Would you like to inspect the original subtitles? These are the user uploaded subtitles that are being translated:
1
00:00:01,690 --> 00:00:02,700
My name is Avery Ryan.
2
00:00:02,720 --> 00:00:04,220
I was a victim of cyber crime.
3
00:00:04,250 --> 00:00:06,690
Like you, I posted
on social media,
4
00:00:06,720 --> 00:00:09,530
checked my bank account
balance online,
5
00:00:09,560 --> 00:00:11,530
even kept
the confidential files
6
00:00:11,560 --> 00:00:13,730
of my psychological practice
on my computer.
7
00:00:15,570 --> 00:00:18,480
Then I was hacked,
and as a result,
8
00:00:18,500 --> 00:00:20,840
one of my patients
was murdered.
9
00:00:20,870 --> 00:00:23,470
My investigation into her death
led me to the FBI,
10
00:00:23,510 --> 00:00:26,280
where I joined a team
of cyber experts
11
00:00:26,310 --> 00:00:29,180
to wage a war against
a new breed of criminal
12
00:00:29,210 --> 00:00:32,220
hiding on the Deep Web...
13
00:00:32,250 --> 00:00:35,250
infiltrating our daily lives
in ways we never imagined...
14
00:00:36,820 --> 00:00:38,790
...faceless...
15
00:00:38,820 --> 00:00:41,190
nameless...
16
00:00:41,230 --> 00:00:42,800
lurking inside our devices,
17
00:00:42,830 --> 00:00:45,430
just a keystroke away.
18
00:00:57,910 --> 00:01:00,380
KRUMITZ: We got another one.
NELSON:
That's four and counting.
19
00:01:00,410 --> 00:01:01,640
What the hell
is going on up there?
20
00:01:01,680 --> 00:01:02,810
Hold on. Yes, I'm still here.
21
00:01:02,850 --> 00:01:06,280
FAA has confirmed Wi-Fi is down
on four domestic flights,
22
00:01:06,320 --> 00:01:07,780
all Monument Air.
23
00:01:07,820 --> 00:01:08,880
Do they know why
this is happening?
24
00:01:08,920 --> 00:01:09,850
They're still looking into it.
25
00:01:09,890 --> 00:01:11,820
All right, I just spoke
to Liftoff Wireless.
26
00:01:11,860 --> 00:01:13,500
They've been trying to restore
in-flight Internet access
27
00:01:13,520 --> 00:01:14,820
on the planes,
but something is blocking them.
28
00:01:14,860 --> 00:01:15,760
I'm here. Go.
29
00:01:15,790 --> 00:01:16,790
Uh, we got a fifth.
30
00:01:16,830 --> 00:01:17,890
No, no, make it six.
31
00:01:17,930 --> 00:01:19,800
Same as the others.
32
00:01:19,830 --> 00:01:22,370
All Monument Air. Looks like
some type of coordinated attack.
33
00:01:22,400 --> 00:01:23,430
RYAN:
DHS is operating
34
00:01:23,470 --> 00:01:24,800
at National Threat Level Yellow.
35
00:01:24,830 --> 00:01:26,340
It hasn't jumped to orange yet.
36
00:01:26,370 --> 00:01:27,900
Shouldn't we call
the president or someone?
37
00:01:27,940 --> 00:01:29,240
I mean, we're talking planes.
38
00:01:29,270 --> 00:01:30,370
SIFTER:
Yeah, which is exactly why
39
00:01:30,410 --> 00:01:31,670
we don't jump to conclusions.
40
00:01:31,710 --> 00:01:32,780
We got to have some facts
41
00:01:32,810 --> 00:01:34,640
before we suggest they start
upping the threat level.
42
00:01:34,680 --> 00:01:36,150
No reports
of instrument malfunction.
43
00:01:36,180 --> 00:01:37,510
Pilots are still able
to communicate
44
00:01:37,550 --> 00:01:39,220
with the control tower.
Undercover air marshals
45
00:01:39,250 --> 00:01:41,450
haven't detected any unusual
activity either.
46
00:01:41,490 --> 00:01:43,200
What time did the Wi-Fi
go down on those flights?
47
00:01:43,220 --> 00:01:44,490
Ten minutes after takeoff.
48
00:01:44,520 --> 00:01:46,360
All right, that means
they were above 10,000 feet.
49
00:01:46,390 --> 00:01:48,560
That's when the passengers
on Monument Air can connect
50
00:01:48,590 --> 00:01:50,630
their electronic devices to
the in-flight wireless network.
51
00:01:50,660 --> 00:01:51,690
Got another one.
52
00:01:51,730 --> 00:01:52,860
Seven.
53
00:01:52,900 --> 00:01:54,860
MUNDO:
Eight.
54
00:01:54,900 --> 00:01:56,300
Nine.
SIFTER:
What the hell is this?
55
00:01:56,330 --> 00:01:58,800
Okay, okay.
What is it, Krumitz?
56
00:01:58,840 --> 00:02:00,510
Liftoff Wireless' server logs
57
00:02:00,540 --> 00:02:01,940
show only one phone
on each plane
58
00:02:01,970 --> 00:02:03,910
connected to the router and
caused Wi-Fi to go down.
59
00:02:03,940 --> 00:02:05,270
RYAN:
That means nine passengers
60
00:02:05,310 --> 00:02:07,210
on nine flights
shut off the Wi-Fi
61
00:02:07,240 --> 00:02:08,580
from within the plane?
62
00:02:08,610 --> 00:02:10,210
Sounds like
a coordinated attack to me.
63
00:02:10,250 --> 00:02:11,850
Think all nine passengers
are working together?
64
00:02:11,880 --> 00:02:14,880
Nelson, pull up
the flight routes.
65
00:02:15,890 --> 00:02:17,800
The destination cities
are all different,
66
00:02:17,820 --> 00:02:18,920
but they all originated
67
00:02:18,960 --> 00:02:21,330
from Miami International.
68
00:02:21,360 --> 00:02:22,930
I'm calling Homeland Security.
69
00:02:22,960 --> 00:02:24,430
Secretary McKnight,
this is Simon Sifter,
70
00:02:24,460 --> 00:02:25,890
Cyber Crime Division.
71
00:02:25,930 --> 00:02:27,830
We've got a potential
national security threat.
72
00:02:27,860 --> 00:02:30,600
I'm requesting
that you immediately ground
73
00:02:30,630 --> 00:02:32,500
all Monument Air flights.
74
00:02:32,540 --> 00:02:33,900
Yes, I am sure.
As you know,
75
00:02:33,940 --> 00:02:35,800
shutting down
passenger communication
76
00:02:35,840 --> 00:02:37,940
is a possible precursor
to hijacking.
77
00:02:37,970 --> 00:02:39,940
I would like
all these flights redirected
78
00:02:39,980 --> 00:02:41,810
to their nearest airports.
79
00:02:41,850 --> 00:02:42,990
Monument Air Flight 417
80
00:02:43,010 --> 00:02:45,350
is 300 miles outside of Miami.
81
00:02:45,380 --> 00:02:47,680
That's the closest
and easiest to send back.
82
00:02:47,720 --> 00:02:49,690
All right, I'll have that flight
routed back to Miami.
83
00:02:49,720 --> 00:02:52,220
Krumitz, can you tell
specifically which phone
84
00:02:52,260 --> 00:02:54,590
or passenger shut down
the Wi-Fi?
I...
85
00:02:54,620 --> 00:02:55,920
I mean, it's gonna
take some time,
86
00:02:55,960 --> 00:02:57,290
but yeah.
RYAN:
Okay.
87
00:02:57,330 --> 00:02:58,590
We need the names
and the seat numbers
88
00:02:58,630 --> 00:03:00,600
for those passengers
with the phones,
89
00:03:00,630 --> 00:03:01,900
and we need them now.
90
00:03:01,930 --> 00:03:02,870
Let's go, Elijah.
91
00:03:02,900 --> 00:03:04,900
Nelson.
92
00:03:08,810 --> 00:03:11,950
*
93
00:03:14,710 --> 00:03:16,910
Okay, all right,
all right, got it.
94
00:03:16,950 --> 00:03:18,510
All right, thanks, Krummy.
95
00:03:18,550 --> 00:03:20,980
Okay, target's sitting
in 14C.
96
00:03:21,020 --> 00:03:22,990
Plane is taxiing
to the gate right now.
97
00:03:23,020 --> 00:03:24,420
Good, what about
the other flights?
98
00:03:24,450 --> 00:03:25,790
Great.
99
00:03:25,820 --> 00:03:27,590
Local Feds are detaining
the eight suspects
100
00:03:27,620 --> 00:03:29,890
in the other cities now.
101
00:03:36,570 --> 00:03:37,800
I-I just left for vacation.
102
00:03:37,830 --> 00:03:39,700
Someone needs to tell me
what this is about.
103
00:03:42,470 --> 00:03:43,810
Can you please call my husband?
104
00:03:43,840 --> 00:03:45,740
This is crazy.
105
00:04:10,030 --> 00:04:12,370
Excuse me. Excuse me.
106
00:04:13,000 --> 00:04:16,310
Take your headphones
out, please.
107
00:04:17,670 --> 00:04:18,810
How old are you?
108
00:04:18,840 --> 00:04:20,480
16.
Have you been sitting there
109
00:04:20,510 --> 00:04:22,750
the whole flight?
Yeah. Why?
110
00:04:22,780 --> 00:04:24,650
Cuff her.
111
00:04:24,680 --> 00:04:26,720
What did I do?
What's going on?
112
00:04:26,750 --> 00:04:28,980
Stand up, place your hands
behind your back, please.
113
00:04:36,690 --> 00:04:38,060
Willa?
114
00:04:40,600 --> 00:04:41,660
Dad!
115
00:04:41,700 --> 00:04:42,870
They won't let me leave.
116
00:04:43,630 --> 00:04:45,030
What's going on here?
117
00:04:45,970 --> 00:04:47,100
My daughter was going to visit
118
00:04:47,140 --> 00:04:48,640
family in San Diego.
119
00:04:48,670 --> 00:04:50,770
I don't get it.
Are you saying she's a suspect?
120
00:04:50,810 --> 00:04:53,080
We're just trying to understand
what happened here, Mr. Hart.
121
00:04:53,110 --> 00:04:55,980
Someone hacked
into the plane's router.
122
00:04:56,010 --> 00:04:57,010
We traced that intrusion
123
00:04:57,050 --> 00:04:58,380
back to Willa's phone.
124
00:04:58,420 --> 00:04:59,660
What?
