1
00:01:13,674 --> 00:01:15,374
MALE OPERATOR:
911. What is your emergency?
2
00:01:15,376 --> 00:01:16,429
MAN:
I just witnessed a hit and run.
3
00:01:16,430 --> 00:01:17,483
FEMALE OPERATOR:
911. What is your emergency?
4
00:01:17,484 --> 00:01:18,537
WOMAN: My apartment
building's on fire.
5
00:01:18,538 --> 00:01:19,591
There are people still inside!
6
00:01:19,592 --> 00:01:20,645
FEMALE OPERATOR:
911. What's your emergency?
7
00:01:20,648 --> 00:01:21,839
CHILD:
How many people...
8
00:01:21,840 --> 00:01:23,031
WOMAN:
I hear screams!
9
00:01:23,032 --> 00:01:24,223
MALE OPERATOR:
911. What is your emergency?
10
00:01:24,224 --> 00:01:25,415
I need to get to a hospital.
11
00:01:25,419 --> 00:01:26,785
I'm five months pregnant.
12
00:01:26,787 --> 00:01:28,487
I'm feeling sharp,
stabbing pains.
13
00:01:28,489 --> 00:01:30,622
(gasping)
14
00:01:30,624 --> 00:01:32,391
It's too soon for contractions.
15
00:01:32,393 --> 00:01:34,860
I'm at 249 West McCoy Street.
16
00:01:36,764 --> 00:01:39,798
Hello? Hello?
17
00:01:39,800 --> 00:01:42,134
MALE OPERATOR:
911. What is your emergency?
18
00:01:42,136 --> 00:01:44,403
I need help.
I need an ambulance.
19
00:01:44,405 --> 00:01:46,805
I think my wife is
having a heart attack.
20
00:01:46,807 --> 00:01:48,640
She's collapsed.
What-what do I do?
21
00:01:48,642 --> 00:01:50,509
Hello?
Are you-- are you there?
22
00:01:50,511 --> 00:01:52,478
Hello! Help!
23
00:01:52,480 --> 00:01:54,246
Honey, sweetheart, stay with me.
24
00:01:54,248 --> 00:01:55,514
Hold on, sweetheart, hold on.
25
00:01:58,452 --> 00:02:00,552
Hello? Hello?
Hello? Hello?
26
00:02:00,554 --> 00:02:02,321
Someone help, please!
27
00:02:02,323 --> 00:02:03,489
I need help!
28
00:02:03,491 --> 00:02:04,823
Help! Help!
29
00:02:04,825 --> 00:02:06,492
MALE OPERATOR:
911. What is your emergency?
30
00:02:06,494 --> 00:02:07,593
We need an ambulance.
31
00:02:07,595 --> 00:02:09,361
A man's fallen
from a scaffolding,
32
00:02:09,363 --> 00:02:10,796
but we can't tell if he's alive.
33
00:02:10,798 --> 00:02:13,265
There's blood everywhere
and he isn't moving.
34
00:02:13,267 --> 00:02:15,200
Hello? Can you hear me?
Are you there?
35
00:02:15,202 --> 00:02:16,602
Are you there?
Hello, hello?
36
00:02:16,604 --> 00:02:17,603
Sweeney,
hold on.
Can you hear me?
37
00:02:17,605 --> 00:02:18,837
Hello?
38
00:02:18,839 --> 00:02:19,905
It's coming down!
39
00:02:19,907 --> 00:02:22,274
Watch out! Look out!
40
00:02:22,276 --> 00:02:23,809
(shouting)
41
00:02:23,811 --> 00:02:25,644
Go, go!
42
00:02:25,646 --> 00:02:27,212
Something's wrong with my phone!
43
00:02:27,214 --> 00:02:28,881
Someone call 911!
44
00:02:30,918 --> 00:02:32,384
MALE OPERATOR 2:
This is 911.
45
00:02:32,386 --> 00:02:33,585
What is your emergency?
46
00:02:33,587 --> 00:02:34,753
FEMALE OPERATOR:
911. What's your emergency?
47
00:02:34,755 --> 00:02:36,355
What is your emergency?
48
00:02:36,357 --> 00:02:37,890
We've been flooded with reports
49
00:02:37,892 --> 00:02:39,892
of people having issues
calling 911 from cell phones.
50
00:02:39,894 --> 00:02:41,594
They say they connect
51
00:02:41,595 --> 00:02:43,295
to an operator, but then
the call drops off
52
00:02:43,297 --> 00:02:44,830
and their phone
freezes in call mode.
53
00:02:44,832 --> 00:02:45,831
What makes you think
54
00:02:45,833 --> 00:02:48,233
that this is a cyber intrusion
55
00:02:48,235 --> 00:02:50,869
and not a malfunction
of the New York City 911 system?
56
00:02:50,871 --> 00:02:52,571
Well, we've checked
and double-checked.
57
00:02:52,573 --> 00:02:54,907
There's no evidence
of a mechanical malfunction.
58
00:02:54,909 --> 00:02:56,909
Our IT guys believe
it's a hack within our system
59
00:02:56,911 --> 00:02:58,911
that affects
incoming cell phone calls.
60
00:02:58,913 --> 00:03:00,245
Anyone who places a call
from a land line
61
00:03:00,247 --> 00:03:01,880
doesn't experience the problem.
62
00:03:01,882 --> 00:03:05,617
Have you ruled out issues
with cell service providers?
63
00:03:05,619 --> 00:03:06,919
They've all confirmed
that cell towers in the city
64
00:03:06,921 --> 00:03:08,854
are properly functioning
65
00:03:08,855 --> 00:03:10,788
and all other wireless
phone traffic is normal.
66
00:03:10,791 --> 00:03:12,958
So it only happens
when someone calls 911?
67
00:03:12,960 --> 00:03:15,794
When someone calls 911
from a cell phone.
68
00:03:15,796 --> 00:03:17,396
Not getting help
when you want it?
69
00:03:17,398 --> 00:03:18,864
That's terrifying.
70
00:03:18,866 --> 00:03:21,934
RYAN: The mayor and
Homeland Security are concerned
71
00:03:21,936 --> 00:03:23,802
that this could be
a well-crafted precursor
72
00:03:23,804 --> 00:03:25,971
to a terrorist attack.
73
00:03:25,973 --> 00:03:27,940
Raven says the first reports
of dropped 911 calls
74
00:03:27,942 --> 00:03:29,608
came in around
7:00 a.m. this morning.
75
00:03:29,610 --> 00:03:30,976
Complaints were made
to local precincts
76
00:03:30,978 --> 00:03:32,511
and cell service providers.
77
00:03:32,513 --> 00:03:34,513
My operators noticed
a decrease in call volume
78
00:03:34,515 --> 00:03:35,514
about the same time.
79
00:03:35,516 --> 00:03:36,648
But none have reported
80
00:03:36,650 --> 00:03:37,916
being abruptly disconnected
81
00:03:37,918 --> 00:03:38,951
or dropped from a call.
82
00:03:38,953 --> 00:03:40,252
OPERATOR:
Excuse me, Clayton?
83
00:03:40,253 --> 00:03:41,552
Sorry. Will you
excuse me a moment?
84
00:03:43,557 --> 00:03:45,857
RAVEN:
According to my stats, there's
definitely something going on.
85
00:03:45,859 --> 00:03:47,826
Well, I've compared
the number of 911 calls
86
00:03:47,828 --> 00:03:49,561
from yesterday at this hour
87
00:03:49,563 --> 00:03:50,829
to those received this morning.
88
00:03:50,831 --> 00:03:52,898
Huge decrease
in cell phone calls.
89
00:03:52,900 --> 00:03:54,666
On a typical day,
the call center
90
00:03:54,668 --> 00:03:55,934
would get 24,000 calls,
91
00:03:55,936 --> 00:03:57,603
70% from cell phones.
92
00:03:57,605 --> 00:04:00,572
And this morning,
cellular calls went down to 30%.
93
00:04:00,574 --> 00:04:02,874
RUSSELL: So there are
some cell phones out there
94
00:04:02,876 --> 00:04:05,811
that are connecting to 911
and completing the call.
95
00:04:05,813 --> 00:04:07,980
Right?
Yeah, but the strange thing is,
96
00:04:07,982 --> 00:04:09,982
is that most
of the calls are made
97
00:04:09,984 --> 00:04:12,584
from devices outside
of Manhattan, in the Boroughs.
98
00:04:12,586 --> 00:04:14,019
KRUMITZ: We plugged
into the 911 system.
99
00:04:14,021 --> 00:04:16,021
No evidence of malfunctions
100
00:04:16,023 --> 00:04:17,489
or indicators of compromise.
101
00:04:17,491 --> 00:04:19,024
Yeah, no known vulnerability,
no malware,
102
00:04:19,026 --> 00:04:20,859
not a trace of digital dust
that indicates a hack.
103
00:04:20,861 --> 00:04:22,928
I mean, these boxes
are squeaky clean.
104
00:04:22,930 --> 00:04:25,297
So there's nothing here that
can tell us what's going on.
105
00:04:25,299 --> 00:04:26,665
Okay, so that means
106
00:04:26,667 --> 00:04:29,635
the problem has to be
internal to the cell phones.
107
00:04:29,637 --> 00:04:30,936
They're all different
models and brands,
108
00:04:30,938 --> 00:04:32,571
in different locations
all over the city.
109
00:04:32,573 --> 00:04:34,339
Not to mention
that they all have
110
00:04:34,341 --> 00:04:35,707
different service providers.
111
00:04:35,709 --> 00:04:36,975
Other than them being
cell phones, I mean,
112
00:04:36,977 --> 00:04:38,343
they have no connection
to each other.
113
00:04:38,345 --> 00:04:40,312
RUSSELL:
Yeah, except they all
114
00:04:40,314 --> 00:04:42,014
dropped 911 calls, right?
115
00:04:42,016 --> 00:04:44,816
We need to get ahold
of one of those phones.
116
00:04:44,818 --> 00:04:46,318
I might be able
to help with you that.
117
00:04:46,320 --> 00:04:48,020
I have the latest
incident reports.
118
00:04:48,022 --> 00:04:49,688
There was an accident
at a construction site
119
00:04:49,690 --> 00:04:51,323
not far from here.
120
00:04:51,325 --> 00:04:52,791
The foreman called
for paramedics.
121
00:04:52,793 --> 00:04:54,393
Same thing happened.
Dropped call.
122
00:04:54,395 --> 00:04:56,395
There's a possibility
we can get that phone.
123
00:04:58,299 --> 00:05:00,365
¶ ¶
124
00:05:01,902 --> 00:05:04,036
FOREMAN:
Yeah, that's my cell number
125
00:05:04,038 --> 00:05:05,604
and I'm the site foreman.
126
00:05:08,042 --> 00:05:10,475
I called 911 when
the scaffolding collapsed.
127
00:05:10,477 --> 00:05:13,912
Sweeney dropped
from the third floor.
128
00:05:13,914 --> 00:05:15,881
And there were two others
who also dialed 911?
129
00:05:15,883 --> 00:05:17,916
Yeah, Henderson and Joe Lavelle.
