My name is Avery Ryan.
I was a victim of cyber crime.
Like you, I posted on social media,
checked my bank account balance online,
even kept the confidential files
of my psychological practice on my computer.
Then I was hacked, and as a result,
one of my patients was murdered.
My investigation into her death led me to the FBI,
where I joined a team of cyber experts
to wage a war against a new breed of criminal
hiding on the Deep Web...
infiltrating our daily lives in ways we never imagined...
...faceless...
nameless...
lurking inside our devices,
just a keystroke away.
*
Mr. Nelson,
you're late.
(sighs) I'm sorry, Avery.
It's just that getting up early
is something my body's not used to.
Okay, I feel you.
All right, I'll have a talk with my body,
and we'll be here on time.
What you doing?
Oh, rescuing a spider.
Oh. Um... (laughs)
Yeah, do not come near me. Look. Look, I'm-I'm serious. (groans)
Brody Nelson, don't tell me you're afraid
of a little spider? A little spider?
Avery, look at the size of that thing. That's not...
Uh-oh. Where...? (stammering)
Why are you looking on the ground?
I dropped it. You dropped it.
Avery...
Your bag... Well...
Aah! (laughing)
(shouting)
Well, spiders don't like it when you're late.
SIFTER: So your plane's on the tarmac
at National, and you're scheduled to leave
in an hour for New York City.
The Kirkendahl Hotel believes
that their computer network has been hacked.
That connects every location worldwide.
This is the Kirkendahl file. What do we got?
Three days ago,
the hotel's computer intrusion detection system
went off, sent an alert from their East Side property.
And they had their I.T. team take a look at it?
It appeared to be a glitch, happens all the time.
They reset the system, it happened again.
There's evidence of a remote cyber intrusion.
Kirkendahl's Wi-Fi has been compromised.
That means the hackers could have access to
the corporate computers
and the guests' personal devices.
And they probably discovered a vulnerable protocol,
used a root kit to gain access.
Nah, that's doing it the hard way.
There's a known exploit in the authentication credential.
You should know that, right? Of course I know that.
Okay, well... Why wouldn't I know that?
Guys? Guys? You spilled water on your keyboard.
Then I saw a spider.
It's not like I did it on purpose.
Whatever. Let's just reign in
our intellect here.
That hotel is right next to the U.N.
A lot of high-profile people stay there.
Diplomats, dignitaries, celebrities.
Yeah, and the U.N. is back in session in two days.
We could be looking at a dark hotel scenario here.
Hackers targeting the guests. Yeah, or an attack
against the Kirkendahl Corporation itself.
Either way, documents could be released.
E-mails, texts, sensitive information
that could embarrass or expose some very important people.
Well, I've got a meeting coming up
with the FBI Director.
I'll tell him my team is on it,
and that none of that will happen.
Enjoy your flight.
WOMAN: At the suggestion of our in-house
technical support team, we shut down the Wi-Fi.
Has any employee or guest reported any strange e-mails,
or any evidence
of their individual devices being hacked?
No.
What about pop-up alerts instructing them
to update a file or a program?
I don't know. Those pop-ups appear all the time,
even on my home computer.
Well, it's one of the ways that devices are hacked.
A free download or product upgrade
that looks like it's authentic.
But instead of it being the actual product,
it's the delivery of malware-- malicious software.
MUNDO: And once someone opens it,
the code gets released into the computer like a virus,
and the hacker takes over.
It's like the hacker's lurking inside the device.
When a guest logs on to your Wi-Fi, the hacker is able
to see their room number, the last name on their account,
even get their passwords.
But-but we-we shut down the Wi-Fi,
so that should protect us, right?
MUNDO: Depends.
I mean,
some malware is programmed to lay in wait
for six hours, six days, six months or more.
Should-should we be copying and deleting documents?
No. Despite the definition of the word "delete,"
in the cyber world, almost anything can be recovered.
Agent Ryan, as in-house counsel for the Kirkendahl Corporation,
I can't stress enough the importance of privacy here.
It is something that we guarantee
to our board members, our employees and our guests.
There must be something that we can do.
Many of our guests use aliases when checking in,
but their real names and home addresses are in our files.
Some engage in activity that we keep very confidential,
and I'm talking about more than just ordering an adult movie.