125
00:04:59,680 --> 00:05:00,620
I mean, how is that possible?
126
00:05:00,650 --> 00:05:02,750
Her cell phone serial number was
the last one
127
00:05:02,790 --> 00:05:06,020
that logged on to the onboard
router before it crashed.
128
00:05:06,060 --> 00:05:09,100
We ran that number through
every cell carrier's database
129
00:05:09,130 --> 00:05:10,140
till it spit out a name.
130
00:05:10,160 --> 00:05:11,090
Willa's name?
131
00:05:11,130 --> 00:05:12,930
We matched that name
to the flight manifest.
132
00:05:12,960 --> 00:05:14,030
It gave us a seat number.
133
00:05:14,060 --> 00:05:15,600
Willa,
134
00:05:15,630 --> 00:05:17,100
did you leave
your phone anywhere?
135
00:05:17,130 --> 00:05:19,000
Did you bump your device
with anyone?
136
00:05:19,040 --> 00:05:21,450
Did you text
or download anything?
137
00:05:22,810 --> 00:05:24,510
Go ahead, sweetheart.
Just answer
138
00:05:24,540 --> 00:05:25,810
her questions.
139
00:05:25,840 --> 00:05:26,940
I texted some friends,
140
00:05:26,980 --> 00:05:28,010
but I do that all the time.
141
00:05:28,040 --> 00:05:30,810
I was just listening to music
and playing Dots.
142
00:05:30,850 --> 00:05:32,110
Hmm.
143
00:05:33,820 --> 00:05:35,080
What's he doing?
144
00:05:35,120 --> 00:05:37,450
Imaging your phone,
making a duplicate copy
145
00:05:37,490 --> 00:05:40,120
of your device to determine
what killed the Wi-Fi.
146
00:05:40,160 --> 00:05:41,490
Can I have it back?
147
00:05:43,030 --> 00:05:44,890
Once we're done with it.
Right now I want you to tell me
148
00:05:44,930 --> 00:05:48,100
everything that happened
before your flight took off.
149
00:05:48,130 --> 00:05:51,400
My dad dropped me
at the curb.
150
00:05:51,440 --> 00:05:52,750
I checked my bag,
151
00:05:52,770 --> 00:05:54,670
went through security,
152
00:05:54,700 --> 00:05:56,570
had a smoothie.
153
00:05:56,610 --> 00:05:58,710
I bought it at Mango Mel's.
154
00:05:58,740 --> 00:06:01,480
And then I waited at the gate
for my flight.
155
00:06:01,510 --> 00:06:03,710
Does the name Audrey Monroe
156
00:06:03,750 --> 00:06:06,880
mean anything to you?
157
00:06:06,920 --> 00:06:08,120
How about Ken Galvin?
158
00:06:09,120 --> 00:06:11,090
Margaret Sloane?
159
00:06:11,120 --> 00:06:12,920
What do they have to do
with Willa?
160
00:06:12,960 --> 00:06:15,120
Your daughter's phone's not the
only one that cut off the Wi-Fi.
161
00:06:15,160 --> 00:06:16,630
It happened
on eight other flights.
162
00:06:16,660 --> 00:06:17,790
Lee Yang?
163
00:06:17,830 --> 00:06:19,500
Jason Hawking?
164
00:06:19,530 --> 00:06:20,800
I don't know
any of these people.
165
00:06:20,830 --> 00:06:21,960
Well, it's clear to me,
and it should be to you,
166
00:06:22,000 --> 00:06:25,000
that my daughter didn't have
anything to do with this.
167
00:06:25,030 --> 00:06:26,670
She's just a kid.
168
00:06:26,700 --> 00:06:28,170
Mr. Hart, in my line of work,
169
00:06:28,200 --> 00:06:30,910
"just a kid"
doesn't mean anything.
170
00:06:34,110 --> 00:06:36,110
Hey, yo, E.
171
00:06:36,150 --> 00:06:37,890
It's getting ugly
over there, man.
172
00:06:37,910 --> 00:06:39,820
Yeah, well,
their flight's been grounded
173
00:06:39,850 --> 00:06:41,150
and they haven't been given
an explanation.
174
00:06:41,180 --> 00:06:42,490
You'd be angry, too.
175
00:06:42,520 --> 00:06:44,590
Well, you're right.
176
00:06:44,620 --> 00:06:47,120
So, I ran diagnostics
on the plane's router.
177
00:06:47,160 --> 00:06:49,730
One device overloaded
the entire system.
178
00:06:49,760 --> 00:06:51,630
It was
a denial-of-service attack.
179
00:06:51,660 --> 00:06:53,230
PILOT:
Ladies and gentlemen,
180
00:06:53,260 --> 00:06:56,670
at this time,
Liftoff Wireless' Wi-Fi service
181
00:06:56,700 --> 00:06:58,900
is available
at a charge of $9.99
182
00:06:58,940 --> 00:07:00,250
for the duration of the flight.
183
00:07:00,270 --> 00:07:02,200
Thank you.
184
00:07:02,240 --> 00:07:04,240
NELSON:
Willa's phone prevented
any other passenger's device
185
00:07:04,270 --> 00:07:05,610
from connecting to the Wi-Fi.
186
00:07:09,950 --> 00:07:12,150
Phones aren't supposed to send
that many data packets at once.
187
00:07:12,180 --> 00:07:13,220
Yeah, unless a hacker
188
00:07:13,250 --> 00:07:14,780
with some skills worked
their magic.
189
00:07:14,820 --> 00:07:15,850
Uh-huh.
190
00:07:15,890 --> 00:07:17,160
I'll go ahead and unplug
the router from the plane.
191
00:07:17,190 --> 00:07:18,250
I'll send it back to CTOC.
192
00:07:18,290 --> 00:07:20,220
Do that.
All right.
193
00:07:20,260 --> 00:07:22,160
Anything from
our FBI field teams?
194
00:07:22,190 --> 00:07:23,590
SIFTER:
Well, they've interrogated
195
00:07:23,630 --> 00:07:25,030
the other eight suspects.
196
00:07:25,060 --> 00:07:26,630
They're all
from different cities.
197
00:07:26,660 --> 00:07:28,160
They span multiple generations,
198
00:07:28,200 --> 00:07:30,930
and they've all got
varying levels of technology,
199
00:07:30,970 --> 00:07:33,800
and they all allege
they have no idea what happened.
200
00:07:33,840 --> 00:07:35,240
Willa Hart said the same thing.
201
00:07:35,270 --> 00:07:36,910
She has no clue
what's going on.
202
00:07:36,940 --> 00:07:37,970
Field teams confiscated
203
00:07:38,010 --> 00:07:39,270
our suspects' phones.
204
00:07:39,310 --> 00:07:40,240
They're imaging them now.
205
00:07:40,280 --> 00:07:41,540
Data should be here any minute.
206
00:07:41,580 --> 00:07:43,750
So, Avery, I've made
a lot of moves here.
207
00:07:43,780 --> 00:07:45,250
There are gonna be
a lot of questions.
208
00:07:45,280 --> 00:07:47,180
So, from your end,
what does this look like?
209
00:07:47,220 --> 00:07:48,980
I'm not sure yet,
210
00:07:49,020 --> 00:07:51,090
but I'm not willing
to give up on the idea
211
00:07:51,120 --> 00:07:52,120
that these people are connected.
212
00:07:52,160 --> 00:07:53,800
(register dings)
213
00:07:53,820 --> 00:07:55,260
I'm sorry, ma'am,
this one didn't work either.
214
00:07:55,290 --> 00:07:57,190
Two of my credit cards
have been declined?
215
00:07:57,230 --> 00:07:59,060
That's impossible.
216
00:07:59,100 --> 00:08:00,210
No, I didn't buy ten laptops.
217
00:08:00,230 --> 00:08:01,700
I don't even shop
at that store.
218
00:08:01,730 --> 00:08:04,630
(phones ringing,
overlapping chatter)
219
00:08:06,570 --> 00:08:07,600
Avery, what's happening?
220
00:08:07,640 --> 00:08:08,640
I'm not sure yet. Hold on.
221
00:08:08,670 --> 00:08:09,870
Let me flip view.
222
00:08:09,910 --> 00:08:11,310
(ringing, chattering)
223
00:08:11,340 --> 00:08:13,140
It suddenly just got
very noisy in here.
224
00:08:13,180 --> 00:08:14,680
Yeah, my credit card's
been denied.
225
00:08:14,710 --> 00:08:16,550
What do you mean you don't
know what's going on?
226
00:08:16,580 --> 00:08:17,880
It happened on your plane.
227
00:08:20,950 --> 00:08:23,220
Are you seeing this?
228
00:08:23,250 --> 00:08:25,250
MAN:
All of my credit cards
229
00:08:25,290 --> 00:08:26,090
cannot be maxed out.
How is that even possible?
230
00:08:26,120 --> 00:08:28,560
All of these people
were passengers
231
00:08:28,590 --> 00:08:31,030
on Willa Hart's flight.
232
00:08:31,060 --> 00:08:32,060
Simon,
233
00:08:32,100 --> 00:08:34,340
I know what this is.
234
00:08:34,360 --> 00:08:36,200
This is a credit card heist.
235
00:08:36,230 --> 00:08:38,700
Dozens of people
who got off that plane
236
00:08:38,740 --> 00:08:40,110
are starting to receive alerts
237
00:08:40,140 --> 00:08:41,670
that their credit cards
have been frozen.
238
00:08:41,710 --> 00:08:43,080
Someone stole their information.
239
00:08:43,110 --> 00:08:45,310
That's it, that's it, that's it.
240
00:08:45,340 --> 00:08:46,370
'Cause a plane
241
00:08:46,410 --> 00:08:48,880
is the one place where people
are held captive.
242
00:08:48,910 --> 00:08:50,280
You can't connect
243
00:08:50,310 --> 00:08:53,850
to the rest of the world
if the Wi-Fi is down.
244
00:08:53,880 --> 00:08:56,120
The passengers wouldn't even
know that they'd been robbed
245
00:08:56,150 --> 00:08:58,250
till they got off the plane
and connected to the Internet.
246
00:08:58,290 --> 00:08:59,320
I don't believe this.
247
00:08:59,360 --> 00:09:01,630
What?
This can't be right.
248
00:09:01,660 --> 00:09:03,030
I've seen this before.
249
00:09:03,060 --> 00:09:04,960
There it is again and again.
250
00:09:04,990 --> 00:09:06,190
He uses
a unique signature
251
00:09:06,230 --> 00:09:07,630
when writing code.
252
00:09:07,660 --> 00:09:08,630
He?
