1
00:00:01,659 --> 00:00:03,236
My name is Avery Ryan.
2
00:00:03,603 --> 00:00:04,702
I'm a cyber psychologist
3
00:00:04,704 --> 00:00:07,071
and special agent for the FBI.
4
00:00:07,073 --> 00:00:10,341
I lead a team of cyber experts
and former black hats
5
00:00:10,343 --> 00:00:13,310
waging a war against
a new breed of criminal:
6
00:00:13,312 --> 00:00:16,947
online predators hiding
in the Deep Web,
7
00:00:16,949 --> 00:00:18,849
faceless, nameless,
8
00:00:18,851 --> 00:00:21,218
hackers intruding
into our digital lives,
9
00:00:21,220 --> 00:00:23,787
lurking inside our devices,
10
00:00:23,789 --> 00:00:25,656
just a keystroke away.
11
00:00:27,325 --> 00:00:29,593
♪ ♪
12
00:00:38,103 --> 00:00:40,371
♪ ♪
13
00:00:44,976 --> 00:00:47,645
FEMALE VOICE:
Can you do that for me now?
14
00:00:47,647 --> 00:00:50,247
GIRL:
Okay, I can do that.
15
00:01:06,431 --> 00:01:08,766
(furniture scrapes along floor)
16
00:01:10,035 --> 00:01:12,236
(object clicking)
17
00:01:14,172 --> 00:01:16,373
(indistinct chatter)
18
00:01:21,313 --> 00:01:25,449
Blattaria-- more commonly
referred to as the cockroach.
19
00:01:25,451 --> 00:01:27,151
But these guys
are amazing.
20
00:01:27,153 --> 00:01:30,654
I mean, they've been around
for, like, 354 million years.
21
00:01:30,656 --> 00:01:33,857
They can live six
weeks without eating.
22
00:01:33,859 --> 00:01:36,260
Ooh.
Two weeks without their head.
23
00:01:36,262 --> 00:01:38,062
(chuckles)
(laughs): Come on.
24
00:01:38,064 --> 00:01:39,697
Anyway, see the, um...
25
00:01:39,699 --> 00:01:41,932
the chip there?
Mm.
26
00:01:41,934 --> 00:01:43,434
It communicates
27
00:01:43,436 --> 00:01:44,835
with the roach's antenna,
28
00:01:44,837 --> 00:01:46,971
and then the whole thing
is controlled wirelessly.
29
00:01:46,973 --> 00:01:48,872
I mean, the possibilities
are endless.
30
00:01:48,874 --> 00:01:51,976
All right, how much are these
cyber roaches gonna cost me?
31
00:01:51,978 --> 00:01:53,944
No, no, no, no.
I'm the director
32
00:01:53,946 --> 00:01:56,513
of Next-Gen Forensics--
I-I don't do math.
33
00:01:56,515 --> 00:01:57,781
That's your job,
34
00:01:57,783 --> 00:02:01,585
as the-- what are you now,
the... new deputy director?
35
00:02:01,587 --> 00:02:02,853
I didn't accept that job.
36
00:02:04,389 --> 00:02:06,790
Well...
37
00:02:06,792 --> 00:02:08,726
it's probably for
the best, you know?
38
00:02:08,728 --> 00:02:11,028
The politics, the
old-school protocol--
39
00:02:11,030 --> 00:02:12,696
that's not your style.
40
00:02:12,698 --> 00:02:14,832
I didn't say I won't accept it.
41
00:02:14,834 --> 00:02:17,901
Oh, good-- 'cause seriously,
you-you-you'd be perfect.
42
00:02:17,903 --> 00:02:19,603
I mean, who else
are they gonna get?
43
00:02:19,605 --> 00:02:21,305
The last four months,
what did you do?
44
00:02:21,307 --> 00:02:24,642
You took down three of
the Top Ten Most Wanted.
45
00:02:24,644 --> 00:02:27,378
As Nelson would say,
"You on fleek."
46
00:02:27,380 --> 00:02:29,079
Fleek?
47
00:02:29,081 --> 00:02:30,414
(chuckles)
48
00:02:30,416 --> 00:02:33,517
I told the director
I'd think about it.
49
00:02:33,519 --> 00:02:37,087
I'm not sure I'm ready
to become a member of the brass.
50
00:02:37,089 --> 00:02:39,690
Simon Sifter's
a tough act to follow.
51
00:02:39,692 --> 00:02:41,191
I miss him.
52
00:02:41,193 --> 00:02:43,193
Hope he's enjoying
his new promotion.
53
00:02:43,195 --> 00:02:45,863
So...
54
00:02:45,865 --> 00:02:47,798
we gonna do this?
55
00:02:47,800 --> 00:02:51,435
I want to be... that one.
56
00:02:51,437 --> 00:02:53,103
That's my girl.
57
00:02:53,105 --> 00:02:55,205
Loser buys lunch
for a week.
58
00:02:55,207 --> 00:02:57,908
I'd like mine personally
catered from La Friche.
59
00:02:57,910 --> 00:02:59,810
(both laugh)
60
00:02:59,812 --> 00:03:01,011
Okeydokey.
61
00:03:01,013 --> 00:03:02,379
BOTH:
Ready.
62
00:03:02,381 --> 00:03:03,781
RYAN:
Set.
63
00:03:03,783 --> 00:03:06,150
Go!
64
00:03:06,152 --> 00:03:08,152
Oh, yeah.
Oh, yeah, here we go.
65
00:03:08,154 --> 00:03:10,954
(chuckles):
Use the remote control. Avery.
66
00:03:10,956 --> 00:03:12,289
Oh, yeah. Yeah!
This is amazing.
67
00:03:12,291 --> 00:03:13,590
I'm actually controlling
68
00:03:13,592 --> 00:03:16,927
her direction.
(Russell laughing)
69
00:03:16,929 --> 00:03:19,463
RYAN: Come on, come on, go, go!
My roach stopped.
70
00:03:19,465 --> 00:03:21,632
Go, go, go!
You can do it!
71
00:03:21,634 --> 00:03:23,033
My controller's not working.
Go, girl!
72
00:03:23,035 --> 00:03:24,168
Go, go, go!
73
00:03:24,170 --> 00:03:25,836
You can do it!
74
00:03:25,838 --> 00:03:27,271
Go! Go! Go!
75
00:03:27,273 --> 00:03:28,872
(both laughing)
76
00:03:30,008 --> 00:03:32,543
Wait, D.B.
77
00:03:32,545 --> 00:03:35,379
How do we stop them?
78
00:03:35,381 --> 00:03:37,748
Yeah, I don't know.
79
00:03:37,750 --> 00:03:39,249
Get it!
80
00:03:39,251 --> 00:03:41,185
Get-get-get 'em,
get 'em, get 'em!
81
00:03:59,003 --> 00:04:01,271
♪ ♪
82
00:04:11,116 --> 00:04:13,317
(siren wailing in distance)
83
00:04:15,286 --> 00:04:17,388
(beeping)
84
00:04:18,256 --> 00:04:20,958
(groans)
85
00:04:22,327 --> 00:04:24,728
(clears throat)
86
00:04:24,730 --> 00:04:27,064
(beeping stops)
87
00:04:30,268 --> 00:04:32,436
(water running)
88
00:04:37,342 --> 00:04:40,411
(woman's distorted sobbing)
89
00:04:40,413 --> 00:04:43,547
KRUMITZ: Francine, what's going on?
What happened? Tell me.
90
00:04:43,549 --> 00:04:45,549
(sobbing)
91
00:04:45,551 --> 00:04:47,584
I killed him.
92
00:04:49,487 --> 00:04:51,855
I did it, Daniel.
93
00:04:52,924 --> 00:04:55,159
I killed Taylor Pettis.
94
00:04:55,161 --> 00:04:56,994
NELSON:
Krummy.
95
00:04:58,029 --> 00:05:00,931
Bro, did you stay here
all night again?
96
00:05:02,700 --> 00:05:04,902
(sighs) Big day
in court, man.
97
00:05:04,904 --> 00:05:07,237
You know, maybe getting a
little sleep wouldn't have...
98
00:05:07,239 --> 00:05:08,772
wouldn't have
been a bad idea.
99
00:05:08,774 --> 00:05:10,874
It's a pretty big
murder trial.
100
00:05:10,876 --> 00:05:12,342
And it's Francine.
101
00:05:13,211 --> 00:05:14,812
I'm just a character witness,
Nelson.
102
00:05:14,814 --> 00:05:16,647
I got it.
103
00:05:17,248 --> 00:05:18,682
What?
104
00:05:18,684 --> 00:05:20,651
No, man,
I'm just worried about you.
105
00:05:20,653 --> 00:05:23,420
I mean, we're all worried about you.
I don't know why
106
00:05:23,422 --> 00:05:25,823
everybody's making
such a big deal of it.
107
00:05:25,825 --> 00:05:27,124
Pettis was stalking my sister.
108
00:05:27,126 --> 00:05:28,792
She shot him in self-defense.
109
00:05:28,794 --> 00:05:30,194
He's dead.
110
00:05:30,196 --> 00:05:31,628
She'll be fine.
111
00:05:31,630 --> 00:05:33,363
I'll be fine.
