1
00:00:02,141 --> 00:00:03,488
My name is Avery Ryan.
2
00:00:03,911 --> 00:00:05,423
I was a victim of cyber crime.
3
00:00:05,998 --> 00:00:08,537
Like you, I posted
on social media,
4
00:00:08,539 --> 00:00:11,350
checked my bank account
balance online,
5
00:00:11,352 --> 00:00:12,738
even kept
the confidential files
6
00:00:12,739 --> 00:00:15,418
of my psychological practice
on my computer.
7
00:00:16,725 --> 00:00:19,655
Then I was hacked,
and as a result,
8
00:00:19,657 --> 00:00:22,294
one of my patients
was murdered.
9
00:00:22,296 --> 00:00:24,672
My investigation into her death
led me to the FBI,
10
00:00:24,674 --> 00:00:27,515
where I joined a team
of cyber experts
11
00:00:27,517 --> 00:00:30,491
to wage a war against
a new breed of criminal
12
00:00:30,493 --> 00:00:33,430
hiding on the Deep Web...
13
00:00:33,432 --> 00:00:36,768
infiltrating our daily lives
in ways we never imagined...
14
00:00:38,135 --> 00:00:40,306
...faceless...
15
00:00:40,308 --> 00:00:42,044
nameless...
16
00:00:42,046 --> 00:00:43,682
lurking inside our devices,
17
00:00:43,684 --> 00:00:46,490
just a keystroke away.
18
00:01:00,685 --> 00:01:02,548
Coffee, thanks.
19
00:01:02,550 --> 00:01:03,683
Okay.
20
00:01:12,293 --> 00:01:14,530
Here you go.
21
00:01:26,103 --> 00:01:28,269
Watch it, man!
22
00:01:39,080 --> 00:01:40,382
Hey! Get out
23
00:01:40,384 --> 00:01:41,949
of the street, man.
24
00:01:49,957 --> 00:01:51,027
Get an ambulance!
25
00:01:51,029 --> 00:01:53,259
I'll call 911.
26
00:01:55,631 --> 00:01:57,568
Cleveland coroner
sent this scan
27
00:01:57,570 --> 00:01:58,936
of victim Carl Bruno.
28
00:01:58,938 --> 00:02:00,273
Male.
29
00:02:00,275 --> 00:02:02,810
36.
30
00:02:02,812 --> 00:02:05,074
C.O.D. was blunt force trauma
from vehicular impact.
31
00:02:05,076 --> 00:02:07,610
Witnesses described him
as being disoriented
32
00:02:07,612 --> 00:02:09,049
and possibly hallucinating
33
00:02:09,051 --> 00:02:10,513
just prior to the accident.
34
00:02:10,515 --> 00:02:12,680
How did Mr. Bruno's death get
on the FDA's radar?
35
00:02:12,682 --> 00:02:16,487
This prescription bottle
was found at the accident scene.
36
00:02:16,489 --> 00:02:17,823
They're drugs purchased
37
00:02:17,825 --> 00:02:19,086
from an online
Canadian pharmacy.
38
00:02:19,088 --> 00:02:21,421
JPBPharmacy.com.
39
00:02:21,423 --> 00:02:23,588
The Federal Drug Administration
has been tracking this pharmacy
40
00:02:23,590 --> 00:02:25,292
for about two weeks
based on complaints
41
00:02:25,294 --> 00:02:27,091
coming in
to our MedWatch hotline.
42
00:02:27,093 --> 00:02:28,994
The callers all have
similar stories.
43
00:02:28,996 --> 00:02:30,193
Bad reactions to drugs
44
00:02:30,195 --> 00:02:31,360
they've purchased online.
45
00:02:31,362 --> 00:02:32,431
No one's died until now.
46
00:02:32,433 --> 00:02:34,798
The FDA has
an investigative arm, OCI.
47
00:02:34,800 --> 00:02:36,365
Why come to Cyber?
48
00:02:36,367 --> 00:02:37,732
We believe there
49
00:02:37,734 --> 00:02:41,002
are fraudulent ads on
the medical Web site, ScrollMD.
50
00:02:41,004 --> 00:02:43,696
Over 800,000 people visit
the site a day,
51
00:02:43,698 --> 00:02:45,936
most seeking a second opinion,
52
00:02:45,938 --> 00:02:48,368
searching for general
health conditions,
53
00:02:48,370 --> 00:02:50,008
others for specific drugs.
54
00:02:50,010 --> 00:02:51,840
The site users are being lured
55
00:02:51,842 --> 00:02:53,978
to JPBPharmacy.com
through these unauthorized ads.
56
00:02:53,980 --> 00:02:56,114
The ads are redirecting
site users
57
00:02:56,116 --> 00:02:57,715
to what could be
58
00:02:57,717 --> 00:02:58,915
a fictitious pharmacy.
59
00:02:58,917 --> 00:03:00,818
Sounds like
a click-baiting scheme.
60
00:03:00,820 --> 00:03:03,418
Tramizor is the drug
Carl Bruno ordered.
61
00:03:03,420 --> 00:03:04,826
It's used to treat
heart disease,
62
00:03:04,828 --> 00:03:06,626
but...
63
00:03:06,628 --> 00:03:08,322
the victim's
64
00:03:08,324 --> 00:03:10,657
arterial walls show
considerable plaque build-up.
65
00:03:10,659 --> 00:03:12,529
The drug was ineffective.
66
00:03:12,531 --> 00:03:14,729
Because it had little to
no pharmacological ingredient.
67
00:03:14,731 --> 00:03:16,432
Carl Bruno was duped into buying
what he thought
68
00:03:16,434 --> 00:03:19,105
was real Tramizor,
when in fact it was placebo.
69
00:03:19,107 --> 00:03:21,306
Not just a placebo.
70
00:03:22,941 --> 00:03:25,749
There's signs of inflammation
in the brain.
71
00:03:25,751 --> 00:03:28,183
Tox report revealed
trace amounts of aflatoxins.
72
00:03:28,185 --> 00:03:29,487
Fungus?
73
00:03:29,489 --> 00:03:30,751
Along with oxycodone.
74
00:03:30,753 --> 00:03:33,320
A pain reliever, mood enhancer.
75
00:03:33,322 --> 00:03:34,928
So the victims felt
like they were getting better
76
00:03:34,930 --> 00:03:36,392
while they were taking
the drugs,
77
00:03:36,394 --> 00:03:38,031
when actually they weren't.
78
00:03:39,033 --> 00:03:40,063
Carl Bruno's death
79
00:03:40,065 --> 00:03:42,031
wasn't an accident.
80
00:03:42,033 --> 00:03:45,031
It was homicide.
81
00:03:47,609 --> 00:03:49,905
What's the latest
on the ScrollMD Web site?
82
00:03:49,907 --> 00:03:51,714
HTML injection.
83
00:03:51,716 --> 00:03:52,779
Check it out.
84
00:03:52,781 --> 00:03:54,011
Someone hacked a curtain ad
85
00:03:54,013 --> 00:03:55,283
on the ScrollMD site.
86
00:03:55,285 --> 00:03:57,249
It looks like
a normal ad, right?
87
00:03:57,251 --> 00:03:59,614
And this is the code
for the ad,
88
00:03:59,616 --> 00:04:01,579
but peekaboo.
89
00:04:01,581 --> 00:04:02,618
There's actually
90
00:04:02,620 --> 00:04:04,944
two codes written right on top
of each other.
91
00:04:04,946 --> 00:04:06,247
A click-baiting scheme.
92
00:04:06,249 --> 00:04:07,750
Right, like Avery predicted,
93
00:04:07,752 --> 00:04:11,052
and if you toggle between them,
the fake ad
94
00:04:11,054 --> 00:04:12,786
is masking
the legitimate ad.
95
00:04:12,788 --> 00:04:14,883
The target had to breach
the ScrollMD servers
96
00:04:14,885 --> 00:04:16,388
to inject this code.
97
00:04:16,390 --> 00:04:18,189
So ScrollMD wasn't aware
of the intrusion?
98
00:04:18,191 --> 00:04:20,355
No, and it's not just
about the ads.
99
00:04:20,357 --> 00:04:22,391
It's about how people
are getting to the ads.
100
00:04:22,393 --> 00:04:25,021
So if you search
"heart disease,"
101
00:04:25,023 --> 00:04:26,925
like our Vic,
102
00:04:26,927 --> 00:04:29,629
you get
the heart disease info page.
103
00:04:29,631 --> 00:04:31,093
Fine, okay,
104
00:04:31,095 --> 00:04:33,468
but if you search
general symptoms like "fatigue,"
105
00:04:33,470 --> 00:04:36,004
or "nausea" and you click
around long enough,
106
00:04:36,006 --> 00:04:38,172
you end up...
107
00:04:38,174 --> 00:04:39,469
At the heart disease info page.
108
00:04:39,471 --> 00:04:40,970
Yeah, I tried it, too.
109
00:04:40,972 --> 00:04:42,401
I got this rash on my elbow.
110
00:04:42,403 --> 00:04:44,272
It-it's not on his elbow.
