I looked at the file size again. 1.2 GB. The official suite was only 980 MB. The extra 220 MB was pure encryption overhead.

The worst part? The file had been downloaded 847 times in the last three years. Every single download came from an internal IP address belonging to the Legal department.

It wasn't the version number that worried me. It was the filename itself.

File accessed: CorelDRAW-Graphics-Suite-2021-Corporate-v23.5.0.506.dmg

Action: None. It’s already inside the firewall.

"He left a backdoor inside the bevel tool," Marcus muttered, incredulous.

"Delete it," Marcus said.

Marcus pulled up the deployment history. That specific build—v23.5.0.506—was never supposed to exist. The official release notes stopped at v23.5.0.505. The .506 build was an internal phantom, compiled on a Friday night at 11:59 PM by an engineer who had already been fired the previous Tuesday.