1
00:00:01,569 --> 00:00:04,503
¶ Hey, hey, oh ¶
¶ Hey, Swizz ¶
2
00:00:04,505 --> 00:00:08,507
¶ I guess I just woke up on
the right side of the bed, man ¶
3
00:00:08,509 --> 00:00:11,043
¶ You know what?
You know what? ¶
¶ This is how I feel ¶
4
00:00:11,045 --> 00:00:13,345
¶ I think I might give away
a million bucks ¶
5
00:00:13,347 --> 00:00:15,614
¶ I think I might
give away a brand-new truck ¶
(laughing)
6
00:00:15,616 --> 00:00:18,450
¶ 'Cause I feel good,
yeah, I feel good ¶
7
00:00:18,452 --> 00:00:20,486
¶ 'Cause I feel good ¶
8
00:00:20,488 --> 00:00:22,788
¶ I think I might take you
on a shopping spree ¶
9
00:00:22,790 --> 00:00:25,657
¶ You in the club, man,
all drinks on me ¶
10
00:00:25,659 --> 00:00:27,292
(on headphones):
¶ 'Cause I feel good ¶
11
00:00:27,294 --> 00:00:30,396
¶ Yeah, I feel good,
'cause I feel good ¶
12
00:00:30,398 --> 00:00:32,765
¶ Good Lord, look,
what a beautiful day ¶
13
00:00:32,767 --> 00:00:35,634
¶ My enemies ain't here,
they gone away ¶
14
00:00:35,636 --> 00:00:37,403
¶ I feel good,
everything is okay ¶
15
00:00:37,405 --> 00:00:39,638
¶ Feel like givin'
all my money away ¶
16
00:00:39,640 --> 00:00:42,174
(laughter)
¶ 'Cause ... broke,
ain't no bread in the hood ¶
17
00:00:42,176 --> 00:00:45,377
¶ Look what they did,
they sellin' Feds in the hood ¶
18
00:00:45,379 --> 00:00:46,645
¶ I ain't gonna change... ¶
19
00:00:46,647 --> 00:00:48,280
(gunshot)
20
00:00:48,282 --> 00:00:49,782
(panting)
21
00:00:49,784 --> 00:00:51,617
Agent Davison!
I need your help.
22
00:00:51,619 --> 00:00:52,751
Come on!
23
00:00:52,753 --> 00:00:54,286
Come on, come on.
24
00:00:55,423 --> 00:00:57,489
Come on, come on, come on.
Whoa.
25
00:01:05,633 --> 00:01:07,466
I ordered a coffee.
26
00:01:13,741 --> 00:01:15,274
Thank you. Stay warm.
27
00:01:20,414 --> 00:01:22,081
Hey, stranger.
28
00:01:24,518 --> 00:01:25,751
Jackson?
29
00:01:25,753 --> 00:01:26,652
Like the blonde.
30
00:01:26,654 --> 00:01:27,786
Looks good on you.
31
00:01:29,090 --> 00:01:31,090
What are you doing here?
32
00:01:31,092 --> 00:01:33,692
They subpoenaed me for
your 5K1 hearing tomorrow.
33
00:01:33,694 --> 00:01:35,461
I'm one of your
character witnesses.
34
00:01:35,463 --> 00:01:37,296
Can you believe that?
35
00:01:37,298 --> 00:01:39,398
Prosecutor must know we dated.
36
00:01:39,400 --> 00:01:41,300
He's probably hoping
that you have info on me
37
00:01:41,302 --> 00:01:43,602
that'll break the terms
of my deal with the FBI.
38
00:01:43,604 --> 00:01:44,703
Well, joke's
on him, then.
39
00:01:44,705 --> 00:01:47,139
FBI made you end
our relationship.
40
00:01:47,141 --> 00:01:48,807
I had no choice.
41
00:01:48,809 --> 00:01:50,709
You always
have a choice.
42
00:01:50,711 --> 00:01:54,146
The FBI...
those aren't your people.
43
00:01:54,148 --> 00:01:56,815
You can wear the white hat
and pretend all you want,
44
00:01:56,817 --> 00:01:58,484
but they will never
really trust you.
45
00:01:58,486 --> 00:02:00,452
Jackson, I have to go to work.
46
00:02:00,454 --> 00:02:02,721
I shouldn't even
be talking to you.
47
00:02:02,723 --> 00:02:04,256
Don't mention
that you saw me, okay?
48
00:02:04,258 --> 00:02:06,758
Raven. I know this 5K1
is a big deal for you.
49
00:02:06,760 --> 00:02:09,261
A judge decides
your fate tomorrow--
50
00:02:09,263 --> 00:02:11,330
FBI, jail or freedom.
51
00:02:11,332 --> 00:02:12,631
I got your back.
52
00:02:12,633 --> 00:02:13,699
Always did.
53
00:02:13,701 --> 00:02:15,234
And when this
is all over,
54
00:02:15,236 --> 00:02:17,836
we can pick up
where we left off.
55
00:02:19,740 --> 00:02:21,440
I have to go.
56
00:02:24,478 --> 00:02:26,645
Well, you know
how to find me.
57
00:02:26,647 --> 00:02:27,880
It was good seeing you, Eclipse.
58
00:02:29,783 --> 00:02:32,251
It's been a long time
since someone's called me that.
59
00:02:32,253 --> 00:02:35,487
Well, I always loved that girl.
60
00:02:35,489 --> 00:02:36,855
Still do.
61
00:02:43,831 --> 00:02:47,766
NELSON:
I saw two women grabbing money
that was flying through the air.
62
00:02:47,768 --> 00:02:49,668
It was coming from Barnaby Bank.
63
00:02:49,670 --> 00:02:51,303
The ATM was...
64
00:02:51,305 --> 00:02:52,871
was spewing out cash.
65
00:02:52,873 --> 00:02:55,674
Then I saw the gunman approach.
66
00:02:55,676 --> 00:02:57,843
He fired his weapon.
67
00:02:57,845 --> 00:02:59,811
(gunshot)
68
00:02:59,813 --> 00:03:01,847
The two women were scared off.
69
00:03:01,849 --> 00:03:04,283
I ran out of CTOC.
70
00:03:04,285 --> 00:03:06,885
When Agent Davison
and I got down there...
71
00:03:08,622 --> 00:03:09,755
...there was so much blood.
72
00:03:09,757 --> 00:03:11,623
WOMAN (sobbing):
Help me!
73
00:03:12,826 --> 00:03:14,560
DAVISON:
Which way did
the shooter go?
74
00:03:14,562 --> 00:03:15,761
Around the corner that way.
75
00:03:15,763 --> 00:03:17,462
OPERATOR:
911. What is your emergency?
76
00:03:17,464 --> 00:03:19,798
Yes, I'm on the corner
of 50th and Pennsylvania Street.
77
00:03:19,800 --> 00:03:20,933
A man's been shot.
78
00:03:20,935 --> 00:03:22,467
MAN (weakly):
Mia, help me.
79
00:03:29,210 --> 00:03:30,909
W... we were
80
00:03:30,911 --> 00:03:32,711
holiday shopping.
81
00:03:32,713 --> 00:03:34,813
Andy stopped
at the ATM
82
00:03:34,815 --> 00:03:36,782
to check his balance.
83
00:03:36,784 --> 00:03:39,785
He was always worried about
overdrawing his account.
84
00:03:39,787 --> 00:03:41,286
Whoa.
85
00:03:41,288 --> 00:03:42,487
Hey, this-this
can't be mine.
86
00:03:42,489 --> 00:03:44,323
I didn't even press anything.
87
00:03:44,325 --> 00:03:45,991
I don't have this much
money in my account.
88
00:03:47,928 --> 00:03:49,928
I saw Mia grabbing cash.
89
00:03:49,930 --> 00:03:51,230
What was Andy doing?
90
00:03:51,232 --> 00:03:52,798
He said...
91
00:03:52,800 --> 00:03:53,832
we shouldn't
take the money.
92
00:03:53,834 --> 00:03:56,435
It wasn't ours.
93
00:03:56,437 --> 00:03:57,936
He wanted to leave.
94
00:03:57,938 --> 00:03:59,972
Now, I know this
is really difficult,
95
00:03:59,974 --> 00:04:03,242
but can you give us
a description of this man?
96
00:04:03,244 --> 00:04:04,910
I couldn't see
the shooter's face from up here.
97
00:04:06,747 --> 00:04:07,813
All I saw was the gun.
98
00:04:07,815 --> 00:04:09,548
I remember his voice.
99
00:04:09,550 --> 00:04:10,882
MAN:
Hey.
100
00:04:10,884 --> 00:04:12,618
Looks like it's
your lucky night.
101
00:04:12,620 --> 00:04:14,019
Now it's mine.
102
00:04:14,021 --> 00:04:15,621
Give me the cash.
103
00:04:17,024 --> 00:04:18,457
Give it to me!
104
00:04:18,459 --> 00:04:20,826
(gunshot)
Andy! No!
105
00:04:20,828 --> 00:04:22,461
Help!
106
00:04:22,463 --> 00:04:25,430
My brother is dead
107
00:04:25,432 --> 00:04:26,898
because I was greedy.
108
00:04:26,900 --> 00:04:28,900
You can't blame yourself
for this.
109
00:04:28,902 --> 00:04:30,802
It's nobody's fault
except the man
110
00:04:30,804 --> 00:04:32,938
who fired
the gun.
111
00:04:32,940 --> 00:04:34,673
Come on, Andy. Andy...
(sirens wailing)
112
00:04:34,675 --> 00:04:36,275
Help's on the way, Andy.
113
00:04:36,277 --> 00:04:37,509
NELSON:
Guys, hurry up!
114
00:04:38,979 --> 00:04:40,712
Okay.
115
00:04:47,054 --> 00:04:48,654
PARAMEDIC:
He's gone.
116
00:04:51,992 --> 00:04:54,860
The guy who shot Andy Wilcox
is still out there.
117
00:04:54,862 --> 00:04:56,995
We'll find him, Nelson.
118
00:04:56,997 --> 00:04:59,298
Elijah and Krumitz
are already on it.
119
00:05:07,007 --> 00:05:08,907
Any luck with that ATM
surveillance footage?
120
00:05:08,909 --> 00:05:12,010
Homicide needs everything
you found, Krummy.
121
00:05:12,012 --> 00:05:13,545
I tapped into the ATM's
video file.