We-we send e-mails and texts
containing confidential company information--
bonuses, salaries,
mergers.
Activity that will have serious repercussions
if those communications became public.
(phone ringing) Pardon me.
Yes.
Say that again.
(sighs)
All right.
Our hotel
security footage has been wiped.
Lobby... entrances... guest room corridors.
Everything recorded in the past week.
Was the system connected to the Wi-Fi?
Yes.
RYAN: If your surveillance footage was wiped,
I don't think our hacker is interested
in these confidential files
that you're worried about, Counselor.
Something else is going on here.
Something happened here at your hotel,
and someone is trying to cover it up.
(rock music playing loudly) MAN: Ms. Foster?
This is the hotel manager.
Ms. Foster, your music is disturbing other guests!
(music stops)
Ms. Foster?
Oh, geez.
Security. Call 911.
(camera clicking)
(indistinct police radio chatter)
(whimpering)
(camera clicking)
MUNDO: The victim is Adel Foster,
24 years old.
She checked into this room five days ago alone.
Driver's license lists her address as
East Rutherford, New Jersey.
NYPD are reaching out to New Jersey Police and her family.
Room's disorganized.
Bruises on her wrists.
Indicates... a struggle.
Most likely, a crime of passion.
Detectives canvassed the hotel guests.
Nobody heard or saw anything.
Crime scene lifted a few prints.
Most belonged to the victim, the rest to housekeeping.
However,
I did find this in the plumbing.
The victim's cell phone.
The target tried to destroy it and then flush it.
RYAN: Well, the water likely corroded the connectors.
Data recovery is gonna be tough.
The hotel invoice.
Looks like around 3:00 this morning,
she ordered a late-night snack and a movie.
Behavior of an insomniac.
Food for one. That indicates she was alone.
MUNDO: Wait a minute. This is strange.
What? The medical examiner just established
approximate time of death.
Three nights ago.
What?
It's a hotel. How does housekeeping not find the body?
Stranger than that,
according to the room invoice,
yesterday and the day before, she ordered laundry,
room and spa services,
and a movie.
And this morning, breakfast.
Well, it looks like Adel Foster was alive
for three days after she died.
* I know you've deceived me, now here's a surprise *
* I know that you have, 'cause there's magic in my eyes *
* I can see for miles and miles *
* And miles...
* Oh, yeah.
SIFTER: Okay, Raven,
what have you got?
Data from the Kirkendahl Hotel's computer system.
This is a blueprint layout
of a standard room.
We can see the computer controls
and monitors pretty much everything that happens.
All run by one central software package
called the "digital butler."
And this explains why nobody in that hotel
found Adel Foster's body for three days?
We believe so.
We detected malware on the hotel server.
It was sent to every employee
hidden inside a party invitation.
So that's how it breached the firewall.
Ah. And Troy fell.
Yeah, it was the Trojans themselves
that opened up their own city gates
and pulled the wooden horse inside.
Just like the hotel employees
who opened the party invitation and let in the malware.
While they blindly celebrated victory,
their enemy lay in wait.
And Troy fell.
KRUMITZ: Our hacker had
access to the hotel's main computer.
They found their way to Adel's guest room records
and made it look like she was alive and well
even though Adel Foster was definitely dead.
Well, that would explain the manicure,
the facial, ordering the movie,
even room service, but what about housekeeping?
No one ever entered the room.
Because the "do not disturb" sign
is also controlled by the computer system.
RAMIREZ: Exactly. Maids won't enter when the light is on.
Hotels connect physical devices and sensors
in the hotel rooms to one central computer
to improve efficiency and cut down cost--
controlling thermostats and water temperature,
providing you with the ease of ordering services
from the hotel channel on your television.
From one computer, they can control everything.
Right. It's why they sometimes charge you
for the items in the minibar just because
you move them.
Now, the pressure sensor on the shelves
sends a message to the computer telling
its product has been consumed.
But as we all know, computers can be hacked.
I actually met the hat who wrote the code.
Called it a hospitality hack.
All right, now, once a hacker intrudes
the hotel computer system, he has control
over room assignments, check in, check out,
television,
thermostat...
Oh, my favorite: the remote control curtains.
Check this out.
