1
00:00:01,102 --> 00:00:02,134
My name is Avery Ryan.
2
00:00:02,136 --> 00:00:03,235
I'm a cyber psychologist
3
00:00:03,237 --> 00:00:05,704
and special agent for the FBI.
4
00:00:05,706 --> 00:00:09,208
I lead a team of cyber experts
and former black hats
5
00:00:09,210 --> 00:00:12,144
waging a war against
a new breed of criminal:
6
00:00:12,146 --> 00:00:15,514
online predators hiding
in the Deep Web,
7
00:00:15,516 --> 00:00:17,483
faceless, nameless,
8
00:00:17,485 --> 00:00:19,785
hackers intruding
into our digital lives,
9
00:00:19,787 --> 00:00:22,321
lurking inside our devices,
10
00:00:22,323 --> 00:00:24,256
just a keystroke away.
11
00:00:26,127 --> 00:00:28,193
¶ ¶
12
00:00:36,704 --> 00:00:38,771
¶ ¶
13
00:00:43,577 --> 00:00:46,245
FEMALE VOICE:
Can you do that for me now?
14
00:00:46,247 --> 00:00:48,647
GIRL:
Okay, I can do that.
15
00:01:05,199 --> 00:01:07,232
(furniture scrapes along floor)
16
00:01:08,636 --> 00:01:10,702
(object clicking)
17
00:01:12,773 --> 00:01:14,840
(indistinct chatter)
18
00:01:20,214 --> 00:01:24,283
Blattaria-- more commonly
referred to as the cockroach.
19
00:01:24,285 --> 00:01:25,784
But these guys
are amazing.
20
00:01:25,786 --> 00:01:29,321
I mean, they've been around
for, like, 354 million years.
21
00:01:29,323 --> 00:01:32,591
They can live six
weeks without eating.
22
00:01:32,593 --> 00:01:35,127
Ooh.
Two weeks without
their head.
23
00:01:35,129 --> 00:01:36,662
(chuckles)
(laughs): Come on.
24
00:01:36,664 --> 00:01:38,330
Anyway, see the, um...
25
00:01:38,332 --> 00:01:40,499
the chip there?
Mm.
26
00:01:40,501 --> 00:01:42,201
It communicates
27
00:01:42,203 --> 00:01:43,903
with the roach's antenna,
28
00:01:43,904 --> 00:01:45,604
and then the whole thing
is controlled wirelessly.
29
00:01:45,606 --> 00:01:47,473
I mean, the possibilities
are endless.
30
00:01:47,475 --> 00:01:50,576
All right, how much are these
cyber roaches gonna cost me?
31
00:01:50,578 --> 00:01:52,544
No, no, no, no.
I'm the director
32
00:01:52,546 --> 00:01:55,214
of Next-Gen Forensics--
I-I don't do math.
33
00:01:55,216 --> 00:01:57,767
That's your job,
34
00:01:57,768 --> 00:02:00,319
as the-- what are you now,
the... new deputy director?
35
00:02:00,321 --> 00:02:01,386
I didn't accept that job.
36
00:02:03,257 --> 00:02:05,491
Well...
37
00:02:05,493 --> 00:02:07,459
it's probably for
the best, you know?
38
00:02:07,461 --> 00:02:09,628
The politics, the
old-school protocol--
39
00:02:09,630 --> 00:02:11,296
that's not your style.
40
00:02:11,298 --> 00:02:13,499
I didn't say I won't accept it.
41
00:02:13,501 --> 00:02:16,602
Oh, good-- 'cause seriously,
you-you-you'd be perfect.
42
00:02:16,604 --> 00:02:18,303
I mean, who else
are they gonna get?
43
00:02:18,305 --> 00:02:20,205
The last four months,
what did you do?
44
00:02:20,207 --> 00:02:23,342
You took down three of
the Top Ten Most Wanted.
45
00:02:23,344 --> 00:02:26,245
As Nelson would say,
"You on fleek."
46
00:02:26,247 --> 00:02:27,713
Fleek?
47
00:02:27,715 --> 00:02:29,314
(chuckles)
48
00:02:29,316 --> 00:02:32,284
I told the director
I'd think about it.
49
00:02:32,286 --> 00:02:35,754
I'm not sure I'm ready
to become a member of the brass.
50
00:02:35,756 --> 00:02:38,323
Simon Sifter's
a tough act to follow.
51
00:02:38,325 --> 00:02:39,825
I miss him.
52
00:02:39,827 --> 00:02:41,860
Hope he's enjoying
his new promotion.
53
00:02:41,862 --> 00:02:44,496
So...
54
00:02:44,498 --> 00:02:46,431
we gonna do this?
55
00:02:46,433 --> 00:02:50,235
I want to be... that one.
56
00:02:50,237 --> 00:02:51,737
That's my girl.
57
00:02:51,739 --> 00:02:53,906
Loser buys lunch
for a week.
58
00:02:53,908 --> 00:02:56,608
I'd like mine personally
catered from La Friche.
59
00:02:56,610 --> 00:02:58,510
(both laugh)
60
00:02:58,512 --> 00:02:59,778
Okeydokey.
61
00:02:59,780 --> 00:03:01,413
BOTH:
Ready.
62
00:03:01,415 --> 00:03:02,548
RYAN:
Set.
63
00:03:02,550 --> 00:03:05,184
Go!
64
00:03:05,186 --> 00:03:07,186
Oh, yeah.
Oh, yeah, here we go.
65
00:03:07,188 --> 00:03:09,721
(chuckles):
Use the remote control. Avery.
66
00:03:09,723 --> 00:03:10,956
Oh, yeah. Yeah!
This is amazing.
67
00:03:10,958 --> 00:03:12,424
I'm actually controlling
68
00:03:12,426 --> 00:03:15,761
her direction.
(Russell laughing)
69
00:03:15,763 --> 00:03:18,297
RYAN: Come on, come on, go, go!
My roach stopped.
70
00:03:18,299 --> 00:03:20,399
Go, go, go!
You can do it!
71
00:03:20,401 --> 00:03:21,800
My controller's not working.
Go, girl!
72
00:03:21,802 --> 00:03:22,935
Go, go, go!
73
00:03:22,937 --> 00:03:24,603
You can do it!
74
00:03:24,605 --> 00:03:26,205
Go! Go! Go!
75
00:03:26,207 --> 00:03:27,506
(both laughing)
76
00:03:28,776 --> 00:03:31,476
Wait, D.B.
77
00:03:31,478 --> 00:03:34,279
How do we stop them?
78
00:03:34,281 --> 00:03:36,481
Yeah, I don't know.
79
00:03:36,483 --> 00:03:37,883
Get it!
80
00:03:37,885 --> 00:03:39,818
Get-get-get 'em,
get 'em, get 'em!
81
00:03:57,838 --> 00:03:59,905
¶ ¶
82
00:04:09,950 --> 00:04:12,017
(siren wailing in distance)
83
00:04:14,321 --> 00:04:16,288
(beeping)
84
00:04:17,258 --> 00:04:19,658
(groans)
85
00:04:21,328 --> 00:04:23,528
(clears throat)
86
00:04:23,530 --> 00:04:25,764
(beeping stops)
87
00:04:29,270 --> 00:04:31,336
(water running)
88
00:04:36,343 --> 00:04:39,511
(woman's distorted sobbing)
89
00:04:39,513 --> 00:04:42,381
KRUMITZ:
Francine, what's going on?
What happened? Tell me.
90
00:04:42,383 --> 00:04:44,383
(sobbing)
91
00:04:44,385 --> 00:04:46,485
I killed him.
92
00:04:48,522 --> 00:04:50,555
I did it, Daniel.
93
00:04:51,725 --> 00:04:53,992
I killed Taylor Pettis.
94
00:04:53,994 --> 00:04:55,694
NELSON:
Krummy.
95
00:04:56,897 --> 00:04:59,631
Bro, did you stay here
all night again?
96
00:05:01,669 --> 00:05:03,835
(sighs) Big day
in court, man.
97
00:05:03,837 --> 00:05:06,338
You know, maybe getting a
little sleep wouldn't have...
98
00:05:06,340 --> 00:05:07,706
wouldn't have
been a bad idea.
99
00:05:07,708 --> 00:05:09,708
It's a pretty big
murder trial.
100
00:05:09,710 --> 00:05:11,310
And it's Francine.
101
00:05:12,079 --> 00:05:13,679
I'm just a character witness,
Nelson.
102
00:05:13,681 --> 00:05:15,614
I got it.
103
00:05:16,350 --> 00:05:17,549
What?
104
00:05:17,551 --> 00:05:19,584
No, man,
I'm just worried about you.
105
00:05:19,586 --> 00:05:22,487
I mean, we're all worried
about you.
I don't know why
106
00:05:22,489 --> 00:05:24,723
everybody's making
such a big deal of it.
107
00:05:24,725 --> 00:05:26,024
Pettis was stalking my sister.
108
00:05:26,026 --> 00:05:27,626
She shot him in self-defense.
109
00:05:27,628 --> 00:05:28,994
He's dead.
110
00:05:28,996 --> 00:05:30,495
She'll be fine.
