3. The Mortuary Signal

The third task arrived at 3:33 a.m., an hour Jason associated with bad code and worse decisions. He was still awake, watching the gray sedan on Pier Street through a gap in his blinds. Viktor Sokolov—if that was indeed the name of the man in the car—had not moved in four hours. He was either extremely disciplined or extremely bored, and Jason could not decide which was more dangerous.

The notification pulsed on his phone like a second heartbeat. The clone account had posted nothing publicly, made no attempt to communicate with anyone in Jason's social circle. It simply existed, a carbon copy of his digital self that held a blade to the throat of his future. The direct message opened with the same cold precision as the first two.

TASK THREE: IMPLANT RANSOMWARE PACKAGE "GHOST_LOCK" INTO THE FINANCIAL MAINFRAME OF THORN SYSTEMS, INC. ENCRYPTION MUST AFFECT ALL GENERAL LEDGER FILES, ACCOUNTS PAYABLE RECORDS, AND PAYROLL DATABASES. DO NOT TOUCH CUSTOMER DATA. DO NOT EXFILTRATE ANYTHING. THE RANSOMWARE MUST ACTIVATE AT 9:00 A.M. TOMORROW AND DISPLAY A MESSAGE STATING THAT THE DECRYPTION KEY WILL BE DELIVERED UPON COMPLETION OF THE DEAD RECKONING LIST. COUNTDOWN: 29 HOURS, 26 MINUTES.

Attached to the message was a compressed file containing the ransomware payload. Jason opened it in a sandboxed virtual machine, isolated from his own network. The code was elegant—far more sophisticated than anything he had seen in the wild. It used a custom encryption algorithm that appeared to be based on lattice-based cryptography, resistant to quantum decryption attempts. The payload checked for specific server fingerprints before activating, ensuring it would only trigger inside Thorn Systems' infrastructure. It was not a weapon of mass destruction. It was a surgical instrument, designed with the intimate knowledge of someone who had built Thorn Systems from the ground up.

The code comments told a story. Jason read through them, line by line, recognizing the syntax patterns. He had studied Gregory March's programming style in college, back when his uncle had been a guest lecturer on cryptographic systems. The old man had written elegant annotations, full of dry humor and obscure maritime metaphors. This code was annotated the same way. Gregory had written the ransomware himself, years before his death, and had embedded it in the list for a reason Jason was only beginning to understand.

Then he found the hidden signature.

It was buried in a comment block near the encryption core, padded with whitespace to avoid casual detection. Six lines of text that did not match the surrounding code:

"Evermore waits at 41.7831° N, 72.5344° W. The key lies where the dead keep their receipts. Four-seven-delta-tango. My brother's brother knows the door."

Jason stared at the coordinates. They pointed to a location on the outskirts of Halcyon Bay, in the old industrial district near the harbor. A search confirmed his suspicion: Evermore Mortuary, a defunct funeral home that had closed in 2018 after a scandal involving falsified death certificates. The building had been boarded up for years, a gray concrete box squatting between a scrap metal yard and a derelict fish-packing plant.

The phrase "where the dead keep their receipts" was vintage Gregory—cryptic, almost theatrical. It suggested a storage location inside the mortuary, probably a filing cabinet or a safe where records were kept. The alphanumeric string "four-seven-delta-tango" was a passcode of some kind. And "my brother's brother" had to mean Gregory Thorn—the man who had been Ambrose's brother and Gregory March's investigative partner, the man who had supposedly died in a yacht accident five years ago.

Jason had twenty-nine hours to implant the ransomware. The mortuary would have to wait. But the discovery shifted something inside him, a gear clicking into place that had been grinding since the moment he saw his own altered face on the clone account. His uncle had not just set a trap. He had left a trail of breadcrumbs, and each crumb was a piece of the case against Ambrose Thorn.

He turned back to the task at hand. Thorn Systems' financial mainframe was protected by a zero-trust architecture that Ambrose himself had designed. Direct intrusion was impossible—the system required biometric authentication, hardware token verification, and continuous behavioral monitoring that flagged anomalies within milliseconds. Jason could not breach it from the outside. He needed an insider.

At 4:15 a.m., he found one.

Her name was Siobhan Cross, and she was a senior financial analyst at Thorn Systems who had been passed over for promotion three times in four years. Jason discovered her through a combination of LinkedIn data, Glassdoor reviews, and a password leak from a third-party HR platform that Thorn Systems had used before switching to an in-house solution. Siobhan's credentials from the old platform were still valid on the company's VPN, which had been configured to allow legacy access for contractors who had never been properly offboarded. She was not a willing accomplice. She was an unwitting vulnerability, a door left unlocked by corporate negligence, and Jason felt a fresh wave of self-loathing as he prepared to exploit her.

He composed a phishing email that appeared to come from Thorn Systems' internal IT department. It explained that her VPN credentials required revalidation due to a security audit and provided a link to a portal that looked exactly like the company's single sign-on page. The portal was a mirror site Jason had built in ninety minutes, hosted on a domain he had registered three hours earlier using a stolen credit card number purchased from a darknet marketplace.

At 5:02 a.m., Siobhan Cross clicked the link. At 5:03 a.m., Jason had her session token. At 5:07 a.m., he was inside Thorn Systems' corporate network, moving laterally through the financial subnet with the credentials of a woman who was probably eating breakfast and checking her email, unaware that her digital shadow had just opened the gates to an attacker.

