1 00:00:00,822 --> 00:00:01,822 My name is Avery Ryan. 2 00:00:01,856 --> 00:00:03,356 I was a victim of cyber crime. 3 00:00:03,392 --> 00:00:06,092 Like you, I posted on social media, 4 00:00:06,128 --> 00:00:08,668 checked my bank account balance online, 5 00:00:08,697 --> 00:00:10,737 even kept the confidential files 6 00:00:10,765 --> 00:00:13,135 of my psychological practice on my computer. 7 00:00:14,769 --> 00:00:17,679 Then I was hacked, and as a result, 8 00:00:17,706 --> 00:00:20,206 one of my patients was murdered. 9 00:00:20,242 --> 00:00:23,772 My investigation into her death led me to the FBI, 10 00:00:23,812 --> 00:00:26,612 where I joined a team of cyber experts 11 00:00:26,648 --> 00:00:29,518 to wage a war against a new breed of criminal 12 00:00:29,551 --> 00:00:32,521 hiding on the Deep Web... 13 00:00:32,554 --> 00:00:35,584 infiltrating our daily lives in ways we never imagined... 14 00:00:37,359 --> 00:00:39,329 ...faceless... 15 00:00:39,361 --> 00:00:41,491 nameless... 16 00:00:41,530 --> 00:00:43,340 lurking inside our devices, 17 00:00:43,365 --> 00:00:45,695 just a keystroke away. 18 00:00:52,341 --> 00:00:54,241 * 19 00:01:21,903 --> 00:01:22,873 Mr. Nelson, 20 00:01:22,904 --> 00:01:24,874 you're late. 21 00:01:24,906 --> 00:01:26,546 (sighs) I'm sorry, Avery. 22 00:01:26,575 --> 00:01:28,145 It's just that getting up early 23 00:01:28,177 --> 00:01:29,617 is something my body's not used to. 24 00:01:31,180 --> 00:01:32,390 Okay, I feel you. 25 00:01:32,414 --> 00:01:33,814 All right, I'll have a talk with my body, 26 00:01:33,848 --> 00:01:35,248 and we'll be here on time. 27 00:01:35,284 --> 00:01:36,284 What you doing? 28 00:01:36,318 --> 00:01:38,418 Oh, rescuing a spider. 29 00:01:38,453 --> 00:01:41,253 Oh. Um... (laughs) 30 00:01:41,290 --> 00:01:43,830 Yeah, do not come near me. Look. Look, I'm-I'm serious. (groans) 31 00:01:43,858 --> 00:01:45,228 Brody Nelson, don't tell me you're afraid 32 00:01:45,260 --> 00:01:47,270 of a little spider? A little spider? 33 00:01:47,296 --> 00:01:48,896 Avery, look at the size of that thing. That's not... 34 00:01:48,930 --> 00:01:49,740 Uh-oh. Where...? (stammering) 35 00:01:49,764 --> 00:01:51,464 Why are you looking on the ground? 36 00:01:51,500 --> 00:01:53,810 I dropped it. You dropped it. 37 00:01:53,835 --> 00:01:54,805 Avery... 38 00:01:54,836 --> 00:01:56,276 Your bag... Well... 39 00:01:56,305 --> 00:01:57,805 Aah! (laughing) 40 00:01:57,839 --> 00:01:59,379 (shouting) 41 00:01:59,408 --> 00:02:01,308 Well, spiders don't like it when you're late. 42 00:02:01,343 --> 00:02:03,273 SIFTER: So your plane's on the tarmac 43 00:02:03,312 --> 00:02:04,942 at National, and you're scheduled to leave 44 00:02:04,979 --> 00:02:07,219 in an hour for New York City. 45 00:02:07,249 --> 00:02:09,189 The Kirkendahl Hotel believes 46 00:02:09,218 --> 00:02:11,818 that their computer network has been hacked. 47 00:02:11,853 --> 00:02:13,253 That connects every location worldwide. 48 00:02:13,288 --> 00:02:14,688 This is the Kirkendahl file. What do we got? 49 00:02:14,723 --> 00:02:16,453 Three days ago, 50 00:02:16,491 --> 00:02:19,321 the hotel's computer intrusion detection system 51 00:02:19,361 --> 00:02:22,191 went off, sent an alert from their East Side property. 52 00:02:22,231 --> 00:02:24,431 And they had their I.T. team take a look at it? 53 00:02:24,466 --> 00:02:26,436 It appeared to be a glitch, happens all the time. 54 00:02:26,468 --> 00:02:28,438 They reset the system, it happened again. 55 00:02:28,470 --> 00:02:30,610 There's evidence of a remote cyber intrusion. 56 00:02:30,639 --> 00:02:33,279 Kirkendahl's Wi-Fi has been compromised. 57 00:02:33,308 --> 00:02:35,378 That means the hackers could have access to 58 00:02:35,410 --> 00:02:36,450 the corporate computers 59 00:02:36,478 --> 00:02:38,448 and the guests' personal devices. 60 00:02:38,480 --> 00:02:40,390 And they probably discovered a vulnerable protocol, 61 00:02:40,415 --> 00:02:42,355 used a root kit to gain access. 62 00:02:42,384 --> 00:02:43,854 Nah, that's doing it the hard way. 63 00:02:43,885 --> 00:02:46,425 There's a known exploit in the authentication credential. 64 00:02:46,455 --> 00:02:48,325 You should know that, right? Of course I know that. 65 00:02:48,357 --> 00:02:49,427 Okay, well... Why wouldn't I know that? 66 00:02:49,458 --> 00:02:51,628 Guys? Guys? You spilled water on your keyboard. 67 00:02:51,660 --> 00:02:52,900 Then I saw a spider. 68 00:02:52,927 --> 00:02:53,927 It's not like I did it on purpose. 69 00:02:53,962 --> 00:02:55,722 Whatever. Let's just reign in 70 00:02:55,764 --> 00:02:57,234 our intellect here. 71 00:02:57,266 --> 00:02:59,606 That hotel is right next to the U.N. 72 00:02:59,634 --> 00:03:01,304 A lot of high-profile people stay there. 73 00:03:01,336 --> 00:03:02,706 Diplomats, dignitaries, celebrities. 74 00:03:02,737 --> 00:03:05,237 Yeah, and the U.N. is back in session in two days. 75 00:03:05,274 --> 00:03:06,804 We could be looking at a dark hotel scenario here. 76 00:03:06,841 --> 00:03:08,941 Hackers targeting the guests. Yeah, or an attack 77 00:03:08,977 --> 00:03:10,377 against the Kirkendahl Corporation itself. 78 00:03:10,412 --> 00:03:12,642 Either way, documents could be released. 79 00:03:12,681 --> 00:03:15,441 E-mails, texts, sensitive information 80 00:03:15,484 --> 00:03:17,854 that could embarrass or expose some very important people. 81 00:03:17,886 --> 00:03:19,386 Well, I've got a meeting coming up 82 00:03:19,421 --> 00:03:20,581 with the FBI Director. 83 00:03:20,622 --> 00:03:22,392 I'll tell him my team is on it, 84 00:03:22,424 --> 00:03:24,554 and that none of that will happen. 85 00:03:24,593 --> 00:03:26,563 Enjoy your flight. 86 00:03:42,043 --> 00:03:43,713 WOMAN: At the suggestion of our in-house 87 00:03:43,745 --> 00:03:46,445 technical support team, we shut down the Wi-Fi. 88 00:03:46,481 --> 00:03:49,281 Has any employee or guest reported any strange e-mails, 89 00:03:49,318 --> 00:03:50,258 or any evidence 90 00:03:50,285 --> 00:03:51,515 of their individual devices being hacked? 91 00:03:51,553 --> 00:03:52,383 No. 92 00:03:52,421 --> 00:03:54,521 What about pop-up alerts instructing them 93 00:03:54,556 --> 00:03:56,926 to update a file or a program? 94 00:03:56,958 --> 00:03:58,528 I don't know. Those pop-ups appear all the time, 95 00:03:58,560 --> 00:04:00,470 even on my home computer. 96 00:04:00,495 --> 00:04:02,465 Well, it's one of the ways that devices are hacked. 97 00:04:02,497 --> 00:04:04,537 A free download or product upgrade 98 00:04:04,566 --> 00:04:05,966 that looks like it's authentic. 99 00:04:06,000 --> 00:04:08,740 But instead of it being the actual product, 100 00:04:08,770 --> 00:04:11,540 it's the delivery of malware-- malicious software. 101 00:04:11,573 --> 00:04:12,773 MUNDO: And once someone opens it, 102 00:04:12,807 --> 00:04:15,377 the code gets released into the computer like a virus, 103 00:04:15,410 --> 00:04:16,820 and the hacker takes over. 104 00:04:16,845 --> 00:04:18,815 It's like the hacker's lurking inside the device. 105 00:04:18,847 --> 00:04:20,917 When a guest logs on to your Wi-Fi, the hacker is able 106 00:04:20,949 --> 00:04:23,759 to see their room number, the last name on their account, 107 00:04:23,785 --> 00:04:25,015 even get their passwords. 108 00:04:25,053 --> 00:04:26,683 But-but we-we shut down the Wi-Fi, 109 00:04:26,721 --> 00:04:28,551 so that should protect us, right? 110 00:04:28,590 --> 00:04:29,360 MUNDO: Depends. 111 00:04:29,391 --> 00:04:30,291 I mean, 112 00:04:30,325 --> 00:04:32,465 some malware is programmed to lay in wait 113 00:04:32,494 --> 00:04:34,424 for six hours, six days, six months or more. 114 00:04:34,463 --> 00:04:37,363 Should-should we be copying and deleting documents? 