1
00:00:02,973 --> 00:00:04,320
My name is Avery Ryan.
2
00:00:04,743 --> 00:00:06,255
I was a victim of cyber crime.
3
00:00:06,830 --> 00:00:09,369
Like you, I posted
on social media,
4
00:00:09,371 --> 00:00:12,182
checked my bank account
balance online,
5
00:00:12,184 --> 00:00:13,570
even kept
the confidential files
6
00:00:13,571 --> 00:00:16,250
of my psychological practice
on my computer.
7
00:00:17,557 --> 00:00:20,487
Then I was hacked,
and as a result,
8
00:00:20,489 --> 00:00:23,126
one of my patients
was murdered.
9
00:00:23,128 --> 00:00:25,504
My investigation into her death
led me to the FBI,
10
00:00:25,506 --> 00:00:28,347
where I joined a team
of cyber experts
11
00:00:28,349 --> 00:00:31,323
to wage a war against
a new breed of criminal
12
00:00:31,325 --> 00:00:34,262
hiding on the Deep Web...
13
00:00:34,264 --> 00:00:37,600
infiltrating our daily lives
in ways we never imagined...
14
00:00:38,967 --> 00:00:41,138
...faceless...
15
00:00:41,140 --> 00:00:42,876
nameless...
16
00:00:42,878 --> 00:00:44,514
lurking inside our devices,
17
00:00:44,516 --> 00:00:47,322
just a keystroke away.
18
00:00:59,702 --> 00:01:02,098
- We got another one.
- That's four and counting.
19
00:01:02,100 --> 00:01:03,332
What the hell
is going on up there?
20
00:01:03,334 --> 00:01:04,807
Hold on. Yes, I'm still here.
21
00:01:04,809 --> 00:01:07,976
FAA has confirmed Wi-Fi is down
on four domestic flights,
22
00:01:07,978 --> 00:01:09,447
all Monument Air.
23
00:01:09,449 --> 00:01:10,542
Do they know why
this is happening?
24
00:01:10,544 --> 00:01:11,821
They're still looking into it.
25
00:01:11,823 --> 00:01:13,421
All right, I just spoke
to Liftoff Wireless.
26
00:01:13,423 --> 00:01:15,125
They've been trying to restore
in-flight Internet access
27
00:01:15,127 --> 00:01:16,493
on the planes,
but something is blocking them.
28
00:01:16,495 --> 00:01:17,621
I'm here. Go.
29
00:01:17,623 --> 00:01:18,693
Uh, we got a fifth.
30
00:01:18,695 --> 00:01:19,757
No, no, make it six.
31
00:01:19,759 --> 00:01:21,460
Same as the others.
32
00:01:21,462 --> 00:01:24,025
All Monument Air. Looks like
some type of coordinated attack.
33
00:01:24,027 --> 00:01:25,128
DHS is operating
34
00:01:25,130 --> 00:01:26,697
at National Threat Level Yellow.
35
00:01:26,699 --> 00:01:27,930
It hasn't jumped to orange yet.
36
00:01:27,932 --> 00:01:29,771
Shouldn't we call
the president or someone?
37
00:01:29,773 --> 00:01:30,836
I mean, we're talking planes.
38
00:01:30,838 --> 00:01:32,037
Yeah, which is exactly why
39
00:01:32,039 --> 00:01:33,340
we don't jump to conclusions.
40
00:01:33,342 --> 00:01:34,604
We got to have some facts
41
00:01:34,606 --> 00:01:36,242
before we suggest they start
upping the threat level.
42
00:01:36,244 --> 00:01:37,746
No reports
of instrument malfunction.
43
00:01:37,748 --> 00:01:39,145
Pilots are still able
to communicate
44
00:01:39,147 --> 00:01:40,879
with the control tower.
Undercover air marshals
45
00:01:40,881 --> 00:01:43,079
haven't detected any unusual
activity either.
46
00:01:43,081 --> 00:01:44,846
What time did the Wi-Fi
go down on those flights?
47
00:01:44,848 --> 00:01:46,149
Ten minutes after takeoff.
48
00:01:46,151 --> 00:01:48,111
All right, that means
they were above 10,000 feet.
49
00:01:48,275 --> 00:01:50,472
That's when the passengers
on Monument Air can connect
50
00:01:50,474 --> 00:01:52,640
their electronic devices to
the in-flight wireless network.
51
00:01:52,642 --> 00:01:53,712
Got another one.
52
00:01:53,714 --> 00:01:54,839
Seven.
53
00:01:54,841 --> 00:01:56,775
Eight.
54
00:01:56,777 --> 00:01:58,217
- Nine.
- What the hell is this?
55
00:01:58,219 --> 00:02:00,753
Okay, okay.
What is it, Krumitz?
56
00:02:00,755 --> 00:02:02,386
Liftoff Wireless' server logs
57
00:02:02,388 --> 00:02:03,786
show only one phone
on each plane
58
00:02:03,788 --> 00:02:05,996
connected to the router and
caused Wi-Fi to go down.
59
00:02:05,998 --> 00:02:07,124
That means nine passengers
60
00:02:07,126 --> 00:02:09,092
on nine flights
shut off the Wi-Fi
61
00:02:09,094 --> 00:02:10,396
from within the plane?
62
00:02:10,398 --> 00:02:12,028
Sounds like
a coordinated attack to me.
63
00:02:12,030 --> 00:02:13,899
Think all nine passengers
are working together?
64
00:02:13,901 --> 00:02:16,940
Nelson, pull up
the flight routes.
65
00:02:17,869 --> 00:02:19,706
The destination cities
are all different,
66
00:02:19,708 --> 00:02:20,802
but they all originated
67
00:02:20,804 --> 00:02:23,210
from Miami International.
68
00:02:23,212 --> 00:02:24,810
I'm calling Homeland Security.
69
00:02:24,812 --> 00:02:26,313
Secretary McKnight,
this is Simon Sifter,
70
00:02:26,315 --> 00:02:27,713
Cyber Crime Division.
71
00:02:27,715 --> 00:02:29,848
We've got a potential
national security threat.
72
00:02:29,850 --> 00:02:32,479
I'm requesting
that you immediately ground
73
00:02:32,481 --> 00:02:34,351
all Monument Air flights.
74
00:02:34,353 --> 00:02:35,952
Yes, I am sure.
As you know,
75
00:02:35,954 --> 00:02:37,859
shutting down
passenger communication
76
00:02:37,861 --> 00:02:39,965
is a possible precursor
to hijacking.
77
00:02:39,967 --> 00:02:42,031
I would like
all these flights redirected
78
00:02:42,033 --> 00:02:43,736
to their nearest airports.
79
00:02:43,738 --> 00:02:45,071
Monument Air Flight 417
80
00:02:45,073 --> 00:02:47,167
is 300 miles outside of Miami.
81
00:02:47,169 --> 00:02:49,542
That's the closest
and easiest to send back.
82
00:02:49,544 --> 00:02:51,542
All right, I'll have that flight
routed back to Miami.
83
00:02:51,544 --> 00:02:54,005
Krumitz, can you tell
specifically which phone
84
00:02:54,007 --> 00:02:56,411
or passenger shut down the Wi-Fi?
I...
85
00:02:56,413 --> 00:02:57,946
I mean, it's gonna
take some time,
86
00:02:57,948 --> 00:02:59,114
- but yeah.
- Okay.
87
00:02:59,116 --> 00:03:00,442
We need the names
and the seat numbers
88
00:03:00,444 --> 00:03:02,483
for those passengers
with the phones,
89
00:03:02,485 --> 00:03:03,747
and we need them now.
90
00:03:03,749 --> 00:03:04,715
Let's go, Elijah.
91
00:03:04,717 --> 00:03:06,883
Nelson.
92
00:03:10,526 --> 00:03:13,933
♪ ♪
93
00:03:16,506 --> 00:03:18,969
Okay, all right,
all right, got it.
94
00:03:18,971 --> 00:03:20,337
All right, thanks, Krummy.
95
00:03:20,339 --> 00:03:22,809
Okay, target's sitting
in 14C.
96
00:03:22,811 --> 00:03:24,776
Plane is taxiing
to the gate right now.
97
00:03:24,778 --> 00:03:26,246
Good, what about
the other flights?
98
00:03:26,248 --> 00:03:27,572
Great.
99
00:03:27,574 --> 00:03:29,445
Local Feds are detaining
the eight suspects
100
00:03:29,447 --> 00:03:31,876
in the other cities now.
101
00:03:38,355 --> 00:03:39,584
I-I just left for vacation.
102
00:03:39,586 --> 00:03:41,687
Someone needs to tell me
what this is about.
103
00:03:44,289 --> 00:03:45,623
Can you please call my husband?
104
00:03:45,625 --> 00:03:47,726
This is crazy.
105
00:04:11,935 --> 00:04:14,267
Excuse me. Excuse me.
106
00:04:14,965 --> 00:04:18,200
Take your headphones
out, please.
107
00:04:19,401 --> 00:04:20,501
How old are you?
108
00:04:20,503 --> 00:04:22,131
16.
Have you been sitting there
109
00:04:22,133 --> 00:04:24,495
the whole flight?
Yeah. Why?
110
00:04:24,497 --> 00:04:26,335
Cuff her.
111
00:04:26,337 --> 00:04:28,366
What did I do?
What's going on?
112
00:04:28,368 --> 00:04:30,869
Stand up, place your hands
behind your back, please.
113
00:04:38,375 --> 00:04:39,941
Willa?
114
00:04:42,273 --> 00:04:43,406
Dad!
115
00:04:43,408 --> 00:04:44,742
They won't let me leave.
116
00:04:45,311 --> 00:04:46,910
What's going on here?
117
00:04:47,648 --> 00:04:48,812
My daughter was going to visit
118
00:04:48,814 --> 00:04:50,347
family in San Diego.
119
00:04:50,349 --> 00:04:52,475
I don't get it.
Are you saying she's a suspect?
120
00:04:52,477 --> 00:04:54,745
We're just trying to understand
what happened here, Mr. Hart.
121
00:04:54,747 --> 00:04:57,712
Someone hacked
into the plane's router.
122
00:04:57,714 --> 00:04:58,952
We traced that intrusion
123
00:04:58,954 --> 00:05:00,080
back to Willa's phone.