111
00:04:44,274 --> 00:04:45,839
Look, I searched "rash,"
112
00:04:45,841 --> 00:04:48,571
then it took me down some
wormhole of related symptoms,
113
00:04:48,573 --> 00:04:50,571
and then eventually,
I ended up on a page
114
00:04:50,573 --> 00:04:52,139
that said I had cancer.
The algorithm takes
115
00:04:52,141 --> 00:04:54,707
any symptom and links it up
with a bunch of others.
116
00:04:54,709 --> 00:04:55,980
You type in "fatigue,"
117
00:04:55,982 --> 00:04:58,545
"insomnia," "dizziness,"
118
00:04:58,547 --> 00:05:00,177
you get "heart disease."
119
00:05:00,179 --> 00:05:02,152
Next thing you know, you're
paranoid, self-diagnosing,
120
00:05:02,154 --> 00:05:04,048
thinking you have symptoms
you don't even have.
121
00:05:04,050 --> 00:05:06,183
Taking advantage of the closet
hypochondriac in all of us.
122
00:05:06,185 --> 00:05:07,286
Exactly.
123
00:05:07,288 --> 00:05:08,886
Except in your case, Nelson.
124
00:05:08,888 --> 00:05:10,190
I'd get that, uh,
125
00:05:10,192 --> 00:05:12,325
elbow rash checked out.
126
00:05:12,327 --> 00:05:14,924
What?
127
00:05:16,062 --> 00:05:18,763
So, our phony pharmacy is
not just selling Tramizor.
128
00:05:18,765 --> 00:05:20,660
We've discovered
nine other drugs.
129
00:05:20,662 --> 00:05:23,070
I got Damitrol
for high blood pressure.
130
00:05:23,072 --> 00:05:25,104
Anfedril, that's diabetes.
131
00:05:25,106 --> 00:05:27,641
Lindrexia, that's that miracle
cancer drug.
132
00:05:27,643 --> 00:05:29,410
How do you know so much
about prescription drugs?
133
00:05:29,412 --> 00:05:30,483
Oh, just research.
134
00:05:30,485 --> 00:05:32,419
You know,
I like to stay informed.
135
00:05:32,421 --> 00:05:33,882
You're a hypochondriac.
136
00:05:33,884 --> 00:05:35,618
No.
137
00:05:35,620 --> 00:05:37,451
As much as I love
being psychoanalyzed,
138
00:05:37,453 --> 00:05:39,322
we've got a target
that needs to be profiled.
139
00:05:39,324 --> 00:05:41,321
Okay, he, like you,
is organized,
140
00:05:41,323 --> 00:05:44,162
ambitious, sophisticated,
tech-savvy.
141
00:05:44,164 --> 00:05:46,258
The drugs he's chosen
to distribute
142
00:05:46,260 --> 00:05:47,698
are the most expensive
143
00:05:47,700 --> 00:05:49,234
and sought after
in their categories.
144
00:05:49,236 --> 00:05:51,370
Modern day snake
oil salesman.
145
00:05:51,372 --> 00:05:53,801
You know, it used to be these
guys were selling their wares
146
00:05:53,803 --> 00:05:55,534
out of car trunks, and now...
147
00:05:55,536 --> 00:05:57,102
Well, this guy's masquerading
on the Internet.
148
00:05:57,104 --> 00:05:58,773
He could have links
to organized crime.
149
00:05:58,775 --> 00:06:02,606
Gangs and cartels already have
distribution networks.
150
00:06:02,608 --> 00:06:04,006
Well, penalties
151
00:06:04,008 --> 00:06:05,574
for counterfeiting
pharmaceuticals
152
00:06:05,576 --> 00:06:08,150
are less severe
than trafficking narcotics.
153
00:06:08,152 --> 00:06:10,719
You think he's trying to lure
people into the Deep Web?
154
00:06:10,721 --> 00:06:11,951
You know, that's the scary part.
155
00:06:11,953 --> 00:06:13,319
He doesn't have to.
156
00:06:13,321 --> 00:06:15,791
He's operating almost entirely
on the Surface Web,
157
00:06:15,793 --> 00:06:17,991
where he can reach millions
of everyday citizens.
158
00:06:17,993 --> 00:06:19,623
Well, does that give us
a better chance
159
00:06:19,625 --> 00:06:21,527
of drawing him
into the real world?
160
00:06:21,529 --> 00:06:23,495
Not necessarily.
Guys like him
161
00:06:23,497 --> 00:06:26,600
know how to operate out in
the open without getting caught.
162
00:06:26,602 --> 00:06:28,337
Which, in a way,
makes him more elusive
163
00:06:28,339 --> 00:06:29,874
and more dangerous.
164
00:06:29,876 --> 00:06:31,474
Sifter.
165
00:06:31,476 --> 00:06:33,612
Wait, who?
166
00:06:33,614 --> 00:06:35,516
She's here now?
167
00:06:35,518 --> 00:06:37,614
Uh, escort her up.
168
00:06:44,099 --> 00:06:45,993
Mrs. Bruno,
169
00:06:45,995 --> 00:06:47,864
I'm Assistant Deputy
Director Simon Sifter.
170
00:06:47,866 --> 00:06:50,401
This is Special Agent
Avery Ryan.
171
00:06:50,403 --> 00:06:52,399
The FDA told me you were
handling my husband's case.
172
00:06:52,401 --> 00:06:53,502
Right, I am so sorry
173
00:06:53,504 --> 00:06:54,932
for your loss,
but I'm afraid
174
00:06:54,934 --> 00:06:56,772
we don't have
any answers yet.
175
00:06:56,774 --> 00:06:58,299
I had... I had to come.
176
00:06:58,301 --> 00:06:59,603
It's all right, Mrs. Bruno.
177
00:06:59,605 --> 00:07:02,042
It's only natural
you'd have questions.
178
00:07:02,044 --> 00:07:04,241
It was me.
179
00:07:04,243 --> 00:07:06,409
I'm responsible
for my husband's death.
180
00:07:10,849 --> 00:07:13,312
I was the one who bought
the Tramizor for Carl.
181
00:07:13,314 --> 00:07:14,952
Last summer,
he had a heart attack,
182
00:07:14,954 --> 00:07:17,783
and his doctor prescribed
Tramizor to prevent another one.
183
00:07:17,785 --> 00:07:19,983
Our insurance
plan changed.
184
00:07:19,985 --> 00:07:22,589
They didn't cover
this particular medication.
185
00:07:22,591 --> 00:07:24,324
We had to decide.
186
00:07:24,326 --> 00:07:27,521
Pay for Carl's meds
or buy groceries.
187
00:07:27,523 --> 00:07:28,992
So I went online.
188
00:07:28,994 --> 00:07:31,223
When I saw the ad for the
pharmacy, I was so relieved.
189
00:07:31,225 --> 00:07:34,263
I just assumed that
because it was on ScrollMD,
190
00:07:34,265 --> 00:07:35,592
it was safe.
191
00:07:37,603 --> 00:07:40,171
Carl was skeptical.
192
00:07:40,173 --> 00:07:43,078
He thought it was
too good to be true.
193
00:07:43,080 --> 00:07:44,679
But we were desperate,
194
00:07:44,681 --> 00:07:46,783
and when the pill
looked identical
195
00:07:46,785 --> 00:07:48,014
to the real thing...
196
00:07:48,016 --> 00:07:49,413
Did you ever speak
197
00:07:49,415 --> 00:07:50,781
with anybody or attempt
198
00:07:50,783 --> 00:07:53,053
to contact the pharmacy
by phone or...?
199
00:07:53,055 --> 00:07:55,116
My only contact was online.
200
00:07:55,118 --> 00:07:57,692
I was so stupid to trust
this Web site,
201
00:07:57,694 --> 00:08:00,428
and I printed every receipt
and e-mail.
202
00:08:00,430 --> 00:08:03,124
I looked for anything
to help your investigation.
203
00:08:03,965 --> 00:08:05,795
JPB Pharmacy.
204
00:08:05,797 --> 00:08:07,026
We were on a monthly plan.
205
00:08:07,028 --> 00:08:10,330
They delivered
that package yesterday.
206
00:08:10,332 --> 00:08:12,034
Hmm, no return address,
207
00:08:12,036 --> 00:08:13,970
but there is a return zip code.
208
00:08:17,370 --> 00:08:18,775
This is what we got?
209
00:08:18,777 --> 00:08:21,439
562 I.P. addresses on a map?
210
00:08:21,441 --> 00:08:23,910
To hunt down one zip code
on a postmark?
211
00:08:23,912 --> 00:08:26,141
Yep, Avery wants us
to filter this down
212
00:08:26,143 --> 00:08:27,910
to the one machine
that stamped this package
213
00:08:27,912 --> 00:08:29,879
by the time she lands
in San Antonio.
214
00:08:29,881 --> 00:08:31,487
Okay.
215
00:08:31,489 --> 00:08:33,254
Tell you what.
216
00:08:33,256 --> 00:08:34,653
We'll take turns
filtering the data.
217
00:08:34,655 --> 00:08:36,021
First one to get stumped
218
00:08:36,023 --> 00:08:38,019
takes the late shift
for three weekends straight.
