1
00:00:00,822 --> 00:00:01,822
My name is Avery Ryan.
2
00:00:01,856 --> 00:00:03,356
I was a victim of cyber crime.
3
00:00:03,392 --> 00:00:05,822
Like you, I posted
on social media,
4
00:00:05,860 --> 00:00:08,670
checked my bank account
balance online,
5
00:00:08,697 --> 00:00:10,667
even kept
the confidential files
6
00:00:10,699 --> 00:00:13,069
of my psychological practice
on my computer.
7
00:00:14,703 --> 00:00:17,603
Then I was hacked,
and as a result,
8
00:00:17,639 --> 00:00:20,179
one of my patients
was murdered.
9
00:00:20,209 --> 00:00:22,619
My investigation into her death
led me to the FBI,
10
00:00:22,644 --> 00:00:25,414
where I joined a team
of cyber experts
11
00:00:25,447 --> 00:00:28,317
to wage a war against
a new breed of criminal
12
00:00:28,350 --> 00:00:31,360
hiding on the Deep Web...
13
00:00:31,386 --> 00:00:34,386
infiltrating our daily lives
in ways we never imagined...
14
00:00:36,158 --> 00:00:38,128
...faceless...
15
00:00:38,160 --> 00:00:40,330
nameless...
16
00:00:40,362 --> 00:00:42,132
lurking inside our devices,
17
00:00:42,164 --> 00:00:44,564
just a keystroke away.
18
00:00:47,902 --> 00:00:50,072
(panting)
19
00:01:16,165 --> 00:01:18,165
Danny...
20
00:01:18,200 --> 00:01:19,910
RYAN:
It's all right. It's...
21
00:01:19,934 --> 00:01:22,174
Come... come join me
and your brother.
22
00:01:43,825 --> 00:01:44,795
REPORTER:
Good evening, Detroit.
23
00:01:44,826 --> 00:01:46,266
This is your eye in the sky.
24
00:01:46,295 --> 00:01:47,625
It appears a portion
of the downtown area
25
00:01:47,662 --> 00:01:49,632
is experiencing a power outage.
26
00:01:49,664 --> 00:01:52,704
REPORTER 2:
Traffic in the area is
at an absolute standstill.
27
00:01:52,734 --> 00:01:54,864
REPORTER 3:
Police are on the scene
to manage any outbreaks
28
00:01:54,903 --> 00:01:56,173
of violence or looting.
29
00:01:56,205 --> 00:01:58,175
However, thus far
only a handful
30
00:01:58,207 --> 00:02:00,707
of minor incidents
have been reported.
31
00:02:03,745 --> 00:02:05,575
I've got
25 blocks
32
00:02:05,614 --> 00:02:06,844
of downtown Detroit in the dark.
33
00:02:06,881 --> 00:02:08,581
Backup systems
are completely unresponsive.
34
00:02:08,617 --> 00:02:10,217
You guys sure this is
a case for the FBI?
35
00:02:10,252 --> 00:02:12,752
We're FBI Cyber, this is
exactly our kind of case.
36
00:02:12,787 --> 00:02:15,227
From what we can tell, you're
experiencing a cyber intrusion.
37
00:02:15,257 --> 00:02:17,757
Your power grid's
been hacked.
38
00:02:17,792 --> 00:02:20,562
REPORTER:
We just got an update
from Detroit River Electric,
39
00:02:20,595 --> 00:02:22,235
and they're still working
on the power outage
40
00:02:22,264 --> 00:02:23,434
in the downtown area.
41
00:02:54,963 --> 00:02:55,893
Uh...
42
00:02:55,930 --> 00:02:57,640
The smart grid allows
for complete control
43
00:02:57,666 --> 00:02:59,436
of the city's entire power
supply from this room.
44
00:02:59,468 --> 00:03:01,008
Right now,
someone else is in control.
45
00:03:01,035 --> 00:03:03,235
RAMIREZ:
SCADA systems like this
should be impenetrable.
46
00:03:03,272 --> 00:03:04,972
But someone remotely hacked in,
47
00:03:05,006 --> 00:03:06,376
then locked out
every computer here
48
00:03:06,408 --> 00:03:07,808
by erasing the startup disk.
49
00:03:07,842 --> 00:03:08,642
Even if you two successfully
50
00:03:08,677 --> 00:03:10,817
recover the disk
and reboot the system
51
00:03:10,845 --> 00:03:12,585
you'll still have
to counter-hack the target
52
00:03:12,614 --> 00:03:13,984
to get the power back on.
53
00:03:14,015 --> 00:03:15,545
Yeah, we're halfway
there already.
54
00:03:15,584 --> 00:03:17,584
RAMIREZ:
The odd thing
about all this
55
00:03:17,619 --> 00:03:19,829
is the blackout affects
only 25 blocks.
56
00:03:19,854 --> 00:03:21,454
When I hacked
the New Hampshire grid,
57
00:03:21,490 --> 00:03:22,930
I took out the whole state.
58
00:03:22,957 --> 00:03:24,027
Oh, so we bragging now?
59
00:03:24,058 --> 00:03:25,328
RYAN:
No, no.
60
00:03:25,360 --> 00:03:26,400
Raven's asking
the right question.
61
00:03:26,428 --> 00:03:30,038
Why limit this power outage
to such a focused area?
62
00:03:30,064 --> 00:03:31,994
A hacker's objective
is usually
63
00:03:32,033 --> 00:03:33,903
to affect as many
people as possible.
64
00:03:33,935 --> 00:03:36,505
This was a precision attack.
65
00:03:36,538 --> 00:03:38,408
There will be another phase
to this outage.
66
00:03:38,440 --> 00:03:41,010
He's using the SCADA attack
as camouflage.
67
00:03:41,042 --> 00:03:43,372
The faster we get
those lights on,
68
00:03:43,412 --> 00:03:44,212
the sooner we will uncover
69
00:03:44,245 --> 00:03:45,775
what our target's
true intensions are.
70
00:03:48,550 --> 00:03:49,390
NELSON:
Really?
71
00:03:49,418 --> 00:03:51,018
The whole state
of New Hampshire, huh?
72
00:03:51,052 --> 00:03:52,482
(laughs)
73
00:03:52,521 --> 00:03:54,321
I wanted a three-day weekend.
74
00:03:54,356 --> 00:03:55,586
(chuckles)
75
00:03:55,624 --> 00:03:57,324
Hey, by the way...
Yo.
76
00:03:57,359 --> 00:03:59,799
...happy two-month
anniversary.
77
00:03:59,828 --> 00:04:00,998
We dating?
78
00:04:01,029 --> 00:04:03,369
No, stupid.
79
00:04:03,398 --> 00:04:04,538
Two months
80
00:04:04,566 --> 00:04:06,336
at the Cyber Crime Division.
81
00:04:06,368 --> 00:04:08,368
You're officially
82
00:04:08,403 --> 00:04:09,333
in the family.
83
00:04:09,371 --> 00:04:10,671
Don't mess up.
84
00:04:10,705 --> 00:04:12,005
I want you to stick around.
85
00:04:18,480 --> 00:04:21,790
Got a live feed to the Emergency
Operation Bureau's incident map.