253
00:09:08,670 --> 00:09:09,710
What is it, Krumitz?
254
00:09:09,730 --> 00:09:11,300
I know who did it.
255
00:09:12,300 --> 00:09:13,800
Lomis.
256
00:09:13,840 --> 00:09:15,140
Lomis is behind this,
257
00:09:15,170 --> 00:09:17,170
and it's just the beginning.
258
00:09:21,750 --> 00:09:27,890
* I know you've deceived me,
now here's a surprise *
259
00:09:29,820 --> 00:09:35,360
* I know that you have, 'cause
there's magic in my eyes *
260
00:09:35,390 --> 00:09:39,730
* I can see
for miles and miles *
261
00:09:39,760 --> 00:09:43,070
* I can see for miles
and miles *
262
00:09:43,100 --> 00:09:47,640
* I can see
for miles and miles *
263
00:09:47,670 --> 00:09:51,110
* And miles...
264
00:09:51,140 --> 00:09:53,640
* Oh, yeah.
265
00:10:05,890 --> 00:10:07,890
I can't believe
this is Lomis.
266
00:10:07,920 --> 00:10:09,860
He's like a hacker legend.
267
00:10:09,890 --> 00:10:12,260
Came out of nowhere
a few years back.
268
00:10:12,300 --> 00:10:15,170
Now, they say he's in his 30s,
good-looking,
269
00:10:15,200 --> 00:10:16,360
comes from Estonia.
270
00:10:16,400 --> 00:10:18,330
Sounds like
a little hacker envy, Nelson.
271
00:10:18,370 --> 00:10:19,330
No. (chuckles)
272
00:10:19,370 --> 00:10:20,740
Look, it's admiration.
273
00:10:20,770 --> 00:10:22,070
Lomis lives up to his name.
274
00:10:22,110 --> 00:10:23,850
It's leetspeak
for "low missile."
275
00:10:23,870 --> 00:10:24,940
Flies under the radar.
276
00:10:24,970 --> 00:10:26,110
He's only surfaced twice.
277
00:10:26,140 --> 00:10:29,040
Both times at DefCon in Vegas.
278
00:10:29,080 --> 00:10:29,910
That's it.
279
00:10:29,950 --> 00:10:32,380
All right, over $400,000
have been stolen
280
00:10:32,420 --> 00:10:34,260
in our credit card scam
and over 300 people
281
00:10:34,280 --> 00:10:35,820
have reported theft.
282
00:10:35,850 --> 00:10:36,950
There's no telling
283
00:10:36,990 --> 00:10:39,420
when this is gonna end.
284
00:10:39,460 --> 00:10:41,470
(Nelson whoops)
285
00:10:41,490 --> 00:10:42,890
NELSON:
See?
286
00:10:42,930 --> 00:10:45,990
Now that's what I call
traveling in style.
287
00:10:46,030 --> 00:10:48,830
RYAN: Sifter has connections
with the Coast Guard,
288
00:10:48,870 --> 00:10:51,910
so Krumitz gets a free escort
from D.C. to Miami.
289
00:11:06,050 --> 00:11:07,450
NELSON:
Nice ride, bro!
290
00:11:07,480 --> 00:11:09,350
It's the only
way to fly!
291
00:11:11,390 --> 00:11:14,120
Krumitz, you're sure
this is Lomis?
292
00:11:14,160 --> 00:11:16,360
Every bone in my body
says I'm right.
293
00:11:16,390 --> 00:11:17,960
This is how
he works.
294
00:11:17,990 --> 00:11:19,860
When the Wi-Fi intrusion
on the planes
295
00:11:19,900 --> 00:11:22,030
connected to the credit cards,
I knew it was him.
296
00:11:22,070 --> 00:11:23,340
Sounds like a hunch.
297
00:11:23,370 --> 00:11:25,000
And your obsession
with catching a guy
298
00:11:25,030 --> 00:11:26,300
you've been chasing
for the last three years.
299
00:11:27,040 --> 00:11:29,170
But it's not.
300
00:11:29,210 --> 00:11:31,020
Before I left CTOC,
301
00:11:31,040 --> 00:11:32,140
I found a connection
302
00:11:32,180 --> 00:11:34,450
between the nine suspects
and Lomis.
303
00:11:34,480 --> 00:11:36,110
I discovered a malicious script
304
00:11:36,150 --> 00:11:38,320
buried deep in
the nine suspects' phones.
305
00:11:38,350 --> 00:11:40,150
The code exploited
a vulnerability
306
00:11:40,180 --> 00:11:41,320
in the operating system.
307
00:11:41,350 --> 00:11:44,190
(beeping)
308
00:11:44,220 --> 00:11:45,820
NELSON:
Yeah, that's his signature.
309
00:11:45,860 --> 00:11:48,230
A custom code that gains
complete control over the OS
310
00:11:48,260 --> 00:11:51,030
and suffocates the security
features like a boa constrictor.
311
00:11:51,060 --> 00:11:52,260
Means he can do
whatever he wants
312
00:11:52,300 --> 00:11:53,870
with any of the phones...
313
00:11:55,400 --> 00:11:56,930
...steal your identity,
314
00:11:56,970 --> 00:11:58,030
access personal info,
315
00:11:58,070 --> 00:11:59,400
even attach malware.
316
00:11:59,440 --> 00:12:00,980
It doesn't make
sense, though.
317
00:12:01,000 --> 00:12:02,170
I mean, in the past,
318
00:12:02,210 --> 00:12:03,480
Lomis robbed a New
York hedge fund,
319
00:12:03,510 --> 00:12:04,540
the payroll
320
00:12:04,570 --> 00:12:06,070
at San Francisco PD,
321
00:12:06,110 --> 00:12:07,440
even went after
an NHL team.
322
00:12:07,480 --> 00:12:09,310
Now this?
RYAN:
You're right. Credit cards
323
00:12:09,350 --> 00:12:13,030
and planes doesn't really fit
his behavioral profile.
324
00:12:13,050 --> 00:12:14,150
It's not what he does.
325
00:12:14,180 --> 00:12:15,420
It's how he does it.
326
00:12:15,450 --> 00:12:17,990
He starts with creating chaos
327
00:12:18,020 --> 00:12:19,320
and it grows
into something bigger.
328
00:12:19,360 --> 00:12:21,070
That's what this is.
MUNDO:
If Lomis is the one behind
329
00:12:21,090 --> 00:12:22,790
this credit
card heist,
330
00:12:22,830 --> 00:12:24,060
it means that none of our
nine suspects even knew
331
00:12:24,090 --> 00:12:25,190
the suspicious script
was on their phones.
332
00:12:25,230 --> 00:12:27,930
Means Willa Hart and the rest
of the eight passengers
333
00:12:27,960 --> 00:12:29,000
are all victims.
334
00:12:29,030 --> 00:12:30,230
Call the FBI field teams,
335
00:12:30,270 --> 00:12:31,500
have everyone we've
been holding released.
336
00:12:31,530 --> 00:12:32,500
Nelson...
Yes?
337
00:12:32,540 --> 00:12:33,850
Follow the credit card trail.
338
00:12:33,870 --> 00:12:35,140
Look for any purchases
that stand out.
339
00:12:35,170 --> 00:12:36,140
Okay.
340
00:12:36,170 --> 00:12:38,140
Krumitz, check for the code
341
00:12:38,170 --> 00:12:40,440
Lomis placed on the rest of
the victims' cell phones.
342
00:12:40,480 --> 00:12:42,180
We're about to catch
a white whale.
343
00:12:43,210 --> 00:12:44,580
No, that's done.
344
00:12:44,610 --> 00:12:46,380
We alerted
the credit card companies
345
00:12:46,420 --> 00:12:48,430
and it should be
a day or two, and ...
346
00:12:48,450 --> 00:12:49,890
Yeah-- hey, Mike.
347
00:12:49,920 --> 00:12:51,890
Gotta call you back.
Thanks.
348
00:12:51,920 --> 00:12:55,120
Colin, I haven't had a chance
to congratulate you
349
00:12:55,160 --> 00:12:56,420
on your
promotion yet.
350
00:12:56,460 --> 00:12:58,130
Deputy director.
That's-that's big.
351
00:12:58,160 --> 00:12:59,930
Thank you, Simon, but I'm not
here to talk about that.
352
00:12:59,960 --> 00:13:02,560
The director just
called me to ask
353
00:13:02,600 --> 00:13:05,370
why you grounded all Monument
Air flights out of Miami.
354
00:13:05,400 --> 00:13:06,940
I managed to support
your decision,
355
00:13:06,970 --> 00:13:09,200
despite the fact that I
knew nothing about it.
356
00:13:09,240 --> 00:13:10,440
You should have
brought me up to speed.
357
00:13:10,470 --> 00:13:12,370
There was no time
to bring you up to speed.
358
00:13:12,410 --> 00:13:14,980
Cyber crime
moves fast here, Colin.
359
00:13:15,010 --> 00:13:17,150
Regardless, you should have
consulted me first.
360
00:13:18,920 --> 00:13:21,190
Look, I-I've always
had the authority
361
00:13:21,220 --> 00:13:22,890
to kind of run my own division.
362
00:13:22,920 --> 00:13:25,220
Wait, are you... you telling me
the rules have changed?
363
00:13:25,250 --> 00:13:28,090
I'm telling you
I should have been told.
364
00:13:28,120 --> 00:13:29,290
I don't want to lose sleep
365
00:13:29,330 --> 00:13:30,470
worrying if you're gonna
keep me up to speed
366
00:13:30,490 --> 00:13:31,930
on everything I need to know.
367
00:13:31,960 --> 00:13:34,130
I grounded those planes
to save lives
368
00:13:34,160 --> 00:13:38,230
and prevent a possible
national security threat, okay?
369
00:13:38,270 --> 00:13:40,540
I had to make a tough,
split-second decision.
370
00:13:40,570 --> 00:13:43,070
You cost an airline
millions of dollars.
371
00:13:43,110 --> 00:13:44,470
W-What... what is this?
372
00:13:44,510 --> 00:13:46,910
Are you... are you scolding me?
373
00:13:46,940 --> 00:13:49,980
From now on,
you keep me in the loop.
374
00:13:50,010 --> 00:13:51,980
You report to me.
375
00:13:52,020 --> 00:13:54,030
I report to the director.
376
00:13:57,950 --> 00:13:59,650
Understood.
377
00:13:59,690 --> 00:14:00,660
(door closes)
378
00:14:00,690 --> 00:14:02,990
*
379
00:14:03,030 --> 00:14:04,990
Yes!
