He clicked the link. A countdown timer appeared, surrounded by aggressive flashing ads for crypto-scams and offshore casinos. When the timer hit zero, a file named X-Tr3me_361.zip landed in his downloads folder.