86
00:04:21,816 --> 00:04:23,086
The blackout is affecting
the central hub of the city,
87
00:04:23,117 --> 00:04:25,417
both the government and
the financial districts.
88
00:04:25,454 --> 00:04:27,324
Our target could be looking
to hit the federal building,
89
00:04:27,356 --> 00:04:29,556
district court,
city jail,
90
00:04:29,591 --> 00:04:30,891
baseball stadium,
three banks
91
00:04:30,925 --> 00:04:32,095
or countless privately
owned businesses.
92
00:04:32,126 --> 00:04:35,096
Power outage is a great way
to disable security alarms.
93
00:04:35,129 --> 00:04:36,669
There are several incidents
of traffic gridlock.
94
00:04:36,698 --> 00:04:39,568
Whatever our hacker's doing,
95
00:04:39,601 --> 00:04:40,261
he's gonna want
to make a getaway.
96
00:04:40,301 --> 00:04:42,101
So let's focus on the buildings
97
00:04:42,136 --> 00:04:44,636
on the fringe of the blacked out
area of the city.
98
00:04:44,673 --> 00:04:46,073
Locations still in the dark
99
00:04:46,107 --> 00:04:48,047
but where the target won't
get caught in the traffic jam
100
00:04:48,076 --> 00:04:50,046
caused by the blackout
while trying to flee.
101
00:04:50,078 --> 00:04:52,078
And let's rule out any area
that borders the rail line.
102
00:04:52,113 --> 00:04:54,883
It's a bad idea
to cross the tracks
103
00:04:54,916 --> 00:04:58,416
and risk getting trapped
behind a closed train crossing.
104
00:04:58,453 --> 00:04:59,853
Hey, guys, we're back online!
105
00:05:05,394 --> 00:05:06,424
We're back in control,
106
00:05:06,461 --> 00:05:07,891
but the lights still aren't on.
107
00:05:07,929 --> 00:05:09,569
Yeah, that's gonna
take a minute.
108
00:05:09,598 --> 00:05:11,438
Our hacker's still active
in the system.
109
00:05:11,466 --> 00:05:13,506
Raven's writing a patch
to seal the intrusion.
110
00:05:13,535 --> 00:05:14,805
Wait a minute.
111
00:05:14,836 --> 00:05:16,136
If he's still active
in the system,
112
00:05:16,170 --> 00:05:18,110
that means he needs to maintain
a live connection
113
00:05:18,139 --> 00:05:19,239
to the power station
for some reason.
114
00:05:19,273 --> 00:05:22,373
Nelson, can you inject malicious
code into Raven's patch?
115
00:05:22,411 --> 00:05:25,471
Infiltrate his laptop
before you boot him off.
116
00:05:25,514 --> 00:05:26,814
Tag him so we can track him.
117
00:05:26,848 --> 00:05:28,448
RYAN:
If he uses that computer again,
118
00:05:28,483 --> 00:05:29,583
we'll know where he is.
119
00:05:29,618 --> 00:05:32,628
We may get a location
and possibly his identity.
120
00:05:32,654 --> 00:05:34,384
I want that power on
121
00:05:34,423 --> 00:05:35,523
and that hacker
in handcuffs.
122
00:05:35,557 --> 00:05:36,827
You got it boss, I'm on it.
123
00:05:43,898 --> 00:05:45,898
(lock clunks)
124
00:05:58,547 --> 00:06:00,547
MAN:
Yeah, Pa,
power's still out.
125
00:06:00,582 --> 00:06:02,452
I'm just gonna
check out the store.
126
00:06:27,241 --> 00:06:28,841
(door clunks)
127
00:06:28,877 --> 00:06:29,847
MAN:
Hey!
128
00:06:29,878 --> 00:06:31,048
Who the hell are you?!
129
00:06:31,079 --> 00:06:32,049
(grunts)
130
00:06:32,080 --> 00:06:33,090
(body thuds to floor)
131
00:06:36,751 --> 00:06:38,711
(alarm ringing)
132
00:06:48,663 --> 00:06:51,663
Police responded
to the security alarm,
133
00:06:51,700 --> 00:06:53,740
found the store owner's son,
134
00:06:53,768 --> 00:06:56,878
Benjamin Christos, shot dead.
135
00:06:56,905 --> 00:06:59,105
Single father, two children.
136
00:06:59,140 --> 00:07:00,680
Was he here when
the power went out,
137
00:07:00,709 --> 00:07:02,079
Detective Dorn?
138
00:07:02,110 --> 00:07:03,020
DORN:
Store wasn't open today.
139
00:07:03,044 --> 00:07:04,744
We figured he came to
protect the property
140
00:07:04,779 --> 00:07:06,149
against possible
looters--
141
00:07:06,180 --> 00:07:07,550
interrupted
the robbery.
142
00:07:07,582 --> 00:07:09,212
It's an auto safe dialer.
143
00:07:09,250 --> 00:07:11,260
It cycles through
every possible combination
144
00:07:11,285 --> 00:07:12,755
till it lands
on the right one.
145
00:07:12,787 --> 00:07:14,687
All the thief
needed was time.
146
00:07:14,723 --> 00:07:16,153
Explains why
the computer maintained
147
00:07:16,190 --> 00:07:18,230
a live connection
to the power grid.
148
00:07:18,259 --> 00:07:19,229
Had to ensure
that the lights
149
00:07:19,260 --> 00:07:20,230
and the alarm systems
150
00:07:20,261 --> 00:07:21,591
stayed off.
151
00:07:21,630 --> 00:07:22,740
Looks like
the power outage
152
00:07:22,764 --> 00:07:24,234
was masking
a jewelry store robbery.
153
00:07:24,265 --> 00:07:27,165
Well, what did they take?
154
00:07:27,201 --> 00:07:29,531
DORN:
From what we can tell,
155
00:07:29,571 --> 00:07:30,901
the thief left empty-handed.
156
00:07:30,939 --> 00:07:31,809
We do know
157
00:07:31,840 --> 00:07:33,850
most of the jewelry's
on consignment.
158
00:07:33,875 --> 00:07:35,245
The Christos
don't own it.
159
00:07:35,276 --> 00:07:38,016
That computer...
It was in the vault
when first responders arrived.
160
00:07:38,046 --> 00:07:40,516
Why lock a computer
in a vault?
161
00:07:40,549 --> 00:07:43,119
Well, there's one way
to find out.
162
00:07:45,720 --> 00:07:47,090
RYAN:
Somebody went to
all this trouble--
163
00:07:47,121 --> 00:07:48,621
they even
killed a man--
164
00:07:48,657 --> 00:07:50,157
to leave with
absolutely nothing?
165
00:07:50,191 --> 00:07:51,251
I'm not buying it.
166
00:07:51,292 --> 00:07:52,792
All right.
167
00:07:52,827 --> 00:07:54,127
No modem installed,
no way to connect
168
00:07:54,162 --> 00:07:55,722
to the Internet.
169
00:07:55,764 --> 00:07:57,534
There's only
one thing on it.
170
00:07:57,566 --> 00:07:59,566
A bitcoin account
with a zero balance.
171
00:07:59,601 --> 00:08:01,831
This wasn't a jewel heist.