130
00:05:17,918 --> 00:05:19,751
Just like me,
they reached the operator,
131
00:05:19,753 --> 00:05:22,321
and then the phones froze
and nobody was on the other end.
132
00:05:22,323 --> 00:05:23,889
Is there a way
to get in touch with them?
133
00:05:23,891 --> 00:05:25,023
I'd like to take a look
at their devices.
134
00:05:25,025 --> 00:05:26,925
Yeah, I can, uh,
135
00:05:26,927 --> 00:05:29,428
I can get you
their home number.
136
00:05:29,430 --> 00:05:30,629
This is crazy.
137
00:05:30,631 --> 00:05:31,963
That kid was only
20 years old.
138
00:05:31,965 --> 00:05:33,365
Bled to death because I couldn't
139
00:05:33,367 --> 00:05:34,933
get the paramedics here in time.
140
00:05:34,935 --> 00:05:36,535
And now, two more of my guys
141
00:05:36,537 --> 00:05:37,936
are in the hospital
in critical condition.
142
00:05:39,073 --> 00:05:40,772
I hope you can figure this out.
143
00:05:40,774 --> 00:05:42,808
You know,
on jobs like this,
144
00:05:42,810 --> 00:05:45,544
something happens every day
on these sites.
145
00:05:45,546 --> 00:05:49,047
I need to know that my guys
can get help when they need it.
146
00:05:49,049 --> 00:05:50,048
Excuse me.
147
00:05:50,050 --> 00:05:52,117
(indistinct chatter)
148
00:05:58,926 --> 00:06:00,926
NELSON: Eric O'Brian's phone
is infected with malware.
149
00:06:00,928 --> 00:06:03,462
I mean, it's gonna take time
to reverse-engineer the code
150
00:06:03,464 --> 00:06:05,564
and figure out exactly
what it does to a cell.
151
00:06:05,566 --> 00:06:07,249
Nah, forget the code.
152
00:06:07,250 --> 00:06:08,933
I cloned his device
to a known-good test phone.
153
00:06:08,936 --> 00:06:11,036
Let's just call 911
and see what happens.
154
00:06:11,038 --> 00:06:13,138
All right.
155
00:06:13,140 --> 00:06:15,040
MALE OPERATOR:
911. What is your emergency?
156
00:06:15,042 --> 00:06:16,375
My name is
Daniel Krumitz.
157
00:06:16,377 --> 00:06:17,809
I'm an agent
with the FBI.
158
00:06:17,811 --> 00:06:19,578
Operator, if you
wouldn't mind
159
00:06:19,580 --> 00:06:21,713
standing up and
waving for me?
160
00:06:21,715 --> 00:06:23,582
911. What is
your emergency?
161
00:06:23,584 --> 00:06:25,083
How 'bout counting to ten?
162
00:06:25,085 --> 00:06:26,952
Hello? You there?
163
00:06:26,954 --> 00:06:28,153
Nope. Okay.
Already gone.
164
00:06:28,155 --> 00:06:29,888
That lasted about
three seconds.
165
00:06:29,890 --> 00:06:32,557
Hey, look, maybe he thought you
were a prank caller and hung up.
166
00:06:32,559 --> 00:06:34,459
You know, you don't exactly
sound like an FBI agent.
167
00:06:34,461 --> 00:06:37,028
An operator isn't gonna
hang up that quickly.
168
00:06:37,030 --> 00:06:39,164
They're required to make sure
there's no real emergency,
169
00:06:39,166 --> 00:06:40,699
regardless of what
the caller says.
170
00:06:40,701 --> 00:06:42,701
So maybe you didn't reach
an operator at all.
171
00:06:42,703 --> 00:06:45,036
Remember, operators haven't been
reporting dropped calls,
172
00:06:45,038 --> 00:06:46,938
only people dialing
in on cell phones have.
173
00:06:46,940 --> 00:06:48,006
Hmm.
174
00:06:49,843 --> 00:06:50,909
This test phone's
still active.
175
00:06:53,147 --> 00:06:54,446
It's frozen;
I'm locked out.
176
00:06:54,448 --> 00:06:55,881
That's the hacker's plan.
177
00:06:55,883 --> 00:06:57,082
When you attempt
to dial 911,
178
00:06:57,084 --> 00:06:58,417
you won't get a chance
to do it again.
179
00:06:58,419 --> 00:06:59,751
Or use a cell at all.
180
00:06:59,753 --> 00:07:01,653
It'll force you to find
a land line or a pay phone.
181
00:07:01,655 --> 00:07:02,738
A pay phone?
182
00:07:02,739 --> 00:07:03,822
And who uses
a land line anymore?
183
00:07:03,824 --> 00:07:05,023
Yeah.
I don't even have one
in my apartment.
184
00:07:05,025 --> 00:07:06,858
I don't have one, either.
185
00:07:06,860 --> 00:07:08,126
Oh, look.
Krummy, check this, right?
186
00:07:08,128 --> 00:07:10,162
I got a timestamp
indicating the moment
187
00:07:10,164 --> 00:07:12,597
the malware infected
Eric O'Brian's phone, right?
188
00:07:12,599 --> 00:07:14,866
And just seconds
before that,
189
00:07:14,868 --> 00:07:17,469
his cell phone connected
to a Wi-Fi network.
190
00:07:17,471 --> 00:07:18,637
So that router
could be
191
00:07:18,639 --> 00:07:20,071
the source of the infection.
Mm-hmm.
192
00:07:20,073 --> 00:07:21,173
You got a location?
193
00:07:21,175 --> 00:07:22,107
Yeah.
194
00:07:22,109 --> 00:07:24,209
Two seconds.
195
00:07:24,211 --> 00:07:25,844
And... tah-dah.
196
00:07:25,846 --> 00:07:26,878
All right, I got it.
197
00:07:26,880 --> 00:07:28,530
I'm driving.
Let's go.
198
00:07:28,531 --> 00:07:30,181
What exactly does
an FBI agent sound like?
199
00:07:30,184 --> 00:07:32,717
Smooth, Krummy. Sturdy.
200
00:07:32,719 --> 00:07:34,052
Gotta sound like you just
finished the Ironman.
201
00:07:34,054 --> 00:07:36,121
I'm out of breath?
No, man.
202
00:07:36,123 --> 00:07:37,856
You gotta be tough.
You know, like a...
203
00:07:37,858 --> 00:07:39,124
like a bad-ass.
204
00:07:39,126 --> 00:07:41,026
(tough voice):
Daniel Krumitz, FBI.
205
00:07:41,028 --> 00:07:43,662
(deeper voice):
Dan... Daniel Krumitz, FBI.
206
00:07:43,664 --> 00:07:46,198
(indistinct chatter)
207
00:07:49,670 --> 00:07:52,103
The router that Eric's phone
connected to isn't here.
208
00:07:53,941 --> 00:07:55,841
MUNDO: You're sure you got
the right location?
NELSON: I'm positive.
209
00:07:55,843 --> 00:07:57,976
Well, maybe our hacker
removed the device.
210
00:07:57,978 --> 00:07:59,911
Wanted it to remain undetected.
211
00:07:59,913 --> 00:08:01,847
Wait, wait, guys,
it just showed up.
212
00:08:01,849 --> 00:08:03,849
And... now it's gone.
213
00:08:03,851 --> 00:08:05,817
That means it's moving.
214
00:08:05,819 --> 00:08:07,152
Wait, guys,
it's back up again.
215
00:08:07,154 --> 00:08:08,854
Signal's getting stronger.
216
00:08:08,856 --> 00:08:10,755
Real strong.
WOMAN: Is it coming?
217
00:08:10,757 --> 00:08:11,857
WOMAN 2:
Oh, thank you.
218
00:08:14,862 --> 00:08:16,928
That's it, right there.
That's why the signal's moving.
219
00:08:16,930 --> 00:08:19,698
Free Wi-Fi. Stop that bus!
I'll call Avery and D.B.!
220
00:08:25,973 --> 00:08:28,039
Let's see what's
on the bus's router.
221
00:08:32,212 --> 00:08:34,279
Okay, same malware on
Eric O'Brian's phone.
222
00:08:34,281 --> 00:08:37,282
But... that's not
the interesting part.
223
00:08:37,284 --> 00:08:38,149
Nelson.
224
00:08:38,151 --> 00:08:40,185
No. Uh-uh.
225
00:08:40,187 --> 00:08:41,853
It... it can't be.
226
00:08:41,855 --> 00:08:42,871
I know, right?
227
00:08:42,872 --> 00:08:43,888
But it is, though, look.
Guys, guys.
228
00:08:43,891 --> 00:08:45,123
Hey, hey. Can we use words
229
00:08:45,125 --> 00:08:46,291
that actually mean something?
230
00:08:46,293 --> 00:08:47,559
(laughs)
231
00:08:47,561 --> 00:08:48,693
KRUMITZ:
It's like this, okay?
232
00:08:48,695 --> 00:08:50,795
I have the flu. I sneeze.
233
00:08:50,797 --> 00:08:52,130
If you're close enough to me,
234
00:08:52,132 --> 00:08:53,198
you get the flu.
235
00:08:53,200 --> 00:08:54,299
That's what this is.
236
00:08:54,301 --> 00:08:56,201
It's an airborne computer virus.
237
00:08:56,203 --> 00:08:58,837
It... it lives.
238
00:08:58,839 --> 00:09:00,138
What do you mean,
"it lives," Krumitz?
239
00:09:00,140 --> 00:09:01,656
NELSON:
It was programmed to spread
240
00:09:01,657 --> 00:09:03,173
like a real virus.
It jumps from unsecured router
241
00:09:03,176 --> 00:09:04,543
to unsecured router
within 150 feet.
242
00:09:04,545 --> 00:09:07,245
So it infects
any wireless access point
243
00:09:07,247 --> 00:09:08,713
that's not password protected?
244
00:09:08,715 --> 00:09:09,915
And even the ones that use
245
00:09:09,916 --> 00:09:11,116
a default password
from the manufacturer.
246
00:09:11,118 --> 00:09:12,717
So this bus has been, like,
247
00:09:12,719 --> 00:09:14,319
"sneezing" all over town.
248
00:09:14,321 --> 00:09:18,657
Every unsecured router
in its path has been infected?
249
00:09:18,659 --> 00:09:22,260
KRUMITZ: And whenever
a Wi-Fi enabled phone connects
250
00:09:22,262 --> 00:09:24,663
to one of these infected
routers, it gets the virus.
251
00:09:24,665 --> 00:09:27,299
Malware automatically
jumps onto it.
252
00:09:27,301 --> 00:09:28,900
RYAN:
It's contagious.
253
00:09:28,902 --> 00:09:30,068
I've never seen anything
254
00:09:30,070 --> 00:09:31,620
in the wild
like this before.
255
00:09:31,621 --> 00:09:33,171
Can the virus jump
from phone to phone?
No.
256
00:09:33,173 --> 00:09:34,906
Phones can only
get the virus
257
00:09:34,908 --> 00:09:36,608
if they're connected to
one of the infected routers.
258
00:09:38,245 --> 00:09:40,245
Well, at least these buses
stay on the same route, right?
259
00:09:40,247 --> 00:09:42,213
It'll help us
contain the infection.