124
00:05:00,082 --> 00:05:01,351
What?
125
00:05:01,353 --> 00:05:02,454
I mean, how is that possible?
126
00:05:02,456 --> 00:05:04,316
Her cell phone serial number was
the last one
127
00:05:04,318 --> 00:05:07,586
that logged on to the onboard
router before it crashed.
128
00:05:07,588 --> 00:05:10,752
We ran that number through
every cell carrier's database
129
00:05:10,754 --> 00:05:11,951
till it spit out a name.
130
00:05:11,953 --> 00:05:13,053
Willa's name?
131
00:05:13,055 --> 00:05:14,554
We matched that name
to the flight manifest.
132
00:05:14,556 --> 00:05:15,682
It gave us a seat number.
133
00:05:15,684 --> 00:05:17,153
Willa,
134
00:05:17,155 --> 00:05:18,920
did you leave
your phone anywhere?
135
00:05:18,922 --> 00:05:20,552
Did you bump your device
with anyone?
136
00:05:20,554 --> 00:05:23,225
Did you text
or download anything?
137
00:05:24,394 --> 00:05:26,128
Go ahead, sweetheart.
Just answer
138
00:05:26,130 --> 00:05:27,431
her questions.
139
00:05:27,433 --> 00:05:28,558
I texted some friends,
140
00:05:28,560 --> 00:05:29,925
but I do that all the time.
141
00:05:29,927 --> 00:05:32,428
I was just listening to music
and playing Dots.
142
00:05:32,430 --> 00:05:33,900
Hmm.
143
00:05:35,438 --> 00:05:36,635
What's he doing?
144
00:05:36,637 --> 00:05:39,002
Imaging your phone,
making a duplicate copy
145
00:05:39,004 --> 00:05:41,736
of your device to determine
what killed the Wi-Fi.
146
00:05:41,738 --> 00:05:43,272
Can I have it back?
147
00:05:44,610 --> 00:05:46,504
Once we're done with it.
Right now I want you to tell me
148
00:05:46,506 --> 00:05:49,880
everything that happened
before your flight took off.
149
00:05:49,882 --> 00:05:53,015
My dad dropped me
at the curb.
150
00:05:53,017 --> 00:05:54,352
I checked my bag,
151
00:05:54,354 --> 00:05:56,320
went through security,
152
00:05:56,322 --> 00:05:58,180
had a smoothie.
153
00:05:58,182 --> 00:06:00,250
I bought it at Mango Mel's.
154
00:06:00,252 --> 00:06:03,015
And then I waited at the gate
for my flight.
155
00:06:03,017 --> 00:06:05,284
Does the name Audrey Monroe
156
00:06:05,286 --> 00:06:08,420
mean anything to you?
157
00:06:08,422 --> 00:06:10,020
How about Ken Galvin?
158
00:06:10,854 --> 00:06:12,555
Margaret Sloane?
159
00:06:12,557 --> 00:06:14,457
What do they have to do
with Willa?
160
00:06:14,459 --> 00:06:16,627
Your daughter's phone's not the
only one that cut off the Wi-Fi.
161
00:06:16,629 --> 00:06:18,165
It happened
on eight other flights.
162
00:06:18,167 --> 00:06:19,365
Lee Yang?
163
00:06:19,367 --> 00:06:20,965
Jason Hawking?
164
00:06:20,967 --> 00:06:22,331
I don't know
any of these people.
165
00:06:22,333 --> 00:06:23,762
Well, it's clear to me,
and it should be to you,
166
00:06:23,764 --> 00:06:26,529
that my daughter didn't have
anything to do with this.
167
00:06:26,531 --> 00:06:28,198
She's just a kid.
168
00:06:28,200 --> 00:06:29,565
Mr. Hart, in my line of work,
169
00:06:29,567 --> 00:06:32,603
“just a kid”
doesn't mean anything.
170
00:06:35,800 --> 00:06:37,626
Hey, yo, E.
171
00:06:37,628 --> 00:06:39,328
It's getting ugly
over there, man.
172
00:06:39,330 --> 00:06:41,295
Yeah, well,
their flight's been grounded
173
00:06:41,297 --> 00:06:42,862
and they haven't been given
an explanation.
174
00:06:42,864 --> 00:06:43,998
You'd be angry, too.
175
00:06:44,000 --> 00:06:46,030
Well, you're right.
176
00:06:46,032 --> 00:06:48,566
So, I ran diagnostics
on the plane's router.
177
00:06:48,568 --> 00:06:51,171
One device overloaded
the entire system.
178
00:06:51,173 --> 00:06:53,067
It was
a denial-of-service attack.
179
00:06:53,069 --> 00:06:54,708
Ladies and gentlemen,
180
00:06:54,710 --> 00:06:58,107
at this time,
Liftoff Wireless' Wi-Fi service
181
00:06:58,109 --> 00:07:00,439
is available
at a charge of $9.99
182
00:07:00,441 --> 00:07:01,741
for the duration of the flight.
183
00:07:01,743 --> 00:07:03,508
Thank you.
184
00:07:03,510 --> 00:07:05,643
Willa's phone prevented
any other passenger's device
185
00:07:05,645 --> 00:07:07,209
from connecting to the Wi-Fi.
186
00:07:11,312 --> 00:07:13,613
Phones aren't supposed to send
that many data packets at once.
187
00:07:13,615 --> 00:07:14,613
Yeah, unless a hacker
188
00:07:14,615 --> 00:07:16,243
with some skills worked
their magic.
189
00:07:16,245 --> 00:07:17,410
Uh-huh.
190
00:07:17,412 --> 00:07:18,778
I'll go ahead and unplug
the router from the plane.
191
00:07:18,780 --> 00:07:19,881
I'll send it back to CTOC.
192
00:07:19,883 --> 00:07:21,583
Do that.
All right.
193
00:07:21,585 --> 00:07:23,749
Anything from
our FBI field teams?
194
00:07:23,751 --> 00:07:25,013
Well, they've interrogated
195
00:07:25,015 --> 00:07:26,382
the other eight suspects.
196
00:07:26,384 --> 00:07:28,085
They're all
from different cities.
197
00:07:28,087 --> 00:07:29,516
They span multiple generations,
198
00:07:29,518 --> 00:07:32,322
and they've all got
varying levels of technology,
199
00:07:32,324 --> 00:07:35,257
and they all allege
they have no idea what happened.
200
00:07:35,259 --> 00:07:36,656
Willa Hart said the same thing.
201
00:07:36,658 --> 00:07:38,318
She has no clue
what's going on.
202
00:07:38,320 --> 00:07:39,422
Field teams confiscated
203
00:07:39,424 --> 00:07:40,727
our suspects' phones.
204
00:07:40,729 --> 00:07:41,894
They're imaging them now.
205
00:07:41,896 --> 00:07:42,958
Data should be here any minute.
206
00:07:42,960 --> 00:07:45,093
So, Avery, I've made
a lot of moves here.
207
00:07:45,095 --> 00:07:46,595
There are gonna be
a lot of questions.
208
00:07:46,597 --> 00:07:48,795
So, from your end,
what does this look like?
209
00:07:48,797 --> 00:07:50,396
I'm not sure yet,
210
00:07:50,398 --> 00:07:52,533
but I'm not willing
to give up on the idea
211
00:07:52,535 --> 00:07:53,765
that these people are connected.
212
00:07:55,207 --> 00:07:56,605
I'm sorry, ma'am,
this one didn't work either.
213
00:07:56,607 --> 00:07:58,635
Two of my credit cards
have been declined?
214
00:07:58,637 --> 00:08:00,473
That's impossible.
215
00:08:00,475 --> 00:08:01,736
No, I didn't buy ten laptops.
216
00:08:01,738 --> 00:08:03,007
I don't even shop
at that store.
217
00:08:07,909 --> 00:08:08,939
Avery, what's happening?
218
00:08:08,941 --> 00:08:09,978
I'm not sure yet. Hold on.
219
00:08:09,980 --> 00:08:11,210
Let me flip view.
220
00:08:12,644 --> 00:08:14,482
It suddenly just got
very noisy in here.
221
00:08:14,484 --> 00:08:15,945
Yeah, my credit card's
been denied.
222
00:08:15,947 --> 00:08:17,880
What do you mean you don't
know what's going on?
223
00:08:17,882 --> 00:08:19,382
It happened on your plane.
224
00:08:22,246 --> 00:08:24,683
Are you seeing this?
225
00:08:24,685 --> 00:08:26,546
All of my credit cards
226
00:08:26,548 --> 00:08:27,786
cannot be maxed out.
How is that even possible?
227
00:08:27,788 --> 00:08:29,887
All of these people
were passengers
228
00:08:29,889 --> 00:08:32,345
on Willa Hart's flight.
229
00:08:32,347 --> 00:08:33,376
Simon,
230
00:08:33,378 --> 00:08:35,846
I know what this is.
231
00:08:35,848 --> 00:08:37,684
This is a credit card heist.
232
00:08:37,686 --> 00:08:40,018
Dozens of people
who got off that plane
233
00:08:40,020 --> 00:08:41,384
are starting to receive alerts
234
00:08:41,386 --> 00:08:43,015
that their credit cards
have been frozen.
235
00:08:43,017 --> 00:08:44,413
Someone stole their information.
236
00:08:44,415 --> 00:08:46,580
That's it, that's it, that's it.
237
00:08:46,582 --> 00:08:47,811
'Cause a plane
238
00:08:47,813 --> 00:08:50,185
is the one place where people
are held captive.
239
00:08:50,187 --> 00:08:51,552
You can't connect
240
00:08:51,554 --> 00:08:55,087
to the rest of the world
if the Wi-Fi is down.
241
00:08:55,089 --> 00:08:57,353
The passengers wouldn't even
know that they'd been robbed
242
00:08:57,355 --> 00:08:59,760
till they got off the plane
and connected to the Internet.
243
00:08:59,762 --> 00:09:00,792
I don't believe this.
244
00:09:00,794 --> 00:09:02,862
What?
This can't be right.
245
00:09:02,864 --> 00:09:04,261
I've seen this before.
246
00:09:04,263 --> 00:09:06,198
There it is again and again.
247
00:09:06,200 --> 00:09:07,431
He uses
a unique signature
248
00:09:07,433 --> 00:09:08,904
when writing code.