115 00:04:37,399 --> 00:04:39,069 No. Despite the definition of the word "delete," 116 00:04:39,100 --> 00:04:41,510 in the cyber world, almost anything can be recovered. 117 00:04:41,536 --> 00:04:46,506 Agent Ryan, as in-house counsel for the Kirkendahl Corporation, 118 00:04:46,541 --> 00:04:49,441 I can't stress enough the importance of privacy here. 119 00:04:49,478 --> 00:04:50,918 It is something that we guarantee 120 00:04:50,945 --> 00:04:53,545 to our board members, our employees and our guests. 121 00:04:53,582 --> 00:04:55,512 There must be something that we can do. 122 00:04:55,550 --> 00:04:58,360 Many of our guests use aliases when checking in, 123 00:04:58,387 --> 00:05:01,127 but their real names and home addresses are in our files. 124 00:05:01,155 --> 00:05:04,555 Some engage in activity that we keep very confidential, 125 00:05:04,593 --> 00:05:06,893 and I'm talking about more than just ordering an adult movie. 126 00:05:06,928 --> 00:05:08,668 We-we send e-mails and texts 127 00:05:08,697 --> 00:05:11,397 containing confidential company information-- 128 00:05:11,433 --> 00:05:12,563 bonuses, salaries, 129 00:05:12,601 --> 00:05:13,831 mergers. 130 00:05:13,868 --> 00:05:15,838 Activity that will have serious repercussions 131 00:05:15,870 --> 00:05:17,880 if those communications became public. 132 00:05:17,906 --> 00:05:20,576 (phone ringing) Pardon me. 133 00:05:20,609 --> 00:05:22,779 Yes. 134 00:05:22,811 --> 00:05:24,771 Say that again. 135 00:05:24,813 --> 00:05:26,713 (sighs) 136 00:05:26,748 --> 00:05:27,888 All right. 137 00:05:27,916 --> 00:05:29,656 Our hotel 138 00:05:29,684 --> 00:05:30,984 security footage has been wiped. 139 00:05:31,019 --> 00:05:35,759 Lobby... entrances... guest room corridors. 140 00:05:35,790 --> 00:05:38,460 Everything recorded in the past week. 141 00:05:38,493 --> 00:05:39,893 Was the system connected to the Wi-Fi? 142 00:05:39,928 --> 00:05:41,898 Yes. 143 00:05:43,765 --> 00:05:45,795 RYAN: If your surveillance footage was wiped, 144 00:05:45,834 --> 00:05:47,904 I don't think our hacker is interested 145 00:05:47,936 --> 00:05:49,506 in these confidential files 146 00:05:49,538 --> 00:05:50,738 that you're worried about, Counselor. 147 00:05:50,772 --> 00:05:52,942 Something else is going on here. 148 00:05:52,974 --> 00:05:55,474 Something happened here at your hotel, 149 00:05:55,510 --> 00:05:57,950 and someone is trying to cover it up. 150 00:05:57,979 --> 00:05:59,949 (rock music playing loudly) MAN: Ms. Foster? 151 00:06:02,050 --> 00:06:04,620 This is the hotel manager. 152 00:06:04,653 --> 00:06:07,753 Ms. Foster, your music is disturbing other guests! 153 00:06:20,635 --> 00:06:21,665 (music stops) 154 00:06:32,681 --> 00:06:34,811 Ms. Foster? 155 00:06:34,849 --> 00:06:36,889 Oh, geez. 156 00:06:39,654 --> 00:06:41,654 Security. Call 911. 157 00:06:46,528 --> 00:06:49,738 (camera clicking) 158 00:06:52,601 --> 00:06:54,701 (indistinct police radio chatter) 159 00:06:59,107 --> 00:07:01,877 (whimpering) 160 00:07:03,812 --> 00:07:05,872 (camera clicking) 161 00:07:32,707 --> 00:07:34,707 MUNDO: The victim is Adel Foster, 162 00:07:34,743 --> 00:07:35,773 24 years old. 163 00:07:35,810 --> 00:07:38,250 She checked into this room five days ago alone. 164 00:07:38,279 --> 00:07:40,719 Driver's license lists her address as 165 00:07:40,749 --> 00:07:41,919 East Rutherford, New Jersey. 166 00:07:41,950 --> 00:07:44,560 NYPD are reaching out to New Jersey Police and her family. 167 00:07:44,586 --> 00:07:45,716 Room's disorganized. 168 00:07:45,754 --> 00:07:47,854 Bruises on her wrists. 169 00:07:47,889 --> 00:07:49,929 Indicates... a struggle. 170 00:07:49,958 --> 00:07:51,998 Most likely, a crime of passion. 171 00:07:52,026 --> 00:07:53,526 Detectives canvassed the hotel guests. 172 00:07:53,562 --> 00:07:55,192 Nobody heard or saw anything. 173 00:07:55,229 --> 00:07:56,329 Crime scene lifted a few prints. 174 00:07:56,364 --> 00:07:58,664 Most belonged to the victim, the rest to housekeeping. 175 00:07:58,700 --> 00:07:59,940 However, 176 00:07:59,968 --> 00:08:01,838 I did find this in the plumbing. 177 00:08:01,870 --> 00:08:03,740 The victim's cell phone. 178 00:08:07,842 --> 00:08:11,512 The target tried to destroy it and then flush it. 179 00:08:17,886 --> 00:08:22,756 RYAN: Well, the water likely corroded the connectors. 180 00:08:22,791 --> 00:08:26,661 Data recovery is gonna be tough. 181 00:08:26,695 --> 00:08:28,165 The hotel invoice. 182 00:08:28,196 --> 00:08:30,136 Looks like around 3:00 this morning, 183 00:08:30,164 --> 00:08:32,064 she ordered a late-night snack and a movie. 184 00:08:32,100 --> 00:08:33,710 Behavior of an insomniac. 185 00:08:33,735 --> 00:08:37,335 Food for one. That indicates she was alone. 186 00:08:37,371 --> 00:08:39,971 MUNDO: Wait a minute. This is strange. 187 00:08:40,008 --> 00:08:42,648 What? The medical examiner just established 188 00:08:42,677 --> 00:08:44,177 approximate time of death. 189 00:08:44,212 --> 00:08:45,672 Three nights ago. 190 00:08:45,714 --> 00:08:47,144 What? 191 00:08:47,181 --> 00:08:48,841 It's a hotel. How does housekeeping not find the body? 192 00:08:48,883 --> 00:08:50,653 Stranger than that, 193 00:08:50,685 --> 00:08:52,825 according to the room invoice, 194 00:08:52,854 --> 00:08:56,254 yesterday and the day before, she ordered laundry, 195 00:08:56,290 --> 00:08:57,830 room and spa services, 196 00:08:57,859 --> 00:08:58,959 and a movie. 197 00:08:58,993 --> 00:09:01,323 And this morning, breakfast. 198 00:09:01,362 --> 00:09:04,232 Well, it looks like Adel Foster was alive 199 00:09:04,265 --> 00:09:06,805 for three days after she died. 200 00:09:10,138 --> 00:09:16,278 * I know you've deceived me, now here's a surprise * 201 00:09:18,212 --> 00:09:23,952 * I know that you have, 'cause there's magic in my eyes * 202 00:09:23,985 --> 00:09:28,125 * I can see for miles and miles * 203 00:09:28,156 --> 00:09:31,656 * I can see for miles and miles * 204 00:09:31,693 --> 00:09:35,993 * I can see for miles and miles * 205 00:09:36,030 --> 00:09:39,710 * And miles... 206 00:09:39,734 --> 00:09:41,834 * Oh, yeah. 207 00:09:52,881 --> 00:09:53,341 SIFTER: Okay, Raven, 208 00:09:53,381 --> 00:09:54,781 what have you got? 209 00:09:54,816 --> 00:09:56,756 Data from the Kirkendahl Hotel's computer system. 210 00:09:56,785 --> 00:09:57,915 This is a blueprint layout 211 00:09:57,952 --> 00:09:59,082 of a standard room. 212 00:09:59,120 --> 00:10:00,430 We can see the computer controls 213 00:10:00,454 --> 00:10:02,854 and monitors pretty much everything that happens. 214 00:10:02,891 --> 00:10:04,821 All run by one central software package 215 00:10:04,859 --> 00:10:06,059 called the "digital butler." 216 00:10:06,094 --> 00:10:07,964 And this explains why nobody in that hotel 217 00:10:07,996 --> 00:10:09,866 found Adel Foster's body for three days? 218 00:10:09,898 --> 00:10:11,068 We believe so. 219 00:10:11,099 --> 00:10:13,669 We detected malware on the hotel server. 220 00:10:13,702 --> 00:10:15,362 It was sent to every employee 221 00:10:15,403 --> 00:10:16,903 hidden inside a party invitation. 222 00:10:16,938 --> 00:10:18,938 So that's how it breached the firewall. 223 00:10:18,973 --> 00:10:21,943 Ah. And Troy fell. 224 00:10:21,976 --> 00:10:23,816 Yeah, it was the Trojans themselves 225 00:10:23,845 --> 00:10:25,175 that opened up their own city gates 226 00:10:25,213 --> 00:10:27,013 and pulled the wooden horse inside. 227 00:10:27,048 --> 00:10:28,888 Just like the hotel employees 228 00:10:28,917 --> 00:10:30,887 who opened the party invitation and let in the malware. 