112
00:05:36,100 --> 00:05:38,068
All right.
113
00:05:39,170 --> 00:05:42,206
(indistinct chatter)
114
00:05:42,208 --> 00:05:45,008
D.B., more of your toys.
115
00:05:45,010 --> 00:05:47,444
Soon you're gonna have
every Wi-Fi,
116
00:05:47,446 --> 00:05:49,580
Bluetooth signal
transmitting device out there.
117
00:05:49,582 --> 00:05:50,914
Well, that's the idea.
118
00:05:50,916 --> 00:05:52,249
I'll study 'em,
you'll hack 'em,
119
00:05:52,251 --> 00:05:53,917
and together we'll
stay two steps ahead
120
00:05:53,919 --> 00:05:55,853
of the guys in
the black hats.
121
00:05:55,855 --> 00:05:57,921
We'll take 'em all down.
Yes!
122
00:05:58,656 --> 00:05:59,990
(laughs):
Sounds good.
123
00:05:59,992 --> 00:06:02,025
Did you hear?
What?
124
00:06:02,027 --> 00:06:04,194
Linda found a cockroach
in her coffee this morning.
125
00:06:04,196 --> 00:06:05,863
Not one of mine.
No, no, no.
126
00:06:05,865 --> 00:06:08,365
Hootie and all the Blowfish
are present and accounted for.
127
00:06:08,367 --> 00:06:10,634
NELSON: What?
I'm just saying. You okay?
128
00:06:10,636 --> 00:06:13,003
Yeah, fine.
Your top button's unbuttoned
129
00:06:13,005 --> 00:06:14,738
and you're not wearing
your watch.
130
00:06:14,740 --> 00:06:16,707
You're distracted.
Something's on your mind.
131
00:06:16,709 --> 00:06:18,709
I just woke up
late, that's all.
132
00:06:18,711 --> 00:06:21,411
Just downloaded everything from
a home burglary in Georgetown into CTOC.
133
00:06:21,413 --> 00:06:23,580
I thought you were
taking the day off.
134
00:06:23,582 --> 00:06:25,716
I'd rather be here than
at the courthouse waiting.
135
00:06:25,718 --> 00:06:27,084
Metro PD recovered
136
00:06:27,086 --> 00:06:29,186
a phone from a crime scene,
asked us to try
137
00:06:29,188 --> 00:06:30,754
to get an I.D.
on its owner.
138
00:06:30,756 --> 00:06:32,689
I got a binary dump
off the phone,
139
00:06:32,691 --> 00:06:35,626
but the data was misaligned,
so that's gonna take a while.
140
00:06:35,628 --> 00:06:37,494
Although I was able to access
141
00:06:37,496 --> 00:06:39,763
the locally stored
database, calendar
142
00:06:39,765 --> 00:06:40,898
and apps.
143
00:06:40,900 --> 00:06:43,233
Phone belonged to the homeowner,
Scott Barrett.
144
00:06:43,235 --> 00:06:45,636
Found blood and tissue in the
shattered screen and housing.
145
00:06:45,638 --> 00:06:47,704
Still waiting on DNA results.
146
00:06:47,706 --> 00:06:49,273
Definitely suggests violence.
147
00:06:49,275 --> 00:06:51,542
Is Scott Barrett okay?
Don't know.
148
00:06:51,544 --> 00:06:53,544
Metro is still trying
to locate him.
149
00:06:53,546 --> 00:06:54,945
His employer said
he was on vacation.
150
00:06:54,947 --> 00:06:56,880
He wasn't at the house
at the time of the robbery.
151
00:06:56,882 --> 00:06:58,916
On vacation without his phone?
152
00:06:58,918 --> 00:07:00,150
Who goes anywhere
without their phone?
153
00:07:00,152 --> 00:07:02,352
Well, who called in
the burglary?
154
00:07:02,354 --> 00:07:05,255
According to the police report,
the housekeeper.
155
00:07:05,257 --> 00:07:06,790
This is all very intriguing,
Krumitz,
156
00:07:06,792 --> 00:07:08,425
but you brought us all in here
157
00:07:08,427 --> 00:07:11,194
for a case that belongs
to ViCAP, not Cyber.
158
00:07:11,196 --> 00:07:13,697
Except... I stumbled
upon a little something
159
00:07:13,699 --> 00:07:15,566
that makes it Cyber.
160
00:07:15,568 --> 00:07:18,201
The home's security system
was hacked.
161
00:07:18,203 --> 00:07:20,103
(chuckles)
Check this out.
162
00:07:21,306 --> 00:07:23,373
He always do that?
Bury the lead?
163
00:07:23,375 --> 00:07:25,008
Ah, he loves
the attention.
164
00:07:25,010 --> 00:07:26,610
You know, in his mind
this is the bridge
165
00:07:26,612 --> 00:07:28,812
and he's Captain Kirk, you know?
(laughs)
166
00:07:28,814 --> 00:07:31,448
KRUMITZ:
Anyway...
167
00:07:31,450 --> 00:07:33,584
one of the apps I was able
to recover from the phone
168
00:07:33,586 --> 00:07:35,719
was for P-TECH alarm systems,
and the last time
169
00:07:35,721 --> 00:07:39,389
the phone's app was accessed it
armed the home security system
170
00:07:39,391 --> 00:07:40,557
in Scott Barrett's home.
171
00:07:40,559 --> 00:07:42,159
RAMIREZ: But according
to the police report,
172
00:07:42,161 --> 00:07:45,028
no alarm was triggered
during the burglary.
173
00:07:45,030 --> 00:07:46,330
I already called
the security company.
174
00:07:46,332 --> 00:07:47,564
Their logs show
an incoming command
175
00:07:47,566 --> 00:07:49,633
to disarm the system,
but a closer look revealed
176
00:07:49,635 --> 00:07:51,735
it didn't come
from the home keypad or the app.
177
00:07:51,737 --> 00:07:53,303
That means somebody hacked
the communication
178
00:07:53,305 --> 00:07:55,238
between the control panel
and P-TECH.
179
00:07:55,240 --> 00:07:57,441
And disarmed the alarm
remotely from his own device
180
00:07:57,443 --> 00:07:59,009
without being detected.
181
00:07:59,011 --> 00:08:01,144
If that's true,
there's a black hat out there
182
00:08:01,146 --> 00:08:04,014
that can gain access
to any house, any business
183
00:08:04,016 --> 00:08:07,117
that happens to have
a P-TECH alarm system.
184
00:08:07,119 --> 00:08:09,119
That's a regional company.
185
00:08:09,121 --> 00:08:12,222
The entire Eastern Seaboard
is his playground.
186
00:08:12,224 --> 00:08:13,557
Raven, contact P-TECH.
187
00:08:13,559 --> 00:08:15,392
See if they've been notified
of any other intrusions.
188
00:08:15,394 --> 00:08:18,629
This could be the beginning
of a really big crime spree.
189
00:08:24,268 --> 00:08:26,637
MAN (over police radio): Dispatch, this is
Charlie-312. Over.
190
00:08:26,639 --> 00:08:28,772
Responding to that 10-29.
191
00:08:28,774 --> 00:08:30,807
No wants, no warrants.
192
00:08:34,746 --> 00:08:38,582
♪ ♪
193
00:08:43,321 --> 00:08:44,988
MUNDO:
Barrett's housekeeper reported
194
00:08:44,990 --> 00:08:46,289
some jewelry stolen.
195
00:08:46,291 --> 00:08:47,891
Couple watches,
a tablet.
196
00:08:47,893 --> 00:08:49,493
No eyewitnesses to the burglary.
197
00:08:49,495 --> 00:08:52,129
The house is our eyewitness.
198
00:08:52,131 --> 00:08:54,364
Grab the router, the computer,
199
00:08:54,366 --> 00:08:56,767
the security control box,
the game console--
200
00:08:56,769 --> 00:08:59,836
bring them back to CTOC,
let's see what we find.
201
00:08:59,838 --> 00:09:01,038
I know that look.
202
00:09:01,040 --> 00:09:02,939
Something's not
adding up for you.
203
00:09:02,941 --> 00:09:04,775
Well, hackers
are motivated
204
00:09:04,777 --> 00:09:07,444
by one of two things:
pride or profit.
205
00:09:07,446 --> 00:09:08,879
One group wants
to boast,
206
00:09:08,881 --> 00:09:11,415
impress other hackers
with their skills,
207
00:09:11,417 --> 00:09:14,051
creativity,
their never-seen-before code.
208
00:09:14,053 --> 00:09:16,019
And the other group...
209
00:09:16,021 --> 00:09:17,754
they want money.
Right,
210
00:09:17,756 --> 00:09:19,890
but those guys can simply
harvest credit card numbers
211
00:09:19,892 --> 00:09:22,392
from retailers by the millions,
sell them for $20 online,
212
00:09:22,394 --> 00:09:24,828
and never even leave
the comfort of their own home.
213
00:09:24,830 --> 00:09:26,596
Right.
214
00:09:26,598 --> 00:09:30,167
So why would our target
hack into this sophisticated
215
00:09:30,169 --> 00:09:32,169
security system,
enter this house
216
00:09:32,171 --> 00:09:34,838
just to commit petty larceny?