122
00:05:13,547 --> 00:05:15,881
Scrolled through everything
the camera captured.
123
00:05:15,883 --> 00:05:18,383
About an hour before
the shooting, this happened.
124
00:05:19,420 --> 00:05:22,554
The video feed went dead.
Mechanical malfunction?
125
00:05:22,556 --> 00:05:24,389
Malfunction created
by malicious code.
126
00:05:24,391 --> 00:05:26,425
Code that forced the ATM camera
127
00:05:26,427 --> 00:05:28,060
to shut off
at 9:00 p.m. last night.
128
00:05:28,062 --> 00:05:29,761
This ATM was hacked.
129
00:05:29,763 --> 00:05:31,029
Any chance this is Python?
130
00:05:31,031 --> 00:05:33,098
We're awfully close
to the FBI building.
131
00:05:33,100 --> 00:05:34,733
We know that even
though he got into CTOC,
132
00:05:34,735 --> 00:05:35,867
he couldn't breach
our system.
133
00:05:35,869 --> 00:05:37,436
Could this be
attempt number two?
134
00:05:37,438 --> 00:05:39,771
Some kind of long-distance
surveillance?
135
00:05:39,773 --> 00:05:41,673
No, this definitely
isn't Python.
136
00:05:41,675 --> 00:05:43,375
I mean, the coding's
sophisticated,
137
00:05:43,377 --> 00:05:45,127
but not at his level.
138
00:05:45,128 --> 00:05:46,878
Okay. So this is strictly
a cyber bank heist.
139
00:05:46,880 --> 00:05:48,547
Definitely.
140
00:05:48,549 --> 00:05:50,782
All right.
I'll call ViCAP.
141
00:05:50,784 --> 00:05:52,718
Tell 'em this case
now belongs to Cyber.
Yeah.
142
00:05:54,855 --> 00:05:57,089
I combed through Barnaby Bank's
internal network.
143
00:05:57,091 --> 00:05:59,524
The target took control of
the ATM using a whaling attack
144
00:05:59,526 --> 00:06:02,494
on Barnaby Bank CEO
Ashton Wagner.
145
00:06:02,496 --> 00:06:04,830
I'm assuming that has nothing
to do with marine biology.
146
00:06:04,832 --> 00:06:06,465
KRUMITZ:
Correct.
147
00:06:06,467 --> 00:06:08,367
The attack zeros in
on corporate upper management.
148
00:06:08,369 --> 00:06:09,935
The malicious
code I found
149
00:06:09,937 --> 00:06:12,471
showed that the target
had a three-step plan.
150
00:06:12,473 --> 00:06:14,139
Step one: the whaling attack
on Barnaby Bank's CEO.
151
00:06:14,141 --> 00:06:16,775
Step two:
use the CEO's credentials
152
00:06:16,777 --> 00:06:18,510
to own
the bank's network.
153
00:06:18,512 --> 00:06:22,581
And step three: take control
of the ATM through the network.
154
00:06:22,583 --> 00:06:24,049
That's how he shut off
the cameras.
155
00:06:24,050 --> 00:06:25,516
All the target had to do
was send him an e-mail
156
00:06:25,519 --> 00:06:27,386
pretending to be someone
he trusted
157
00:06:27,388 --> 00:06:28,620
When Wagner clicked the link,
158
00:06:28,622 --> 00:06:30,522
the target got
his login credentials,
159
00:06:30,524 --> 00:06:32,491
and just like that, he was
inside the bank's network.
160
00:06:32,493 --> 00:06:33,625
Guys.
161
00:06:33,627 --> 00:06:35,160
Look at the
transaction report
162
00:06:35,162 --> 00:06:36,661
from the ATM
Andy used last night.
163
00:06:36,663 --> 00:06:37,996
At the exact same time
164
00:06:37,998 --> 00:06:39,531
the camera cut out,
165
00:06:39,533 --> 00:06:41,032
the ATM stopped recording
customer transactions.
166
00:06:41,034 --> 00:06:42,601
Instead, it logged the message,
167
00:06:42,603 --> 00:06:44,069
"payback time," over and over.
168
00:06:44,071 --> 00:06:45,604
Every ten minutes.
169
00:06:45,606 --> 00:06:48,840
RYAN: Payback time.
Our hacker was out for revenge.
170
00:06:48,842 --> 00:06:50,008
But revenge for what?
171
00:06:50,010 --> 00:06:52,577
MUNDO:
Yeah, why bother
to hack an ATM
172
00:06:52,579 --> 00:06:53,945
if you're not gonna show up
and collect the money?
173
00:06:53,947 --> 00:06:55,297
KRUMITZ:
Not sure.
174
00:06:55,298 --> 00:06:56,648
But I can tell you
exactly what happened
175
00:06:56,650 --> 00:06:58,650
when Andy put his debit card
in the ATM last night.
176
00:06:58,652 --> 00:07:00,819
RUSSELL:
His card automatically triggered
177
00:07:00,821 --> 00:07:02,921
the ATM to spit out $10,000.
178
00:07:02,923 --> 00:07:04,756
Guys, look what I found.
179
00:07:04,758 --> 00:07:06,425
This ATM wasn't the only
one that was hacked.
180
00:07:06,427 --> 00:07:08,560
Okay, in the last hour,
181
00:07:08,562 --> 00:07:12,164
social media activity
in the District has exploded.
182
00:07:12,166 --> 00:07:14,866
#ATMJackpot
is trending like crazy.
183
00:07:14,868 --> 00:07:16,435
People are posting photos
184
00:07:16,437 --> 00:07:19,171
and videos about
the Barnaby Bank's ATMs
185
00:07:19,173 --> 00:07:20,839
flooding the streets with cash.
186
00:07:20,841 --> 00:07:22,474
RYAN:
This isn't an organized attack.
187
00:07:22,476 --> 00:07:24,075
This is a free-for-all.
188
00:07:24,077 --> 00:07:25,510
MUNDO:
Can we remotely tell
the bank's networks
189
00:07:25,512 --> 00:07:26,578
to shut down the ATMs?
190
00:07:26,580 --> 00:07:27,579
NELSON: Mmm...
(typing)
191
00:07:27,581 --> 00:07:28,914
No.
192
00:07:28,916 --> 00:07:30,515
Every time I send code
to shut them down,
193
00:07:30,517 --> 00:07:31,950
someone overwrites my script.
194
00:07:31,952 --> 00:07:33,752
That must be the target.
195
00:07:33,754 --> 00:07:35,520
You did say he was
still in the system?
196
00:07:35,522 --> 00:07:36,788
So he can stop us
197
00:07:36,790 --> 00:07:38,690
from remotely sending a command,
198
00:07:38,692 --> 00:07:40,792
but he can't stop us from
unplugging the machines, right?
199
00:07:40,794 --> 00:07:42,994
No, he can't.
200
00:07:42,996 --> 00:07:44,763
I'll call the Barnaby Bank CEO.
201
00:07:44,765 --> 00:07:46,164
It's time to go old-school.
202
00:07:46,166 --> 00:07:47,966
Do we think any
Barnaby Bank debit card
203
00:07:47,968 --> 00:07:50,702
can make the ATM
just spit out cash?
204
00:07:50,704 --> 00:07:52,504
No. No, no.
205
00:07:52,506 --> 00:07:53,805
It's not any debit card.
206
00:07:53,807 --> 00:07:55,207
Look at this function
that just launched
207
00:07:55,209 --> 00:07:58,009
in the target's code
when I swiped Andy's card.
208
00:07:58,011 --> 00:08:03,248
Yeah. This is a list of
22,678 Barnaby Bank customers.
209
00:08:03,250 --> 00:08:04,916
If any one of their debit cards
210
00:08:04,918 --> 00:08:07,219
was used in an ATM... jackpot.
211
00:08:07,221 --> 00:08:08,787
All right, so why these people?
212
00:08:08,789 --> 00:08:10,222
Why not all the customers?
213
00:08:10,224 --> 00:08:11,890
They-they have to have
something in common, right?
214
00:08:11,892 --> 00:08:13,124
Okay, let me check something.
215
00:08:13,126 --> 00:08:15,727
These ten people
posted on social media
216
00:08:15,729 --> 00:08:18,997
that their debit cards
triggered their ATM jackpots,
217
00:08:18,999 --> 00:08:23,668
and their names are all
on the list of the 22,678.
218
00:08:23,670 --> 00:08:25,203
KRUMITZ:
Look at this.
219
00:08:25,204 --> 00:08:26,737
There's less than $200
in each one of
220
00:08:26,740 --> 00:08:28,673
their bank accounts.
221
00:08:28,675 --> 00:08:30,158
RUSSELL:
Our hacker is stealing
222
00:08:30,159 --> 00:08:31,642
from the rich and
giving to the poor.
223
00:08:31,645 --> 00:08:33,712
This isn't a bank heist.
224
00:08:33,714 --> 00:08:36,081
We're hunting
a Cyber Robin Hood.
225
00:08:40,988 --> 00:08:47,192
¶ I know you've deceived me,
now here's a surprise ¶
226
00:08:49,029 --> 00:08:55,634
¶ I know that you have, 'cause
there's magic in my eyes ¶
227
00:08:55,636 --> 00:08:58,770
¶ I can see
for miles and miles ¶
228
00:08:58,772 --> 00:09:02,874
¶ I can see for miles
and miles ¶
229
00:09:02,876 --> 00:09:06,945
¶ I can see
for miles and miles ¶
230
00:09:06,947 --> 00:09:10,715
¶ And miles... ¶
231
00:09:10,717 --> 00:09:11,783
¶ Oh, yeah. ¶
232
00:09:33,273 --> 00:09:34,873
A little light reading?
233
00:09:34,875 --> 00:09:36,041
Yeah.
234
00:09:36,043 --> 00:09:38,109
You know, most people
are familiar with
235
00:09:38,111 --> 00:09:39,277
the contemporary version
236
00:09:39,279 --> 00:09:40,745
of Robin Hood.
237
00:09:40,747 --> 00:09:42,314
But in the original version--
238
00:09:42,316 --> 00:09:43,815
Piers Plowman
239
00:09:43,817 --> 00:09:45,650
by William Langland--
240
00:09:45,652 --> 00:09:47,085
the hero is actually trying
241
00:09:47,087 --> 00:09:50,088
to incite a revolt
over hunting privileges.
242
00:09:50,090 --> 00:09:51,656
Hunting privileges?
Right.