172
00:08:01,870 --> 00:08:03,980
This was a bitcoin heist.
173
00:08:04,005 --> 00:08:05,535
WOMAN:
Ben came down
174
00:08:05,574 --> 00:08:07,544
to check on the store.
175
00:08:07,576 --> 00:08:09,616
The blackout...
176
00:08:09,644 --> 00:08:10,944
I should've come with him.
177
00:08:10,979 --> 00:08:13,319
But he talked me out of it.
178
00:08:13,347 --> 00:08:15,117
There was a computer
in the vault.
179
00:08:15,149 --> 00:08:16,659
It's the bitcoin computer.
180
00:08:16,685 --> 00:08:18,315
Benjamin's idea.
181
00:08:18,352 --> 00:08:21,182
I really don't understand it.
182
00:08:21,222 --> 00:08:23,292
But he was
so passionate.
183
00:08:23,324 --> 00:08:26,564
He said bitcoin was
the currency of the future.
184
00:08:26,595 --> 00:08:28,665
Ben was taking over
the family business
185
00:08:28,697 --> 00:08:32,907
and I promised I would
trust his judgment.
186
00:08:32,934 --> 00:08:35,134
But now...
187
00:08:35,169 --> 00:08:38,039
my son was killed
over... over this...
188
00:08:38,072 --> 00:08:39,902
this imaginary currency?
189
00:08:39,941 --> 00:08:41,741
(Tabitha sobs)
190
00:08:41,776 --> 00:08:43,716
Do you know
how many bitcoins you had?
191
00:08:45,346 --> 00:08:47,586
Almost half
a million dollars' worth.
192
00:08:47,616 --> 00:08:49,586
Most of our
retirement.
193
00:08:49,618 --> 00:08:52,688
MUNDO:
In order to access
194
00:08:52,721 --> 00:08:53,881
and steal your bitcoin,
195
00:08:53,922 --> 00:08:55,822
the thief would have needed
the passkey to your account.
196
00:08:55,857 --> 00:08:59,697
And it was stored
on the computer in the vault.
197
00:08:59,728 --> 00:09:00,928
Who else knew it was there?
198
00:09:05,266 --> 00:09:06,236
Ellis, no.
199
00:09:06,267 --> 00:09:07,767
He wouldn't.
200
00:09:07,802 --> 00:09:09,032
Stephen.
201
00:09:09,070 --> 00:09:10,140
Our oldest son.
202
00:09:10,171 --> 00:09:13,301
He was supposed to take
over the business, but...
203
00:09:13,341 --> 00:09:16,201
Ben had so much more ambition.
204
00:09:16,244 --> 00:09:17,774
Drive.
205
00:09:17,812 --> 00:09:21,112
I-I begged them both
to run it together,
206
00:09:21,149 --> 00:09:23,359
but the boys didn't
see eye to eye.
207
00:09:23,384 --> 00:09:24,614
RYAN:
Thank you both.
208
00:09:25,386 --> 00:09:28,656
We'll be in touch.
209
00:09:30,892 --> 00:09:32,252
Bad blood between brothers.
210
00:09:32,293 --> 00:09:34,023
Half a million dollars
at stake.
211
00:09:34,062 --> 00:09:36,022
And Stephen would have known
that taking the bitcoin
212
00:09:36,064 --> 00:09:37,964
over of the jewelry
was hassle-free.
213
00:09:37,999 --> 00:09:40,039
Transfer it from one
account to another,
214
00:09:40,068 --> 00:09:41,708
it's... well,
almost untraceable.
215
00:09:41,736 --> 00:09:42,736
No serial numbers.
216
00:09:42,771 --> 00:09:43,731
Nothing to fence.
217
00:09:43,772 --> 00:09:45,002
Sounds like we
have to have
218
00:09:45,039 --> 00:09:47,179
a little chat with
Stephen Christos.
219
00:09:47,208 --> 00:09:49,008
When the power came back on,
220
00:09:49,043 --> 00:09:51,173
so did the jewelry store's
security camera.
221
00:09:58,319 --> 00:09:59,359
Is this Stephen?
222
00:09:59,387 --> 00:10:01,657
No.
223
00:10:01,690 --> 00:10:04,200
I have never seen that man
before in my life.
224
00:10:04,225 --> 00:10:05,755
Is this the man
who murdered our son?
225
00:10:05,794 --> 00:10:08,864
Took our grandchildren's
father from them?
226
00:10:08,897 --> 00:10:10,397
Now we have a face.
227
00:10:10,431 --> 00:10:12,931
We just need a name.
228
00:10:21,209 --> 00:10:24,449
So, no luck identifying
our bitcoin thief, huh?
229
00:10:24,478 --> 00:10:25,778
No, sir.
230
00:10:25,814 --> 00:10:27,184
Ran the facial recognition.
231
00:10:27,215 --> 00:10:28,415
Big dead end.
232
00:10:28,449 --> 00:10:30,119
Guy's not in the FBI database.
233
00:10:30,151 --> 00:10:32,951
But the bitcoins have
provided an interesting lead.
234
00:10:32,987 --> 00:10:36,797
The biggest misconception
about bitcoins
235
00:10:36,825 --> 00:10:37,855
is that it's anonymous.
236
00:10:37,892 --> 00:10:39,022
I mean, that's why it's
237
00:10:39,060 --> 00:10:40,430
the preferred currency
of the Deep Web.
238
00:10:40,461 --> 00:10:43,431
It's used to fund
drug deals, hit men,
239
00:10:43,464 --> 00:10:46,704
human trafficking, but it's
not actually that anonymous.
240
00:10:46,735 --> 00:10:48,035
Is this a bitcoin lecture
241
00:10:48,069 --> 00:10:49,369
or did you make
an actually discovery here?
242
00:10:49,403 --> 00:10:51,103
Oh, right. Sorry.
243
00:10:51,139 --> 00:10:53,409
I accessed the block chain,
244
00:10:53,441 --> 00:10:56,241
which is a public ledger that
records every bitcoin spent.
245
00:10:56,277 --> 00:10:57,717
Every cent's accounted for--
where it came from
246
00:10:57,746 --> 00:10:59,046
and where it went.
247
00:10:59,080 --> 00:11:00,720
And each transaction is listed
248
00:11:00,749 --> 00:11:02,349
as a long sequence
of randomized numbers.
249
00:11:02,383 --> 00:11:03,383
Ah.
250
00:11:03,417 --> 00:11:05,187
So you can't tie
it to a person,
251
00:11:05,219 --> 00:11:07,289
but you can tie it
to an account, right?
252
00:11:07,321 --> 00:11:09,321
So, it's like
a stock market transaction.
253
00:11:09,357 --> 00:11:10,327
I mean, you can see
somebody bought
254
00:11:10,358 --> 00:11:11,758
200 shares
of a commodity.
255
00:11:11,793 --> 00:11:12,993
You just don't know who.
256
00:11:13,027 --> 00:11:14,467
Exactly!
257
00:11:14,495 --> 00:11:15,965
But if you know the amount
that you're looking for,
258
00:11:15,997 --> 00:11:17,797
you can find any
bitcoin transaction
259
00:11:17,832 --> 00:11:19,292
that's ever been made.