Wait...
Nelson, are you really doing that?
Did you actually hack this hotel from CTOC?
Yeah, that was me.
The point is if all the conveniences are connected
through software to one central computer,
once the hacker's inside the system,
he can create orders for room service,
housekeeping, laundry pickup...
RAMIREZ: And none of it really happened.
It just looks like it did.
MUNDO: And all activity is recorded under the guest's name
and room number.
Which explains why a dead woman
can order room service and a movie.
RYAN: So as far as the hotel knew,
the minibar was being restocked,
the laundry was being picked up,
the maids were performing turndown services.
A hacker can control any guest's room 24/7.
This is a very sophisticated cover-up of a murder.
We need to know more about our victim, Adel Foster.
Her devices are on their way to you now, Krumitz.
We need to find this hospitality hacker.
You can't break into a system this complex
without leaving some digital dust behind.
We're on it.
All right, so we got our victim's laptop,
tablet and destroyed cell.
Our killer has a three-day head start.
Puts him right where we want him.
(chuckles) He thinks he got away with murder.
Which means he already made a mistake
that will lead us right to him.
We are gonna find Adel Foster's murderer.
NELSON: You know, I really could have
used these things two years ago.
But you know every time Apple introduces a new device,
there's a new cord, a new connector,
and then all the old stuff is not compatible with
the new stuff, so then you... you know, you got to go back,
buy all the new Apple products, connect them and...
Dude, dude, really?
We're trying to work here.
Okay, well, then give me something to do.
Here. Lay out all the pieces of this cell phone.
Disassemble it, remove the circuit board,
then scrub the resistor jumper connections.
There's a toothbrush and alcohol solution
right over there. Oh, okay.
I see how you do.
New guy gets the poop phone. What?
I happen to know that this was the phone that was recovered
from the toilet in the hotel room.
He's right.
That is the poop phone.
Really? You're gonna encourage this?
And you're not even that new anymore.
Okay, you know what, Nelson?
Fine. I will gladly take the poop phone
if you just do me one favor and stop talking.
Guys. Okay, what, you in a bad mood or something, Krummy?
You want to talk about it?
Oh. You're having girl problems.
Oh, my... I knew it.
Raven, could you grab me that pen over there
and stab me with it? That would be awesome.
Guys, will you cut it out and come here. You got no game.
I found something. I have... I have game.
You guys.
I went back to the employee party invitation
where the malware was embedded.
I couldn't find the information on the computer that sent it.
The hacker anonymized it.
So, I responded yes. I got back an auto-reply confirmation,
and guess what-- our hacker forgot to anonymize that e-mail.
Pretty sure it's the same one that sent the invitation.
And I got his I.P. address on the computer.
Yeah! These guys never think two steps ahead.
I love this job. This is gonna
lead us right to our hacker.
*
Evan Wescott? Is this your computer?
Yes. Why? FBI.
You're under arrest for computer fraud
in connection with the murder of Adel Foster.
What? What are you talking about? Hey, whoa.
Hold on a minute. I don't even know who that is.
You got the wrong guy. (grunts) I didn't kill anybody.
We can do this the hard way, or you can come quietly.
You hacked the Kirkendahl Hotel's main computer, Evan.
We know this because the I.P. address of the device used
led us back to your laptop.
That's impossible. I don't even know how to do
something like that. MUNDO: You created a backdoor
in the computer systems and took control
of the hotel's hospitality functions--
maid service,
room service, minibar.
You murdered Adel and activated
those services to make it look
like she was alive three days after her death.
What? That's insane. I didn't kill anybody.
Your cell phone places you at the hotel
at the exact time of Adel Foster's murder.
Your phone's location services puts you in that hotel.
Location services?
MUNDO: The little program that's always running
in the background of your phone.
Logs everywhere you go.
RYAN: Nifty little feature.
See the elevation listed here? 29.7 meters.
That's roughly seven floors.
Her body was found in room 715.
Okay, I-I'm not a murderer.
MUNDO: Really?
'Cause you sure sound like one
in the text that you sent Adel.
We found that on your phone.
These are not my text messages.
And I already told you, I don't know anybody named Adel.
Are you sure you never talked to her?
This is surveillance footage from your bar, Evade,
on the night she was murdered.
