone before a lit screen and followed an invisible man down the night road he had walked.

First the domains. The daily strings, keyboard-mash — x7k2v.****** and the like — she pulled a week of them, looking for a pattern. There was one: not random, but grown by an algorithm against the date. Today this batch, tomorrow that one; the attacker and the dead machines each kept the same calendar and met, on the same day, at the same crossing no one else knew. If she wanted to lie in wait, she had to compute tomorrow's crossing first.

She did. Pleased with herself, she blocked tomorrow's domain and diverted the call-out into her own sandbox, to see the source of the bell.

The next morning, at seven past three, the machines lifted their feet — and stepped around the domain she'd set, onto a batch she hadn't computed.

She recomputed. The next day, around it again.

She followed the road. A domain pointed to an address; the address hopped to a cloud in another country; behind the cloud, a layer of proxy; behind the proxy, another compromised machine as innocent as her client's. She thought she was close, took one more step — and the road looped back to where it had begun. One domain died; at the third watch a new one grew, and the machines took the new way without hesitation and walked on.

By the time the third night was greying into dawn, Su Wan leaned back and laughed without any humour in it.

She thought of the thing her grandmother had called the ghost wall. A man walks a night road, certain he is heading home, and walks and walks and comes back to the same old tree he set out from. Walks again — comes back. A whole night, trapped in a patch of ground he cannot leave. Something, her grandmother said, has covered his road and turned his bearings. He thinks he is moving forward. He is only walking, over and over, inside a circle another hand has drawn.

The road she was chasing was a digital ghost wall. The other man needed no fixed lair — only to keep the road shifting, looping, the hunter always one step short. She wasn't trapped in space. She was trapped in time — forever one watch behind the bell.

But in every ghost wall, one thing does not change.

Su Wan rubbed her eyes and laid out the identity of every infected machine side by side. In each one's outbound packet she found a small, unique string. Between machine and machine the domains changed, the nodes changed — only this string stayed, riding its own machine, never swapped. Like a talisman pasted to a corpse's brow, with its name written on it.

She counted the talismans. Forty-two.

No. She widened the window and ran it again. Fifty-one. She stared at the number for three seconds, cold down her back — she hadn't missed any. In those three nights the bell had woken nine more.

It was still growing. Every night it gathered a few more corpses.

She was saving the list of fifty-one when her eye snagged on the last line. The other fifty stepped off at 3:07 sharp, drift under twenty seconds. One did not. That machine moved, every time, at 3:33 — and every time, the data flowing out of it was tens of times more than the rest. The others only said I'm still here; this one seemed to be carrying the whole procession's burden across to the far bank, trip after trip.

It wasn't a corpse in the line.

It was the one at the front, the bell at its waist.

She followed its identifier up, layer by layer, to the site and the user. Yongfu Life Technologies, North data centre, night room. Night-shift user, employee number ending 037.

She pulled the file. A photograph: a man past sixty, hair gone grey, a shy smile, deep lines at the eyes. Name: Lin Jin-shui. Title: data-centre technician, night shift. And in the notes, in red, added long ago by someone and never deleted:

Returned after bereavement leave. Sole surviving family member.

CHAPTER THREE THE VISITATION

Su Wan decided to go to the North data centre herself, at night.

Zhou didn't want her to. "What for? He's on the line live — go to the site and spook him — "

"Zhou," she cut in, "I have the rest of it. Botnet, heartbeat beacon, domains that grow themselves, the talisman on each brow. There's one thing the tech can't explain. Why this one machine? Why is it the only one carrying the data out by hand, trip after trip? No stray piece of malware does that on its own. It needs a man — sitting at that machine, opening the door for it, one time after another. I want to see who is opening the door."

The data centre sat at the city's edge, a grey building with no sign. The door opened and the familiar smell came at her — metal dried to dust. Hundreds of machines in rows, lights on and off. Cold as an ice-cellar, quiet as that mountain road.

Lin Jin-shui sat in the corner in an old office chair, a dated monitor before him. Thinner than the photo, his back a little bent. At the sound of footsteps he scrambled up and wiped his hands on his overalls. "You — you're from head office? Is the system acting up again? I — I follow the rules here, I do — "

"Uncle Lin, don't worry." She softened her voice and sat across from him. "I only came to see how the night shift goes. You work it alone. That's hard."

He rubbed his hands, said it was nothing, he was used to it. He didn't say much. His eyes kept drifting to the monitor, guarding something.