260
00:11:19,333 --> 00:11:20,763
Even when it's stolen,
261
00:11:20,802 --> 00:11:22,502
there is a record of
the bitcoin movement.
262
00:11:22,536 --> 00:11:23,936
All you need is the amount,
263
00:11:23,972 --> 00:11:27,202
date and time.
264
00:11:27,241 --> 00:11:28,801
So, this is last
night's robbery.
265
00:11:28,843 --> 00:11:29,913
What we're looking at
266
00:11:29,944 --> 00:11:31,344
is our thief's bitcoin account.
267
00:11:31,379 --> 00:11:33,089
1,208 bitcoins.
268
00:11:33,114 --> 00:11:35,914
As of today, worth just shy
269
00:11:35,950 --> 00:11:37,790
of 500,000 U.S. dollars.
270
00:11:37,819 --> 00:11:38,959
Now, of course,
the bitcoin market
271
00:11:38,987 --> 00:11:41,327
fluctuates so dramatically
272
00:11:41,355 --> 00:11:42,855
that this many bitcoins
could very be easily be worth
273
00:11:42,891 --> 00:11:45,321
over a million dollars
in the very near future.
274
00:11:45,359 --> 00:11:47,369
Explains why someone went
to such lengths to steal it.
275
00:11:47,395 --> 00:11:48,995
Mm-hmm.
276
00:11:49,030 --> 00:11:52,810
So, what digital dust can we
follow here to catch our thief?
277
00:11:52,834 --> 00:11:53,934
Well, every bitcoin account
is protected
278
00:11:53,968 --> 00:11:56,438
by a 64-character passkey.
279
00:11:56,470 --> 00:11:59,780
And if you have the passkey,
you can unlock the account.
280
00:11:59,808 --> 00:12:01,378
And whoever has the
passkey to this account
281
00:12:01,409 --> 00:12:03,419
is probably our killer.
282
00:12:07,548 --> 00:12:09,148
Well, that's odd.
283
00:12:09,183 --> 00:12:12,823
Our thief's bitcoin account is
protected by two passkeys.
284
00:12:12,854 --> 00:12:14,324
Typically, it's just the one.
285
00:12:14,355 --> 00:12:16,125
Yeah, it's like
a safe deposit box.
286
00:12:16,157 --> 00:12:18,527
It requires two
keys to open it.
287
00:12:18,559 --> 00:12:20,869
Which might just imply
288
00:12:20,895 --> 00:12:24,865
our bitcoin thief has
an accomplice.
289
00:12:24,899 --> 00:12:26,139
Hey, guys!
290
00:12:26,167 --> 00:12:28,107
The malicious track worked.
291
00:12:28,136 --> 00:12:30,406
I pinpointed the exact location
of the bitcoin thief's computer.
292
00:12:30,438 --> 00:12:31,878
This is Agent Elijah Mundo.
293
00:12:31,906 --> 00:12:35,406
I need a SWAT team
at 5280 Clinton Place.
294
00:12:35,443 --> 00:12:38,043
(tires screech)
295
00:13:08,142 --> 00:13:10,512
MAN: Clear!
MUNDO: Well, there's our thief.
296
00:13:10,544 --> 00:13:13,214
(alarm ringing)
RYAN:
Looks like we're not
297
00:13:13,247 --> 00:13:15,317
the only ones interested
in stolen bitcoins.
298
00:13:20,588 --> 00:13:26,928
* I know you've deceived me,
now here's a surprise *
299
00:13:28,662 --> 00:13:34,402
* I know that you have, 'cause
there's magic in my eyes *
300
00:13:34,435 --> 00:13:38,575
* I can see
for miles and miles *
301
00:13:38,606 --> 00:13:41,906
* I can see for miles
and miles *
302
00:13:41,943 --> 00:13:46,473
* I can see
for miles and miles *
303
00:13:46,514 --> 00:13:49,954
* And miles...
304
00:13:49,984 --> 00:13:52,284
* Oh, yeah.
305
00:14:09,670 --> 00:14:11,440
All right. Thanks, bud.
306
00:14:11,472 --> 00:14:13,572
All right.
307
00:14:13,607 --> 00:14:15,147
Krumitz ran the name we got
off the victim's I.D.
308
00:14:15,176 --> 00:14:18,516
We are looking at the infamous
Brian Kramer.
309
00:14:18,546 --> 00:14:20,386
Apparently he made
a living robbing
310
00:14:20,414 --> 00:14:22,114
large bitcoin accounts he
found on the block chain.
311
00:14:22,150 --> 00:14:23,260
This was his fifth.
312
00:14:23,284 --> 00:14:24,614
Tracked charitable contributions
313
00:14:24,652 --> 00:14:28,022
from bitcoin accounts
to find his targets.
314
00:14:28,056 --> 00:14:28,956
Laceration
315
00:14:28,990 --> 00:14:30,500
of the throat looks like COD.
316
00:14:30,524 --> 00:14:31,954
He bled out, but over here,
317
00:14:31,993 --> 00:14:34,623
it looks like our
victim was sliced open.
318
00:14:34,662 --> 00:14:35,992
And patched up multiple times.
319
00:14:36,030 --> 00:14:39,540
He was tortured.
320
00:14:39,567 --> 00:14:42,107
Closed the wounds
with Super Glue.
321
00:14:42,136 --> 00:14:43,206
Battlefield first aid.
322
00:14:43,237 --> 00:14:46,977
It's commonly used by people
with military training.
323
00:14:47,008 --> 00:14:47,808
Torture the victim
and patch him up.
324
00:14:47,841 --> 00:14:50,011
Keep him live
long enough to talk.
325
00:14:50,044 --> 00:14:52,414
Detroit PD is still trying
to locate Stephen Christos.
326
00:14:52,446 --> 00:14:54,386
Hasn't answered calls
from his family.
327
00:14:54,415 --> 00:14:56,385
We can't wait this out.
Track his cell phone.
328
00:14:56,417 --> 00:14:57,657
Get a GPS location on him.
329
00:14:57,685 --> 00:14:58,985
Okay, got it.
330
00:14:59,020 --> 00:15:00,560
Hard drive's been removed.
331
00:15:00,588 --> 00:15:01,958
Whoever did that to him was
332
00:15:01,990 --> 00:15:03,630
definitely after
the stolen bitcoins.
333
00:15:03,657 --> 00:15:06,097
If they had the hard drive,
why torture him?
334
00:15:06,127 --> 00:15:08,327
'Cause the passkey wasn't
on the hard drive.
335
00:15:10,764 --> 00:15:13,234
Door was barricaded
by the dresser.
336
00:15:13,267 --> 00:15:15,067
Bought our victim a little time.
337
00:15:15,103 --> 00:15:16,363
Long enough for our thief
338
00:15:16,404 --> 00:15:18,534
to take the passkey
out of the computer.
339
00:15:18,572 --> 00:15:20,302
Bad guy breaks through the door.
340
00:15:20,341 --> 00:15:22,971
Tries to access
the bitcoin account, he can't.
341
00:15:23,011 --> 00:15:24,141
Tortures the thief
342
00:15:24,178 --> 00:15:26,018
for the passkey.