219
00:08:38,021 --> 00:08:39,820
Okay, I'll go first.
220
00:08:39,822 --> 00:08:42,195
Let's nix all the machines
with I.P. addresses
221
00:08:42,197 --> 00:08:43,459
associated
with big corporations.
222
00:08:43,461 --> 00:08:45,259
Executive assistants
and guys in the mail room
223
00:08:45,261 --> 00:08:47,827
probably aren't
counterfeit drug lords.
224
00:08:47,829 --> 00:08:50,764
218 gone.
225
00:08:50,766 --> 00:08:53,404
The machines record the weight
and postage of each package.
226
00:08:53,406 --> 00:08:56,307
So let's just eliminate all the
ones that only sent out letters.
227
00:09:01,279 --> 00:09:02,414
Bam.
228
00:09:02,416 --> 00:09:03,614
Beat that.
Okay.
229
00:09:03,616 --> 00:09:05,183
Package cost $1.82.
230
00:09:05,185 --> 00:09:07,993
We just eliminate any machine
that didn't record $1.82.
231
00:09:07,995 --> 00:09:09,721
Okay?
232
00:09:09,723 --> 00:09:12,225
Okay, big bro,
let me run with that.
233
00:09:12,227 --> 00:09:14,435
The meter stamp also has a date,
234
00:09:14,437 --> 00:09:15,805
and since we already
know the postage,
235
00:09:15,807 --> 00:09:17,334
$1.82.
we can eliminate
236
00:09:17,336 --> 00:09:19,437
any machine that didn't record
that amount
237
00:09:19,439 --> 00:09:20,636
on this same date.
238
00:09:20,638 --> 00:09:22,171
That's only four left.
239
00:09:22,173 --> 00:09:23,570
I got this.
240
00:09:23,572 --> 00:09:25,473
I got this, I got this.
241
00:09:26,275 --> 00:09:27,872
Package weighs
242
00:09:27,874 --> 00:09:29,239
5.3 ounces.
243
00:09:29,241 --> 00:09:32,144
Meter machine is accurate
to a tenth of an ounce.
244
00:09:32,146 --> 00:09:33,648
So which of the remaining
four machines sent out
245
00:09:33,650 --> 00:09:36,521
a package costing $1.82
weighing 5.3 ounces
246
00:09:36,523 --> 00:09:37,721
on this exact date?
247
00:09:37,723 --> 00:09:40,521
Mm-hmm.
248
00:09:43,824 --> 00:09:44,853
Yeah!
That's what
249
00:09:44,855 --> 00:09:46,190
I'm talking about.
250
00:09:46,192 --> 00:09:48,663
Go ahead and pull up that
Internet service provider, man.
251
00:09:48,665 --> 00:09:50,735
Okay, I'm getting the
hard location for the I.P. address now.
252
00:09:50,737 --> 00:09:51,863
Looks like you're gonna be
253
00:09:51,865 --> 00:09:53,135
enjoying the late shift,
my friend.
254
00:09:53,137 --> 00:09:55,072
Who, me?
Yeah, you.
255
00:09:55,074 --> 00:09:57,575
Uh-uh.
Uh-huh.
256
00:09:57,577 --> 00:09:59,942
Oh, got an address.
257
00:09:59,944 --> 00:10:02,175
Avery, it's me.
258
00:10:02,177 --> 00:10:04,711
545 Oakland Way, San Antonio.
259
00:10:07,052 --> 00:10:09,322
♪ ♪
260
00:10:17,465 --> 00:10:19,104
FBI! Open up!
261
00:10:24,414 --> 00:10:26,686
♪ ♪
262
00:10:46,136 --> 00:10:48,470
Show me your hands!
263
00:10:53,314 --> 00:10:55,512
Turn around slowly.
264
00:11:07,134 --> 00:11:09,998
I have a theory, Paul.
265
00:11:10,000 --> 00:11:12,470
You tell me
if I'm in the ballpark.
266
00:11:12,472 --> 00:11:15,374
You're involved with an illegal
prescription drug ring,
267
00:11:15,376 --> 00:11:17,437
scamming people
over the Internet.
268
00:11:17,439 --> 00:11:20,109
You're not the boss,
you're just a middleman.
269
00:11:20,111 --> 00:11:24,149
You took this job
not for the money,
270
00:11:24,151 --> 00:11:25,781
but because you need access
271
00:11:25,783 --> 00:11:27,684
to the same drugs
you're distributing.
272
00:11:27,686 --> 00:11:30,020
I'm assuming
Lindrexia?
273
00:11:30,022 --> 00:11:31,956
You have cancer?
274
00:11:31,958 --> 00:11:34,058
Oh, congratulations.
275
00:11:34,060 --> 00:11:35,289
You get a gold star.
276
00:11:35,291 --> 00:11:36,753
Paul, the drugs
you're taking
277
00:11:36,755 --> 00:11:38,454
are counterfeit.
278
00:11:38,456 --> 00:11:40,125
They're full
of toxic contaminants
279
00:11:40,127 --> 00:11:41,388
that are making you sicker.
280
00:11:41,390 --> 00:11:43,658
That's not true,
I'm feeling better.
281
00:11:43,660 --> 00:11:45,887
That's because they're
also laced with oxycodone.
282
00:11:45,889 --> 00:11:47,926
That's what's
relieving your pain,
283
00:11:47,928 --> 00:11:49,293
making you feel euphoric.
284
00:11:50,527 --> 00:11:51,893
I'm getting better.
285
00:11:51,895 --> 00:11:53,093
I know I am.
286
00:11:54,831 --> 00:11:56,261
Have to be.
287
00:11:56,263 --> 00:11:58,502
How were you first contacted
about this job?
288
00:11:58,504 --> 00:12:02,302
I met a guy on a cancer support
chat group online.
289
00:12:03,576 --> 00:12:05,975
Said he had access
to black market Lindrexia
290
00:12:05,977 --> 00:12:07,311
and said I could have some
291
00:12:07,313 --> 00:12:08,911
if I helped him
distribute it.
292
00:12:08,913 --> 00:12:11,151
Did you ever meet
with him in person?
293
00:12:11,153 --> 00:12:12,447
No. Never.
294
00:12:12,449 --> 00:12:13,550
It was always a dead drop.
295
00:12:13,552 --> 00:12:15,854
No one was
ever there.
296
00:12:15,856 --> 00:12:18,390
Lung cancer.
297
00:12:20,024 --> 00:12:21,326
Kicked it twice.
298
00:12:21,328 --> 00:12:23,860
It came back a third time.
299
00:12:23,862 --> 00:12:26,691
I asked my doctors
for Lindrexia,
300
00:12:26,693 --> 00:12:28,929
and they said no.
301
00:12:28,931 --> 00:12:31,594
See, the thing is,
it's a miracle drug,
302
00:12:31,596 --> 00:12:33,034
but that miracle's
only approved
303
00:12:33,036 --> 00:12:35,665
for first and
second-line patients.
304
00:12:35,667 --> 00:12:38,107
If you're a third-timer like me,
305
00:12:38,109 --> 00:12:40,371
well, you're crap out of luck.
306
00:12:40,373 --> 00:12:43,611
Doctors say
I'm a lost cause.
307
00:12:43,613 --> 00:12:44,980
Well, it's not just
phony Lindrexia
308
00:12:44,982 --> 00:12:46,411
that you're shipping out.
309
00:12:46,413 --> 00:12:47,778
There are nine other drugs,
310
00:12:47,780 --> 00:12:49,416
one of them a heart medication.
311
00:12:49,418 --> 00:12:50,416
Killed a man
312
00:12:50,418 --> 00:12:51,752
in Cleveland.
313
00:12:51,754 --> 00:12:54,319
Well, the packages I get
are already sealed.
314
00:12:54,321 --> 00:12:57,120
My job is just to stamp 'em
and ship 'em out.
315
00:12:57,122 --> 00:12:59,087
Well, this is, this is
just supposed to be
316
00:12:59,089 --> 00:13:01,254
a way around the drug companies.
317
00:13:03,992 --> 00:13:06,326
I just wanted to help people.
318
00:13:08,968 --> 00:13:11,535
Just wanted to help people.
319
00:13:12,736 --> 00:13:14,931
And now you're telling me
I killed a man?
320
00:13:16,940 --> 00:13:18,435
Guy who died?
321
00:13:19,477 --> 00:13:21,403
How old was he?
322
00:13:21,405 --> 00:13:23,476
He was about your age.
323
00:13:23,478 --> 00:13:25,347
Figures.
324
00:13:27,316 --> 00:13:29,176
Death always finds a way.
325
00:13:32,312 --> 00:13:34,814
Are you okay, Paul?
326
00:13:34,816 --> 00:13:36,182
I'm fine.
327
00:13:36,184 --> 00:13:38,455
I'm gonna get you some water.
328
00:13:40,226 --> 00:13:42,425
I just need a minute.
329
00:13:57,974 --> 00:13:59,235
No, no, no, no!
330
00:13:59,237 --> 00:14:00,275
No, no!