380
00:14:05,030 --> 00:14:06,930
RYAN:
What is it?
381
00:14:06,960 --> 00:14:07,860
This is great.
382
00:14:07,900 --> 00:14:09,630
I've been thinking
about this all wrong.
383
00:14:09,670 --> 00:14:11,010
That doesn't
sound great.
384
00:14:11,030 --> 00:14:11,900
No, it is.
385
00:14:11,940 --> 00:14:13,310
Because I realized
that the code itself
386
00:14:13,340 --> 00:14:14,300
is not going to help us
find Lomis.
387
00:14:14,340 --> 00:14:17,040
I'm still waiting
on the "great" here, bud.
388
00:14:17,070 --> 00:14:19,310
How the code got onto
the phones is the key.
389
00:14:19,340 --> 00:14:20,610
That's a
pairing record.
390
00:14:20,640 --> 00:14:22,950
Yep.
A history of the last device
391
00:14:22,980 --> 00:14:24,050
a phone synced with.
392
00:14:24,080 --> 00:14:26,480
All these phones paired
with the exact same device.
393
00:14:26,520 --> 00:14:27,430
KRUMITZ:
Bingo.
394
00:14:27,450 --> 00:14:29,480
And all the time stamps
are within an hour
395
00:14:29,520 --> 00:14:31,120
before our victims'
flights took off.
396
00:14:31,150 --> 00:14:32,520
That means they picked up
Lomis' malicious script
397
00:14:32,560 --> 00:14:33,970
somewhere in
this terminal.
398
00:14:33,990 --> 00:14:35,320
NELSON:
There's at least
50 different ways
399
00:14:35,360 --> 00:14:36,360
to infect a phone.
400
00:14:41,600 --> 00:14:43,230
Lomis is clever.
401
00:14:43,270 --> 00:14:45,270
He picked a place where he could
install his malicious script
402
00:14:45,300 --> 00:14:47,670
on multiple victims' phones,
all at the same time.
403
00:14:47,700 --> 00:14:49,500
We're looking for
a watering hole.
404
00:14:49,540 --> 00:14:50,640
Maximize the
number of victims,
405
00:14:50,670 --> 00:14:52,040
maximize the
credit card info.
406
00:14:54,610 --> 00:14:56,280
MUNDO:
Right there.
407
00:14:56,310 --> 00:14:57,280
They plugged their phone
in to get a charge,
408
00:14:57,310 --> 00:14:58,080
he stole
their data.
409
00:14:58,110 --> 00:14:59,410
RYAN:
No, that charging station
410
00:14:59,450 --> 00:15:00,420
is off the beaten path.
411
00:15:00,450 --> 00:15:01,680
Infrequent traffic.
412
00:15:01,720 --> 00:15:03,350
He would have chosen
a high-traffic station
413
00:15:03,390 --> 00:15:05,290
for his victims.
414
00:15:09,490 --> 00:15:12,230
MUNDO:
That's our crime scene.
415
00:15:16,530 --> 00:15:18,500
RYAN:
When someone plugs in
their phone to charge,
416
00:15:18,530 --> 00:15:20,140
their info is being stolen.
417
00:15:24,110 --> 00:15:26,070
This was juice jacking.
418
00:15:26,110 --> 00:15:27,140
All right.
419
00:15:27,180 --> 00:15:29,340
I'll call the airline,
420
00:15:29,380 --> 00:15:30,480
get the passenger manifest
for every flight
421
00:15:30,510 --> 00:15:31,580
that left the terminal
this morning.
422
00:15:31,610 --> 00:15:32,550
We need to find everyone
423
00:15:32,580 --> 00:15:33,620
who's carrying this malware
on their device.
424
00:15:33,650 --> 00:15:35,650
Krumitz, I need you
to clear all the passengers
425
00:15:35,680 --> 00:15:36,580
from this area.
426
00:15:36,620 --> 00:15:38,590
Nelson, start removing
all the malicious
427
00:15:38,620 --> 00:15:40,360
script from everyone's phone.
428
00:15:40,390 --> 00:15:41,990
We need to shut this down now.
429
00:15:44,230 --> 00:15:45,560
FBI!
430
00:15:45,590 --> 00:15:46,730
Everyone unplug.
431
00:15:46,760 --> 00:15:48,430
MAN:
What? Hey.
432
00:15:48,460 --> 00:15:50,030
WOMAN:
My phone is dead.
433
00:15:51,500 --> 00:15:52,670
Hey, don't unplug my phone.
434
00:15:52,700 --> 00:15:53,700
It's dead.
435
00:15:55,040 --> 00:15:56,340
Tell me something, sir.
436
00:15:56,370 --> 00:15:58,570
Have you ever heard
of juice jacking?
437
00:15:58,610 --> 00:16:00,010
No, and I don't care to.
438
00:16:01,810 --> 00:16:03,480
You see
this cord?
439
00:16:03,510 --> 00:16:04,650
It charges your phone, right?
440
00:16:04,680 --> 00:16:06,050
Nice. Safe.
441
00:16:06,080 --> 00:16:07,420
You think it's your friend.
442
00:16:07,450 --> 00:16:09,480
But you see this connector
on the end?
443
00:16:09,520 --> 00:16:11,190
Yeah. It's a USB plug.
444
00:16:11,220 --> 00:16:13,120
Not exactly groundbreaking
stuff, guy.
445
00:16:13,160 --> 00:16:14,420
Hmm.
446
00:16:14,460 --> 00:16:15,620
Maybe this'll impress you.
447
00:16:15,660 --> 00:16:19,060
Most people don't realize
that this cord has four ports.
448
00:16:19,100 --> 00:16:21,210
Two for power,
which charge your phone,
449
00:16:21,230 --> 00:16:24,430
and two for data,
which transfer--
450
00:16:24,470 --> 00:16:25,500
yes,
451
00:16:25,530 --> 00:16:27,300
you guessed it-- your data.
452
00:16:27,340 --> 00:16:29,740
Now, what do
you think your phone
453
00:16:29,770 --> 00:16:31,540
was doing just now, guy?
454
00:16:31,570 --> 00:16:32,740
Charging.
455
00:16:32,780 --> 00:16:34,490
KRUMITZ:
Wrong.
456
00:16:34,510 --> 00:16:35,510
Stealing your data.
457
00:16:35,540 --> 00:16:37,150
You just wanted a charge,
458
00:16:37,180 --> 00:16:38,410
and you had no idea
459
00:16:38,450 --> 00:16:40,280
that a hacker had installed
460
00:16:40,320 --> 00:16:41,450
a juice-jacking
device
461
00:16:41,480 --> 00:16:42,720
that allows him to steal
your credit cards,
462
00:16:42,750 --> 00:16:45,220
your photos, your videos,
463
00:16:45,250 --> 00:16:46,620
everything on your phone.
464
00:16:47,660 --> 00:16:49,390
Now, if you just go get in line
465
00:16:49,430 --> 00:16:50,470
and talk to that
466
00:16:50,490 --> 00:16:51,830
short gentleman
trying to pull off
467
00:16:51,860 --> 00:16:53,130
the purple paisley tie,
468
00:16:53,160 --> 00:16:54,660
he's gonna take
the malicious script
469
00:16:54,700 --> 00:16:55,700
off your phone for you.
470
00:16:55,730 --> 00:16:56,730
Problem solved.
471
00:16:59,170 --> 00:17:01,770
Thank you.
472
00:17:10,750 --> 00:17:12,110
Got it.
473
00:17:12,150 --> 00:17:13,520
Patient zero.
474
00:17:13,550 --> 00:17:15,380
Mm!
475
00:17:15,420 --> 00:17:17,690
I need the north side of
the terminal cleared out.
476
00:17:17,720 --> 00:17:19,290
No one goes
in or out.
477
00:17:19,320 --> 00:17:21,320
This is a crime
scene now.
478
00:17:21,360 --> 00:17:22,420
Excuse me, ma'am? Sir?
479
00:17:22,460 --> 00:17:23,730
I need you to clear the area.
480
00:17:23,760 --> 00:17:26,090
Pardon me, miss.
481
00:17:26,130 --> 00:17:27,130
Ma'am?
482
00:17:40,710 --> 00:17:41,740
(crowd talking excitedly)
483
00:17:45,210 --> 00:17:46,450
MUNDO:
The vic's name was
Rachel Carrington,
484
00:17:46,480 --> 00:17:48,380
a grad student
at the University of Miami.
485
00:17:48,420 --> 00:17:49,480
Worked here part time
486
00:17:49,520 --> 00:17:51,750
to put herself through school.
What did she do here?
487
00:17:51,790 --> 00:17:53,690
She was a credit card sales rep
for Monument Air.
488
00:17:53,720 --> 00:17:55,220
She worked at the
charging station,
489
00:17:55,260 --> 00:17:56,290
trying to get
people to sign up
490
00:17:56,330 --> 00:17:58,170
for their new
Peak Miles card.
491
00:17:58,190 --> 00:17:58,890
Local Feds just contacted
her family in Phoenix.
492
00:17:58,930 --> 00:18:00,200
They're flying in now.
493
00:18:00,230 --> 00:18:02,130
Did the coroner
determine the COD?
494
00:18:02,170 --> 00:18:04,910
Preliminary report
is blunt force trauma.
495
00:18:04,930 --> 00:18:06,870
They found traces of blood
in the women's restroom.
496
00:18:06,900 --> 00:18:08,370
They haven't ruled it
a homicide yet,
497
00:18:08,400 --> 00:18:11,240
but there are signs
of a struggle.
498
00:18:11,270 --> 00:18:13,580
Honestly...
499
00:18:13,610 --> 00:18:15,280
it's not
adding up for me.
500
00:18:15,310 --> 00:18:16,380
Hackers aren't murderers.
501
00:18:16,410 --> 00:18:17,380
Neither are robbers,
502
00:18:17,410 --> 00:18:18,580
until something goes wrong
503
00:18:18,610 --> 00:18:19,910
and they become
desperate.
504
00:18:19,950 --> 00:18:21,380
We need to gain access
505
00:18:21,420 --> 00:18:22,820
to the security footage
in the airport.
506
00:18:22,850 --> 00:18:24,390
I'm on it.
507
00:18:24,420 --> 00:18:25,390
Guys!
508
00:18:25,420 --> 00:18:26,750
Guys, wait!
Wait.
509
00:18:26,790 --> 00:18:28,420
Remember when Krumitz said
510
00:18:28,460 --> 00:18:30,290
that Lomis likes
to start off with chaos
511
00:18:30,330 --> 00:18:31,430
and then it grows
into something bigger?