229 00:10:30,919 --> 00:10:32,929 While they blindly celebrated victory, 230 00:10:32,954 --> 00:10:35,024 their enemy lay in wait. 231 00:10:35,056 --> 00:10:36,426 And Troy fell. 232 00:10:39,994 --> 00:10:41,464 KRUMITZ: Our hacker had 233 00:10:41,495 --> 00:10:43,995 access to the hotel's main computer. 234 00:10:44,032 --> 00:10:45,392 They found their way to Adel's guest room records 235 00:10:45,433 --> 00:10:47,163 and made it look like she was alive and well 236 00:10:47,201 --> 00:10:49,431 even though Adel Foster was definitely dead. 237 00:10:49,470 --> 00:10:51,140 Well, that would explain the manicure, 238 00:10:51,172 --> 00:10:53,442 the facial, ordering the movie, 239 00:10:53,474 --> 00:10:55,704 even room service, but what about housekeeping? 240 00:10:55,744 --> 00:10:57,114 No one ever entered the room. 241 00:10:57,145 --> 00:10:58,315 Because the "do not disturb" sign 242 00:10:58,346 --> 00:11:00,816 is also controlled by the computer system. 243 00:11:00,849 --> 00:11:03,959 RAMIREZ: Exactly. Maids won't enter when the light is on. 244 00:11:03,985 --> 00:11:06,415 Hotels connect physical devices and sensors 245 00:11:06,454 --> 00:11:08,884 in the hotel rooms to one central computer 246 00:11:08,923 --> 00:11:10,953 to improve efficiency and cut down cost-- 247 00:11:10,992 --> 00:11:13,092 controlling thermostats and water temperature, 248 00:11:13,127 --> 00:11:15,167 providing you with the ease of ordering services 249 00:11:15,196 --> 00:11:17,866 from the hotel channel on your television. 250 00:11:17,899 --> 00:11:20,069 From one computer, they can control everything. 251 00:11:20,101 --> 00:11:21,901 Right. It's why they sometimes charge you 252 00:11:21,936 --> 00:11:24,036 for the items in the minibar just because 253 00:11:24,072 --> 00:11:26,902 you move them. 254 00:11:26,941 --> 00:11:28,901 Now, the pressure sensor on the shelves 255 00:11:28,943 --> 00:11:29,943 sends a message to the computer telling 256 00:11:29,978 --> 00:11:33,418 its product has been consumed. 257 00:11:33,447 --> 00:11:36,217 But as we all know, computers can be hacked. 258 00:11:36,250 --> 00:11:38,360 I actually met the hat who wrote the code. 259 00:11:38,386 --> 00:11:41,286 Called it a hospitality hack. 260 00:11:41,322 --> 00:11:43,392 All right, now, once a hacker intrudes 261 00:11:43,424 --> 00:11:45,354 the hotel computer system, he has control 262 00:11:45,393 --> 00:11:47,793 over room assignments, check in, check out, 263 00:11:47,829 --> 00:11:49,969 television, 264 00:11:49,998 --> 00:11:52,068 thermostat... 265 00:11:52,100 --> 00:11:54,410 Oh, my favorite: the remote control curtains. 266 00:11:54,435 --> 00:11:56,135 Check this out. 267 00:11:57,939 --> 00:11:59,509 Wait... 268 00:11:59,540 --> 00:12:02,110 Nelson, are you really doing that? 269 00:12:02,143 --> 00:12:05,173 Did you actually hack this hotel from CTOC? 270 00:12:05,213 --> 00:12:06,913 Yeah, that was me. 271 00:12:06,948 --> 00:12:09,518 The point is if all the conveniences are connected 272 00:12:09,550 --> 00:12:11,790 through software to one central computer, 273 00:12:11,820 --> 00:12:13,890 once the hacker's inside the system, 274 00:12:13,922 --> 00:12:15,452 he can create orders for room service, 275 00:12:15,489 --> 00:12:17,229 housekeeping, laundry pickup... 276 00:12:17,258 --> 00:12:18,898 RAMIREZ: And none of it really happened. 277 00:12:18,927 --> 00:12:20,197 It just looks like it did. 278 00:12:20,228 --> 00:12:22,938 MUNDO: And all activity is recorded under the guest's name 279 00:12:22,964 --> 00:12:24,164 and room number. 280 00:12:24,198 --> 00:12:25,898 Which explains why a dead woman 281 00:12:25,934 --> 00:12:27,464 can order room service and a movie. 282 00:12:27,501 --> 00:12:29,301 RYAN: So as far as the hotel knew, 283 00:12:29,337 --> 00:12:31,137 the minibar was being restocked, 284 00:12:31,172 --> 00:12:32,842 the laundry was being picked up, 285 00:12:32,874 --> 00:12:35,374 the maids were performing turndown services. 286 00:12:35,409 --> 00:12:38,279 A hacker can control any guest's room 24/7. 287 00:12:39,580 --> 00:12:42,320 This is a very sophisticated cover-up of a murder. 288 00:12:42,350 --> 00:12:45,090 We need to know more about our victim, Adel Foster. 289 00:12:45,119 --> 00:12:47,389 Her devices are on their way to you now, Krumitz. 290 00:12:47,421 --> 00:12:49,421 We need to find this hospitality hacker. 291 00:12:49,457 --> 00:12:51,457 You can't break into a system this complex 292 00:12:51,492 --> 00:12:53,362 without leaving some digital dust behind. 293 00:12:53,394 --> 00:12:56,094 We're on it. 294 00:12:56,130 --> 00:12:57,840 All right, so we got our victim's laptop, 295 00:12:57,866 --> 00:12:59,906 tablet and destroyed cell. 296 00:12:59,934 --> 00:13:01,534 Our killer has a three-day head start. 297 00:13:01,569 --> 00:13:03,339 Puts him right where we want him. 298 00:13:03,371 --> 00:13:05,831 (chuckles) He thinks he got away with murder. 299 00:13:05,874 --> 00:13:07,144 Which means he already made a mistake 300 00:13:07,175 --> 00:13:09,045 that will lead us right to him. 301 00:13:09,077 --> 00:13:11,317 We are gonna find Adel Foster's murderer. 302 00:13:15,549 --> 00:13:17,519 NELSON: You know, I really could have 303 00:13:17,551 --> 00:13:19,281 used these things two years ago. 304 00:13:19,320 --> 00:13:21,430 But you know every time Apple introduces a new device, 305 00:13:21,455 --> 00:13:23,095 there's a new cord, a new connector, 306 00:13:23,124 --> 00:13:24,994 and then all the old stuff is not compatible with 307 00:13:25,026 --> 00:13:27,266 the new stuff, so then you... you know, you got to go back, 308 00:13:27,295 --> 00:13:29,265 buy all the new Apple products, connect them and... 309 00:13:29,297 --> 00:13:30,997 Dude, dude, really? 310 00:13:31,032 --> 00:13:32,092 We're trying to work here. 311 00:13:32,133 --> 00:13:33,633 Okay, well, then give me something to do. 312 00:13:33,667 --> 00:13:37,007 Here. Lay out all the pieces of this cell phone. 313 00:13:37,038 --> 00:13:38,238 Disassemble it, remove the circuit board, 314 00:13:38,272 --> 00:13:40,172 then scrub the resistor jumper connections. 315 00:13:40,208 --> 00:13:42,148 There's a toothbrush and alcohol solution 316 00:13:42,176 --> 00:13:44,176 right over there. Oh, okay. 317 00:13:44,212 --> 00:13:46,042 I see how you do. 318 00:13:46,080 --> 00:13:48,390 New guy gets the poop phone. What? 319 00:13:48,416 --> 00:13:50,456 I happen to know that this was the phone that was recovered 320 00:13:50,484 --> 00:13:52,084 from the toilet in the hotel room. 321 00:13:52,120 --> 00:13:53,990 He's right. 322 00:13:54,022 --> 00:13:55,352 That is the poop phone. 323 00:13:55,389 --> 00:13:57,229 Really? You're gonna encourage this? 324 00:13:57,258 --> 00:13:59,228 And you're not even that new anymore. 325 00:13:59,260 --> 00:14:00,330 Okay, you know what, Nelson? 326 00:14:00,361 --> 00:14:02,931 Fine. I will gladly take the poop phone 327 00:14:02,964 --> 00:14:05,094 if you just do me one favor and stop talking. 328 00:14:05,133 --> 00:14:06,593 Guys. Okay, what, you in a bad mood or something, Krummy? 329 00:14:06,634 --> 00:14:08,104 You want to talk about it? 330 00:14:08,136 --> 00:14:09,936 Oh. You're having girl problems. 331 00:14:09,971 --> 00:14:11,931 Oh, my... I knew it. 332 00:14:11,973 --> 00:14:13,603 Raven, could you grab me that pen over there 333 00:14:13,641 --> 00:14:15,241 and stab me with it? That would be awesome. 334 00:14:15,276 --> 00:14:17,276 Guys, will you cut it out and come here. You got no game. 335 00:14:17,311 --> 00:14:19,211 I found something. I have... I have game. 336 00:14:19,247 --> 00:14:20,147 You guys. 337 00:14:20,181 --> 00:14:22,211 I went back to the employee party invitation 338 00:14:22,250 --> 00:14:23,990 where the malware was embedded. 