249
00:09:08,906 --> 00:09:09,865
He?
250
00:09:09,867 --> 00:09:10,937
What is it, Krumitz?
251
00:09:10,939 --> 00:09:12,906
I know who did it.
252
00:09:13,708 --> 00:09:15,075
Lomis.
253
00:09:15,077 --> 00:09:16,380
Lomis is behind this,
254
00:09:16,382 --> 00:09:18,580
and it's just the beginning.
255
00:09:19,704 --> 00:09:23,704
♪ CSI Cyber 1x09 ♪
L0M1S
Original Air Date on April 29, 2015
256
00:09:23,758 --> 00:09:29,291
♪ I know you've deceived me,
now here's a surprise ♪
257
00:09:30,860 --> 00:09:36,665
♪ I know that you have, 'cause
there's magic in my eyes ♪
258
00:09:36,667 --> 00:09:40,836
♪ I can see
for miles and miles ♪
259
00:09:40,838 --> 00:09:44,172
♪ I can see for miles
and miles ♪
260
00:09:44,174 --> 00:09:48,845
♪ I can see
for miles and miles ♪
261
00:09:48,847 --> 00:09:52,286
♪ And miles... ♪
262
00:09:52,288 --> 00:09:54,853
♪ Oh, yeah. ♪
263
00:09:54,877 --> 00:10:01,377
== sync, corrected by elderman ==
@elder_man
264
00:10:09,537 --> 00:10:11,606
I can't believe
this is Lomis.
265
00:10:11,608 --> 00:10:13,542
He's like a hacker legend.
266
00:10:13,544 --> 00:10:15,878
Came out of nowhere
a few years back.
267
00:10:15,880 --> 00:10:18,841
Now, they say he's in his 30s,
good-looking,
268
00:10:18,843 --> 00:10:20,176
comes from Estonia.
269
00:10:20,178 --> 00:10:22,245
Sounds like
a little hacker envy, Nelson.
270
00:10:22,247 --> 00:10:23,573
No.
271
00:10:23,575 --> 00:10:24,781
Look, it's admiration.
272
00:10:24,783 --> 00:10:25,981
Lomis lives up to his name.
273
00:10:25,983 --> 00:10:27,874
It's leetspeak
for “low missile.”
274
00:10:27,876 --> 00:10:29,009
Flies under the radar.
275
00:10:29,011 --> 00:10:30,376
He's only surfaced twice.
276
00:10:30,378 --> 00:10:33,111
Both times at DefCon in Vegas.
277
00:10:33,113 --> 00:10:34,311
That's it.
278
00:10:34,313 --> 00:10:36,551
All right, over $400,000
have been stolen
279
00:10:36,553 --> 00:10:38,517
in our credit card scam
and over 300 people
280
00:10:38,519 --> 00:10:39,884
have reported theft.
281
00:10:39,886 --> 00:10:40,987
There's no telling
282
00:10:40,989 --> 00:10:43,684
when this is gonna end.
283
00:10:45,694 --> 00:10:46,923
See?
284
00:10:46,925 --> 00:10:50,225
Now that's what I call
traveling in style.
285
00:10:50,227 --> 00:10:52,857
Sifter has connections
with the Coast Guard,
286
00:10:52,859 --> 00:10:56,096
so Krumitz gets a free escort
from D.C. to Miami.
287
00:11:10,173 --> 00:11:11,536
Nice ride, bro!
288
00:11:11,538 --> 00:11:13,672
It's the only
way to fly!
289
00:11:15,442 --> 00:11:18,078
Krumitz, you're sure
this is Lomis?
290
00:11:18,080 --> 00:11:20,508
Every bone in my body
says I'm right.
291
00:11:20,510 --> 00:11:21,907
This is how
he works.
292
00:11:21,909 --> 00:11:23,745
When the Wi-Fi intrusion
on the planes
293
00:11:23,747 --> 00:11:26,209
connected to the credit cards,
I knew it was him.
294
00:11:26,211 --> 00:11:27,408
Sounds like a hunch.
295
00:11:27,410 --> 00:11:28,883
And your obsession
with catching a guy
296
00:11:28,885 --> 00:11:30,645
you've been chasing
for the last three years.
297
00:11:31,158 --> 00:11:33,157
But it's not.
298
00:11:33,159 --> 00:11:34,987
Before I left CTOC,
299
00:11:34,989 --> 00:11:36,227
I found a connection
300
00:11:36,229 --> 00:11:38,625
between the nine suspects
and Lomis.
301
00:11:38,627 --> 00:11:40,193
I discovered a malicious script
302
00:11:40,195 --> 00:11:42,427
buried deep in
the nine suspects' phones.
303
00:11:42,429 --> 00:11:44,132
The code exploited
a vulnerability
304
00:11:44,134 --> 00:11:45,469
in the operating system.
305
00:11:48,143 --> 00:11:49,739
Yeah, that's his signature.
306
00:11:49,741 --> 00:11:52,338
A custom code that gains
complete control over the OS
307
00:11:52,340 --> 00:11:54,938
and suffocates the security
features like a boa constrictor.
308
00:11:54,940 --> 00:11:56,409
Means he can do
whatever he wants
309
00:11:56,411 --> 00:11:57,977
with any of the phones...
310
00:11:59,515 --> 00:12:00,848
...steal your identity,
311
00:12:00,850 --> 00:12:02,145
access personal info,
312
00:12:02,147 --> 00:12:03,418
even attach malware.
313
00:12:03,420 --> 00:12:04,881
It doesn't make
sense, though.
314
00:12:04,883 --> 00:12:06,016
I mean, in the past,
315
00:12:06,018 --> 00:12:07,552
Lomis robbed a New
York hedge fund,
316
00:12:07,554 --> 00:12:08,655
the payroll
317
00:12:08,657 --> 00:12:10,118
at San Francisco PD,
318
00:12:10,120 --> 00:12:11,389
even went after
an NHL team.
319
00:12:11,391 --> 00:12:13,353
- Now this?
- You're right. Credit cards
320
00:12:13,355 --> 00:12:16,885
and planes doesn't really fit
his behavioral profile.
321
00:12:16,887 --> 00:12:18,020
It's not what he does.
322
00:12:18,022 --> 00:12:19,484
It's how he does it.
323
00:12:19,486 --> 00:12:21,818
He starts with creating chaos
324
00:12:21,820 --> 00:12:23,354
and it grows
into something bigger.
325
00:12:23,356 --> 00:12:25,056
- That's what this is.
- If Lomis is the one behind
326
00:12:25,058 --> 00:12:26,590
this credit
card heist,
327
00:12:26,592 --> 00:12:28,086
it means that none of our
nine suspects even knew
328
00:12:28,088 --> 00:12:29,422
the suspicious script
was on their phones.
329
00:12:29,424 --> 00:12:31,823
Means Willa Hart and the rest
of the eight passengers
330
00:12:31,825 --> 00:12:32,864
are all victims.
331
00:12:32,866 --> 00:12:34,033
Call the FBI field teams,
332
00:12:34,035 --> 00:12:35,530
have everyone we've
been holding released.
333
00:12:35,532 --> 00:12:36,570
Nelson...
Yes?
334
00:12:36,572 --> 00:12:37,634
Follow the credit card trail.
335
00:12:37,636 --> 00:12:39,235
Look for any purchases
that stand out.
336
00:12:39,237 --> 00:12:40,203
Okay.
337
00:12:40,205 --> 00:12:42,139
Krumitz, check for the code
338
00:12:42,141 --> 00:12:44,443
Lomis placed on the rest of
the victims' cell phones.
339
00:12:44,445 --> 00:12:46,212
We're about to catch
a white whale.
340
00:12:47,086 --> 00:12:48,580
No, that's done.
341
00:12:48,582 --> 00:12:50,419
We alerted
the credit card companies
342
00:12:50,421 --> 00:12:52,515
and it should be
a day or two, and ...
343
00:12:52,517 --> 00:12:53,755
Yeah-- hey, Mike.
344
00:12:53,757 --> 00:12:55,755
Gotta call you back.
Thanks.
345
00:12:55,757 --> 00:12:58,995
Colin, I haven't had a chance
to congratulate you
346
00:12:58,997 --> 00:13:00,459
on your
promotion yet.
347
00:13:00,461 --> 00:13:01,963
Deputy director.
That's-that's big.
348
00:13:01,965 --> 00:13:03,700
Thank you, Simon, but I'm not
here to talk about that.
349
00:13:03,702 --> 00:13:06,501
The director just
called me to ask
350
00:13:06,503 --> 00:13:09,340
why you grounded all Monument
Air flights out of Miami.
351
00:13:09,342 --> 00:13:10,667
I managed to support
your decision,
352
00:13:10,669 --> 00:13:13,202
despite the fact that I
knew nothing about it.
353
00:13:13,204 --> 00:13:14,370
You should have
brought me up to speed.
354
00:13:14,372 --> 00:13:16,376
There was no time
to bring you up to speed.
355
00:13:16,378 --> 00:13:18,712
Cyber crime
moves fast here, Colin.
356
00:13:18,714 --> 00:13:21,113
Regardless, you should have
consulted me first.
357
00:13:22,621 --> 00:13:25,221
Look, I-I've always
had the authority
358
00:13:25,223 --> 00:13:26,688
to kind of run my own division.
359
00:13:26,690 --> 00:13:29,024
Wait, are you... you telling me
the rules have changed?
360
00:13:29,026 --> 00:13:31,900
I'm telling you
I should have been told.
361
00:13:31,902 --> 00:13:33,068
I don't want to lose sleep
362
00:13:33,070 --> 00:13:34,468
worrying if you're gonna
keep me up to speed
363
00:13:34,470 --> 00:13:35,706
on everything I need to know.
364
00:13:35,708 --> 00:13:38,105
I grounded those planes
to save lives
365
00:13:38,107 --> 00:13:41,977
and prevent a possible
national security threat, okay?
366
00:13:41,979 --> 00:13:44,472
I had to make a tough,
split-second decision.
367
00:13:44,474 --> 00:13:46,911
You cost an airline
millions of dollars.
368
00:13:46,913 --> 00:13:48,510
W-What... what is this?
369
00:13:48,512 --> 00:13:50,675
Are you... are you scolding me?
370
00:13:50,677 --> 00:13:53,780
From now on,
you keep me in the loop.