217
00:09:34,840 --> 00:09:36,707
RUSSELL:
Someone vacuumed.
218
00:09:36,709 --> 00:09:38,775
MAN (calls):
Agent Mundo!
219
00:09:40,878 --> 00:09:44,448
Somebody vacuumed the floor,
but not this area
220
00:09:44,450 --> 00:09:47,084
right here in front of you.
The housekeeper reported
221
00:09:47,086 --> 00:09:48,985
the burglary--
maybe she got started
222
00:09:48,987 --> 00:09:51,421
before she noticed
anything was missing.
223
00:09:51,423 --> 00:09:54,825
Yeah, I don't think so--
the edges of the void are not consistent
224
00:09:54,827 --> 00:09:56,460
with the movement of a...
225
00:09:56,462 --> 00:09:59,930
vacuum going
back and forth.
226
00:09:59,932 --> 00:10:01,732
Something was here.
227
00:10:01,734 --> 00:10:04,301
Very odd shape.
228
00:10:04,303 --> 00:10:07,170
Maybe that's what
the thief took with him.
229
00:10:08,906 --> 00:10:10,140
Okay.
230
00:10:10,142 --> 00:10:11,675
Hello.
231
00:10:11,677 --> 00:10:14,010
You ever see one
of these little...
232
00:10:14,012 --> 00:10:15,612
automatic vacuums?
233
00:10:15,614 --> 00:10:17,214
(laughs): No.
Oh, they're so amazing.
234
00:10:17,216 --> 00:10:21,218
You can set the timer
to vacuum on a schedule.
235
00:10:21,220 --> 00:10:23,253
Is this a subtle hint?
You want me to get you
236
00:10:23,255 --> 00:10:24,354
one of these for
your birthday?
237
00:10:24,356 --> 00:10:25,655
Yes, please.
(laughs)
238
00:10:25,657 --> 00:10:27,691
No. Actually,
my point is
239
00:10:27,693 --> 00:10:29,693
this new model, it has memory.
240
00:10:29,695 --> 00:10:32,028
It recalls
the layout of the room,
241
00:10:32,030 --> 00:10:33,864
the placement
of the furniture and...
242
00:10:33,866 --> 00:10:37,267
and objects, and it automatically
maneuvers around them
243
00:10:37,269 --> 00:10:40,570
the next time
it starts its cycle.
244
00:10:40,572 --> 00:10:41,972
Yeah. Yeah.
245
00:10:41,974 --> 00:10:44,307
It's gonna tell us
what was taken from this room.
246
00:10:44,309 --> 00:10:46,576
♪ ♪
247
00:10:54,852 --> 00:10:57,020
(indistinct police transmission)
248
00:11:02,160 --> 00:11:04,361
(whirring)
249
00:11:34,158 --> 00:11:36,059
RUSSELL:
38 minutes.
250
00:11:36,061 --> 00:11:39,062
Enough time for the vacuum
to do its work and to...
251
00:11:39,064 --> 00:11:43,767
think that whoever was lying
there was a piece of furniture.
252
00:11:43,769 --> 00:11:47,170
Our burglary
just became a homicide.
253
00:11:47,172 --> 00:11:49,105
But who's our victim?
254
00:11:50,458 --> 00:11:52,299
And where's their body?
255
00:11:52,756 --> 00:11:56,756
♪ CSI Cyber 2x01 ♪
Why-Fi
Original Air Date on October 4, 2015
256
00:11:56,781 --> 00:12:03,086
♪ I know you've deceived me,
now here's a surprise ♪
257
00:12:04,722 --> 00:12:11,061
♪ I know that you have, 'cause
there's magic in my eyes ♪
258
00:12:11,063 --> 00:12:14,397
♪ I can see
for miles and miles ♪
259
00:12:14,399 --> 00:12:18,435
♪ I can see for miles
and miles ♪
260
00:12:18,437 --> 00:12:22,606
♪ I can see
for miles and miles ♪
261
00:12:22,608 --> 00:12:26,343
♪ And miles... ♪
262
00:12:26,345 --> 00:12:29,279
♪ Oh, yeah. ♪
263
00:12:29,303 --> 00:12:31,303
== sync, corrected by elderman ==
@elder_man
264
00:12:43,254 --> 00:12:45,823
(indistinct chatter)
265
00:12:45,825 --> 00:12:50,494
Okay. Let's see
what you have to say.
266
00:12:52,330 --> 00:12:54,531
Yes. Photos.
267
00:12:54,533 --> 00:12:55,651
Okay.
268
00:12:55,652 --> 00:12:58,687
Text messages. Okay.
269
00:12:59,355 --> 00:13:03,124
Look at that. That one.
270
00:13:03,126 --> 00:13:06,027
DNA results on the tissue
and blood Krumitz found
271
00:13:06,029 --> 00:13:07,829
in the phone were a match
to the saliva I swabbed
272
00:13:07,831 --> 00:13:09,297
from the mouthpiece.
273
00:13:09,299 --> 00:13:10,432
And all three were a match
274
00:13:10,434 --> 00:13:11,800
to a hair found
in a brush
275
00:13:11,802 --> 00:13:13,268
I brought back
from the crime scene.
276
00:13:13,270 --> 00:13:15,437
Which means Scott Barrett
was not on vacation.
277
00:13:15,439 --> 00:13:16,938
He's our victim.
278
00:13:16,940 --> 00:13:18,340
My guess is,
Barrett surprised the burglar,
279
00:13:18,342 --> 00:13:19,841
who thought the
house would be empty.
280
00:13:19,843 --> 00:13:22,177
They struggled. Barrett lost.
Guys,
281
00:13:22,179 --> 00:13:24,579
I got something. I just
recovered a text message chain
282
00:13:24,581 --> 00:13:27,349
on Barrett's phone between
Barrett and a woman named Ellen.
283
00:13:27,351 --> 00:13:29,351
MUNDO: I did some background
on the victim.
284
00:13:29,353 --> 00:13:31,386
Ellen Peters is the
victim's ex-wife.
285
00:13:31,388 --> 00:13:33,488
Well, that might explain
why she wrote this.
286
00:13:33,490 --> 00:13:35,290
"Thanks for covering
the last two days.
287
00:13:35,292 --> 00:13:37,158
"I know you had
to postpone your vacation.
288
00:13:37,160 --> 00:13:39,728
I'll come right from the airport
to get her."
289
00:13:39,730 --> 00:13:42,063
Her?
290
00:13:42,065 --> 00:13:43,632
MUNDO: They have a six-year-old
daughter named Rae.
291
00:13:43,634 --> 00:13:45,534
They share custody, but
Rae spends most of the time
292
00:13:45,536 --> 00:13:48,069
with her mother.
293
00:13:48,071 --> 00:13:50,672
This must be Rae.
294
00:13:50,674 --> 00:13:53,074
And according to the text chain,
Ellen was on a business trip
295
00:13:53,076 --> 00:13:54,509
in Australia that got extended.
296
00:13:54,511 --> 00:13:56,578
She's on a flight right now,
back to the States.
297
00:13:56,580 --> 00:13:58,947
If Scott Barrett's dead,
where's his daughter?
298
00:14:08,724 --> 00:14:10,792
Peanut butter and jelly.
299
00:14:10,794 --> 00:14:11,927
What?
300
00:14:11,929 --> 00:14:13,762
His daughter,
she's in the house.
301
00:14:13,764 --> 00:14:15,430
(siren wailing)
302
00:14:19,402 --> 00:14:22,637
(whispering):
I don't hear anything.
303
00:14:24,106 --> 00:14:26,308
I think he's gone.
304
00:14:26,310 --> 00:14:29,144
Rae, can you keep a secret?
305
00:14:29,146 --> 00:14:31,012
Yeah, I can keep a secret.
306
00:14:31,014 --> 00:14:32,113
It's gonna be fun.
307
00:14:32,115 --> 00:14:34,082
Okay.
308
00:14:38,321 --> 00:14:40,589
I'll look in here.
309
00:14:40,591 --> 00:14:42,924
Rae?
Rae?
310
00:14:42,926 --> 00:14:45,126
Where are you?
311
00:14:48,531 --> 00:14:51,166
Rae?
312
00:15:12,955 --> 00:15:15,156
(creaking)
313
00:15:17,493 --> 00:15:19,327
Rae. Are you Rae?
314
00:15:19,329 --> 00:15:21,363
Don't be
afraid.
315
00:15:21,365 --> 00:15:24,165
D.B., I found her!
316
00:15:25,668 --> 00:15:26,801
I want my daddy.
317
00:15:26,803 --> 00:15:28,370
Do you know where he is?
318
00:15:28,372 --> 00:15:30,138
I don't know where your dad is,
319
00:15:30,140 --> 00:15:33,008
but that's okay.
It's gonna be fun.
320
00:15:33,909 --> 00:15:36,077
Honey, my name's Avery.
321
00:15:36,079 --> 00:15:37,119
I'm here to keep you safe.
322
00:15:38,601 --> 00:15:40,415
Can you tell me why
you're hiding in this closet?