243
00:09:51,658 --> 00:09:54,326
And this guy Wat Tyler--
"Robin Hood"--
244
00:09:54,328 --> 00:09:56,728
gave the commoners
a voice.
245
00:09:56,730 --> 00:09:59,064
And the, uh, the unrest erupted
246
00:09:59,066 --> 00:10:01,299
in the Peasants' Revolt of 1381,
247
00:10:01,301 --> 00:10:02,701
but the important thing is,
248
00:10:02,703 --> 00:10:04,169
the revolt began
249
00:10:04,171 --> 00:10:06,137
over a refusal
to pay taxes,
250
00:10:06,139 --> 00:10:08,306
to send the king
251
00:10:08,308 --> 00:10:09,741
a very clear message.
252
00:10:09,743 --> 00:10:11,610
And in our story,
the message being sent
253
00:10:11,612 --> 00:10:13,812
over and over again to the bank
is "payback time."
254
00:10:14,948 --> 00:10:16,381
You're right.
255
00:10:16,383 --> 00:10:18,316
Our Cyber Robin Hood
might be trying
256
00:10:18,318 --> 00:10:20,352
to start an economic revolution.
257
00:10:20,354 --> 00:10:22,320
Right. But here's the deal:
258
00:10:22,322 --> 00:10:25,023
Now, we just unplugged
all of Barnaby Bank's ATMs
259
00:10:25,025 --> 00:10:27,025
in the District.
260
00:10:27,026 --> 00:10:29,026
So our guy's probably going
to be looking for another way
261
00:10:29,029 --> 00:10:30,695
to start his revolution.
262
00:10:30,697 --> 00:10:33,632
And, unfortunately,
the CEO of the bank
263
00:10:33,634 --> 00:10:35,133
refused to shut down
the network.
264
00:10:35,135 --> 00:10:36,401
Well, that was a mistake,
'cause our target
265
00:10:36,403 --> 00:10:38,069
is still in the bank's system.
266
00:10:38,071 --> 00:10:39,938
There are dozens of ways
to steal money.
267
00:10:39,940 --> 00:10:41,373
Right, right, so...
268
00:10:41,375 --> 00:10:42,641
KRUMITZ:
Guys!
269
00:10:42,643 --> 00:10:43,908
Check this out.
270
00:10:43,910 --> 00:10:45,110
Fascinating.
271
00:10:45,112 --> 00:10:47,178
Oh, yeah, that's an envelope.
272
00:10:47,180 --> 00:10:49,214
Uh, we used to send
mail back in the day.
273
00:10:49,216 --> 00:10:51,249
(laughs)
274
00:10:51,251 --> 00:10:52,784
Oh, generational humor.
275
00:10:52,786 --> 00:10:54,252
I get it.
276
00:10:54,254 --> 00:10:55,253
Okay, look.
277
00:10:55,255 --> 00:10:56,721
A bike messenger
just dropped off
278
00:10:56,723 --> 00:10:58,056
this photo in the lobby.
279
00:10:58,058 --> 00:10:59,157
Left it with a security guard.
280
00:10:59,159 --> 00:11:01,159
It was addressed to me,
so I scanned it
281
00:11:01,161 --> 00:11:03,061
and had the original
dusted for prints.
282
00:11:03,063 --> 00:11:04,863
There were none.
Wait, I thought
283
00:11:04,865 --> 00:11:06,698
that you said that the ATM's
camera wasn't recording.
284
00:11:06,700 --> 00:11:08,433
It wasn't,
285
00:11:08,434 --> 00:11:10,167
but our target was clearly
watching when Andy got shot.
286
00:11:10,170 --> 00:11:11,770
This is a screen grab
287
00:11:11,772 --> 00:11:13,738
from the ATM
surveillance camera's feed.
288
00:11:13,740 --> 00:11:16,274
Why would our target
be watching?
289
00:11:16,276 --> 00:11:18,209
He wanted to see the joy
on people's face
290
00:11:18,211 --> 00:11:21,046
when that ATM started
spitting out cash.
291
00:11:21,048 --> 00:11:23,081
Andy Wilcox's murder
was an unintended consequence
292
00:11:23,083 --> 00:11:25,050
of his hack.
293
00:11:25,052 --> 00:11:28,186
He wants to help us
find the killer.
294
00:11:28,188 --> 00:11:30,221
Krumitz, take that to Major
Crime, see if they can get
295
00:11:30,223 --> 00:11:31,289
a hit on the shooter's face.
296
00:11:31,291 --> 00:11:33,258
Okay, great.
297
00:11:33,260 --> 00:11:35,160
I've never chased
a gray hat hacker before.
298
00:11:35,162 --> 00:11:36,995
Well, Cyber Robin Hood
might have been
299
00:11:36,997 --> 00:11:38,229
driven by good intentions,
300
00:11:38,231 --> 00:11:40,365
but his hack had
deadly consequences.
301
00:11:40,367 --> 00:11:44,436
That makes him just as dangerous
as any black hat.
302
00:11:44,438 --> 00:11:46,271
Oh, it's true. I like that one.
Mm-hmm. Yeah.
303
00:11:46,273 --> 00:11:47,472
Get us up to speed, Raven.
304
00:11:47,474 --> 00:11:49,374
Okay, ToggleFly is
going nuts again.
305
00:11:49,376 --> 00:11:52,143
All over D.C.,
people are posting about
306
00:11:52,145 --> 00:11:55,146
getting random amounts of cash
deposited in their accounts.
307
00:11:55,148 --> 00:11:59,150
NELSON:
I've been going through all the
names on the list of 22,678.
308
00:11:59,152 --> 00:12:02,887
Weird thing is some people are
getting deposits, some aren't.
309
00:12:02,889 --> 00:12:05,857
The people who are receiving
money got this alert:
310
00:12:05,859 --> 00:12:08,927
"Congrats. As a valued member
of Barnaby Bank,
311
00:12:08,929 --> 00:12:11,730
you've been selected
to receive a cash refund."
312
00:12:11,732 --> 00:12:13,364
You see how he used
the word "refund"?
313
00:12:14,201 --> 00:12:15,900
A refund for what?
314
00:12:15,902 --> 00:12:16,935
I don't know.
I mean,
315
00:12:16,937 --> 00:12:18,036
the deposited amounts
are different.
316
00:12:18,038 --> 00:12:19,904
Yeah, but it looks like
every single one
317
00:12:19,906 --> 00:12:23,007
of these refunds
either ends in a zero or a five.
318
00:12:23,009 --> 00:12:24,042
MUNDO:
Hey, guys?
319
00:12:24,044 --> 00:12:25,844
Check this out.
320
00:12:25,846 --> 00:12:27,412
WAGNER: Until we have caught
the responsible party,
321
00:12:27,414 --> 00:12:30,515
Barnaby Bank has
shut down every ATM
322
00:12:30,517 --> 00:12:32,283
and suspended all accounts.
323
00:12:32,285 --> 00:12:34,519
Uh, for the safety
of our customers,
324
00:12:34,521 --> 00:12:36,187
no deposits, withdraws
325
00:12:36,189 --> 00:12:38,223
or transfers will be allowed
326
00:12:38,225 --> 00:12:39,758
until this issue is resolved.
327
00:12:39,760 --> 00:12:42,026
We're working with the FBI
to get our system
328
00:12:42,028 --> 00:12:44,028
up and running
as soon as possible.
329
00:12:44,030 --> 00:12:45,330
Thank you.
330
00:12:45,332 --> 00:12:46,831
KRUMITZ:
Freezing everyone's accounts
331
00:12:46,833 --> 00:12:47,932
won't do anything, dude.
332
00:12:47,934 --> 00:12:49,801
Robin Hood owns your network.
333
00:12:49,803 --> 00:12:52,036
He can just unfreeze
the accounts any time he wants.
334
00:12:52,038 --> 00:12:53,438
Hey, Elijah,
you seeing this?
335
00:12:53,440 --> 00:12:54,773
Your name's on the list.
336
00:12:54,775 --> 00:12:56,875
MUNDO:
It's not me.
337
00:12:56,877 --> 00:12:58,977
Did you get a Barnaby Bank
refund from Robin Hood?
338
00:12:58,979 --> 00:13:01,513
No. No, I got way more
than $200 in that account.
339
00:13:01,515 --> 00:13:05,316
(electronic whooshing)
340
00:13:07,220 --> 00:13:08,953
That's awkward.
341
00:13:08,955 --> 00:13:11,055
Ah, four grand
in the last two weeks
342
00:13:11,057 --> 00:13:12,824
on flowers,
343
00:13:12,826 --> 00:13:15,960
hotels, jewelry-- I mean,
I didn't buy any of that stuff.
344
00:13:15,962 --> 00:13:17,645
Well, I didn't, either.
345
00:13:17,646 --> 00:13:19,329
Well, if neither of us
made those purchases, who did?
346
00:13:19,332 --> 00:13:21,466
I don't know yet.
347
00:13:21,468 --> 00:13:23,067
Do you think this has
something to do
348
00:13:23,069 --> 00:13:25,303
with the Barnaby Bank stuff
that's been on the news?
349
00:13:25,305 --> 00:13:27,305
I... Maybe.
350
00:13:27,307 --> 00:13:29,374
I... We're investigating
that case right now.
351
00:13:29,376 --> 00:13:30,975
Was our account hacked?
352
00:13:30,977 --> 00:13:32,911
No. I checked.
353
00:13:32,913 --> 00:13:34,279
I called the bank,
alerted them to the issue.
354
00:13:34,281 --> 00:13:36,098
They're conducting
an internal investigation.
355
00:13:36,099 --> 00:13:37,916
But if I didn't find anything,
they're not going to.
356
00:13:37,918 --> 00:13:41,319
I can't even remember the last
time I used this debit card.
357
00:13:41,321 --> 00:13:43,521
When's the last time
you used it?
358
00:13:43,523 --> 00:13:45,456
Uh, not recently.
Months ago, maybe?
359
00:13:45,458 --> 00:13:47,292
Thank you for coming
all the way down here.
360
00:13:47,294 --> 00:13:48,459
I really appreciate it.
361
00:13:48,461 --> 00:13:50,028
Yeah, no, I figured
362
00:13:50,030 --> 00:13:52,330
you'd need your debit card
and driver's license.
363
00:13:52,332 --> 00:13:54,583
Thank you for returning these.
364
00:13:54,584 --> 00:13:56,835
Your receipt is your bar tab,
and I closed it out for you.