Sounds good.
343
00:15:26,047 --> 00:15:27,347
Unfortunately,
it's all speculation.
344
00:15:27,381 --> 00:15:29,241
The answers died
with his laptop.
345
00:15:29,283 --> 00:15:32,083
Not necessarily.
346
00:15:32,120 --> 00:15:34,560
Took the hard drive,
but not the RAM chip.
347
00:15:34,588 --> 00:15:36,158
Still might be a way
to get some answers.
348
00:15:36,190 --> 00:15:38,030
RAM keeps track of the programs
349
00:15:38,059 --> 00:15:39,129
your computer's running
while it's on.
350
00:15:39,160 --> 00:15:42,130
The moment the computer
loses power...
351
00:15:42,163 --> 00:15:43,533
the RAM starts to forget.
352
00:15:43,564 --> 00:15:45,194
Information decays.
353
00:15:45,233 --> 00:15:46,663
Freezing it...
354
00:15:47,468 --> 00:15:49,138
...stops the process.
355
00:15:49,170 --> 00:15:50,440
(laughs)
356
00:15:50,471 --> 00:15:52,201
MUNDO:
Most people don't go to a bar
357
00:15:52,240 --> 00:15:53,310
after they find out
358
00:15:53,341 --> 00:15:55,771
their brother's been murdered
and their family robbed.
359
00:15:55,809 --> 00:15:57,749
I needed a drink, okay?
360
00:15:57,778 --> 00:15:59,748
I would imagine so.
361
00:15:59,780 --> 00:16:01,590
What are you implying?
362
00:16:03,717 --> 00:16:05,387
Why don't you tell us
about these e-mails, Stephen?
363
00:16:05,419 --> 00:16:08,229
We accessed your phone.
364
00:16:08,256 --> 00:16:11,226
You got a call at 6:17
from your mother.
365
00:16:11,259 --> 00:16:12,099
She told you about the break-in
366
00:16:12,126 --> 00:16:13,696
and that your brother
had been murdered.
367
00:16:13,727 --> 00:16:15,597
Even though
368
00:16:15,629 --> 00:16:17,169
your brother was dead,
all you cared about
369
00:16:17,198 --> 00:16:19,098
was the money.
370
00:16:19,133 --> 00:16:20,333
MUNDO:
'Cause the next thing you did
371
00:16:20,368 --> 00:16:21,508
was check the balance
372
00:16:21,535 --> 00:16:23,405
of the store's bitcoin account.
373
00:16:23,437 --> 00:16:25,407
You found it at zero.
374
00:16:25,439 --> 00:16:28,709
I knew those damn bitcoins
were a bad idea.
375
00:16:28,742 --> 00:16:30,542
Unregulated,
376
00:16:30,578 --> 00:16:32,318
uninsurable, I...
377
00:16:32,346 --> 00:16:34,116
tried to warn my parents
378
00:16:34,148 --> 00:16:35,748
and my brother--
I said bitcoins
379
00:16:35,783 --> 00:16:38,113
are too risky.
380
00:16:38,152 --> 00:16:39,252
If they get stolen,
they're gone.
381
00:16:39,287 --> 00:16:40,557
You can't get them back.
382
00:16:40,588 --> 00:16:43,158
But you tried to get them back.
383
00:16:43,191 --> 00:16:45,691
Four hours ago...
you contacted
384
00:16:45,726 --> 00:16:47,326
bounty hunters by e-mail
385
00:16:47,361 --> 00:16:50,391
and negotiated a price to
recover the stolen bitcoins.
386
00:16:50,431 --> 00:16:52,491
Did you really think bitcoin
bounty hunters were the answer
387
00:16:52,533 --> 00:16:53,733
to all your problems?
388
00:16:53,767 --> 00:16:55,207
You'll get the money back,
389
00:16:55,236 --> 00:16:57,576
then... you can take over.
390
00:16:57,605 --> 00:17:01,305
My parents had just lost a son!
391
00:17:01,342 --> 00:17:02,742
And now they were staring
at poverty.
392
00:17:02,776 --> 00:17:04,176
Did they tell you
they used their retirement
393
00:17:04,212 --> 00:17:06,242
to keep the business afloat?
394
00:17:06,280 --> 00:17:08,820
That my brother's bright idea
was to convert
395
00:17:08,849 --> 00:17:10,459
to bitcoin?! No.
396
00:17:10,484 --> 00:17:13,484
I'd imagine they didn't.
397
00:17:13,521 --> 00:17:16,521
After all the years
of hard work,
398
00:17:16,557 --> 00:17:19,127
all they gave up,
399
00:17:19,160 --> 00:17:21,170
the only thing
I could think to do
400
00:17:21,195 --> 00:17:23,095
was get the money back.
401
00:17:23,131 --> 00:17:24,431
For them.
402
00:17:24,465 --> 00:17:26,135
Not me.
403
00:17:26,167 --> 00:17:27,467
Look at that.
404
00:17:27,501 --> 00:17:28,861
You see that?
405
00:17:28,902 --> 00:17:31,872
That's the work
of the men you hired.
406
00:17:31,905 --> 00:17:35,105
Do they look like the kind
of men who give back money?
407
00:17:35,143 --> 00:17:37,813
We need information.
408
00:17:37,845 --> 00:17:39,615
All I have is a Web site.
409
00:17:39,647 --> 00:17:41,147
And I had an e-mail address.
410
00:17:41,182 --> 00:17:42,582
That's it.
411
00:17:42,616 --> 00:17:45,186
They said they would contact me.
412
00:17:45,219 --> 00:17:47,189
These are incredibly
dangerous men, Stephen.
413
00:17:47,221 --> 00:17:48,821
They lurk in the Deep Web.
414
00:17:48,856 --> 00:17:51,296
In a world you can't even
begin to imagine.
415
00:17:51,325 --> 00:17:53,495
They've already killed one man.
416
00:17:53,527 --> 00:17:56,627
You have started something
you can't undo.
417
00:17:59,300 --> 00:18:00,910
KRUMITZ:
Bounty hunters' Web site
and e-mail address
418
00:18:00,934 --> 00:18:02,464
are a wild goose chase.
419
00:18:02,503 --> 00:18:03,603
Well, that's no surprise.
420
00:18:03,637 --> 00:18:05,137
These bounty hunters specialize
421
00:18:05,173 --> 00:18:06,233
in bitcoin retrieval.
422
00:18:06,274 --> 00:18:07,904
They think of themselves
as elites.
423
00:18:07,941 --> 00:18:10,311
They're skilled,
educated, tech-savvy.
424
00:18:10,344 --> 00:18:12,874
So we can't bet on them
making any mistakes.
425
00:18:12,913 --> 00:18:14,383
It gets worse.
Our bitcoin thief
426
00:18:14,415 --> 00:18:16,385
was no bozo, either.
427
00:18:16,417 --> 00:18:18,517
We got the results
from the degraded images
428
00:18:18,552 --> 00:18:20,782
we recovered from
the thief's computer RAM.
429
00:18:20,821 --> 00:18:22,621
This is
430
00:18:22,656 --> 00:18:24,396
a botnet-- a massive group
431
00:18:24,425 --> 00:18:26,725
of maliciously infected
personal computers--
432
00:18:26,760 --> 00:18:29,730
or bots-- from all around the
country harnessed together.