We need some help in here!
331
00:14:00,277 --> 00:14:01,442
Someone get first aid!
332
00:14:01,444 --> 00:14:03,010
Yeah, I need an ambulance.
333
00:14:03,012 --> 00:14:04,810
545 Oakland Way.
334
00:14:04,812 --> 00:14:06,274
Ah... no...
335
00:14:06,276 --> 00:14:07,713
Stay with me, Paul!
336
00:14:09,979 --> 00:14:11,680
Stay with me, Paul,
stay with me.
337
00:14:11,682 --> 00:14:13,215
Paul, stay with me!
338
00:14:13,639 --> 00:14:17,639
♪ CSI Cyber 1x10 ♪
Click Your Poison
Original Air Date on May 6, 2015
339
00:14:17,657 --> 00:14:23,989
♪ I know you've deceived me,
now here's a surprise ♪
340
00:14:25,662 --> 00:14:31,368
♪ I know that you have, 'cause
there's magic in my eyes ♪
341
00:14:31,370 --> 00:14:35,536
♪ I can see
for miles and miles ♪
342
00:14:35,538 --> 00:14:38,874
♪ I can see for miles
and miles ♪
343
00:14:38,876 --> 00:14:43,551
♪ I can see
for miles and miles ♪
344
00:14:43,553 --> 00:14:46,993
♪ And miles... ♪
345
00:14:46,995 --> 00:14:49,560
♪ Oh, yeah. ♪
346
00:14:49,584 --> 00:14:51,584
== sync, corrected by elderman ==
@elder_man
347
00:15:20,420 --> 00:15:21,922
You okay?
348
00:15:22,789 --> 00:15:24,155
Yeah.
349
00:15:24,157 --> 00:15:26,396
Our target's a twisted
son of a bitch.
350
00:15:26,398 --> 00:15:28,333
He's not just
cheating sick people,
351
00:15:28,335 --> 00:15:30,535
he's using the most desperate
ones to do his dirty work.
352
00:15:31,440 --> 00:15:33,303
Why hire a guy like Paul?
353
00:15:33,305 --> 00:15:34,975
Because he was hopeful.
354
00:15:34,977 --> 00:15:37,837
Paul wasn't doing it
for the money.
355
00:15:37,839 --> 00:15:39,541
He wouldn't ask any questions.
356
00:15:39,543 --> 00:15:40,708
He just wanted to live.
357
00:15:40,710 --> 00:15:42,140
He just wanted everyone to live.
358
00:15:42,142 --> 00:15:44,947
Which tells me that
our target is a sociopath,
359
00:15:44,949 --> 00:15:47,250
lacking empathy
and remorse.
360
00:15:47,252 --> 00:15:49,681
He didn't care that Paul
was a cancer victim;
361
00:15:49,683 --> 00:15:52,415
he just saw him as a pawn
that could be manipulated
362
00:15:52,417 --> 00:15:54,414
and controlled.
363
00:15:54,416 --> 00:15:55,820
You still think
our target's part of
364
00:15:55,822 --> 00:15:57,652
an organized crime ring?
If he were,
365
00:15:57,654 --> 00:16:00,723
he'd have a member of his crew
doing that job.
366
00:16:00,725 --> 00:16:04,723
Our target is running
a much leaner operation.
367
00:16:06,229 --> 00:16:07,531
Yeah.
368
00:16:07,533 --> 00:16:10,163
So lean our only lead
is on his way to the ICU.
369
00:16:10,165 --> 00:16:13,635
Well, maybe Paul's phone
could do the talking.
370
00:16:17,938 --> 00:16:19,399
Paul mentioned something
about a dead drop,
371
00:16:19,401 --> 00:16:21,334
where he was picking up
the pills.
372
00:16:23,776 --> 00:16:26,109
I'll pull up his
"Frequent Locations."
373
00:16:26,111 --> 00:16:27,245
Show me "Journey Mode."
374
00:16:28,206 --> 00:16:29,476
You're checking for a pattern.
375
00:16:29,478 --> 00:16:30,676
Yeah.
376
00:16:40,356 --> 00:16:42,186
There.
377
00:16:42,188 --> 00:16:43,491
On the days that
Paul left his house,
378
00:16:43,493 --> 00:16:45,491
he never left
before noon.
379
00:16:45,493 --> 00:16:46,794
Looks like
he averaged
380
00:16:46,796 --> 00:16:48,394
five or six stops.
381
00:16:48,396 --> 00:16:50,226
Except right here.
Once a week, he'd leave
382
00:16:50,228 --> 00:16:51,626
the house, make one
stop at 9:00 a.m.,
383
00:16:51,628 --> 00:16:54,034
drive directly back.
384
00:16:54,932 --> 00:16:56,266
That's got to be
385
00:16:56,268 --> 00:16:57,634
the address of
the dead drop location.
386
00:16:57,636 --> 00:16:59,203
According to this schedule,
387
00:16:59,205 --> 00:17:00,243
next pickup's not
for another three days.
388
00:17:00,245 --> 00:17:01,443
We don't have time.
389
00:17:01,445 --> 00:17:04,043
We have to pull the traffic cam
footage of the area.
390
00:17:04,045 --> 00:17:05,379
If Paul was picking up drugs,
391
00:17:05,381 --> 00:17:06,610
someone was dropping them off.
392
00:17:06,612 --> 00:17:07,746
Do you think
this is where
393
00:17:07,748 --> 00:17:08,945
our target surfaced
in the real world?
394
00:17:08,947 --> 00:17:11,882
There's only one way
to find out.
395
00:17:16,494 --> 00:17:18,463
And you're sure about this?
396
00:17:18,465 --> 00:17:20,696
Yeah. My techs
confirmed it today.
397
00:17:20,698 --> 00:17:22,904
It's an HTML
injection on your site
398
00:17:22,906 --> 00:17:26,470
that's causing site visitors
to access malicious ads.
399
00:17:28,176 --> 00:17:30,669
Well, my network security
is top-notch.
400
00:17:30,671 --> 00:17:32,877
We'll have to look into this
and make sure it's accurate.
401
00:17:32,879 --> 00:17:34,910
Marcus,
402
00:17:34,912 --> 00:17:36,879
all due respect--
it's accurate.
403
00:17:36,881 --> 00:17:38,781
Your security has gaping holes.
404
00:17:38,783 --> 00:17:41,381
Look, I'm here as a friend.
405
00:17:41,383 --> 00:17:42,621
I could have called,
406
00:17:42,623 --> 00:17:44,716
but I just felt this
was something best explained
407
00:17:44,718 --> 00:17:45,884
in person.
408
00:17:45,886 --> 00:17:47,988
Well, pardon me
if I hesitate to thank you.
409
00:17:47,990 --> 00:17:51,724
Look, I don't want ScrollMD
to face any undo embarrassment,
410
00:17:51,726 --> 00:17:55,254
so just, please, take down
the infected ads immediately
411
00:17:55,256 --> 00:17:57,387
and have your techs
scrub your servers
412
00:17:57,389 --> 00:17:58,855
for any other malicious code.
413
00:17:58,857 --> 00:18:01,187
Sure, fine.
414
00:18:01,189 --> 00:18:02,282
Anything else?
415
00:18:02,284 --> 00:18:03,449
Uh, yeah, actually.
416
00:18:03,451 --> 00:18:04,784
Consider reaching out
417
00:18:04,786 --> 00:18:06,951
to the victim's wife,
Jane Bruno.
418
00:18:06,953 --> 00:18:08,487
Extend your
condolences.
419
00:18:08,489 --> 00:18:10,359
Most importantly,
420
00:18:10,361 --> 00:18:13,124
issue a public warning
on your home page.
421
00:18:13,126 --> 00:18:15,228
That's the most efficient way
of reaching people
422
00:18:15,230 --> 00:18:17,195
who might have these drugs
currently sitting
423
00:18:17,197 --> 00:18:18,532
in their medicine
cabinets.
424
00:18:18,534 --> 00:18:21,164
No, that's a step
too far, Simon.
425
00:18:21,166 --> 00:18:22,396
Talk about embarrassment.
426
00:18:22,398 --> 00:18:25,572
A-A public warning
saying that we were breached?
427
00:18:25,574 --> 00:18:28,004
It would create a PR
nightmare for us.
428
00:18:28,006 --> 00:18:29,878
Not to mention it opens
us up to liability.
429
00:18:29,880 --> 00:18:30,910
The widow could sue.
430
00:18:30,912 --> 00:18:32,709
I could lose millions
in sponsors.
431
00:18:32,711 --> 00:18:34,678
A man died because
of your Web site.
432
00:18:34,680 --> 00:18:37,009
And I feel badly about that.
433
00:18:37,011 --> 00:18:38,376
But ScrollMD was a victim, too.
434
00:18:38,378 --> 00:18:40,909
Our Web site
was attacked.
435
00:18:40,911 --> 00:18:42,380
I can't issue that warning.
436
00:18:42,382 --> 00:18:44,011
You can't or you won't?
437
00:18:45,580 --> 00:18:47,115
I won't.
438
00:18:54,793 --> 00:18:55,999
That one.
