He traced the attack to a botnet spread across old Android phones in a cyber-cafe in Lahore. Child's play. But as he burrowed deeper, he found a secondary server. A trap. The Pakistani hacker had anticipated interference and left a logic bomb: if anyone tried to reverse the ransomware, it would not only wipe the orphanage server but also broadcast the location of every hidden proxy Rafi had ever used.