*
I mean, 'cause that sure as hell looks like her,
and that is definitely you.
Look, man, a lot of people come into my club.
And, yeah, I meet a lot of women. MUNDO: Yeah?
Well, this one was murdered three days ago.
Where were you?
I was at the club.
I'm always at the club.
It's a pretty crowded place at night.
Could easily step out for an hour, and no one would miss you.
This is ridiculous. I didn't do anything.
At first, I couldn't understand why you went to all the trouble
to make it look like Adel was still alive.
MUNDO: You wanted to buy yourself time
to create an alibi. The hotel hack.
And you certainly can't deny
that you were capable of doing it.
You were a computer science major
at Kenniwick University.
Day one, nobody found the body.
Day two, no one came for you.
MUNDO: Day three, you got comfortable.
You distanced yourself from the murder.
You thought there was no evidence
tying you to the scene of the crime.
You got away with murder.
Almost. EVAN: No.
I didn't kill anybody.
I didn't do any of these things.
Evan...
your devices tell us you're lying.
*
MAN: Shane Tillman.
Adel is... er, was... my girlfriend.
I don't understand how this happened.
Doesn't the hotel have security?
We're still investigating the circumstances
surrounding Adel's death.
You mean her murder.
When her cell kept going to voicemail,
I called the-the hotel, and she...
they said that she was still checked in.
I thought that she had lost her phone.
You know? I mean, she does that a lot.
But I never thought...
...you know, that, um, that she was dead.
You spoke to her the night that she was killed.
Yeah, she seemed excited.
Talking a mile a minute.
(sniffles)
Adel saved up money
for months for this trip.
You know, she had a whole itinerary:
Coney Island, Statue of Liberty, Empire State Building,
a couple of Broadway shows.
Why didn't you go with her?
I got called into work last minute.
What do you do?
Some part-time stuff.
Operations and Safety at the hospital,
and I work construction on the weekends.
They were short on staff and needed some extra help.
I was trying to save money so we could go to Europe.
I think, uh...
I think she wanted to experience New York this time on her own.
She loved the city.
Even though we were in East Rutherford,
we didn't get up here often.
I'm sorry. I, uh...
I just can't believe
she's gone.
All right. Every piece is scrubbed, dried and connected.
Between that spider this morning
and this phone, boy, I could so use a hot shower.
Dude, man up.
It's time to Frankenstein this thing.
We are gonna rebuild Adel's phone and resurrect its memory.
You mean we can do that?
We can actually get data off of this thing?
Watch and learn, son.
This is how the good guys do it.
Watch and learn.
*
You see what I'm seeing?
Yeah.
A problem.
MUNDO: So Krumitz was able to pull some data
off Adel's phone, but the threatening text messages
from Evan aren't there.
Were they deleted?
They never existed.
So I double-checked with Evan's service provider.
They have no record of the calls or the texts either.
Which means Evan didn't send or receive those texts.
So how did they get on his phone?
So Elijah sent me everything he pulled off
Evan Wescott's phone.
Those text message conversations
between Evan and Adel were faked.
How can somebody fake a text on another device?
Once you get a text message into your phone,
it's added to one long database.
If you're smart enough and have the right software,
you can manipulate that file and make it look
like you're getting text messages from whoever you want.
Whenever you want.
Or to someone else's phone.
Mmm. "Happy New Year, Krumitz,
from your best pal, Sifter."
Sent from your phone January 1, 2016.
That is impressive.
And a little creepy. Yeah.
Now, would you need physical access to Evan's phone
to fake those text messages?
No. Plus, Evan's phone doesn't even have the software necessary
to manipulate the database-- it had to be done remotely.
And that's not all. GPS coordinates
that put Evan Wescott in the hotel room
at the time of the murder...
Faked. Faked.
His phone was hacked. Yeah!
Oh... (grunts)
Avery,
all of our digital evidence is lying to us.
Is Krumitz sure no mistake was made?
He's positive.
What about the malware injected
into the hotel's computer system?
It came from Evan Wescott's computer.
But Krumitz doesn't believe Evan is our hacker.
He's sure? SIFTER: Yes.
And how many times have you told me that Daniel Krumitz is
the best white hat hacker ever?