260
00:09:42,215 --> 00:09:43,615
RYAN: But ultimately,
all the buses
261
00:09:43,617 --> 00:09:45,684
go back to home base.
262
00:09:45,685 --> 00:09:47,752
And then this infection jumps
from bus router to bus router.
263
00:09:47,754 --> 00:09:49,321
And then bright
and early this morning,
264
00:09:49,323 --> 00:09:52,190
all those buses went right back
into the streets of Manhattan.
265
00:09:52,192 --> 00:09:53,825
Increasing the number of people
266
00:09:53,827 --> 00:09:55,994
who won't get any help
when they call 911.
267
00:09:55,996 --> 00:09:57,262
This is an outbreak.
268
00:09:57,264 --> 00:09:59,030
We're looking
at an epidemic.
269
00:09:59,032 --> 00:10:01,633
We need to find patient zero.
270
00:10:11,244 --> 00:10:17,649
¶ I know you've deceived me,
now here's a surprise ¶
271
00:10:19,286 --> 00:10:25,890
¶ I know that you have, 'cause
there's magic in my eyes ¶
272
00:10:25,892 --> 00:10:29,227
¶ I can see
for miles and miles ¶
273
00:10:29,229 --> 00:10:33,264
¶ I can see for miles
and miles ¶
274
00:10:33,266 --> 00:10:37,335
¶ I can see
for miles and miles ¶
275
00:10:37,337 --> 00:10:41,106
¶ And miles... ¶
276
00:10:41,108 --> 00:10:43,808
¶ Oh, yeah. ¶
277
00:11:01,328 --> 00:11:05,296
The infected area has grown
by 25% in the past two hours.
278
00:11:05,298 --> 00:11:08,166
I've notified Port Authority
and service providers.
279
00:11:08,168 --> 00:11:10,168
All public routers
are being disconnected
280
00:11:10,170 --> 00:11:11,836
from buses and ferries.
281
00:11:11,838 --> 00:11:14,706
Have FBI communications
get in touch
282
00:11:14,708 --> 00:11:17,042
with all of the New Jersey,
Connecticut,
283
00:11:17,044 --> 00:11:19,077
Philadelphia news media outlets.
284
00:11:19,079 --> 00:11:20,662
Make sure they're
getting the word out
285
00:11:20,663 --> 00:11:22,246
that commuters should
turn off their Wi-Fi
286
00:11:22,249 --> 00:11:23,915
and not try to connect
287
00:11:23,917 --> 00:11:25,917
to any free or open
Wi-Fi sources.
288
00:11:25,919 --> 00:11:30,088
And remind them: use their
landlines when calling 911.
289
00:11:30,090 --> 00:11:32,424
This virus will definitely
cross state lines
290
00:11:32,426 --> 00:11:34,292
unless we're overly cautious.
291
00:11:34,294 --> 00:11:37,262
Yep, a virus warning is already
spreading through social media,
292
00:11:37,264 --> 00:11:39,130
and there's been a big surge
293
00:11:39,132 --> 00:11:41,166
in purchases
of old-school telephones.
294
00:11:41,168 --> 00:11:42,367
You're finally in style, D.B.
295
00:11:42,369 --> 00:11:44,436
(chuckles)
296
00:11:44,438 --> 00:11:46,905
Thanks very much.
Oh, hey, hold on a second.
297
00:11:46,907 --> 00:11:49,474
Little, uh, social protocol.
298
00:11:49,476 --> 00:11:52,077
Let's say you get a text
299
00:11:52,079 --> 00:11:54,412
clearly meant for somebody else,
sent by someone you don't know.
300
00:11:54,414 --> 00:11:56,748
Now, are you supposed
to, uh, text 'em right back
301
00:11:56,750 --> 00:11:58,316
and say they got
the wrong person?
302
00:11:58,318 --> 00:12:01,252
Kind of sounds like
a personal text then.
303
00:12:01,254 --> 00:12:03,321
Well, yeah, kind of.
304
00:12:03,323 --> 00:12:06,291
Wh-Why would you
just assume that?
305
00:12:06,293 --> 00:12:08,159
'Cause if it was something like
"I'm gonna be late"
306
00:12:08,161 --> 00:12:10,829
or "Call me,"
then it's easy to text back.
307
00:12:10,831 --> 00:12:12,230
You wouldn't give it
a second thought.
308
00:12:12,232 --> 00:12:14,199
But if suddenly
you get dropped
309
00:12:14,201 --> 00:12:16,367
into the middle
of someone else's drama...
310
00:12:16,369 --> 00:12:18,203
What did the text say?
311
00:12:18,205 --> 00:12:19,504
Well, uh, none of your business.
312
00:12:19,506 --> 00:12:21,439
(gasps)
You answered my question.
313
00:12:21,441 --> 00:12:22,340
I'll see you later.
314
00:12:22,342 --> 00:12:24,042
Come on, D.B.
315
00:12:24,044 --> 00:12:25,376
It's got to be
pretty juicy, huh?
316
00:12:25,378 --> 00:12:27,378
We'll talk about it
when I get back to DC.
317
00:12:27,380 --> 00:12:28,780
D.B., you can't just...
318
00:12:28,782 --> 00:12:30,381
(scoffs)
319
00:12:30,383 --> 00:12:32,400
Mayor Cavanaugh,
there's no evidence
320
00:12:32,401 --> 00:12:34,418
to suggest that the 911 hack
is a terrorist threat.
321
00:12:34,421 --> 00:12:36,221
Well, that's a relief.
322
00:12:36,223 --> 00:12:38,123
Do you know who's behind it?
323
00:12:38,125 --> 00:12:40,191
We have a profile of
who we're looking for.
324
00:12:40,193 --> 00:12:42,193
They're not part of a
politically motivated
325
00:12:42,195 --> 00:12:44,095
group or collective.
326
00:12:44,097 --> 00:12:45,764
They would have already
claimed responsibility by now.
327
00:12:45,766 --> 00:12:47,766
Our target is an individual
328
00:12:47,768 --> 00:12:50,769
who's celebrating his
power to cripple the city.
329
00:12:50,771 --> 00:12:54,773
He enjoys making people
feel desperate, helpless.
330
00:12:54,775 --> 00:12:57,442
There's a chance that he's tried
something like this in the past
331
00:12:57,444 --> 00:12:59,444
on a smaller scale.
332
00:12:59,446 --> 00:13:01,279
But this virus is an escalation.
333
00:13:01,281 --> 00:13:03,448
He?
It's most likely a man.
334
00:13:03,450 --> 00:13:06,451
Women go about things like this
in a less conspicuous way.
335
00:13:06,453 --> 00:13:08,286
I was told you have a plan.
336
00:13:08,288 --> 00:13:10,955
The malware is mimicking
a biological virus,
337
00:13:10,957 --> 00:13:12,457
so we're using CDC protocol.
338
00:13:12,459 --> 00:13:14,025
We've identified how
it's transmitted,
339
00:13:14,027 --> 00:13:16,027
we've begun the containment,
340
00:13:16,029 --> 00:13:17,495
we're informing the public.
341
00:13:17,497 --> 00:13:20,365
My team is writing code,
an antidote,
342
00:13:20,367 --> 00:13:22,267
that will cure all
the infected phones
343
00:13:22,269 --> 00:13:25,170
and stop any new phones
from acquiring it.
344
00:13:25,172 --> 00:13:29,474
You are, Deputy Director Ryan,
as impressive as I was told.
345
00:13:29,476 --> 00:13:32,443
Which makes my next request
a little uncomfortable.
346
00:13:33,413 --> 00:13:36,214
(sighs)
347
00:13:37,450 --> 00:13:39,417
Brody Nelson.
348
00:13:39,419 --> 00:13:41,419
He's one of my
cyber investigators.
349
00:13:41,421 --> 00:13:42,887
He's also the young man
350
00:13:42,888 --> 00:13:44,354
that hacked into
the New York Stock Exchange,
351
00:13:44,357 --> 00:13:46,224
created havoc
in the financial district.
352
00:13:46,226 --> 00:13:47,892
And I understand
that that tarnished
353
00:13:47,894 --> 00:13:50,094
your first term
in the mayor's office.
354
00:13:50,096 --> 00:13:51,362
This is not about me.
355
00:13:51,364 --> 00:13:53,198
I am well aware
of Brody Nelson's crimes.
356
00:13:53,200 --> 00:13:54,883
He is serving his time.
357
00:13:54,884 --> 00:13:56,567
I would prefer he were in prison
and not writing code
358
00:13:56,570 --> 00:13:58,303
for anything having
to do with my city.
359
00:13:58,305 --> 00:14:00,839
Well, that is not
your call, sir.
360
00:14:03,310 --> 00:14:05,543
Did you know that
eight-million-dollar transfer
361
00:14:05,545 --> 00:14:09,013
as a result of his financial
hack was never accounted for?
362
00:14:09,015 --> 00:14:11,149
That young man knows
where it is.
363
00:14:19,292 --> 00:14:21,960
The mayor's just bent out of
shape because their election's
364
00:14:21,962 --> 00:14:23,127
coming up.
365
00:14:23,129 --> 00:14:25,430
(sighs)
I did a terrible thing, D.B.
366
00:14:25,432 --> 00:14:27,165
Can't expect people to forget.
367
00:14:30,570 --> 00:14:32,237
You know what?
368
00:14:32,239 --> 00:14:33,571
I'm just gonna
image these devices
369
00:14:33,573 --> 00:14:34,639
and go back to DC with you.
370
00:14:34,641 --> 00:14:36,608
It'll be easier
for me to analyze
371
00:14:36,610 --> 00:14:40,245
the malware from Tear Down
and work on the antidote.
372
00:14:42,282 --> 00:14:44,015
Okay.
All right?
373
00:14:52,559 --> 00:14:54,559
Let me make this clear.
374
00:14:54,561 --> 00:14:57,528
I don't want Brody Nelson
working this case.
375
00:14:57,530 --> 00:15:00,198
If Brody Nelson doesn't work on
this case, then neither do I.
376
00:15:00,200 --> 00:15:01,366
So you let me know.
377
00:15:05,472 --> 00:15:08,072
REPORTER: The FBI has informed
us of a malware virus
378
00:15:08,074 --> 00:15:10,008
affecting the 911
emergency system.
...Wi-Fi has been discontinued.
379
00:15:10,010 --> 00:15:11,576
We ask that you use
a landline for all...
380
00:15:11,578 --> 00:15:13,061
OPERATOR:
911, what's your emergency?
381
00:15:13,062 --> 00:15:14,545
This is an emergency.
Excuse me, I
need to make...
382
00:15:25,592 --> 00:15:27,592
What you got?
383
00:15:27,594 --> 00:15:29,627
I've infected these test phones
with the virus.
384
00:15:29,629 --> 00:15:31,462
It lies dormant
until you dial 911,
385
00:15:31,464 --> 00:15:32,630
and this is what you hear.
386
00:15:32,632 --> 00:15:34,666
MALE VOICE: 911.
What is your emergency?
387
00:15:34,668 --> 00:15:37,936
Hello. Hello.
388
00:15:37,938 --> 00:15:39,270
No one there.
389
00:15:39,272 --> 00:15:41,272
That's because there was
never anyone there.