111
00:05:30,497 --> 00:05:32,331
I'll be fine.
112
00:05:35,002 --> 00:05:36,835
All right.
113
00:05:38,072 --> 00:05:41,073
(indistinct chatter)
114
00:05:41,075 --> 00:05:43,842
D.B., more of your toys.
115
00:05:43,844 --> 00:05:46,545
Soon you're gonna have
every Wi-Fi,
116
00:05:46,547 --> 00:05:48,613
Bluetooth signal
transmitting device out there.
117
00:05:48,615 --> 00:05:49,648
Well, that's the idea.
118
00:05:49,650 --> 00:05:51,350
I'll study 'em,
you'll hack 'em,
119
00:05:51,352 --> 00:05:52,884
and together we'll
stay two steps ahead
120
00:05:52,886 --> 00:05:54,686
of the guys in
the black hats.
121
00:05:54,688 --> 00:05:56,688
We'll take 'em all down.
Yes!
122
00:05:57,624 --> 00:05:58,924
(laughs):
Sounds good.
123
00:05:58,926 --> 00:06:00,992
Did you hear?
What?
124
00:06:00,994 --> 00:06:03,395
Linda found a cockroach
in her coffee this morning.
125
00:06:03,397 --> 00:06:04,896
Not one of mine.
No, no, no.
126
00:06:04,898 --> 00:06:07,532
Hootie and all the Blowfish
are present and accounted for.
127
00:06:07,534 --> 00:06:09,634
NELSON: What?
I'm just saying.
You okay?
128
00:06:09,636 --> 00:06:11,937
Yeah, fine.
Your top button's
unbuttoned
129
00:06:11,939 --> 00:06:13,638
and you're not wearing
your watch.
130
00:06:13,640 --> 00:06:15,707
You're distracted.
Something's on your mind.
131
00:06:15,709 --> 00:06:17,709
I just woke up
late, that's all.
132
00:06:17,711 --> 00:06:20,645
Just downloaded everything
from a home burglary
in Georgetown into CTOC.
133
00:06:20,647 --> 00:06:22,514
I thought you were
taking the day off.
134
00:06:22,516 --> 00:06:24,716
I'd rather be here than
at the courthouse waiting.
135
00:06:24,718 --> 00:06:26,051
Metro PD recovered
136
00:06:26,053 --> 00:06:28,153
a phone from a crime scene,
asked us to try
137
00:06:28,155 --> 00:06:29,788
to get an I.D.
on its owner.
138
00:06:29,790 --> 00:06:31,690
I got a binary dump
off the phone,
139
00:06:31,692 --> 00:06:34,593
but the data was misaligned,
so that's gonna take a while.
140
00:06:34,595 --> 00:06:36,528
Although I was able to access
141
00:06:36,530 --> 00:06:38,730
the locally stored
database, calendar
142
00:06:38,732 --> 00:06:40,582
and apps.
143
00:06:40,583 --> 00:06:42,433
Phone belonged
to the homeowner,
Scott Barrett.
144
00:06:42,436 --> 00:06:44,636
Found blood and tissue in the
shattered screen and housing.
145
00:06:44,638 --> 00:06:46,671
Still waiting on DNA results.
146
00:06:46,673 --> 00:06:48,440
Definitely suggests violence.
147
00:06:48,442 --> 00:06:50,509
Is Scott Barrett okay?
Don't know.
148
00:06:50,511 --> 00:06:52,577
Metro is still trying
to locate him.
149
00:06:52,579 --> 00:06:53,945
His employer said
he was on vacation.
150
00:06:53,947 --> 00:06:55,847
He wasn't at the house
at the time of the robbery.
151
00:06:55,849 --> 00:06:57,916
On vacation without his phone?
152
00:06:57,918 --> 00:06:59,184
Who goes anywhere
without their phone?
153
00:06:59,186 --> 00:07:01,586
Well, who called in
the burglary?
154
00:07:01,588 --> 00:07:04,523
According to the police report,
the housekeeper.
155
00:07:04,525 --> 00:07:05,824
This is all very intriguing,
Krumitz,
156
00:07:05,826 --> 00:07:07,692
but you brought us all in here
157
00:07:07,694 --> 00:07:10,462
for a case that belongs
to ViCAP, not Cyber.
158
00:07:10,464 --> 00:07:12,731
Except... I stumbled
upon a little something
159
00:07:12,733 --> 00:07:14,599
that makes it Cyber.
160
00:07:14,601 --> 00:07:17,469
The home's security system
was hacked.
161
00:07:17,471 --> 00:07:19,004
(chuckles)
Check this out.
162
00:07:20,607 --> 00:07:22,641
He always do that?
Bury the lead?
163
00:07:22,643 --> 00:07:24,109
Ah, he loves
the attention.
164
00:07:24,111 --> 00:07:25,577
You know, in his mind
this is the bridge
165
00:07:25,579 --> 00:07:27,846
and he's Captain Kirk, you know?
(laughs)
166
00:07:27,848 --> 00:07:30,682
KRUMITZ:
Anyway...
167
00:07:30,684 --> 00:07:32,684
one of the apps I was able
to recover from the phone
168
00:07:32,686 --> 00:07:34,753
was for P-TECH alarm systems,
and the last time
169
00:07:34,755 --> 00:07:38,523
the phone's app was accessed it
armed the home security system
170
00:07:38,525 --> 00:07:39,992
in Scott Barrett's home.
171
00:07:39,993 --> 00:07:41,460
RAMIREZ: But according
to the police report,
172
00:07:41,462 --> 00:07:44,095
no alarm was triggered
during the burglary.
173
00:07:44,097 --> 00:07:45,630
I already called
the security company.
174
00:07:45,632 --> 00:07:47,165
Their logs show
an incoming command
175
00:07:47,166 --> 00:07:48,699
to disarm the system,
but a closer look revealed
176
00:07:48,702 --> 00:07:50,869
it didn't come
from the home keypad or the app.
177
00:07:50,871 --> 00:07:52,637
That means somebody hacked
the communication
178
00:07:52,639 --> 00:07:54,506
between the control panel
and P-TECH.
179
00:07:54,508 --> 00:07:56,708
And disarmed the alarm
remotely from his own device
180
00:07:56,710 --> 00:07:58,043
without being detected.
181
00:07:58,045 --> 00:08:00,479
If that's true,
there's a black hat out there
182
00:08:00,481 --> 00:08:03,215
that can gain access
to any house, any business
183
00:08:03,217 --> 00:08:06,184
that happens to have
a P-TECH alarm system.
184
00:08:06,186 --> 00:08:08,520
That's a regional company.
185
00:08:08,522 --> 00:08:11,556
The entire Eastern Seaboard
is his playground.
186
00:08:11,558 --> 00:08:13,075
Raven, contact P-TECH.
187
00:08:13,076 --> 00:08:14,593
See if they've been notified
of any other intrusions.
188
00:08:14,595 --> 00:08:17,829
This could be the beginning
of a really big crime spree.
189
00:08:23,704 --> 00:08:25,770
MAN (over police radio):
Dispatch, this is
Charlie-312. Over.
190
00:08:25,772 --> 00:08:27,906
Responding to that 10-29.
191
00:08:27,908 --> 00:08:29,808
No wants, no warrants.
192
00:08:33,947 --> 00:08:37,782
¶ ¶
193
00:08:42,689 --> 00:08:44,122
MUNDO:
Barrett's housekeeper reported
194
00:08:44,124 --> 00:08:45,690
some jewelry stolen.
195
00:08:45,692 --> 00:08:46,992
Couple watches,
a tablet.
196
00:08:46,994 --> 00:08:48,627
No eyewitnesses to the burglary.
197
00:08:48,629 --> 00:08:51,263
The house is our eyewitness.
198
00:08:51,265 --> 00:08:53,798
Grab the router, the computer,
199
00:08:53,800 --> 00:08:55,901
the security control box,
the game console--
200
00:08:55,903 --> 00:08:59,004
bring them back to CTOC,
let's see what we find.
201
00:08:59,006 --> 00:09:00,238
I know that look.
202
00:09:00,240 --> 00:09:02,173
Something's not
adding up for you.
203
00:09:02,175 --> 00:09:04,042
Well, hackers
are motivated
204
00:09:04,044 --> 00:09:06,678
by one of two things:
pride or profit.
205
00:09:06,680 --> 00:09:08,179
One group wants
to boast,
206
00:09:08,181 --> 00:09:10,715
impress other hackers
with their skills,
207
00:09:10,717 --> 00:09:13,285
creativity,
their never-seen-before code.
208
00:09:13,287 --> 00:09:15,287
And the other group...
209
00:09:15,289 --> 00:09:17,055
they want money.
Right,
210
00:09:17,057 --> 00:09:19,157
but those guys can simply
harvest credit card numbers
211
00:09:19,159 --> 00:09:21,693
from retailers by the millions,
sell them for $20 online,
212
00:09:21,695 --> 00:09:24,062
and never even leave
the comfort of their own home.
213
00:09:24,064 --> 00:09:25,864
Right.