Looks like Evan Wescott is being framed for murder.
KRUMITZ: For someone to frame Evan,
they had to route the intrusion through his laptop,
change the GPS, and create those text messages.
Maybe he framed himself.
Clearly, you're new to this and don't understand
the behavior of a criminal. Other than yourself.
What I understand is I would do anything not to go to prison.
Pretty risky to frame yourself. It's working for Evan. You believe he's innocent.
I believe in cyber evidence.
Okay, I'm not saying the evidence is wrong.
I'm just saying his devices could be manipulated by anybody.
Evidence doesn't point to the identity of a hacker.
So what happened when we caught you?
See, why you want to get all personal?
What? That's what I'm saying...
Guys? Guys? (arguing continues)
Stop! Stop! Focus on the case! Whatever, whatever.
Focus on the case.
Whoever hacked them,
gained access to at least one
of Evan Wescott's devices.
Evan has full access to all of his devices.
Physical access is the easiest,
which is why I think it's Evan. Physical access
is also the riskiest.
Nelson, just for a minute,
try to buy into the fact that Adel's killer
might not be Evan Wescott.
The hacker behind this had to have skills.
Evan has a computer science degree.
(scoffs, groans) I'm just saying!
All right, fine, I'll, uh...
I'll play along.
The hacker could've easily done this remotely.
If I'd done it, I'd "war drive" him.
Pull up to his house.
Hack into his Wi-Fi,
plant everything on his computer and phone
while he's still inside, totally oblivious.
It's still too risky.
You're sitting outside of his house.
What if somebody sees you? Or your car?
The best way to do it is from the safety of your own home.
All you have to do is "spear phish" him--
a socially engineered attack.
Send Evan an e-mail with a fake link
from his bank or something, wait for him to click on it,
and then boom!
Full access to his laptop
and any device that connects to it, like his phone!
Okay, so how you know he's gonna click on it? And when?
Whoever did this was short on time.
The best way to stay anonymous and get instant access
to Evan's devices is to wait for him
to connect to an open Wi-Fi signal somewhere.
Anywhere they're advertising free Wi-Fi is like a hacker's
virtual playground-- tons of unexpected people unaware
that the person next to them sharing the same connection
could be intruding onto their devices
and stealing all their information.
Or in Evan's case, adding information.
Look, I still think he could've done it himself.
I mean, that's just me.
Wi-Fi is the best option.
So... where was Evan hacked?
Well, according to his frequent locations on Evan's phone,
he went to the gym three or four times a week.
Most gyms have free Wi-Fi. Restaurants, too.
I bet you he was eating out every night.
You know, club owners score mad dates.
How often is he at Carla's Cafe?
RAMIREZ: Almost every day.
Well, according to the network logs in Evan's laptop,
he connected to the coffee shop's Wi-Fi
the morning after the murder.
You still think it's a possibility
that he framed himself?
Yeah. I do.
All right. So I spoke to the manager.
The surveillance cameras are all dummies.
They're just there as a crime deterrent.
They don't record a damn thing.
But... the Wi-Fi went down three days ago
at 10:32 a.m.
Now, according to Evan's laptop, he was long gone at that time.
But not onto the cafe's router.
Maybe someone set up an evil twin router.
And that's how he got hacked. Now, my phone...
can give the illusion of being a Wi-Fi signal,
same as a twin router.
All I have to do is activate my own personal hot spot
from my device, and I am open Wi-Fi.
I can even name it anything I want.
Say we're in Carla's Cafe, right?
Think I'll name my new hot spot network...
"Carla's Cafe."
Now, log on to the free Wi-Fi.
(laughs)
Which one? There are two.
Exactly.
The one I just created and the real one.
I'm guessing our target eliminated
the real Carla's Cafe Wi-Fi.
Evan came in,
logged on to the decoy signal...
and the hacker gained control of his device.
You just did all that with your phone?
Just a few clicks of a button.
Now, I-I can't control your device from my phone,
but our target had an actual router.
He was able to push any information he wanted
onto Evan's devices.
I mean, anytime you log on to open Wi-Fi,
you leave yourself vulnerable.
Or in our case, you become a murder suspect.
It can happen to anyone.
Looks like it just happened to Evan Wescott.