371
00:13:53,782 --> 00:13:55,780
You report to me.
372
00:13:55,782 --> 00:13:57,988
I report to the director.
373
00:14:01,727 --> 00:14:03,591
Understood.
374
00:14:04,529 --> 00:14:06,729
♪ ♪
375
00:14:06,731 --> 00:14:08,667
Yes!
376
00:14:08,669 --> 00:14:10,675
What is it?
377
00:14:10,677 --> 00:14:11,739
This is great.
378
00:14:11,741 --> 00:14:13,578
I've been thinking
about this all wrong.
379
00:14:13,580 --> 00:14:14,738
That doesn't
sound great.
380
00:14:14,740 --> 00:14:15,778
No, it is.
381
00:14:15,780 --> 00:14:17,011
Because I realized
that the code itself
382
00:14:17,013 --> 00:14:18,243
is not going to help us
find Lomis.
383
00:14:18,245 --> 00:14:20,654
I'm still waiting
on the “great” here, bud.
384
00:14:20,656 --> 00:14:23,222
How the code got onto
the phones is the key.
385
00:14:23,224 --> 00:14:24,486
That's a
pairing record.
386
00:14:24,488 --> 00:14:26,726
Yep.
A history of the last device
387
00:14:26,728 --> 00:14:27,957
a phone synced with.
388
00:14:27,959 --> 00:14:30,429
All these phones paired
with the exact same device.
389
00:14:30,431 --> 00:14:31,493
Bingo.
390
00:14:31,495 --> 00:14:33,365
And all the time stamps
are within an hour
391
00:14:33,367 --> 00:14:34,828
before our victims'
flights took off.
392
00:14:34,830 --> 00:14:36,468
That means they picked up
Lomis' malicious script
393
00:14:36,470 --> 00:14:37,605
somewhere in
this terminal.
394
00:14:37,607 --> 00:14:39,070
There's at least
50 different ways
395
00:14:39,072 --> 00:14:40,470
to infect a phone.
396
00:14:45,542 --> 00:14:47,141
Lomis is clever.
397
00:14:47,143 --> 00:14:48,981
He picked a place where he could
install his malicious script
398
00:14:48,983 --> 00:14:51,581
on multiple victims' phones,
all at the same time.
399
00:14:51,583 --> 00:14:53,422
We're looking for
a watering hole.
400
00:14:53,424 --> 00:14:54,550
Maximize the
number of victims,
401
00:14:54,552 --> 00:14:55,957
maximize the
credit card info.
402
00:14:58,493 --> 00:15:00,219
Right there.
403
00:15:00,221 --> 00:15:00,987
They plugged their phone
in to get a charge,
404
00:15:00,989 --> 00:15:02,091
he stole
their data.
405
00:15:02,093 --> 00:15:03,323
No, that charging station
406
00:15:03,325 --> 00:15:04,291
is off the beaten path.
407
00:15:04,293 --> 00:15:05,492
Infrequent traffic.
408
00:15:05,494 --> 00:15:07,060
He would have chosen
a high-traffic station
409
00:15:07,062 --> 00:15:09,333
for his victims.
410
00:15:13,271 --> 00:15:16,076
That's our crime scene.
411
00:15:20,707 --> 00:15:22,841
When someone plugs in
their phone to charge,
412
00:15:22,843 --> 00:15:24,642
their info is being stolen.
413
00:15:28,451 --> 00:15:30,417
This was juice jacking.
414
00:15:30,419 --> 00:15:31,521
All right.
415
00:15:31,523 --> 00:15:33,657
I'll call the airline,
416
00:15:33,659 --> 00:15:34,753
get the passenger manifest
for every flight
417
00:15:34,755 --> 00:15:35,954
that left the terminal
this morning.
418
00:15:35,956 --> 00:15:37,089
We need to find everyone
419
00:15:37,091 --> 00:15:38,425
who's carrying this malware
on their device.
420
00:15:38,427 --> 00:15:39,992
Krumitz, I need you
to clear all the passengers
421
00:15:39,994 --> 00:15:41,191
from this area.
422
00:15:41,193 --> 00:15:42,927
Nelson, start removing
all the malicious
423
00:15:42,929 --> 00:15:44,694
script from everyone's phone.
424
00:15:44,696 --> 00:15:46,493
We need to shut this down now.
425
00:15:48,533 --> 00:15:49,930
FBI!
426
00:15:49,932 --> 00:15:50,995
Everyone unplug.
427
00:15:50,997 --> 00:15:52,700
What? Hey.
428
00:15:52,702 --> 00:15:54,541
My phone is dead.
429
00:15:55,806 --> 00:15:57,004
Hey, don't unplug my phone.
430
00:15:57,006 --> 00:15:58,203
It's dead.
431
00:15:59,372 --> 00:16:00,608
Tell me something, sir.
432
00:16:00,610 --> 00:16:02,942
Have you ever heard
of juice jacking?
433
00:16:02,944 --> 00:16:04,439
No, and I don't care to.
434
00:16:06,177 --> 00:16:07,743
You see
this cord?
435
00:16:07,745 --> 00:16:08,911
It charges your phone, right?
436
00:16:08,913 --> 00:16:10,311
Nice. Safe.
437
00:16:10,313 --> 00:16:11,614
You think it's your friend.
438
00:16:11,616 --> 00:16:13,749
But you see this connector
on the end?
439
00:16:13,751 --> 00:16:15,381
Yeah. It's a USB plug.
440
00:16:15,383 --> 00:16:17,419
Not exactly groundbreaking
stuff, guy.
441
00:16:17,421 --> 00:16:18,685
Hmm.
442
00:16:18,687 --> 00:16:20,125
Maybe this'll impress you.
443
00:16:20,127 --> 00:16:23,294
Most people don't realize
that this cord has four ports.
444
00:16:23,296 --> 00:16:25,432
Two for power,
which charge your phone,
445
00:16:25,434 --> 00:16:28,736
and two for data,
which transfer--
446
00:16:28,738 --> 00:16:29,768
yes,
447
00:16:29,770 --> 00:16:31,503
you guessed it-- your data.
448
00:16:31,505 --> 00:16:34,037
Now, what do
you think your phone
449
00:16:34,039 --> 00:16:35,806
was doing just now, guy?
450
00:16:35,808 --> 00:16:37,174
Charging.
451
00:16:37,176 --> 00:16:38,708
Wrong.
452
00:16:38,710 --> 00:16:39,740
Stealing your data.
453
00:16:39,742 --> 00:16:41,380
You just wanted a charge,
454
00:16:41,382 --> 00:16:42,647
and you had no idea
455
00:16:42,649 --> 00:16:44,481
that a hacker had installed
456
00:16:44,483 --> 00:16:45,691
a juice-jacking
device
457
00:16:45,693 --> 00:16:46,988
that allows him to steal
your credit cards,
458
00:16:46,990 --> 00:16:49,494
your photos, your videos,
459
00:16:49,496 --> 00:16:51,062
everything on your phone.
460
00:16:51,935 --> 00:16:53,699
Now, if you just go get in line
461
00:16:53,701 --> 00:16:54,697
and talk to that
462
00:16:54,699 --> 00:16:56,128
short gentleman
trying to pull off
463
00:16:56,130 --> 00:16:57,360
the purple paisley tie,
464
00:16:57,362 --> 00:16:58,967
he's gonna take
the malicious script
465
00:16:58,969 --> 00:16:59,998
off your phone for you.
466
00:17:00,000 --> 00:17:01,165
Problem solved.
467
00:17:03,334 --> 00:17:06,130
Thank you.
468
00:17:14,936 --> 00:17:16,302
Got it.
469
00:17:16,304 --> 00:17:17,709
Patient zero.
470
00:17:17,711 --> 00:17:19,541
Mm!
471
00:17:19,543 --> 00:17:22,008
I need the north side of
the terminal cleared out.
472
00:17:22,010 --> 00:17:23,407
No one goes
in or out.
473
00:17:23,409 --> 00:17:25,507
This is a crime
scene now.
474
00:17:25,509 --> 00:17:26,603
Excuse me, ma'am? Sir?
475
00:17:26,605 --> 00:17:28,138
I need you to clear the area.
476
00:17:28,140 --> 00:17:30,302
Pardon me, miss.
477
00:17:30,304 --> 00:17:31,469
Ma'am?
478
00:17:50,133 --> 00:17:51,983
The vic's name was
Rachel Carrington,
479
00:17:52,334 --> 00:17:54,332
a grad student
at the University of Miami.
480
00:17:54,334 --> 00:17:55,572
Worked here part time
481
00:17:55,574 --> 00:17:57,668
to put herself through school.
What did she do here?
482
00:17:57,670 --> 00:17:59,572
She was a credit card sales rep
for Monument Air.
483
00:17:59,574 --> 00:18:00,909
She worked at the
charging station,
484
00:18:00,911 --> 00:18:02,215
trying to get
people to sign up
485
00:18:02,217 --> 00:18:03,846
for their new
Peak Miles card.
486
00:18:03,848 --> 00:18:05,046
Local Feds just contacted
her family in Phoenix.
487
00:18:05,048 --> 00:18:06,046
They're flying in now.
488
00:18:06,048 --> 00:18:07,749
Did the coroner
determine the COD?
489
00:18:07,751 --> 00:18:10,746
Preliminary report
is blunt force trauma.
490
00:18:10,748 --> 00:18:12,714
They found traces of blood
in the women's restroom.
491
00:18:12,716 --> 00:18:14,184
They haven't ruled it
a homicide yet,
492
00:18:14,186 --> 00:18:16,918
but there are signs
of a struggle.
493
00:18:16,920 --> 00:18:19,419
Honestly...
494
00:18:19,421 --> 00:18:21,154
it's not
adding up for me.
495
00:18:21,156 --> 00:18:22,250
Hackers aren't murderers.
496
00:18:22,252 --> 00:18:23,249
Neither are robbers,
497
00:18:23,251 --> 00:18:24,456
until something goes wrong
498
00:18:24,458 --> 00:18:25,784
and they become
desperate.
499
00:18:25,786 --> 00:18:27,254
We need to gain access
500
00:18:27,256 --> 00:18:28,685
to the security footage
in the airport.
501
00:18:28,687 --> 00:18:30,292
I'm on it.