390
00:15:41,274 --> 00:15:42,674
It's a recorded voice.
391
00:15:42,676 --> 00:15:45,476
There's an audio file
hard-coded into the virus.
392
00:15:45,478 --> 00:15:46,511
Now, these phone calls
never make it
393
00:15:46,513 --> 00:15:47,679
to an actual 911 operator.
394
00:15:47,681 --> 00:15:49,213
Just a recorded voice.
395
00:15:49,215 --> 00:15:51,950
The hacker hijacked 911
396
00:15:51,952 --> 00:15:54,519
and made the caller believe
they were getting through.
397
00:15:54,521 --> 00:15:56,287
Mm-hmm, and not only that.
398
00:15:56,289 --> 00:15:57,956
Check this out.
(hums)
399
00:15:57,958 --> 00:16:00,024
MALE VOICE: 911.
What is your emergency?
400
00:16:00,026 --> 00:16:02,360
Say something.
Keep talking.
401
00:16:02,362 --> 00:16:05,029
Hello, this is D.B. Russell.
402
00:16:05,031 --> 00:16:07,465
Testing, one, two, three.
403
00:16:07,467 --> 00:16:10,368
The phone is not frozen, it's
recording everything I'm saying.
404
00:16:10,370 --> 00:16:11,469
Right.
405
00:16:11,471 --> 00:16:13,604
All right, so our
target is a man
406
00:16:13,606 --> 00:16:15,540
who... who gets
off on hearing
407
00:16:15,542 --> 00:16:17,542
the fear and the panic
of helpless people.
408
00:16:17,544 --> 00:16:21,546
He's recording the callers and
sending the audio... somewhere.
409
00:16:21,548 --> 00:16:23,648
And we don't know where?
410
00:16:23,650 --> 00:16:25,116
Nope.
411
00:16:25,118 --> 00:16:27,452
The files are bouncing
through proxy IPs.
412
00:16:27,454 --> 00:16:28,619
It's a dead end.
413
00:16:28,621 --> 00:16:31,356
(classical music plays)
414
00:16:42,302 --> 00:16:43,768
MALE VOICE: 911.
What is your emergency?
415
00:16:43,770 --> 00:16:46,170
WOMAN: Please help, someone
just broke into my house.
416
00:16:46,172 --> 00:16:47,505
He's strangling my husband.
417
00:16:47,507 --> 00:16:48,639
I'm hiding in the closet.
418
00:16:48,641 --> 00:16:50,174
Oh... oh, God. He's...
419
00:16:50,176 --> 00:16:51,509
MALE VOICE:
Try to stay calm, ma'am.
420
00:16:51,511 --> 00:16:53,611
I'm showing your address
is 754 Plymouth Way.
421
00:16:53,613 --> 00:16:55,146
Is that correct?
422
00:16:55,148 --> 00:16:56,481
WOMAN:
Yes, please hurry.
423
00:16:56,483 --> 00:16:58,149
I-I can hear him in the kitchen.
424
00:16:58,151 --> 00:17:00,151
(crying):
I think my husband's dead.
425
00:17:00,153 --> 00:17:01,486
MALE VOICE:
Help is on the way.
426
00:17:01,488 --> 00:17:03,554
WOMAN: Please hurry.
Where are you?
427
00:17:03,556 --> 00:17:05,640
Am I right or am I right?
428
00:17:05,641 --> 00:17:07,725
The voice of the 911 operator
embedded in the malware
429
00:17:07,727 --> 00:17:09,794
sounds like a long-lost
relative of T-Pain.
430
00:17:09,796 --> 00:17:11,729
Who Pain?
RAMIREZ: T-Pain.
431
00:17:11,731 --> 00:17:13,698
He's the king
of auto-tune.
Yeah.
432
00:17:13,700 --> 00:17:15,033
And that is again?
433
00:17:15,035 --> 00:17:16,701
It's, like,
when a recording artist
434
00:17:16,703 --> 00:17:19,037
alters the pitch of their voice
when they sing off-key.
435
00:17:19,039 --> 00:17:21,105
Or when they suck.
436
00:17:21,107 --> 00:17:22,774
Well, if that's true and
the voice was distorted,
437
00:17:22,776 --> 00:17:24,526
then we should be able
to un-distort it.
438
00:17:24,527 --> 00:17:26,277
I just made that word up. All
right, let's get to work here.
439
00:17:26,279 --> 00:17:27,345
Play it again, Nelson.
440
00:17:27,347 --> 00:17:29,614
All right.
441
00:17:29,616 --> 00:17:31,282
MALE VOICE (slowly): 911.
What is your emer...
442
00:17:31,284 --> 00:17:33,117
Okay, Raven, isolate
443
00:17:33,119 --> 00:17:34,752
one of the ringing phones
in the background there.
444
00:17:34,754 --> 00:17:38,056
And pull up the ringtone used
by the 911 call center.
445
00:17:38,058 --> 00:17:39,390
That'll be our baseline.
446
00:17:39,392 --> 00:17:41,659
Right, once we match
the ringtones,
447
00:17:41,661 --> 00:17:43,828
we'll have the real voice
of our 911 operator.
448
00:17:43,830 --> 00:17:46,264
Exactly.
Okay, I am adjusting
449
00:17:46,266 --> 00:17:48,266
the pitch and speed
of the recording
450
00:17:48,268 --> 00:17:49,767
until the waveforms line up.
451
00:17:49,769 --> 00:17:52,570
MALE VOICE: 911.
What is your emergency?
452
00:17:52,572 --> 00:17:55,807
Okay, here we have our real
911 operator's voice.
453
00:17:55,809 --> 00:17:58,142
MALE VOICE: 911.
What is your emergency?
454
00:17:58,144 --> 00:18:00,578
Why would our target want
to distort this voice?
455
00:18:00,580 --> 00:18:03,648
To disguise it.
456
00:18:03,650 --> 00:18:05,149
This could be him.
457
00:18:05,151 --> 00:18:06,384
Right? Our target.
458
00:18:06,386 --> 00:18:07,685
I mean, why else would he do it?
459
00:18:07,687 --> 00:18:08,853
You think he works
at a call center.
460
00:18:08,855 --> 00:18:10,221
I don't know,
it's just a theory.
461
00:18:10,223 --> 00:18:11,789
Let's run this voice
462
00:18:11,791 --> 00:18:13,274
against all
of the male dispatchers
463
00:18:13,275 --> 00:18:14,758
in the New York City
call center database.
464
00:18:14,761 --> 00:18:16,294
All right?
465
00:18:16,296 --> 00:18:17,829
Maybe we'll get lucky here,
get an I.D.
466
00:18:20,700 --> 00:18:22,233
NELSON:
Got him.
467
00:18:22,235 --> 00:18:24,735
RYAN:
Leo Finch.
468
00:18:24,737 --> 00:18:26,404
Look at his profile.
469
00:18:26,406 --> 00:18:29,307
He was fired from the call
center exactly a year ago today.
470
00:18:29,309 --> 00:18:31,342
Well, that's motive for revenge.
471
00:18:31,344 --> 00:18:33,377
Let's see, he was fired for...
472
00:18:33,379 --> 00:18:35,847
"failure to properly
dispatch emergency units,"
473
00:18:35,849 --> 00:18:38,850
"poor decision making,"
"refusal to follow protocol."
474
00:18:38,852 --> 00:18:40,585
Also looks like there
were several instances
475
00:18:40,587 --> 00:18:42,370
of slow dispatch times
476
00:18:42,371 --> 00:18:44,154
and sending paramedics
to the wrong address.
477
00:18:44,157 --> 00:18:46,157
Delayed dispatch times suggests
478
00:18:46,159 --> 00:18:47,825
he wanted to keep
the panicked callers on the line
479
00:18:47,827 --> 00:18:49,494
as long as possible.
480
00:18:49,495 --> 00:18:51,162
He enjoyed hearing
their desperation.
481
00:18:51,164 --> 00:18:54,866
Their pleading made him feel
powerful and in control.
482
00:18:54,868 --> 00:18:56,734
Leo is an auditory voyeur.
483
00:18:56,736 --> 00:18:58,503
Well, that's twisted.
Call Elijah.
484
00:18:58,505 --> 00:19:00,438
Tell him there's a door
he has to kick down.
485
00:19:08,815 --> 00:19:10,148
Clear!
486
00:19:10,150 --> 00:19:11,649
Clear!
487
00:19:16,890 --> 00:19:18,489
Clear!
488
00:19:19,459 --> 00:19:20,525
All clear!
Clear!
489
00:19:33,673 --> 00:19:35,940
MUNDO: Victims are
Mary and Roger Ingram. (sighs)
490
00:19:35,942 --> 00:19:37,609
Ligature marks around the neck
491
00:19:37,610 --> 00:19:39,277
and petechial hemorrhaging in
the eyes suggest strangulation.
492
00:19:39,279 --> 00:19:41,312
We have a time of death?
493
00:19:41,314 --> 00:19:43,247
MUNDO: According to
the on-site coroner report,
494
00:19:43,249 --> 00:19:44,782
body temp puts TOD
somewhere between 5:00
495
00:19:44,784 --> 00:19:46,250
and 7:00 a.m. this morning.
496
00:19:46,252 --> 00:19:48,252
Any signs of forced entry?
No.
497
00:19:48,254 --> 00:19:50,621
And nothing to suggest
that Leo Finch lives here.
498
00:19:50,623 --> 00:19:52,623
Police are canvassing
the area right now,
499
00:19:52,625 --> 00:19:54,892
seeing if anybody
recognizes Leo's photo.
500
00:19:54,894 --> 00:19:57,228
MAN:
Agent Mundo.
501
00:20:00,333 --> 00:20:03,334
KRUMITZ: Looks like Mary
tried to call for help.
502
00:20:03,336 --> 00:20:05,570
She's still clenching
this phone.
503
00:20:05,572 --> 00:20:06,837
Cadaveric spasm.
504
00:20:06,839 --> 00:20:09,607
It occurs in violent,
intense deaths.
505
00:20:09,609 --> 00:20:12,310
That's why her hand is
clenched around the phone.
506
00:20:12,312 --> 00:20:13,644
Battery's dead.
507
00:20:13,646 --> 00:20:15,379
See if it has the virus.
508
00:20:26,659 --> 00:20:28,993
Malware is exactly the same
as all the others.
509
00:20:28,995 --> 00:20:33,231
According to the call log, Mary
tried to call 911 at 6:23 a.m.
510
00:20:33,233 --> 00:20:35,333
Please hurry,
he's strangling my husband.
511
00:20:35,335 --> 00:20:37,335
I think he killed him.
512
00:20:37,337 --> 00:20:39,337
I can hear him coming.
513
00:20:39,339 --> 00:20:40,972
Hello, is anyone there?
514
00:20:40,974 --> 00:20:42,373
Hello?
515
00:20:43,810 --> 00:20:45,409
Hello?
516
00:20:50,817 --> 00:20:51,849
(screams)
517
00:20:54,020 --> 00:20:55,653
MUNDO:
Avery.
518
00:20:55,655 --> 00:20:58,356
There's a basement apartment.
519
00:21:04,330 --> 00:21:05,997
This is an odd setup.