214
00:09:25,866 --> 00:09:29,601
So why would our target
hack into this sophisticated
215
00:09:29,603 --> 00:09:31,603
security system,
enter this house
216
00:09:31,605 --> 00:09:34,105
just to commit petty larceny?
217
00:09:34,107 --> 00:09:36,007
RUSSELL:
Someone vacuumed.
218
00:09:36,009 --> 00:09:37,876
MAN (calls):
Agent Mundo!
219
00:09:40,180 --> 00:09:43,715
Somebody vacuumed the floor,
but not this area
220
00:09:43,717 --> 00:09:46,351
right here in front of you.
The housekeeper reported
221
00:09:46,353 --> 00:09:48,286
the burglary--
maybe she got started
222
00:09:48,288 --> 00:09:50,722
before she noticed
anything was missing.
223
00:09:50,724 --> 00:09:54,059
Yeah, I don't think so--
the edges of the void
are not consistent
224
00:09:54,061 --> 00:09:55,694
with the movement of a...
225
00:09:55,696 --> 00:09:59,130
vacuum going
back and forth.
226
00:09:59,132 --> 00:10:00,932
Something was here.
227
00:10:00,934 --> 00:10:03,735
Very odd shape.
228
00:10:03,737 --> 00:10:06,271
Maybe that's what
the thief took with him.
229
00:10:08,141 --> 00:10:09,374
Okay.
230
00:10:09,376 --> 00:10:10,942
Hello.
231
00:10:10,944 --> 00:10:13,178
You ever see one
of these little...
232
00:10:13,180 --> 00:10:14,879
automatic vacuums?
233
00:10:14,881 --> 00:10:16,681
(laughs): No.
Oh, they're
so amazing.
234
00:10:16,683 --> 00:10:20,685
You can set the timer
to vacuum on a schedule.
235
00:10:20,687 --> 00:10:22,721
Is this a subtle hint?
You want me to get you
236
00:10:22,723 --> 00:10:23,822
one of these for
your birthday?
237
00:10:23,824 --> 00:10:24,889
Yes, please.
(laughs)
238
00:10:24,891 --> 00:10:26,925
No. Actually,
my point is
239
00:10:26,927 --> 00:10:28,960
this new model, it has memory.
240
00:10:28,962 --> 00:10:31,296
It recalls
the layout of the room,
241
00:10:31,298 --> 00:10:33,131
the placement
of the furniture and...
242
00:10:33,133 --> 00:10:36,768
and objects,
and it automatically
maneuvers around them
243
00:10:36,770 --> 00:10:38,169
the next time
it starts its cycle.
244
00:10:38,171 --> 00:10:39,838
This is our digital eyewitness.
245
00:10:39,840 --> 00:10:41,239
Yeah. Yeah.
246
00:10:41,241 --> 00:10:43,842
It's gonna tell us
what was taken from this room.
247
00:10:43,844 --> 00:10:45,910
¶ ¶
248
00:10:54,087 --> 00:10:56,154
(indistinct police transmission)
249
00:11:01,695 --> 00:11:03,762
(whirring)
250
00:11:33,727 --> 00:11:35,427
RUSSELL:
38 minutes.
251
00:11:35,429 --> 00:11:38,430
Enough time for the vacuum
to do its work and to...
252
00:11:38,432 --> 00:11:43,134
think that whoever was lying
there was a piece of furniture.
253
00:11:43,136 --> 00:11:46,471
Our burglary
just became a homicide.
254
00:11:46,473 --> 00:11:48,373
But who's our victim?
255
00:11:48,375 --> 00:11:52,977
And where's their body?
256
00:11:56,116 --> 00:12:02,387
¶ I know you've deceived me,
now here's a surprise ¶
257
00:12:04,224 --> 00:12:10,829
¶ I know that you have, 'cause
there's magic in my eyes ¶
258
00:12:10,831 --> 00:12:13,965
¶ I can see
for miles and miles ¶
259
00:12:13,967 --> 00:12:18,002
¶ I can see for miles
and miles ¶
260
00:12:18,004 --> 00:12:22,073
¶ I can see
for miles and miles ¶
261
00:12:22,075 --> 00:12:25,844
¶ And miles... ¶
262
00:12:25,846 --> 00:12:26,911
¶ Oh, yeah. ¶
263
00:12:43,130 --> 00:12:47,499
Okay. Let's see
what you have to say.
264
00:12:49,469 --> 00:12:51,870
Yes. Photos.
265
00:12:51,872 --> 00:12:53,138
Okay.
266
00:12:53,140 --> 00:12:56,040
Text messages. Okay.
267
00:12:57,010 --> 00:13:00,812
Look at that. That one.
268
00:13:00,814 --> 00:13:03,815
DNA results on the tissue
and blood Krumitz found
269
00:13:03,817 --> 00:13:05,416
in the phone were a match
to the saliva I swabbed
270
00:13:05,418 --> 00:13:07,051
from the mouthpiece.
271
00:13:07,053 --> 00:13:08,052
And all three were a match
272
00:13:08,054 --> 00:13:09,420
to a hair found
in a brush
273
00:13:09,422 --> 00:13:11,089
I brought back
from the crime scene.
274
00:13:11,091 --> 00:13:13,091
Which means Scott Barrett
was not on vacation.
275
00:13:13,093 --> 00:13:14,559
He's our victim.
276
00:13:14,561 --> 00:13:16,161
My guess is,
Barrett surprised the burglar,
277
00:13:16,163 --> 00:13:17,428
who thought the
house would be empty.
278
00:13:17,430 --> 00:13:19,964
They struggled. Barrett lost.
Guys,
279
00:13:19,966 --> 00:13:22,100
I got something. I just
recovered a text message chain
280
00:13:22,102 --> 00:13:25,170
on Barrett's phone between
Barrett and a woman named Ellen.
281
00:13:25,172 --> 00:13:27,138
MUNDO: I did some background
on the victim.
282
00:13:27,140 --> 00:13:29,174
Ellen Peters is the
victim's ex-wife.
283
00:13:29,176 --> 00:13:31,042
Well, that might explain
why she wrote this.
284
00:13:31,044 --> 00:13:33,044
"Thanks for covering
the last two days.
285
00:13:33,046 --> 00:13:34,913
"I know you had
to postpone your vacation.
286
00:13:34,915 --> 00:13:37,282
I'll come right from the airport
to get her."
287
00:13:37,284 --> 00:13:39,851
Her?
288
00:13:39,853 --> 00:13:41,252
MUNDO: They have a six-year-old
daughter named Rae.
289
00:13:41,254 --> 00:13:43,054
They share custody, but
Rae spends most of the time
290
00:13:43,056 --> 00:13:45,824
with her mother.
291
00:13:45,826 --> 00:13:48,259
This must be Rae.
292
00:13:48,261 --> 00:13:50,595
And according to the text chain,
Ellen was on a business trip
293
00:13:50,597 --> 00:13:52,096
in Australia that got extended.
294
00:13:52,098 --> 00:13:54,065
She's on a flight right now,
back to the States.
295
00:13:54,067 --> 00:13:56,367
If Scott Barrett's dead,
where's his daughter?
296
00:14:06,313 --> 00:14:08,413
Peanut butter and jelly.
297
00:14:08,415 --> 00:14:09,581
What?
298
00:14:09,583 --> 00:14:11,349
His daughter,
she's in the house.
299
00:14:11,351 --> 00:14:13,117
(siren wailing)
300
00:14:17,057 --> 00:14:20,124
(whispering):
I don't hear anything.
301
00:14:21,862 --> 00:14:24,128
I think he's gone.
302
00:14:24,130 --> 00:14:26,965
Rae, can you keep a secret?
303
00:14:26,967 --> 00:14:28,566
Yeah, I can keep a secret.
304
00:14:28,568 --> 00:14:29,934
It's gonna be fun.
305
00:14:29,936 --> 00:14:31,569
Okay.
306
00:14:36,076 --> 00:14:38,209
I'll look in here.
307
00:14:38,211 --> 00:14:40,545
Rae?
Rae?
308
00:14:40,547 --> 00:14:42,614
Where are you?
309
00:14:46,119 --> 00:14:48,653
Rae?
310
00:15:10,644 --> 00:15:12,911
(creaking)
311
00:15:15,181 --> 00:15:17,215
Rae. Are you Rae?
312
00:15:17,217 --> 00:15:19,250
Don't be
afraid.
313
00:15:19,252 --> 00:15:21,920
D.B., I found her!
314
00:15:23,323 --> 00:15:24,455
I want my daddy.
315
00:15:24,457 --> 00:15:26,190
Do you know where he is?
316
00:15:26,192 --> 00:15:27,926
I don't know where your dad is,
317
00:15:27,928 --> 00:15:30,561
but that's okay.
It's gonna be fun.
318
00:15:31,531 --> 00:15:33,932
Honey, my name's Avery.
319
00:15:33,934 --> 00:15:35,934
I'm here to keep you safe.
320
00:15:35,936 --> 00:15:39,270
Can you tell me why
you're hiding in this closet?
