She traced the outbound packets. The script wasn't mining crypto or stealing cookies. It was… pinging. Specific IPs. A dozen of them. Each ping was a "bet." 100 Credits for a "Hunt" – which meant scanning a random subnet for an open port. 500 for a "Siege" – a coordinated SYN flood against a target. The "Duel" was the worst. 1000 Credits. A direct, zero-day exploit attempt against a live server. Winner takes the loser's credits.
It was a single, untranslated word: .
A "Hunt" finished. Target: a small municipal water treatment plant in Minas Gerais. The script didn't shut it down. It just found the vulnerability, logged it, and awarded 50 Credits to "An4cond4." The plant would never know. But the exploit was now for sale inside the game's internal marketplace.
Still. Yet. Not over.
Her VM isolated, she ran it.
The terminal blinked. A countdown: 10 seconds.
She shouldn't have clicked. She was a cybersecurity grad student, for god's sake. Her whole thesis was on the dangers of unsanitized user input. But the curiosity was a physical itch. She clicked.
Alvo: Servidor de Arquivos, Universidade de São Paulo.