439
00:18:56,001 --> 00:18:57,895
It shows the entrance
to the dead drop location.
440
00:18:57,897 --> 00:18:59,263
Take me back to the time
of the last pickup.
441
00:18:59,265 --> 00:19:01,399
Okay.
442
00:19:07,747 --> 00:19:08,808
There's Paul.
443
00:19:08,810 --> 00:19:10,240
9:00 a.m. on the dot.
444
00:19:10,242 --> 00:19:11,744
Okay, take the
footage back.
445
00:19:11,746 --> 00:19:14,415
We're looking for anyone else
going in or out that door.
446
00:19:15,921 --> 00:19:17,647
There.
Rewind that.
447
00:19:17,649 --> 00:19:20,582
Play that back.
448
00:19:22,519 --> 00:19:23,852
You gotta be kidding me.
449
00:19:23,854 --> 00:19:26,461
The target's using
an IR LED array.
450
00:19:26,463 --> 00:19:29,125
Makes his license plate
unreadable to cameras.
451
00:19:31,768 --> 00:19:33,431
Can we make an ID?
452
00:19:33,433 --> 00:19:34,737
Let's see here...
453
00:19:40,510 --> 00:19:41,548
No.
454
00:19:41,550 --> 00:19:44,517
Can't see his face.
Too far away.
455
00:19:46,320 --> 00:19:47,454
What is it?
456
00:19:51,530 --> 00:19:53,266
Our target was driving
a newer model SUV,
457
00:19:53,268 --> 00:19:55,067
probably equipped
with Bluetooth.
458
00:19:55,069 --> 00:19:56,332
Phone, radio.
459
00:19:56,334 --> 00:19:57,941
All four tires give off
Bluetooth signals
460
00:19:57,943 --> 00:19:59,109
to report when they're
low on pressure.
461
00:19:59,111 --> 00:20:00,509
What are you thinking?
462
00:20:00,511 --> 00:20:02,882
See that little
white box right there?
463
00:20:03,852 --> 00:20:05,618
It's a Department
of Transportation
464
00:20:05,620 --> 00:20:06,987
traffic monitoring
system.
465
00:20:06,989 --> 00:20:10,429
Picks up Bluetooth signals
to report traffic patterns.
466
00:20:10,431 --> 00:20:12,129
The D.O.T. keeps a record
467
00:20:12,131 --> 00:20:13,900
of every Bluetooth device
it pairs with.
468
00:20:13,902 --> 00:20:15,868
That's our digital
fingerprint.
469
00:20:15,870 --> 00:20:18,140
We match that to the
SUV's VIN number,
470
00:20:18,142 --> 00:20:21,675
and we get the driver's ID
and registration from the DMV.
471
00:20:21,677 --> 00:20:22,946
Yeah, only one problem--
472
00:20:22,948 --> 00:20:25,009
the D.O.T. only keeps
the data for 20 minutes.
473
00:20:25,011 --> 00:20:27,513
You really believe that?
474
00:20:31,954 --> 00:20:34,216
Bluetooth is
a hacker's best friend.
475
00:20:34,218 --> 00:20:36,424
What time was the IR
LED flash detected
476
00:20:36,426 --> 00:20:37,520
by the traffic cam?
477
00:20:37,522 --> 00:20:38,992
6:49 a.m.
478
00:20:38,994 --> 00:20:40,991
Can you put the newscast
on the big screen?
479
00:20:40,993 --> 00:20:43,996
Okay, these are the Bluetooth
devices that paired
480
00:20:43,998 --> 00:20:47,059
with the D.O.T. traffic
box at the same time.
481
00:20:47,061 --> 00:20:49,698
170? We making
another wager?
482
00:20:49,700 --> 00:20:51,633
Looks like it.
483
00:20:51,635 --> 00:20:54,335
You should be able to trust
the Web sites you visit.
484
00:20:54,337 --> 00:20:56,230
They should be responsible
485
00:20:56,232 --> 00:20:59,701
for the content of the ads
that are on their sites.
486
00:20:59,703 --> 00:21:03,636
My husband is dead because
someone was negligent.
487
00:21:03,638 --> 00:21:06,403
Today I went
to ScrollMD headquarters.
488
00:21:06,405 --> 00:21:08,009
No one would talk to me.
489
00:21:08,011 --> 00:21:09,839
They escorted me out.
490
00:21:09,841 --> 00:21:11,303
They say they're
all about helping people,
491
00:21:11,305 --> 00:21:13,543
but all they care about is
the bottom line.
492
00:21:15,770 --> 00:21:19,865
Hey, I've got
something here.
493
00:21:19,867 --> 00:21:21,033
All right,
talk to me.
494
00:21:21,035 --> 00:21:22,136
We just ran
the VIN number
495
00:21:22,138 --> 00:21:23,239
of our target's SUV
496
00:21:23,241 --> 00:21:25,239
through the Texas DMV database
and got a hit.
497
00:21:25,241 --> 00:21:26,743
All right, get Avery
on the phone.
498
00:21:28,513 --> 00:21:30,143
Nelson, I've got
a job for you.
499
00:21:30,145 --> 00:21:32,543
Come see me in my
office after this.
500
00:21:32,545 --> 00:21:34,446
You don't want Krumitz
to come, too?
501
00:21:34,448 --> 00:21:36,518
I mean, because we've been
tag-teaming everything.
502
00:21:36,520 --> 00:21:37,718
Just you.
503
00:21:37,720 --> 00:21:39,085
Simon?
504
00:21:40,551 --> 00:21:41,589
Avery,
505
00:21:41,591 --> 00:21:44,189
we found the driver of the SUV.
506
00:21:44,191 --> 00:21:46,422
Target's name is Randall Fung.
507
00:22:08,966 --> 00:22:10,260
FBI!
508
00:22:10,262 --> 00:22:11,468
Go, go, go!
509
00:22:12,334 --> 00:22:13,332
My side's clear!
510
00:22:13,334 --> 00:22:15,171
Shooters come out.
511
00:22:15,173 --> 00:22:18,201
All clear, sir,
totally clear!
512
00:22:32,073 --> 00:22:33,343
FBI!
513
00:22:33,345 --> 00:22:35,175
Hands up, let me
see your hands!
514
00:22:35,177 --> 00:22:36,207
FBI! Don't move!
515
00:22:36,209 --> 00:22:37,647
Get down, get down!
On your knees!
516
00:22:37,649 --> 00:22:38,847
Do not move!
517
00:22:41,385 --> 00:22:43,088
Hands behind your back!
518
00:22:47,827 --> 00:22:49,457
Randall Fung,
turn around.
519
00:22:49,459 --> 00:22:51,624
Hands behind
your back.
520
00:22:59,197 --> 00:23:00,634
Mold.
521
00:23:00,636 --> 00:23:02,065
The aflatoxins.
522
00:23:02,067 --> 00:23:04,128
This is what's making
the victims sick.
523
00:23:04,130 --> 00:23:05,494
I've seen some nasty-ass crap,
524
00:23:05,496 --> 00:23:07,164
but this is disgusting.
525
00:23:18,368 --> 00:23:21,037
You keep looking at the pills,
not the computer.
526
00:23:21,039 --> 00:23:22,709
You know what
that tells me?
527
00:23:22,711 --> 00:23:26,571
That you're a trained chemist,
not a cyber criminal.
528
00:23:26,573 --> 00:23:28,875
Which means you're
only half this operation.
529
00:23:28,877 --> 00:23:29,946
You're the pill cook.
530
00:23:29,948 --> 00:23:32,409
Randall, we got you
on fraud, conspiracy,
531
00:23:32,411 --> 00:23:34,940
trafficking counterfeit goods,
and a man died
532
00:23:34,942 --> 00:23:36,380
because of
what you did.
533
00:23:36,382 --> 00:23:39,082
You're looking at murder
and a hell of a lot of jail time
534
00:23:39,084 --> 00:23:41,177
unless you can tell us
where your better half is.
535
00:23:41,179 --> 00:23:44,680
Now, if you talk,
maybe we can make a deal.
536
00:23:48,751 --> 00:23:51,787
Bag the computers and devices
and bring them back to D.C.
537
00:23:51,789 --> 00:23:54,282
We're still looking
for the head of this snake.
538
00:24:14,084 --> 00:24:16,723
What the hell did you do, Simon?
539
00:24:16,725 --> 00:24:18,324
Wow, you seem
a little upset, Marcus.
540
00:24:18,326 --> 00:24:21,959
Is this a discussion we should
be having by my parking space?
541
00:24:21,961 --> 00:24:23,567
My entire Web
site is down.
542
00:24:23,569 --> 00:24:25,399
Every time I text, try
to get it back online,
543
00:24:25,401 --> 00:24:27,198
it crashes again.
544
00:24:27,200 --> 00:24:30,535
Sounds like a distributed
denial of service attack.
545
00:24:30,537 --> 00:24:33,008
Ah, those can take days,
weeks to sort out.
546
00:24:33,010 --> 00:24:34,806
I can certainly have
my team look into it.
547
00:24:34,808 --> 00:24:36,908
Your team? You
son of a bitch.