512
00:18:31,460 --> 00:18:32,630
Yeah?
513
00:18:32,660 --> 00:18:34,560
Well, it just happened.
514
00:18:34,600 --> 00:18:37,770
I was removing the malicious
script from the phone
515
00:18:37,800 --> 00:18:40,770
and suddenly I got locked out.
516
00:18:40,800 --> 00:18:41,940
Look at this.
517
00:18:41,970 --> 00:18:43,310
RYAN:
"Hi, Chelsea.
518
00:18:43,340 --> 00:18:44,370
"You're phone's been hijacked.
519
00:18:44,410 --> 00:18:46,270
"What would
your fiancé Joey think
520
00:18:46,310 --> 00:18:47,940
"if he saw you being
a dirty slut?
521
00:18:47,980 --> 00:18:50,580
"Reply with a 14-digit
prepaid cash voucher
522
00:18:50,610 --> 00:18:53,450
"for $250 in the next 24 hours,
523
00:18:53,480 --> 00:18:54,550
this goes away."
524
00:18:54,580 --> 00:18:56,280
This is ransomware.
525
00:18:56,320 --> 00:18:57,120
Krumitz said
526
00:18:57,150 --> 00:18:58,790
the malicious script
is a custom code
527
00:18:58,820 --> 00:18:59,950
that strangles
the operating system
528
00:18:59,990 --> 00:19:02,220
and allows Lomis complete
control over all the phones.
529
00:19:02,260 --> 00:19:03,760
Lomis just stepped up his game.
530
00:19:03,790 --> 00:19:05,730
Now he's holding
the phones hostage.
531
00:19:05,760 --> 00:19:07,960
We stopped his payday;
now he's retaliating.
532
00:19:08,000 --> 00:19:08,960
Nelson, I need you
533
00:19:09,000 --> 00:19:11,200
to get back to D.C.
Stay on top of
534
00:19:11,230 --> 00:19:12,330
the stolen credit cards
535
00:19:12,370 --> 00:19:13,970
and crack that ransomware.
536
00:19:14,000 --> 00:19:15,940
Done. Um...
537
00:19:15,970 --> 00:19:17,870
Is there gonna be
peanuts and pretzels
538
00:19:17,910 --> 00:19:18,970
on the Coast Guard chopper?
539
00:19:19,010 --> 00:19:21,240
(laughs)
540
00:19:25,310 --> 00:19:27,250
Is this some kind of sick joke?
No.
541
00:19:27,280 --> 00:19:29,220
It's completely frozen.
542
00:19:29,250 --> 00:19:30,220
Someone put ransomware on it.
543
00:19:30,250 --> 00:19:31,590
You mean
544
00:19:31,620 --> 00:19:34,990
by charging my phone,
all this happened?
545
00:19:35,020 --> 00:19:36,960
RYAN:
Yes.
546
00:19:36,990 --> 00:19:39,330
A hacker took control of
your phone and locked you out
547
00:19:39,360 --> 00:19:41,260
until you pay the amount
that he's demanding.
548
00:19:41,300 --> 00:19:42,360
He has personal information.
549
00:19:42,400 --> 00:19:44,670
He knows my fiancé's name.
550
00:19:44,700 --> 00:19:46,470
Not only did he lock you out,
551
00:19:46,500 --> 00:19:48,340
he accessed your personal data--
552
00:19:48,370 --> 00:19:51,440
your messages,
phone calls, pictures.
553
00:19:51,470 --> 00:19:52,610
What is he going to do with it?
554
00:19:52,640 --> 00:19:53,880
Well, he's threatening
to release it
555
00:19:53,910 --> 00:19:55,280
if you don't pay.
556
00:19:56,710 --> 00:19:58,280
What did he find on that phone
557
00:19:58,310 --> 00:20:00,210
you don't want
your fiancé to see?
558
00:20:04,490 --> 00:20:05,720
Am I really expected to pay
559
00:20:05,750 --> 00:20:08,460
$250,000 to
unlock my phone?
560
00:20:08,490 --> 00:20:10,730
Senator, we don't suggest
you pay this ransom.
561
00:20:10,760 --> 00:20:11,860
And when I don't?
562
00:20:11,890 --> 00:20:13,730
Any number of
things can happen.
563
00:20:13,760 --> 00:20:15,260
Could you try to be
a little more specific?
564
00:20:15,300 --> 00:20:18,000
All right. As that text
you received threatens,
565
00:20:18,030 --> 00:20:19,730
he will post all of
your personal information
566
00:20:19,770 --> 00:20:20,900
on the Internet.
567
00:20:20,940 --> 00:20:22,300
SENATOR:
I just flew back
568
00:20:22,340 --> 00:20:23,640
from a family trip to Miami
569
00:20:23,670 --> 00:20:24,940
and simply charged my phone,
570
00:20:24,970 --> 00:20:26,540
and now this happens?
571
00:20:26,580 --> 00:20:27,750
What action are you taking?
572
00:20:27,780 --> 00:20:29,040
We're working
some promising leads.
573
00:20:29,080 --> 00:20:30,040
We've...
(scoffs)
574
00:20:30,080 --> 00:20:32,310
Really, gentlemen?
575
00:20:32,350 --> 00:20:33,380
Really?
576
00:20:33,420 --> 00:20:34,280
Our government
appropriates
577
00:20:34,320 --> 00:20:36,480
a lot of money to
the Cyber Division,
578
00:20:36,520 --> 00:20:38,290
and "promising leads"?
579
00:20:38,320 --> 00:20:39,290
Is that the best you can do?
580
00:20:39,320 --> 00:20:40,460
These things take time.
581
00:20:40,490 --> 00:20:43,060
Time is not something I have.
582
00:20:43,090 --> 00:20:43,990
19 hours from now,
583
00:20:44,030 --> 00:20:46,530
the highly sensitive
government material
584
00:20:46,560 --> 00:20:48,000
on this phone goes public.
585
00:20:48,030 --> 00:20:51,430
Senator, look,
all due respect...
586
00:20:51,470 --> 00:20:54,440
I mean, you know better
than to keep
587
00:20:54,470 --> 00:20:58,510
sensitive government documents
on a personal phone, so...
588
00:20:58,540 --> 00:21:00,340
what exactly
are you worried about?
589
00:21:00,380 --> 00:21:01,840
SENATOR:
I have telephone numbers
590
00:21:01,880 --> 00:21:04,410
and information of high-profile
591
00:21:04,450 --> 00:21:07,380
colleagues
and friends.
592
00:21:07,420 --> 00:21:10,080
I have photos of my husband
and my children on this phone.
593
00:21:10,120 --> 00:21:12,350
Clearly, there's something else
on that phone
594
00:21:12,390 --> 00:21:13,590
you don't want getting out.
595
00:21:13,620 --> 00:21:14,690
You don't understand.
596
00:21:14,720 --> 00:21:16,720
It can't get out.
597
00:21:16,760 --> 00:21:19,460
What I have on this phone
is very personal.
598
00:21:19,500 --> 00:21:21,070
It could ruin my career.
599
00:21:21,100 --> 00:21:24,900
Senator, he's already got
what's on your phone.
600
00:21:24,930 --> 00:21:25,900
So, what?
601
00:21:25,930 --> 00:21:28,340
What, I cross my fingers
and hope for the best?
602
00:21:28,370 --> 00:21:29,800
We are doing everything we can
603
00:21:29,840 --> 00:21:32,540
to identify
and arrest the target.
604
00:21:32,580 --> 00:21:34,490
You just don't get it.
605
00:21:34,510 --> 00:21:37,410
People I care about
will be hurt.
606
00:21:47,460 --> 00:21:49,820
I found something--
take a look at this.
607
00:21:51,430 --> 00:21:54,400
Rachel Carrington helps this
sick woman to the bathroom.
608
00:21:54,430 --> 00:21:56,400
And that's when
our juice jackers swoop in.
609
00:21:56,430 --> 00:21:58,900
The sick woman was a
distraction to get Rachel away
610
00:21:58,930 --> 00:22:00,800
from the charging bar.
Exactly.
611
00:22:00,840 --> 00:22:02,500
Our juice jackers
have about a minute
612
00:22:02,540 --> 00:22:06,510
to install their black box
before our sick lady returns.
613
00:22:06,540 --> 00:22:08,140
Miraculously,
614
00:22:08,180 --> 00:22:10,510
she doesn't look
so sick anymore.
615
00:22:12,850 --> 00:22:14,420
Wait, stop.
616
00:22:14,450 --> 00:22:15,550
Rewind that.
617
00:22:17,020 --> 00:22:19,150
Do you have a camera angle from
the direction they're heading?
618
00:22:19,190 --> 00:22:21,490
No, there's
a blind spot
619
00:22:21,520 --> 00:22:23,430
between gates 213
and 214.
620
00:22:23,460 --> 00:22:25,030
That's where the
bathrooms are, isn't it?
621
00:22:25,060 --> 00:22:26,090
Yeah.
622
00:22:26,130 --> 00:22:28,030
And where the airport police
reported finding blood.
623
00:22:29,900 --> 00:22:32,000
So these three people
were working together.
624
00:22:32,030 --> 00:22:34,070
The sick woman killed
Rachel Carrington.
625
00:22:34,100 --> 00:22:37,540
Yeah, but the problem is--
how do we identify them?
626
00:22:37,570 --> 00:22:38,370
Look at that.
627
00:22:38,410 --> 00:22:39,840
This footage,
it's way too grainy.
628
00:22:39,880 --> 00:22:41,050
That's a dead end.
629
00:22:41,080 --> 00:22:42,710
Well, maybe not.
630
00:22:42,750 --> 00:22:44,190
The black box
that they installed
631
00:22:44,210 --> 00:22:46,410
had to get
through security, right?
632
00:22:52,890 --> 00:22:54,590
Take a snapshot of that duffel.
633
00:23:00,600 --> 00:23:02,430
RYAN: To get that juice-jacking
device in the terminal,
634
00:23:02,470 --> 00:23:04,110
somebody had to get it
through security.
635
00:23:04,130 --> 00:23:06,470
Most people don't know
that TSA keeps
636
00:23:06,500 --> 00:23:08,000
all X ray photos
for a week.
637
00:23:08,040 --> 00:23:10,000
We can run our
duffel's snapshot
638
00:23:10,040 --> 00:23:11,210
against all the images
in the TSA archives.
639
00:23:11,240 --> 00:23:13,540
And based on the size, shape
and material of the device,
640
00:23:13,580 --> 00:23:15,640
we should be able to figure out
when this came through.
