SURVIVOR FIELD MANUAL · A CORPORATE NOIR STORY

THE HONEY-TRAP APOCALYPSE

The city was drowning in rain, the boardroom was drowning in money, and the chief executive was about to make the oldest mistake in the history of expensive suits: he thought the beautiful woman across the table was interested in him.

ZombieCash Signal Desk · November 14, 2026 · A story built around documented espionage cases, with fiction clearly marked

At 9:17 on a Thursday evening, the executive floor of VantaCore still glowed like a luxury aquarium. The cleaners had gone home. The junior analysts were pretending to finish reports while secretly searching for apartments they could afford. On the forty-second floor, however, the company’s chief executive, Adrian Vale, was entertaining a guest.

Her name was Mara. At least, that was the name on the invitation. She wore a black dress that looked as if it had been designed by someone who understood both architecture and bad decisions. A narrow silver bracelet caught the light when she lifted her glass. She had the calm posture of a woman who had never had to ask a waiter twice, and the kind of smile that made a room full of powerful men suddenly remember they had teeth.

Adrian was telling her about the company’s upcoming acquisition. He had not planned to. He had planned to discuss the weather, the restaurant, perhaps the latest absurdity in the technology market. But Mara had listened to him with an attention he had not received from his board in months. She remembered the name of his first product, asked a clever question about the European expansion, and laughed at exactly the right moment when he described the finance director as “a spreadsheet with a pulse”.

“You must be exhausted,” she said.

“I am surrounded by people who want something from me.”

“And what do you want?”

It was a good question. It was also the first one that evening that Adrian had not been prepared to answer.

He leaned back. The city trembled in the rain beyond the glass. The conversation moved from work to travel, from travel to old relationships, from old relationships to the small humiliations of being rich, powerful and permanently surrounded by people who said “absolutely” when they meant “I have no idea”. Mara did not ask for a password. She did not need to. She let him talk.

By midnight, Adrian had told her which division was being sold, which supplier was in trouble, when the board would vote, and why the company’s new security system had been delayed. He considered it intimacy. Someone else might have called it a free intelligence briefing with excellent lighting.

Everybody has a price. Sometimes it is not money.

The next morning Adrian received a message. A photograph from the previous evening, a joke about his terrible taste in jazz, and a link to a private album. He smiled at the screen. Then the link asked him to sign in again. He almost did.

That was the moment the story stopped being a flirtation and started looking like a security incident.

There is a reason intelligence professionals have spent decades studying the human side of espionage. A locked server can be difficult to enter. A person who has decided that you are fascinating may open the door, hold it for you, and apologise for the security guard being rude. Human intelligence — HUMINT — is information collected from people. It can involve recruitment, cultivation, elicitation, observation and the exploitation of trust. The methods are not always dramatic. Often they are painfully ordinary.

The first move is rarely “give me the secret file”. It is more likely to be a question that sounds harmless. How is the launch going? Is the merger still on? Who is giving you trouble? Are you still using the old supplier? A person who wants to impress a new friend may reveal more in ten minutes than a careless employee would send in ten emails.

Sometimes the bait is sexual attraction. Sometimes it is admiration, professional recognition, money, resentment, ambition or the intoxicating sensation of finally being understood. The target may be a CEO, but just as easily an assistant who controls the calendar, an engineer who knows where the prototype is kept, a procurement manager who knows which supplier is desperate, or an employee who left the company six months ago and still has friends inside.

The most effective lure is not necessarily the person in the black dress. It is the feeling that the person in the black dress sees something special in you. A little attention can be more persuasive than a suitcase of cash, particularly when the target has spent ten years being applauded by people who are waiting for him to stop speaking.

And that is the joke at the centre of corporate espionage: the company spends millions protecting its servers, then leaves its most valuable information unattended at a dinner table beside a bowl of olives.

The historical record is less glamorous — and much more embarrassing

Real espionage cases rarely arrive with a soundtrack. They arrive as court filings, inspector-general reports, payment records and years of institutional embarrassment.

Take Katrina Leung. The U.S. Department of Justice Inspector General’s 2006 report describes her as an FBI asset for eighteen years. The FBI paid more than 1.7 million dollars in services and expenses during that period. The investigation found that Leung had a long-running intimate relationship with her FBI handler, Special Agent James J. Smith, and a separate sporadic affair with another FBI agent, William Cleveland.

The report is not a romantic thriller. It is a case study in what happens when personal relationships, source handling and oversight become tangled together. Investigators reviewed more than 300,000 pages of material and conducted over 100 interviews. Somewhere in that mountain of paperwork was the answer to a question that should have been obvious much earlier: who was managing whom?