548
00:24:36,910 --> 00:24:39,778
And I'm guessing you
also had something to do
549
00:24:39,780 --> 00:24:42,113
with the media attack Carl
Bruno's wife has been waging.
550
00:24:42,115 --> 00:24:44,344
Hey, look at that,
you do know the victim's name.
551
00:24:44,346 --> 00:24:45,910
What do you
want, Simon?
552
00:24:45,912 --> 00:24:47,381
Same thing
Jane Bruno wants--
553
00:24:47,383 --> 00:24:49,381
for you and ScrollMD
to be held accountable.
554
00:24:49,383 --> 00:24:50,885
And maybe if you spoke
with her
555
00:24:50,887 --> 00:24:52,612
instead of just
escorting her out...
556
00:24:52,614 --> 00:24:54,717
I am not gonna
negotiate with you.
557
00:24:54,719 --> 00:24:57,485
You know, Marcus,
in the next few weeks,
558
00:24:57,487 --> 00:24:59,492
it's gonna be more than
your site that's crashing.
559
00:24:59,494 --> 00:25:01,095
That's not a threat,
that's reality.
560
00:25:01,097 --> 00:25:02,391
Who knows
what's next?
561
00:25:02,393 --> 00:25:03,968
Dirty vaccines?
562
00:25:03,970 --> 00:25:05,264
Tainted antibiotics?
563
00:25:05,266 --> 00:25:08,270
Millions of people visit
your site every month.
564
00:25:08,272 --> 00:25:09,438
And whether
they get cured
565
00:25:09,440 --> 00:25:12,898
or they get killed
might just depend on you.
566
00:25:32,689 --> 00:25:34,855
Look, I know they scrubbed
these devices of mold and spores
567
00:25:34,857 --> 00:25:38,392
and whatnot, but, uh, I am
starting to itch a little bit.
568
00:25:40,896 --> 00:25:41,861
Wait.
569
00:25:41,863 --> 00:25:43,430
Wait, w-wait.
Hold up.
570
00:25:43,432 --> 00:25:45,262
Go back.
571
00:25:45,264 --> 00:25:46,934
Look familiar to you?
572
00:25:48,833 --> 00:25:51,471
Both Paul and Randall had the
exact same online poker site
573
00:25:51,473 --> 00:25:53,038
bookmarked on
their devices.
574
00:25:53,040 --> 00:25:54,207
Could be
a coincidence.
575
00:25:54,209 --> 00:25:55,543
Yeah, we were
thinking that, too.
576
00:25:55,545 --> 00:25:57,512
Until we checked the user
history on both devices,
577
00:25:57,514 --> 00:25:59,249
we stopped
thinking that.
578
00:26:00,516 --> 00:26:02,154
All right,
for the last two months,
579
00:26:02,156 --> 00:26:03,218
both these guys logged on
580
00:26:03,220 --> 00:26:06,181
to the same poker site
every Saturday.
581
00:26:06,183 --> 00:26:07,716
Were they playing each other?
582
00:26:07,718 --> 00:26:10,316
No, but look where they sat.
583
00:26:10,318 --> 00:26:12,357
A no-limit, heads-up table.
584
00:26:12,359 --> 00:26:14,621
Means they each played
an opponent one-on-one.
585
00:26:24,135 --> 00:26:26,532
And for no more
than three minutes.
586
00:26:26,534 --> 00:26:28,036
Three minutes?
Mm-hmm.
587
00:26:28,038 --> 00:26:29,838
That's barely enough time
to play one hand.
588
00:26:29,840 --> 00:26:31,775
True, but that's
all they ever play.
589
00:26:31,777 --> 00:26:35,818
I mean, you log in, sit,
play a hand, win, log out.
590
00:26:35,820 --> 00:26:37,985
Paul and Randall
weren't playing poker.
591
00:26:37,987 --> 00:26:41,255
They were getting paid
for their services.
592
00:26:43,392 --> 00:26:46,662
This is how our target
pays his crew.
593
00:26:59,544 --> 00:27:02,408
I bet this is also
how our target washes his money.
594
00:27:02,410 --> 00:27:04,512
Hackers love using online poker
to launder funds.
595
00:27:04,514 --> 00:27:05,744
It's hard to track.
596
00:27:05,746 --> 00:27:08,150
But not impossible.
597
00:27:20,459 --> 00:27:23,592
You still want to argue
you're not a hypochondriac?
598
00:27:23,594 --> 00:27:25,592
This is not about me.
599
00:27:25,594 --> 00:27:28,192
Oh, my wife, she hates shots.
600
00:27:28,194 --> 00:27:30,559
And the doctor put her
on these pills for the flu.
601
00:27:30,561 --> 00:27:33,199
A preventative measure because
of her weakened immune system.
602
00:27:33,201 --> 00:27:35,735
I don't know, just being
cautious, I guess.
603
00:27:35,737 --> 00:27:36,903
Did you really think
604
00:27:36,905 --> 00:27:39,269
Kathryn's doctor
prescribed her phony meds?
605
00:27:39,271 --> 00:27:40,701
Hearing Jane
Bruno's story,
606
00:27:40,703 --> 00:27:42,739
I mean, this could
happen to anyone.
607
00:27:42,741 --> 00:27:45,812
Yesterday, I met an
intelligent qualified doctor
608
00:27:45,814 --> 00:27:47,508
who fell down a
slippery slope
609
00:27:47,510 --> 00:27:49,642
and ended up in
the target's trap.
610
00:27:49,644 --> 00:27:52,344
There's a nationwide
shortage of Doxaflu.
611
00:27:52,346 --> 00:27:53,849
Yeah, it's just
hard to believe
612
00:27:53,851 --> 00:27:55,481
your only option was
an online pharmacy.
613
00:27:55,483 --> 00:27:57,985
I have high-risk
patients--
614
00:27:57,987 --> 00:27:59,553
children,
pregnant women,
615
00:27:59,555 --> 00:28:01,352
the elderly.
616
00:28:01,354 --> 00:28:03,391
I wanted to make sure
that my patients were protected.
617
00:28:03,393 --> 00:28:06,588
Yeah, I mean, look, I
know we need to be able
618
00:28:06,590 --> 00:28:10,523
to trust in certain
things-- doctors, medicine.
619
00:28:10,525 --> 00:28:11,827
It's just hard when...
620
00:28:11,829 --> 00:28:14,498
When our target's taking
advantage of that trust.
621
00:28:14,500 --> 00:28:17,464
And now, besides the nine
pharmaceutical drugs
622
00:28:17,466 --> 00:28:19,158
our target was
distributing,
623
00:28:19,160 --> 00:28:21,765
he's escalated to a
common flu medication.
624
00:28:21,767 --> 00:28:23,670
He's expanding
his business.
625
00:28:23,672 --> 00:28:26,533
Sounds to me like
he's looking for a big payday
626
00:28:26,535 --> 00:28:27,972
so he can cash out
and run.
627
00:28:27,974 --> 00:28:29,836
Yeah, how do we get
to him before he does?
628
00:28:29,838 --> 00:28:32,437
So, based on your previous
psychological profile
629
00:28:32,439 --> 00:28:35,140
of the target, can you build
a physical description?
630
00:28:35,142 --> 00:28:36,740
Well, our target is
most likely male
631
00:28:36,742 --> 00:28:40,347
based on his tech skills
and his sociopathic tendencies.
632
00:28:40,349 --> 00:28:42,179
He sees people as dollar signs.
633
00:28:42,181 --> 00:28:45,355
He has no empathy,
no conscience.
634
00:28:45,357 --> 00:28:47,091
Age range?
635
00:28:47,093 --> 00:28:48,819
Coders fall into one
of four categories--
636
00:28:48,821 --> 00:28:51,196
young adolescents, college
students, professionals,
637
00:28:51,198 --> 00:28:54,362
or mature and reformed
ex-virus writers.
638
00:28:54,364 --> 00:28:57,025
But our target is
a professional.
639
00:28:57,027 --> 00:28:59,800
Which puts him in the early 20s
to mid-40s range.
640
00:28:59,802 --> 00:29:01,860
He's made an art
of blending in.
641
00:29:01,862 --> 00:29:03,363
Hiding in plain sight.
642
00:29:03,365 --> 00:29:05,500
He's average looking,
inconspicuous.
643
00:29:05,502 --> 00:29:08,070
He won't wear his hair
too long or too short.
644
00:29:08,072 --> 00:29:10,406
He's likely to have
poor social skills.
645
00:29:10,408 --> 00:29:12,407
A recluse.
646
00:29:12,409 --> 00:29:14,376
He won't want to leave home
unless he has to.
647
00:29:14,378 --> 00:29:16,512
He likes to live his life
behind a computer screen.
648
00:29:16,514 --> 00:29:19,213
But if he does leave the house,
he'll want to disguise himself.
649
00:29:19,215 --> 00:29:21,781
But nothing that draws
too much attention.
650
00:29:21,783 --> 00:29:22,918
Glasses.
651
00:29:22,920 --> 00:29:24,086
With thick frames.