339 00:14:24,018 --> 00:14:26,058 I couldn't find the information on the computer that sent it. 340 00:14:26,087 --> 00:14:27,287 The hacker anonymized it. 341 00:14:27,321 --> 00:14:30,951 So, I responded yes. I got back an auto-reply confirmation, 342 00:14:30,992 --> 00:14:34,292 and guess what-- our hacker forgot to anonymize that e-mail. 343 00:14:34,328 --> 00:14:37,338 Pretty sure it's the same one that sent the invitation. 344 00:14:37,365 --> 00:14:39,095 And I got his I.P. address on the computer. 345 00:14:39,133 --> 00:14:40,603 Yeah! These guys never think two steps ahead. 346 00:14:40,634 --> 00:14:42,504 I love this job. This is gonna 347 00:14:42,536 --> 00:14:44,106 lead us right to our hacker. 348 00:14:55,583 --> 00:14:58,583 * 349 00:15:03,424 --> 00:15:05,394 Evan Wescott? Is this your computer? 350 00:15:05,426 --> 00:15:07,966 Yes. Why? FBI. 351 00:15:07,996 --> 00:15:09,596 You're under arrest for computer fraud 352 00:15:09,630 --> 00:15:11,970 in connection with the murder of Adel Foster. 353 00:15:12,000 --> 00:15:13,240 What? What are you talking about? Hey, whoa. 354 00:15:13,267 --> 00:15:15,307 Hold on a minute. I don't even know who that is. 355 00:15:15,336 --> 00:15:18,606 You got the wrong guy. (grunts) I didn't kill anybody. 356 00:15:18,639 --> 00:15:22,049 We can do this the hard way, or you can come quietly. 357 00:15:28,249 --> 00:15:31,089 You hacked the Kirkendahl Hotel's main computer, Evan. 358 00:15:31,119 --> 00:15:34,229 We know this because the I.P. address of the device used 359 00:15:34,255 --> 00:15:36,085 led us back to your laptop. 360 00:15:36,124 --> 00:15:38,094 That's impossible. I don't even know how to do 361 00:15:38,126 --> 00:15:39,726 something like that. MUNDO: You created a backdoor 362 00:15:39,760 --> 00:15:41,300 in the computer systems and took control 363 00:15:41,329 --> 00:15:42,199 of the hotel's hospitality functions-- 364 00:15:42,230 --> 00:15:43,440 maid service, 365 00:15:43,464 --> 00:15:44,634 room service, minibar. 366 00:15:44,665 --> 00:15:46,095 You murdered Adel and activated 367 00:15:46,134 --> 00:15:47,134 those services to make it look 368 00:15:47,168 --> 00:15:50,278 like she was alive three days after her death. 369 00:15:50,304 --> 00:15:52,774 What? That's insane. I didn't kill anybody. 370 00:15:52,806 --> 00:15:54,646 Your cell phone places you at the hotel 371 00:15:54,675 --> 00:15:56,645 at the exact time of Adel Foster's murder. 372 00:15:56,677 --> 00:16:01,117 Your phone's location services puts you in that hotel. 373 00:16:01,149 --> 00:16:02,589 Location services? 374 00:16:02,616 --> 00:16:04,656 MUNDO: The little program that's always running 375 00:16:04,685 --> 00:16:06,615 in the background of your phone. 376 00:16:06,654 --> 00:16:08,384 Logs everywhere you go. 377 00:16:08,422 --> 00:16:10,292 RYAN: Nifty little feature. 378 00:16:10,324 --> 00:16:14,264 See the elevation listed here? 29.7 meters. 379 00:16:14,295 --> 00:16:16,695 That's roughly seven floors. 380 00:16:16,730 --> 00:16:19,200 Her body was found in room 715. 381 00:16:19,233 --> 00:16:21,033 Okay, I-I'm not a murderer. 382 00:16:21,069 --> 00:16:22,109 MUNDO: Really? 383 00:16:22,136 --> 00:16:23,336 'Cause you sure sound like one 384 00:16:23,371 --> 00:16:25,331 in the text that you sent Adel. 385 00:16:25,373 --> 00:16:27,573 We found that on your phone. 386 00:16:29,143 --> 00:16:31,143 These are not my text messages. 387 00:16:31,179 --> 00:16:34,249 And I already told you, I don't know anybody named Adel. 388 00:16:34,282 --> 00:16:36,812 Are you sure you never talked to her? 389 00:16:36,850 --> 00:16:39,320 This is surveillance footage from your bar, Evade, 390 00:16:39,353 --> 00:16:40,383 on the night she was murdered. 391 00:16:40,421 --> 00:16:42,651 * 392 00:16:53,534 --> 00:16:56,204 I mean, 'cause that sure as hell looks like her, 393 00:16:56,237 --> 00:16:58,507 and that is definitely you. 394 00:16:58,539 --> 00:17:01,349 Look, man, a lot of people come into my club. 395 00:17:01,375 --> 00:17:03,275 And, yeah, I meet a lot of women. MUNDO: Yeah? 396 00:17:03,311 --> 00:17:05,311 Well, this one was murdered three days ago. 397 00:17:06,347 --> 00:17:07,517 Where were you? 398 00:17:07,548 --> 00:17:09,548 I was at the club. 399 00:17:09,583 --> 00:17:11,213 I'm always at the club. 400 00:17:13,321 --> 00:17:15,251 It's a pretty crowded place at night. 401 00:17:15,289 --> 00:17:18,199 Could easily step out for an hour, and no one would miss you. 402 00:17:18,226 --> 00:17:20,296 This is ridiculous. I didn't do anything. 403 00:17:20,328 --> 00:17:22,368 At first, I couldn't understand why you went to all the trouble 404 00:17:22,396 --> 00:17:25,366 to make it look like Adel was still alive. 405 00:17:25,399 --> 00:17:27,639 MUNDO: You wanted to buy yourself time 406 00:17:27,668 --> 00:17:29,838 to create an alibi. The hotel hack. 407 00:17:29,870 --> 00:17:31,380 And you certainly can't deny 408 00:17:31,405 --> 00:17:33,245 that you were capable of doing it. 409 00:17:33,274 --> 00:17:35,344 You were a computer science major 410 00:17:35,376 --> 00:17:36,806 at Kenniwick University. 411 00:17:36,844 --> 00:17:38,514 Day one, nobody found the body. 412 00:17:38,546 --> 00:17:41,346 Day two, no one came for you. 413 00:17:41,382 --> 00:17:43,852 MUNDO: Day three, you got comfortable. 414 00:17:43,884 --> 00:17:45,384 You distanced yourself from the murder. 415 00:17:45,419 --> 00:17:46,219 You thought there was no evidence 416 00:17:46,254 --> 00:17:47,324 tying you to the scene of the crime. 417 00:17:47,355 --> 00:17:50,425 You got away with murder. 418 00:17:50,458 --> 00:17:51,498 Almost. EVAN: No. 419 00:17:51,525 --> 00:17:52,695 I didn't kill anybody. 420 00:17:52,726 --> 00:17:54,426 I didn't do any of these things. 421 00:17:54,462 --> 00:17:55,722 Evan... 422 00:17:55,763 --> 00:17:59,393 your devices tell us you're lying. 423 00:18:05,439 --> 00:18:08,109 * 424 00:18:37,838 --> 00:18:38,608 MAN: Shane Tillman. 425 00:18:38,639 --> 00:18:42,809 Adel is... er, was... my girlfriend. 426 00:18:42,843 --> 00:18:44,673 I don't understand how this happened. 427 00:18:44,712 --> 00:18:46,812 Doesn't the hotel have security? 428 00:18:46,847 --> 00:18:48,717 We're still investigating the circumstances 429 00:18:48,749 --> 00:18:49,719 surrounding Adel's death. 430 00:18:49,750 --> 00:18:50,520 You mean her murder. 431 00:18:52,720 --> 00:18:54,730 When her cell kept going to voicemail, 432 00:18:54,755 --> 00:18:55,585 I called the-the hotel, and she... 433 00:18:55,623 --> 00:18:57,653 they said that she was still checked in. 434 00:18:57,691 --> 00:18:59,891 I thought that she had lost her phone. 435 00:18:59,927 --> 00:19:01,897 You know? I mean, she does that a lot. 436 00:19:01,929 --> 00:19:03,939 But I never thought... 437 00:19:07,368 --> 00:19:09,508 ...you know, that, um, that she was dead. 438 00:19:09,537 --> 00:19:11,577 You spoke to her the night that she was killed. 439 00:19:11,605 --> 00:19:12,605 Yeah, she seemed excited. 440 00:19:12,640 --> 00:19:14,280 Talking a mile a minute. 441 00:19:14,308 --> 00:19:15,578 (sniffles) 442 00:19:15,609 --> 00:19:16,549 Adel saved up money 443 00:19:16,577 --> 00:19:18,547 for months for this trip. 444 00:19:18,579 --> 00:19:21,349 You know, she had a whole itinerary: 445 00:19:21,382 --> 00:19:24,512 Coney Island, Statue of Liberty, Empire State Building, 446 00:19:24,552 --> 00:19:25,952 a couple of Broadway shows. 447 00:19:25,986 --> 00:19:27,726 Why didn't you go with her? 448 00:19:29,723 --> 00:19:31,893 I got called into work last minute. 449 00:19:31,925 --> 00:19:33,565 What do you do? 450 00:19:33,594 --> 00:19:35,794 Some part-time stuff. 