520
00:21:05,999 --> 00:21:08,666
Cheap furniture,
egg carton acoustics,
521
00:21:08,668 --> 00:21:10,368
but very expensive speakers.
522
00:21:28,621 --> 00:21:31,289
Found a laptop.
523
00:21:31,291 --> 00:21:32,657
This is a Benning.
524
00:21:32,659 --> 00:21:34,992
Leo has a $50,000 violin
525
00:21:34,994 --> 00:21:36,994
and lives in a cheap rental?
526
00:21:36,996 --> 00:21:39,363
It's funny--
some of the best coders
527
00:21:39,365 --> 00:21:40,698
are talented musicians.
528
00:21:40,700 --> 00:21:43,434
Both highly technical,
deal with complex numbers.
529
00:21:43,436 --> 00:21:45,369
Clearly, Leo's obsession
was sound.
530
00:21:45,371 --> 00:21:47,738
KRUMITZ:
I'm imaging Leo's computer.
531
00:21:47,740 --> 00:21:49,573
He's over 200 audio files
on his hard drive.
532
00:21:49,575 --> 00:21:52,343
They're all 911 calls,
and he's the operator.
533
00:21:52,345 --> 00:21:54,078
RYAN:
Leo is an addict.
534
00:21:54,080 --> 00:21:56,547
The 911 calls are his drug.
535
00:21:56,549 --> 00:21:59,317
It's like an arsonist
getting a job as a firefighter
536
00:21:59,319 --> 00:22:01,085
or a pedophile
who becomes a teacher.
537
00:22:01,087 --> 00:22:03,321
Leo got his fix
at work.
538
00:22:03,323 --> 00:22:04,922
Until he was fired a year ago,
539
00:22:04,924 --> 00:22:07,892
and he was cut off from his drug
540
00:22:07,894 --> 00:22:11,762
and had to find a new way
to feed his addiction.
541
00:22:11,764 --> 00:22:12,630
The virus.
542
00:22:14,500 --> 00:22:15,633
Whoa, Krumitz, get-- come here.
543
00:22:15,635 --> 00:22:17,501
Is this what I think it is?
544
00:22:21,641 --> 00:22:23,374
That could be
the original source code
545
00:22:23,376 --> 00:22:24,742
for the virus.
546
00:22:26,379 --> 00:22:27,678
Okay, we've got something.
547
00:22:27,680 --> 00:22:30,548
This computer connected
to 26 bus routers
548
00:22:30,550 --> 00:22:33,384
at Port Authority
at 11:00 p.m. last night.
549
00:22:33,386 --> 00:22:35,486
That's 26 patient zeros.
550
00:22:35,488 --> 00:22:37,488
This is not
an experiment gone wrong.
551
00:22:37,490 --> 00:22:39,457
This was a calculated attack.
552
00:22:39,459 --> 00:22:41,459
No, Leo wanted to infect
every corner of the city,
553
00:22:41,461 --> 00:22:43,060
and he wanted to do it fast.
554
00:22:52,438 --> 00:22:54,572
RAMIREZ: 61 confirmed cases
in New Jersey.
555
00:22:54,574 --> 00:22:55,906
38 in Connecticut.
556
00:22:55,908 --> 00:22:57,475
And 23 in Upstate New York.
557
00:22:57,477 --> 00:22:59,076
Even with the news
alerts and warnings,
558
00:22:59,078 --> 00:23:00,911
the virus has officially
559
00:23:00,913 --> 00:23:02,780
spread through the
tristate area.
560
00:23:02,782 --> 00:23:05,416
Well, the good news is the
infection rate should slow down
561
00:23:05,418 --> 00:23:06,517
in the less densely
populated areas.
562
00:23:06,519 --> 00:23:07,685
Bad news?
563
00:23:07,687 --> 00:23:09,687
A complete quarantine
looks impossible.
564
00:23:09,689 --> 00:23:13,391
And local precincts are overrun
with emergency calls
565
00:23:13,393 --> 00:23:14,725
and hospitals are
flooded with walk-ins.
566
00:23:14,727 --> 00:23:16,127
Some people are resorting
to social media
567
00:23:16,129 --> 00:23:17,661
to announce
their emergencies.
568
00:23:17,663 --> 00:23:19,663
Nelson,
we need that antidote.
569
00:23:19,665 --> 00:23:20,898
How's it going?
570
00:23:20,900 --> 00:23:22,099
Krummy sent me
the source code of the virus
571
00:23:22,101 --> 00:23:23,701
from Leo Finch's laptop.
572
00:23:23,703 --> 00:23:25,803
Now that I can see exactly
how the virus is written,
573
00:23:25,805 --> 00:23:28,606
it shouldn't take long to write
a code to counteract it.
574
00:23:28,608 --> 00:23:30,074
But the problem is
575
00:23:30,076 --> 00:23:32,009
how to push it to all
the phones that need it.
576
00:23:32,011 --> 00:23:33,611
Yeah, a software update through
the vendors will take days.
577
00:23:33,613 --> 00:23:34,845
Mm-hmm.
578
00:23:34,847 --> 00:23:36,764
Wait a minute.
579
00:23:36,765 --> 00:23:38,682
What about using something
like the AMBER Alert, right?
580
00:23:38,684 --> 00:23:40,451
It sends
push notifications to phones
581
00:23:40,453 --> 00:23:42,520
during child abductions.
582
00:23:42,522 --> 00:23:44,121
It's instant, it's regional.
583
00:23:44,123 --> 00:23:45,306
What do you think?
584
00:23:45,307 --> 00:23:46,490
I mean, AMBER Alerts
are only designed
585
00:23:46,492 --> 00:23:47,558
to display alphanumeric text.
586
00:23:47,560 --> 00:23:49,160
You can't use them
to push code.
587
00:23:49,162 --> 00:23:50,828
And there are regulations.
588
00:23:50,830 --> 00:23:52,463
I mean, FCC, DOJ, FEMA.
589
00:23:52,465 --> 00:23:53,464
Right.
Wait, wait, wait.
590
00:23:53,466 --> 00:23:55,599
Are you saying it's impossible?
591
00:23:55,601 --> 00:23:57,868
I'm saying it's never
been done before.
Right.
592
00:23:57,870 --> 00:23:59,203
Well, there's a first
time for everything.
593
00:23:59,205 --> 00:24:00,538
You-you two were black
hats, weren't you?
594
00:24:00,540 --> 00:24:01,605
The best.
595
00:24:01,607 --> 00:24:02,940
Notorious.
596
00:24:02,942 --> 00:24:04,608
Okay, so you'll
hack it, right?
597
00:24:04,610 --> 00:24:06,977
And I'll take full
responsibility.
598
00:24:06,979 --> 00:24:09,713
Matter of fact, I will call
Director Silver right now.
599
00:24:09,715 --> 00:24:12,483
Work on the FCC,
DOJ part of this thing.
600
00:24:12,485 --> 00:24:14,985
All right, man said
hack, let's hack.
601
00:24:34,540 --> 00:24:36,574
Look at this.
602
00:24:38,077 --> 00:24:40,144
A pair of pliers,
603
00:24:40,146 --> 00:24:42,680
some kind of metal pins
604
00:24:42,682 --> 00:24:44,615
and a bloody violin string.
605
00:24:44,617 --> 00:24:46,617
I think we may be looking
at the murder weapon.
606
00:24:46,619 --> 00:24:48,586
(screaming)
607
00:24:48,588 --> 00:24:51,055
(both grunting)
608
00:24:51,057 --> 00:24:53,190
All right, well,
whatever Leo's endgame is,
609
00:24:53,192 --> 00:24:55,659
if he left two bodies upstairs
and a murder weapon in the wall,
610
00:24:55,661 --> 00:24:57,561
it's a pretty safe bet
he's not coming back here
611
00:24:57,563 --> 00:24:58,596
anytime soon.
612
00:24:58,598 --> 00:25:00,564
Guys, look at this.
613
00:25:00,566 --> 00:25:03,501
It looks like these three 911
recordings were Leo's favorites.
614
00:25:03,503 --> 00:25:05,669
They were played
over a thousand times.
615
00:25:05,671 --> 00:25:07,538
And he even put them
on a separate playlist.
616
00:25:07,540 --> 00:25:08,672
Here, listen to this.
617
00:25:08,674 --> 00:25:10,608
FINCH:
911, what's your emergency?
618
00:25:10,610 --> 00:25:12,977
MAN: My buddy, he fell!
It's bad; it's-it's real bad!
619
00:25:12,979 --> 00:25:14,845
We need an ambulance!
Sir, what's your location?
620
00:25:14,847 --> 00:25:16,714
MAN: Construction site
at Lexington and 12th!
621
00:25:16,716 --> 00:25:18,282
I don't think he's conscious.
622
00:25:18,284 --> 00:25:19,617
FINCH:
I'm dispatching paramedics now.
623
00:25:19,619 --> 00:25:20,918
Calm down and describe
what you see.
624
00:25:20,920 --> 00:25:22,119
MAN:
There's a lot of blood!
625
00:25:22,121 --> 00:25:23,521
He must've fallen 50 or 60 feet
626
00:25:23,523 --> 00:25:25,189
or something-- please hurry!
627
00:25:25,191 --> 00:25:26,290
There's blood all over his head!
628
00:25:26,292 --> 00:25:27,508
I'm pretty sure
his legs are broken.
629
00:25:27,509 --> 00:25:28,725
FINCH: All right,
be careful not to move him.
630
00:25:28,728 --> 00:25:29,727
Help is on the way.
631
00:25:29,729 --> 00:25:31,195
Is this from today?
632
00:25:31,197 --> 00:25:33,564
Uh, no.
633
00:25:33,566 --> 00:25:34,665
According to the metadata,
634
00:25:34,667 --> 00:25:36,667
this recording's
from two years ago.
635
00:25:36,668 --> 00:25:38,668
But what's strange is that it
happened at the same time of day
636
00:25:38,671 --> 00:25:40,838
as the construction
incident.
637
00:25:40,840 --> 00:25:41,805
Scaffolding pins.
638
00:25:41,807 --> 00:25:43,107
There's traces of paint and rust
639
00:25:43,109 --> 00:25:44,876
in the grooves of the pliers.
640
00:25:44,877 --> 00:25:46,644
What happened at that
construction site this morning
641
00:25:46,646 --> 00:25:47,728
was no accident.
642
00:25:47,729 --> 00:25:48,811
MAN:
All right,
what do we got?
643
00:25:48,814 --> 00:25:49,880
(creaking)
644
00:25:49,882 --> 00:25:51,282
Help! Help!
645
00:25:51,284 --> 00:25:52,716
Play the next one.
646
00:25:52,718 --> 00:25:54,885
FINCH:
911, what's your emergency?
647
00:25:54,887 --> 00:25:55,920
WOMAN:
Please help.
648
00:25:55,921 --> 00:25:56,954
Someone just broke
into my house.
649
00:25:56,956 --> 00:25:58,322
He's strangling my husband.
650
00:25:58,324 --> 00:26:00,024
I'm hiding in a closet.
651
00:26:00,026 --> 00:26:01,725
FINCH:
Try to stay calm, ma'am.
