On a normal Tuesday, a 1.2GB disk image ending in .dmg wouldn’t raise eyebrows in the server logs of OmniCore Dynamics. Our marketing team lives off CorelDRAW. They use it to blueprint the packaging for our "disposable" medical devices, the ones that cost the hospital $15,000 a pop.
I ejected the DMG.
They had been spying on themselves.
Somebody was still maintaining the ghost. CorelDRAW-Graphics-Suite-2021-Corporate-v23.5.0.506.dmg
It was a keylogger wrapped in a ribbon menu. On a normal Tuesday, a 1