The financial mainframe was exactly where the reconnaissance data said it would be. Jason deployed Ghost_Lock with surgical precision, encrypting the general ledger, accounts payable, and payroll databases while leaving customer records untouched. The ransomware embedded itself deep in the system, set to activate at 9:00 a.m. as instructed. It would not be discovered until it was too late.

He withdrew from the network at 5:22 a.m., erasing his tracks as thoroughly as he could. The task was complete, but the confirmation message from the clone account did not arrive. Instead, his phone displayed a new notification from the hexadecimal sender.

"Task Three is not finished. You must go to Evermore before sunrise. Sokolov will follow you. Let him. The mortuary has two exits. You will use the second."

Jason read the message three times. The sender wanted him to be followed. That meant the sender wanted Sokolov to see something—or wanted Ambrose to believe something that was not true. The game was shifting again, and Jason was no longer sure which pieces he controlled.

He dressed in dark clothing, pocketed a flashlight and a multitool, and left his apartment through the rear fire escape at 4:45 a.m., an hour before dawn. The air outside was cold and damp, carrying the salt-iron smell of the harbor. He moved through the alley behind the laundromat and emerged on Collier Street, where he caught the Number 24 bus heading east. Through the window, he watched the gray sedan pull away from the curb three blocks later, its headlights cutting through the pre-dawn mist. Sokolov was following.

Evermore Mortuary was a two-story concrete building with boarded windows and a collapsed awning. The front door was chained, but the side entrance—a service door near the loading bay—had been pried open by squatters or scrap dealers. Jason slipped inside, his footsteps echoing on cracked tile. The interior smelled of mold and old formaldehyde, a chemical sweetness that clung to the back of his throat. Empty embalming tables stood in the preparation room like steel altars. Filing cabinets lined the walls of what had been the records office, their drawers hanging open, their contents long since scattered across the floor.

He found the safe behind a false wall panel in the director's office, exactly where the coordinates suggested. It was an old Sentry model, fireproof and heavy, with a mechanical combination dial. The passcode "four-seven-delta-tango" translated to 4-7-3-8 on the dial, using the NATO phonetic alphabet where D stood for 3 and T stood for 8—a scheme Gregory March had used in a cryptography paper Jason had found years ago while cleaning out his uncle's office. The safe clicked open.

Inside was a cold wallet, a USB drive, and a manila envelope containing a police body camera log. The label on the envelope read: "OFFICER MATTHIAS WEBB — HALCYON BAY PD — EVIDENCE FILE #HBCPD-2021-0987 — DO NOT DESTROY." Jason's hands trembled as he opened it.

The USB drive contained a video file. The footage showed the interior of a hospital room—Gregory March's hospital room, recognizable from the equipment layout and the view of the harbor through the window. The timestamp was three days before Gregory's death. Ambrose Thorn was standing beside the bed, his back to the camera, his hands moving toward the IV line. The video was silent, but the action was unmistakable. Ambrose injected something into the line, waited several minutes, then checked Gregory's pulse. Satisfied, he left the room.

The body camera log told the rest of the story. Officer Webb had been assigned to investigate a suspicious death at Halcyon Bay General Hospital. He had obtained the footage from a hidden camera that Gregory March had installed in his own room, anticipating exactly what would happen. Webb had filed a report recommending homicide charges against Ambrose Thorn. Three days later, Webb was dead—officially a heart attack, unofficially a closed case that no one in the department wanted to reopen.

Jason stared at the evidence in his hands. He had proof. He had motive, method, and visual documentation of a murder. But he also had a gray sedan parked outside the mortuary, a former Valdorian intelligence operative waiting for him to emerge, and a fourth task that had not yet been delivered.

The hexadecimal sender's message pulsed in his memory: "The mortuary has two exits. You will use the second."

He found the second exit in the embalming room—a storm cellar door that led to a tunnel connecting the mortuary to the adjacent fish-packing plant. He descended into the darkness, the cold wallet and USB drive secured in his jacket, the envelope tucked under his arm. Behind him, he heard the creak of the service door opening. Sokolov had entered the building.

Jason ran. The tunnel was narrow and slick with condensation, lit only by his flashlight. It emerged in the basement of the fish-packing plant, where rusted conveyor belts stood silent under decades of dust. He climbed a maintenance ladder to the roof, crossed to the adjacent building, and descended a fire escape onto an empty street.

By the time the sun rose over Halcyon Bay, Jason was on a bus heading back toward the city center, the evidence against Ambrose Thorn burning a hole in his pocket. His phone buzzed with a confirmation message: TASK THREE COMPLETE. TASK FOUR PENDING.

But the clone account had posted something new. Jason opened Instagram and felt his stomach drop. The post was a photograph—a photograph of him, taken inside Evermore Mortuary, holding the evidence envelope. The angle suggested it had been captured from inside the safe itself. The caption read: "Inheritance requires sacrifice. Are you ready for the next step?"

The comments were filling up. Friends, acquaintances, and strangers were asking what it meant. And at the top of the comment thread, a single line from an account Jason recognized: Ambrose Thorn's verified profile.

"Looking forward to seeing you soon, Mr. Kellner."

The countdown for Task Four began. He had no idea what it would demand. But he knew, with a certainty that felt like ice water in his veins, that the next task would not be completed from the safety of his apartment. Ambrose knew his face. Ambrose knew his location. And Ambrose now had all the justification he needed to eliminate the nephew of the man he had already murdered.