433
00:18:29,763 --> 00:18:32,793
Basically, it's a network
of computers used for evil.
434
00:18:32,833 --> 00:18:34,903
But the people who own
the computers have no idea
435
00:18:34,935 --> 00:18:36,465
that they're part
of an evil empire.
436
00:18:36,504 --> 00:18:38,804
After the computers
are infected, the hacker
437
00:18:38,839 --> 00:18:41,209
has full control over every
single computer on the network.
438
00:18:41,242 --> 00:18:42,402
That's roughly...
439
00:18:42,443 --> 00:18:43,643
20,000?
440
00:18:43,677 --> 00:18:46,217
Unsavory characters,
like our dead thief,
441
00:18:46,247 --> 00:18:49,287
rent out their botnets
to send spam e-mails,
442
00:18:49,317 --> 00:18:52,417
perform DDoS attacks,
mass identity theft.
443
00:18:52,453 --> 00:18:54,183
You know, all that
good illegal stuff.
444
00:18:54,222 --> 00:18:55,622
RYAN:
Can you tell if our thief
445
00:18:55,656 --> 00:18:57,426
connected to the botnet
before the bounty hunters
446
00:18:57,458 --> 00:18:59,898
broke down that motel room door?
447
00:18:59,927 --> 00:19:01,327
What?
448
00:19:01,362 --> 00:19:02,592
What?
449
00:19:02,630 --> 00:19:04,270
What is it, Krumitz?
450
00:19:04,298 --> 00:19:06,398
He sent two separate messages
to two separate computers
451
00:19:06,434 --> 00:19:08,304
somewhere in the botnet.
452
00:19:08,336 --> 00:19:09,566
RYAN:
It must've been the passkeys.
453
00:19:09,603 --> 00:19:11,233
Like a bank robber hiding
his stash until the heat
454
00:19:11,272 --> 00:19:13,472
dies down and he can
recover it and get away.
455
00:19:13,507 --> 00:19:16,247
Are you saying two random
computers-- two in 20,000--
456
00:19:16,277 --> 00:19:18,777
are secretly storing
the passkeys.
457
00:19:18,812 --> 00:19:20,282
And the owners don't know it.
458
00:19:20,314 --> 00:19:21,344
That's not the bad part.
459
00:19:21,382 --> 00:19:22,842
The RAM got us to the botnet.
460
00:19:22,883 --> 00:19:24,353
But it was far
too degraded to tell me
461
00:19:24,385 --> 00:19:25,755
which of these
two people have them.
462
00:19:25,786 --> 00:19:28,286
But the bounty hunters have
the thief's hard drive.
463
00:19:28,322 --> 00:19:29,652
And that means
464
00:19:29,690 --> 00:19:31,930
they know which two people
have the passkeys.
465
00:19:31,959 --> 00:19:33,829
They have the digital
treasure map.
466
00:19:33,861 --> 00:19:36,991
So, two innocent people have
no idea what's coming to them.
467
00:19:37,030 --> 00:19:39,240
And we have no way
of warning them.
468
00:20:05,493 --> 00:20:06,723
Hey, what are you doing
in my house?!
469
00:20:07,628 --> 00:20:09,368
(grunting)
470
00:20:15,869 --> 00:20:16,639
Hey!
471
00:20:16,670 --> 00:20:17,810
(groans)
472
00:20:21,509 --> 00:20:23,009
You get what we came for?
473
00:20:23,043 --> 00:20:24,973
Yeah, I got the passkey.
474
00:20:25,012 --> 00:20:28,012
One more passkey and
we're a half mil richer.
475
00:20:38,992 --> 00:20:39,952
(phone rings)
476
00:20:39,993 --> 00:20:40,923
You got Krumitz.
477
00:20:40,961 --> 00:20:42,321
Hold on, Krummy,
let me transfer you to CTOC.
478
00:20:42,363 --> 00:20:43,663
MAN:
This came for you, Nelson.
479
00:20:43,697 --> 00:20:44,897
What's this?
480
00:20:44,932 --> 00:20:46,992
Don't know.
A judge won't typically hand out
481
00:20:47,034 --> 00:20:48,664
a warrant on the evidence
we have.
482
00:20:48,702 --> 00:20:49,832
The RAM was too degraded.
483
00:20:49,870 --> 00:20:52,440
But I pleaded my case and
got us into the server farm
484
00:20:52,473 --> 00:20:54,773
housing the botnet's
command and control server.
485
00:20:54,808 --> 00:20:56,378
I got Krumitz on the big screen.
486
00:20:56,410 --> 00:20:57,880
So, tell me we have names.
487
00:20:57,911 --> 00:21:00,071
Performing
a live acquisition now.
488
00:21:00,113 --> 00:21:02,513
We are seconds away from having
the same information
489
00:21:02,550 --> 00:21:04,320
the bounty hunters do.
490
00:21:04,352 --> 00:21:05,712
The server has a record
of every interaction
491
00:21:05,753 --> 00:21:06,813
the thieves made
with the botnet.
492
00:21:06,854 --> 00:21:07,784
If we don't catch
493
00:21:07,821 --> 00:21:10,421
our targets before they get
those passkeys,
494
00:21:10,458 --> 00:21:11,998
the Christos' savings
will be gone forever.
495
00:21:12,025 --> 00:21:13,695
Every cent they have.
496
00:21:13,727 --> 00:21:15,867
Every minute counts, and
we're behind already.
497
00:21:15,896 --> 00:21:17,996
Something's wrong here.
498
00:21:18,031 --> 00:21:19,961
Uh, hold on.
499
00:21:20,000 --> 00:21:21,610
What is it, Daniel?
500
00:21:21,635 --> 00:21:23,675
(groans)
501
00:21:25,639 --> 00:21:26,909
NELSON:
He's been disconnected.
502
00:21:26,940 --> 00:21:29,510
I need a win off
that server, Krumitz.
503
00:21:29,543 --> 00:21:31,013
The drive's
completely corrupted.
504
00:21:31,044 --> 00:21:33,844
From the look of it,
someone did this deliberately.
505
00:21:33,881 --> 00:21:35,841
The bounty hunters are covering
their tracks. Damn it.
506
00:21:35,883 --> 00:21:37,853
Deleted is recoverable,
but the drive
507
00:21:37,885 --> 00:21:39,815
is being overwritten;
everything is gone.
508
00:21:39,853 --> 00:21:41,023
RAMIREZ:
I've been monitoring
509
00:21:41,054 --> 00:21:42,084
Stephen Christos'
e-mail activity.
510
00:21:42,122 --> 00:21:43,752
Bounty hunters
511
00:21:43,791 --> 00:21:44,921
just sent a new message.
512
00:21:44,958 --> 00:21:46,558
Due to unforeseen complications,
513
00:21:46,594 --> 00:21:48,864
they're upping their price.
514
00:21:48,896 --> 00:21:50,436
Unforeseen complications.
515
00:21:50,464 --> 00:21:51,894
That what they're calling murder
these days?
516
00:21:51,932 --> 00:21:53,032
RAMIREZ:
They made a mistake.