Raven, I need you to track down
the owner of an evil twin router.
(chuckles) Right.
Nelson thinks Evan framed himself.
That would be a smart move.
You don't really believe that, do you?
Nelson thinks the way hackers do.
But...
Evan has no motive.
And no definitive connection to Adel Foster
other than a kiss; and kisses rarely
get you convicted of murder.
You miss New York.
Yeah, feeling a bit nostalgic.
I opened my first practice in Manhattan.
Hung the shingle on a brownstone
just like that one there. Went from
analyzing minds to analyzing cyber criminals.
Wasn't really a plan, it just happened.
You ever think about moving back?
No.
I only think about one thing.
Catching the guy that hacked and stole my files.
There isn't a morning where I don't wake up wondering
if today's the day that he's gonna
release private patient information.
And the whole nightmare will start all over again.
We'll catch him.
(sighs)
You know what I miss about this place?
The Mets.
The Mets? (laughs)
I would comment, but you'd probably fire me.
But there is one question I can't shake, Elijah.
Evan Wescott.
What about him?
Well, the beauty of an open Wi-Fi hack
is its sheer randomness.
Our killer could've framed anyone on his router
for Adel's murder.
You think the target chose Evan specifically.
Adel went to Evan's club the night of the murder.
And the next morning, Evan ends up at Carla's Cafe
at the exact same time as the evil twin router.
It feels personal.
Our target crafted a murder for Evan.
Fabricated texts
and GPS data, linked him to the hotel hack.
He set up Evan as a fall guy for a reason, but why?
I identified the router that was used
to hack Evan in Carla's Cafe.
The latest and greatest
in evil twin deception, huh?
Manufacturer gave me the big box store where it was sold.
All right, from your smirk, I'm guessing
it was purchased recently. Mm-hmm.
Point of sale puts that gentleman at the register.
He paid cash.
Get this to Avery and Elijah.
We've got him.
(tablet chimes)
Look who was in Manhattan the morning after Adel's murder.
Just got this from Raven.
Oh. The heartbroken boyfriend.
MUNDO: Shane Tillman, FBI!
He's not here.
I'm gonna image the hard drive,
send it to Nelson and Krumitz to comb through the data.
RYAN: Broken cup.
Damaged wall.
There was an argument.
Adel wasn't visiting New York.
She was running away from Shane.
You know, something struck me as odd when I saw
the bruises on her wrist at the crime scene.
Look. They're purple, almost black.
If she'd gotten these during the struggle the night
that she was killed, they'd be pink or not even visible.
She got these before the night she was killed.
Adel was leaving Shane.
He came home.
Stop it!
He pulled her things out of her bag
to prevent her from leaving.
When she escaped, he grabbed her wrists,
which caused the bruising.
(both grunting)
Oh, God! (groaning)
When she left, he started drinking.
He followed her
to New York and he killed her.
My God.
Even when women get the courage to leave abusive relationships,
sometimes they still get killed.
So what's his next move?
Well, he's angry.
He's calculated.
He's got nothing to lose.
And he's armed and dangerous.
RAMIREZ: I just hit a dead end.
Tillman's phone's not showing a signal.
He must have turned it off. There's no way to track him.
I'll see what we can do with Tillman's laptop.
His recent online activity should give us a glimpse
into his state of mind.
Yeah, browser history has been cleared.
Yeah, well, clearing your history may hide porn sites
from your girlfriend, but it won't hide anything from me.
Browser artifacts are easily recovered with the right tools.
Oh, check it out. Mostly New York news affiliates.
He's following the Adel Foster murder investigation. You think he knows
we're onto him? Always assume
that the bad guys are two steps ahead of you, Nelson.
That way, you're prepared for anything,
and you're never caught off guard.
Hey, man, he visited a cell phone locating site?
I mean, what, he lost his cell phone?
No, he wasn't looking for his phone.
He was tracking someone else. Look.
That area code is 212.
That's New York, not Jersey.
KRUMITZ: I'll call Elijah.
Elijah, Shane Tillman is using
a cell phone location tracking site.
He's going after Evan Wescott!
*
Whoa, whoa, whoa, hey.
Problem is with me.
Just let these people go. Shut up!
This wouldn't be happening if it wasn't for you.