502
00:18:30,294 --> 00:18:31,251
Guys!
503
00:18:31,253 --> 00:18:32,619
Guys, wait!
Wait.
504
00:18:32,621 --> 00:18:34,289
Remember when Krumitz said
505
00:18:34,291 --> 00:18:35,888
that Lomis likes
to start off with chaos
506
00:18:35,890 --> 00:18:37,288
and then it grows
into something bigger?
507
00:18:37,290 --> 00:18:38,528
Yeah?
508
00:18:38,530 --> 00:18:40,360
Well, it just happened.
509
00:18:40,362 --> 00:18:43,631
I was removing the malicious
script from the phone
510
00:18:43,633 --> 00:18:46,632
and suddenly I got locked out.
511
00:18:46,634 --> 00:18:47,905
Look at this.
512
00:18:47,907 --> 00:18:49,138
“Hi, Chelsea.
513
00:18:49,140 --> 00:18:50,170
“You're phone's been hijacked.
514
00:18:50,172 --> 00:18:52,040
“What would
your fiancé Joey think
515
00:18:52,042 --> 00:18:53,704
“if he saw you being
a dirty slut?
516
00:18:53,706 --> 00:18:56,438
“Reply with a 14-digit
prepaid cash voucher
517
00:18:56,440 --> 00:18:59,305
“for $250 in the next 24 hours,
518
00:18:59,307 --> 00:19:00,407
this goes away.”
519
00:19:00,409 --> 00:19:01,941
This is ransomware.
520
00:19:01,943 --> 00:19:02,907
Krumitz said
521
00:19:02,909 --> 00:19:04,568
the malicious script
is a custom code
522
00:19:04,570 --> 00:19:05,934
that strangles
the operating system
523
00:19:05,936 --> 00:19:08,035
and allows Lomis complete
control over all the phones.
524
00:19:08,037 --> 00:19:09,500
Lomis just stepped up his game.
525
00:19:09,502 --> 00:19:11,433
Now he's holding
the phones hostage.
526
00:19:11,435 --> 00:19:13,934
We stopped his payday;
now he's retaliating.
527
00:19:13,936 --> 00:19:14,934
Nelson, I need you
528
00:19:14,936 --> 00:19:16,804
to get back to D.C.
Stay on top of
529
00:19:16,806 --> 00:19:18,105
the stolen credit cards
530
00:19:18,107 --> 00:19:19,737
and crack that ransomware.
531
00:19:19,739 --> 00:19:21,640
Done. Um...
532
00:19:21,642 --> 00:19:23,640
Is there gonna be
peanuts and pretzels
533
00:19:23,642 --> 00:19:24,975
on the Coast Guard chopper?
534
00:19:30,848 --> 00:19:33,046
Is this some kind of sick joke?
No.
535
00:19:33,048 --> 00:19:34,782
It's completely frozen.
536
00:19:34,784 --> 00:19:36,013
Someone put ransomware on it.
537
00:19:36,015 --> 00:19:37,212
You mean
538
00:19:37,214 --> 00:19:40,851
by charging my phone,
all this happened?
539
00:19:40,853 --> 00:19:42,586
Yes.
540
00:19:42,588 --> 00:19:44,954
A hacker took control of
your phone and locked you out
541
00:19:44,956 --> 00:19:46,826
until you pay the amount
that he's demanding.
542
00:19:46,828 --> 00:19:47,922
He has personal information.
543
00:19:47,924 --> 00:19:50,428
He knows my fiancé's name.
544
00:19:50,430 --> 00:19:52,261
Not only did he lock you out,
545
00:19:52,263 --> 00:19:54,038
he accessed your personal data--
546
00:19:54,040 --> 00:19:57,239
your messages,
phone calls, pictures.
547
00:19:57,241 --> 00:19:58,303
What is he going to do with it?
548
00:19:58,305 --> 00:19:59,640
Well, he's threatening
to release it
549
00:19:59,642 --> 00:20:01,009
if you don't pay.
550
00:20:02,452 --> 00:20:03,979
What did he find on that phone
551
00:20:03,981 --> 00:20:05,954
you don't want
your fiancé to see?
552
00:20:10,223 --> 00:20:11,462
Am I really expected to pay
553
00:20:11,464 --> 00:20:14,166
$250,000 to
unlock my phone?
554
00:20:14,168 --> 00:20:16,503
Senator, we don't suggest
you pay this ransom.
555
00:20:16,505 --> 00:20:17,632
And when I don't?
556
00:20:17,634 --> 00:20:19,471
Any number of
things can happen.
557
00:20:19,473 --> 00:20:21,038
Could you try to be
a little more specific?
558
00:20:21,040 --> 00:20:23,701
All right. As that text
you received threatens,
559
00:20:23,703 --> 00:20:25,539
he will post all of
your personal information
560
00:20:25,541 --> 00:20:26,674
on the Internet.
561
00:20:26,676 --> 00:20:28,074
I just flew back
562
00:20:28,076 --> 00:20:29,410
from a family trip to Miami
563
00:20:29,412 --> 00:20:30,706
and simply charged my phone,
564
00:20:30,708 --> 00:20:32,313
and now this happens?
565
00:20:32,315 --> 00:20:33,441
What action are you taking?
566
00:20:33,443 --> 00:20:35,009
We're working
some promising leads.
567
00:20:35,011 --> 00:20:36,016
We've...
568
00:20:36,018 --> 00:20:37,880
Really, gentlemen?
569
00:20:37,882 --> 00:20:39,112
Really?
570
00:20:39,114 --> 00:20:40,184
Our government
appropriates
571
00:20:40,186 --> 00:20:42,185
a lot of money to
the Cyber Division,
572
00:20:42,187 --> 00:20:43,857
and “promising leads”?
573
00:20:43,859 --> 00:20:45,089
Is that the best you can do?
574
00:20:45,091 --> 00:20:46,225
These things take time.
575
00:20:46,227 --> 00:20:48,823
Time is not something I have.
576
00:20:48,825 --> 00:20:49,991
19 hours from now,
577
00:20:49,993 --> 00:20:52,296
the highly sensitive
government material
578
00:20:52,298 --> 00:20:53,698
on this phone goes public.
579
00:20:53,700 --> 00:20:57,170
Senator, look,
all due respect...
580
00:20:57,172 --> 00:20:59,938
I mean, you know better
than to keep
581
00:20:59,940 --> 00:21:04,211
sensitive government documents
on a personal phone, so...
582
00:21:04,213 --> 00:21:06,043
what exactly
are you worried about?
583
00:21:06,045 --> 00:21:07,581
I have telephone numbers
584
00:21:07,583 --> 00:21:09,886
and information of high-profile
585
00:21:09,888 --> 00:21:12,820
colleagues
and friends.
586
00:21:12,822 --> 00:21:15,955
I have photos of my husband
and my children on this phone.
587
00:21:15,957 --> 00:21:18,057
Clearly, there's something else
on that phone
588
00:21:18,059 --> 00:21:19,288
you don't want getting out.
589
00:21:19,290 --> 00:21:20,391
You don't understand.
590
00:21:20,393 --> 00:21:22,358
It can't get out.
591
00:21:22,360 --> 00:21:25,190
What I have on this phone
is very personal.
592
00:21:25,192 --> 00:21:26,694
It could ruin my career.
593
00:21:26,696 --> 00:21:30,599
Senator, he's already got
what's on your phone.
594
00:21:30,601 --> 00:21:31,735
So, what?
595
00:21:31,737 --> 00:21:33,839
What, I cross my fingers
and hope for the best?
596
00:21:33,841 --> 00:21:35,439
We are doing everything we can
597
00:21:35,441 --> 00:21:38,238
to identify
and arrest the target.
598
00:21:38,240 --> 00:21:39,910
You just don't get it.
599
00:21:39,912 --> 00:21:43,079
People I care about
will be hurt.
600
00:21:53,050 --> 00:21:55,687
I found something--
take a look at this.
601
00:21:57,016 --> 00:22:00,052
Rachel Carrington helps this
sick woman to the bathroom.
602
00:22:00,054 --> 00:22:02,049
And that's when
our juice jackers swoop in.
603
00:22:02,051 --> 00:22:04,584
The sick woman was a
distraction to get Rachel away
604
00:22:04,586 --> 00:22:06,351
from the charging bar.
Exactly.
605
00:22:06,353 --> 00:22:07,919
Our juice jackers
have about a minute
606
00:22:07,921 --> 00:22:11,927
to install their black box
before our sick lady returns.
607
00:22:11,929 --> 00:22:13,958
Miraculously,
608
00:22:13,960 --> 00:22:16,293
she doesn't look
so sick anymore.
609
00:22:18,430 --> 00:22:19,867
Wait, stop.
610
00:22:19,869 --> 00:22:21,130
Rewind that.
611
00:22:22,604 --> 00:22:24,938
Do you have a camera angle from
the direction they're heading?
612
00:22:24,940 --> 00:22:27,105
No, there's
a blind spot
613
00:22:27,107 --> 00:22:29,041
between gates 213
and 214.
614
00:22:29,043 --> 00:22:30,641
That's where the
bathrooms are, isn't it?
615
00:22:30,643 --> 00:22:31,978
Yeah.
616
00:22:31,980 --> 00:22:34,020
And where the airport police
reported finding blood.
617
00:22:35,416 --> 00:22:37,552
So these three people
were working together.
618
00:22:37,554 --> 00:22:39,656
The sick woman killed
Rachel Carrington.
619
00:22:39,658 --> 00:22:42,961
Yeah, but the problem is--
how do we identify them?
620
00:22:42,963 --> 00:22:44,058
Look at that.
621
00:22:44,060 --> 00:22:45,466
This footage,
it's way too grainy.
622
00:22:45,468 --> 00:22:46,698
That's a dead end.
623
00:22:46,700 --> 00:22:48,330
Well, maybe not.
624
00:22:48,332 --> 00:22:50,003
The black box
that they installed
625
00:22:50,005 --> 00:22:52,003
had to get
through security, right?
626
00:22:58,511 --> 00:23:00,381
Take a snapshot of that duffel.
627
00:23:05,992 --> 00:23:07,926
To get that juice-jacking
device in the terminal,
628
00:23:07,928 --> 00:23:09,653
somebody had to get it
through security.
