A complication¶

Someone else has been looking. And someone has been watching them look.

In the course of this investigation, the MCLU identified evidence of external probing activity directed at the cloud provider’s infrastructure. Routing anomalies. Traffic interception attempts. Prefix observation consistent with mapping rather than attack. Methodical, patient, and conducted without paperwork, which in this city is practically a signature.

We do not know who is responsible. We have suspicions, in the way that anyone familiar with Ankh-Morpork’s more enterprising guilds develops suspicions: gradually, and without quite being able to point to the moment it happened.

What we can establish is this: the probes were detected. Not by the cloud provider’s own security team, or not only by them. A separate capability, apparently watching the same infrastructure, observed the probing activity and logged it. The probers were being watched. They do not appear to know this.