365
00:13:56,837 --> 00:13:59,170
Well, I hope you gave
yourself a good tip.
366
00:13:59,172 --> 00:14:00,338
Um, hey,
367
00:14:00,340 --> 00:14:02,006
uh...
368
00:14:02,008 --> 00:14:04,442
you think maybe I could get you
a cup of coffee sometime?
369
00:14:04,444 --> 00:14:07,278
Uh, listen, Nina, uh...
370
00:14:07,280 --> 00:14:09,214
I'm married.
371
00:14:09,216 --> 00:14:11,115
I just don't...
372
00:14:11,117 --> 00:14:12,450
Yeah, no, of course.
373
00:14:12,452 --> 00:14:14,152
Thank you.
374
00:14:18,859 --> 00:14:22,260
I got it. Somebody had
possession of my card.
375
00:14:22,262 --> 00:14:24,329
Wait, you lost it?
No, I left it at a...
376
00:14:24,331 --> 00:14:25,330
Don't worry about it.
377
00:14:25,332 --> 00:14:26,331
I got it.
378
00:14:26,333 --> 00:14:27,432
I'll figure this out.
379
00:14:30,971 --> 00:14:32,470
NELSON:
Good news.
380
00:14:32,472 --> 00:14:33,938
Hmm?
Major Crime used
screen grabs
381
00:14:33,940 --> 00:14:35,607
from the ATM's camera
to I.D. the shooter.
382
00:14:35,609 --> 00:14:37,408
They made an arrest.
383
00:14:37,410 --> 00:14:39,577
You track down our Cyber Robin
Hood in the bank's network yet?
384
00:14:39,579 --> 00:14:43,314
No, I've been through
the entire network twice.
385
00:14:43,316 --> 00:14:44,983
Mmm...
386
00:14:44,985 --> 00:14:46,484
Nelson, do you ever think
about what you're gonna do
387
00:14:46,486 --> 00:14:47,986
when you finish
your sentence here?
388
00:14:47,988 --> 00:14:50,255
Think I want to stay
at the FBI.
389
00:14:50,257 --> 00:14:51,456
Two of us
390
00:14:51,458 --> 00:14:53,258
taking down
bad guys together?
391
00:14:53,260 --> 00:14:55,293
Sexy.
392
00:14:55,294 --> 00:14:57,327
I'm kind of looking forward
to having my real life back.
393
00:14:57,330 --> 00:14:59,364
You know?
Yeah.
394
00:14:59,366 --> 00:15:02,533
It's like a parole
island here.
395
00:15:04,337 --> 00:15:07,338
Yeah, I feel you.
But I'd miss you if you...
396
00:15:07,340 --> 00:15:09,574
KRUMITZ:
Refund!
397
00:15:09,576 --> 00:15:11,576
Refund.
398
00:15:11,578 --> 00:15:13,544
Cyber Robin Hood
used the word "refund."
399
00:15:13,546 --> 00:15:16,314
Not "reward,"
not "cash back." "Refund.
400
00:15:16,316 --> 00:15:18,449
He's refunding overdraft fees.
401
00:15:18,451 --> 00:15:21,619
The deposits were all
in multiples of $35.
402
00:15:21,621 --> 00:15:23,354
That's why the amounts
were different
403
00:15:23,356 --> 00:15:25,323
and all ended
in a zero or a five.
404
00:15:25,325 --> 00:15:27,692
Robin Hood paid back
each customer
405
00:15:27,694 --> 00:15:30,561
for every $35 overdraft fee
the bank took out.
406
00:15:30,563 --> 00:15:32,497
But those people were paid
thousands of dollars.
407
00:15:32,499 --> 00:15:34,499
They had that many
overdraft charges?
408
00:15:34,501 --> 00:15:38,469
It's frighteningly easy to have
that many overdraft charges.
409
00:15:38,471 --> 00:15:41,506
Banks have a policy,
which is really a scam,
410
00:15:41,508 --> 00:15:43,508
called "check reordering."
411
00:15:43,510 --> 00:15:45,410
Each month,
almost 50% of Americans
412
00:15:45,412 --> 00:15:47,111
write checks
to pay their bills.
413
00:15:47,113 --> 00:15:49,113
Utilities, cable,
stuff like that.
414
00:15:49,115 --> 00:15:51,049
People living
paycheck to paycheck
415
00:15:51,051 --> 00:15:52,550
usually write
their largest check last.
416
00:15:52,552 --> 00:15:54,218
RAMIREZ:
Yeah, like rent.
417
00:15:54,220 --> 00:15:56,487
I deposit my paycheck,
I send in my rent,
418
00:15:56,489 --> 00:15:58,389
hoping that my paycheck clears
419
00:15:58,391 --> 00:16:00,525
before my landlord
deposits my rent check.
420
00:16:00,527 --> 00:16:03,328
KRUMITZ: Right, but what
you're not aware of
421
00:16:03,330 --> 00:16:06,531
is that the banks don't cash
the smaller utility checks
422
00:16:06,533 --> 00:16:10,201
before they've processed
the larger rent check.
423
00:16:10,203 --> 00:16:11,602
It's a scam.
424
00:16:11,604 --> 00:16:13,438
Banks process
the largest check first,
425
00:16:13,440 --> 00:16:16,107
so that your account gets hit
with not just one,
426
00:16:16,109 --> 00:16:17,608
but multiple overdraft fees.
427
00:16:17,610 --> 00:16:19,277
Robin Hood is
428
00:16:19,279 --> 00:16:20,678
refunding all
the overdraft charges
429
00:16:20,680 --> 00:16:22,547
the bank took through this scam.
430
00:16:22,549 --> 00:16:24,515
He's just trying to
pay the people back.
431
00:16:24,517 --> 00:16:27,986
Give them money that the bank
basically stole from them.
432
00:16:27,988 --> 00:16:31,422
KRUMITZ:
So our Cyber Robin Hood is you.
433
00:16:31,424 --> 00:16:32,991
No, not-not you you.
434
00:16:32,993 --> 00:16:35,026
But someone like you.
435
00:16:35,028 --> 00:16:36,661
Maybe it's just a fed-up
Barnaby Bank customer,
436
00:16:36,663 --> 00:16:38,463
who's out for revenge.
437
00:16:38,465 --> 00:16:40,398
(men grunting)
438
00:16:40,400 --> 00:16:42,500
MAN:
He's got a knife!
439
00:16:45,438 --> 00:16:47,138
WOMAN:
The fight was crazy.
440
00:16:47,140 --> 00:16:48,606
This one guy
was bragging about getting
441
00:16:48,608 --> 00:16:50,608
a cash refund from Barnaby Bank,
442
00:16:50,610 --> 00:16:53,277
making a huge deal
about all his free money.
443
00:16:53,279 --> 00:16:56,514
And another guy got pissed
because he didn't get one.
444
00:16:56,516 --> 00:16:58,449
I don't blame him.
I didn't get one, either.
445
00:16:58,451 --> 00:17:00,251
Anyways, they were arguing.
446
00:17:00,253 --> 00:17:01,786
And one of them threw a punch.
447
00:17:01,788 --> 00:17:03,588
And the other one
pulled a knife.
448
00:17:03,590 --> 00:17:05,323
I can't believe
he stabbed the guy.
449
00:17:05,325 --> 00:17:06,791
RYAN: Our target didn't
think through his plan.
450
00:17:06,793 --> 00:17:10,228
He thought getting people paid
would make them happy.
451
00:17:10,230 --> 00:17:12,630
He didn't account
for human greed.
452
00:17:12,632 --> 00:17:15,366
People are fighting each other
over whether he's a savior
453
00:17:15,368 --> 00:17:16,701
or a criminal?
454
00:17:16,703 --> 00:17:18,503
We got ourselves a problem.
455
00:17:18,505 --> 00:17:21,539
RYAN:
Robin Hood's revolution
456
00:17:21,541 --> 00:17:22,607
has begun.
457
00:17:39,392 --> 00:17:41,259
Nelson and I
spent the entire night
458
00:17:41,261 --> 00:17:42,760
combing through
the bank's network.
459
00:17:42,762 --> 00:17:45,663
Still can't figure out Cyber
Robin Hood's next move.
460
00:17:45,665 --> 00:17:47,799
Got yourself
a new toy, D.B.?
461
00:17:47,801 --> 00:17:50,368
The world's smallest
programmable robot.
462
00:17:50,370 --> 00:17:52,303
You look great, by the way.
463
00:17:52,305 --> 00:17:54,205
Thank you.
464
00:17:54,207 --> 00:17:56,507
I am trying to look
professional before I go
465
00:17:56,509 --> 00:18:00,244
in front of the judge
for my 5K1 hearing.
466
00:18:00,246 --> 00:18:03,448
You given any thought to what
you want to do after?
467
00:18:03,450 --> 00:18:05,083
Honestly, I was...
468
00:18:05,085 --> 00:18:07,752
I was thinking about taking
a job in the private sector.
469
00:18:07,754 --> 00:18:09,821
Yeah, there are a lot
of opportunities for somebody
470
00:18:09,823 --> 00:18:11,756
out there with your skill set.
471
00:18:11,758 --> 00:18:15,860
It's just, I guess I assumed
you were gonna stay here.
472
00:18:15,862 --> 00:18:20,431
Cannot imagine this place
without you, to be honest.
473
00:18:20,433 --> 00:18:21,766
Yeah.
474
00:18:21,768 --> 00:18:24,769
A lot of memories here.
475
00:18:24,771 --> 00:18:28,339
I've come a long way
since I was the young punk
476
00:18:28,341 --> 00:18:30,541
who stumbled in here
two years ago.
477
00:18:30,543 --> 00:18:33,377
¶ I'm a kerosene drinkin',
Pon Dop, what you thinkin' ¶
478
00:18:33,379 --> 00:18:36,447
¶ Hurricane of energy,
HBO brinkin' ¶
479
00:18:36,449 --> 00:18:38,449
¶ Turn up the drums... ¶
Can I help you?
480
00:18:38,451 --> 00:18:42,253
Yeah, I'm looking for someone
named Avery Ryan.
481
00:18:42,255 --> 00:18:42,887
Who are you?
482
00:18:42,889 --> 00:18:44,155
Raven Ramirez.
483
00:18:44,157 --> 00:18:45,490
It's my first day.
484
00:18:45,492 --> 00:18:48,259
You're Raven Ramirez?
