November Season: They Always Come Back

An intruder didn't just get in — they made sure they could get back. Three boxes, three footholds hidden where Linux re-runs things on its own: a cron job that phones home, a login hook that re-arms on every shell, and a library force-loaded into every process. Hunt each one down, rip it out without breaking the box, and recover what they left. Defensive eradication only.