652
00:26:01,727 --> 00:26:03,060
I'm showing your address
as 754 Plymouth Way.
653
00:26:03,062 --> 00:26:04,728
Is that correct?
654
00:26:04,730 --> 00:26:05,729
WOMAN:
Yes, please hurry!
655
00:26:05,731 --> 00:26:07,031
I can hear him in the kitchen.
656
00:26:07,033 --> 00:26:08,666
Oh! I think my husband's dead.
657
00:26:08,668 --> 00:26:09,934
FINCH:
Help is on the way.
658
00:26:09,936 --> 00:26:11,201
WOMAN:
Why is this taking so long?
659
00:26:11,203 --> 00:26:13,203
Why is no one coming?
660
00:26:13,205 --> 00:26:15,739
This is very similar
to the scene upstairs.
661
00:26:15,741 --> 00:26:17,274
This is exactly what happened
662
00:26:17,276 --> 00:26:19,276
to Mary and Roger Ingram.
663
00:26:19,278 --> 00:26:20,744
This is also
another old recording
664
00:26:20,746 --> 00:26:22,146
and it happened
at the same time
665
00:26:22,148 --> 00:26:24,782
as the murders
this morning, 6:23 a.m.
666
00:26:24,784 --> 00:26:27,785
Listening is
a deeply immersive experience.
667
00:26:27,787 --> 00:26:28,886
FINCH:
Sir, what's your location?
668
00:26:28,888 --> 00:26:30,988
MAN: Construction site
at Lexington...
669
00:26:30,990 --> 00:26:33,157
RYAN: Every time Leo listen
to one of these recordings,
670
00:26:33,159 --> 00:26:35,659
he envisioned himself
in the scene.
671
00:26:35,661 --> 00:26:37,795
We need an ambulance.
RYAN:
First, he's a witness.
672
00:26:37,797 --> 00:26:39,096
...can't tell if he's alive.
673
00:26:39,098 --> 00:26:41,265
There's blood everywhere
and he's not moving.
674
00:26:41,267 --> 00:26:43,033
RYAN:
Then he's the victim.
Please help.
675
00:26:43,035 --> 00:26:44,969
Someone just broke
into my house.
676
00:26:44,971 --> 00:26:46,370
He's strangling my husband.
677
00:26:46,372 --> 00:26:47,938
(creaks)
678
00:26:47,940 --> 00:26:49,640
RYAN:
Now, Leo's the killer.
679
00:26:49,642 --> 00:26:50,808
(woman gasps)
No.
680
00:26:50,810 --> 00:26:52,076
No, no!
681
00:26:52,078 --> 00:26:54,645
He's recreating
his greatest hits.
682
00:26:54,647 --> 00:26:56,046
(woman screams)
KRUMITZ:
Yeah, but what does the virus
683
00:26:56,048 --> 00:26:57,648
have to do with all this?
And why today?
684
00:26:57,650 --> 00:26:58,782
RYAN:
It's the anniversary
685
00:26:58,784 --> 00:27:00,284
of the day he was fired.
686
00:27:00,286 --> 00:27:02,386
Look, Leo is a sadist
687
00:27:02,388 --> 00:27:04,154
who's aroused
by the sound of fear.
688
00:27:04,156 --> 00:27:06,757
The virus does
everything that he needs.
689
00:27:06,759 --> 00:27:09,660
The dropped calls delay
the emergency responders,
690
00:27:09,662 --> 00:27:12,696
which maximizes
the victims' panic.
691
00:27:12,698 --> 00:27:15,032
Leo records the calls
692
00:27:15,034 --> 00:27:16,734
so he can enjoy them later.
693
00:27:16,736 --> 00:27:18,836
It's his version
694
00:27:18,838 --> 00:27:20,304
of a serial killer
taking a trophy.
695
00:27:20,306 --> 00:27:21,372
Krumitz, didn't
you say there were
696
00:27:21,374 --> 00:27:23,040
three recordings
on that playlist?
697
00:27:25,678 --> 00:27:27,011
FINCH:
911, what's your emergency?
698
00:27:27,013 --> 00:27:28,112
BOY:
Help! He's stabbing him.
699
00:27:28,114 --> 00:27:29,747
He's stabbing my dad!
700
00:27:29,749 --> 00:27:31,215
FINCH:
What's your name? Where are you?
701
00:27:31,217 --> 00:27:33,150
BOY: Dylan.
And I don't know where I am.
702
00:27:33,152 --> 00:27:34,718
We just... we left the game.
703
00:27:34,720 --> 00:27:35,719
It's an alley.
704
00:27:35,721 --> 00:27:36,720
FINCH:
Help is on the way.
705
00:27:36,722 --> 00:27:37,755
BOY:
The man just left!
706
00:27:37,757 --> 00:27:38,756
I'm scared.
707
00:27:38,758 --> 00:27:40,157
FINCH:
It's okay, Dylan.
708
00:27:40,159 --> 00:27:41,892
I need you to go to your dad
Tell me what you see.
709
00:27:41,894 --> 00:27:42,893
BOY: He's not moving!
710
00:27:42,895 --> 00:27:44,395
(whimpering)
711
00:27:44,397 --> 00:27:47,831
Leo mimicked the first two
recordings on the playlist.
712
00:27:47,833 --> 00:27:49,400
And this recording
713
00:27:49,402 --> 00:27:51,402
is of a man being stabbed in
an alley in front of his son.
714
00:27:51,404 --> 00:27:53,203
It happened
at 8:53 at night.
715
00:27:53,205 --> 00:27:55,105
This is his next move.
716
00:27:55,107 --> 00:27:56,373
He's gonna kill again.
717
00:27:56,375 --> 00:27:57,775
We need to stop Leo Finch.
718
00:27:57,777 --> 00:27:58,943
MUNDO:
Yeah, but how?
719
00:27:58,944 --> 00:28:00,110
There are thousands of alleys
in New York City.
720
00:28:12,191 --> 00:28:13,891
Okay, everybody, listen up.
721
00:28:13,893 --> 00:28:16,927
We're basically looking
for a-an alley in a haystack.
722
00:28:16,929 --> 00:28:19,196
Leo's two copycat killings
723
00:28:19,198 --> 00:28:22,199
took place the same time
of day as the original crimes,
724
00:28:22,201 --> 00:28:24,935
which means at approximately
8:53 tonight,
725
00:28:24,937 --> 00:28:27,137
somebody is gonna get stabbed.
726
00:28:27,139 --> 00:28:30,040
So let's get going on this.
All right?
727
00:28:30,042 --> 00:28:32,176
We've got just over an hour
to find this Leo Finch
728
00:28:32,178 --> 00:28:34,244
before he finds his next victim.
729
00:28:34,246 --> 00:28:37,214
D.B., I figured out
what the three 911 calls
730
00:28:37,216 --> 00:28:39,016
on Leo's playlist
all have in common.
731
00:28:39,018 --> 00:28:40,784
They all lasted
over 20 minutes...
732
00:28:40,786 --> 00:28:43,754
almost three times longer
than your average 911 call.
733
00:28:43,756 --> 00:28:46,190
The victims all
died because Leo
734
00:28:46,192 --> 00:28:48,092
didn't dispatch
the paramedics in time.
735
00:28:48,094 --> 00:28:50,160
So he orchestrated their deaths.
736
00:28:50,162 --> 00:28:51,395
NELSON:
Just spoke to the NYPD.
737
00:28:51,397 --> 00:28:53,030
They issued a BOLO for Leo.
738
00:28:53,032 --> 00:28:54,264
And I sent them the antidote.
739
00:28:54,266 --> 00:28:55,766
They'll push it
to all cell phones in the area
740
00:28:55,768 --> 00:28:57,134
using AMBER Alerts.
Right.
741
00:28:57,136 --> 00:28:58,435
So you guys figured out the, uh,
742
00:28:58,437 --> 00:29:00,337
alphanumeric problem,
did you?
743
00:29:00,339 --> 00:29:02,005
We used a buffer
overflow exploit,
744
00:29:02,007 --> 00:29:03,507
thank you very much.
745
00:29:03,509 --> 00:29:06,176
NELSON: That's right.
It'll flood the phones
746
00:29:06,178 --> 00:29:07,645
with a specific sequence of text
747
00:29:07,646 --> 00:29:09,113
to force the NYPD home page
to pop up.
748
00:29:09,115 --> 00:29:11,215
Now, that home page will have
a download for the antidote.
749
00:29:11,217 --> 00:29:13,117
Basically, we're geniuses.
750
00:29:13,119 --> 00:29:14,318
Exactly.
Basically.
751
00:29:14,320 --> 00:29:15,920
Basically.
Do me a favor,
though, will you?
752
00:29:15,921 --> 00:29:17,521
Call NYPD back,
tell them to display
753
00:29:17,523 --> 00:29:19,456
a photo of Leo Finch
with the antidote.
754
00:29:19,458 --> 00:29:22,426
Might as well make the city
our eyes and ears.
755
00:29:22,428 --> 00:29:24,294
Uh... yeah, uh...
756
00:29:24,296 --> 00:29:25,863
I think you should do that.
757
00:29:25,865 --> 00:29:27,364
Why is that?
Might get
a little pushback.
758
00:29:27,366 --> 00:29:30,000
Apparently, they've been
chatting with my pal the mayor.
759
00:29:30,002 --> 00:29:31,435
Yeah, Nelson,
this has nothing to do
760
00:29:31,437 --> 00:29:32,970
with your Stock Exchange hack,
all right?
761
00:29:32,972 --> 00:29:34,304
Call them back,
762
00:29:34,306 --> 00:29:35,906
tell them to post the photo
763
00:29:35,908 --> 00:29:37,875
and the antidote.
Come on, buddy.
764
00:29:37,877 --> 00:29:39,510
This is your hero moment.
765
00:29:40,312 --> 00:29:41,879
You got this, Nelson.
766
00:29:41,881 --> 00:29:43,247
Right, right.
767
00:29:43,249 --> 00:29:44,248
My hero moment.
All right.
768
00:29:57,329 --> 00:29:59,563
I just talked to
the police chief.
769
00:29:59,565 --> 00:30:02,366
He told me that you're
using an AMBER Alert
770
00:30:02,368 --> 00:30:05,235
to send out an antidote
written by Brody Nelson.
771
00:30:05,237 --> 00:30:06,236
That's correct.
772
00:30:06,238 --> 00:30:07,588
We'll have to verify that code
773
00:30:07,589 --> 00:30:08,939
before it goes out
to the public.
774
00:30:08,941 --> 00:30:10,307
I've hired a private
security firm.
775
00:30:10,309 --> 00:30:13,143
No, that's not necessary
and we don't have the time.
776
00:30:13,145 --> 00:30:14,478
We are chasing a killer, here.
777
00:30:14,480 --> 00:30:16,547
I'm well aware of that,
and I'm shocked
778
00:30:16,549 --> 00:30:18,048
that you would even
trust a black hat
779
00:30:18,050 --> 00:30:19,349
with something this critical.
780
00:30:19,351 --> 00:30:21,318
I've heard about your
unconventional tactics,
781
00:30:21,320 --> 00:30:22,770
Deputy Director,
782
00:30:22,771 --> 00:30:24,221
but this is inappropriate
and dangerous.