321
00:15:39,272 --> 00:15:40,939
My daddy always told me,
322
00:15:40,941 --> 00:15:45,410
if I ever see anyone strange
in the house,
323
00:15:45,412 --> 00:15:48,413
I'm supposed to hide in here.
324
00:15:48,415 --> 00:15:50,515
Did you see somebody strange?
325
00:15:56,957 --> 00:15:58,256
(gasps)
326
00:15:58,258 --> 00:16:00,024
That's him!
327
00:16:00,026 --> 00:16:01,960
Honey, it's okay.
This is my friend.
328
00:16:02,696 --> 00:16:05,263
Hi.
329
00:16:07,667 --> 00:16:09,467
Listen, Rae,
330
00:16:09,469 --> 00:16:12,737
we're just gonna sit here until
you feel comfortable, okay?
331
00:16:12,739 --> 00:16:14,205
And then when
you're ready,
332
00:16:14,207 --> 00:16:16,607
I'm gonna take you
someplace really safe.
333
00:16:17,577 --> 00:16:20,244
Do you want to hold my badge?
334
00:16:20,246 --> 00:16:22,313
Okay.
335
00:16:28,688 --> 00:16:32,256
(indistinct chatter)
336
00:16:33,526 --> 00:16:35,693
RYAN:
Rae,
337
00:16:35,695 --> 00:16:37,762
you hungry?
338
00:16:38,698 --> 00:16:40,298
I spoke with
your mom,
339
00:16:40,300 --> 00:16:43,201
and she said I could ask
you a few questions.
340
00:16:43,203 --> 00:16:44,669
Is that okay with you?
341
00:16:44,671 --> 00:16:47,739
I'm not supposed
to talk to strangers.
342
00:16:47,741 --> 00:16:50,675
(chuckles)
That is a perfect answer.
343
00:16:50,677 --> 00:16:55,246
Well,
maybe your doll can help me.
344
00:16:55,248 --> 00:16:57,248
Hi. What's
your name?
345
00:16:57,250 --> 00:16:59,384
Marla.
346
00:16:59,386 --> 00:17:03,187
But she doesn't talk
when we're not at home.
347
00:17:03,189 --> 00:17:05,323
She's shy.
348
00:17:06,292 --> 00:17:09,360
Sometimes I'm shy, too.
349
00:17:09,362 --> 00:17:11,629
Maybe that means
we'll get along.
350
00:17:11,631 --> 00:17:14,732
Hi, Marla. Nice
to meet you.
351
00:17:14,734 --> 00:17:17,335
I'm Avery.
352
00:17:17,337 --> 00:17:19,537
I'm gonna ask you
a few questions,
353
00:17:19,539 --> 00:17:22,807
but if you get tired
and you want to stop,
354
00:17:22,809 --> 00:17:26,310
you just wrinkle your nose
like this.
355
00:17:27,280 --> 00:17:29,514
(chuckles)
356
00:17:29,516 --> 00:17:32,050
Oh, no.
357
00:17:32,052 --> 00:17:35,319
Marla can't wrinkle her nose.
358
00:17:35,321 --> 00:17:37,455
Hmm. What are we gonna do?
359
00:17:37,457 --> 00:17:40,224
We need to think
of something else.
360
00:17:43,163 --> 00:17:46,230
She can raise her hand.
361
00:17:47,300 --> 00:17:51,369
Yes! That's a great idea, Rae.
362
00:17:51,371 --> 00:17:54,372
So, Marla, when I ask
you these questions,
363
00:17:54,374 --> 00:17:56,374
if you get too tired
or you want to stop,
364
00:17:56,376 --> 00:17:58,309
you just raise
your hand.
365
00:17:58,311 --> 00:18:03,247
Marla, how long did you and Rae
hide in the closet?
366
00:18:16,496 --> 00:18:18,229
What's going on?
367
00:18:18,231 --> 00:18:19,697
NELSON:
He's sleeping.
368
00:18:19,699 --> 00:18:21,432
RYAN:
Maybe he's channeling
the Force.
369
00:18:21,434 --> 00:18:25,770
(scoffs)
He's not a Jedi.
370
00:18:25,772 --> 00:18:28,473
Look at him.
He's sleeping sitting up.
371
00:18:28,475 --> 00:18:31,542
Well, if he's Obi-Wan,
I want to be Yoda.
372
00:18:40,120 --> 00:18:40,885
Uh...
373
00:18:40,887 --> 00:18:41,752
Oh.
374
00:18:41,754 --> 00:18:42,720
(both laugh)
375
00:18:42,722 --> 00:18:44,322
Power nap?
Mm-hmm.
376
00:18:44,324 --> 00:18:45,389
Nah, I was meditating.
377
00:18:45,391 --> 00:18:47,558
Oh, sorry.
378
00:18:47,560 --> 00:18:48,826
Well, it turns out
Rae didn't witness
379
00:18:48,828 --> 00:18:50,862
her father's murder.
380
00:18:50,863 --> 00:18:52,897
Oh, that's very good news.
She got
dropped off
381
00:18:52,899 --> 00:18:55,433
from a sleepover.
The door was unlocked.
382
00:18:55,435 --> 00:18:58,569
Her dad wasn't there. She let
herself into her closet fort.
383
00:18:58,571 --> 00:19:01,572
She played with her tablet,
made herself a sandwich,
384
00:19:01,574 --> 00:19:05,243
fell asleep. And this was
after the body was removed
385
00:19:05,245 --> 00:19:07,378
but before we arrived
on the scene.
386
00:19:07,380 --> 00:19:09,714
Boy, that's
one independent little girl.
387
00:19:09,716 --> 00:19:11,382
(knocking)
388
00:19:11,384 --> 00:19:12,900
Just confirmed
that there's been
389
00:19:12,901 --> 00:19:14,417
seven P-TECH security
burglaries in the past
390
00:19:14,420 --> 00:19:16,687
week and a half.
RUSSELL:
I'm surprised.
391
00:19:16,689 --> 00:19:19,290
Metro Police should have noticed
a pattern.
392
00:19:19,292 --> 00:19:20,825
Well, not all of them happened
in the District.
393
00:19:20,827 --> 00:19:22,560
Maryland, Virginia as well.
394
00:19:22,562 --> 00:19:26,497
In all seven homes, the P-TECH
system was shut down remotely.
395
00:19:26,499 --> 00:19:28,733
And no one-- not the homeowners
396
00:19:28,735 --> 00:19:32,403
or the police-- can identify
the burglar's point of entry.
397
00:19:33,773 --> 00:19:36,174
(scraping)
398
00:19:37,310 --> 00:19:39,577
(creaking)
399
00:19:42,415 --> 00:19:44,482
I know how our target got in.
400
00:19:47,420 --> 00:19:49,420
Rae,
401
00:19:49,422 --> 00:19:51,789
I have
a really important question
402
00:19:51,791 --> 00:19:53,624
I need
your help with.
403
00:19:53,626 --> 00:19:56,460
Did you unlock the back window
in your house?
404
00:19:56,462 --> 00:19:57,595
Yes.
405
00:19:57,597 --> 00:19:59,931
Why'd you do that?
406
00:19:59,933 --> 00:20:02,533
Marla told me to.
407
00:20:02,535 --> 00:20:04,468
Marla told you to?
408
00:20:04,470 --> 00:20:07,972
I was going to a sleepover,
remember?
409
00:20:07,974 --> 00:20:09,473
Yes.
410
00:20:09,475 --> 00:20:11,676
But Marla couldn't come.
411
00:20:11,678 --> 00:20:13,811
So she wanted me
to unlock the window
412
00:20:13,813 --> 00:20:16,881
so she could go in
the backyard to play.
413
00:20:16,883 --> 00:20:20,618
What else did Marla tell you
to do?
414
00:20:22,655 --> 00:20:24,455
It's okay.
415
00:20:24,457 --> 00:20:26,791
You can tell me.
416
00:20:26,793 --> 00:20:28,993
I took her in Daddy's room.
417
00:20:29,963 --> 00:20:32,330
And I know
418
00:20:32,332 --> 00:20:34,632
I'm not supposed to go in there.
419
00:20:35,602 --> 00:20:36,867
Rae,
420
00:20:36,869 --> 00:20:38,803
honey,
421
00:20:38,805 --> 00:20:41,806
you didn't do anything wrong.
422
00:20:41,808 --> 00:20:43,641
Okay?
423
00:20:43,643 --> 00:20:46,777
Okay.
424
00:20:46,779 --> 00:20:48,946
I just got your text.
What do you got?
425
00:20:48,948 --> 00:20:50,781
NELSON:
We went through all the devices
that you brought back
426
00:20:50,783 --> 00:20:52,516
from the Barretts'
brownstone.
427
00:20:52,518 --> 00:20:53,651
The very last thing
he did
428
00:20:53,653 --> 00:20:55,886
was play a golf game
on his Game Vex.
429
00:20:55,888 --> 00:20:57,888
Game Vex has
a 3-D mapping system.
430
00:20:57,890 --> 00:21:00,558
It captures images
of the room you're in.
431
00:21:00,560 --> 00:21:02,893
The console emits invisible
infrared dots of light.
