It was 2:00 AM, and Leo was losing his mind.
"Edgelords with code," Reyes said flatly. "We're going to need you to keep your computer online and continue as normal while we backtrace the command server. Do not uninstall the plug-in. Do not run a cleaner. In fact, keep editing. Post another video. We need the traffic."
"You didn't do it intentionally," Reyes continued, sliding a piece of paper across the table. It was a federal subpoena. "But you are the entry point. The actual hackers—a ransomware group called 'OpticalFlow'—embedded their payload inside cracked video plug-ins. Twixtor. Sapphire. Magic Bullet. You name it. Thousands of editors downloaded them. And now thousands of compromised machines are aiming at critical infrastructure."
Leo rendered the video, uploaded it, and went to sleep smiling. Three days later, his phone buzzed at 6:00 AM. It was a text from his mom: "Why is the FBI at our door?"
The first result was a YouTube video titled "TWIXTOR PRO 2024 CRACK 100% WORKING (NO VIRUS)." The thumbnail was a screaming cartoon skull. Leo knew better. He really did. But the video had 2.3 million views.