641
00:23:15,680 --> 00:23:17,450
RYAN: Check all the bags
that went through security
642
00:23:17,480 --> 00:23:20,650
two hours before the jackers
were spotted on surveillance.
643
00:23:24,690 --> 00:23:25,990
KRUMITZ:
Okay, we got it.
644
00:23:26,020 --> 00:23:27,660
MUNDO:
All right, hold on.
645
00:23:27,690 --> 00:23:30,460
Even if we can get a visual
on who came in with it,
646
00:23:30,490 --> 00:23:32,230
chances are pretty good
they used a fake I.D.
647
00:23:32,260 --> 00:23:34,560
RYAN: Well, that doesn't mean
we can't find them.
648
00:23:34,600 --> 00:23:36,560
You can learn a lot
about somebody
649
00:23:36,600 --> 00:23:38,570
by examining the contents
of their bag.
650
00:23:38,600 --> 00:23:40,570
Krumitz, remove everything
that's blue.
651
00:23:40,600 --> 00:23:43,470
It's metal like
our juice-jacking device.
652
00:23:43,510 --> 00:23:46,470
Now, separate the
materials by colors.
653
00:23:46,510 --> 00:23:49,480
We're looking for anything
plastic or biological.
654
00:23:49,510 --> 00:23:51,710
Take away the biomaterials
in orange.
655
00:23:51,750 --> 00:23:53,950
Focus on the
plastics in green.
656
00:23:57,720 --> 00:23:58,720
Right there.
657
00:23:58,750 --> 00:24:00,620
Do you see
that wizard hat?
658
00:24:00,660 --> 00:24:02,160
That's the Warlocks.
659
00:24:02,190 --> 00:24:03,530
MUNDO:
The hacker collective.
660
00:24:03,560 --> 00:24:04,290
KRUMITZ:
Yeah.
661
00:24:04,330 --> 00:24:06,090
Yeah, their symbol's
a wizard hat.
662
00:24:06,130 --> 00:24:07,390
That's their badge.
663
00:24:07,430 --> 00:24:09,900
It's like an all-access pass for
proving their gang affiliation.
664
00:24:09,930 --> 00:24:12,170
That's Lomis' crew,
our juice jackers.
665
00:24:12,200 --> 00:24:14,800
Krumitz, search all bags before
and after this image
666
00:24:14,840 --> 00:24:16,170
for the same shape.
667
00:24:17,640 --> 00:24:19,640
There. There's
two more badges.
668
00:24:19,680 --> 00:24:21,120
KRUMITZ: That proves
that the two juice jackers
669
00:24:21,140 --> 00:24:22,810
and the sick woman
are all involved.
670
00:24:22,850 --> 00:24:24,820
All right, that's great,
but how do we find them?
671
00:24:24,850 --> 00:24:27,180
Hacker collectives hide
themselves all around the world.
(phone rings)
672
00:24:27,220 --> 00:24:29,190
I mean, they could be anywhere.
673
00:24:29,220 --> 00:24:31,120
My boy Nelson
coming through.
674
00:24:31,150 --> 00:24:33,590
He just came up with a traceable
hit on the credit cards.
675
00:24:33,620 --> 00:24:35,560
All right, looks like most
of the purchases were made
676
00:24:35,590 --> 00:24:36,790
at brick and
mortar spots,
677
00:24:36,830 --> 00:24:38,570
like high-end department stores
and electronic retailers.
678
00:24:38,590 --> 00:24:42,660
You got computers,
laptops, handbags.
679
00:24:42,700 --> 00:24:44,670
Goods that can easily
be sold for quick cash.
680
00:24:44,700 --> 00:24:47,670
Yeah, except that Nelson just
found an odd online purchase.
681
00:24:47,700 --> 00:24:48,800
RYAN: No, that's
a server blade.
682
00:24:48,840 --> 00:24:50,570
That is not something
you can buy
683
00:24:50,610 --> 00:24:51,870
at your local
electronics store.
684
00:24:51,910 --> 00:24:54,240
But I'm willing
to bet that's something
685
00:24:54,280 --> 00:24:56,680
a hacker collective
is gonna want.
686
00:24:56,710 --> 00:24:58,250
MUNDO: Big online purchase
with a stolen credit card?
687
00:24:58,280 --> 00:24:59,280
Easily traceable?
688
00:24:59,310 --> 00:25:02,280
That's a little sloppy
for Lomis, don't you think?
689
00:25:02,320 --> 00:25:03,920
No, but we stopped
his payday.
690
00:25:03,950 --> 00:25:05,950
He's scrambling, I mean,
that's when you make mistakes.
691
00:25:05,990 --> 00:25:07,890
His mistake is our gain.
692
00:25:07,920 --> 00:25:10,890
The clock is ticking--
we've got 14 hours left.
693
00:25:10,930 --> 00:25:13,730
That purchase is gonna be linked
to an address-- find it.
694
00:25:18,630 --> 00:25:20,130
FBI!
695
00:25:21,140 --> 00:25:22,340
FBI!
696
00:25:22,370 --> 00:25:23,610
Hands in the air!
Hands in the air!
697
00:25:23,640 --> 00:25:24,610
(indistinct shouting)
698
00:25:24,640 --> 00:25:25,970
On the ground now!
699
00:25:26,010 --> 00:25:28,180
Get down! On the ground now!
700
00:25:28,210 --> 00:25:30,140
Get on the floor!
701
00:25:30,180 --> 00:25:31,610
Heads down!
702
00:25:31,650 --> 00:25:32,810
(indistinct shouting)
703
00:25:33,650 --> 00:25:35,580
He went out the back door.
704
00:25:40,190 --> 00:25:42,620
FBI, freeze!
705
00:25:46,630 --> 00:25:47,600
Crap!
706
00:25:55,670 --> 00:25:57,940
(both grunting)
707
00:26:12,790 --> 00:26:14,260
I really thought
Lomis would be here.
708
00:26:24,370 --> 00:26:26,900
We found traces of blood
underneath your fingernail.
709
00:26:28,400 --> 00:26:30,070
DNA matched
Rachel Carrington.
710
00:26:32,780 --> 00:26:33,750
You killed her.
711
00:26:33,780 --> 00:26:34,740
No.
712
00:26:34,780 --> 00:26:37,110
No, it was
an accident.
713
00:26:37,150 --> 00:26:38,790
I was just supposed
to distract her.
714
00:26:38,810 --> 00:26:40,850
CARRINGTON:
Glad you're feeling better.
715
00:26:40,880 --> 00:26:42,720
I really have to be
heading back, though.
716
00:26:42,750 --> 00:26:43,750
Uh, wait.
717
00:26:43,790 --> 00:26:45,690
Wh...
What are you...?
718
00:26:46,790 --> 00:26:48,420
MUNDO:
Once you realized she was dead,
719
00:26:48,460 --> 00:26:50,860
you went back to your partners.
720
00:26:50,890 --> 00:26:52,960
She was still breathing
when we left her.
721
00:26:57,800 --> 00:27:00,770
I thought for sure someone
would find her immediately.
722
00:27:00,800 --> 00:27:02,700
You made it look
like she was sleeping
723
00:27:02,740 --> 00:27:05,910
so you could buy enough time
to escape the crime scene.
724
00:27:05,940 --> 00:27:07,810
No, I wanted to tell someone.
725
00:27:07,840 --> 00:27:09,180
FIRST MAN:
But they wouldn't let me.
726
00:27:09,210 --> 00:27:11,710
They were scared of
what he would do to us.
727
00:27:11,750 --> 00:27:13,180
Of what who
would do to you?
728
00:27:13,220 --> 00:27:15,190
Lomis? You said
you'd never met him?
729
00:27:15,220 --> 00:27:16,850
SECOND MAN:
Online, man.
730
00:27:16,890 --> 00:27:20,200
Where reputations matter.
731
00:27:20,220 --> 00:27:22,190
He could destroy us.
732
00:27:22,220 --> 00:27:24,860
He could ruin
our cred.
733
00:27:24,890 --> 00:27:26,190
You know
what I can do?
734
00:27:26,230 --> 00:27:29,130
Put you in jail
for the next 25 years.
735
00:27:29,160 --> 00:27:31,130
Who's collecting
the phone-ransom money?
736
00:27:31,170 --> 00:27:33,870
I didn't know about the phones
being ransomed, I swear.
737
00:27:33,900 --> 00:27:35,700
He hired us
738
00:27:35,740 --> 00:27:37,870
to install the box
and clone the cards
739
00:27:37,910 --> 00:27:38,710
and buy the goods, that's it.
740
00:27:38,740 --> 00:27:40,370
Oh, come on,
there was a server blade.
741
00:27:40,410 --> 00:27:41,810
What do you think
that was for?
742
00:27:41,840 --> 00:27:43,750
That server blade?
743
00:27:43,780 --> 00:27:44,850
We didn't buy it.
744
00:27:44,880 --> 00:27:45,850
Lomis did.
745
00:27:45,880 --> 00:27:47,180
He sent it to us.
746
00:27:47,220 --> 00:27:48,730
He set us up to take the fall.
747
00:27:48,750 --> 00:27:50,220
You expect me to believe that?
748
00:27:50,250 --> 00:27:52,750
He didn't even show up...
749
00:27:52,790 --> 00:27:53,820
To collect his share
of the take.
750
00:27:53,860 --> 00:27:55,990
Who passes up
on that much money?
751
00:28:04,100 --> 00:28:05,930
I don't believe them.
752
00:28:05,970 --> 00:28:07,770
They know where Lomis is,
they have to.
753
00:28:07,800 --> 00:28:08,940
No, they don't,
Krumitz.
754
00:28:08,970 --> 00:28:10,340
They've never met him.
755
00:28:10,370 --> 00:28:12,370
Which is why your white
whale never gets caught.
756
00:28:18,350 --> 00:28:20,350
(laughs)
757
00:28:36,030 --> 00:28:37,030
What is that?
758
00:28:37,070 --> 00:28:38,810
Lomis is taunting me.
759
00:28:38,830 --> 00:28:40,270
He knew I'd find the
juice-jacking device,
760
00:28:40,300 --> 00:28:43,440
and he overrode the data with
"Gotcha!" a bajillion times.
761
00:28:43,470 --> 00:28:44,510
All right, well,
if he overwrote the data,
762
00:28:44,540 --> 00:28:46,940
there's no way to retrieve
what was there before.
763
00:28:46,980 --> 00:28:47,920
Hence "Gotcha!"