432
00:21:02,895 --> 00:21:04,862
I mean, they're bouncing off of
everything, mapping the space.
433
00:21:04,864 --> 00:21:06,397
We even set up a Game Vex.
434
00:21:06,399 --> 00:21:07,832
Now we can see
what the console sees
435
00:21:07,834 --> 00:21:09,367
through these night-vision
glasses.
436
00:21:09,369 --> 00:21:11,435
Go ahead and put 'em on.
437
00:21:19,912 --> 00:21:22,847
These data points will be
turned into a 2-D depth image
438
00:21:22,849 --> 00:21:26,017
by measuring our distance
from the lens.
439
00:21:26,019 --> 00:21:27,918
It then creates a
point cloud image.
440
00:21:27,920 --> 00:21:29,704
MUNDO:
Okay, this is how
441
00:21:29,705 --> 00:21:31,489
the console communicates
with and identifies the user.
442
00:21:31,491 --> 00:21:33,391
Knows when you've
stepped in the room
443
00:21:33,393 --> 00:21:36,694
to respond to your
voice commands.
444
00:21:36,696 --> 00:21:38,496
RAMIREZ:
Right. While playing,
445
00:21:38,498 --> 00:21:42,566
the console records and saves
the last 20 minutes of gameplay.
446
00:21:42,568 --> 00:21:45,403
I found the console
in the "power on" mode.
447
00:21:45,405 --> 00:21:47,405
Are you telling me the Game Vex
captured the last 20 minutes
448
00:21:47,407 --> 00:21:48,939
of Scott Barrett's life?
449
00:21:50,910 --> 00:21:51,976
(grunting)
450
00:21:58,885 --> 00:22:00,918
We're downloading what
the Game Vex captured
451
00:22:00,920 --> 00:22:02,753
at Scott Barrett's house.
452
00:22:02,755 --> 00:22:05,323
MUNDO:
We know he was playing an
instructional golf video game
453
00:22:05,325 --> 00:22:08,959
on his Game Vex
before he was attacked.
454
00:22:09,796 --> 00:22:11,595
Okay, there's our killer.
455
00:22:11,597 --> 00:22:14,999
The two are struggling over
what looks like a golf club.
456
00:22:17,637 --> 00:22:19,737
(grunting)
457
00:22:29,015 --> 00:22:30,548
In the struggle it looks like
458
00:22:30,550 --> 00:22:31,849
the golf club
struck Scott's phone
459
00:22:31,851 --> 00:22:32,883
after it collided with his head.
460
00:22:32,885 --> 00:22:34,118
That explains the transfer
461
00:22:34,120 --> 00:22:36,821
of the shattered phone screen.
462
00:22:36,823 --> 00:22:38,823
And that same golf club
is our murder weapon.
463
00:22:38,825 --> 00:22:40,791
(grunting)
464
00:22:40,793 --> 00:22:43,627
RAMIREZ:
And it was never recovered
at the scene.
465
00:22:43,629 --> 00:22:45,029
MUNDO:
All right, reboot
in point cloud mode.
466
00:22:45,031 --> 00:22:47,365
Let's get a description
on this guy.
467
00:22:47,367 --> 00:22:49,900
We know Scott Barrett is
five-seven. That means
468
00:22:49,902 --> 00:22:51,102
the attacker is
about five-ten,
469
00:22:51,104 --> 00:22:54,905
165, long hair,
right-handed.
470
00:22:54,907 --> 00:22:57,408
Mm-hmm. Unfortunately,
lot of guys look like that.
471
00:22:57,410 --> 00:22:59,543
Yeah, to catch our target,
472
00:22:59,545 --> 00:23:00,978
we got to step up our game.
473
00:23:00,980 --> 00:23:03,581
We find that golf club,
we get to the killer.
474
00:23:09,389 --> 00:23:11,389
You okay, Daniel?
475
00:23:11,391 --> 00:23:14,925
Yeah, I just
needed some air.
476
00:23:14,927 --> 00:23:16,460
I got the call.
477
00:23:16,462 --> 00:23:17,661
I have to testify
after lunch.
478
00:23:17,663 --> 00:23:20,064
Hey, you're gonna do great.
479
00:23:20,066 --> 00:23:22,466
I still haven't
wrapped my mind
480
00:23:22,468 --> 00:23:24,635
around what Francine did.
481
00:23:24,637 --> 00:23:27,605
I mean, she killed a man.
482
00:23:27,607 --> 00:23:29,940
Killed him in
self-defense.
483
00:23:29,942 --> 00:23:31,509
And today it could all be over
484
00:23:31,511 --> 00:23:33,778
if Francine is gonna
come home soon
485
00:23:33,780 --> 00:23:36,614
and start her life again.
486
00:23:37,617 --> 00:23:39,617
She became kind of
an instant parent
487
00:23:39,619 --> 00:23:41,152
when our mom and dad
were murdered.
488
00:23:41,154 --> 00:23:44,088
I'm gonna tell Mom!
489
00:23:44,090 --> 00:23:46,857
(gasps, panting)
490
00:23:51,464 --> 00:23:53,631
Daniel, get out of here!
491
00:23:53,633 --> 00:23:55,466
Why?
Go!
492
00:23:55,468 --> 00:23:56,934
KRUMITZ:
She never got to be a teenager.
493
00:23:56,936 --> 00:23:59,136
I need help.
494
00:23:59,138 --> 00:24:00,805
KRUMITZ:
She raised me.
495
00:24:00,807 --> 00:24:02,706
I just wish my parents knew
what a good job she did.
496
00:24:02,708 --> 00:24:07,578
Your parents are watching you
from above, Daniel.
497
00:24:07,580 --> 00:24:09,914
They're very proud of you.
498
00:24:09,916 --> 00:24:12,516
You think?
499
00:24:12,518 --> 00:24:14,985
I don't think.
500
00:24:14,987 --> 00:24:17,488
I know.
501
00:24:26,732 --> 00:24:29,166
Elijah, there was a golf app
on Scott Barrett's phone.
502
00:24:29,168 --> 00:24:31,702
It syncs with a device
to help you perfect your swing.
503
00:24:31,704 --> 00:24:32,937
The app communicates
with the club.
504
00:24:32,939 --> 00:24:34,472
MUNDO:
Right. It records path, speed,
505
00:24:34,474 --> 00:24:35,974
angle and impact.
But
506
00:24:35,975 --> 00:24:37,475
the device that was attached
to Barrett's club
507
00:24:37,477 --> 00:24:39,977
was also equipped
with GPS tracking.
508
00:24:39,979 --> 00:24:43,147
It gave you the location
of the murder weapon?
Yup.
509
00:24:45,051 --> 00:24:47,117
(siren blaring)
510
00:24:47,119 --> 00:24:49,820
(tires squeak)
511
00:24:50,923 --> 00:24:51,956
MAN:
Team One, let's go.
512
00:24:53,493 --> 00:24:56,527
Over on the
left side.
513
00:24:57,997 --> 00:25:00,998
Clear.
514
00:25:01,968 --> 00:25:02,933
Clear.
515
00:25:06,539 --> 00:25:08,606
(man speaks indistinctly)
516
00:25:10,176 --> 00:25:12,176
Clear behind this wall.
517
00:25:12,178 --> 00:25:15,079
Guys, here's our golf club.
518
00:25:15,081 --> 00:25:17,214
And Scott Barrett.
519
00:25:17,216 --> 00:25:18,949
Clear!
520
00:25:22,955 --> 00:25:24,555
(sighs)
521
00:25:26,926 --> 00:25:30,227
RYAN:
Rae said her doll told her
to unlock the window.
522
00:25:30,229 --> 00:25:31,595
Her doll?
523
00:25:31,597 --> 00:25:35,065
Marla. Marla talks.
So, the question is,
524
00:25:35,067 --> 00:25:36,967
how does Marla talk?
525
00:25:36,969 --> 00:25:38,936
When a little girl
wants Marla to speak,
526
00:25:38,938 --> 00:25:41,872
she pushes this button
which triggers a microphone.
527
00:25:41,874 --> 00:25:44,108
As Marla listens,
audio recordings travel
528
00:25:44,110 --> 00:25:46,076
through the Web to a server
529
00:25:46,078 --> 00:25:47,645
where it's processed
into a text.
530
00:25:47,647 --> 00:25:50,214
It creates a database
so in the future,
531
00:25:50,216 --> 00:25:52,082
when the doll responds,
532
00:25:52,084 --> 00:25:55,185
it responds with something
that the child likes.
533
00:25:55,187 --> 00:25:57,221
Almost like a real conversation.
534
00:25:57,223 --> 00:25:58,622
NELSON
But with Rae's doll,
our hacker
535
00:25:58,624 --> 00:26:00,124
was able
to intercept communication,
536
00:26:00,126 --> 00:26:02,226
making Marla say
whatever he wanted.
537
00:26:02,228 --> 00:26:04,662
Ugh. Turning a little girl's
imaginary friend
538
00:26:04,664 --> 00:26:06,063
into something very real
539
00:26:06,065 --> 00:26:07,698
and very dangerous.