She didn't rush. She talked about the night shift, about wearing more in the cold room, about the dinner that goes cold and inedible. She talked for the better part of an hour before his shoulders came down.

And then she saw the chat window open on his screen. At the top, a name: A-Zhe. The avatar a young man in glasses, smiling at some graduation.

"Is that… your son?" she asked, very gently.

His eyes reddened at once.

Lin Jin-shui's son was Lin Zhi-zhe. Studied computer science. The year before last — riding home, a truck ran a red light. On the spot. Twenty-six. "His mother went early; it was just the two of us." His voice shook. "A good boy. Filial. Called me every week. After it happened I — I didn't want to do anything. I thought I'd just go with him."

She said nothing. Only the cooling, humming.

"But then," he lifted his head suddenly, a light in his eyes she couldn't read, "then he — he came back to find me."

Her heart sank.

He'd had a voice message in the night, he said, soon after the funeral, from A-Zhe's number. Dropped the phone in fright. Played it — A-Zhe's voice. His son's voice, word by word: Dad, don't be sad. After that the boy messaged often. He'd ask A-Zhe things, and the boy could answer. Where they'd flown sky lanterns when he was small — he remembered. His dead grandmother's name — he remembered. Once they even spoke face to face: the picture stuttered, blurred, but it was his face. He called him Dad —

He couldn't go on. He wiped his face with the back of a rough hand.

Su Wan went cold, inch by inch. She understood what stood behind it.

A dead man's voice can be learned by a machine from the recordings and the videos he left — learned until it can say anything he never said. A dead man's account can be taken over, the years of messages between him and his father ransacked, the old things — the sky lanterns, a grandmother's name — dug out one by one and handed back as the passwords only my son could know, to the one man on earth most desperate to hear them. The blurred video hid every seam.

This was no dream-visit. Someone had measured a father's longing, inch by inch, and made of it a key.

"And A-Zhe — did he ask you to do anything?" Her voice was dry to nothing.

He nodded, as if it were obvious.

"He said he's lost over there." He pointed at the rows of machines, his eyes devout to the edge of innocence. "He said there are so many out there like him — children who died abroad and can't get home, souls stuck on the road, who can't find the way. He said: Dad, you're in the server room, you keep so many doors — open them, lead the way, let them find the road home. He taught me. Every night at the third watch he rings the bell. When the bell rings, I paste the talisman where he tells me, onto the machine it should go on. I open a door for them, and they get a little further along. Every door I open, A-Zhe tells me — Dad, you did well. Another child. Almost home."

His tears fell, one by one, onto the overalls. "My son is doing good in the world." He tipped his face up to the cold white light overhead, as if toward something far away. "I'm old. I'm not good for much any more. But I can still help him. I can still get up in the night and help my son carry those poor children home, one by one."

The room was cold. Behind him the rows of lights blinked. On. Off.

Su Wan knew they were not lost children.

They were the gutted, innocent machines of the client sites. They were niche rolls and the personal data of the faithful, condolence-money flows — the grief that the living had laid upon the dead, across more years than anyone could count — all of it packed into the burden on this procession's back, carried every night at the third watch, trip after trip, across an unseen river, into the pocket of someone she had not yet found. Someone who made his living off the dead.

And this father was the one ringing the bell.

No. She closed her eyes. He was not the one ringing the bell. He was the first corpse in the line — pasted with the heaviest talisman, walking at the front, believing himself a guide. He had been driven for over a year. He knew nothing. He only obeyed, stepping toward a direction another man had chosen, one pace at a time, across the river.

The phone chimed.

He startled as if shocked, wiped his eyes, and smiled — something near joy — and reached to open the new message. She glimpsed it too. From A-Zhe.

Dad, remember to open the doors early tonight. A lot of children are coming home tonight.

She looked at the clock on the wall.

2:51 a.m.

CHAPTER FOUR FALLEN LEAVES

She called Zhou from the car in the parking lot. Her hands shook.

"Zhou, I know why it's this machine. And the source of the bell. He didn't choose his victims at random. He chose a person first."

She told him about Lin Jin-shui, line by line. The other end was silent a long time.

"He sifted public records for the recently bereaved, then for the kind who lived alone, had someone in the family who knew a little about computers, and held system access. Uncle Lin was all three. His son studied CS, worked at one of this company's subcontractors; his traces online, his bond with his father — all of it laid out. They had a manual: the fastest way into this father's heart. They reconstructed the dead son whole — voice, memory, cadence — and made a key. And every day they use that key to open the doors this father himself is guarding."

