Alex minimized the browser. Task Manager showed nothing unusual—just Chrome (14 tabs), Discord, and TrafficMonitor itself. No suspicious processes. No runaway services.
They yanked the Ethernet cable.
Three hours later, the antivirus quarantined a rootkit that had been quietly exfiltrating documents, browser cookies, and crypto wallet keys for eleven days.
The upload dropped to zero.