540
00:26:07,700 --> 00:26:10,368
So, through the doll,
541
00:26:10,369 --> 00:26:13,037
the hacker instructed Rae
to unlock the window.
542
00:26:17,310 --> 00:26:19,677
Can you do that for me now?
543
00:26:19,679 --> 00:26:24,014
Yeah, okay, I can do that.
544
00:26:36,028 --> 00:26:38,829
Manipulating the most vulnerable
person in the house
545
00:26:38,831 --> 00:26:40,331
by using their
favorite toy--
546
00:26:40,333 --> 00:26:43,033
I mean, that...
that's frightening.
547
00:26:43,035 --> 00:26:44,479
How did the hacker do this?
548
00:26:44,480 --> 00:26:45,924
NELSON: Means the target
went after the doll.
549
00:26:45,925 --> 00:26:47,369
Through Wi-Fi.
This is war driving.
550
00:26:47,373 --> 00:26:49,006
The target parked outside
551
00:26:49,008 --> 00:26:51,142
the victim's home, spoofed
552
00:26:51,143 --> 00:26:53,277
the DHCP address of the router
to connect to the doll.
553
00:26:53,279 --> 00:26:56,113
RUSSELL:
All right, so you guys figured
out how the hacker did it.
554
00:26:56,115 --> 00:26:58,015
So can we make use
of his handiwork
555
00:26:58,017 --> 00:27:00,217
to catch him?
Mm, that's a problem.
556
00:27:00,219 --> 00:27:02,186
The only digital dust left
by the target
557
00:27:02,188 --> 00:27:05,789
on Barrett's router is the MAC
address of his device he used.
558
00:27:05,791 --> 00:27:07,358
NELSON:
Yeah, which doesn't help much.
559
00:27:07,360 --> 00:27:10,194
It's very tough to find a device
that only has a MAC address.
560
00:27:10,196 --> 00:27:13,197
It's like having a fingerprint
that's not in a database.
561
00:27:13,199 --> 00:27:15,116
Well, maybe we can find him
562
00:27:15,117 --> 00:27:17,034
through his patterns
of life and behavior.
563
00:27:17,036 --> 00:27:18,936
What was the total value
of all the items
564
00:27:18,938 --> 00:27:20,270
stolen from the Barrett home?
565
00:27:20,272 --> 00:27:21,238
Less than 600 bucks.
566
00:27:21,240 --> 00:27:22,373
And the other houses?
567
00:27:22,375 --> 00:27:23,874
No more than
four grand total.
568
00:27:23,876 --> 00:27:26,910
Okay, that is a lot of
work for a little return.
569
00:27:26,912 --> 00:27:28,312
Doesn't make any sense
570
00:27:28,314 --> 00:27:30,748
when he's sitting on something
so much more valuable.
571
00:27:30,750 --> 00:27:32,149
Wait. What's that?
572
00:27:32,151 --> 00:27:34,218
Zero days. Two of 'em.
573
00:27:34,220 --> 00:27:35,319
RYAN:
One for P-TECH,
574
00:27:35,321 --> 00:27:36,654
and one for Marla Doll.
575
00:27:36,656 --> 00:27:39,156
They're worth at least
$200,000 each.
576
00:27:39,158 --> 00:27:41,425
Well, that's his endgame.
Money, money, money.
577
00:27:41,427 --> 00:27:43,794
Wait, wait, wait. I'm sorry.
How...how does that work?
578
00:27:43,796 --> 00:27:46,196
The companies will pay him
to stay quiet
579
00:27:46,198 --> 00:27:48,165
and to stop the intrusions.
580
00:27:48,167 --> 00:27:50,167
All right, but then
why would he risk
581
00:27:50,169 --> 00:27:53,270
entering a house to steal what,
like, four grand?
582
00:27:53,272 --> 00:27:56,206
He needs to prove the exploits
really work in order to collect.
583
00:27:56,208 --> 00:27:58,175
A hacker's real power
is behind the computer.
584
00:27:58,177 --> 00:28:01,378
They rarely risk exposure
in the real world,
585
00:28:01,380 --> 00:28:03,681
so it's highly unlikely
586
00:28:03,683 --> 00:28:05,382
that our hacker
would enter the Barrett home.
587
00:28:05,384 --> 00:28:07,685
RUSSELL: So, we're looking
for two people, right?
588
00:28:07,687 --> 00:28:10,221
Right.
Hacker and a thief.
589
00:28:10,222 --> 00:28:12,756
So, the hacker used the
Marla doll to case the house.
590
00:28:12,758 --> 00:28:14,925
What room are we in now?
591
00:28:14,927 --> 00:28:16,427
The living room.
592
00:28:16,429 --> 00:28:17,961
Let's count the windows.
593
00:28:17,963 --> 00:28:21,432
Okay. One, two, three.
594
00:28:21,434 --> 00:28:22,733
And took care
of the breaking part.
595
00:28:22,735 --> 00:28:24,368
Then he outsourced the entering.
596
00:28:24,370 --> 00:28:27,705
That's when your burglar came
through the unlocked window.
597
00:28:27,707 --> 00:28:29,807
Yeah, I don't imagine
our hacker was planning
598
00:28:29,809 --> 00:28:31,875
on being an accessory to murder.
599
00:28:31,877 --> 00:28:34,778
Well, he just made
a big mistake.
600
00:28:34,780 --> 00:28:36,814
(phone buzzing)
601
00:28:36,816 --> 00:28:38,348
I told you not to call me.
602
00:28:38,350 --> 00:28:40,084
I just want you to know
I took care of it.
603
00:28:40,086 --> 00:28:41,418
You're gonna get me caught.
604
00:28:42,288 --> 00:28:43,454
Hello?
605
00:28:43,456 --> 00:28:45,255
(scoffs)
606
00:28:45,257 --> 00:28:46,957
Damn.
607
00:28:46,959 --> 00:28:48,025
(engine starts)
608
00:29:00,773 --> 00:29:01,872
KRUMITZ:
Hey.
609
00:29:01,873 --> 00:29:02,972
So, we know the
location of the murder
610
00:29:02,975 --> 00:29:04,742
and the location
of the dump site.
611
00:29:04,744 --> 00:29:05,909
The killer traveled from
612
00:29:05,911 --> 00:29:08,145
Barrett's home
to the warehouse.
613
00:29:08,147 --> 00:29:09,480
And his phone would have pinged
any towers
614
00:29:09,482 --> 00:29:10,915
along that route.
615
00:29:10,916 --> 00:29:12,349
Well, he had a body
in the car, which means
616
00:29:12,351 --> 00:29:14,451
our killer would have taken
the most direct route
617
00:29:14,453 --> 00:29:16,887
to drop Scott Barrett's
body at the dump site.
618
00:29:16,889 --> 00:29:19,757
So, let's concentrate on the
towers and the most direct path.
619
00:29:19,759 --> 00:29:22,259
All right, here are
the phone numbers that have
620
00:29:22,261 --> 00:29:23,761
those towers in common.
621
00:29:23,763 --> 00:29:26,196
Based on the time of death
and our drive time,
622
00:29:26,198 --> 00:29:27,931
we can create a window
623
00:29:27,933 --> 00:29:30,768
after Barrett was murdered,
before the body dumped.
624
00:29:30,770 --> 00:29:32,336
Time stamp will help us
eliminate any phones
625
00:29:32,338 --> 00:29:34,271
traveling away
from the dump site.
626
00:29:34,273 --> 00:29:37,207
Okay, drumroll.
627
00:29:37,209 --> 00:29:40,511
All the phones that pinged
in that area and...
628
00:29:40,513 --> 00:29:41,879
the towers
they have in common.
629
00:29:41,881 --> 00:29:44,481
Let's see
who those numbers belong to.
630
00:29:44,483 --> 00:29:47,484
RAMIREZ:
Hey, check out
Lonnie Swaine.
631
00:29:47,486 --> 00:29:49,236
He has a rap sheet
632
00:29:49,237 --> 00:29:50,987
and a little habit
of breaking and entering.
633
00:29:50,990 --> 00:29:54,124
Call Elijah, see if he can
track down Mr. Swaine.
634
00:29:54,126 --> 00:29:56,827
(beeping)
RYAN:
Time for court?
635
00:29:56,829 --> 00:29:58,061
Call me.
636
00:30:07,573 --> 00:30:09,173
Lonnie Swaine, FBI.
637
00:30:11,911 --> 00:30:13,977
Moving into
this room.
638
00:30:13,979 --> 00:30:15,245
Clear.
639
00:30:17,216 --> 00:30:19,082
Clear!
640
00:30:19,084 --> 00:30:21,518
Follow me, check
the kitchen.
641
00:30:21,520 --> 00:30:23,320
(gurgling)
642
00:30:23,322 --> 00:30:26,089
Call the EMTs.
MAN:
Yes, sir!
643
00:30:26,091 --> 00:30:27,858
(gurgling, gasping)
644
00:30:27,860 --> 00:30:30,260
(whirring)
645
00:30:37,837 --> 00:30:39,536
She was shaken and scared,
646
00:30:39,538 --> 00:30:41,972
and right away she told me
what she had done.