764
00:28:47,940 --> 00:28:49,940
Those the shredded phones?
765
00:28:49,980 --> 00:28:51,880
Get on the floor!
766
00:28:51,910 --> 00:28:53,780
KRUMITZ:
Yep.
767
00:28:53,820 --> 00:28:56,020
I figured they tried
to destroy 'em because
there's something on them
768
00:28:56,050 --> 00:28:57,790
they don't want me to find.
769
00:28:57,820 --> 00:29:01,190
I'm recovering all of
the salvageable pieces.
770
00:29:07,830 --> 00:29:08,500
Anything?
771
00:29:08,530 --> 00:29:10,360
No. Not yet.
772
00:29:11,230 --> 00:29:13,400
Okay. I got your time stamp.
773
00:29:13,440 --> 00:29:14,910
Come on.
774
00:29:14,940 --> 00:29:17,040
Come on, come on,
come on, come on.
775
00:29:17,070 --> 00:29:18,440
Yes!
776
00:29:18,470 --> 00:29:20,270
Did you just get
his serial number?
Yep.
777
00:29:23,950 --> 00:29:26,050
I got you now, Lomis.
778
00:29:26,080 --> 00:29:27,510
I'm gonna track
this serial number
779
00:29:27,550 --> 00:29:29,520
right down
to your evil lair.
780
00:29:29,550 --> 00:29:33,390
(trilling, beeping)
781
00:29:36,320 --> 00:29:42,030
You got to be kidding me.
It's untraceable.
782
00:29:42,060 --> 00:29:44,900
Damn it!
783
00:29:47,640 --> 00:29:50,250
When was the last time
you slept?
784
00:29:50,270 --> 00:29:53,410
Listen, man, I know
it's hard, all right?
785
00:29:53,440 --> 00:29:56,480
I do. Believe me. All right,
I ever tell you about the...
786
00:29:56,510 --> 00:29:59,950
the sleeper cell I
tracked in Kandahar?
787
00:29:59,980 --> 00:30:03,280
117 degrees.
788
00:30:03,320 --> 00:30:04,490
Dry heat.
789
00:30:04,520 --> 00:30:06,950
It was the kind that-that chaps
the inside of your mouth.
790
00:30:06,990 --> 00:30:08,620
All right,
between the four of us,
791
00:30:08,660 --> 00:30:11,160
we had half a canteen
of water left.
792
00:30:11,190 --> 00:30:15,100
We had been there for three days
because I was obsessed.
793
00:30:15,130 --> 00:30:19,270
I knew if I stayed on 'em,
if I persevered,
794
00:30:19,300 --> 00:30:21,240
I'd find 'em.
795
00:30:21,270 --> 00:30:24,070
I was wrong.
796
00:30:24,110 --> 00:30:25,470
So you just quit?
797
00:30:25,510 --> 00:30:27,440
You gave up?
798
00:30:27,480 --> 00:30:28,990
No.
799
00:30:29,010 --> 00:30:31,050
There's a big difference
between quitting
800
00:30:31,080 --> 00:30:33,280
and just knowing
when it's not your day.
801
00:30:35,180 --> 00:30:36,480
We need you in CTOC.
802
00:30:37,650 --> 00:30:38,920
When you're ready.
803
00:30:42,160 --> 00:30:44,160
Did you catch them?
804
00:30:49,060 --> 00:30:50,500
What do you think?
805
00:30:50,530 --> 00:30:52,600
I had to wait
a month, but...
806
00:30:52,630 --> 00:30:55,200
believe me, it was worth it.
807
00:31:02,480 --> 00:31:04,950
SIFTER:
Okay, we only have two hours
808
00:31:04,980 --> 00:31:07,410
before our victims' private
data is released on the Web.
809
00:31:07,450 --> 00:31:09,580
How close are we
to... anything?
810
00:31:09,620 --> 00:31:11,150
The code's sophisticated.
811
00:31:11,190 --> 00:31:12,690
We're getting there,
but it's gonna take time.
812
00:31:12,720 --> 00:31:16,260
Against orders, some people
paid the ransom already.
813
00:31:16,290 --> 00:31:17,960
Hey, guys, we got a problem.
814
00:31:17,990 --> 00:31:18,830
What is it?
815
00:31:18,860 --> 00:31:20,290
Lomis isn't waiting
for the deadline.
816
00:31:20,330 --> 00:31:23,700
He's releasing
people's information right now.
817
00:31:23,730 --> 00:31:25,970
And he started with
the most powerful person first.
818
00:31:26,000 --> 00:31:28,540
I thought
the senator already paid.
819
00:31:28,570 --> 00:31:30,300
Yeah, I thought
she did, too.
820
00:31:30,340 --> 00:31:33,010
Well, this will be the headline
on every national newscast.
821
00:31:33,040 --> 00:31:34,640
Got another one.
822
00:31:35,680 --> 00:31:37,340
RYAN:
Chelsea's photos were released
823
00:31:37,380 --> 00:31:38,710
to a revenge porn site.
824
00:31:38,750 --> 00:31:40,610
Lomis isn't
playing by the rules,
825
00:31:40,650 --> 00:31:42,480
which makes him very dangerous.
826
00:31:42,520 --> 00:31:44,450
KRUMITZ:
Guys! Guys!
827
00:31:44,490 --> 00:31:46,320
I did it.
828
00:31:46,350 --> 00:31:48,190
I finally found Lomis.
I got an I.D.
829
00:31:48,220 --> 00:31:49,620
How'd you find him?
830
00:31:49,660 --> 00:31:52,160
Just like you said--
go back to the evidence.
831
00:31:52,190 --> 00:31:54,030
So I took another look
at the juice-jacking box.
832
00:31:54,060 --> 00:31:56,730
Lomis made it impossible to
recover any data off that thing.
833
00:31:56,760 --> 00:31:58,130
You're right.
834
00:31:58,170 --> 00:32:00,300
Except for one thing: time.
835
00:32:00,340 --> 00:32:03,280
I know what time Lomis
overwrote the data.
836
00:32:03,310 --> 00:32:06,080
It was four hours before
we even found the box
at the airport.
837
00:32:06,110 --> 00:32:08,640
That's around the time
the first flights
were taking off.
838
00:32:08,680 --> 00:32:11,610
He had to plug directly
into the charging station
839
00:32:11,650 --> 00:32:13,010
to steal everyone's data.
840
00:32:13,050 --> 00:32:14,450
Lomis was there, in person.
841
00:32:14,480 --> 00:32:16,550
Yeah-- I pulled the
airport security footage
842
00:32:16,580 --> 00:32:18,990
four hours before
we arrived.
843
00:32:19,020 --> 00:32:20,150
(computer beeping)
844
00:32:20,190 --> 00:32:22,020
Say hello to Lomis.
845
00:32:36,440 --> 00:32:38,270
Okay, your point?
846
00:32:38,310 --> 00:32:39,510
I mean,
this doesn't prove anything.
847
00:32:39,540 --> 00:32:41,510
Yeah, well, it's about
to prove everything.
848
00:32:41,540 --> 00:32:43,310
I don't even know
what you're showing me.
849
00:32:43,350 --> 00:32:45,490
KRUMITZ:
Mr. Hart, we know the truth.
850
00:32:45,510 --> 00:32:48,550
HART: I'm telling you,
you've got it wrong.
851
00:32:48,580 --> 00:32:50,220
RYAN:
We have evidence...
No!
852
00:32:51,390 --> 00:32:53,120
I mean, Willa is
a straight-A student.
853
00:32:53,160 --> 00:32:55,070
She plays soccer,
dance lessons, violin...
854
00:32:55,090 --> 00:32:56,190
KRUMITZ:
Yeah...
855
00:32:56,220 --> 00:32:58,430
and she also took first place
in the Miami-Dade County
856
00:32:58,460 --> 00:32:59,790
high school chess
tournament.
857
00:32:59,830 --> 00:33:01,800
We get it--
she's a genius
858
00:33:01,830 --> 00:33:03,530
and you're a proud father.
859
00:33:03,570 --> 00:33:05,780
This is insane.
860
00:33:05,800 --> 00:33:08,540
All right, Willa's
not a hacker.
861
00:33:08,570 --> 00:33:09,770
And she's a good kid.
862
00:33:09,800 --> 00:33:11,470
Maybe she is.
863
00:33:11,510 --> 00:33:13,040
But maybe she's not.
864
00:33:13,080 --> 00:33:15,320
I have a warrant
for her tablet.
865
00:33:15,340 --> 00:33:16,540
If it's clean,
she's innocent.
866
00:33:16,580 --> 00:33:19,810
And exactly the daughter
you believe her to be.
867
00:33:19,850 --> 00:33:21,480
Why would
she do this?
868
00:33:21,520 --> 00:33:23,180
(door opens)
869
00:33:24,350 --> 00:33:27,150
Dad, whose car is that
in the driveway?
870
00:33:27,190 --> 00:33:29,490
KRUMITZ: Belongs to the
Federal Bureau of Investigation.
871
00:33:31,360 --> 00:33:33,260
Hello, Lomis.
872
00:33:33,300 --> 00:33:35,470
It's nice to meet you.
873
00:33:36,430 --> 00:33:38,530
I've been waiting
a long time for this.
874
00:33:42,200 --> 00:33:43,600
Gotcha.
875
00:33:47,580 --> 00:33:53,190
Everything about you
is unexpected.
876
00:33:53,220 --> 00:33:55,130
We bought your disguise.
877
00:33:55,150 --> 00:33:56,520
We actually
thought you were
878
00:33:56,550 --> 00:33:58,590
a 35-year-old man
from Eastern Europe.
879
00:33:58,620 --> 00:34:01,220
Very clever.
You went through
all the trouble
880
00:34:01,260 --> 00:34:02,520
of stealing
credit card information
881
00:34:02,560 --> 00:34:04,090
and never collected your take.
882
00:34:04,130 --> 00:34:06,630
You were the mastermind
behind the whole plan.
883
00:34:06,660 --> 00:34:10,530
Stole all those credit card
numbers but never met up
884
00:34:10,570 --> 00:34:12,540
with your accomplices
to get paid.
885
00:34:12,570 --> 00:34:13,830
RYAN:
But, then again, you couldn't.
886
00:34:13,870 --> 00:34:15,640
A 16-year-old girl
couldn't show up
887
00:34:15,670 --> 00:34:18,270
at a hacker's house to collect.
888
00:34:18,310 --> 00:34:19,470
You would've blown
your cover.
889
00:34:19,510 --> 00:34:20,870
So then you ransomed
all the phones,
890
00:34:20,910 --> 00:34:22,580
and we thought you were
gonna get paid that way.