323
00:15:40,417 --> 00:15:41,983
My daddy always told me,
324
00:15:43,383 --> 00:15:47,524
if I ever see anyone strange
in the house,
325
00:15:47,933 --> 00:15:50,900
I'm supposed to hide in here.
326
00:15:50,902 --> 00:15:53,136
Did you see somebody strange?
327
00:15:59,276 --> 00:16:00,844
(gasps)
328
00:16:00,846 --> 00:16:02,278
That's him!
329
00:16:02,280 --> 00:16:04,380
Honey, it's okay.
This is my friend.
330
00:16:05,182 --> 00:16:07,817
Hi.
331
00:16:10,087 --> 00:16:11,888
Listen, Rae,
332
00:16:11,890 --> 00:16:15,124
we're just gonna sit here until
you feel comfortable, okay?
333
00:16:15,126 --> 00:16:16,593
And then when
you're ready,
334
00:16:16,595 --> 00:16:19,162
I'm gonna take you
someplace really safe.
335
00:16:19,997 --> 00:16:22,665
Do you want to hold my badge?
336
00:16:22,667 --> 00:16:24,868
Okay.
337
00:16:31,108 --> 00:16:34,811
(indistinct chatter)
338
00:16:35,913 --> 00:16:38,114
RYAN:
Rae,
339
00:16:38,116 --> 00:16:40,316
you hungry?
340
00:16:41,085 --> 00:16:42,518
I spoke with
your mom,
341
00:16:42,520 --> 00:16:45,421
and she said I could ask
you a few questions.
342
00:16:45,423 --> 00:16:47,090
Is that okay with you?
343
00:16:47,092 --> 00:16:50,093
I'm not supposed
to talk to strangers.
344
00:16:50,095 --> 00:16:52,996
(chuckles)
That is a perfect answer.
345
00:16:52,998 --> 00:16:57,433
Well,
maybe your doll can help me.
346
00:16:57,435 --> 00:16:59,435
Hi. What's
your name?
347
00:16:59,437 --> 00:17:01,604
Marla.
348
00:17:01,606 --> 00:17:05,408
But she doesn't talk
when we're not at home.
349
00:17:05,410 --> 00:17:07,777
She's shy.
350
00:17:08,679 --> 00:17:11,748
Sometimes I'm shy, too.
351
00:17:11,750 --> 00:17:13,917
Maybe that means
we'll get along.
352
00:17:13,919 --> 00:17:17,086
Hi, Marla. Nice
to meet you.
353
00:17:17,088 --> 00:17:19,656
I'm Avery.
354
00:17:19,658 --> 00:17:21,791
I'm gonna ask you
a few questions,
355
00:17:21,793 --> 00:17:25,061
but if you get tired
and you want to stop,
356
00:17:25,063 --> 00:17:28,765
you just wrinkle your nose
like this.
357
00:17:29,600 --> 00:17:31,868
(chuckles)
358
00:17:31,870 --> 00:17:34,203
Oh, no.
359
00:17:34,205 --> 00:17:37,440
Marla can't wrinkle her nose.
360
00:17:37,442 --> 00:17:39,742
Hmm. What are we gonna do?
361
00:17:39,744 --> 00:17:42,478
We need to think
of something else.
362
00:17:45,316 --> 00:17:48,484
She can raise her hand.
363
00:17:49,453 --> 00:17:53,656
Yes! That's a great idea, Rae.
364
00:17:53,658 --> 00:17:56,693
So, Marla, when I ask
you these questions,
365
00:17:56,695 --> 00:17:58,628
if you get too tired
or you want to stop,
366
00:17:58,630 --> 00:18:00,596
you just raise
your hand.
367
00:18:00,598 --> 00:18:05,501
Marla, how long did you and Rae
hide in the closet?
368
00:18:18,849 --> 00:18:20,283
What's going on?
369
00:18:20,285 --> 00:18:21,951
NELSON:
He's sleeping.
370
00:18:21,953 --> 00:18:23,753
RYAN: Maybe he's channeling
the Force.
371
00:18:23,755 --> 00:18:28,024
(scoffs)
He's not a Jedi.
372
00:18:28,026 --> 00:18:30,493
Look at him.
He's sleeping sitting up.
373
00:18:30,495 --> 00:18:33,730
Well, if he's Obi-Wan,
I want to be Yoda.
374
00:18:42,172 --> 00:18:43,139
Uh...
375
00:18:43,141 --> 00:18:44,007
Oh.
376
00:18:44,009 --> 00:18:44,941
(both laugh)
377
00:18:44,943 --> 00:18:46,376
Power nap?
Mm-hmm.
378
00:18:46,378 --> 00:18:47,643
Nah, I was meditating.
379
00:18:47,645 --> 00:18:49,812
Oh, sorry.
380
00:18:49,814 --> 00:18:51,147
Well, it turns out
Rae didn't witness
381
00:18:51,149 --> 00:18:52,515
her father's murder.
382
00:18:52,517 --> 00:18:55,084
Oh, that's very good news.
She got dropped off
383
00:18:55,086 --> 00:18:57,453
from a sleepover.
The door was unlocked.
384
00:18:57,455 --> 00:19:00,790
Her dad wasn't there. She let
herself into her closet fort.
385
00:19:00,792 --> 00:19:03,760
She played with her tablet,
made herself a sandwich,
386
00:19:03,762 --> 00:19:07,163
fell asleep. And this was
after the body was removed
387
00:19:07,165 --> 00:19:09,332
but before we arrived
on the scene.
388
00:19:09,334 --> 00:19:11,901
Boy, that's
one independent little girl.
389
00:19:11,903 --> 00:19:13,403
(knocking)
390
00:19:13,405 --> 00:19:14,504
Just confirmed
that there's been
391
00:19:14,506 --> 00:19:16,606
seven P-TECH security
burglaries in the past
392
00:19:16,608 --> 00:19:18,841
week and a half.
RUSSELL: I'm surprised.
393
00:19:18,843 --> 00:19:21,244
Metro Police should have noticed
a pattern.
394
00:19:21,246 --> 00:19:23,012
Well, not all of them happened
in the District.
395
00:19:23,014 --> 00:19:24,680
Maryland, Virginia as well.
396
00:19:24,682 --> 00:19:28,518
In all seven homes, the P-TECH
system was shut down remotely.
397
00:19:28,520 --> 00:19:30,953
And no one-- not the homeowners
398
00:19:30,955 --> 00:19:34,524
or the police-- can identify
the burglar's point of entry.
399
00:19:35,959 --> 00:19:38,294
(scraping)
400
00:19:39,296 --> 00:19:41,697
(creaking)
401
00:19:44,601 --> 00:19:46,803
I know how our target got in.
402
00:19:49,606 --> 00:19:51,541
Rae,
403
00:19:51,543 --> 00:19:53,976
I have
a really important question
404
00:19:53,978 --> 00:19:55,745
I need
your help with.
405
00:19:55,747 --> 00:19:58,448
Did you unlock the back window
in your house?
406
00:19:58,450 --> 00:19:59,849
Yes.
407
00:19:59,851 --> 00:20:02,118
Why'd you do that?
408
00:20:02,120 --> 00:20:04,754
Marla told me to.
409
00:20:04,756 --> 00:20:06,589
Marla told you to?
410
00:20:06,591 --> 00:20:10,193
I was going to a sleepover,
remember?
411
00:20:10,195 --> 00:20:11,761
Yes.
412
00:20:11,763 --> 00:20:13,830
But Marla couldn't come.
413
00:20:13,832 --> 00:20:15,932
So she wanted me
to unlock the window
414
00:20:15,934 --> 00:20:19,001
so she could go in
the backyard to play.
415
00:20:19,003 --> 00:20:22,939
What else did Marla tell you
to do?
416
00:20:24,942 --> 00:20:26,676
It's okay.
417
00:20:26,678 --> 00:20:29,011
You can tell me.
418
00:20:29,013 --> 00:20:31,314
I took her in Daddy's room.
419
00:20:32,149 --> 00:20:34,383
And I know
420
00:20:34,385 --> 00:20:36,953
I'm not supposed to go in there.
421
00:20:37,788 --> 00:20:39,055
Rae,
422
00:20:39,057 --> 00:20:41,023
honey,
423
00:20:41,025 --> 00:20:44,026
you didn't do anything wrong.
424
00:20:44,028 --> 00:20:45,862
Okay?
425
00:20:45,864 --> 00:20:48,965
Okay.
426
00:20:48,967 --> 00:20:51,100
I just got your text.
What do you got?
427
00:20:51,102 --> 00:20:53,002
NELSON: We went through all the devices
that you brought back
428
00:20:53,004 --> 00:20:54,504
from the Barretts'
brownstone.
429
00:20:54,506 --> 00:20:55,838
The very last thing
he did
430
00:20:55,840 --> 00:20:58,074
was play a golf game
on his Game Vex.
431
00:20:58,076 --> 00:21:00,109
Game Vex has
a 3-D mapping system.
432
00:21:00,111 --> 00:21:02,712
It captures images
of the room you're in.
433
00:21:02,714 --> 00:21:05,114
The console emits invisible
infrared dots of light.
434
00:21:05,116 --> 00:21:07,683
I mean, they're bouncing off of
everything, mapping the space.
