She didn’t type that. Her hands were on her lap, coffee cold beside her.

She Googled on her phone, hands trembling. Interception driver : a low-level input filter. Used by accessibility tools, yes—also used by keyloggers, rootkits, and remote administration tools that wanted to pretend they were a real keyboard.

When Windows returned, the stutter was gone. No ghost. No blinking cursor.

She opened PowerShell as admin. Her fingers moved fast.

The cursor blinked. Then, slowly, deliberately:

There it was again. Driver package: . Provider: "Interception."

Someone was watching everything she typed. Every password. Every client note. Every Slack message.