You type it out. *Best regards, Isabella Laurent, Director of Risk Oversight.* Clean. Official. Exactly what an outsider imagines when they picture a senior executive signing a message. You hit send. Marc reads the email at his standing desk, one hand wrapped around a cold espresso. He gets halfway through it before something small and wrong surfaces, the kind of wrongness that does not announce itself, just sits in the chest and waits to be named. Isabella only uses her full title in externals. In the documents that go to the regulatory board. In the letters to lenders. Internally she is just *I.L.*, two letters, a full stop, and a silence that means *move*. He has never once received an internal authorization signed with her complete name. He reads the email again. Then he picks up his phone and calls IT security. He does not know what he has found. He only knows the email does not fit the shape of the person he works for. That is enough. Your staging servers go dark fifteen minutes later. --- > **Dane**: *"Someone flagged a spoofed internal. Marc, by the look of it. What did you put in the sign-off?"* You tell him. The silence on the line lasts long enough to be its own answer. > **Dane**: *"Yeah. I think, maybe they had a code; or she never uses her full name internally. Never. You dressed the lie in the wrong clothes."* You have been compromised. Delete everything and abandon the ship: [[Burn The Operation|Burn the operation]]