517
00:21:53,066 --> 00:21:55,666
The computer they sent
this e-mail from
518
00:21:55,703 --> 00:21:57,773
had a parental control program
designed to go unnoticed.
519
00:21:57,805 --> 00:22:00,905
Bounty hunters would have no way
of knowing it was there.
520
00:22:00,941 --> 00:22:02,501
Parental controls are installed
521
00:22:02,543 --> 00:22:04,043
so parents can monitor
their children on the Internet.
522
00:22:04,077 --> 00:22:06,077
It tags everything coming in
and going out.
523
00:22:09,483 --> 00:22:10,583
Simon, if there's
parental controls,
524
00:22:10,618 --> 00:22:11,858
it means there's children there.
525
00:22:11,885 --> 00:22:13,015
Yeah, I hear you.
526
00:22:13,053 --> 00:22:15,853
Yes! Parental controls
came through.
527
00:22:15,889 --> 00:22:17,899
Just got a physical address
on the bounty hunters.
528
00:22:17,925 --> 00:22:19,595
Okay, I'll notify
the local authorities
529
00:22:19,627 --> 00:22:21,497
to move on the location
cautiously.
530
00:22:21,529 --> 00:22:23,469
Meanwhile,
let's get you on a plane.
531
00:22:29,803 --> 00:22:32,933
(indistinct radio transmission)
532
00:22:32,973 --> 00:22:35,003
MAN:
Normally I don't get home
from work this early.
533
00:22:35,042 --> 00:22:37,042
I'm just glad
my son wasn't home.
534
00:22:39,880 --> 00:22:42,050
Edward Gaines, found in
a bathtub bound and gagged.
535
00:22:42,082 --> 00:22:43,142
He suffered a laceration
536
00:22:43,183 --> 00:22:44,653
and a concussion.
537
00:22:44,685 --> 00:22:45,985
If the blow to the head
hadn't knocked him out,
538
00:22:46,019 --> 00:22:47,689
a bullet would've been next.
539
00:22:47,721 --> 00:22:49,521
Raven's pulling
traffic cam footage
540
00:22:49,557 --> 00:22:51,797
looking for faces based
on Edward's description.
541
00:22:51,825 --> 00:22:53,055
Did our targets get
what they came for?
542
00:22:53,093 --> 00:22:54,123
Yep.
543
00:22:54,161 --> 00:22:55,591
The e-mail that
Stephen Christos got
544
00:22:55,629 --> 00:22:57,539
was sent from this computer.
545
00:22:57,565 --> 00:22:59,795
The bounty hunters now have
the first passkey.
546
00:22:59,833 --> 00:23:02,103
Well, they're halfway
to their goal,
547
00:23:02,135 --> 00:23:04,205
and we're stuck at
the starting line.
548
00:23:04,237 --> 00:23:07,107
(sighs)
So what's our play?
549
00:23:07,140 --> 00:23:10,580
Do you remember how I fought
so hard to bring in Tobin?
550
00:23:10,611 --> 00:23:13,541
Yeah, the cyber division needed
someone who could work the cases
551
00:23:13,581 --> 00:23:16,541
like a hacker, work the
cases from the inside.
552
00:23:16,584 --> 00:23:18,054
We're gonna use
that same tactic.
553
00:23:18,085 --> 00:23:20,755
We're gonna work this case
from the inside.
554
00:23:35,168 --> 00:23:37,108
(chuckles)
555
00:23:37,137 --> 00:23:39,137
Mom and Pop.
556
00:23:53,654 --> 00:23:55,124
The mystery box?
557
00:23:55,155 --> 00:23:58,025
Yeah, uh, (chuckles)
558
00:23:58,058 --> 00:24:00,098
they gave me
all my devices back.
559
00:24:00,127 --> 00:24:01,627
From your arrest?
Yep.
560
00:24:01,662 --> 00:24:03,862
Look at you, probie no more.
561
00:24:03,897 --> 00:24:05,137
(chuckles)
562
00:24:05,165 --> 00:24:07,865
God, it took me six months
to get off my probation.
563
00:24:07,901 --> 00:24:09,101
Hmm.
564
00:24:09,136 --> 00:24:10,706
Who do you know?
Yeah, you know...
565
00:24:10,738 --> 00:24:12,138
We need to get
inside that botnet.
566
00:24:12,172 --> 00:24:14,072
Avery, the system is fried.
567
00:24:14,107 --> 00:24:15,647
Yes, but the botnet
still exists.
568
00:24:15,676 --> 00:24:17,146
So you're thinking
569
00:24:17,177 --> 00:24:18,847
we should join the botnet?
570
00:24:18,879 --> 00:24:21,149
RAMIREZ: Well, we can take
the botnet's malicious code
571
00:24:21,181 --> 00:24:22,241
off Mr. Gaines' laptop
572
00:24:22,282 --> 00:24:24,152
and infect one of ours
and we're in.
573
00:24:24,184 --> 00:24:25,554
Then we'll know
574
00:24:25,586 --> 00:24:26,786
what the bounty hunters know,
575
00:24:26,820 --> 00:24:28,090
and we'll have a chance
to get one step ahead.
576
00:24:28,121 --> 00:24:30,081
First time I ever wanted
a computer virus.
577
00:24:30,123 --> 00:24:31,123
RAMIREZ:
I know what you mean.
578
00:24:31,992 --> 00:24:33,792
KRUMITZ:
Let's see what we got.
579
00:24:36,263 --> 00:24:37,223
All right, we're in.
580
00:24:37,264 --> 00:24:39,534
Okay, now that you're connected
to the botnet,
581
00:24:39,567 --> 00:24:41,967
you should be able to break in
and send it commands.
582
00:24:43,837 --> 00:24:44,937
(chuckles) What?
583
00:24:44,972 --> 00:24:46,202
You don't think I pay attention
584
00:24:46,239 --> 00:24:47,879
when you guys geek out
with code speak?
585
00:24:47,908 --> 00:24:48,878
KRUMITZ:
I never thought that.
586
00:24:48,909 --> 00:24:50,779
All right, Avery.
Ping this entire network.
587
00:24:50,811 --> 00:24:53,611
We are looking
for the two computers
588
00:24:53,647 --> 00:24:55,947
that have those passkeys.
589
00:24:58,085 --> 00:25:00,185
KRUMITZ:
Okay, the D.C. I.P. address
590
00:25:00,220 --> 00:25:02,830
is Mr. Gaines' laptop
right here on this desk.
591
00:25:02,856 --> 00:25:04,956
The bounty hunters already took
the passkey off that one,
592
00:25:04,992 --> 00:25:07,052
but the other one...
RAMIREZ:
Albuquerque, New Mexico.
593
00:25:07,094 --> 00:25:08,194
Mm-hmm.
Hey.
594
00:25:08,228 --> 00:25:10,328
All right.
Whoa, too slow.
595
00:25:10,363 --> 00:25:11,733
KRUMITZ:
Yeah.
596
00:25:11,765 --> 00:25:12,865
(laughter)
597
00:25:12,900 --> 00:25:14,740
Hang on.
598
00:25:14,768 --> 00:25:16,268
Nelson, this is a win;
this is when we celebrate
599
00:25:16,303 --> 00:25:17,133
and high-five our bosses.