451 00:19:35,829 --> 00:19:37,569 Operations and Safety at the hospital, 452 00:19:37,598 --> 00:19:38,638 and I work construction on the weekends. 453 00:19:38,666 --> 00:19:42,366 They were short on staff and needed some extra help. 454 00:19:42,403 --> 00:19:44,573 I was trying to save money so we could go to Europe. 455 00:19:46,574 --> 00:19:48,274 I think, uh... 456 00:19:48,309 --> 00:19:50,579 I think she wanted to experience New York this time on her own. 457 00:19:50,611 --> 00:19:52,271 She loved the city. 458 00:19:54,315 --> 00:19:55,745 Even though we were in East Rutherford, 459 00:19:55,783 --> 00:19:57,753 we didn't get up here often. 460 00:19:59,720 --> 00:20:01,660 I'm sorry. I, uh... 461 00:20:01,689 --> 00:20:03,359 I just can't believe 462 00:20:03,391 --> 00:20:05,291 she's gone. 463 00:20:05,326 --> 00:20:07,696 All right. Every piece is scrubbed, dried and connected. 464 00:20:07,728 --> 00:20:09,568 Between that spider this morning 465 00:20:09,597 --> 00:20:11,597 and this phone, boy, I could so use a hot shower. 466 00:20:11,632 --> 00:20:13,032 Dude, man up. 467 00:20:13,066 --> 00:20:14,236 It's time to Frankenstein this thing. 468 00:20:14,268 --> 00:20:16,908 We are gonna rebuild Adel's phone and resurrect its memory. 469 00:20:16,937 --> 00:20:18,337 You mean we can do that? 470 00:20:18,372 --> 00:20:19,932 We can actually get data off of this thing? 471 00:20:19,973 --> 00:20:21,643 Watch and learn, son. 472 00:20:21,675 --> 00:20:23,515 This is how the good guys do it. 473 00:20:23,544 --> 00:20:25,714 Watch and learn. 474 00:20:25,746 --> 00:20:27,716 * 475 00:20:47,801 --> 00:20:49,861 * 476 00:21:01,048 --> 00:21:02,948 You see what I'm seeing? 477 00:21:02,983 --> 00:21:04,083 Yeah. 478 00:21:04,117 --> 00:21:05,217 A problem. 479 00:21:05,252 --> 00:21:07,052 MUNDO: So Krumitz was able to pull some data 480 00:21:07,087 --> 00:21:09,557 off Adel's phone, but the threatening text messages 481 00:21:09,590 --> 00:21:10,760 from Evan aren't there. 482 00:21:10,791 --> 00:21:11,951 Were they deleted? 483 00:21:11,992 --> 00:21:13,492 They never existed. 484 00:21:13,527 --> 00:21:15,497 So I double-checked with Evan's service provider. 485 00:21:15,529 --> 00:21:17,569 They have no record of the calls or the texts either. 486 00:21:17,598 --> 00:21:20,568 Which means Evan didn't send or receive those texts. 487 00:21:20,601 --> 00:21:22,631 So how did they get on his phone? 488 00:21:22,670 --> 00:21:24,780 So Elijah sent me everything he pulled off 489 00:21:24,805 --> 00:21:26,475 Evan Wescott's phone. 490 00:21:26,507 --> 00:21:27,947 Those text message conversations 491 00:21:27,975 --> 00:21:30,005 between Evan and Adel were faked. 492 00:21:30,043 --> 00:21:32,573 How can somebody fake a text on another device? 493 00:21:32,613 --> 00:21:34,443 Once you get a text message into your phone, 494 00:21:34,482 --> 00:21:36,342 it's added to one long database. 495 00:21:36,384 --> 00:21:38,714 If you're smart enough and have the right software, 496 00:21:38,752 --> 00:21:40,982 you can manipulate that file and make it look 497 00:21:41,021 --> 00:21:43,851 like you're getting text messages from whoever you want. 498 00:21:43,891 --> 00:21:44,921 Whenever you want. 499 00:21:44,958 --> 00:21:48,398 Or to someone else's phone. 500 00:21:48,429 --> 00:21:51,699 Mmm. "Happy New Year, Krumitz, 501 00:21:51,732 --> 00:21:54,732 from your best pal, Sifter." 502 00:21:54,768 --> 00:21:57,708 Sent from your phone January 1, 2016. 503 00:21:57,738 --> 00:21:58,708 That is impressive. 504 00:21:58,739 --> 00:22:01,709 And a little creepy. Yeah. 505 00:22:01,742 --> 00:22:03,512 Now, would you need physical access to Evan's phone 506 00:22:03,544 --> 00:22:04,774 to fake those text messages? 507 00:22:04,812 --> 00:22:08,142 No. Plus, Evan's phone doesn't even have the software necessary 508 00:22:08,181 --> 00:22:11,151 to manipulate the database-- it had to be done remotely. 509 00:22:11,184 --> 00:22:13,684 And that's not all. GPS coordinates 510 00:22:13,721 --> 00:22:14,981 that put Evan Wescott in the hotel room 511 00:22:15,022 --> 00:22:16,482 at the time of the murder... 512 00:22:16,524 --> 00:22:17,694 Faked. Faked. 513 00:22:17,725 --> 00:22:19,825 His phone was hacked. Yeah! 514 00:22:19,860 --> 00:22:20,870 Oh... (grunts) 515 00:22:20,894 --> 00:22:23,124 Avery, 516 00:22:23,163 --> 00:22:25,863 all of our digital evidence is lying to us. 517 00:22:25,899 --> 00:22:27,809 Is Krumitz sure no mistake was made? 518 00:22:27,835 --> 00:22:28,535 He's positive. 519 00:22:28,569 --> 00:22:30,069 What about the malware injected 520 00:22:30,103 --> 00:22:32,533 into the hotel's computer system? 521 00:22:32,573 --> 00:22:34,103 It came from Evan Wescott's computer. 522 00:22:34,141 --> 00:22:36,571 But Krumitz doesn't believe Evan is our hacker. 523 00:22:36,610 --> 00:22:38,450 He's sure? SIFTER: Yes. 524 00:22:38,479 --> 00:22:40,589 And how many times have you told me that Daniel Krumitz is 525 00:22:40,614 --> 00:22:42,584 the best white hat hacker ever? 526 00:22:42,616 --> 00:22:46,616 Looks like Evan Wescott is being framed for murder. 527 00:22:52,993 --> 00:22:54,093 KRUMITZ: For someone to frame Evan, 528 00:22:54,127 --> 00:22:56,827 they had to route the intrusion through his laptop, 529 00:22:56,864 --> 00:22:58,694 change the GPS, and create those text messages. 530 00:22:58,732 --> 00:23:00,092 Maybe he framed himself. 531 00:23:00,133 --> 00:23:02,633 Clearly, you're new to this and don't understand 532 00:23:02,670 --> 00:23:04,980 the behavior of a criminal. Other than yourself. 533 00:23:05,005 --> 00:23:07,105 What I understand is I would do anything not to go to prison. 534 00:23:07,140 --> 00:23:09,950 Pretty risky to frame yourself. It's working for Evan. You believe he's innocent. 535 00:23:09,977 --> 00:23:11,577 I believe in cyber evidence. 536 00:23:11,612 --> 00:23:12,812 Okay, I'm not saying the evidence is wrong. 537 00:23:12,846 --> 00:23:15,516 I'm just saying his devices could be manipulated by anybody. 538 00:23:15,549 --> 00:23:17,219 Evidence doesn't point to the identity of a hacker. 539 00:23:17,250 --> 00:23:19,220 So what happened when we caught you? 540 00:23:19,252 --> 00:23:20,652 See, why you want to get all personal? 541 00:23:20,688 --> 00:23:21,788 What? That's what I'm saying... 542 00:23:21,822 --> 00:23:23,892 Guys? Guys? (arguing continues) 543 00:23:23,924 --> 00:23:25,854 Stop! Stop! Focus on the case! Whatever, whatever. 544 00:23:25,893 --> 00:23:26,923 Focus on the case. 545 00:23:26,960 --> 00:23:28,770 Whoever hacked them, 546 00:23:28,796 --> 00:23:30,796 gained access to at least one 547 00:23:30,831 --> 00:23:31,961 of Evan Wescott's devices. 548 00:23:31,999 --> 00:23:33,809 Evan has full access to all of his devices. 549 00:23:33,834 --> 00:23:35,104 Physical access is the easiest, 550 00:23:35,135 --> 00:23:37,475 which is why I think it's Evan. Physical access 551 00:23:37,505 --> 00:23:38,805 is also the riskiest. 552 00:23:38,839 --> 00:23:39,979 Nelson, just for a minute, 553 00:23:40,007 --> 00:23:41,977 try to buy into the fact that Adel's killer 554 00:23:42,009 --> 00:23:42,949 might not be Evan Wescott. 555 00:23:42,976 --> 00:23:46,476 The hacker behind this had to have skills. 556 00:23:46,514 --> 00:23:48,244 Evan has a computer science degree. 557 00:23:48,281 --> 00:23:49,841 (scoffs, groans) I'm just saying! 558 00:23:49,883 --> 00:23:51,913 All right, fine, I'll, uh... 559 00:23:51,952 --> 00:23:53,822 I'll play along. 560 00:23:53,854 --> 00:23:55,824 The hacker could've easily done this remotely. 561 00:23:55,856 --> 00:23:57,856 If I'd done it, I'd "war drive" him. 562 00:23:59,126 --> 00:24:01,926 Pull up to his house. 