435
00:21:07,685 --> 00:21:09,018
We even set up a Game Vex.
436
00:21:09,020 --> 00:21:10,620
Now we can see
what the console sees
437
00:21:10,622 --> 00:21:12,054
through these night-vision
glasses.
438
00:21:12,056 --> 00:21:14,190
Go ahead and put 'em on.
439
00:21:22,533 --> 00:21:25,668
These data points will be
turned into a 2-D depth image
440
00:21:25,670 --> 00:21:28,771
by measuring our distance
from the lens.
441
00:21:28,773 --> 00:21:30,540
It then creates a
point cloud image.
442
00:21:30,542 --> 00:21:31,908
MUNDO:
Okay, this is how
443
00:21:31,910 --> 00:21:34,076
the console communicates
with and identifies the user.
444
00:21:34,078 --> 00:21:35,945
Knows when you've
stepped in the room
445
00:21:35,947 --> 00:21:39,315
to respond to your
voice commands.
446
00:21:39,317 --> 00:21:41,117
RAMIREZ:
Right. While playing,
447
00:21:41,119 --> 00:21:45,154
the console records and saves
the last 20 minutes of gameplay.
448
00:21:45,156 --> 00:21:47,990
I found the console
in the "power on" mode.
449
00:21:47,992 --> 00:21:50,126
Are you telling me the Game Vex
captured the last 20 minutes
450
00:21:50,128 --> 00:21:51,894
of Scott Barrett's life?
451
00:21:53,530 --> 00:21:55,231
(grunting)
452
00:22:04,159 --> 00:22:06,160
We're downloading what
the Game Vex captured
453
00:22:06,162 --> 00:22:07,628
at Scott Barrett's house.
454
00:22:07,630 --> 00:22:10,197
MUNDO: We know he was playing an
instructional golf video game
455
00:22:10,199 --> 00:22:14,034
on his Game Vex
before he was attacked.
456
00:22:14,769 --> 00:22:16,503
Okay, there's our killer.
457
00:22:16,505 --> 00:22:20,274
The two are struggling over
what looks like a golf club.
458
00:22:22,577 --> 00:22:24,811
(grunting)
459
00:22:34,155 --> 00:22:35,489
In the struggle it looks like
460
00:22:35,491 --> 00:22:36,823
the golf club
struck Scott's phone
461
00:22:36,825 --> 00:22:38,025
after it collided with his head.
462
00:22:38,027 --> 00:22:39,259
That explains the transfer
463
00:22:39,261 --> 00:22:41,695
of the shattered phone screen.
464
00:22:41,697 --> 00:22:43,764
And that same golf club
is our murder weapon.
465
00:22:43,766 --> 00:22:45,566
(grunting)
466
00:22:45,568 --> 00:22:48,535
RAMIREZ: And it was never recovered
at the scene.
467
00:22:48,537 --> 00:22:50,003
MUNDO: All right, reboot
in point cloud mode.
468
00:22:50,005 --> 00:22:52,272
Let's get a description
on this guy.
469
00:22:52,274 --> 00:22:54,841
We know Scott Barrett is
five-seven. That means
470
00:22:54,843 --> 00:22:56,243
the attacker is
about five-ten,
471
00:22:56,245 --> 00:22:59,780
165, long hair,
right-handed.
472
00:22:59,782 --> 00:23:02,349
Mm-hmm. Unfortunately,
lot of guys look like that.
473
00:23:02,351 --> 00:23:04,484
Yeah, to catch our target,
474
00:23:04,486 --> 00:23:05,886
we got to step up our game.
475
00:23:05,888 --> 00:23:08,655
We find that golf club,
we get to the killer.
476
00:23:14,262 --> 00:23:16,263
You okay, Daniel?
477
00:23:16,265 --> 00:23:19,800
Yeah, I just
needed some air.
478
00:23:19,802 --> 00:23:21,301
I got the call.
479
00:23:21,303 --> 00:23:22,603
I have to testify
after lunch.
480
00:23:22,605 --> 00:23:24,905
Hey, you're gonna do great.
481
00:23:24,907 --> 00:23:27,341
I still haven't
wrapped my mind
482
00:23:27,343 --> 00:23:29,509
around what Francine did.
483
00:23:29,511 --> 00:23:32,412
I mean, she killed a man.
484
00:23:32,414 --> 00:23:35,015
Killed him in
self-defense.
485
00:23:35,017 --> 00:23:36,316
And today it could all be over
486
00:23:36,318 --> 00:23:38,652
if Francine is gonna
come home soon
487
00:23:38,654 --> 00:23:41,622
and start her life again.
488
00:23:42,457 --> 00:23:44,424
She became kind of
an instant parent
489
00:23:44,426 --> 00:23:46,260
when our mom and dad
were murdered.
490
00:23:46,262 --> 00:23:49,196
I'm gonna tell Mom!
491
00:23:49,198 --> 00:23:51,865
(gasps, panting)
492
00:23:56,337 --> 00:23:58,405
Daniel, get out of here!
493
00:23:58,407 --> 00:24:00,274
Why?
Go!
494
00:24:00,276 --> 00:24:01,975
KRUMITZ:
She never got to be a teenager.
495
00:24:01,977 --> 00:24:04,144
I need help.
496
00:24:04,146 --> 00:24:05,512
KRUMITZ:
She raised me.
497
00:24:05,514 --> 00:24:07,481
I just wish my parents knew
what a good job she did.
498
00:24:07,483 --> 00:24:12,419
Your parents are watching you
from above, Daniel.
499
00:24:12,421 --> 00:24:14,688
They're very proud of you.
500
00:24:14,690 --> 00:24:17,291
You think?
501
00:24:17,293 --> 00:24:19,793
I don't think.
502
00:24:19,795 --> 00:24:22,396
I know.
503
00:24:31,539 --> 00:24:34,074
Elijah, there was a golf app
on Scott Barrett's phone.
504
00:24:34,076 --> 00:24:36,376
It syncs with a device
to help you perfect your swing.
505
00:24:36,378 --> 00:24:37,644
The app communicates
with the club.
506
00:24:37,646 --> 00:24:39,212
MUNDO:
Right. It records path, speed,
507
00:24:39,214 --> 00:24:40,514
angle and impact.
But
508
00:24:40,516 --> 00:24:42,115
the device that was attached
to Barrett's club
509
00:24:42,117 --> 00:24:44,685
was also equipped
with GPS tracking.
510
00:24:45,555 --> 00:24:47,038
It gave you the location
of the murder weapon?
511
00:24:47,039 --> 00:24:48,700
Yup.
512
00:24:49,857 --> 00:24:52,092
(siren blaring)
513
00:24:52,094 --> 00:24:54,728
(tires squeak)
514
00:24:55,730 --> 00:24:56,863
MAN:
Team One, let's go.
515
00:24:58,199 --> 00:25:01,435
Over on the
left side.
516
00:25:02,770 --> 00:25:05,906
Clear.
517
00:25:06,741 --> 00:25:07,841
Clear.
518
00:25:11,245 --> 00:25:13,447
(man speaks indistinctly)
519
00:25:14,916 --> 00:25:16,917
Clear behind this wall.
520
00:25:16,919 --> 00:25:19,786
Guys, here's our golf club.
521
00:25:19,788 --> 00:25:22,155
And Scott Barrett.
522
00:25:22,157 --> 00:25:23,790
Clear!
523
00:25:27,695 --> 00:25:29,396
(sighs)
524
00:25:31,432 --> 00:25:35,168
RYAN: Rae said her doll told her
to unlock the window.
525
00:25:35,170 --> 00:25:36,269
Her doll?
526
00:25:36,271 --> 00:25:39,940
Marla. Marla talks.
So, the question is,
527
00:25:39,942 --> 00:25:41,608
how does Marla talk?
528
00:25:41,610 --> 00:25:43,577
When a little girl
wants Marla to speak,
529
00:25:43,579 --> 00:25:46,546
she pushes this button
which triggers a microphone.
530
00:25:46,548 --> 00:25:48,815
As Marla listens,
audio recordings travel
531
00:25:48,817 --> 00:25:50,951
through the Web to a server
532
00:25:50,953 --> 00:25:52,252
where it's processed
into a text.
533
00:25:52,254 --> 00:25:54,121
It creates a database
so in the future,
534
00:25:54,123 --> 00:25:55,756
when the doll responds,
535
00:25:55,758 --> 00:25:58,892
it responds with something
that the child likes.
536
00:25:58,894 --> 00:26:00,927
Almost like a real conversation.
537
00:26:00,929 --> 00:26:02,262
NELSON: But with Rae's doll,
our hacker
538
00:26:02,264 --> 00:26:03,964
was able
to intercept communication,
539
00:26:03,966 --> 00:26:06,133
making Marla say
whatever he wanted.
540
00:26:06,135 --> 00:26:08,368
Ugh. Turning a little girl's
imaginary friend
541
00:26:08,370 --> 00:26:09,870
into something very real
542
00:26:09,872 --> 00:26:11,338
and very dangerous.
543
00:26:11,340 --> 00:26:12,539
So, through the doll,
544
00:26:12,541 --> 00:26:16,777
the hacker instructed Rae
to unlock the window.