485
00:18:48,261 --> 00:18:49,727
(chuckles)
Eclipse.
486
00:18:49,729 --> 00:18:51,462
The Eclipse?
487
00:18:51,464 --> 00:18:53,764
Why, do you have something
to say to me, Beardo?
488
00:18:53,766 --> 00:18:55,466
¶ What, what, what, wh-wh-what,
make it mine... ¶
489
00:18:55,468 --> 00:18:57,301
I had such attitude.
490
00:18:57,303 --> 00:18:59,637
I thought I knew everything.
491
00:18:59,639 --> 00:19:00,671
You still do.
(laughs)
492
00:19:00,673 --> 00:19:02,573
Hey.
Hey.
493
00:19:02,575 --> 00:19:04,375
You know, whatever you
choose to do, Raven,
494
00:19:04,377 --> 00:19:05,343
you're gonna do great.
495
00:19:05,345 --> 00:19:06,577
Thanks, D.B.
496
00:19:06,579 --> 00:19:08,312
(chiming)
497
00:19:09,516 --> 00:19:11,382
No way.
498
00:19:11,384 --> 00:19:15,419
Someone is claiming to be our
Cyber Robin Hood on ToggleFly.
499
00:19:15,421 --> 00:19:16,854
Look at that.
500
00:19:16,855 --> 00:19:18,288
"Citizens of the District,
stop fighting.
501
00:19:18,291 --> 00:19:19,924
"Do not turn on each other.
502
00:19:19,926 --> 00:19:21,626
"The bank is our only enemy.
503
00:19:21,628 --> 00:19:23,861
"When I'm done,
the payout will be huge
504
00:19:23,863 --> 00:19:26,464
and the bank will be
brought to its knees."
505
00:19:26,466 --> 00:19:28,766
All right, any way we can track
this to the originating device?
506
00:19:28,768 --> 00:19:30,334
I mean, I'll try,
but my guess
507
00:19:30,336 --> 00:19:32,937
is that the post was routed
through a dozen proxies.
508
00:19:32,939 --> 00:19:33,938
Try.
509
00:19:33,940 --> 00:19:36,440
Hey, you see that?
510
00:19:36,442 --> 00:19:38,876
Looks like
Cyber Robin Hood's next hack.
511
00:19:42,282 --> 00:19:44,582
¶ ¶
512
00:19:51,457 --> 00:19:53,524
(siren wailing)
513
00:19:56,529 --> 00:20:00,231
(indistinct chatter)
514
00:20:00,233 --> 00:20:02,300
Cyber Robin Hood gained access
to one of Barnaby Bank's
515
00:20:02,302 --> 00:20:03,801
underground parking
structures and stole
516
00:20:03,803 --> 00:20:06,304
a Colton Security
armored truck.
517
00:20:06,306 --> 00:20:08,272
Then he shut down every one
of the surveillance cameras,
518
00:20:08,274 --> 00:20:11,342
using the same code he wrote
to shut down the ATM cams.
519
00:20:11,344 --> 00:20:13,778
So we have no idea exactly
when he pulled this heist.
520
00:20:13,780 --> 00:20:16,814
What we do know
is that $1.2 million
521
00:20:16,816 --> 00:20:18,449
was in the back of the truck.
522
00:20:18,451 --> 00:20:20,985
I mean, why have the cash
just lying around?
523
00:20:20,987 --> 00:20:23,487
When we unplugged the ATMs
to stop Robin Hood's first hack,
524
00:20:23,489 --> 00:20:25,823
it forced Barnaby Bank
to find a place
525
00:20:25,825 --> 00:20:27,358
to store all that extra cash.
526
00:20:27,360 --> 00:20:29,344
RUSSELL:
Right, most banks
527
00:20:29,345 --> 00:20:31,329
keep their cash reserves
in secure offsite locations.
528
00:20:31,331 --> 00:20:33,364
Barnaby Bank kept their cash
529
00:20:33,366 --> 00:20:34,565
in the trucks with the intention
530
00:20:34,567 --> 00:20:36,534
of getting it all
out of the District,
531
00:20:36,536 --> 00:20:39,270
but Cyber Robin Hood
struck first.
532
00:20:39,272 --> 00:20:40,905
All he had to do
was swipe a key card
533
00:20:40,907 --> 00:20:42,406
to steal the armored truck.
534
00:20:42,408 --> 00:20:44,008
NELSON: Police found
the abandoned truck
535
00:20:44,010 --> 00:20:45,610
underneath an overpass;
no prints.
536
00:20:45,612 --> 00:20:47,345
RYAN: Up until now,
both of these hacks--
537
00:20:47,347 --> 00:20:48,913
the ATM and
the overdraft refund--
538
00:20:48,915 --> 00:20:51,515
were both done remotely.
539
00:20:51,517 --> 00:20:53,284
Stealing a truck
is done in person,
540
00:20:53,286 --> 00:20:55,686
which means Robin Hood
is not just a hacker.
541
00:20:55,688 --> 00:20:57,588
He knew where
that money was.
542
00:20:57,590 --> 00:20:59,624
He knew how to get in,
he knew how to get out.
543
00:20:59,626 --> 00:21:01,626
This is an inside job.
544
00:21:01,628 --> 00:21:04,996
I want the names of every
employee who has access
545
00:21:04,998 --> 00:21:07,865
to that underground structure
where that truck was stolen.
546
00:21:07,867 --> 00:21:10,334
¶ ¶
547
00:21:16,576 --> 00:21:18,643
(door opens)
Hey.
548
00:21:19,646 --> 00:21:21,012
Hi. (chuckles)
549
00:21:21,014 --> 00:21:22,413
Long time, no see.
Hey.
550
00:21:22,415 --> 00:21:23,748
Listen, I was hoping
maybe you could...
551
00:21:23,750 --> 00:21:25,750
help shed some light
on something for me.
552
00:21:25,752 --> 00:21:27,285
Yeah? What's up?
553
00:21:27,287 --> 00:21:29,387
Some odd charges show up
on my debit card.
554
00:21:29,389 --> 00:21:32,790
Lingerie, diamond
earrings...
555
00:21:32,792 --> 00:21:35,493
a stay at the
Rose Garden Inn.
556
00:21:35,495 --> 00:21:37,161
What does that
have to do with me?
557
00:21:37,162 --> 00:21:38,828
The charges were made on
the card I left at the bar.
558
00:21:38,831 --> 00:21:40,665
Did you come
all the way down here
559
00:21:40,667 --> 00:21:42,466
to accuse me
of stealing your card?
560
00:21:42,468 --> 00:21:44,468
Charges were very specific.
561
00:21:44,470 --> 00:21:46,771
You told me you loved staying
at the Rose Garden Inn.
562
00:21:46,773 --> 00:21:48,306
Elijah, I returned
your card to you.
563
00:21:48,308 --> 00:21:51,475
Why would I do that if I was
gonna steal your money?
564
00:21:51,477 --> 00:21:54,011
Did you find any evidence
that I made those purchases?
565
00:21:54,981 --> 00:21:56,080
No.
566
00:21:56,082 --> 00:21:57,581
I didn't do it,
Elijah.
567
00:21:58,885 --> 00:22:01,952
I kind of think
you know that, though.
568
00:22:01,954 --> 00:22:04,488
If you need somebody
to talk to-- as friends,
569
00:22:04,490 --> 00:22:06,657
obviously--
570
00:22:06,659 --> 00:22:08,326
uh, you know where to find me.
571
00:22:15,034 --> 00:22:17,101
¶ ¶
572
00:22:22,709 --> 00:22:25,843
Jihadi John tried to hide
behind a mask, too.
573
00:22:25,845 --> 00:22:29,714
You know how the CIA
identified Jihadi John?
574
00:22:29,716 --> 00:22:31,649
The veins in his hands.
575
00:22:31,651 --> 00:22:35,786
They used a technique called
optical-based vein uncovering
576
00:22:35,788 --> 00:22:39,690
to map out the structure of his
veins from the beheading videos.
577
00:22:39,692 --> 00:22:42,727
And then they cross-referenced
that vein pattern
578
00:22:42,729 --> 00:22:45,996
with hundreds of thousands of
people's photos on social media.
579
00:22:45,998 --> 00:22:51,035
The human vein is actually
more unique than fingerprints.
580
00:22:51,037 --> 00:22:55,673
Our suspect pool is limited
to the Barnaby Bank employees
581
00:22:55,675 --> 00:22:58,142
who had physical access
to those armored trucks.
582
00:22:58,144 --> 00:22:59,844
Right.
583
00:22:59,846 --> 00:23:01,545
So now all
we have to do is
584
00:23:01,547 --> 00:23:05,015
run the pattern of Robin Hood's
veins in this photo
585
00:23:05,017 --> 00:23:07,385
against security camera footage
586
00:23:07,387 --> 00:23:09,820
of the hand of every employee
587
00:23:09,822 --> 00:23:12,790
who accessed
the armored trucks.
588
00:23:15,795 --> 00:23:17,628
KRUMITZ:
Are you sure this is gonna work?
589
00:23:17,630 --> 00:23:18,796
I have no idea.
590
00:23:18,798 --> 00:23:21,665
Guys, I just found
another vulnerability
591
00:23:21,667 --> 00:23:23,167
in the Barnaby
Bank system.
592
00:23:23,169 --> 00:23:25,436
This one affects
the wire transfers.
593
00:23:25,438 --> 00:23:26,704
Robin Hood can send
as much money as he wants
594
00:23:26,706 --> 00:23:28,122
anywhere in the world.
595
00:23:28,123 --> 00:23:29,539
So the ATM and the
overdraft hacks
596
00:23:29,542 --> 00:23:31,058
might have been just
smoke and mirrors.
597
00:23:31,059 --> 00:23:32,575
This could've been what
he was after the whole time.
598
00:23:32,578 --> 00:23:33,677
I'll loop in Raven.
599
00:23:33,679 --> 00:23:35,045
We need to get
started on a patch.
600
00:23:36,516 --> 00:23:38,582
Whoa, here we go,
got a match.
601
00:23:38,584 --> 00:23:41,786
So we have a time stamp
of when this hand swiped
602
00:23:41,788 --> 00:23:44,121
an I.D. badge
at the bank's garage.
603
00:23:44,123 --> 00:23:46,557
Last Wednesday, 3:23 p.m.
604
00:23:46,559 --> 00:23:48,559
Well, I can cross-reference
the time stamp
605
00:23:48,561 --> 00:23:50,728
with a list of employees
who swiped their card that day.