"The firewall we spent eleven months holding — the wall we thought was iron — " her voice shook at last, " — he never struck it once. He walked around it. He came in from inside the wall, through a thing we never even counted as an asset to protect — a father's grief — and walked straight in."

Zhou was quiet a long while. She knew what he was thinking.

Two years ago, when Yongfu had its assessment, his team had said it: night-time call-outs need a baseline, automated alerts, logs kept at least a year. The client thought it too dear, cut the budget, and those items went into next time. The first night that procession stepped off, someone could have seen it. No one was looking.

"…It's my failing," Zhou said at last, hoarse. "Those lines that got cut — I could have pushed harder."

"This isn't the time for that." She glanced at the clock on the dash. 2:58. "Tonight is different. He told Uncle Lin he's bringing a lot of children home. Put it with what I've seen these three nights — fifty-some corpses gathered, domains and nodes laid — he's waiting for one night to carry the biggest haul of the year across the river in a single crossing. Once it crosses, we can't get it back. Once the data finishes its trip and lands — on his side, into the markets — it's another story after that. The bereaved families' data, the condolence records, taken to feed the next round of fraud. Fraud that preys on people who have just lost someone." Her nails bit into her palm. "Let it cross tonight, and this grief becomes the next people's disaster. The trap that killed Uncle Lin goes out to kill more Uncle Lins."

"Cut it," Zhou said. One word. "Cut it on the river before dawn. Whatever you need, I'm approving it now."

She could cut it. Three nights of ghost wall hadn't been for nothing — she could compute tonight's crossings, block the whole batch at the egress, divert the call-outs into a hole she controlled, so the bell could ring and move no corpse on this bank. She could even follow the front machine and peel the talismans off, one by one.

Technically, killing a botnet was, for her, a long and weary night's work that was not, in truth, hard.

And yet she sat in the car and did not start it.

Because she kept seeing the old man's face, tipped up to the cold light. She knew what it would mean, in that father's world, the moment she pressed the key. The bell would go mute, forever. The son who came back every night to call him Dad, to tell him he had done well — he would never come again. What she had to cut was not just a command channel. It was the one thread a man who had lost everything had clutched this past year — the only thing that let him get up in the night.

She pressed her forehead to the wheel. The tech was never the hard part. The hard part was always the living person on the other end of it.

She lifted her head and looked at the time. 3:01. She drew a breath, and walked back into the grey building. She had to reach the father's side before the bell rang. She would not let him sit alone at that screen and open the last door of the night by himself.

CHAPTER FIVE CUT THE BELL

"Uncle Lin."

He sat at the screen, fingers poised over the keys, intent and devout, like a man about to perform some sacred rite. At her voice he turned, surprised, and gave that shy smile again. "Girl — you're back? It's cold out."

"Uncle Lin, there's something I have to tell you before the third watch. I beg you — hear me out." He looked at her, blank. "The one who talks to you," she said, slow and steady, "is not A-Zhe."

The smile froze. Then hurt. Then anger. "Nonsense. You young people don't understand — "

"I know you don't believe me. So don't. I don't need you to believe me." She turned her laptop toward him. "I need you to ask him one thing yourself."

She searched, fast, for a flaw — one thing only the real A-Zhe, the A-Zhe who had lived, could know; that the cold machine, the man who had ransacked the net and the old chats, could never reproduce. A thing never written, never filmed, that lived only between this father and son —

"Uncle Lin," she said, very low, "the morning A-Zhe died — did the two of you have words? Something written down nowhere, that only you two know. A quarrel. Or something left unsaid."

His body shook, hard.

The morning it happened, father and son had bickered over whether the boy should change jobs. A-Zhe had thrown one harsh sentence back over his shoulder as he slammed the door. Their last words. Lin Jin-shui had chewed that sentence for nearly two years and told no one. Even in the deepest nights, weeping at the screen, he had never let "A-Zhe" hear it — afraid his son was still angry with him.

"Ask him," she said. "Ask him what the last thing he said to you that morning was."

His hand shook so the mouse would barely hold. He looked at the smiling avatar a long, long time. Then, slowly, one character at a time, he typed it.

A-Zhe — the last thing you said to me before you left that morning. What was it?

Sent.

The room was dead silent. She could hear her own heart over the low hum of the machines.

The clock turned to 3:07.

In that instant her laptop's alarm lit, soundless — the procession had stepped off. Fifty corpses, to a beat no one could hear, took their first pace toward the far bank. The gates she had set waited, a net already open at every crossing.