There is a particularly dark lesson here. Intelligence organizations are supposed to identify conflicts of interest, not develop them into long-running personal dramas. If your oversight system depends on one handler’s judgment while that handler is romantically involved with the source, you do not have a control system. You have a soap opera with a classified budget.

Not every industrial espionage story involves seduction. In 2022, the U.S. Department of Justice announced that Chinese intelligence officer Yanjun Xu had been sentenced to twenty years in prison for espionage-related crimes involving attempts to obtain aviation trade secrets from U.S. and European aerospace companies. The public record describes efforts to target industry insiders and obtain technical information. It does not describe a bedroom operation, so we will not decorate the court file with one. Facts are already interesting enough without giving them fake lingerie.

Other cases show how easily a supposedly ordinary professional relationship can become a channel for sensitive information. The FBI’s June 2026 account of former U.S. Army intelligence analyst Korbein Schultz describes an online approach from someone posing as a client at a geopolitical consulting firm. What began as paid analysis escalated into requests for sensitive military material. The FBI says Schultz transmitted at least 92 sensitive documents and was sentenced to seven years in prison. No candlelit dinner was required. The seduction was a consulting fee and the promise of easy money.

A joint advisory from the National Counterintelligence and Security Center, FBI and Defense Counterintelligence and Security Agency describes another case: U.S. Navy petty officer Thomas Zhao was sentenced in January 2024 after transmitting sensitive military information to a Chinese intelligence officer. The advisory says he was first approached in a social-media chat group focused on stock trading. It records fourteen payments totalling $14,866 in exchange for photos, videos and documents concerning military exercises and radar facilities. That is roughly $1,062 per payment — not exactly retirement money, but apparently enough to trade a career for a stack of transfers.

These cases are different. Their methods, evidence and legal outcomes are not interchangeable. Together, however, they show a recurring truth: access is valuable, and people can be approached through romance, money, work, vanity, ideology or simple human weakness.

The Romeo problem: romance has always been useful to intelligence

During the Cold War, East German intelligence officers became associated with what later came to be called “Romeo” operations. Male operatives cultivated romantic relationships with women working in West German government offices, seeking access to information through the trust created by those relationships. A CIA historical account describes this chapter of intelligence history. It was not a story about women being foolish. It was a story about patient cultivation, professional access and the power of a relationship that felt private.

The old stereotype of the female seductress and the foolish male executive is convenient for posters, but reality is less tidy. Men and women can both be recruited, manipulated, flattered, blackmailed or persuaded to cooperate. Some operations involve sex. Others involve a job offer, a favour, a debt, an ideological appeal or a promise that the target is finally being invited into the important room.

And sometimes the bedroom is not where the secret is taken. It is where the target decides that the other person can be trusted. The actual collection may happen days later, in a message, a shared document, a calendar invitation or a photograph of a screen. The intimate moment creates the atmosphere; the information is collected somewhere much less cinematic.

There is also a reason the phrase “honey trap” is so often overused. It is an irresistible headline. It makes a complicated operation sound like a naughty anecdote. But an attractive stranger is not evidence of espionage. A consensual affair is not proof of recruitment. A person’s nationality, gender, clothing or appearance tells you nothing reliable about their intentions. The warning sign is not a red dress. It is a pattern of suspicious requests, concealed affiliations, pressure, unusual payments or attempts to obtain information that the person has no legitimate reason to see.

The fictional Jade Widow affair

Now for the part that never happened — at least not outside this story.

The Jade Widow Directorate was a fictional intelligence network invented for the ZombieCash Field Manual. Its headquarters supposedly occupied the top floor of a hotel that did not appear on maps. Its motto was “Never ask twice when a compliment will do.” Its operatives were said to prefer black silk, immaculate tailoring and restaurants where the waiters remembered everything except the guests’ names. None of this is a historical claim. The Jade Widows are fiction, created to make the mechanics of influence easier to see.

One of their imaginary assignments involved a technology executive called Adrian Vale. The operation was named Silk Mirror. The target was not chosen because he was rich or handsome. He was chosen because he was lonely, proud, careless with information and convinced that every rule was written for somebody less important.

The woman introduced to him at the dinner was not instructed to ask for secrets. She was instructed to make him feel interesting. She listened to his complaints about the board, remembered details about his career, and made him laugh. When he loosened his tie, she loosened the conversation. When he complained that nobody understood the pressure he was under, she did not offer advice. She simply leaned closer and let the silence do its work.

Later, in the privacy of his penthouse, the evening became more intimate. The city lights spilled across the bedroom wall; his phone vibrated on the bedside table, ignored beneath a discarded jacket. They kissed, laughed, and spent the night together. There was no magic trick, no hypnotic perfume and no cinematic confession. Just two adults, one of whom believed he was having a private evening and the other who, in this fictional scenario, had been given a very different reason to remember every detail.