629
00:23:09,655 --> 00:23:11,830
Most people don't know
that TSA keeps
630
00:23:11,832 --> 00:23:13,495
all X ray photos
for a week.
631
00:23:13,497 --> 00:23:15,537
We can run our
duffel's snapshot
632
00:23:15,539 --> 00:23:17,034
against all the images
in the TSA archives.
633
00:23:17,036 --> 00:23:19,105
And based on the size, shape
and material of the device,
634
00:23:19,107 --> 00:23:21,169
we should be able to figure out
when this came through.
635
00:23:21,171 --> 00:23:22,737
Check all the bags
that went through security
636
00:23:22,739 --> 00:23:26,376
two hours before the jackers
were spotted on surveillance.
637
00:23:30,214 --> 00:23:31,476
Okay, we got it.
638
00:23:31,478 --> 00:23:33,210
All right, hold on.
639
00:23:33,212 --> 00:23:35,812
Even if we can get a visual
on who came in with it,
640
00:23:35,814 --> 00:23:37,991
chances are pretty good
they used a fake I.D.
641
00:23:37,993 --> 00:23:39,920
Well, that doesn't mean
we can't find them.
642
00:23:39,922 --> 00:23:41,930
You can learn a lot
about somebody
643
00:23:41,932 --> 00:23:43,930
by examining the contents
of their bag.
644
00:23:43,932 --> 00:23:45,929
Krumitz, remove everything
that's blue.
645
00:23:45,931 --> 00:23:48,801
It's metal like
our juice-jacking device.
646
00:23:48,803 --> 00:23:51,765
Now, separate the
materials by colors.
647
00:23:51,767 --> 00:23:54,837
We're looking for anything
plastic or biological.
648
00:23:54,839 --> 00:23:57,237
Take away the biomaterials
in orange.
649
00:23:57,239 --> 00:23:59,676
Focus on the
plastics in green.
650
00:24:03,277 --> 00:24:04,277
Right there.
651
00:24:04,278 --> 00:24:06,145
Do you see
that wizard hat?
652
00:24:06,147 --> 00:24:07,576
That's the Warlocks.
653
00:24:07,578 --> 00:24:08,806
The hacker collective.
654
00:24:08,808 --> 00:24:09,973
Yeah.
655
00:24:09,975 --> 00:24:11,580
Yeah, their symbol's
a wizard hat.
656
00:24:11,582 --> 00:24:13,012
That's their badge.
657
00:24:13,014 --> 00:24:15,377
It's like an all-access pass for
proving their gang affiliation.
658
00:24:15,379 --> 00:24:17,617
That's Lomis' crew,
our juice jackers.
659
00:24:17,619 --> 00:24:20,283
Krumitz, search all bags before
and after this image
660
00:24:20,285 --> 00:24:21,819
for the same shape.
661
00:24:23,053 --> 00:24:24,927
There. There's
two more badges.
662
00:24:24,929 --> 00:24:26,526
That proves
that the two juice jackers
663
00:24:26,528 --> 00:24:28,295
and the sick woman
are all involved.
664
00:24:28,297 --> 00:24:30,232
All right, that's great,
but how do we find them?
665
00:24:30,234 --> 00:24:32,703
Hacker collectives hide
themselves all around the world.
666
00:24:32,705 --> 00:24:34,608
I mean, they could be anywhere.
667
00:24:34,610 --> 00:24:36,608
My boy Nelson
coming through.
668
00:24:36,610 --> 00:24:38,808
He just came up with a traceable
hit on the credit cards.
669
00:24:38,810 --> 00:24:41,008
All right, looks like most
of the purchases were made
670
00:24:41,010 --> 00:24:42,416
at brick and
mortar spots,
671
00:24:42,418 --> 00:24:43,983
like high-end department stores
and electronic retailers.
672
00:24:43,985 --> 00:24:47,888
You got computers,
laptops, handbags.
673
00:24:47,890 --> 00:24:49,888
Goods that can easily
be sold for quick cash.
674
00:24:49,890 --> 00:24:52,918
Yeah, except that Nelson just
found an odd online purchase.
675
00:24:52,920 --> 00:24:54,221
No, that's
a server blade.
676
00:24:54,223 --> 00:24:55,854
That is not something
you can buy
677
00:24:55,856 --> 00:24:57,359
at your local
electronics store.
678
00:24:57,361 --> 00:24:59,727
But I'm willing
to bet that's something
679
00:24:59,729 --> 00:25:01,894
a hacker collective
is gonna want.
680
00:25:01,896 --> 00:25:03,765
Big online purchase
with a stolen credit card?
681
00:25:03,767 --> 00:25:05,068
Easily traceable?
682
00:25:05,070 --> 00:25:07,632
That's a little sloppy
for Lomis, don't you think?
683
00:25:07,634 --> 00:25:09,296
No, but we stopped
his payday.
684
00:25:09,298 --> 00:25:11,400
He's scrambling, I mean,
that's when you make mistakes.
685
00:25:11,402 --> 00:25:13,303
His mistake is our gain.
686
00:25:13,305 --> 00:25:16,306
The clock is ticking--
we've got 14 hours left.
687
00:25:16,308 --> 00:25:19,314
That purchase is gonna be linked
to an address-- find it.
688
00:25:24,021 --> 00:25:25,715
FBI!
689
00:25:26,518 --> 00:25:27,685
FBI!
690
00:25:27,687 --> 00:25:28,853
Hands in the air!
Hands in the air!
691
00:25:30,063 --> 00:25:31,390
On the ground now!
692
00:25:31,392 --> 00:25:33,597
Get down! On the ground now!
693
00:25:33,599 --> 00:25:35,598
Get on the floor!
694
00:25:35,600 --> 00:25:37,062
Heads down!
695
00:25:39,039 --> 00:25:41,166
He went out the back door.
696
00:25:45,606 --> 00:25:48,011
FBI, freeze!
697
00:25:52,050 --> 00:25:53,050
Crap!
698
00:26:17,921 --> 00:26:19,783
I really thought
Lomis would be here.
699
00:26:31,718 --> 00:26:34,288
We found traces of blood
underneath your fingernail.
700
00:26:35,895 --> 00:26:37,763
DNA matched
Rachel Carrington.
701
00:26:40,307 --> 00:26:41,274
You killed her.
702
00:26:41,276 --> 00:26:42,242
No.
703
00:26:42,244 --> 00:26:44,515
No, it was
an accident.
704
00:26:44,517 --> 00:26:46,021
I was just supposed
to distract her.
705
00:26:46,023 --> 00:26:48,318
Glad you're feeling better.
706
00:26:48,320 --> 00:26:50,093
I really have to be
heading back, though.
707
00:26:50,095 --> 00:26:51,252
Uh, wait.
708
00:26:51,254 --> 00:26:53,188
Wh...
What are you...?
709
00:26:54,261 --> 00:26:55,994
Once you realized she was dead,
710
00:26:55,996 --> 00:26:58,128
you went back to your partners.
711
00:26:58,130 --> 00:27:00,464
She was still breathing
when we left her.
712
00:27:04,971 --> 00:27:08,269
I thought for sure someone
would find her immediately.
713
00:27:08,271 --> 00:27:09,900
You made it look
like she was sleeping
714
00:27:09,902 --> 00:27:13,370
so you could buy enough time
to escape the crime scene.
715
00:27:13,372 --> 00:27:15,003
No, I wanted to tell someone.
716
00:27:15,005 --> 00:27:16,602
But they wouldn't let me.
717
00:27:16,604 --> 00:27:18,970
They were scared of
what he would do to us.
718
00:27:18,972 --> 00:27:20,611
Of what who
would do to you?
719
00:27:20,613 --> 00:27:22,612
Lomis? You said
you'd never met him?
720
00:27:22,614 --> 00:27:24,317
Online, man.
721
00:27:24,319 --> 00:27:27,653
Where reputations matter.
722
00:27:27,655 --> 00:27:29,589
He could destroy us.
723
00:27:29,591 --> 00:27:32,325
He could ruin
our cred.
724
00:27:32,327 --> 00:27:33,661
You know
what I can do?
725
00:27:33,663 --> 00:27:36,596
Put you in jail
for the next 25 years.
726
00:27:36,598 --> 00:27:38,565
Who's collecting
the phone-ransom money?
727
00:27:38,567 --> 00:27:41,334
I didn't know about the phones
being ransomed, I swear.
728
00:27:41,336 --> 00:27:42,839
He hired us
729
00:27:42,841 --> 00:27:45,100
to install the box
and clone the cards
730
00:27:45,102 --> 00:27:46,171
and buy the goods, that's it.
731
00:27:46,173 --> 00:27:47,834
Oh, come on,
there was a server blade.
732
00:27:47,836 --> 00:27:49,274
What do you think
that was for?
733
00:27:49,276 --> 00:27:51,010
That server blade?
734
00:27:51,012 --> 00:27:52,306
We didn't buy it.
735
00:27:52,308 --> 00:27:53,306
Lomis did.
736
00:27:53,308 --> 00:27:54,641
He sent it to us.
737
00:27:54,643 --> 00:27:55,977
He set us up to take the fall.
738
00:27:55,979 --> 00:27:57,680
You expect me to believe that?
739
00:27:57,682 --> 00:27:59,943
He didn't even show up...
740
00:27:59,945 --> 00:28:01,213
To collect his share
of the take.
741
00:28:01,215 --> 00:28:03,612
Who passes up
on that much money?
742
00:28:11,488 --> 00:28:13,125
I don't believe them.
743
00:28:13,127 --> 00:28:14,925
They know where Lomis is,
they have to.
744
00:28:14,927 --> 00:28:16,123
No, they don't,
Krumitz.
745
00:28:16,125 --> 00:28:17,691
They've never met him.
746
00:28:17,693 --> 00:28:19,930
Which is why your white
whale never gets caught.
747
00:28:43,187 --> 00:28:44,247
What is that?
748
00:28:44,249 --> 00:28:45,950
Lomis is taunting me.
749
00:28:45,952 --> 00:28:47,550
He knew I'd find the
juice-jacking device,
750
00:28:47,552 --> 00:28:50,789
and he overrode the data with
“Gotcha!” a bajillion times.
751
00:28:50,791 --> 00:28:52,220
All right, well,
if he overwrote the data,
752
00:28:52,222 --> 00:28:54,089
there's no way to retrieve
what was there before.