606
00:23:50,730 --> 00:23:53,464
(typing)
607
00:23:53,466 --> 00:23:55,466
All right, got a badge number.
608
00:23:55,468 --> 00:23:57,668
Say hello to Cyber Robin Hood.
609
00:23:58,971 --> 00:24:00,838
Hello.
610
00:24:03,476 --> 00:24:04,708
FBI!
611
00:24:05,812 --> 00:24:07,044
AJ Kim, FBI!
612
00:24:07,046 --> 00:24:08,479
Hands above
your head.
613
00:24:08,481 --> 00:24:09,580
Slowly stand up.
614
00:24:11,217 --> 00:24:14,718
For the record, I am forgoing
my legal right to remain silent,
615
00:24:14,720 --> 00:24:18,722
and I'm fully cooperating with
the law by not resisting arrest.
616
00:24:18,724 --> 00:24:20,024
My name is AJ Kim,
617
00:24:20,026 --> 00:24:23,227
and I am responsible for
the Barnaby Bank hack.
618
00:24:23,229 --> 00:24:26,797
And I'm more than willing
to go down for my cause.
619
00:24:26,799 --> 00:24:27,865
(handcuffs fastening)
620
00:24:33,573 --> 00:24:36,540
I've been a teller
at Barnaby Bank for five years.
621
00:24:36,542 --> 00:24:39,877
Know how much banks made
in 2014 from overdraft fees?
622
00:24:39,879 --> 00:24:42,947
$35 billion.
623
00:24:42,949 --> 00:24:44,982
Barnaby alone made off
with $7 billion.
624
00:24:44,984 --> 00:24:47,751
Well, that is reprehensible,
but you know what's worse?
625
00:24:47,753 --> 00:24:50,754
A man was murdered
because of your ATM hack.
626
00:24:50,756 --> 00:24:52,990
I didn't mean
for anyone to get hurt.
627
00:24:52,992 --> 00:24:54,792
That's why I mailed you guys
the photo of the shooter.
628
00:24:54,794 --> 00:24:56,627
Yes, you did.
629
00:24:56,629 --> 00:24:58,629
And then you decided
to hack the bank again
630
00:24:58,631 --> 00:25:00,631
to give people refunds,
631
00:25:00,633 --> 00:25:03,067
which resulted in another
man being stabbed.
632
00:25:03,069 --> 00:25:05,903
Look, I tried to go
through the proper channels
633
00:25:05,905 --> 00:25:07,705
at the bank years ago.
634
00:25:07,707 --> 00:25:09,039
When I discovered
the overdraft scam,
635
00:25:09,041 --> 00:25:11,041
I went right to my boss.
636
00:25:11,043 --> 00:25:12,393
He dismissed me.
637
00:25:12,394 --> 00:25:13,744
RYAN: Why didn't you go
to law enforcement?
638
00:25:13,746 --> 00:25:14,912
That's what
we're here for.
639
00:25:14,914 --> 00:25:17,248
Five years,
I've been telling mothers
640
00:25:17,250 --> 00:25:19,149
who could barely feed their kids
641
00:25:19,151 --> 00:25:21,285
that I couldn't refund
the excessive overdraft fees.
642
00:25:21,287 --> 00:25:22,753
I did what was right.
643
00:25:22,755 --> 00:25:25,189
I gave the poor a voice.
644
00:25:25,191 --> 00:25:27,224
And the people
are supporting me.
645
00:25:27,226 --> 00:25:29,760
I started a movement.
646
00:25:29,762 --> 00:25:32,696
It will go on,
with or without me.
647
00:25:32,698 --> 00:25:34,698
Oh, you want to be
arrested, don't you?
648
00:25:34,700 --> 00:25:37,167
So you can martyr yourself
for this cause,
649
00:25:37,169 --> 00:25:39,036
'cause you want your name
and your picture
650
00:25:39,038 --> 00:25:40,237
plastered everywhere.
651
00:25:40,239 --> 00:25:42,206
I'm not gonna
let that happen.
652
00:25:42,208 --> 00:25:44,875
I will make sure the press
never gets a photo of you,
653
00:25:44,877 --> 00:25:46,877
that the name AJ Kim
654
00:25:46,879 --> 00:25:49,113
is never associated
with this bank hack.
(cell phone chimes)
655
00:25:49,115 --> 00:25:50,814
Avery?
656
00:25:53,886 --> 00:25:55,886
I just got this alert.
657
00:25:55,888 --> 00:25:59,189
Just got $100,000 transferred
into my Barnaby Bank account.
658
00:25:59,191 --> 00:26:00,724
How's that possible?
659
00:26:00,726 --> 00:26:03,160
AJ was in our custody
when this happened.
660
00:26:03,162 --> 00:26:05,129
Who are you working with?
661
00:26:05,131 --> 00:26:06,163
No one.
662
00:26:06,165 --> 00:26:07,982
What are you talking about?
663
00:26:07,983 --> 00:26:09,800
Agent Mundo just got
$100,000 transferred
664
00:26:09,802 --> 00:26:11,835
into his Barnaby Bank account.
665
00:26:11,837 --> 00:26:13,571
Who else did you
transfer money to?
666
00:26:13,573 --> 00:26:15,706
I didn't do that.
667
00:26:17,810 --> 00:26:19,543
What have you got?
668
00:26:19,544 --> 00:26:21,277
$100,000 was just
wired electronically
669
00:26:21,280 --> 00:26:24,281
to every Barnaby Bank
customer in the D.C. area.
670
00:26:24,283 --> 00:26:26,584
(sighs)
That's over
300,000 people.
671
00:26:26,586 --> 00:26:29,320
Somebody just bankrupted
Barnaby Bank.
672
00:26:29,322 --> 00:26:32,656
And I don't think it's our
Cyber Robin Hood, AJ Kim.
673
00:26:32,658 --> 00:26:34,325
He looked surprised
when I told him.
674
00:26:34,327 --> 00:26:36,994
Yeah, well, we have a
slightly bigger problem
675
00:26:36,996 --> 00:26:39,163
than the emergence
of a second hacker.
676
00:26:39,165 --> 00:26:41,865
Uh, all of the money
was funneled
677
00:26:41,867 --> 00:26:45,169
through a vulnerability
that Raven said she'd patched.
678
00:26:45,171 --> 00:26:48,172
Now, I'm sure there's
a reasonable explanation, but...
679
00:26:48,174 --> 00:26:49,974
Well, I really
hope there is.
680
00:26:49,976 --> 00:26:51,742
RAMIREZ: I don't know
what to tell you, Avery.
681
00:26:51,744 --> 00:26:54,311
I patched that vulnerability.
Check the bank's network.
682
00:26:54,313 --> 00:26:56,213
We did.
683
00:26:56,215 --> 00:26:58,048
The fact is your patch
is not there.
684
00:26:58,050 --> 00:27:00,150
You think I stole the money?
685
00:27:00,152 --> 00:27:02,286
We're just trying to determine
what actually happened.
(cell phone chimes)
686
00:27:03,990 --> 00:27:05,222
Okay, I just got an alert.
687
00:27:05,224 --> 00:27:06,857
The FBI has not been
able to monitor
688
00:27:06,859 --> 00:27:08,258
your cell phone activity
since yesterday.
689
00:27:08,260 --> 00:27:09,827
Do you have any idea
why that might be?
690
00:27:09,829 --> 00:27:11,228
No.
691
00:27:11,230 --> 00:27:13,330
Are you interrogating me?
692
00:27:14,233 --> 00:27:16,967
Take my phone.
693
00:27:16,969 --> 00:27:19,370
Okay? I have
nothing to hide.
694
00:27:19,372 --> 00:27:21,138
Why would I commit a hack
695
00:27:21,140 --> 00:27:24,274
a couple of hours
before my 5K1 hearing?
696
00:27:24,276 --> 00:27:26,310
I mean, that's what you're
accusing me of, right?
697
00:27:26,312 --> 00:27:27,845
We're not accusing you
of hacking anything.
698
00:27:27,847 --> 00:27:29,680
NELSON: Sorry to interrupt,
but I have proof
699
00:27:29,682 --> 00:27:32,016
that Raven patched
the vulnerability.
Thank you.
700
00:27:32,018 --> 00:27:34,752
These are event logs showing
activity on the bank's network.
701
00:27:34,754 --> 00:27:37,755
Now, at 1:07 p.m.,
Raven added her code.
702
00:27:37,757 --> 00:27:39,990
An hour later,
it was deleted.
703
00:27:39,992 --> 00:27:43,327
But it would take another hacker
years to find Raven's patch
704
00:27:43,329 --> 00:27:46,664
amongst a half million lines
of code in the bank network.
705
00:27:46,666 --> 00:27:49,033
Unless the hacker knew
exactly what to look for.
706
00:27:49,035 --> 00:27:50,367
I know
who did this.
707
00:27:52,204 --> 00:27:55,305
I used a sequence of code
another black hat taught me.
708
00:27:55,307 --> 00:27:56,707
Who?
709
00:27:58,444 --> 00:28:01,378
Jackson.
710
00:28:01,380 --> 00:28:03,914
Jackson Richmond,
your ex-boyfriend?
711
00:28:03,916 --> 00:28:06,316
But you cut off all
contact with him
712
00:28:06,318 --> 00:28:08,385
when you started working
the Cyber Crime Division.
713
00:28:08,387 --> 00:28:09,720
I did.
714
00:28:09,722 --> 00:28:11,055
But he tracked me down
yesterday.
715
00:28:11,057 --> 00:28:13,257
He's in D.C. for my 5K1 hearing.
716
00:28:13,259 --> 00:28:14,925
Wait, you saw him?
717
00:28:14,927 --> 00:28:16,760
He found me.
718
00:28:16,762 --> 00:28:19,229
I tried to get away, tried
to tell him I couldn't talk.
719
00:28:19,231 --> 00:28:21,799
We literally had
a two-minute conversation.
720
00:28:21,801 --> 00:28:22,933
AVERY: Raven, did
you speak to him
721
00:28:22,935 --> 00:28:24,435
about the Barnaby Bank case?
722
00:28:24,437 --> 00:28:26,103
No, of course not.
723
00:28:26,105 --> 00:28:29,440
Besides, I saw him before
we started working on this.
724
00:28:29,442 --> 00:28:32,910
I don't know how he figured out
that I wrote that code.