563 00:24:01,962 --> 00:24:03,632 Hack into his Wi-Fi, 564 00:24:03,664 --> 00:24:05,594 plant everything on his computer and phone 565 00:24:05,633 --> 00:24:09,633 while he's still inside, totally oblivious. 566 00:24:09,670 --> 00:24:10,980 It's still too risky. 567 00:24:11,004 --> 00:24:12,704 You're sitting outside of his house. 568 00:24:12,740 --> 00:24:14,250 What if somebody sees you? Or your car? 569 00:24:14,274 --> 00:24:17,574 The best way to do it is from the safety of your own home. 570 00:24:17,611 --> 00:24:18,911 All you have to do is "spear phish" him-- 571 00:24:18,946 --> 00:24:20,746 a socially engineered attack. 572 00:24:20,781 --> 00:24:22,741 Send Evan an e-mail with a fake link 573 00:24:22,783 --> 00:24:25,883 from his bank or something, wait for him to click on it, 574 00:24:25,919 --> 00:24:26,959 and then boom! 575 00:24:26,987 --> 00:24:28,787 Full access to his laptop 576 00:24:28,822 --> 00:24:32,022 and any device that connects to it, like his phone! 577 00:24:32,059 --> 00:24:34,729 Okay, so how you know he's gonna click on it? And when? 578 00:24:34,762 --> 00:24:36,662 Whoever did this was short on time. 579 00:24:36,697 --> 00:24:38,737 The best way to stay anonymous and get instant access 580 00:24:38,766 --> 00:24:40,196 to Evan's devices is to wait for him 581 00:24:40,233 --> 00:24:42,263 to connect to an open Wi-Fi signal somewhere. 582 00:24:42,302 --> 00:24:45,272 Anywhere they're advertising free Wi-Fi is like a hacker's 583 00:24:45,305 --> 00:24:48,105 virtual playground-- tons of unexpected people unaware 584 00:24:48,141 --> 00:24:50,271 that the person next to them sharing the same connection 585 00:24:50,310 --> 00:24:51,880 could be intruding onto their devices 586 00:24:51,912 --> 00:24:53,982 and stealing all their information. 587 00:24:54,014 --> 00:24:57,314 Or in Evan's case, adding information. 588 00:24:57,350 --> 00:24:58,820 Look, I still think he could've done it himself. 589 00:24:58,852 --> 00:24:59,812 I mean, that's just me. 590 00:24:59,853 --> 00:25:01,753 Wi-Fi is the best option. 591 00:25:01,789 --> 00:25:03,899 So... where was Evan hacked? 592 00:25:03,924 --> 00:25:05,794 Well, according to his frequent locations on Evan's phone, 593 00:25:05,826 --> 00:25:07,766 he went to the gym three or four times a week. 594 00:25:07,795 --> 00:25:09,065 Most gyms have free Wi-Fi. Restaurants, too. 595 00:25:09,096 --> 00:25:11,636 I bet you he was eating out every night. 596 00:25:11,665 --> 00:25:13,735 You know, club owners score mad dates. 597 00:25:13,767 --> 00:25:16,737 How often is he at Carla's Cafe? 598 00:25:17,805 --> 00:25:19,705 RAMIREZ: Almost every day. 599 00:25:21,775 --> 00:25:23,305 Well, according to the network logs in Evan's laptop, 600 00:25:23,343 --> 00:25:24,913 he connected to the coffee shop's Wi-Fi 601 00:25:24,945 --> 00:25:26,245 the morning after the murder. 602 00:25:26,279 --> 00:25:27,889 You still think it's a possibility 603 00:25:27,915 --> 00:25:29,145 that he framed himself? 604 00:25:29,182 --> 00:25:31,882 Yeah. I do. 605 00:25:39,126 --> 00:25:41,866 All right. So I spoke to the manager. 606 00:25:41,895 --> 00:25:42,795 The surveillance cameras are all dummies. 607 00:25:42,830 --> 00:25:44,800 They're just there as a crime deterrent. 608 00:25:44,832 --> 00:25:46,792 They don't record a damn thing. 609 00:25:46,834 --> 00:25:49,364 But... the Wi-Fi went down three days ago 610 00:25:49,402 --> 00:25:50,632 at 10:32 a.m. 611 00:25:50,671 --> 00:25:54,641 Now, according to Evan's laptop, he was long gone at that time. 612 00:25:54,675 --> 00:25:56,745 But not onto the cafe's router. 613 00:25:56,777 --> 00:26:00,077 Maybe someone set up an evil twin router. 614 00:26:00,113 --> 00:26:02,083 And that's how he got hacked. Now, my phone... 615 00:26:02,115 --> 00:26:04,115 can give the illusion of being a Wi-Fi signal, 616 00:26:04,151 --> 00:26:05,651 same as a twin router. 617 00:26:05,686 --> 00:26:08,356 All I have to do is activate my own personal hot spot 618 00:26:08,388 --> 00:26:11,328 from my device, and I am open Wi-Fi. 619 00:26:11,358 --> 00:26:13,328 I can even name it anything I want. 620 00:26:13,360 --> 00:26:16,130 Say we're in Carla's Cafe, right? 621 00:26:16,163 --> 00:26:19,993 Think I'll name my new hot spot network... 622 00:26:20,033 --> 00:26:21,763 "Carla's Cafe." 623 00:26:21,802 --> 00:26:23,262 Now, log on to the free Wi-Fi. 624 00:26:25,973 --> 00:26:27,233 (laughs) 625 00:26:27,274 --> 00:26:29,174 Which one? There are two. 626 00:26:29,209 --> 00:26:30,109 Exactly. 627 00:26:30,143 --> 00:26:32,643 The one I just created and the real one. 628 00:26:32,680 --> 00:26:34,850 I'm guessing our target eliminated 629 00:26:34,882 --> 00:26:36,982 the real Carla's Cafe Wi-Fi. 630 00:26:37,017 --> 00:26:38,757 Evan came in, 631 00:26:38,786 --> 00:26:41,686 logged on to the decoy signal... 632 00:26:41,722 --> 00:26:44,252 and the hacker gained control of his device. 633 00:26:44,291 --> 00:26:45,721 You just did all that with your phone? 634 00:26:45,759 --> 00:26:47,929 Just a few clicks of a button. 635 00:26:47,961 --> 00:26:51,661 Now, I-I can't control your device from my phone, 636 00:26:51,699 --> 00:26:53,909 but our target had an actual router. 637 00:26:53,934 --> 00:26:55,964 He was able to push any information he wanted 638 00:26:56,003 --> 00:26:59,073 onto Evan's devices. 639 00:26:59,106 --> 00:27:01,076 I mean, anytime you log on to open Wi-Fi, 640 00:27:01,108 --> 00:27:02,048 you leave yourself vulnerable. 641 00:27:02,075 --> 00:27:05,015 Or in our case, you become a murder suspect. 642 00:27:05,045 --> 00:27:05,975 It can happen to anyone. 643 00:27:06,013 --> 00:27:09,883 Looks like it just happened to Evan Wescott. 644 00:27:12,886 --> 00:27:14,326 Raven, I need you to track down 645 00:27:14,354 --> 00:27:16,424 the owner of an evil twin router. 646 00:27:27,034 --> 00:27:29,764 (chuckles) Right. 647 00:27:29,903 --> 00:27:31,203 Nelson thinks Evan framed himself. 648 00:27:31,238 --> 00:27:33,378 That would be a smart move. 649 00:27:33,406 --> 00:27:35,706 You don't really believe that, do you? 650 00:27:35,743 --> 00:27:37,243 Nelson thinks the way hackers do. 651 00:27:37,277 --> 00:27:38,917 But... 652 00:27:38,946 --> 00:27:40,986 Evan has no motive. 653 00:27:41,014 --> 00:27:43,484 And no definitive connection to Adel Foster 654 00:27:43,516 --> 00:27:46,016 other than a kiss; and kisses rarely 655 00:27:46,053 --> 00:27:47,353 get you convicted of murder. 656 00:27:51,191 --> 00:27:53,991 You miss New York. 657 00:27:54,027 --> 00:27:55,927 Yeah, feeling a bit nostalgic. 658 00:27:55,963 --> 00:27:58,963 I opened my first practice in Manhattan. 659 00:27:58,999 --> 00:28:00,499 Hung the shingle on a brownstone 660 00:28:00,533 --> 00:28:02,963 just like that one there. Went from 661 00:28:03,003 --> 00:28:05,303 analyzing minds to analyzing cyber criminals. 662 00:28:05,338 --> 00:28:08,278 Wasn't really a plan, it just happened. 663 00:28:08,308 --> 00:28:10,078 You ever think about moving back? 664 00:28:10,110 --> 00:28:11,380 No. 665 00:28:11,411 --> 00:28:13,841 I only think about one thing. 666 00:28:13,881 --> 00:28:16,481 Catching the guy that hacked and stole my files. 667 00:28:16,516 --> 00:28:19,016 There isn't a morning where I don't wake up wondering 668 00:28:19,052 --> 00:28:20,482 if today's the day that he's gonna 669 00:28:20,520 --> 00:28:22,790 release private patient information. 670 00:28:22,823 --> 00:28:24,323 And the whole nightmare will start all over again. 671 00:28:24,357 --> 00:28:26,197 We'll catch him. 672 00:28:26,226 --> 00:28:28,196 (sighs) 673 00:28:28,228 --> 00:28:31,038 You know what I miss about this place? 