753
00:28:54,091 --> 00:28:55,288
Hence “Gotcha!”
754
00:28:55,290 --> 00:28:57,150
Those the shredded phones?
755
00:28:57,152 --> 00:28:58,990
Get on the floor!
756
00:28:58,992 --> 00:29:00,821
Yep.
757
00:29:00,823 --> 00:29:03,387
I figured they tried to destroy 'em
because there's something on them
758
00:29:03,389 --> 00:29:04,890
they don't want me to find.
759
00:29:04,892 --> 00:29:08,721
I'm recovering all of
the salvageable pieces.
760
00:29:14,919 --> 00:29:15,788
Anything?
761
00:29:15,790 --> 00:29:17,818
No. Not yet.
762
00:29:18,524 --> 00:29:20,692
Okay. I got your time stamp.
763
00:29:20,694 --> 00:29:22,126
Come on.
764
00:29:22,128 --> 00:29:24,334
Come on, come on,
come on, come on.
765
00:29:24,336 --> 00:29:25,670
Yes!
766
00:29:25,672 --> 00:29:27,735
Did you just get his serial number?
Yep.
767
00:29:31,044 --> 00:29:33,343
I got you now, Lomis.
768
00:29:33,345 --> 00:29:34,807
I'm gonna track
this serial number
769
00:29:34,809 --> 00:29:36,813
right down
to your evil lair.
770
00:29:43,581 --> 00:29:49,323
You got to be kidding me.
It's untraceable.
771
00:29:49,325 --> 00:29:52,156
Damn it!
772
00:29:54,830 --> 00:29:57,459
When was the last time
you slept?
773
00:29:57,461 --> 00:30:00,697
Listen, man, I know
it's hard, all right?
774
00:30:00,699 --> 00:30:03,729
I do. Believe me. All right,
I ever tell you about the...
775
00:30:03,731 --> 00:30:07,076
the sleeper cell I
tracked in Kandahar?
776
00:30:07,078 --> 00:30:10,578
117 degrees.
777
00:30:10,580 --> 00:30:11,906
Dry heat.
778
00:30:11,908 --> 00:30:14,008
It was the kind that-that chaps
the inside of your mouth.
779
00:30:14,010 --> 00:30:15,847
All right,
between the four of us,
780
00:30:15,849 --> 00:30:18,449
we had half a canteen
of water left.
781
00:30:18,451 --> 00:30:22,125
We had been there for three days
because I was obsessed.
782
00:30:22,127 --> 00:30:26,527
I knew if I stayed on 'em,
if I persevered,
783
00:30:26,529 --> 00:30:28,527
I'd find 'em.
784
00:30:28,529 --> 00:30:31,399
I was wrong.
785
00:30:31,401 --> 00:30:32,767
So you just quit?
786
00:30:32,769 --> 00:30:34,729
You gave up?
787
00:30:34,731 --> 00:30:36,261
No.
788
00:30:36,263 --> 00:30:38,129
There's a big difference
between quitting
789
00:30:38,131 --> 00:30:40,727
and just knowing
when it's not your day.
790
00:30:42,232 --> 00:30:43,926
We need you in CTOC.
791
00:30:45,230 --> 00:30:46,699
When you're ready.
792
00:30:49,732 --> 00:30:51,928
Did you catch them?
793
00:30:56,643 --> 00:30:58,240
What do you think?
794
00:30:58,242 --> 00:31:00,406
I had to wait
a month, but...
795
00:31:00,408 --> 00:31:02,972
believe me, it was worth it.
796
00:31:09,952 --> 00:31:12,453
Okay, we only have two hours
797
00:31:12,455 --> 00:31:14,916
before our victims' private
data is released on the Web.
798
00:31:14,918 --> 00:31:17,358
How close are we
to... anything?
799
00:31:17,360 --> 00:31:18,688
The code's sophisticated.
800
00:31:18,690 --> 00:31:20,426
We're getting there,
but it's gonna take time.
801
00:31:20,428 --> 00:31:23,802
Against orders, some people
paid the ransom already.
802
00:31:23,804 --> 00:31:25,538
Hey, guys, we got a problem.
803
00:31:25,540 --> 00:31:26,497
What is it?
804
00:31:26,499 --> 00:31:27,801
Lomis isn't waiting
for the deadline.
805
00:31:27,803 --> 00:31:31,408
He's releasing
people's information right now.
806
00:31:31,410 --> 00:31:33,440
And he started with
the most powerful person first.
807
00:31:33,442 --> 00:31:36,281
I thought
the senator already paid.
808
00:31:36,283 --> 00:31:37,810
Yeah, I thought
she did, too.
809
00:31:37,812 --> 00:31:40,545
Well, this will be the headline
on every national newscast.
810
00:31:40,547 --> 00:31:42,553
Got another one.
811
00:31:43,388 --> 00:31:44,922
Chelsea's photos were released
812
00:31:44,924 --> 00:31:46,388
to a revenge porn site.
813
00:31:46,390 --> 00:31:48,359
Lomis isn't
playing by the rules,
814
00:31:48,361 --> 00:31:50,000
which makes him very dangerous.
815
00:31:50,002 --> 00:31:52,002
Guys! Guys!
816
00:31:52,004 --> 00:31:53,802
I did it.
817
00:31:53,804 --> 00:31:55,771
I finally found Lomis.
I got an I.D.
818
00:31:55,773 --> 00:31:57,379
How'd you find him?
819
00:31:57,381 --> 00:31:59,645
Just like you said--
go back to the evidence.
820
00:31:59,647 --> 00:32:01,583
So I took another look
at the juice-jacking box.
821
00:32:01,585 --> 00:32:04,486
Lomis made it impossible to
recover any data off that thing.
822
00:32:04,488 --> 00:32:05,687
You're right.
823
00:32:05,689 --> 00:32:07,793
Except for one thing: time.
824
00:32:07,795 --> 00:32:10,666
I know what time Lomis
overwrote the data.
825
00:32:10,668 --> 00:32:13,531
It was four hours before we even
found the box at the airport.
826
00:32:13,533 --> 00:32:16,341
That's around the time
the first flights were taking off.
827
00:32:16,343 --> 00:32:19,143
He had to plug directly
into the charging station
828
00:32:19,145 --> 00:32:20,543
to steal everyone's data.
829
00:32:20,545 --> 00:32:21,911
Lomis was there, in person.
830
00:32:21,913 --> 00:32:24,179
Yeah-- I pulled the
airport security footage
831
00:32:24,181 --> 00:32:26,481
four hours before
we arrived.
832
00:32:27,644 --> 00:32:29,683
Say hello to Lomis.
833
00:32:45,936 --> 00:32:48,042
Okay, your point?
834
00:32:48,044 --> 00:32:49,444
I mean,
this doesn't prove anything.
835
00:32:49,446 --> 00:32:51,487
Yeah, well, it's about
to prove everything.
836
00:32:51,489 --> 00:32:53,089
I don't even know
what you're showing me.
837
00:32:53,091 --> 00:32:55,260
Mr. Hart, we know the truth.
838
00:32:55,262 --> 00:32:58,500
I'm telling you,
you've got it wrong.
839
00:32:58,502 --> 00:33:00,196
We have evidence...
No!
840
00:33:01,333 --> 00:33:02,898
I mean, Willa is
a straight-A student.
841
00:33:02,900 --> 00:33:04,866
She plays soccer,
dance lessons, violin...
842
00:33:04,868 --> 00:33:06,169
Yeah...
843
00:33:06,171 --> 00:33:08,172
and she also took first place
in the Miami-Dade County
844
00:33:08,174 --> 00:33:09,744
high school chess
tournament.
845
00:33:09,746 --> 00:33:11,817
We get it--
she's a genius
846
00:33:11,819 --> 00:33:13,481
and you're a proud father.
847
00:33:13,483 --> 00:33:15,660
This is insane.
848
00:33:15,662 --> 00:33:18,493
All right, Willa's
not a hacker.
849
00:33:18,495 --> 00:33:19,725
And she's a good kid.
850
00:33:19,727 --> 00:33:21,229
Maybe she is.
851
00:33:21,231 --> 00:33:22,797
But maybe she's not.
852
00:33:22,799 --> 00:33:25,068
I have a warrant
for her tablet.
853
00:33:25,070 --> 00:33:26,467
If it's clean,
she's innocent.
854
00:33:26,469 --> 00:33:29,740
And exactly the daughter
you believe her to be.
855
00:33:29,742 --> 00:33:31,236
Why would
she do this?
856
00:33:34,048 --> 00:33:36,876
Dad, whose car is that
in the driveway?
857
00:33:36,878 --> 00:33:39,614
Belongs to the
Federal Bureau of Investigation.
858
00:33:41,089 --> 00:33:43,022
Hello, Lomis.
859
00:33:43,024 --> 00:33:45,389
It's nice to meet you.
860
00:33:46,287 --> 00:33:48,660
I've been waiting
a long time for this.
861
00:33:51,926 --> 00:33:53,529
Gotcha.
862
00:33:57,433 --> 00:34:02,967
Everything about you
is unexpected.
863
00:34:02,969 --> 00:34:04,798
We bought your disguise.
864
00:34:04,800 --> 00:34:06,206
We actually
thought you were
865
00:34:06,208 --> 00:34:08,303
a 35-year-old man
from Eastern Europe.
866
00:34:08,305 --> 00:34:10,942
Very clever.
You went through all the trouble
867
00:34:10,944 --> 00:34:12,277
of stealing
credit card information
868
00:34:12,279 --> 00:34:13,709
and never collected your take.
869
00:34:13,711 --> 00:34:16,384
You were the mastermind
behind the whole plan.
870
00:34:16,386 --> 00:34:20,089
Stole all those credit card
numbers but never met up
871
00:34:20,091 --> 00:34:22,186
with your accomplices
to get paid.
872
00:34:22,188 --> 00:34:23,692
But, then again, you couldn't.
873
00:34:23,694 --> 00:34:25,564
A 16-year-old girl
couldn't show up
874
00:34:25,566 --> 00:34:27,902
at a hacker's house to collect.
875
00:34:27,904 --> 00:34:29,335
You would've blown
your cover.
876
00:34:29,337 --> 00:34:30,768
So then you ransomed
all the phones,
877
00:34:30,770 --> 00:34:32,441
and we thought you were
gonna get paid that way.