652
00:29:24,088 --> 00:29:25,686
He likes to have a barrier
between himself
653
00:29:25,688 --> 00:29:27,924
and the rest
of the world.
654
00:29:27,926 --> 00:29:29,187
It gives him
a false sense of security.
655
00:29:29,189 --> 00:29:30,658
All right, what
do we got?
656
00:29:30,660 --> 00:29:33,794
Male, 20s to 40s, glasses,
hair medium length.
657
00:29:33,796 --> 00:29:35,562
That is not a whole
lot to go on.
658
00:29:35,564 --> 00:29:36,458
It's enough.
659
00:29:36,460 --> 00:29:37,964
We will know him
when we see him.
660
00:29:37,966 --> 00:29:39,867
Now we just have
to give him a reason
661
00:29:39,869 --> 00:29:41,466
to pop out
into the real world.
662
00:29:41,468 --> 00:29:42,969
How do you propose
we do that?
663
00:29:42,971 --> 00:29:44,769
Money.
664
00:29:44,771 --> 00:29:46,241
I need $250,000.
665
00:29:46,243 --> 00:29:48,537
Uh, for what
exactly, Avery?
666
00:29:48,539 --> 00:29:50,841
A little game
of poker.
667
00:30:02,279 --> 00:30:03,744
All right, everybody, listen up.
668
00:30:03,746 --> 00:30:05,317
Time to put your game face on.
669
00:30:05,319 --> 00:30:06,991
Once our target
670
00:30:06,993 --> 00:30:08,128
receives a big payment,
671
00:30:08,130 --> 00:30:09,224
he's gonna launder it using
672
00:30:09,226 --> 00:30:10,560
the same online poker site
673
00:30:10,562 --> 00:30:11,760
he used to pay his crew.
674
00:30:11,762 --> 00:30:13,159
He's gonna be evasive,
675
00:30:13,161 --> 00:30:15,228
and he's gonna be fast,
but we're gonna be faster.
676
00:30:15,230 --> 00:30:17,058
Avery, you sure this is
a good idea?
677
00:30:17,060 --> 00:30:18,593
Our target's gonna know
we're not a doctor's office.
678
00:30:18,595 --> 00:30:19,793
He's gonna trace
that quarter mil
679
00:30:19,795 --> 00:30:21,065
right back to us.
680
00:30:21,067 --> 00:30:22,831
Our raid on his pill factory
put him on the ropes.
681
00:30:22,833 --> 00:30:24,063
His operation is crippled.
682
00:30:24,065 --> 00:30:25,967
He's gonna want
to cash out and run,
683
00:30:25,969 --> 00:30:27,999
even if he knows
it's government coin.
684
00:30:28,001 --> 00:30:30,774
He's compulsive,
overconfident and self-serving.
685
00:30:30,776 --> 00:30:32,770
He's always looking
for his next big score.
686
00:30:32,772 --> 00:30:34,336
And you think
he's gonna make a mistake?
687
00:30:34,338 --> 00:30:35,839
A mistake born of greed.
688
00:30:35,841 --> 00:30:38,638
He made a fortune preying
on the weaknesses of others.
689
00:30:38,640 --> 00:30:39,742
And we're gonna catch him
690
00:30:39,744 --> 00:30:42,510
because his weakness
is he's cocky.
691
00:30:43,776 --> 00:30:46,110
Here goes nothing.
692
00:30:46,112 --> 00:30:49,518
We just bought
$250,000 worth of drugs.
693
00:30:50,657 --> 00:30:51,784
Krumitz, you're up.
694
00:30:51,786 --> 00:30:53,626
Okay.
695
00:30:53,628 --> 00:30:56,530
Our target uses
a Dollar Dispatch account
696
00:30:56,532 --> 00:30:57,763
for his pharmacy transactions.
697
00:30:57,765 --> 00:30:59,931
No previous history.
698
00:30:59,933 --> 00:31:01,203
It's a one-off account.
699
00:31:01,205 --> 00:31:03,002
Uh-huh.
700
00:31:03,004 --> 00:31:04,263
There's our 250 Gs.
701
00:31:04,265 --> 00:31:07,000
Nobody freak out.
It's about to disappear.
702
00:31:07,002 --> 00:31:08,968
Our target is opening
a new Dollar Dispatch account
703
00:31:08,970 --> 00:31:10,873
for every drug transaction.
704
00:31:10,875 --> 00:31:12,811
Nelson?
All right.
705
00:31:12,813 --> 00:31:14,084
Here we go. So, our target's
706
00:31:14,086 --> 00:31:15,484
favorite online poker site.
707
00:31:15,486 --> 00:31:17,220
Now, we have full
administrative privileges,
708
00:31:17,222 --> 00:31:18,948
which means
we're like the pit boss.
709
00:31:18,950 --> 00:31:20,316
We can see whatever screen
we want.
710
00:31:20,318 --> 00:31:21,692
Pull up the lobby.
711
00:31:21,694 --> 00:31:24,657
Go to the no limit,
heads-up tables.
712
00:31:24,659 --> 00:31:27,224
The target should buy in
for $250K.
713
00:31:30,329 --> 00:31:33,031
Wait for it.
714
00:31:50,644 --> 00:31:52,945
There he is! Phantom23.
715
00:31:56,715 --> 00:31:58,713
He's at table 26.
716
00:32:04,662 --> 00:32:06,725
He's going all in
on that first hand.
717
00:32:10,938 --> 00:32:12,734
He just folded
718
00:32:12,736 --> 00:32:13,966
on a full house.
719
00:32:13,968 --> 00:32:15,638
Remember, every time he loses,
720
00:32:15,640 --> 00:32:17,270
he's really losing to himself.
721
00:32:17,272 --> 00:32:19,637
With every hand, he's laundering
the money one step further.
722
00:32:19,639 --> 00:32:21,508
Odyssey45 is just another handle
723
00:32:21,510 --> 00:32:23,108
he created for himself
724
00:32:23,110 --> 00:32:24,908
in the poker game.
725
00:32:30,181 --> 00:32:31,250
All right, he's on the move.
726
00:32:31,252 --> 00:32:32,713
Who's got eyes on Odyssey45?
727
00:32:32,715 --> 00:32:35,649
I do. He's at table 84.
728
00:32:35,651 --> 00:32:36,889
He's on the move again
729
00:32:36,891 --> 00:32:38,425
as Emerald62.
730
00:32:38,427 --> 00:32:39,753
There he is, table nine.
731
00:32:40,859 --> 00:32:42,793
Wait, he's not going
all in anymore.
732
00:32:42,795 --> 00:32:43,929
He's only bidding half.
733
00:32:45,730 --> 00:32:47,230
Sneaky sucker.
He divided the money
734
00:32:47,232 --> 00:32:48,662
so it's harder to track.
735
00:32:48,664 --> 00:32:50,429
He's jumping tables again.
736
00:32:58,440 --> 00:33:02,109
Damn it. Look,
there's, like, four of them.
737
00:33:02,111 --> 00:33:04,339
Remember, he's playing
against himself.
738
00:33:14,248 --> 00:33:16,447
He's playing at more tables.
739
00:33:17,816 --> 00:33:20,887
That's six.
740
00:33:22,489 --> 00:33:24,056
Now eight.
741
00:33:24,058 --> 00:33:25,930
16.
742
00:33:25,932 --> 00:33:27,299
He's using an algorithm.
743
00:33:29,374 --> 00:33:30,836
Just stay with him.
Just isolate
744
00:33:30,838 --> 00:33:32,068
the games our target's playing.
745
00:33:32,070 --> 00:33:33,341
He's moving too fast.
746
00:33:33,343 --> 00:33:34,574
Do not lose him.
747
00:33:34,576 --> 00:33:35,942
Wait, look at his bets.
748
00:33:35,944 --> 00:33:37,479
He's going all in again there
and there.
749
00:33:37,481 --> 00:33:39,080
Yeah, he's recombining
his laundered assets.
750
00:33:39,082 --> 00:33:41,689
He's getting ready to cash out.
751
00:33:47,256 --> 00:33:48,958
Look for a player
who starts to dominate.
752
00:33:48,960 --> 00:33:50,189
I think I got him, Hydrus99.
753
00:33:50,191 --> 00:33:52,829
Earnings just climbed
to $159,000.
754
00:33:52,831 --> 00:33:54,964
Krumitz, trace the
bank account link to Hydrus99.
755
00:33:54,966 --> 00:33:57,398
He'll have to show
at the bank in person
756
00:33:57,400 --> 00:33:59,364
to cash out.
757
00:33:59,366 --> 00:34:01,558
I can't. There's a, there's
a separation of privileges
758
00:34:01,560 --> 00:34:02,964
on this server.
759
00:34:02,966 --> 00:34:04,129
It's like
a traffic light system.
760
00:34:04,131 --> 00:34:05,494
Green's what the players
can access,
761
00:34:05,496 --> 00:34:06,693
yellow's administrator access,
762
00:34:06,695 --> 00:34:07,829
and red's where the
bank accounts are stored.
763
00:34:07,831 --> 00:34:08,957
No, no, no, no.