545
00:26:21,115 --> 00:26:23,283
Can you do that for me now?
546
00:26:23,285 --> 00:26:27,754
Yeah, okay, I can do that.
547
00:26:39,600 --> 00:26:42,369
Manipulating the most vulnerable
person in the house
548
00:26:42,371 --> 00:26:44,137
by using their
favorite toy--
549
00:26:44,139 --> 00:26:46,640
I mean, that...
that's frightening.
550
00:26:46,642 --> 00:26:47,741
How did the hacker do this?
551
00:26:47,743 --> 00:26:48,842
NELSON: Means the target
went after the doll.
552
00:26:48,844 --> 00:26:51,178
Through Wi-Fi.
This is war driving.
553
00:26:51,180 --> 00:26:52,646
The target parked outside
554
00:26:52,648 --> 00:26:54,147
the victim's home, spoofed
555
00:26:54,149 --> 00:26:56,950
the DHCP address of the router
to connect to the doll.
556
00:26:56,952 --> 00:26:59,786
RUSSELL: All right, so you guys figured
out how the hacker did it.
557
00:26:59,788 --> 00:27:01,621
So can we make use
of his handiwork
558
00:27:01,623 --> 00:27:03,757
to catch him?
Mm, that's a problem.
559
00:27:03,759 --> 00:27:06,059
The only digital dust left
by the target
560
00:27:06,061 --> 00:27:09,362
on Barrett's router is the MAC
address of his device he used.
561
00:27:09,364 --> 00:27:11,131
NELSON:
Yeah, which doesn't help much.
562
00:27:11,133 --> 00:27:13,767
It's very tough to find a device
that only has a MAC address.
563
00:27:13,769 --> 00:27:16,736
It's like having a fingerprint
that's not in a database.
564
00:27:16,738 --> 00:27:17,971
Well, maybe we can find him
565
00:27:17,973 --> 00:27:20,574
through his patterns
of life and behavior.
566
00:27:20,576 --> 00:27:22,476
What was the total value
of all the items
567
00:27:22,478 --> 00:27:23,810
stolen from the Barrett home?
568
00:27:23,812 --> 00:27:24,978
Less than 600 bucks.
569
00:27:24,980 --> 00:27:26,079
And the other houses?
570
00:27:26,081 --> 00:27:27,347
No more than
four grand total.
571
00:27:27,349 --> 00:27:30,484
Okay, that is a lot of
work for a little return.
572
00:27:30,486 --> 00:27:31,852
Doesn't make any sense
573
00:27:31,854 --> 00:27:34,354
when he's sitting on something
so much more valuable.
574
00:27:34,356 --> 00:27:35,755
Wait. What's that?
575
00:27:35,757 --> 00:27:37,757
Zero days. Two of 'em.
576
00:27:37,759 --> 00:27:38,892
RYAN:
One for P-TECH,
577
00:27:38,894 --> 00:27:40,193
and one for Marla Doll.
578
00:27:40,195 --> 00:27:42,696
They're worth at least
$200,000 each.
579
00:27:42,698 --> 00:27:45,198
Well, that's his endgame.
Money, money, money.
580
00:27:45,200 --> 00:27:47,267
Wait, wait, wait. I'm sorry.
How...how does that work?
581
00:27:47,269 --> 00:27:49,936
The companies will pay him
to stay quiet
582
00:27:49,938 --> 00:27:51,838
and to stop the intrusions.
583
00:27:51,840 --> 00:27:53,874
All right, but then
why would he risk
584
00:27:53,876 --> 00:27:56,776
entering a house to steal what,
like, four grand?
585
00:27:56,778 --> 00:27:59,746
He needs to prove the exploits
really work in order to collect.
586
00:27:59,748 --> 00:28:01,581
A hacker's real power
is behind the computer.
587
00:28:01,583 --> 00:28:05,151
They rarely risk exposure
in the real world,
588
00:28:05,153 --> 00:28:07,120
so it's highly unlikely
589
00:28:07,122 --> 00:28:09,489
that our hacker
would enter the Barrett home.
590
00:28:09,491 --> 00:28:11,825
RUSSELL: So, we're looking
for two people, right?
591
00:28:11,827 --> 00:28:13,159
Right.
Hacker and a thief.
592
00:28:13,161 --> 00:28:16,963
So, the hacker used the
Marla doll to case the house.
593
00:28:16,965 --> 00:28:19,132
What room are we in now?
594
00:28:19,134 --> 00:28:20,667
The living room.
595
00:28:20,669 --> 00:28:22,135
Let's count the windows.
596
00:28:22,137 --> 00:28:25,539
Okay. One, two, three.
597
00:28:25,541 --> 00:28:26,940
And took care
of the breaking part.
598
00:28:26,942 --> 00:28:28,441
Then he outsourced the entering.
599
00:28:28,443 --> 00:28:31,678
That's when your burglar came
through the unlocked window.
600
00:28:31,680 --> 00:28:33,813
Yeah, I don't imagine
our hacker was planning
601
00:28:33,815 --> 00:28:35,782
on being an accessory to murder.
602
00:28:35,784 --> 00:28:38,985
Well, he just made
a big mistake.
603
00:28:38,987 --> 00:28:40,787
(phone buzzing)
604
00:28:40,789 --> 00:28:42,489
I told you not to call me.
605
00:28:42,491 --> 00:28:44,291
I just want you to know
I took care of it.
606
00:28:44,293 --> 00:28:45,725
You're gonna get me caught.
607
00:28:46,460 --> 00:28:47,661
Hello?
608
00:28:47,663 --> 00:28:49,429
(scoffs)
609
00:28:49,431 --> 00:28:51,164
Damn.
610
00:28:51,166 --> 00:28:52,899
(engine starts)
611
00:29:03,661 --> 00:29:05,795
(siren blaring, horn toots)
612
00:29:05,797 --> 00:29:07,497
KRUMITZ:
Hey.
613
00:29:07,499 --> 00:29:09,332
So, we know the
location of the murder
614
00:29:09,334 --> 00:29:10,967
and the location
of the dump site.
615
00:29:10,969 --> 00:29:12,168
The killer traveled from
616
00:29:12,170 --> 00:29:14,371
Barrett's home
to the warehouse.
617
00:29:14,373 --> 00:29:15,805
And his phone would have pinged
any towers
618
00:29:15,807 --> 00:29:17,040
along that route.
619
00:29:17,042 --> 00:29:18,608
Well, he had a body
in the car, which means
620
00:29:18,610 --> 00:29:20,744
our killer would have taken
the most direct route
621
00:29:20,746 --> 00:29:23,046
to drop Scott Barrett's
body at the dump site.
622
00:29:23,048 --> 00:29:26,016
So, let's concentrate on the
towers and the most direct path.
623
00:29:26,018 --> 00:29:28,618
All right, here are
the phone numbers that have
624
00:29:28,620 --> 00:29:30,020
those towers in common.
625
00:29:30,022 --> 00:29:32,522
Based on the time of death
and our drive time,
626
00:29:32,524 --> 00:29:34,224
we can create a window
627
00:29:34,226 --> 00:29:36,860
after Barrett was murdered,
before the body dumped.
628
00:29:36,862 --> 00:29:38,595
Time stamp will help us
eliminate any phones
629
00:29:38,597 --> 00:29:40,597
traveling away
from the dump site.
630
00:29:40,599 --> 00:29:43,533
Okay, drumroll.
631
00:29:43,535 --> 00:29:46,836
All the phones that pinged
in that area and...
632
00:29:46,838 --> 00:29:48,171
the towers
they have in common.
633
00:29:48,173 --> 00:29:50,707
Let's see
who those numbers belong to.
634
00:29:50,709 --> 00:29:53,810
RAMIREZ: Hey, check out
Lonnie Swaine.
635
00:29:53,812 --> 00:29:55,145
He has a rap sheet
636
00:29:55,147 --> 00:29:57,247
and a little habit
of breaking and entering.
637
00:29:57,249 --> 00:30:00,383
Call Elijah, see if he can
track down Mr. Swaine.
638
00:30:00,385 --> 00:30:03,186
(beeping)
RYAN: Time for court?
639
00:30:03,188 --> 00:30:04,521
Call me.
640
00:30:13,898 --> 00:30:15,632
Lonnie Swaine, FBI.
641
00:30:18,169 --> 00:30:20,303
Moving into
this room.
642
00:30:20,305 --> 00:30:21,704
Clear.
643
00:30:23,541 --> 00:30:25,408
Clear!
644
00:30:25,410 --> 00:30:27,844
Follow me, check
the kitchen.
645
00:30:27,846 --> 00:30:29,546
(gurgling)
646
00:30:29,548 --> 00:30:32,415
Call the EMTs.
MAN: Yes, sir!
647
00:30:32,417 --> 00:30:34,184
(gurgling, gasping)
648
00:30:34,186 --> 00:30:36,719
(whirring)
649
00:30:44,161 --> 00:30:45,795
She was shaken and scared,
650
00:30:45,797 --> 00:30:47,997
and right away she told me
what she had done.
651
00:30:47,999 --> 00:30:50,066
MAN: And what did Francine
tell you happened?
