After a 12+ hour virus and malware scan, good news... nothing found!
I'm currently thinking it's probably not nefarious but I'm going forward with some type of shield against external threats (VPN, ZeroTier, etc). The problem right now is that the system this is occurring on is >2,000 miles...