You took her away from me. Buddy, I think you got the wrong guy.
It was you! It was you!
I saw you with Adel right here in this bar.
Look, man, just drop the gun, and we can talk
about whatever it is that you think may have happened.
No, I know what happened! I know what happened!
(siren wailing)
You took her away from me.
Of course, you don't remember.
There's so many women, aren't there?
You just have to have them all?
I needed a chance to explain, to say I was sorry.
To say I was sorry.
But you... you were all over her.
And I could see in her eyes, she wasn't coming back to me.
Shane?
Stay where you are!
Or this isn't gonna end the way you want it to.
Let her go and put down the gun.
He killed my girlfriend, and you did nothing.
You set him free.
At the count of three, I'm gonna discharge this weapon.
You need to decide
what you're gonna do. One, two...
Okay.
Good.
Now kick it towards me.
Stay right where you are.
W-Wait, don't do that, don't do that.
I can't live without her!
Shane. Shane!
I got you!
Hang on!
I got you!
*
RYAN: Are you okay?
Yeah. Yeah.
We got him.
We're not done.
We still haven't put Shane Tillman
in that hotel room at the time of the murder.
We still have to prove who killed Adel Foster.
Anything on Shane's phone?
I need to know what we've got before I question him.
SIFTER: Well, nothing concrete.
I'm heading in now for an update.
KRUMITZ: Yeah! NELSON: That's what I'm talking about!
We got it.
We found proof.
(stammers)
I'm gonna call you back.
Wh-What kind of proof did you find?
Proof that Shane Tillman was at the scene of the crime.
Proof that he murdered Adel Foster?
If we're lucky, both.
It's called a motion tracking chip.
Most new smartphones have them,
but most people don't know they exist.
It's a motion co-processor that collects and stores motion data
on the phone's accelerometers, gyroscopes and compasses.
All right, so basically it just...
it records movement.
Yeah, it's how an exercise app knows the difference
between when you're jogging versus walking,
which direction you're headed--
pretty much however your phone's moving.
KRUMITZ: As the phone moves,
the motion tracking chip records all of it.
It will detect a pitch, a roll, a tilt--
every movement the phone makes.
Right, and it's always on. And it's separate from the main processor.
Let me get this right-- so if data were altered
on that device, it would never cross your minds
to manipulate that file.
Exactly. So we pulled all the data
off Shane's motion tracking chip, and this is what we found.
So the one on the left is the motion tracking chip
from Shane's phone; the one on the right is Adele's.
Yeah, we synced both of them up
to the last time Adel's phone moved before she was murdered.
NELSON: Most people keep their phones in their pants pockets.
KRUMITZ: Which means the phone was recording their movement.
So if two people were fighting, and we had both phones...
SIFTER: Right, we could reenact the fight.
NELSON: Yeah.
Who is he?!
Who is he?
Tell me who he is! Leave me alone!
I'm not your girlfriend anymore!
Adel?
Well, this not only puts Shane Tillman in the room
at the time of the murder, it proves that he killed her.
AVERY: You covered your tracks from every possible angle.
You wiped your phone of any wrongdoing,
pushed all the evidence to Evan's devices,
you even hacked the hotel, wiped its security footage.
RYAN: It was all very clever.
But you forgot one thing.
One thing most people don't know about--
your phone's motion tracking chip.
Cyber-synchronized offender and victim.
Records every movement.
Proves you killed your girlfriend.
(sniffles)
What's this?
NELSON: No! (Ryan stammers)
No, no! You freed it?!
Oh, what?
Uh, there was a cup in the middle of the floor.
Hey, welcome back.
Good job. (grumbles)
He has been preoccupied with a little spider.
What is all that? (chuckles)
What? Some compressed air.
I was gonna turn it over, zap it, freeze it,
then I was gonna set it free.
Aw. Cryonic preservation?
I'm not hunting that thing down again.
Okay, I will help you look for your spider.
Thank you.
We'll find it,
and Elijah will arrest it. Yeah.
KRUMITZ: Well, now I have to help.
Yeah. (shouts)
Why... why would y'all do that? (laughter)
Why would y'all do that?!
Captioning sponsored by CBS
Captioned by Media Access Group at WGBH access.wgbh.org