674 00:28:31,064 --> 00:28:32,134 The Mets. 675 00:28:32,165 --> 00:28:34,165 The Mets? (laughs) 676 00:28:35,435 --> 00:28:37,435 I would comment, but you'd probably fire me. 677 00:28:39,439 --> 00:28:41,809 But there is one question I can't shake, Elijah. 678 00:28:41,842 --> 00:28:43,172 Evan Wescott. 679 00:28:43,210 --> 00:28:44,420 What about him? 680 00:28:44,444 --> 00:28:46,174 Well, the beauty of an open Wi-Fi hack 681 00:28:46,213 --> 00:28:48,183 is its sheer randomness. 682 00:28:48,215 --> 00:28:51,385 Our killer could've framed anyone on his router 683 00:28:51,418 --> 00:28:53,288 for Adel's murder. 684 00:28:53,320 --> 00:28:55,560 You think the target chose Evan specifically. 685 00:28:55,588 --> 00:28:57,828 Adel went to Evan's club the night of the murder. 686 00:28:57,858 --> 00:28:59,958 And the next morning, Evan ends up at Carla's Cafe 687 00:28:59,993 --> 00:29:02,893 at the exact same time as the evil twin router. 688 00:29:02,930 --> 00:29:04,340 It feels personal. 689 00:29:04,364 --> 00:29:06,564 Our target crafted a murder for Evan. 690 00:29:06,599 --> 00:29:08,269 Fabricated texts 691 00:29:08,301 --> 00:29:12,001 and GPS data, linked him to the hotel hack. 692 00:29:12,039 --> 00:29:15,809 He set up Evan as a fall guy for a reason, but why? 693 00:29:18,311 --> 00:29:20,341 I identified the router that was used 694 00:29:20,380 --> 00:29:22,190 to hack Evan in Carla's Cafe. 695 00:29:22,215 --> 00:29:23,385 The latest and greatest 696 00:29:23,416 --> 00:29:25,216 in evil twin deception, huh? 697 00:29:25,252 --> 00:29:28,282 Manufacturer gave me the big box store where it was sold. 698 00:29:28,321 --> 00:29:30,051 All right, from your smirk, I'm guessing 699 00:29:30,090 --> 00:29:32,030 it was purchased recently. Mm-hmm. 700 00:29:32,059 --> 00:29:34,299 Point of sale puts that gentleman at the register. 701 00:29:34,327 --> 00:29:36,367 He paid cash. 702 00:29:36,396 --> 00:29:39,136 Get this to Avery and Elijah. 703 00:29:39,166 --> 00:29:40,336 We've got him. 704 00:29:40,367 --> 00:29:42,507 (tablet chimes) 705 00:29:42,535 --> 00:29:45,305 Look who was in Manhattan the morning after Adel's murder. 706 00:29:45,338 --> 00:29:47,478 Just got this from Raven. 707 00:29:47,507 --> 00:29:50,447 Oh. The heartbroken boyfriend. 708 00:29:56,049 --> 00:29:58,219 MUNDO: Shane Tillman, FBI! 709 00:30:06,426 --> 00:30:08,366 He's not here. 710 00:30:11,398 --> 00:30:13,338 I'm gonna image the hard drive, 711 00:30:13,366 --> 00:30:16,206 send it to Nelson and Krumitz to comb through the data. 712 00:30:16,236 --> 00:30:18,276 RYAN: Broken cup. 713 00:30:20,908 --> 00:30:22,448 Damaged wall. 714 00:30:22,475 --> 00:30:23,915 There was an argument. 715 00:30:28,681 --> 00:30:30,281 Adel wasn't visiting New York. 716 00:30:30,317 --> 00:30:33,017 She was running away from Shane. 717 00:30:33,053 --> 00:30:35,123 You know, something struck me as odd when I saw 718 00:30:35,155 --> 00:30:37,525 the bruises on her wrist at the crime scene. 719 00:30:37,557 --> 00:30:40,327 Look. They're purple, almost black. 720 00:30:40,360 --> 00:30:42,400 If she'd gotten these during the struggle the night 721 00:30:42,429 --> 00:30:45,039 that she was killed, they'd be pink or not even visible. 722 00:30:45,065 --> 00:30:47,565 She got these before the night she was killed. 723 00:30:51,038 --> 00:30:54,348 Adel was leaving Shane. 724 00:30:54,374 --> 00:30:55,644 He came home. 725 00:31:00,013 --> 00:31:01,043 Stop it! 726 00:31:01,081 --> 00:31:02,311 He pulled her things out of her bag 727 00:31:02,349 --> 00:31:04,119 to prevent her from leaving. 728 00:31:04,151 --> 00:31:05,581 When she escaped, he grabbed her wrists, 729 00:31:05,618 --> 00:31:07,058 which caused the bruising. 730 00:31:07,087 --> 00:31:08,357 (both grunting) 731 00:31:08,388 --> 00:31:10,388 Oh, God! (groaning) 732 00:31:15,228 --> 00:31:18,638 When she left, he started drinking. 733 00:31:18,665 --> 00:31:20,095 He followed her 734 00:31:20,133 --> 00:31:21,603 to New York and he killed her. 735 00:31:21,634 --> 00:31:25,204 My God. 736 00:31:25,238 --> 00:31:28,308 Even when women get the courage to leave abusive relationships, 737 00:31:28,341 --> 00:31:30,441 sometimes they still get killed. 738 00:31:30,477 --> 00:31:32,317 So what's his next move? 739 00:31:32,345 --> 00:31:34,415 Well, he's angry. 740 00:31:34,447 --> 00:31:36,117 He's calculated. 741 00:31:36,149 --> 00:31:37,449 He's got nothing to lose. 742 00:31:45,092 --> 00:31:47,322 And he's armed and dangerous. 743 00:31:47,360 --> 00:31:48,970 RAMIREZ: I just hit a dead end. 744 00:31:48,996 --> 00:31:50,666 Tillman's phone's not showing a signal. 745 00:31:50,697 --> 00:31:53,437 He must have turned it off. There's no way to track him. 746 00:31:53,466 --> 00:31:55,336 I'll see what we can do with Tillman's laptop. 747 00:31:55,368 --> 00:31:57,438 His recent online activity should give us a glimpse 748 00:31:57,470 --> 00:31:58,380 into his state of mind. 749 00:31:58,405 --> 00:31:59,435 Yeah, browser history has been cleared. 750 00:31:59,472 --> 00:32:02,072 Yeah, well, clearing your history may hide porn sites 751 00:32:02,109 --> 00:32:04,349 from your girlfriend, but it won't hide anything from me. 752 00:32:04,377 --> 00:32:08,247 Browser artifacts are easily recovered with the right tools. 753 00:32:08,281 --> 00:32:10,441 Oh, check it out. Mostly New York news affiliates. 754 00:32:10,483 --> 00:32:12,983 He's following the Adel Foster murder investigation. You think he knows 755 00:32:13,020 --> 00:32:14,430 we're onto him? Always assume 756 00:32:14,454 --> 00:32:16,124 that the bad guys are two steps ahead of you, Nelson. 757 00:32:16,156 --> 00:32:17,356 That way, you're prepared for anything, 758 00:32:17,390 --> 00:32:19,260 and you're never caught off guard. 759 00:32:19,292 --> 00:32:22,592 Hey, man, he visited a cell phone locating site? 760 00:32:22,629 --> 00:32:24,439 I mean, what, he lost his cell phone? 761 00:32:24,464 --> 00:32:26,194 No, he wasn't looking for his phone. 762 00:32:26,233 --> 00:32:28,063 He was tracking someone else. Look. 763 00:32:28,101 --> 00:32:29,361 That area code is 212. 764 00:32:29,402 --> 00:32:31,372 That's New York, not Jersey. 765 00:32:31,404 --> 00:32:33,404 KRUMITZ: I'll call Elijah. 766 00:32:33,440 --> 00:32:35,710 Elijah, Shane Tillman is using 767 00:32:35,742 --> 00:32:37,702 a cell phone location tracking site. 768 00:32:37,744 --> 00:32:39,474 He's going after Evan Wescott! 769 00:32:39,512 --> 00:32:41,442 * 770 00:33:20,153 --> 00:33:21,653 Whoa, whoa, whoa, hey. 771 00:33:21,688 --> 00:33:23,328 Problem is with me. 772 00:33:23,356 --> 00:33:24,826 Just let these people go. Shut up! 773 00:33:24,857 --> 00:33:27,357 This wouldn't be happening if it wasn't for you. 774 00:33:27,394 --> 00:33:29,564 You took her away from me. Buddy, I think you got the wrong guy. 775 00:33:29,596 --> 00:33:31,636 It was you! It was you! 776 00:33:31,664 --> 00:33:34,434 I saw you with Adel right here in this bar. 777 00:33:43,276 --> 00:33:46,316 Look, man, just drop the gun, and we can talk 778 00:33:46,346 --> 00:33:48,446 about whatever it is that you think may have happened. 779 00:33:48,481 --> 00:33:50,781 No, I know what happened! I know what happened! 780 00:33:50,817 --> 00:33:52,617 (siren wailing) 781 00:33:59,559 --> 00:34:01,469 You took her away from me. 782 00:34:01,494 --> 00:34:02,824 Of course, you don't remember. 783 00:34:02,862 --> 00:34:04,532 There's so many women, aren't there? 784 00:34:04,564 --> 00:34:05,864 You just have to have them all? 785 00:34:05,898 --> 00:34:08,808 I needed a chance to explain, to say I was sorry. 786 00:34:08,835 --> 00:34:12,135 To say I was sorry. 