891
00:34:22,610 --> 00:34:25,850
But then you began releasing
the ransomed data anyway.
892
00:34:25,880 --> 00:34:28,820
Senator Finnis
tried to pay you.
893
00:34:28,850 --> 00:34:30,450
But, to our surprise,
you denied payment.
894
00:34:30,490 --> 00:34:32,530
Because it wasn't
about the money.
895
00:34:32,550 --> 00:34:34,220
I have to know.
896
00:34:34,260 --> 00:34:35,590
What was this about? Why
897
00:34:35,620 --> 00:34:38,130
did you do it?
898
00:34:38,160 --> 00:34:39,530
Did you even
899
00:34:39,560 --> 00:34:42,260
think about
the consequences?
900
00:34:42,300 --> 00:34:44,600
Senator Finnis,
Michael Young,
901
00:34:44,630 --> 00:34:46,300
Victoria Fields,
902
00:34:46,330 --> 00:34:49,140
Simone Taylor-- you ruined
their lives today.
903
00:34:51,640 --> 00:34:52,870
Look, this
isn't a joke,
904
00:34:52,910 --> 00:34:54,710
Willa. Tell us why.
905
00:34:54,740 --> 00:34:56,410
Why did you do it?
906
00:34:56,440 --> 00:34:58,650
Because I wanted to.
907
00:35:00,650 --> 00:35:03,480
I was bored.
I did it because I could.
908
00:35:13,560 --> 00:35:15,530
VICKNER:
You saw this, right?
909
00:35:15,560 --> 00:35:17,300
SIFTER:
Oh, yeah.
910
00:35:17,330 --> 00:35:18,370
It's a shame.
911
00:35:18,400 --> 00:35:20,530
The senator's husband
and children learning her
912
00:35:20,570 --> 00:35:23,370
sexual preference from the
front page of a paper, it's...
913
00:35:23,410 --> 00:35:25,620
Yeah, well,
privacy is a myth.
914
00:35:25,640 --> 00:35:27,570
Personal info is
the new commodity.
915
00:35:28,710 --> 00:35:30,540
I, uh... I understand
three other people
916
00:35:30,580 --> 00:35:32,180
had their information released.
917
00:35:32,210 --> 00:35:35,280
Well, Lomis had access
to 300 phones
918
00:35:35,320 --> 00:35:36,720
and whatever was on them.
919
00:35:36,750 --> 00:35:37,950
We got her.
920
00:35:37,990 --> 00:35:40,900
I mean, we confiscated
all of her devices.
921
00:35:40,920 --> 00:35:42,620
She had plenty of time
to make copies
922
00:35:42,660 --> 00:35:45,690
and distribute them to anyone.
923
00:35:45,730 --> 00:35:47,490
And what they do with it...
924
00:35:47,530 --> 00:35:48,800
only time will tell.
925
00:35:50,330 --> 00:35:52,570
What's this?
926
00:35:52,600 --> 00:35:54,500
That's me keeping
you in the loop.
927
00:35:54,540 --> 00:35:58,470
I-I still can't believe
that she's just a teenager.
928
00:35:58,510 --> 00:36:01,680
So, Colin...
Yeah.
929
00:36:01,710 --> 00:36:03,680
Can I be honest
with you?
930
00:36:03,710 --> 00:36:06,450
I was a little pissed off
I didn't get that promotion.
931
00:36:06,480 --> 00:36:07,610
I was.
932
00:36:07,650 --> 00:36:10,350
I just felt I was
933
00:36:10,390 --> 00:36:12,660
the best man
for the job.
934
00:36:12,690 --> 00:36:14,520
So did I.
935
00:36:14,560 --> 00:36:17,260
I mean-- think that I was
the best man for the job.
936
00:36:17,290 --> 00:36:19,290
Look, I'll-I'll
admit it--
937
00:36:19,330 --> 00:36:21,560
there's not a whole lot
that I know
938
00:36:21,600 --> 00:36:24,900
about what you
and your people do.
939
00:36:24,930 --> 00:36:27,700
That's not
an enviable position.
You're not gonna
940
00:36:27,740 --> 00:36:28,980
try and hug me now, are you?
941
00:36:29,000 --> 00:36:31,740
No. In fact, my job
practically guarantees
942
00:36:31,770 --> 00:36:33,310
I am gonna be a constant
943
00:36:33,340 --> 00:36:35,610
pain in your ass.
944
00:36:35,640 --> 00:36:38,650
But listen, I'm the least
of your worries.
945
00:36:42,720 --> 00:36:44,450
Tomorrow's criminal.
946
00:36:44,490 --> 00:36:47,720
That is who you're
gonna lose sleep over.
947
00:36:47,760 --> 00:36:49,770
Good night.
948
00:36:50,990 --> 00:36:52,990
Good night.
949
00:37:01,800 --> 00:37:03,300
What's that?
950
00:37:04,770 --> 00:37:06,040
Postcard.
951
00:37:06,070 --> 00:37:07,740
From Lomis?
952
00:37:09,040 --> 00:37:11,650
Sent the moment the prosecutor
released her from custody.
953
00:37:11,680 --> 00:37:14,780
It's not fair.
954
00:37:14,820 --> 00:37:16,780
She gets to walk
because
955
00:37:16,820 --> 00:37:19,520
she happens to be 16,
but she is a criminal.
956
00:37:19,550 --> 00:37:21,690
But she's a cyber criminal.
957
00:37:21,720 --> 00:37:23,720
And we both know that
sentencing guidelines
958
00:37:23,760 --> 00:37:25,730
make it very difficult
to prosecute
959
00:37:25,760 --> 00:37:27,630
if they're under 21.
960
00:37:27,660 --> 00:37:29,730
It's like we're
encouraging kids
961
00:37:29,760 --> 00:37:31,730
to become black hats.
962
00:37:31,770 --> 00:37:33,770
Well, maybe one day
that law will change.
963
00:37:33,800 --> 00:37:34,740
But today...
964
00:37:34,770 --> 00:37:36,770
you need to be very grateful
that we couldn't
965
00:37:36,800 --> 00:37:38,470
prosecute.
Now, did you
966
00:37:38,510 --> 00:37:40,540
intend to break the law
or was that accidental?
967
00:37:40,580 --> 00:37:41,720
'Cause I really want to believe
968
00:37:41,740 --> 00:37:44,580
you had no idea that what
you were doing was illegal.
969
00:37:46,380 --> 00:37:49,450
I know you paid off
the ransomed phone via text.
970
00:37:53,720 --> 00:37:57,790
And with that payment you
bundled a Remote Access Trojan.
971
00:37:57,830 --> 00:37:59,640
That's illegal.
972
00:38:03,870 --> 00:38:06,010
You took control
of Lomis' desktop computer
973
00:38:06,030 --> 00:38:09,640
and you snapped a picture.
974
00:38:10,970 --> 00:38:12,940
KRUMITZ:
Guys. Guys.
975
00:38:12,970 --> 00:38:15,010
I did it.
976
00:38:15,040 --> 00:38:17,410
I finally found Lomis.
I got an I.D.
977
00:38:17,450 --> 00:38:19,060
How'd you know?
978
00:38:19,080 --> 00:38:20,750
You told me.
979
00:38:20,780 --> 00:38:22,420
KRUMITZ:
And she also took first place
980
00:38:22,450 --> 00:38:23,880
in the Miami-Dade County
high school chess
981
00:38:23,920 --> 00:38:26,720
tournament. We get it--
she's a genius
982
00:38:26,750 --> 00:38:28,020
and you're a proud father.
983
00:38:28,060 --> 00:38:30,130
You couldn't know
she was a chess champion
984
00:38:30,160 --> 00:38:31,690
unless you were
in her bedroom,
985
00:38:31,730 --> 00:38:33,860
and I knew
that you weren't. So I
986
00:38:33,900 --> 00:38:36,740
accessed your Bureau files
and I found that photo.
987
00:38:36,760 --> 00:38:39,030
Without my
authorization
988
00:38:39,070 --> 00:38:40,730
and a judge's
subpoena,
989
00:38:40,770 --> 00:38:42,870
you broke the law
when you took that photo.
990
00:38:42,900 --> 00:38:45,140
It was a digital search
without a warrant.
991
00:38:45,170 --> 00:38:47,970
I couldn't let Lomis win again.
992
00:38:48,010 --> 00:38:49,980
And I know
this sounds insane,
993
00:38:50,010 --> 00:38:53,610
but I...
994
00:38:53,650 --> 00:38:55,980
I needed to justify your
decision to hire me.
995
00:38:56,020 --> 00:38:58,520
Your belief in me.
996
00:38:58,550 --> 00:39:01,090
I started at the FBI
pushing a mail cart.
997
00:39:01,120 --> 00:39:04,490
And I would've been there
forever, but you found me.
998
00:39:04,530 --> 00:39:06,490
I hadn't been
in CTOC ten minutes
999
00:39:06,530 --> 00:39:08,500
before I realized
how dedicated you were.
1000
00:39:08,530 --> 00:39:09,800
And watching you
1001
00:39:09,830 --> 00:39:13,130
love your job
1002
00:39:13,170 --> 00:39:16,040
made me love my job.
1003
00:39:19,040 --> 00:39:21,610
And made me never
want to let you down.
1004
00:39:23,850 --> 00:39:25,820
I didn't know what else to do.
1005
00:39:27,780 --> 00:39:29,750
That is no excuse.
1006
00:39:29,780 --> 00:39:31,890
What if Lomis
was a 35-year-old man?
1007
00:39:31,920 --> 00:39:33,120
I know. He would have walked.
1008
00:39:33,150 --> 00:39:36,120
And I would've been
forced to turn you in.
1009
00:39:38,830 --> 00:39:40,560
Today's your lucky day.
1010
00:39:40,600 --> 00:39:42,770
Your mistake is not
sending you to prison.
1011
00:39:42,800 --> 00:39:44,800
It's dying here with me.
1012
00:39:46,230 --> 00:39:48,900
But I want you
to think about something.
1013
00:39:48,940 --> 00:39:51,200
Does victory
really taste so sweet
1014
00:39:51,240 --> 00:39:53,540
when you haven't
earned it honestly?
1015
00:40:26,710 --> 00:40:28,980
Captioning sponsored by
CBS
1016
00:40:29,010 --> 00:40:32,110
Captioned by
Media Access Group at WGBH
access.wgbh.org
72643
Can't find what you're looking for?
Get subtitles in any language from opensubtitles.com, and translate them here.