652
00:30:50,068 --> 00:30:53,536
KRUMITZ:
She shot Taylor Pettis.
653
00:30:53,538 --> 00:30:55,138
Did she tell you why?
654
00:30:55,140 --> 00:30:56,706
He was stalking her.
655
00:30:56,708 --> 00:30:58,374
MAN:
The two of you had seen
656
00:30:58,376 --> 00:31:00,510
Taylor Pettis at a
diner the day before.
657
00:31:00,512 --> 00:31:01,711
Yes.
658
00:31:01,713 --> 00:31:03,947
Did she mention him
stalking her then?
659
00:31:03,949 --> 00:31:05,982
No.
660
00:31:05,984 --> 00:31:08,485
What do you do
for a living, Agent Krumitz?
661
00:31:08,487 --> 00:31:11,187
I'm an FBI cyber investigator.
662
00:31:11,189 --> 00:31:14,824
Which means, you understand
what a tower dump is?
663
00:31:14,826 --> 00:31:15,345
Yes.
664
00:31:15,369 --> 00:31:17,261
WOMAN: Your Honor, I fail
to see the relevance
665
00:31:17,262 --> 00:31:18,561
of this line of
questioning.
666
00:31:18,563 --> 00:31:19,696
It speaks
to the defendant's claim
667
00:31:19,698 --> 00:31:20,730
that she was being stalked.
668
00:31:20,732 --> 00:31:22,699
Answer the question,
Mr. Krumitz.
669
00:31:22,701 --> 00:31:24,467
It's information requested
670
00:31:24,469 --> 00:31:26,169
from service providers
that indicates
671
00:31:26,171 --> 00:31:28,271
the devices that connected
with a particular tower.
672
00:31:28,273 --> 00:31:30,039
And what does this
information include?
673
00:31:30,041 --> 00:31:32,275
Telephone numbers
and a time stamp indicating
674
00:31:32,277 --> 00:31:33,743
when the device
pinged the tower.
675
00:31:33,745 --> 00:31:36,346
Okay, so, if I was to show you
a time stamp
676
00:31:36,348 --> 00:31:38,948
from a cell phone that pinged
several towers within 30 seconds
677
00:31:38,950 --> 00:31:41,651
of another cell phone
pinging those same towers,
678
00:31:41,653 --> 00:31:44,220
what would you conclude?
679
00:31:44,222 --> 00:31:46,222
Well, most likely
the owner of the first phone
680
00:31:46,224 --> 00:31:47,053
was being followed by the owner
of the second.
681
00:31:47,077 --> 00:31:48,659
Perfect.
682
00:31:48,660 --> 00:31:50,493
So according to these
tower dump records,
683
00:31:50,495 --> 00:31:52,462
who would you conclude,
in this case,
684
00:31:52,464 --> 00:31:55,932
the owner of the
second phone is?
685
00:32:00,871 --> 00:32:02,739
Francine Krumitz.
686
00:32:02,741 --> 00:32:04,507
ATTORNEY:
Objection. Daniel Krumitz
687
00:32:04,509 --> 00:32:07,076
is not called as an expert
witness, and that information
688
00:32:07,078 --> 00:32:08,178
has not been entered
into evidence.
689
00:32:08,180 --> 00:32:11,214
In ten cases over just two days,
Objection!
690
00:32:11,216 --> 00:32:12,782
Francine Krumitz's cell phone pings a tower
Again, counselor's assuming
691
00:32:12,784 --> 00:32:14,484
after the victim's cell phone
facts not in evidence!
692
00:32:14,486 --> 00:32:16,753
pings the exact same tower.
You can't backdoor the use
693
00:32:16,755 --> 00:32:18,655
of these documents.
JUDGE: Objection overruled.
694
00:32:18,657 --> 00:32:21,057
Your Honor, please!
695
00:32:21,059 --> 00:32:24,294
Francine Krumitz... was stalking
696
00:32:24,296 --> 00:32:26,162
Taylor Pettis.
697
00:32:30,834 --> 00:32:33,036
KRUMITZ:
You lied to me.
698
00:32:34,538 --> 00:32:36,239
You are so selfish.
699
00:32:36,241 --> 00:32:38,942
Not for one moment did
you think about me.
700
00:32:38,944 --> 00:32:41,978
All I had was you, and
now I've lost that, too.
701
00:32:41,980 --> 00:32:44,547
Stop feeling sorry
for yourself, Daniel.
702
00:32:46,650 --> 00:32:48,318
Make me a promise...
703
00:32:48,320 --> 00:32:51,754
that when you walk out this door
you forget it all.
704
00:32:51,756 --> 00:32:55,124
Why are you saying this?
705
00:32:56,227 --> 00:32:58,461
I can't forget about you.
706
00:32:58,463 --> 00:33:00,230
Just move on, Daniel.
707
00:33:00,232 --> 00:33:01,864
No pity party.
708
00:33:01,866 --> 00:33:03,826
Promise me, Daniel.
709
00:33:03,827 --> 00:33:05,394
Just promise me you'll be happy.
710
00:33:05,395 --> 00:33:07,161
Please?
711
00:33:07,163 --> 00:33:10,031
Just... be happy.
712
00:33:15,237 --> 00:33:18,706
♪ ♪
713
00:33:18,708 --> 00:33:20,441
CHILD (echoing):
Come on, get back here!
714
00:33:20,443 --> 00:33:23,611
I'm gonna tell Mom!
715
00:33:23,613 --> 00:33:26,547
(echoed giggling)
716
00:33:34,456 --> 00:33:36,657
I promise.
717
00:33:50,324 --> 00:33:52,759
Found two cell phones
in a blender.
718
00:33:52,761 --> 00:33:55,328
One belonged to Lonnie,
the other one was a burner.
719
00:33:55,330 --> 00:33:56,563
Now, we think the burner
belonged to our target,
720
00:33:56,565 --> 00:33:57,530
ditched after
he stabbed Lonnie.
721
00:33:57,532 --> 00:33:58,732
And Nelson and Raven have
722
00:33:58,734 --> 00:34:00,600
separated all the pieces
and reconstructed
723
00:34:00,602 --> 00:34:01,534
both phones.
724
00:34:01,536 --> 00:34:02,969
Now, Lonnie does match
725
00:34:02,971 --> 00:34:05,038
the basic description
of Scott Barrett's attacker
726
00:34:05,040 --> 00:34:06,873
we pulled from the point cloud
image of the Game Vex.
727
00:34:06,875 --> 00:34:09,776
Five-ten, 165 pounds,
long hair.
728
00:34:09,778 --> 00:34:11,878
I'm not sure that'll get
us a court conviction.
729
00:34:11,880 --> 00:34:13,747
No. Lonnie's not talking,
despite the fact
730
00:34:13,749 --> 00:34:15,115
that he's clinging
to his life.
731
00:34:15,117 --> 00:34:16,683
The target knew
we were onto him.
732
00:34:16,685 --> 00:34:18,618
He attempted to kill Lonnie,
because if Lonnie
733
00:34:18,620 --> 00:34:19,797
hadn't murdered Scott Barrett,
734
00:34:19,821 --> 00:34:21,466
things would be
going along as planned.
735
00:34:21,467 --> 00:34:23,767
Here's what I don't understand.
Our hacker could've simply gone
736
00:34:23,768 --> 00:34:25,468
to the doll company
and to P-TECH
737
00:34:25,470 --> 00:34:27,570
after the first three burglaries
and cashed in.
738
00:34:27,572 --> 00:34:29,105
Both companies
would have dismissed him
739
00:34:29,107 --> 00:34:31,440
and used their own employees
to find the vulnerabilities.
740
00:34:31,442 --> 00:34:33,142
He had to keep
them scared.
741
00:34:33,144 --> 00:34:34,377
NELSON:
I got it! I know how
742
00:34:34,379 --> 00:34:37,146
to prove the burner was
our hacker's phone.
743
00:34:37,148 --> 00:34:39,982
There's no identifying info
on the burner.
744
00:34:39,984 --> 00:34:42,451
No texts, no contacts,
745
00:34:42,453 --> 00:34:44,320
no calendars-- all empty.
746
00:34:44,322 --> 00:34:46,489
But there was one database
bursting with info.
747
00:34:46,491 --> 00:34:49,025
MUNDO:
Motion processor data.
748
00:34:49,027 --> 00:34:50,760
Measures the
phone's movement.
749
00:34:51,228 --> 00:34:52,827
Like up and down,
left and right.
750
00:34:52,830 --> 00:34:54,296
NELSON:
And better than that,
751
00:34:54,298 --> 00:34:57,199
the chip is so sensitive that it records
even the tiny vibrations.
752
00:34:57,200 --> 00:34:58,399
So you're gonna tell us
753
00:34:58,401 --> 00:35:00,468
how these vibrations connect
to these numbers?
754
00:35:00,470 --> 00:35:02,604
Yeah, well, those numbers
represent our vibration,
755
00:35:02,606 --> 00:35:06,074
and each row of six numbers
is a single keystroke.
756
00:35:06,076 --> 00:35:08,109
The tiny movement of our burner,
and it has a rhythm.