878
00:34:32,443 --> 00:34:35,675
But then you began releasing
the ransomed data anyway.
879
00:34:35,677 --> 00:34:38,652
Senator Finnis
tried to pay you.
880
00:34:38,654 --> 00:34:40,284
But, to our surprise,
you denied payment.
881
00:34:40,286 --> 00:34:42,453
Because it wasn't
about the money.
882
00:34:42,455 --> 00:34:43,956
I have to know.
883
00:34:43,958 --> 00:34:45,523
What was this about? Why
884
00:34:45,525 --> 00:34:47,860
did you do it?
885
00:34:47,862 --> 00:34:49,356
Did you even
886
00:34:49,358 --> 00:34:51,891
think about
the consequences?
887
00:34:51,893 --> 00:34:54,530
Senator Finnis,
Michael Young,
888
00:34:54,532 --> 00:34:55,930
Victoria Fields,
889
00:34:55,932 --> 00:34:59,001
Simone Taylor-- you ruined
their lives today.
890
00:35:01,436 --> 00:35:02,771
Look, this
isn't a joke,
891
00:35:02,773 --> 00:35:04,610
Willa. Tell us why.
892
00:35:04,612 --> 00:35:06,137
Why did you do it?
893
00:35:06,139 --> 00:35:08,513
Because I wanted to.
894
00:35:10,444 --> 00:35:13,345
I was bored.
I did it because I could.
895
00:35:23,361 --> 00:35:25,360
You saw this, right?
896
00:35:25,362 --> 00:35:26,929
Oh, yeah.
897
00:35:26,931 --> 00:35:28,329
It's a shame.
898
00:35:28,331 --> 00:35:30,298
The senator's husband
and children learning her
899
00:35:30,300 --> 00:35:32,938
sexual preference from the
front page of a paper, it's...
900
00:35:32,940 --> 00:35:35,202
Yeah, well,
privacy is a myth.
901
00:35:35,204 --> 00:35:37,370
Personal info is
the new commodity.
902
00:35:38,444 --> 00:35:40,409
I, uh... I understand
three other people
903
00:35:40,411 --> 00:35:41,745
had their information released.
904
00:35:41,747 --> 00:35:44,913
Well, Lomis had access
to 300 phones
905
00:35:44,915 --> 00:35:46,545
and whatever was on them.
906
00:35:46,547 --> 00:35:47,712
We got her.
907
00:35:47,714 --> 00:35:50,647
I mean, we confiscated
all of her devices.
908
00:35:50,649 --> 00:35:52,255
She had plenty of time
to make copies
909
00:35:52,257 --> 00:35:55,318
and distribute them to anyone.
910
00:35:55,320 --> 00:35:57,126
And what they do with it...
911
00:35:57,128 --> 00:35:58,788
only time will tell.
912
00:35:59,957 --> 00:36:02,154
What's this?
913
00:36:02,156 --> 00:36:04,058
That's me keeping
you in the loop.
914
00:36:04,060 --> 00:36:08,064
I-I still can't believe
that she's just a teenager.
915
00:36:08,066 --> 00:36:11,432
So, Colin...
Yeah.
916
00:36:11,434 --> 00:36:13,369
Can I be honest
with you?
917
00:36:13,371 --> 00:36:16,001
I was a little pissed off
I didn't get that promotion.
918
00:36:16,003 --> 00:36:17,169
I was.
919
00:36:17,171 --> 00:36:19,904
I just felt I was
920
00:36:19,906 --> 00:36:22,205
the best man
for the job.
921
00:36:22,207 --> 00:36:23,940
So did I.
922
00:36:23,942 --> 00:36:26,811
I mean-- think that I was
the best man for the job.
923
00:36:26,813 --> 00:36:28,842
Look, I'll-I'll
admit it--
924
00:36:28,844 --> 00:36:31,041
there's not a whole lot
that I know
925
00:36:31,043 --> 00:36:34,546
about what you
and your people do.
926
00:36:34,548 --> 00:36:37,482
That's not an enviable position.
You're not gonna
927
00:36:37,484 --> 00:36:38,651
try and hug me now, are you?
928
00:36:38,653 --> 00:36:41,325
No. In fact, my job
practically guarantees
929
00:36:41,327 --> 00:36:42,861
I am gonna be a constant
930
00:36:42,863 --> 00:36:45,332
pain in your ass.
931
00:36:45,334 --> 00:36:48,553
But listen, I'm the least
of your worries.
932
00:36:52,255 --> 00:36:53,923
Tomorrow's criminal.
933
00:36:53,925 --> 00:36:57,255
That is who you're
gonna lose sleep over.
934
00:36:57,257 --> 00:36:59,454
Good night.
935
00:37:00,687 --> 00:37:02,894
Good night.
936
00:37:11,304 --> 00:37:12,997
What's that?
937
00:37:14,406 --> 00:37:15,698
Postcard.
938
00:37:15,700 --> 00:37:17,370
From Lomis?
939
00:37:18,606 --> 00:37:21,342
Sent the moment the prosecutor
released her from custody.
940
00:37:21,344 --> 00:37:24,247
It's not fair.
941
00:37:24,249 --> 00:37:26,183
She gets to walk
because
942
00:37:26,185 --> 00:37:28,982
she happens to be 16,
but she is a criminal.
943
00:37:28,984 --> 00:37:31,085
But she's a cyber criminal.
944
00:37:31,087 --> 00:37:33,355
And we both know that
sentencing guidelines
945
00:37:33,357 --> 00:37:35,387
make it very difficult
to prosecute
946
00:37:35,389 --> 00:37:37,088
if they're under 21.
947
00:37:37,090 --> 00:37:39,223
It's like we're
encouraging kids
948
00:37:39,225 --> 00:37:41,120
to become black hats.
949
00:37:41,122 --> 00:37:43,259
Well, maybe one day
that law will change.
950
00:37:43,261 --> 00:37:44,532
But today...
951
00:37:44,534 --> 00:37:46,197
you need to be very grateful
that we couldn't
952
00:37:46,199 --> 00:37:47,932
prosecute.
Now, did you
953
00:37:47,934 --> 00:37:50,004
intend to break the law
or was that accidental?
954
00:37:50,006 --> 00:37:51,300
'Cause I really want to believe
955
00:37:51,302 --> 00:37:54,202
you had no idea that what
you were doing was illegal.
956
00:37:55,676 --> 00:37:59,074
I know you paid off
the ransomed phone via text.
957
00:38:03,252 --> 00:38:07,251
And with that payment you
bundled a Remote Access Trojan.
958
00:38:07,253 --> 00:38:09,253
That's illegal.
959
00:38:13,295 --> 00:38:15,563
You took control
of Lomis' desktop computer
960
00:38:15,565 --> 00:38:19,194
and you snapped a picture.
961
00:38:20,467 --> 00:38:22,528
Guys. Guys.
962
00:38:22,530 --> 00:38:24,537
I did it.
963
00:38:24,539 --> 00:38:26,839
I finally found Lomis.
I got an I.D.
964
00:38:26,841 --> 00:38:28,636
How'd you know?
965
00:38:28,638 --> 00:38:30,067
You told me.
966
00:38:30,069 --> 00:38:31,770
And she also took first place
967
00:38:31,772 --> 00:38:33,401
in the Miami-Dade County
high school chess
968
00:38:33,403 --> 00:38:36,102
tournament. We get it--
she's a genius
969
00:38:36,104 --> 00:38:37,572
and you're a proud father.
970
00:38:37,574 --> 00:38:39,706
You couldn't know
she was a chess champion
971
00:38:39,708 --> 00:38:41,000
unless you were
in her bedroom,
972
00:38:41,002 --> 00:38:43,367
and I knew
that you weren't. So I
973
00:38:43,369 --> 00:38:46,242
accessed your Bureau files
and I found that photo.
974
00:38:46,244 --> 00:38:48,546
Without my
authorization
975
00:38:48,548 --> 00:38:50,041
and a judge's
subpoena,
976
00:38:50,043 --> 00:38:52,417
you broke the law
when you took that photo.
977
00:38:52,419 --> 00:38:54,753
It was a digital search
without a warrant.
978
00:38:54,755 --> 00:38:57,553
I couldn't let Lomis win again.
979
00:38:57,555 --> 00:38:59,584
And I know
this sounds insane,
980
00:38:59,586 --> 00:39:02,959
but I...
981
00:39:02,961 --> 00:39:05,592
I needed to justify your
decision to hire me.
982
00:39:05,594 --> 00:39:07,834
Your belief in me.
983
00:39:07,836 --> 00:39:10,670
I started at the FBI
pushing a mail cart.
984
00:39:10,672 --> 00:39:13,811
And I would've been there
forever, but you found me.
985
00:39:13,813 --> 00:39:15,814
I hadn't been
in CTOC ten minutes
986
00:39:15,816 --> 00:39:17,857
before I realized
how dedicated you were.
987
00:39:17,859 --> 00:39:19,323
And watching you
988
00:39:19,325 --> 00:39:22,660
love your job
989
00:39:22,662 --> 00:39:25,733
made me love my job.
990
00:39:28,473 --> 00:39:31,111
And made me never
want to let you down.
991
00:39:33,145 --> 00:39:35,512
I didn't know what else to do.
992
00:39:37,082 --> 00:39:39,016
That is no excuse.
993
00:39:39,018 --> 00:39:41,214
What if Lomis
was a 35-year-old man?
994
00:39:41,216 --> 00:39:42,581
I know. He would have walked.
995
00:39:42,583 --> 00:39:45,824
And I would've been
forced to turn you in.
996
00:39:48,163 --> 00:39:49,833
Today's your lucky day.
997
00:39:49,835 --> 00:39:52,329
Your mistake is not
sending you to prison.
998
00:39:52,331 --> 00:39:54,497
It's dying here with me.
999
00:39:55,708 --> 00:39:58,172
But I want you
to think about something.
1000
00:39:58,174 --> 00:40:00,710
Does victory
really taste so sweet
1001
00:40:00,712 --> 00:40:03,048
when you haven't
earned it honestly?
1002
00:40:42,891 --> 00:40:49,391
== sync, corrected by elderman ==
@elder_man
9999
00:00:0,500 --> 00:00:2,00
www.tvsubtitles.net