725
00:28:32,912 --> 00:28:35,212
Probably hacked your phone
when he saw you yesterday.
726
00:28:35,214 --> 00:28:36,880
That would explain why
your phone isn't connected
727
00:28:36,882 --> 00:28:39,450
to the FBI network--
Jackson's controlling it.
728
00:28:39,452 --> 00:28:43,320
But how would Jackson have known
to hack me for the bank exploit?
729
00:28:43,322 --> 00:28:46,457
No, no, he hacked you
to keep tabs on you.
730
00:28:46,459 --> 00:28:48,459
The exploit
was a bonus.
731
00:28:48,461 --> 00:28:51,161
Then he wired the bank's money
to make it look like
732
00:28:51,163 --> 00:28:52,463
it was part of the
Robin Hood hack.
733
00:28:52,465 --> 00:28:54,231
MUNDO:
It was camouflage.
734
00:28:54,233 --> 00:28:57,367
He knew if he wired money just
to himself, then we'd track it,
735
00:28:57,369 --> 00:28:59,837
but now he's a needle
in a haystack of wire transfers.
736
00:29:02,475 --> 00:29:05,209
Didn't realize you saw Jackson.
737
00:29:05,211 --> 00:29:07,878
I told you,
he ambushed me.
738
00:29:07,880 --> 00:29:09,213
Yeah, how was it?
739
00:29:09,215 --> 00:29:10,948
Seeing him after
all this time?
740
00:29:12,485 --> 00:29:14,485
Weird.
741
00:29:14,487 --> 00:29:16,487
We were together
for five years.
742
00:29:16,489 --> 00:29:17,921
We thought we were unstoppable.
743
00:29:17,923 --> 00:29:21,358
Fantasized
about big hacks,
744
00:29:21,360 --> 00:29:25,229
stealing millions and traveling
the world together.
745
00:29:25,231 --> 00:29:28,365
Looks like he's still trying
to make that fantasy a reality.
746
00:29:28,367 --> 00:29:30,000
Jackson hacked you through
your phone command.
747
00:29:30,002 --> 00:29:31,869
FEMALE VOICE:
Hello. What can I help you with?
748
00:29:31,871 --> 00:29:33,403
I hardly ever use Isla.
749
00:29:33,405 --> 00:29:35,506
Yeah, well, according to
your phone logs, you did.
750
00:29:35,508 --> 00:29:37,174
Yesterday morning
at 9:30 a.m.
751
00:29:37,176 --> 00:29:38,909
That's when
I saw Jackson.
752
00:29:38,911 --> 00:29:41,545
He didn't have any physical
access to my phone.
753
00:29:41,547 --> 00:29:43,413
How could he have
activated Isla?
754
00:29:43,415 --> 00:29:44,548
Were your headphones
plugged into your phone
755
00:29:44,550 --> 00:29:45,549
when you saw him yesterday?
756
00:29:45,551 --> 00:29:47,551
Yeah. Why?
757
00:29:47,553 --> 00:29:49,419
(sighs)
He hacked you remotely.
758
00:29:49,421 --> 00:29:51,388
Used your headphones
as an antenna.
759
00:29:51,390 --> 00:29:54,091
He only had to be
within six feet of you.
760
00:29:54,093 --> 00:29:55,926
With his laptop.
761
00:29:55,928 --> 00:29:57,928
I mean, using radio waves,
762
00:29:57,930 --> 00:29:59,930
he silently triggered
voice commands on your phone.
763
00:29:59,932 --> 00:30:02,266
He forced your phone
to launch a Web site
764
00:30:02,268 --> 00:30:04,034
that was already corrupted
with his malware.
765
00:30:04,036 --> 00:30:06,069
See?
766
00:30:06,071 --> 00:30:09,873
RAMIREZ: Eclipse and Prodigy,
those are our hacker handles.
767
00:30:09,875 --> 00:30:11,909
I cannot believe
he did this to me.
768
00:30:11,911 --> 00:30:14,578
Love makes you do stupid things.
769
00:30:14,580 --> 00:30:17,447
Like Jackson not
anonymizing himself
770
00:30:17,449 --> 00:30:19,316
when he registered
the Web site domain.
771
00:30:19,318 --> 00:30:21,485
Right? I got a I.P. address
for the device
772
00:30:21,487 --> 00:30:23,487
he was using to spy on you.
(taps key)
773
00:30:23,489 --> 00:30:26,490
And let's see if we can get
a location, hmm?
774
00:30:28,127 --> 00:30:30,127
RAMIREZ:
The FBI headquarters?
775
00:30:30,129 --> 00:30:33,397
He's there testifying as
a character witness for my 5K1.
776
00:30:33,399 --> 00:30:37,534
I mean... why would he hack
a bank and stay in D.C.?
777
00:30:37,536 --> 00:30:39,403
He did this for you.
778
00:30:39,405 --> 00:30:40,904
This is all about you.
779
00:30:40,906 --> 00:30:43,340
Most guys don't like
meeting their girl's ex.
780
00:30:43,342 --> 00:30:44,408
I'm looking forward to it.
781
00:31:01,427 --> 00:31:03,493
I, uh, thought you
couldn't be seen with me
782
00:31:03,495 --> 00:31:04,895
until after your 5K1.
783
00:31:04,897 --> 00:31:06,129
It's over.
784
00:31:06,131 --> 00:31:07,431
I just met with the judge.
785
00:31:07,433 --> 00:31:08,532
Whatever you said helped.
786
00:31:08,534 --> 00:31:10,100
What, so you're free?
787
00:31:10,102 --> 00:31:11,301
I'm free.
788
00:31:11,303 --> 00:31:14,171
So, uh, what's next, Eclipse?
789
00:31:14,173 --> 00:31:16,173
You, uh, you gonna keep
that white hat on?
790
00:31:16,175 --> 00:31:17,307
No.
791
00:31:17,309 --> 00:31:20,644
No, I am done with the FBI.
792
00:31:20,646 --> 00:31:24,314
Seeing you again...
brought back
793
00:31:24,316 --> 00:31:26,183
all of our
good memories.
794
00:31:26,185 --> 00:31:27,651
And I realized I...
795
00:31:27,653 --> 00:31:30,654
I want to be with you.
796
00:31:30,656 --> 00:31:32,256
Really?
797
00:31:32,258 --> 00:31:34,424
'Cause, uh, you didn't seem
so convinced yesterday.
798
00:31:34,426 --> 00:31:36,960
I still had my 5K1
looming over me.
799
00:31:38,197 --> 00:31:40,464
And, Jackson, you
caught me by surprise.
800
00:31:42,201 --> 00:31:44,201
You're the only one
who gets me.
801
00:31:44,203 --> 00:31:47,204
The real me, Eclipse.
802
00:31:47,206 --> 00:31:50,340
I've been pretending
to be someone else
803
00:31:50,342 --> 00:31:53,310
for the last two years.
804
00:31:53,312 --> 00:31:55,345
(over speaker):
I'm tired of living a lie.
805
00:31:55,347 --> 00:31:57,614
JACKSON: Are you sure you're
ready to leave all this behind?
806
00:31:57,616 --> 00:31:59,516
I mean, you got a pretty
cushy life here.
807
00:31:59,518 --> 00:32:02,085
I don't want you
to have regrets.
808
00:32:02,087 --> 00:32:04,521
RAMIREZ: The only regret I have
is ending our relationship.
809
00:32:07,293 --> 00:32:09,293
I love you, Jackson.
810
00:32:09,295 --> 00:32:11,028
I never stopped.
811
00:32:16,502 --> 00:32:18,168
It's all part of
the sting, Nelson.
812
00:32:18,170 --> 00:32:19,703
She's just
playing her part.
813
00:32:21,707 --> 00:32:23,607
You two are the worst-kept
secret in D.C.
814
00:32:23,609 --> 00:32:25,175
(chuckles)
815
00:32:27,613 --> 00:32:29,980
JACKSON: I've waited
two years for that.
816
00:32:29,982 --> 00:32:32,049
And, as always,
you never disappoint.
817
00:32:34,320 --> 00:32:36,687
Uh, time to book
two tickets to Geneva.
818
00:32:36,689 --> 00:32:38,021
Can you leave
tonight?
819
00:32:38,023 --> 00:32:39,556
Tonight?
What's the rush?
820
00:32:39,558 --> 00:32:41,458
You remember that big hack
we always talked about?
821
00:32:41,460 --> 00:32:43,226
Yeah.
I did it.
822
00:32:43,228 --> 00:32:44,695
Set up a whole bunch
of dummy accounts
823
00:32:44,697 --> 00:32:46,296
and cleaned Barnaby Bank out.
824
00:32:46,298 --> 00:32:49,366
We've got $5 million, tax-free.
825
00:32:54,406 --> 00:32:57,007
You really haven't changed
at all, Prodigy.
826
00:32:58,010 --> 00:32:59,209
OFFICER:
Jackson Richmond!
827
00:32:59,211 --> 00:33:00,610
Don't move!
828
00:33:05,217 --> 00:33:08,452
Jackson Richmond, you're under
arrest for cyber bank fraud.
829
00:33:08,454 --> 00:33:09,586
You set me up?
830
00:33:11,223 --> 00:33:12,723
But I did it for us.
831
00:33:12,725 --> 00:33:14,257
There is no "us."
832
00:33:23,502 --> 00:33:25,635
MUNDO:
Suspect is in custody.
833
00:33:34,513 --> 00:33:36,313
(sighs)
834
00:33:36,315 --> 00:33:38,248
NELSON: I'm sorry
you had to do that.
835
00:33:39,551 --> 00:33:41,284
I know he meant a lot to you.
836
00:33:43,122 --> 00:33:45,122
He did.
837
00:33:45,124 --> 00:33:48,592
But Jackson is my past.
838
00:33:48,594 --> 00:33:52,295
I want something different
for my future.
839
00:33:56,502 --> 00:33:59,336
RAMIREZ: When I was 15,
I dropped out of school,
840
00:33:59,338 --> 00:34:02,205
left home,
841
00:34:02,207 --> 00:34:05,042
became a hacker to survive.
842
00:34:05,044 --> 00:34:07,711
I never really felt
like I belonged anywhere,
843
00:34:07,713 --> 00:34:09,413
until I started
844
00:34:09,415 --> 00:34:13,116
working for the
Cyber Crime Division.
845
00:34:13,118 --> 00:34:16,119
I can't thank
Deputy Director Ryan enough
846
00:34:16,121 --> 00:34:18,288
for making me a member
of her family.