In the morning she asked whether he always worked so late. He joked that the company would collapse without him. She smiled and said, “Then perhaps you should tell me where you keep the pieces.” He laughed. It was a good line. It was also the sort of line that should have made him stop talking.

She did not take his laptop. She did not photograph the safe. She did not need to. Over dinner, in the taxi, and in the lazy conversation before sleep, Adrian had already described the acquisition timetable, the name of the supplier under pressure, the board member who opposed the deal, and the internal team that had built the new encryption system. The following afternoon, a message arrived with a link to their photographs. It led to a fake sign-in page.

That is the fictional point of Silk Mirror: seduction was the wrapper. The real operation was built from memory, trust and information that the target volunteered. The most valuable thing in the room was not the dress on the chair. It was the phone beside the bed.

Meanwhile, the company is still paying for the firewall

Human approaches and digital attacks often reinforce one another. A conversation reveals a project manager’s name. A public profile supplies their title. A conference chat reveals the launch date and the two vendors involved. Later, a message arrives that looks familiar because it refers to the dinner, the conference or a detail from the conversation. The attachment is called “Updated photos”, “Revised investor deck” or “Travel reimbursement”. The link opens a convincing sign-in page. The target enters a password. A second authentication prompt appears. The target approves it because the message feels expected.

The attacker may never need to seduce the chief executive. A receptionist can be tricked into accepting a visitor. An assistant can be persuaded to forward a calendar invitation. A recruiter can be used to identify an unhappy employee. A supplier can be asked for a little more detail than the contract requires. An engineer can be offered a generous “industry research” fee. The company is not a castle with one drawbridge. It is a sprawling building full of doors, windows, loading bays and people who are trying to get through Friday.

The FBI’s “Company Man” economic-espionage awareness campaign describes a case in which actors used social networks to identify employees, explored a joint venture, used a headhunter as a proxy to find potential insiders, attempted cyber intrusion through unprotected USB ports, and used bribery and trespass in the broader effort. It sounds less like one master spy and more like a particularly unpleasant sales department.

That is why the security response cannot be “never talk to strangers” or “ban attractive consultants”. It has to be more intelligent than that. Verify new contacts independently. Keep confidential documents out of personal messaging channels. Do not photograph whiteboards, badges or screens. Use unique passwords and phishing-resistant multifactor authentication. Treat unexpected login prompts as suspicious. Make it easy for employees to report unusual approaches without being laughed at or punished for asking a question.

Companies should know which information would genuinely hurt if it escaped: source code, unreleased designs, customer lists, pricing, acquisition plans, credentials, research and operational schedules. Access should be limited to people who need it. Visitors should be logged and escorted where appropriate. Assistants, recruiters, procurement teams, finance, engineers and executives all need to understand that the attacker will choose the easiest door, not the most senior title.

Most importantly, security teams should investigate behavior and evidence, not appearance or identity. A person in a black dress may be a consultant, a journalist, a date, a spy, or simply someone who likes black dresses. The dress itself has never been known to leak source code.

And what happened to Adrian?

In the fictional version, Adrian almost entered his password. Then he noticed that the address bar was wrong by one letter. He called the company’s security director, who arrived in the executive suite wearing yesterday’s shirt and the expression of a man who had been waiting years for someone important to make a sensible decision.

The security team isolated the device, preserved the message and checked the access logs. The link was a trap. The information Adrian had discussed at dinner was not all classified, but it was enough to help an outsider map the company’s priorities. The board was furious. The legal department was furious. The finance director was furious because the security director had interrupted a meeting. For one beautiful afternoon, the entire executive floor was united by a shared emotion.

Adrian asked whether Mara had been real.

“The dinner was real,” said the security director. “The photographs may be real. The sign-in page is fake. And your password would have been very real if you had typed it in.”

Adrian stared at the rain. “So I was being played?”

“You were being approached. Whether it was espionage, fraud, or both is what the investigation is for. Next time, perhaps discuss the weather.”

“She was very interested in the weather.”

“Of course she was. You told her the acquisition timetable before dessert.”

The Jade Widow Directorate, being fictional, was never caught. Adrian, being fictional, learned his lesson. The company, also fictional, finally funded proper security training. The only real casualty was the restaurant’s reputation, because the board banned private dinners for six months and started holding strategy meetings in a room with fluorescent lighting.

And that, dear survivors, is the true horror of corporate espionage: not the hidden camera, not the mysterious stranger, not even the compromised password. It is the possibility that after risking the company’s future for one intoxicating evening, you may be forced to spend the next six months eating lunch under fluorescent lights with the compliance department.