787 00:34:12,172 --> 00:34:13,772 But you... you were all over her. 788 00:34:13,806 --> 00:34:16,246 And I could see in her eyes, she wasn't coming back to me. 789 00:34:16,276 --> 00:34:17,746 Shane? 790 00:34:18,878 --> 00:34:20,848 Stay where you are! 791 00:34:22,149 --> 00:34:23,849 Stay where you are! 792 00:34:23,883 --> 00:34:26,753 Or this isn't gonna end the way you want it to. 793 00:34:26,786 --> 00:34:28,856 Let her go and put down the gun. 794 00:34:28,888 --> 00:34:30,828 He killed my girlfriend, and you did nothing. 795 00:34:30,857 --> 00:34:31,957 You set him free. 796 00:34:31,991 --> 00:34:33,821 At the count of three, I'm gonna discharge this weapon. 797 00:34:33,860 --> 00:34:35,200 You need to decide 798 00:34:35,228 --> 00:34:37,198 what you're gonna do. One, two... 799 00:34:37,230 --> 00:34:38,600 Okay. 800 00:34:38,631 --> 00:34:40,261 Okay. 801 00:34:42,535 --> 00:34:43,505 Good. 802 00:34:43,536 --> 00:34:44,676 Now kick it towards me. 803 00:35:04,324 --> 00:35:05,624 Stay right where you are. 804 00:35:10,197 --> 00:35:12,237 W-Wait, don't do that, don't do that. 805 00:35:12,265 --> 00:35:14,265 I can't live without her! 806 00:35:14,301 --> 00:35:15,361 Shane. Shane! 807 00:35:18,605 --> 00:35:19,705 I got you! 808 00:35:19,739 --> 00:35:20,839 Hang on! 809 00:35:20,873 --> 00:35:22,203 I got you! 810 00:35:43,963 --> 00:35:46,163 * 811 00:36:08,688 --> 00:36:09,988 RYAN: Are you okay? 812 00:36:10,022 --> 00:36:12,722 Yeah. Yeah. 813 00:36:12,759 --> 00:36:13,899 We got him. 814 00:36:13,926 --> 00:36:15,566 We're not done. 815 00:36:15,595 --> 00:36:17,695 We still haven't put Shane Tillman 816 00:36:17,730 --> 00:36:19,870 in that hotel room at the time of the murder. 817 00:36:19,899 --> 00:36:22,239 We still have to prove who killed Adel Foster. 818 00:36:24,571 --> 00:36:26,001 Anything on Shane's phone? 819 00:36:26,038 --> 00:36:28,508 I need to know what we've got before I question him. 820 00:36:28,541 --> 00:36:29,571 SIFTER: Well, nothing concrete. 821 00:36:29,609 --> 00:36:31,419 I'm heading in now for an update. 822 00:36:31,444 --> 00:36:33,274 KRUMITZ: Yeah! NELSON: That's what I'm talking about! 823 00:36:33,313 --> 00:36:34,413 We got it. 824 00:36:34,447 --> 00:36:36,217 We found proof. 825 00:36:37,016 --> 00:36:38,986 (stammers) 826 00:36:39,018 --> 00:36:40,918 I'm gonna call you back. 827 00:36:40,953 --> 00:36:42,983 Wh-What kind of proof did you find? 828 00:36:43,022 --> 00:36:46,422 Proof that Shane Tillman was at the scene of the crime. 829 00:36:46,459 --> 00:36:48,529 Proof that he murdered Adel Foster? 830 00:36:48,561 --> 00:36:49,891 If we're lucky, both. 831 00:36:49,929 --> 00:36:51,599 It's called a motion tracking chip. 832 00:36:51,631 --> 00:36:52,891 Most new smartphones have them, 833 00:36:52,932 --> 00:36:54,162 but most people don't know they exist. 834 00:36:54,200 --> 00:36:57,370 It's a motion co-processor that collects and stores motion data 835 00:36:57,404 --> 00:37:00,374 on the phone's accelerometers, gyroscopes and compasses. 836 00:37:00,407 --> 00:37:01,607 All right, so basically it just... 837 00:37:01,641 --> 00:37:02,871 it records movement. 838 00:37:02,909 --> 00:37:04,879 Yeah, it's how an exercise app knows the difference 839 00:37:04,911 --> 00:37:06,411 between when you're jogging versus walking, 840 00:37:06,446 --> 00:37:08,616 which direction you're headed-- 841 00:37:08,648 --> 00:37:10,518 pretty much however your phone's moving. 842 00:37:10,550 --> 00:37:11,760 KRUMITZ: As the phone moves, 843 00:37:11,784 --> 00:37:14,324 the motion tracking chip records all of it. 844 00:37:14,354 --> 00:37:16,054 It will detect a pitch, a roll, a tilt-- 845 00:37:16,088 --> 00:37:18,058 every movement the phone makes. 846 00:37:18,090 --> 00:37:20,600 Right, and it's always on. And it's separate from the main processor. 847 00:37:20,627 --> 00:37:22,597 Let me get this right-- so if data were altered 848 00:37:22,629 --> 00:37:24,939 on that device, it would never cross your minds 849 00:37:24,964 --> 00:37:26,594 to manipulate that file. 850 00:37:26,633 --> 00:37:28,603 Exactly. So we pulled all the data 851 00:37:28,635 --> 00:37:32,705 off Shane's motion tracking chip, and this is what we found. 852 00:37:32,739 --> 00:37:34,609 So the one on the left is the motion tracking chip 853 00:37:34,641 --> 00:37:37,001 from Shane's phone; the one on the right is Adele's. 854 00:37:37,043 --> 00:37:38,273 Yeah, we synced both of them up 855 00:37:38,311 --> 00:37:40,971 to the last time Adel's phone moved before she was murdered. 856 00:37:47,354 --> 00:37:49,354 NELSON: Most people keep their phones in their pants pockets. 857 00:37:49,389 --> 00:37:51,459 KRUMITZ: Which means the phone was recording their movement. 858 00:37:51,491 --> 00:37:54,891 So if two people were fighting, and we had both phones... 859 00:37:54,927 --> 00:37:56,327 SIFTER: Right, we could reenact the fight. 860 00:37:56,363 --> 00:37:57,493 NELSON: Yeah. 861 00:38:15,415 --> 00:38:16,715 Who is he?! 862 00:38:16,749 --> 00:38:18,889 Who is he? 863 00:38:18,918 --> 00:38:20,718 Tell me who he is! Leave me alone! 864 00:38:20,753 --> 00:38:22,753 I'm not your girlfriend anymore! 865 00:38:40,507 --> 00:38:42,377 Adel? 866 00:38:51,984 --> 00:38:54,584 Well, this not only puts Shane Tillman in the room 867 00:38:54,621 --> 00:38:58,121 at the time of the murder, it proves that he killed her. 868 00:39:04,897 --> 00:39:07,537 AVERY: You covered your tracks from every possible angle. 869 00:39:07,567 --> 00:39:09,537 You wiped your phone of any wrongdoing, 870 00:39:09,569 --> 00:39:11,539 pushed all the evidence to Evan's devices, 871 00:39:11,571 --> 00:39:14,841 you even hacked the hotel, wiped its security footage. 872 00:39:14,874 --> 00:39:16,844 RYAN: It was all very clever. 873 00:39:16,876 --> 00:39:19,076 But you forgot one thing. 874 00:39:19,111 --> 00:39:21,071 One thing most people don't know about-- 875 00:39:21,113 --> 00:39:23,883 your phone's motion tracking chip. 876 00:39:26,052 --> 00:39:29,722 Cyber-synchronized offender and victim. 877 00:39:31,724 --> 00:39:34,464 Records every movement. 878 00:39:34,494 --> 00:39:37,424 Proves you killed your girlfriend. 879 00:39:37,464 --> 00:39:38,934 (sniffles) 880 00:39:53,946 --> 00:39:55,946 What's this? 881 00:39:59,085 --> 00:40:00,415 NELSON: No! (Ryan stammers) 882 00:40:01,521 --> 00:40:03,081 No, no! You freed it?! 883 00:40:03,122 --> 00:40:04,752 Oh, what? 884 00:40:04,791 --> 00:40:07,451 Uh, there was a cup in the middle of the floor. 885 00:40:07,494 --> 00:40:08,924 Hey, welcome back. 886 00:40:08,961 --> 00:40:10,461 Good job. (grumbles) 887 00:40:10,497 --> 00:40:13,167 He has been preoccupied with a little spider. 888 00:40:13,199 --> 00:40:14,839 What is all that? (chuckles) 889 00:40:14,867 --> 00:40:16,537 What? Some compressed air. 890 00:40:16,569 --> 00:40:18,109 I was gonna turn it over, zap it, freeze it, 891 00:40:18,137 --> 00:40:19,537 then I was gonna set it free. 892 00:40:19,572 --> 00:40:20,932 Aw. Cryonic preservation? 893 00:40:20,973 --> 00:40:22,903 I'm not hunting that thing down again. 894 00:40:22,942 --> 00:40:25,842 Okay, I will help you look for your spider. 895 00:40:25,878 --> 00:40:26,878 Thank you. 896 00:40:26,913 --> 00:40:27,973 We'll find it, 897 00:40:28,014 --> 00:40:29,514 and Elijah will arrest it. Yeah. 898 00:40:29,549 --> 00:40:30,489 KRUMITZ: Well, now I have to help. 899 00:40:30,517 --> 00:40:32,517 Yeah. (shouts) 900 00:40:32,552 --> 00:40:34,152 Why... why would y'all do that? (laughter) 901 00:40:34,186 --> 00:40:35,626 Why would y'all do that?! 902 00:40:35,655 --> 00:40:39,625 Captioning sponsored by CBS 903 00:40:39,659 --> 00:40:41,669 Captioned by Media Access Group at WGBH access.wgbh.org