783
00:30:24,223 --> 00:30:25,889
Mayor Cavanaugh,
how many more lives
784
00:30:25,891 --> 00:30:27,090
are you willing to jeopardize?
785
00:30:27,092 --> 00:30:28,258
No one cares more
786
00:30:28,260 --> 00:30:30,260
about the citizens
of this city than I do.
787
00:30:30,262 --> 00:30:31,361
That's why I'm here.
788
00:30:31,363 --> 00:30:34,164
Brody Nelson's antidote
will save lives.
789
00:30:34,166 --> 00:30:36,266
Now, I could go
over your head with this,
790
00:30:36,268 --> 00:30:38,368
but I'm not sure
that you could weather
791
00:30:38,370 --> 00:30:40,237
the political embarrassment.
792
00:30:40,239 --> 00:30:42,539
If this goes sideways,
it's on you.
793
00:30:45,911 --> 00:30:48,245
¶ ¶
794
00:30:49,548 --> 00:30:52,182
(indistinct chatter,
phone chimes)
795
00:31:12,872 --> 00:31:15,038
RAMIREZ:
The public's responding
to the AMBER Alert.
796
00:31:15,040 --> 00:31:17,074
I've got multiple reports
of Leo Finch
797
00:31:17,076 --> 00:31:18,642
at Madison and 140th.
798
00:31:18,644 --> 00:31:20,394
Pellham Park.
That's Harlem.
799
00:31:20,395 --> 00:31:22,145
Yeah, but we've got several
sightings on the east side.
800
00:31:22,147 --> 00:31:24,414
I mean, guy can't be
in two places at once.
801
00:31:24,416 --> 00:31:26,083
Dopplegangers?
802
00:31:26,085 --> 00:31:27,417
No.
803
00:31:27,419 --> 00:31:28,452
No, we made
a mistake. Uh...
804
00:31:28,454 --> 00:31:29,887
What do you mean?
805
00:31:29,889 --> 00:31:32,089
We sent the AMBER Alert
to everyone.
806
00:31:32,091 --> 00:31:34,224
Everyone.
807
00:31:34,226 --> 00:31:35,459
Including Leo Finch.
808
00:31:48,374 --> 00:31:49,473
Yeah, okay, all right.
809
00:31:49,475 --> 00:31:50,474
Time to call Mom.
810
00:31:50,476 --> 00:31:52,542
Let's get Avery on the phone.
811
00:31:52,544 --> 00:31:54,912
Um, Avery.
812
00:31:54,914 --> 00:31:57,148
We're striking out here.
813
00:31:57,149 --> 00:31:59,383
It looks like Leo could be
reporting false sightings.
814
00:31:59,385 --> 00:32:01,251
So what do you think?
815
00:32:01,253 --> 00:32:03,387
Let's review everything
we know about Leo Finch.
816
00:32:03,389 --> 00:32:04,988
We know that
he's meticulous
817
00:32:04,990 --> 00:32:06,423
about the details
in his recreations.
818
00:32:06,425 --> 00:32:08,425
The boy in the third
911 call said
819
00:32:08,427 --> 00:32:10,661
that he and his dad
were leaving a game.
MUNDO: The police report said
820
00:32:10,663 --> 00:32:12,462
Mets tickets were found
in the dad's jacket pocket.
821
00:32:12,464 --> 00:32:13,463
It was a baseball game.
822
00:32:13,465 --> 00:32:15,799
Yeah, but it's not
baseball season.
823
00:32:15,800 --> 00:32:18,134
RYAN: Well, let's concentrate
on another sporting event.
824
00:32:19,972 --> 00:32:21,305
All right, here we go.
825
00:32:21,307 --> 00:32:22,823
I got hockey in Manhattan,
basketball in Brooklyn.
826
00:32:22,824 --> 00:32:24,340
MUNDO:
Which one fits our window?
Both.
827
00:32:24,343 --> 00:32:26,677
Let's compare them
with the BOLO locations.
828
00:32:26,679 --> 00:32:28,345
Okay, we've got
six sightings of Leo
829
00:32:28,347 --> 00:32:30,580
around the arena in Manhattan,
only one in Brooklyn.
830
00:32:30,582 --> 00:32:32,349
RYAN:
It's the hockey game.
831
00:32:32,351 --> 00:32:34,284
Which ends in 15 minutes.
832
00:32:34,286 --> 00:32:35,953
KRUMITZ: The original stabbing
took place in an alley
833
00:32:35,955 --> 00:32:37,955
two blocks away
from the stadium.
834
00:32:37,957 --> 00:32:39,623
All right, how many alleys
are there within that range
835
00:32:39,625 --> 00:32:41,158
of the arena?
836
00:32:41,160 --> 00:32:42,526
One second.
837
00:32:42,528 --> 00:32:44,227
RAMIREZ:
Three.
838
00:32:44,229 --> 00:32:46,229
All right, well, this is a guy
that sticks to details, right?
839
00:32:46,231 --> 00:32:47,364
Let's pull up some old
crime scene photos,
840
00:32:47,366 --> 00:32:49,232
see if we can narrow
it down to one.
841
00:32:49,234 --> 00:32:51,368
Remember, Leo is a
deviant audiophile.
842
00:32:51,370 --> 00:32:54,237
It isn't about what we see,
it's about what we hear.
843
00:32:54,239 --> 00:32:56,340
Raven, pull up
the original 911 recording
844
00:32:56,342 --> 00:32:58,141
of the alley stabbing.
845
00:32:58,143 --> 00:32:59,343
Isolate the background sound.
846
00:32:59,345 --> 00:33:00,610
Okay.
847
00:33:00,612 --> 00:33:01,678
FINCH: 911.
What's your emergency?
848
00:33:01,680 --> 00:33:03,547
BOY:
Help, he's stabbing him!
849
00:33:03,549 --> 00:33:04,548
He's stabbing my dad!
850
00:33:04,550 --> 00:33:05,549
FINCH:
What's your name?
851
00:33:05,551 --> 00:33:07,084
Stop. Go back.
852
00:33:07,086 --> 00:33:08,085
(rumbling)
853
00:33:08,087 --> 00:33:09,553
That's an elevated train.
854
00:33:09,555 --> 00:33:11,421
Pull up a subway map.
855
00:33:11,423 --> 00:33:14,424
Look for any trains near
the arena that go above ground.
856
00:33:17,463 --> 00:33:19,629
RAMIREZ: Got it, it's the alley
between West 4th and Bleeker.
857
00:33:19,631 --> 00:33:22,065
Notify the arena.
I'll have 'em redirect crowds
away from that alley,
858
00:33:22,067 --> 00:33:23,734
have NYPD clear
the streets.
859
00:33:23,736 --> 00:33:25,002
Let's go get Leo Finch.
860
00:33:46,392 --> 00:33:47,624
(siren chirps)
MUNDO: It's over, Leo!
861
00:33:47,626 --> 00:33:49,092
FBI!
862
00:33:49,094 --> 00:33:51,628
We have you surrounded!
863
00:33:51,630 --> 00:33:53,663
Got a visual on Leo,
he is armed.
864
00:33:54,566 --> 00:33:56,066
Drop the knife, Leo!
865
00:33:57,269 --> 00:33:58,769
Nobody's coming out
of that arena.
866
00:33:58,771 --> 00:34:01,738
We've sealed the exits,
we've cleared the streets.
867
00:34:01,740 --> 00:34:03,340
There's no one here
for you to harm.
868
00:34:03,342 --> 00:34:05,075
So drop the knife.
Drop it now.
869
00:34:05,077 --> 00:34:06,643
They're mine!
870
00:34:06,645 --> 00:34:08,145
They're mine!
You can't take them!
871
00:34:08,147 --> 00:34:09,179
Do not take one more step.
872
00:34:09,181 --> 00:34:10,180
Give them back to me!
873
00:34:10,182 --> 00:34:11,481
They're all I have!
874
00:34:11,483 --> 00:34:13,583
MUNDO: Take one more step,
and I will shoot!
875
00:34:15,387 --> 00:34:17,421
RYAN:
Stand down, Elijah.
876
00:34:17,423 --> 00:34:19,056
We confiscated his computer.
877
00:34:19,058 --> 00:34:21,425
He's talking about the
recordings he had saved on it.
878
00:34:21,427 --> 00:34:23,527
MUNDO:
He came here to kill someone.
879
00:34:23,529 --> 00:34:24,761
He came to satisfy an addiction.
880
00:34:24,763 --> 00:34:26,530
Leo's a junkie.
He came to get a fix.
881
00:34:26,532 --> 00:34:28,198
We could still
end this peacefully.
882
00:34:28,200 --> 00:34:30,801
Krumitz, pull up the third
recording on Leo's playlist.
883
00:34:30,803 --> 00:34:33,203
We need to find a way to play
it for Leo at the scene.
884
00:34:33,205 --> 00:34:36,773
Okay, the squad cars all have
P.A. systems with bullhorns.
885
00:34:36,775 --> 00:34:37,841
Operator, this is
Agent Daniel Krumitz.
886
00:34:37,843 --> 00:34:38,842
Connect me to dispatch.
887
00:34:38,844 --> 00:34:41,545
MAN:
Hold your fire!
888
00:34:41,546 --> 00:34:44,247
KRUMITZ: Officer, I need you
to turn on your P.A. system.
889
00:34:46,385 --> 00:34:48,685
FINCH: 911.
What's your emergency?
890
00:34:48,687 --> 00:34:50,520
BOY: Help, he's stabbing him!
He's stabbing my dad!
891
00:34:50,522 --> 00:34:52,789
FINCH: What's your name?
Where are you?
892
00:34:52,791 --> 00:34:54,207
BOY: Dylan, I don't know
where I am.
893
00:34:54,208 --> 00:34:55,624
We just... we left the game.
It's an alley.
894
00:34:55,627 --> 00:34:57,694
FINCH:
Help is on the way.
895
00:34:57,696 --> 00:34:59,796
BOY: The man just left.
I'm scared.
896
00:34:59,798 --> 00:35:02,299
FINCH: Hey, Dylan, I need you
to go to your dad.
897
00:35:02,301 --> 00:35:03,467
Tell me what you see.
898
00:35:03,469 --> 00:35:04,734
BOY:
He's not moving.
899
00:35:08,207 --> 00:35:09,306
He was going for his knife.
900
00:35:15,147 --> 00:35:17,314
Someone call 911.
901
00:35:17,316 --> 00:35:19,316
I've been hurt.
902
00:35:19,318 --> 00:35:21,384
I need help.
903
00:35:25,824 --> 00:35:27,891
¶ ¶
904
00:35:37,603 --> 00:35:40,170
Nice code, brother. Huh?
905
00:35:40,172 --> 00:35:42,205
You're gonna
leave me hanging?
My bad, bro.
906
00:35:42,207 --> 00:35:44,374
(scoffs)
That's old news, Nelson.
907
00:35:44,376 --> 00:35:46,610
NELSON: Yeah, but not to the
mayor of New York City.
908
00:35:46,612 --> 00:35:47,745
I mean, all he saw
was a black hat
909
00:35:47,746 --> 00:35:48,879
who brought down
the stock exchange.