764
00:34:08,959 --> 00:34:10,861
We should have access
to both yellow and red.
765
00:34:10,863 --> 00:34:12,196
I specifically asked for it.
766
00:34:12,198 --> 00:34:14,869
I know,
but I can't access the red.
767
00:34:14,871 --> 00:34:16,671
There's a whole extra layer
of encryption.
768
00:34:16,673 --> 00:34:18,639
Wait, wait, wait.
769
00:34:18,641 --> 00:34:20,207
I think I can get in, but it's
gonna have to authenticate me.
770
00:34:20,209 --> 00:34:21,639
It's gonna take some time.
771
00:34:21,641 --> 00:34:22,806
Time we don't have.
772
00:34:22,808 --> 00:34:24,910
He's up to $184,000.
773
00:34:31,590 --> 00:34:33,094
$202,000.
774
00:34:37,911 --> 00:34:39,544
Guys, come on,
he hits 250, he's gone.
775
00:34:39,546 --> 00:34:40,777
Look, we don't have time.
776
00:34:40,779 --> 00:34:42,082
Look, we have to hack it.
777
00:34:42,084 --> 00:34:43,651
Just do it.
There's a bridge
778
00:34:43,653 --> 00:34:44,915
between each zone. Krummy,
779
00:34:44,917 --> 00:34:46,956
we have to ride one of them
from yellow to red.
780
00:34:46,958 --> 00:34:49,124
Yeah.
781
00:34:58,932 --> 00:35:00,635
He did it.
782
00:35:00,637 --> 00:35:01,972
He hit $250,000.
783
00:35:20,024 --> 00:35:22,828
Did we get it?
784
00:35:22,830 --> 00:35:26,163
Sorry, we, uh,
we couldn't, um...
785
00:35:28,197 --> 00:35:29,962
Wait a minute.
786
00:35:29,964 --> 00:35:31,233
That's it? It's...
787
00:35:31,235 --> 00:35:32,866
He's gone? It's over?
788
00:35:48,852 --> 00:35:51,722
No. No.
789
00:35:51,724 --> 00:35:53,954
There still might be
a trace of him in the system.
790
00:35:53,956 --> 00:35:55,122
What do you mean, Nelson?
791
00:35:55,124 --> 00:35:56,289
Because his winnings
in the yellow zone
792
00:35:56,291 --> 00:35:57,320
still have to communicate
793
00:35:57,322 --> 00:35:58,560
with his bank account
in the red zone.
794
00:35:58,562 --> 00:35:59,855
That's our bridge.
795
00:35:59,857 --> 00:36:01,861
We need to plant a bug
in that line of communication.
796
00:36:01,863 --> 00:36:03,227
We can ride it into the red
797
00:36:03,229 --> 00:36:04,259
and straight
into his bank account.
798
00:36:04,261 --> 00:36:06,490
Infect the
firewall with a virus.
799
00:36:27,213 --> 00:36:29,050
Yeah! Holy crap, we did it.
800
00:36:30,316 --> 00:36:32,017
The target's bank account
801
00:36:32,019 --> 00:36:33,922
is at Keymark Bank,
Lexington, Kentucky.
802
00:36:33,924 --> 00:36:35,154
Yes.
803
00:36:36,188 --> 00:36:38,321
Nice work, Nelson.
804
00:36:39,330 --> 00:36:41,697
Good work.
805
00:36:41,699 --> 00:36:43,266
It's after banking hours,
806
00:36:43,268 --> 00:36:45,770
which means our target can't
cash out till the morning.
807
00:36:45,772 --> 00:36:47,403
Let's be there when he does.
808
00:37:02,239 --> 00:37:04,705
I'd like to close
my account.
809
00:37:04,707 --> 00:37:06,073
Your account number?
810
00:37:11,742 --> 00:37:13,443
That's a lot of money.
811
00:37:13,445 --> 00:37:15,010
Looking to make
a fresh start.
812
00:37:15,012 --> 00:37:17,682
I'd like that in
a cashier's check.
813
00:37:50,249 --> 00:37:51,911
Okay, okay.
814
00:38:00,090 --> 00:38:01,887
Shawn Morris,
815
00:38:01,889 --> 00:38:05,425
looks like the last life
you gambled away was yours.
816
00:38:28,745 --> 00:38:30,407
All right, hey!
817
00:38:30,409 --> 00:38:31,912
To an epic win today.
818
00:38:31,914 --> 00:38:32,976
Cheers!
819
00:38:32,978 --> 00:38:35,847
- Cheers.
- Good work, people.
820
00:38:35,849 --> 00:38:37,815
All right, you know
we made the same toast
821
00:38:37,817 --> 00:38:39,455
when we busted you, right?
822
00:38:39,457 --> 00:38:40,752
Oh, you just got
to rub it in.
823
00:38:40,754 --> 00:38:43,160
Look, I'm nothing like
the guy we arrested today, okay?
824
00:38:43,162 --> 00:38:44,655
Shawn Morris,
guy's like a sociopath.
825
00:38:44,657 --> 00:38:45,991
Probably still lives
in the basement
826
00:38:45,993 --> 00:38:47,496
with his parents,
never been near a girl,
827
00:38:47,498 --> 00:38:48,992
and uses code for evil.
828
00:38:48,994 --> 00:38:50,768
And hacking the New York Stock
Exchange was any different?
829
00:38:50,770 --> 00:38:51,799
It was.
830
00:38:51,801 --> 00:38:53,335
His code killed people; my code
831
00:38:53,337 --> 00:38:54,766
just made bankers
and stockholders mad
832
00:38:54,768 --> 00:38:56,765
for a day or two.
So, then he was a black hat
833
00:38:56,767 --> 00:38:58,900
with bad intentions,
and you were what?
834
00:38:58,902 --> 00:39:00,370
An innovator.
835
00:39:00,372 --> 00:39:01,433
A revolutionary.
836
00:39:01,435 --> 00:39:02,568
Sounds like you're just a guy
837
00:39:02,570 --> 00:39:03,871
talking a whole bunch of smack.
838
00:39:03,873 --> 00:39:06,003
Smack!
See, you got to know
839
00:39:06,005 --> 00:39:07,895
what it's like on the other side
to know what I'm talking about.
840
00:39:07,897 --> 00:39:09,334
But don't get me wrong,
it feels good to know
841
00:39:09,336 --> 00:39:12,134
that we did save lives by,
you know, getting over a hundred
842
00:39:12,136 --> 00:39:13,804
contaminated drugs
off the streets.
843
00:39:13,806 --> 00:39:16,171
Yep, stopped it
before it became an epidemic.
844
00:39:16,173 --> 00:39:17,308
That's how we do, son.
845
00:39:17,310 --> 00:39:19,573
That's right, baby.
Mm.
846
00:39:19,575 --> 00:39:20,909
Got to go.
847
00:39:20,911 --> 00:39:22,276
I got daddy duty.
848
00:39:22,278 --> 00:39:23,579
Good work.
All right.
849
00:39:23,581 --> 00:39:25,578
Man's a superhero with a kid.
850
00:39:25,580 --> 00:39:27,546
Hey, I thought you drank everything
851
00:39:27,548 --> 00:39:29,650
in those 82-ounce cups.
852
00:39:29,652 --> 00:39:31,587
They're not that big.
853
00:39:32,388 --> 00:39:34,584
Today I am proud to announce
854
00:39:34,586 --> 00:39:37,288
that ScrollMD will be
the first Web site
855
00:39:37,290 --> 00:39:39,992
of its kind to issue
a public warning
856
00:39:39,994 --> 00:39:43,790
on its home page alerting users
to the dangers
857
00:39:43,792 --> 00:39:45,757
of fraudulent
online advertising.
858
00:39:45,759 --> 00:39:47,125
We will also lead
859
00:39:47,127 --> 00:39:49,093
an initiative in Congress
860
00:39:49,095 --> 00:39:52,132
to ensure that
all health Web sites maintain
861
00:39:52,134 --> 00:39:53,236
a higher level of security.
862
00:39:53,238 --> 00:39:54,603
That was you, wasn't it?
863
00:39:54,605 --> 00:39:55,971
We'll be following that story
as it progresses...
864
00:39:55,973 --> 00:39:57,402
Well, I did apply
865
00:39:57,404 --> 00:39:59,306
a little pressure.
866
00:40:00,339 --> 00:40:01,874
And how is Kathryn? Is she
still under the weather?
867
00:40:01,876 --> 00:40:03,410
I just texted her.
868
00:40:03,412 --> 00:40:06,179
She's-she's much better, thanks.
Yeah, I may be
869
00:40:06,181 --> 00:40:07,611
coming down
with the same thing she's got.
870
00:40:07,613 --> 00:40:08,883
I got kind of an itchy throat.
871
00:40:08,885 --> 00:40:10,619
You know?
872
00:40:10,621 --> 00:40:12,986
Oh, please, don't start.
873
00:40:12,988 --> 00:40:15,218
To our health.
874
00:40:18,132 --> 00:40:24,632
== sync, corrected by elderman ==
@elder_man
9999
00:00:0,500 --> 00:00:2,00
www.tvsubtitles.net