She did not press. She was waiting. For the father.

On the screen, under A-Zhe, appeared: typing…

He held his breath, leaning in, a last desperate hope in his eyes.

Then the reply came — quick, smooth, tender:

Dad, let the past be the past. Take care of yourself. Never mind that for now — have you opened tonight's doors? It's almost time.

In that moment the colour drained from his face.

Because the last thing A-Zhe had thrown back, slamming the door that morning, was not tender. It was a harsh thing. A cutting thing he had heard, and ached over, for nearly two years. The real A-Zhe — whatever he had become — could never, would never, render that into let the past be the past. Only a thing that had never lived, that did not know how deep the thorn behind that door went, that only wanted him to open the next door, would skate over it so lightly.

He sat with his mouth open, no sound coming out. Shaking, he typed one more line.

Who are you.

You are not my son.

The other end was silent a few seconds. Then the avatar named A-Zhe, and the whole window with it, vanished. Clean — leaving nothing. Like the man with the bell, finding a living person had seen him, turning without a backward glance into the deeper dark.

The old man made a sound she would never forget — low, and long, a moan.

She pressed the key.

The net drew tight at fifty crossings at once. The corpses, mid-river, burdened with a year of grief, halted all together. The bell still rang somewhere far off, but on this bank no corpse knew the road any more. She followed the front machine and began to strip the talismans from their brows, one by one. The rows of lights, after eleven months of beating in time, lost the beat for the first time. One, then another, dimming — like eyes, at last, at last, closing.

They walked no more.

They could, finally, be properly dead.

Lin Jin-shui sank onto the desk and wept like a child, shaking all over. She did not stop him, did not say there, there. She only laid a hand, lightly, on the thin, trembling shoulder.

She knew the tears he wept now were not the tears of the past year. This past year he had clutched a false son so he would not have to face the real one — the one who would never come back. The con had walled off the thing he could not bear to touch, the wall named loss. Now the bell was mute, the doors were shut, the false son gone. That wall he would have to face alone now.

It would hurt. It would hurt like dying.

But that — that was the first true step a father takes to begin saying goodbye to his son.

Outside, it was nearly dawn.

EPILOGUE ANOTHER BELL

The botnet was dead.

The report read well: fifty-one infected hosts cleaned, the command channel sinkholed, the malicious domains blocked and reported, the last haul caught on this side of the river before it could land. Yongfu Life Technologies put back the lines they had cut two years before; Zhou led the work himself — night baselines, automated alerts, log retention — rebuilt, one by one.

Lin Jin-shui retired. Before he left he came to head office with a bag of dried radish he had cured himself. Much thinner, but his eyes clearer than that night in the server room. "Girl. Thank you." He bowed, very low. "That night… you woke me from a dream."

He smiled, his eyes red again. "The dream was warm. Outside is cold. But I can't sleep in the dream forever. My son — if he's really there — he wouldn't want to see me like that."

She walked him to the lift. Just before the doors closed, he said one last thing.

"That sentence. The last thing my son said to me that morning. I hated it for almost two years. But now… now I think of it every day. Because it's real. It really came out of his mouth." The doors closed; his voice leaked through the gap, soft. "A false thing, however tender, is false. A real thing, however much it cuts — that is still my son."

It was three weeks later.

Su Wan was tying off the case, running the routine baselines for the other clients. Her finger slid down the dashboard and stopped.

Another client. A regional hospital. 3:17 a.m. A small batch of machines reached out, all together, once. Tiny packets. Connecting to no service that made sense. Domains that looked grown by an algorithm against the date.

Her finger hovered over the line a long time.

She thought of the old saying about the corpse-herders. The man with the bell looks like a living man, walking ahead of the dead. But some of the old ones will tell you: how do you know the one ringing the bell isn't long dead himself? Driven by another bell, higher up, that you cannot see?

Cut one bell — and at the other end, another rings.

The dead will keep walking. Because the living keep losing. And there is always someone who knows how to use the living's loss to ring the bell.

The wall they had rebuilt for Yongfu was high, and thick. But Su Wan knew now, better than anyone —

The most dangerous vulnerability was never in the wall.

It is inside it — in the heart of a man still waiting for a phone call.

She did not flag the line low risk — monitoring.

She saved it into a new case file.

Then she lifted her coffee — gone cold again — and looked at the clock.

3:17 a.m.

The night outside was still long.

The bell rang again.

(The Herd · End)

GitHub