910
00:35:48,881 --> 00:35:50,881
(scoffs) It's like
no matter what I do right,
911
00:35:50,883 --> 00:35:52,549
I can't shake what I did wrong.
912
00:35:52,551 --> 00:35:54,217
This is what pops up
when I Google my name.
913
00:35:54,219 --> 00:35:55,218
Look at this.
914
00:35:55,220 --> 00:35:57,687
RYAN:
Hey, come on.
915
00:35:57,689 --> 00:35:59,556
You didn't have to come
back to Washington.
916
00:35:59,558 --> 00:36:01,575
You could have stayed
in New York.
917
00:36:01,576 --> 00:36:03,593
I know, but I was...
I was a distraction.
918
00:36:03,595 --> 00:36:05,695
You had to go
to bat for me.
919
00:36:05,697 --> 00:36:07,631
It's not like anything Mayor
Cavanaugh said wasn't true.
920
00:36:07,633 --> 00:36:10,200
Really? You really
took that eight million?
921
00:36:10,202 --> 00:36:11,501
Except for that, Krummy.
922
00:36:11,503 --> 00:36:13,603
Hey, we cleared you
of that long ago.
923
00:36:13,605 --> 00:36:16,273
The fact remains
you can't rewrite history,
924
00:36:16,275 --> 00:36:17,807
but you can make it.
925
00:36:17,809 --> 00:36:20,243
And that is exactly
what you did today.
926
00:36:20,245 --> 00:36:21,478
Own that.
927
00:36:21,480 --> 00:36:23,647
You should be
very proud of yourself.
928
00:36:23,649 --> 00:36:25,682
Thank you, Avery.
929
00:36:29,955 --> 00:36:31,488
KRUMITZ:
Eight million.
930
00:36:31,490 --> 00:36:32,923
Oh, my God.
You can tell me.
931
00:36:32,925 --> 00:36:35,492
I won't tell anybody.
Come on, you know where it is.
932
00:36:35,494 --> 00:36:37,494
Let's go get it
right now.
I didn't steal it.
933
00:36:37,496 --> 00:36:38,862
But I'm gonna find out
934
00:36:38,864 --> 00:36:40,564
who did.
935
00:36:40,566 --> 00:36:44,601
And when I do... I'm gonna put
that bastard in prison.
936
00:36:49,875 --> 00:36:52,709
Here, let me read
this to you.
937
00:36:52,711 --> 00:36:54,477
Okay.
938
00:36:54,479 --> 00:36:58,315
"I'm taking a chance, hoping
this is still your number.
939
00:36:58,317 --> 00:37:00,951
"I know it's been two years.
But fingers crossed,
940
00:37:00,953 --> 00:37:02,819
"and divorce in the rearview...
941
00:37:02,821 --> 00:37:04,654
Maybe?"
Question mark.
942
00:37:04,656 --> 00:37:06,256
"I'm at
Le Petit Paris
943
00:37:06,258 --> 00:37:09,492
every night from 8:00
until they throw me out."
944
00:37:09,494 --> 00:37:10,994
And then she signs it:
"Foolish Heart."
945
00:37:10,996 --> 00:37:12,662
So you got a new phone
946
00:37:12,664 --> 00:37:15,298
and her new number, and whoever
had that number before you
947
00:37:15,300 --> 00:37:17,300
was supposed to get that text.
948
00:37:17,302 --> 00:37:19,669
I-I know, I should have texted
her right back when I got it,
949
00:37:19,671 --> 00:37:20,770
but I didn't, I-I waited.
950
00:37:20,772 --> 00:37:22,606
But then I figured,
you know,
951
00:37:22,608 --> 00:37:26,776
she would assume that her text
hadn't gone through, right?
952
00:37:26,778 --> 00:37:29,279
Mm-hmm.
And maybe that was better
953
00:37:29,280 --> 00:37:31,781
than letting her know that I,
you know, a complete stranger,
954
00:37:31,783 --> 00:37:34,751
knew that she'd...
put herself out there.
955
00:37:34,753 --> 00:37:35,986
And I just didn't want
956
00:37:35,988 --> 00:37:37,387
to embarrass her.
957
00:37:37,389 --> 00:37:39,356
How do you know it's a her?
958
00:37:40,325 --> 00:37:41,658
Well, that's a good point.
959
00:37:41,660 --> 00:37:43,360
Okay, end of conversation.
(laughs)
960
00:37:43,362 --> 00:37:45,312
No, wait a minute.
961
00:37:45,313 --> 00:37:47,263
You fantasized
about who it would be, D.B.
No, I didn't,
962
00:37:47,266 --> 00:37:48,298
no, I didn't.
963
00:37:48,300 --> 00:37:49,499
Yeah, you investigated it.
964
00:37:49,501 --> 00:37:50,634
No, I did not investigate.
965
00:37:50,636 --> 00:37:52,369
Yeah, you did.
I called the restaurant.
966
00:37:52,371 --> 00:37:53,770
(gasps) See?
That's all. I call... (laughs)
967
00:37:53,772 --> 00:37:56,706
They said that
a rather attractive woman
968
00:37:56,708 --> 00:37:58,842
came there every night
the same time.
969
00:37:58,844 --> 00:38:00,844
And I... I knew
970
00:38:00,846 --> 00:38:03,313
that she was roughly
in my age group.
971
00:38:03,315 --> 00:38:05,548
Oh.
"Foolish Heart."
972
00:38:05,550 --> 00:38:07,684
That's a reference
to a Steve Perry song.
973
00:38:07,686 --> 00:38:09,686
¶ ¶
974
00:38:09,688 --> 00:38:11,554
That's a rock star
before your time.
975
00:38:11,556 --> 00:38:14,591
Anyway, this...
the whole text, it just...
976
00:38:14,593 --> 00:38:16,860
you know, it seemed
so brave and... and honest,
977
00:38:16,862 --> 00:38:18,762
and... I'm curious.
978
00:38:18,764 --> 00:38:21,431
You hijacked another man's text.
979
00:38:21,433 --> 00:38:22,832
Yes, I did.
980
00:38:22,834 --> 00:38:24,217
(both laugh)
981
00:38:24,218 --> 00:38:25,601
So you're gonna meet her
at the restaurant,
982
00:38:25,604 --> 00:38:26,736
or what?
983
00:38:27,939 --> 00:38:29,939
No. No.
984
00:38:29,941 --> 00:38:32,008
¶ ¶
985
00:38:35,514 --> 00:38:38,882
(indistinct chatter)
986
00:38:46,725 --> 00:38:48,758
(sighs)
987
00:38:54,733 --> 00:38:56,466
(inhales sharply)
988
00:38:57,402 --> 00:38:59,469
¶ ¶
989
00:39:01,340 --> 00:39:03,673
(ice rattling)
990
00:39:04,643 --> 00:39:05,875
Hi.
991
00:39:06,845 --> 00:39:08,044
Hi.
992
00:39:08,046 --> 00:39:09,846
(chuckles):
Forgive me for asking,
993
00:39:09,848 --> 00:39:12,015
but are-are you...
here alone?
994
00:39:12,017 --> 00:39:13,450
Uh...
995
00:39:13,452 --> 00:39:14,818
I am.
996
00:39:14,820 --> 00:39:16,086
Yeah. Of course.
997
00:39:16,088 --> 00:39:17,754
Um... sorry, no,
998
00:39:17,756 --> 00:39:19,439
I don't mean of course,
I mean...
999
00:39:19,440 --> 00:39:21,123
I have a confession to make.
Oh, really?
1000
00:39:21,126 --> 00:39:23,360
Shouldn't I know your name
before we jump
1001
00:39:23,362 --> 00:39:24,994
right into the serious stuff?
Yes, yeah.
1002
00:39:24,996 --> 00:39:27,063
Sorry. Uh, D.B.
1003
00:39:27,065 --> 00:39:28,832
Greer.
Nice to meet you.
1004
00:39:28,834 --> 00:39:30,400
See, I, uh...
1005
00:39:30,402 --> 00:39:33,837
I received this today,
and... obviously,
1006
00:39:33,839 --> 00:39:35,705
it was not meant for me.
1007
00:39:35,707 --> 00:39:37,107
I should have texted
you right back,
1008
00:39:37,109 --> 00:39:39,042
but I didn't, and I'm sorry.
1009
00:39:39,978 --> 00:39:41,878
Mmm.
1010
00:39:41,880 --> 00:39:43,947
Yeah. Yeah, awkward.
1011
00:39:43,949 --> 00:39:45,749
No, not for me.
1012
00:39:45,751 --> 00:39:48,017
Because I didn't write
that text.
1013
00:39:48,019 --> 00:39:50,787
(laughs): Really.
1014
00:39:50,789 --> 00:39:51,888
You're kidding.
1015
00:39:51,890 --> 00:39:53,857
Oh, boy. (sighs)
1016
00:39:54,826 --> 00:39:56,826
So...
1017
00:39:57,796 --> 00:39:59,963
(laughing):
Oh...
1018
00:39:59,965 --> 00:40:01,831
Oh, man.
1019
00:40:01,833 --> 00:40:04,901
Well, shame on her.
(laughs)
1020
00:40:04,903 --> 00:40:07,504
Soliciting men via text.
1021
00:40:07,506 --> 00:40:08,872
So...
1022
00:40:08,874 --> 00:40:10,840
can I buy you a drink?
1023
00:40:10,842 --> 00:40:12,142
Really?
1024
00:40:12,144 --> 00:40:14,944
Seems like you could use one.
1025
00:40:14,946 --> 00:40:17,814
Shouldn't I know your last name
before we... jump into
1026
00:40:17,816 --> 00:40:20,750
the serious stuff?
Greer Latimore.
1027
00:40:20,752 --> 00:40:22,786
D.B. Russell.
1028
00:40:22,788 --> 00:40:24,854
Nice to meet you.
1029
00:40:24,856 --> 00:40:26,890
You, too.
1030
00:40:26,892 --> 00:40:30,160
¶ Foolish heart... ¶
So, uh...
1031
00:40:30,162 --> 00:40:31,928
what do you do...
1032
00:40:31,930 --> 00:40:33,163
Greer Latimore?
1033
00:40:33,165 --> 00:40:35,432
Former Secret Service.
1034
00:40:35,434 --> 00:40:37,901
Dabble in...
private investigations.
1035
00:40:37,903 --> 00:40:39,469
¶ Foolish, foolish heart... ¶
Nuh-uh.
1036
00:40:39,471 --> 00:40:40,737
Uh-huh.
1037
00:40:40,739 --> 00:40:42,872
Oh, boy.
1038
00:40:42,874 --> 00:40:44,174
What are you drinking?
1039
00:40:44,175 --> 00:40:45,475
¶ You've been wrong before... ¶
Something manly.
1040
00:40:45,477 --> 00:40:46,810
(laughs)
1041
00:40:46,812 --> 00:40:48,077
Okay.
1042
00:40:48,079 --> 00:40:49,546
Tequila.
1043
00:40:49,548 --> 00:40:51,714
Very manly.
Yes, yes.
1044
00:40:51,716 --> 00:40:52,782
¶ Foolish, foolish heart... ¶
Excuse me.