847
00:34:18,290 --> 00:34:20,757
Thank you,
Miss Ramirez.
848
00:34:20,759 --> 00:34:22,526
Deputy Director Ryan,
849
00:34:22,528 --> 00:34:24,661
what is your recommendation
regarding sentencing?
850
00:34:24,663 --> 00:34:28,165
RYAN: Your Honor, it's
been my pleasure working
851
00:34:28,167 --> 00:34:31,168
with Miss Ramirez
for the past two years.
852
00:34:31,170 --> 00:34:33,120
During that time,
853
00:34:33,121 --> 00:34:35,071
she's become an invaluable
member of my team.
854
00:34:36,308 --> 00:34:40,243
But recent events
have led me to believe that...
855
00:34:40,245 --> 00:34:43,146
she could benefit from more time
856
00:34:43,148 --> 00:34:44,815
with the Cyber
Crime Division.
857
00:34:44,817 --> 00:34:46,383
Are you saying
she hasn't provided you
858
00:34:46,385 --> 00:34:47,584
with substantial assistance?
859
00:34:59,631 --> 00:35:01,698
(indistinct chattering,
laughing)
860
00:35:03,235 --> 00:35:04,234
(sighs)
861
00:35:04,236 --> 00:35:05,435
Oh, hey!
Hey.
862
00:35:05,437 --> 00:35:06,536
Perfect timing.
863
00:35:06,538 --> 00:35:08,538
We're just about
to sit down for dinner.
864
00:35:08,540 --> 00:35:11,308
This is my friend Nina,
from spin class.
865
00:35:11,310 --> 00:35:12,275
She's gonna join us.
866
00:35:12,277 --> 00:35:13,777
NINA:
Devon, this is so crazy.
867
00:35:13,779 --> 00:35:16,313
Elijah and I actually
know each other.
868
00:35:16,315 --> 00:35:18,181
He comes to my
bar all the time.
869
00:35:18,183 --> 00:35:20,484
I used to come
to her bar.
870
00:35:22,321 --> 00:35:25,322
It was a pretty regular
thing there for a while.
871
00:35:25,324 --> 00:35:26,874
Like when your
dad was sick.
872
00:35:26,875 --> 00:35:28,425
You know what, actually,
you would be surprised
873
00:35:28,427 --> 00:35:29,759
how many people
would rather talk
874
00:35:29,761 --> 00:35:31,294
to a bartender
than a therapist.
875
00:35:31,296 --> 00:35:32,829
I feel like I'm
ready for my degree.
876
00:35:32,831 --> 00:35:35,298
So much for the
working-late excuses.
877
00:35:36,268 --> 00:35:37,734
I was working late.
878
00:35:37,736 --> 00:35:39,636
I stopped for one drink.
879
00:35:39,638 --> 00:35:42,606
And a little therapy,
apparently.
880
00:35:42,608 --> 00:35:44,441
Devon...
NINA:
Okay, I'm sorry.
881
00:35:44,443 --> 00:35:47,210
I didn't mean to, um, cause
any problems, so I'm gonna go,
882
00:35:47,212 --> 00:35:49,646
and I'll just see you in
class, like, on Friday?
883
00:35:49,648 --> 00:35:51,181
Yeah.
Thanks.
884
00:35:59,491 --> 00:36:00,690
(door opens, closes)
885
00:36:00,692 --> 00:36:03,193
You need to stop
hanging out with her.
886
00:36:03,195 --> 00:36:04,628
Oh, what, we-we can't
share friends?
887
00:36:04,630 --> 00:36:06,796
That girl is crazy.
888
00:36:06,798 --> 00:36:08,331
She's the one
who stole our card.
889
00:36:08,333 --> 00:36:10,233
She's responsible
for all those charges.
890
00:36:10,235 --> 00:36:12,369
Wait, you think Nina
stole our card?
891
00:36:12,371 --> 00:36:13,837
I confronted her about it today.
892
00:36:13,839 --> 00:36:16,573
She denied it, and now, hours
later, she's in our kitchen.
893
00:36:16,575 --> 00:36:18,441
You don't think
that's a little weird?
894
00:36:18,443 --> 00:36:20,577
I think it's a little weird
that you've been sharing
895
00:36:20,579 --> 00:36:23,380
our family's private problems
with a stranger.
896
00:36:23,382 --> 00:36:25,382
(scoffs)
You see what's going on here?
897
00:36:25,384 --> 00:36:27,384
You see what she started?
898
00:36:27,385 --> 00:36:29,385
Elijah, is there something
more you want to tell me?
899
00:36:31,356 --> 00:36:33,356
No, don't go jumping
to conclusions, Devon.
900
00:36:33,358 --> 00:36:34,891
I have not done anything wrong.
901
00:36:36,495 --> 00:36:38,428
Well, for someone who hasn't
done anything wrong,
902
00:36:38,430 --> 00:36:40,597
you're definitely acting
like you have.
903
00:36:43,702 --> 00:36:45,435
(sighs)
904
00:36:49,608 --> 00:36:51,708
You should have told me
you saw Jackson yesterday.
905
00:36:51,710 --> 00:36:54,377
I told you, he showed
up out of nowhere.
906
00:36:54,379 --> 00:36:55,612
I cut the conversation short.
907
00:36:55,614 --> 00:36:58,481
That one mistake...
908
00:36:58,483 --> 00:37:01,685
shouldn't outweigh the last
two years I've worked for you.
909
00:37:01,687 --> 00:37:04,221
A-And if I had told you,
you would have punished me
910
00:37:04,223 --> 00:37:06,623
for breaking
the terms of my deal.
911
00:37:06,625 --> 00:37:09,359
No, I would have rewarded you
for your honesty.
912
00:37:09,361 --> 00:37:12,362
That's what this is
all about, Raven.
913
00:37:12,364 --> 00:37:14,965
We could have prevented a lot of
what happened to the bank today.
914
00:37:14,967 --> 00:37:16,633
We would have
analyzed your phone
915
00:37:16,635 --> 00:37:18,501
to see if Jackson
hacked you.
916
00:37:18,503 --> 00:37:22,272
Keeping this from me
has had serious consequences.
917
00:37:22,274 --> 00:37:23,406
You don't trust me.
918
00:37:23,408 --> 00:37:25,275
I do trust you.
919
00:37:26,245 --> 00:37:29,379
I just don't trust your
judgment.
920
00:37:29,381 --> 00:37:30,747
You're still young.
921
00:37:30,749 --> 00:37:32,015
I'm not Tobin, Avery.
922
00:37:32,017 --> 00:37:35,018
I put Jackson...
923
00:37:35,020 --> 00:37:38,688
Jackson behind bars today.
924
00:37:38,690 --> 00:37:42,892
Doesn't that mean that I've
put my past behind me?
925
00:37:42,894 --> 00:37:45,428
Doesn't that count
for something?
926
00:37:54,740 --> 00:37:57,340
(sighs)
927
00:38:01,713 --> 00:38:04,447
RYAN: You ever feel like a
villain in your own story?
928
00:38:04,449 --> 00:38:06,783
I imagine the Sheriff
of Nottingham
929
00:38:06,785 --> 00:38:08,652
could relate to that sentiment.
930
00:38:10,289 --> 00:38:11,821
What's going on?
931
00:38:13,325 --> 00:38:15,759
Raven's verdict just came in.
932
00:38:17,329 --> 00:38:20,930
She has to serve the rest
of her sentence-- two years.
933
00:38:20,932 --> 00:38:22,499
Here at the FBI?
934
00:38:26,972 --> 00:38:30,573
The judge asked me a question,
935
00:38:30,575 --> 00:38:34,511
and if I had
answered it truthfully,
936
00:38:34,513 --> 00:38:36,046
it would have meant
Raven's release.
937
00:38:38,016 --> 00:38:40,517
So I didn't answer it at all.
Wow.
938
00:38:40,519 --> 00:38:42,619
You have to trust your gut.
939
00:38:42,621 --> 00:38:46,623
I hired Raven... so that
she would feel empowered,
940
00:38:46,625 --> 00:38:48,958
so that she would know
what it feels like
941
00:38:48,960 --> 00:38:51,561
to use her talent for good.
942
00:38:51,563 --> 00:38:54,431
Avery, come on.
943
00:38:54,433 --> 00:38:56,900
Raven could have run off
with that Jackson fellow
944
00:38:56,902 --> 00:38:58,902
and the $5 million,
but she didn't.
945
00:38:58,904 --> 00:39:00,437
She chose to turn him in.
946
00:39:00,439 --> 00:39:02,605
That's your influence on her.
947
00:39:04,443 --> 00:39:06,509
I know she's mad at me.
948
00:39:08,914 --> 00:39:10,447
But in my heart,
949
00:39:10,449 --> 00:39:12,582
I know that Raven is not
ready to leave here.
950
00:39:12,584 --> 00:39:14,617
What you had
to do today,
951
00:39:14,619 --> 00:39:16,353
that was hard.
952
00:39:18,757 --> 00:39:23,626
I know it's not much
consolation, but...
953
00:39:23,628 --> 00:39:25,628
one of these days,
Raven's gonna realize
954
00:39:25,630 --> 00:39:27,630
you were just
looking out for her.
955
00:39:27,632 --> 00:39:29,699
I'm sure of that, Avery.
956
00:39:32,537 --> 00:39:35,004
I know.
957
00:39:35,006 --> 00:39:36,773
But I need a drink.
(laughs)
958
00:39:36,775 --> 00:39:38,074
(chuckles)
959
00:39:38,076 --> 00:39:39,943
Care to join me?
960
00:39:44,916 --> 00:39:47,917
Just, uh...
961
00:39:47,919 --> 00:39:49,586
don't tell my boss.
962
00:39:49,588 --> 00:39:51,621
(laughs)
963
00:39:51,623 --> 00:39:55,592
If you give me a long pour,
your secret's safe with me.
964
00:40:10,008 --> 00:40:13,543
Now I know why I hired you.
965
00:40:13,545 --> 00:40:17,614
My...
immeasurable charm?
966
00:40:17,616 --> 00:40:20,016
No, it's your terrific scotch.
967
00:40:20,018 --> 00:40:22,652
(laughs)
968
00:40:22,654 --> 00:40:24,721
(Italian accent):
That's-a some good coffee.
969
00:40:24,723 --> 00:40:25,789
(both laugh)