757
00:35:08,111 --> 00:35:10,512
So, you know,
I channeled
758
00:35:10,514 --> 00:35:12,647
my inner Jedi and, uh,
759
00:35:12,649 --> 00:35:14,415
I found a pattern.
Looks like our target
760
00:35:14,417 --> 00:35:17,519
was doing something
that we do every day.
761
00:35:18,487 --> 00:35:20,021
He was typing.
762
00:35:20,023 --> 00:35:22,490
NELSON: Yep. The burner was sitting
right next to his laptop,
763
00:35:22,492 --> 00:35:24,259
inadvertently recording
vibrations as he typed.
764
00:35:24,261 --> 00:35:26,427
(buzzing)
765
00:35:26,429 --> 00:35:29,030
Are you really gonna tell us
you know what he was typing?
766
00:35:29,032 --> 00:35:30,365
Yes, indeed.
767
00:35:30,367 --> 00:35:31,766
Come here.
768
00:35:31,768 --> 00:35:34,602
See, I mapped the
position of every letter
769
00:35:34,604 --> 00:35:36,171
on the standard keyboard--
right or left,
770
00:35:36,173 --> 00:35:37,906
top to bottom--
which means there are
771
00:35:37,908 --> 00:35:40,375
corresponding letter positions
for every word in the online dictionary.
772
00:35:40,377 --> 00:35:44,245
MUNDO: Keystrokes become coordinates,
like locations on a map.
773
00:35:44,247 --> 00:35:45,413
NELSON:
Mm-hmm.
774
00:35:45,415 --> 00:35:47,515
And on a map, you get location;
on a keyboard,
775
00:35:47,517 --> 00:35:49,784
you get words.
RYAN: Wait, this is gonna tell us
776
00:35:49,786 --> 00:35:51,419
what our target was typing?
777
00:35:53,722 --> 00:35:56,958
MUNDO: I mean, Nelson, this is great,
but... unless the target
778
00:35:56,960 --> 00:35:59,394
I.D.'d himself to his victims,
I don't see how this helps.
779
00:35:59,396 --> 00:36:01,429
War driving takes a long time.
780
00:36:01,431 --> 00:36:02,830
He could've gotten bored,
781
00:36:02,832 --> 00:36:04,599
maybe went online.
He might have
782
00:36:04,601 --> 00:36:05,800
signed on
to his e-mail.
783
00:36:05,802 --> 00:36:06,868
Search for this.
784
00:36:06,870 --> 00:36:08,536
Top left, bottom right,
785
00:36:08,538 --> 00:36:11,072
bottom left,
top right, bottom right.
786
00:36:14,843 --> 00:36:16,878
You're looking
for an at and dot com.
787
00:36:18,447 --> 00:36:20,848
(beeping)
788
00:36:20,850 --> 00:36:22,183
And that's our hacker's
e-mail address.
789
00:36:22,185 --> 00:36:23,384
Nelson,
call the service provider.
790
00:36:23,386 --> 00:36:26,187
Let's get a location
on this guy.
791
00:36:26,189 --> 00:36:30,058
Whoever you are,
playtime is over.
792
00:36:30,060 --> 00:36:31,659
♪ ♪
793
00:36:31,661 --> 00:36:33,861
(sirens wailing)
794
00:36:34,930 --> 00:36:36,064
(tires squeal)
795
00:36:37,800 --> 00:36:40,335
(sirens approaching)
796
00:36:49,378 --> 00:36:50,912
(grunts)
Oh!
797
00:36:50,914 --> 00:36:52,880
Turn around.
Roll over, roll over.
798
00:36:52,882 --> 00:36:54,549
(groaning in pain)
799
00:36:54,551 --> 00:36:56,284
Give me your
other hand.
800
00:36:58,320 --> 00:37:00,088
This is gonna be fun.
801
00:37:00,090 --> 00:37:02,423
(siren wailing in distance)
(indistinct radio chatter)
802
00:37:02,425 --> 00:37:04,525
I was doing those
companies a favor.
803
00:37:04,527 --> 00:37:07,328
I exposed flaws
in their systems.
804
00:37:09,398 --> 00:37:11,566
Was it worth it?
805
00:37:16,972 --> 00:37:19,440
OFFICER:
Please stay in your home, ma'am.
806
00:37:23,679 --> 00:37:26,981
♪ ♪
807
00:37:26,983 --> 00:37:28,116
Mommy!
808
00:37:29,318 --> 00:37:30,918
Rae!
809
00:37:33,255 --> 00:37:35,290
♪ ♪
810
00:37:44,033 --> 00:37:46,968
♪ ♪
811
00:37:46,970 --> 00:37:49,170
(grunting)
812
00:37:53,642 --> 00:37:55,076
(loud grunt)
813
00:37:55,078 --> 00:37:57,512
♪ ♪
814
00:38:15,331 --> 00:38:17,598
♪ ♪
815
00:38:34,383 --> 00:38:36,651
♪ ♪
816
00:38:46,095 --> 00:38:49,130
Haven't seen you in a while.
Rough day?
817
00:38:50,165 --> 00:38:53,434
(sighs) The kind that needs
to end with a drink.
818
00:38:53,436 --> 00:38:54,902
Huh. You don't really strike me
819
00:38:54,904 --> 00:38:57,905
as the kind of guy that drinks
to escape his problems.
820
00:38:57,907 --> 00:39:00,108
Can't escape
this one.
821
00:39:00,110 --> 00:39:02,343
My dad has cancer.
822
00:39:02,345 --> 00:39:05,847
He's refusing treatment.
823
00:39:05,849 --> 00:39:07,715
(exhales)
824
00:39:08,984 --> 00:39:11,419
This is weird-- you're
the first person I've talked to
825
00:39:11,421 --> 00:39:13,054
about any of this.
826
00:39:13,889 --> 00:39:16,090
I know how hard it is.
827
00:39:17,426 --> 00:39:20,061
Sometimes it's easier
to talk to a stranger.
828
00:39:20,063 --> 00:39:22,330
♪ ♪
829
00:39:45,220 --> 00:39:47,522
(soft whirring)
830
00:39:54,797 --> 00:39:56,464
(beep)
831
00:39:56,466 --> 00:39:58,399
Not bad, huh?
832
00:39:58,401 --> 00:39:59,901
Are you showing off?
833
00:39:59,903 --> 00:40:01,436
Yeah, a little bit.
834
00:40:02,271 --> 00:40:04,272
What are you doing
out here?
835
00:40:04,274 --> 00:40:06,607
Are you still debating
whether or not to take
836
00:40:06,609 --> 00:40:08,843
the deputy director job?
837
00:40:08,845 --> 00:40:10,545
No, I'm not taking it.
838
00:40:10,547 --> 00:40:12,647
Really? Why not?
839
00:40:14,750 --> 00:40:18,753
Python. He's the most dangerous
drug dealer on the Deep Web.
840
00:40:18,755 --> 00:40:21,589
He's implicated in six murders;
I'm gonna catch him.
841
00:40:21,591 --> 00:40:25,326
And you can't unless
you're out in the field, right?
842
00:40:25,328 --> 00:40:27,462
Right.
Okay.
843
00:40:27,464 --> 00:40:29,096
Aren't you afraid
they're gonna bring
844
00:40:29,098 --> 00:40:30,998
some stuffy suit above you?
845
00:40:31,000 --> 00:40:32,867
I don't think
they can afford it.
846
00:40:32,869 --> 00:40:35,670
I spent the last of their budget
on your new lab.
847
00:40:35,672 --> 00:40:37,205
(both laugh)
848
00:40:37,207 --> 00:40:39,974
Well, I thank you.
849
00:40:39,976 --> 00:40:42,009
I thank you for all of it.
850
00:40:42,011 --> 00:40:44,212
I can't tell you how much I...
851
00:40:44,214 --> 00:40:47,515
appreciate having
a new chapter in my life.
852
00:40:47,517 --> 00:40:48,883
Oh.
853
00:40:49,785 --> 00:40:51,853
Now, how does
this thing work?
854
00:40:51,855 --> 00:40:53,788
(whirring)
855
00:40:53,790 --> 00:40:56,023
You ever flown
one of these before?
856
00:40:56,025 --> 00:40:57,258
No.
857
00:40:57,260 --> 00:40:59,026
Aah!
858
00:40:59,028 --> 00:41:00,661
(groans)
Wait.
859
00:41:00,663 --> 00:41:04,599
Uh, just tell me how
do I make it stop.
860
00:41:06,401 --> 00:41:07,802
I don't know.
861
00:41:07,804 --> 00:41:09,170
You broke it.
862
00:41:09,172 --> 00:41:11,205
(laughs)
I didn't break it.
863
00:41:11,207 --> 00:41:12,907
Yeah, you did. I...
864
00:41:12,909 --> 00:41:15,243
It's heading
towards the Capitol.
865
00:41:15,245 --> 00:41:16,944
(laughing)
It's...
866
00:41:16,946 --> 00:41:18,412
Ah. Good luck.
867
00:41:18,414 --> 00:41:20,374
Well, now, don't...
I've got to call the Pentagon.
868
00:41:21,860 --> 00:41:28,360
== sync, corrected by elderman ==
@elder_man