647
00:30:41,974 --> 00:30:43,974
MAN:
And what did Francine
tell you happened?
648
00:30:43,976 --> 00:30:47,211
KRUMITZ:
She shot Taylor Pettis.
649
00:30:47,213 --> 00:30:48,979
Did she tell you why?
650
00:30:48,981 --> 00:30:50,414
He was stalking her.
651
00:30:50,416 --> 00:30:52,115
MAN:
The two of you had seen
652
00:30:52,117 --> 00:30:54,151
Taylor Pettis at a
diner the day before.
653
00:30:54,153 --> 00:30:55,452
Yes.
654
00:30:55,454 --> 00:30:57,621
Did she mention him
stalking her then?
655
00:30:57,623 --> 00:30:59,923
No.
656
00:30:59,925 --> 00:31:02,125
What do you do
for a living, Agent Krumitz?
657
00:31:02,127 --> 00:31:04,928
I'm an FBI cyber investigator.
658
00:31:04,930 --> 00:31:08,866
Which means, you understand
what a tower dump is?
659
00:31:08,868 --> 00:31:11,034
Yes.
WOMAN:
Your Honor, I fail
to see the relevance
660
00:31:11,036 --> 00:31:12,269
of this line of
questioning.
661
00:31:12,271 --> 00:31:13,437
It speaks
to the defendant's claim
662
00:31:13,439 --> 00:31:14,538
that she was being stalked.
663
00:31:14,540 --> 00:31:16,340
Answer the question,
Mr. Krumitz.
664
00:31:16,342 --> 00:31:18,275
It's information requested
665
00:31:18,277 --> 00:31:19,943
from service providers
that indicates
666
00:31:19,945 --> 00:31:22,045
the devices that connected
with a particular tower.
667
00:31:22,047 --> 00:31:23,647
And what does this
information include?
668
00:31:23,649 --> 00:31:26,049
Telephone numbers
and a time stamp indicating
669
00:31:26,051 --> 00:31:27,551
when the device
pinged the tower.
670
00:31:27,553 --> 00:31:30,120
Okay, so, if I was to show you
a time stamp
671
00:31:30,122 --> 00:31:32,956
from a cell phone that pinged
several towers within 30 seconds
672
00:31:32,958 --> 00:31:35,359
of another cell phone
pinging those same towers,
673
00:31:35,361 --> 00:31:38,028
what would you conclude?
674
00:31:38,030 --> 00:31:40,030
Well, most likely
the owner of the first phone
675
00:31:40,032 --> 00:31:42,399
was being followed by the owner
of the second.
Perfect.
676
00:31:42,401 --> 00:31:44,301
So according to these
tower dump records,
677
00:31:44,303 --> 00:31:46,203
who would you conclude,
in this case,
678
00:31:46,205 --> 00:31:49,539
the owner of the
second phone is?
679
00:31:54,613 --> 00:31:56,546
Francine Krumitz.
680
00:31:56,548 --> 00:31:58,315
ATTORNEY:
Objection. Daniel Krumitz
681
00:31:58,317 --> 00:32:00,684
is not called as an expert
witness, and that information
682
00:32:00,686 --> 00:32:02,903
has not been entered
into evidence.
683
00:32:02,904 --> 00:32:05,121
In ten cases over just two days,
Objection!
684
00:32:05,124 --> 00:32:06,657
Francine Krumitz's
cell phone pings a tower
Again, counselor's assuming
685
00:32:06,659 --> 00:32:08,425
after the victim's cell phone
facts not in evidence!
686
00:32:08,427 --> 00:32:10,627
pings the exact same tower.
You can't backdoor the use
687
00:32:10,629 --> 00:32:12,462
of these documents.
JUDGE: Objection overruled.
688
00:32:12,464 --> 00:32:15,032
Your Honor, please!
689
00:32:15,034 --> 00:32:18,101
Francine Krumitz... was stalking
690
00:32:18,103 --> 00:32:20,037
Taylor Pettis.
691
00:32:24,677 --> 00:32:26,710
KRUMITZ:
You lied to me.
692
00:32:28,347 --> 00:32:30,113
You are so selfish.
693
00:32:30,115 --> 00:32:32,950
Not for one moment did
you think about me.
694
00:32:32,952 --> 00:32:36,053
All I had was you, and
now I've lost that, too.
695
00:32:36,055 --> 00:32:38,221
Stop feeling sorry
for yourself, Daniel.
696
00:32:40,459 --> 00:32:42,159
Make me a promise...
697
00:32:42,161 --> 00:32:45,529
that when you walk out this door
you forget it all.
698
00:32:45,531 --> 00:32:48,999
Why are you saying this?
699
00:32:50,002 --> 00:32:52,269
I can't forget about you.
700
00:32:52,271 --> 00:32:54,037
Just move on, Daniel.
701
00:32:54,039 --> 00:32:55,639
No pity party.
702
00:32:55,641 --> 00:32:58,508
Promise me, Daniel.
703
00:32:58,510 --> 00:33:00,110
Just promise me you'll be happy.
704
00:33:00,112 --> 00:33:02,112
Please?
705
00:33:02,114 --> 00:33:04,648
Just... be happy.
706
00:33:10,122 --> 00:33:13,557
¶ ¶
707
00:33:13,559 --> 00:33:15,192
CHILD (echoing):
Come on, get back here!
708
00:33:15,194 --> 00:33:18,428
I'm gonna tell Mom!
709
00:33:18,430 --> 00:33:21,231
(echoed giggling)
710
00:33:29,274 --> 00:33:30,340
I promise.
711
00:33:43,522 --> 00:33:46,256
Found two cell phones
in a blender.
712
00:33:46,258 --> 00:33:48,525
One belonged to Lonnie,
the other one was a burner.
713
00:33:48,527 --> 00:33:49,760
Now, we think the burner
belonged to our target,
714
00:33:49,762 --> 00:33:50,761
ditched after
he stabbed Lonnie.
715
00:33:50,763 --> 00:33:52,396
And Nelson and Raven have
716
00:33:52,397 --> 00:33:54,030
separated all the pieces
and reconstructed
717
00:33:54,033 --> 00:33:54,731
both phones.
718
00:33:54,733 --> 00:33:56,583
Now, Lonnie does match
719
00:33:56,584 --> 00:33:58,434
the basic description
of Scott Barrett's attacker
720
00:33:58,437 --> 00:34:00,270
we pulled from the point cloud
image of the Game Vex.
721
00:34:00,272 --> 00:34:03,140
Five-ten, 165 pounds,
long hair.
722
00:34:03,142 --> 00:34:05,242
I'm not sure that'll get
us a court conviction.
723
00:34:05,244 --> 00:34:07,110
No. Lonnie's not talking,
despite the fact
724
00:34:07,112 --> 00:34:08,445
that he's clinging
to his life.
725
00:34:08,447 --> 00:34:10,213
The target knew
we were onto him.
726
00:34:10,215 --> 00:34:12,149
He attempted to kill Lonnie,
because if Lonnie
727
00:34:12,151 --> 00:34:15,185
hadn't murdered Scott
Barrett, things would be
going along as planned.
728
00:34:15,187 --> 00:34:17,487
Here's what I don't understand.
Our hacker could've simply gone
729
00:34:17,489 --> 00:34:19,356
to the doll company
and to P-TECH
730
00:34:19,358 --> 00:34:21,458
after the first three burglaries
and cashed in.
731
00:34:21,460 --> 00:34:23,393
Both companies
would have dismissed him
732
00:34:23,394 --> 00:34:25,327
and used their own employees
to find the vulnerabilities.
733
00:34:25,330 --> 00:34:26,830
He had to keep
them scared.
734
00:34:26,832 --> 00:34:28,231
NELSON:
I got it! I know how
735
00:34:28,233 --> 00:34:30,834
to prove the burner was
our hacker's phone.
736
00:34:30,836 --> 00:34:33,637
There's no identifying info
on the burner.
737
00:34:33,639 --> 00:34:36,306
No texts, no contacts,
738
00:34:36,308 --> 00:34:38,175
no calendars-- all empty.
739
00:34:38,177 --> 00:34:40,410
But there was one database
bursting with info.
740
00:34:40,412 --> 00:34:42,679
MUNDO:
Motion processor data.
741
00:34:42,681 --> 00:34:44,448
Measures the
phone's movement.
742
00:34:44,450 --> 00:34:46,249
Like up and down,
left and right.
743
00:34:46,251 --> 00:34:48,301
NELSON:
And better than that,
744
00:34:48,302 --> 00:34:50,352
the chip is so sensitive
that it records even
the tiny vibrations.
745
00:34:50,355 --> 00:34:51,655
So you're gonna tell us
746
00:34:51,657 --> 00:34:53,690
how these vibrations connect
to these numbers?
747
00:34:53,692 --> 00:34:55,859
Yeah, well, those numbers
represent our vibration,
748
00:34:55,861 --> 00:34:59,496
and each row of six numbers
is a single keystroke.
749
00:34:59,498 --> 00:35:01,498
The tiny movement of our burner,
and it has a rhythm.
750
00:35:01,500 --> 00:35:03,667
So, you know,
I channeled
751
00:35:03,669 --> 00:35:05,836
my inner Jedi and, uh,
752
00:35:05,838 --> 00:35:07,737
I found a pattern.
Looks like our target
753
00:35:07,739 --> 00:35:10,640
was doing something
that we do every day.
754
00:35:11,743 --> 00:35:13,493
He was typing.
755
00:35:13,494 --> 00:35:15,244
NELSON:
Yep. The burner was sitting
right next to his laptop,
756
00:35:15,247 --> 00:35:16,746
inadvertently recording
vibrations as he typed.
757
00:35:16,748 --> 00:35:19,149
(buzzing)
758
00:35:19,151 --> 00:35:21,718
Are you really gonna tell us
you know what he was typing?
759
00:35:21,720 --> 00:35:22,819
Yes, indeed.
760
00:35:22,821 --> 00:35:24,488
Come here.
761
00:35:24,490 --> 00:35:27,390
See, I mapped the
position of every letter
762
00:35:27,392 --> 00:35:28,758
on the standard keyboard--
right or left,
763
00:35:28,760 --> 00:35:30,660
top to bottom--
which means there are
764
00:35:30,662 --> 00:35:33,163
corresponding letter
positions for every word
in the online dictionary.
765
00:35:33,165 --> 00:35:36,733
MUNDO:
Keystrokes become coordinates,
like locations on a map.
766
00:35:36,735 --> 00:35:38,535
NELSON:
Mm-hmm.
767
00:35:38,536 --> 00:35:40,336
And on a map, you get location;
on a keyboard,
768
00:35:40,339 --> 00:35:42,472
you get words.
RYAN:
Wait, this is gonna tell us
769
00:35:42,474 --> 00:35:43,773
what our target was typing?
770
00:35:46,512 --> 00:35:49,613
MUNDO:
I mean, Nelson, this is great,
but... unless the target
771
00:35:49,615 --> 00:35:51,882
I.D.'d himself to his victims,
I don't see how this helps.
772
00:35:51,884 --> 00:35:53,884
War driving takes a long time.
773
00:35:53,886 --> 00:35:55,585
He could've gotten bored,
774
00:35:55,587 --> 00:35:57,287
maybe went online.
He might have
775
00:35:57,289 --> 00:35:58,455
signed on
to his e-mail.
776
00:35:58,457 --> 00:35:59,523
Search for this.
777
00:35:59,525 --> 00:36:01,224
Top left, bottom right,
778
00:36:01,226 --> 00:36:03,627
bottom left,
top right, bottom right.
779
00:36:07,633 --> 00:36:09,499
You're looking
for an at and dot com.
780
00:36:11,203 --> 00:36:13,570
(beeping)
781
00:36:13,572 --> 00:36:14,771
And that's our hacker's
e-mail address.
782
00:36:14,773 --> 00:36:16,173
Nelson,
call the service provider.
783
00:36:16,175 --> 00:36:18,775
Let's get a location
on this guy.
784
00:36:18,777 --> 00:36:22,679
Whoever you are,
playtime is over.
785
00:36:22,681 --> 00:36:24,381
¶ ¶
786
00:36:24,383 --> 00:36:26,483
(sirens wailing)
787
00:36:27,686 --> 00:36:28,685
(tires squeal)
788
00:36:30,556 --> 00:36:32,756
(sirens approaching)
789
00:36:41,967 --> 00:36:43,633
(grunts)
Oh!
790
00:36:43,635 --> 00:36:45,635
Turn around.
Roll over, roll over.
791
00:36:45,637 --> 00:36:47,337
(groaning in pain)
792
00:36:47,339 --> 00:36:48,905
Give me your
other hand.
793
00:36:50,876 --> 00:36:52,709
This is gonna be fun.
794
00:36:52,711 --> 00:36:55,245
(siren wailing in distance)
(indistinct radio chatter)
795
00:36:55,247 --> 00:36:57,314
I was doing those
companies a favor.
796
00:36:57,316 --> 00:36:59,749
I exposed flaws
in their systems.
797
00:37:01,920 --> 00:37:03,987
Was it worth it?
798
00:37:09,728 --> 00:37:11,928
OFFICER:
Please stay in your home, ma'am.
799
00:37:16,568 --> 00:37:19,803
¶ ¶
800
00:37:19,805 --> 00:37:20,804
Mommy!
801
00:37:21,907 --> 00:37:23,607
Rae!
802
00:37:25,944 --> 00:37:27,777
¶ ¶
803
00:37:36,888 --> 00:37:39,789
¶ ¶
804
00:37:39,791 --> 00:37:41,858
(grunting)
805
00:37:46,465 --> 00:37:47,764
(loud grunt)
806
00:37:47,766 --> 00:37:50,000
¶ ¶
807
00:38:08,287 --> 00:38:10,353
¶ ¶
808
00:38:27,339 --> 00:38:29,406
¶ ¶
809
00:38:38,817 --> 00:38:41,885
Haven't seen you in a while.
Rough day?
810
00:38:42,788 --> 00:38:46,056
(sighs) The kind that needs
to end with a drink.
811
00:38:46,058 --> 00:38:47,824
Huh. You don't really strike me
812
00:38:47,826 --> 00:38:50,794
as the kind of guy that drinks
to escape his problems.
813
00:38:50,796 --> 00:38:52,796
Can't escape
this one.
814
00:38:52,798 --> 00:38:54,931
My dad has cancer.
815
00:38:54,933 --> 00:38:58,735
He's refusing treatment.
816
00:38:58,737 --> 00:39:00,470
(exhales)
817
00:39:01,840 --> 00:39:04,107
This is weird-- you're
the first person I've talked to
818
00:39:04,109 --> 00:39:05,809
about any of this.
819
00:39:06,778 --> 00:39:08,912
I know how hard it is.
820
00:39:10,415 --> 00:39:12,882
Sometimes it's easier
to talk to a stranger.
821
00:39:12,884 --> 00:39:14,951
¶ ¶
822
00:39:37,943 --> 00:39:40,143
(soft whirring)
823
00:39:47,753 --> 00:39:49,419
(beep)
824
00:39:49,421 --> 00:39:51,121
Not bad, huh?
825
00:39:51,123 --> 00:39:52,822
Are you showing off?
826
00:39:52,824 --> 00:39:54,057
Yeah, a little bit.
827
00:39:55,026 --> 00:39:57,093
What are you doing
out here?
828
00:39:57,095 --> 00:39:59,529
Are you still debating
whether or not to take
829
00:39:59,531 --> 00:40:01,765
the deputy director job?
830
00:40:01,767 --> 00:40:03,466
No, I'm not taking it.
831
00:40:03,468 --> 00:40:05,468
Really? Why not?
832
00:40:07,706 --> 00:40:11,674
Python. He's the most dangerous
drug dealer on the Deep Web.
833
00:40:11,676 --> 00:40:14,511
He's implicated in six murders;
I'm gonna catch him.
834
00:40:14,513 --> 00:40:18,114
And you can't unless
you're out in the field, right?
835
00:40:18,116 --> 00:40:20,417
Right.
Okay.
836
00:40:20,419 --> 00:40:22,051
Aren't you afraid
they're gonna bring
837
00:40:22,053 --> 00:40:23,953
some stuffy suit above you?
838
00:40:23,955 --> 00:40:25,822
I don't think
they can afford it.
839
00:40:25,824 --> 00:40:28,625
I spent the last of their budget
on your new lab.
840
00:40:28,627 --> 00:40:29,926
(both laugh)
841
00:40:29,928 --> 00:40:32,929
Well, I thank you.
842
00:40:32,931 --> 00:40:34,931
I thank you for all of it.
843
00:40:34,933 --> 00:40:37,033
I can't tell you how much I...
844
00:40:37,035 --> 00:40:40,470
appreciate having
a new chapter in my life.
845
00:40:40,472 --> 00:40:41,704
Oh.
846
00:40:42,774 --> 00:40:44,808
Now, how does
this thing work?
847
00:40:44,810 --> 00:40:46,810
(whirring)
848
00:40:46,812 --> 00:40:48,978
You ever flown
one of these before?
849
00:40:48,980 --> 00:40:50,013
No.
850
00:40:50,015 --> 00:40:52,015
Aah!
851
00:40:52,017 --> 00:40:53,650
(groans)
Wait.
852
00:40:53,652 --> 00:40:57,220
Uh, just tell me how
do I make it stop.
853
00:40:59,124 --> 00:41:00,757
I don't know.
854
00:41:00,759 --> 00:41:01,925
You broke it.
855
00:41:01,927 --> 00:41:03,927
(laughs)
I didn't break it.
856
00:41:03,929 --> 00:41:05,795
Yeah, you did. I...
857
00:41:05,797 --> 00:41:08,064
It's heading
towards the Capitol.
858
00:41:08,066 --> 00:41:11,234
(laughing)
It's...
859
00:41:11,236 --> 00:41:12,919
Ah. Good luck.
860
00:41:12,920 --> 00:41:14,603
Well, now, don't...
I've got to call
the Pentagon.
861
00:41:14,606 --> 00:41:15,672
Captioning sponsored by
CBS