600
00:25:17,170 --> 00:25:19,740
No, no, check out
that I.P. address.
601
00:25:19,773 --> 00:25:22,003
It's not static; it's dynamic.
602
00:25:22,042 --> 00:25:24,572
Every time a computer
with a dynamic I.P. turns on,
603
00:25:24,612 --> 00:25:26,172
it gets assigned
604
00:25:26,213 --> 00:25:27,343
a new I.P. address randomly
605
00:25:27,380 --> 00:25:29,290
from its
Internet service provider,
606
00:25:29,316 --> 00:25:31,256
but when it turns off,
the I.P. address
607
00:25:31,284 --> 00:25:33,254
will be randomly reassigned
to a different device.
608
00:25:33,286 --> 00:25:34,386
The bounty hunters are
still using
609
00:25:34,421 --> 00:25:36,681
the I.P. address they recovered
from that hard drive.
610
00:25:36,724 --> 00:25:38,224
There you go.
611
00:25:38,258 --> 00:25:39,798
The second passkey's
in Albuquerque,
612
00:25:39,827 --> 00:25:41,267
but the bounty hunters
don't know that.
613
00:25:41,294 --> 00:25:43,324
They're going
to the wrong location.
614
00:25:43,363 --> 00:25:45,093
Okay, I'll contact
the service provider,
615
00:25:45,132 --> 00:25:47,262
figure out the I.P. address
our bounty hunters are chasing,
616
00:25:47,300 --> 00:25:48,610
find out where they're headed.
617
00:25:48,636 --> 00:25:49,806
Work quickly.
618
00:25:49,837 --> 00:25:51,737
They retrieved
that first passkey.
619
00:25:51,772 --> 00:25:52,702
They still brutally beat
Edward Gaines.
620
00:25:52,740 --> 00:25:55,150
If they come up empty at
this next location,
621
00:25:55,175 --> 00:25:56,205
who knows what they'll do.
622
00:26:02,883 --> 00:26:04,813
Krumitz has plotted
the bounty hunters'
623
00:26:04,852 --> 00:26:06,112
final destination.
624
00:26:06,153 --> 00:26:07,823
Denver, Colorado.
625
00:26:07,855 --> 00:26:10,125
So there's gonna be a
plane waiting for you
626
00:26:10,157 --> 00:26:11,727
and your team on the tarmac.
627
00:26:11,759 --> 00:26:13,969
Hey, just got back the results
on the footage
628
00:26:13,994 --> 00:26:15,124
from the traffic cameras
near Edward Gaines' house,
629
00:26:15,162 --> 00:26:18,032
and I have security footage
from around the motel
630
00:26:18,065 --> 00:26:20,705
in Detroit where we found
our bitcoin thief.
631
00:26:20,734 --> 00:26:22,764
Cross-referenced
every face we found,
632
00:26:22,803 --> 00:26:24,833
looking for anyone in both
cities in the past 24 hours.
633
00:26:24,872 --> 00:26:26,972
I.D.'d two men
traveling together.
634
00:26:27,007 --> 00:26:30,407
Jeremy and Henry Spitz,
brothers, ex-military,
635
00:26:30,443 --> 00:26:33,113
both dishonorably
discharged, a long history
636
00:26:33,146 --> 00:26:34,986
of violent behavior
resulting in arrests.
637
00:26:35,015 --> 00:26:37,755
They fit the profile
of our bounty hunters.
638
00:26:37,785 --> 00:26:40,755
We need to expect unpredictable
explosive behavior.
639
00:26:40,788 --> 00:26:42,358
All right.
Put out a BOLO on the pair
640
00:26:42,389 --> 00:26:43,929
and inform the TSA.
If they're grounded,
641
00:26:43,957 --> 00:26:45,427
they're gonna be forced
to drive to Denver.
642
00:26:45,458 --> 00:26:46,758
That's gonna buy us some time.
643
00:26:46,794 --> 00:26:48,724
I'll take Raven to Albuquerque,
644
00:26:48,762 --> 00:26:51,662
and you're gonna need to find
that final bitcoin passkey.
645
00:26:51,699 --> 00:26:53,939
Let's set this trap.
646
00:27:08,381 --> 00:27:11,781
Hello, I'm Special Agent
Avery Ryan.
647
00:27:11,819 --> 00:27:12,819
I'm running this operation.
648
00:27:12,853 --> 00:27:13,983
Is everybody out of the house?
649
00:27:14,021 --> 00:27:15,351
Yes, our son's staying
650
00:27:15,388 --> 00:27:17,158
the night at a friend's.
651
00:27:17,190 --> 00:27:19,360
Hopefully this will
all be over by morning.
652
00:27:19,392 --> 00:27:21,722
NELSON:
This comes to an end here!
653
00:27:21,762 --> 00:27:22,762
(grunting)
654
00:27:22,796 --> 00:27:24,066
This is our Appomattox.
655
00:27:24,097 --> 00:27:26,367
Appomattox, really?
656
00:27:26,399 --> 00:27:27,839
You're really gonna
compare this
657
00:27:27,868 --> 00:27:29,838
to the battle that ended
the Civil War?
658
00:27:29,870 --> 00:27:32,410
(grunting)
Yeah, why not?
659
00:27:32,439 --> 00:27:35,849
You have any idea how many men
died in that battle?
660
00:27:35,876 --> 00:27:37,876
Appomattox.
Step up your game, man.
661
00:27:45,953 --> 00:27:47,883
A dynamic what?
It's your I.P. address.
662
00:27:47,921 --> 00:27:48,821
If this is just
about my computer,
663
00:27:48,856 --> 00:27:50,826
I don't see why I have
to leave my home.
664
00:27:50,858 --> 00:27:52,758
Again, ma'am, this is an
ongoing investigation.
665
00:27:52,793 --> 00:27:54,863
I have told you
as much as I can.
666
00:27:54,895 --> 00:27:56,925
Now I would like to move you
into protective custody
667
00:27:56,964 --> 00:27:58,134
till we resolve all this.
668
00:27:58,165 --> 00:27:59,865
What's she doing
on my computer anyway?
669
00:27:59,900 --> 00:28:01,870
Removing something
worth killing for.
670
00:28:01,902 --> 00:28:03,302
Got the passkey.
671
00:28:03,336 --> 00:28:04,936
Sending it to the boys now.
672
00:28:10,443 --> 00:28:12,913
Well, that smile must mean
we're on schedule.
673
00:28:12,946 --> 00:28:14,786
Just got the final passkey
from Raven.
674
00:28:14,815 --> 00:28:15,915
Krumitz is finishing up inside.
675
00:28:15,949 --> 00:28:17,959
We're good to go.
676
00:28:17,985 --> 00:28:21,185
I know we're right in the middle
of something, but, uh,
677
00:28:21,221 --> 00:28:23,381
I just wanted to say thanks
678
00:28:23,423 --> 00:28:25,023
for getting me off probation.
679
00:28:25,058 --> 00:28:27,198
And giving me
all my devices back.
680
00:28:27,227 --> 00:28:29,167
They mean a lot to me.
681
00:28:29,196 --> 00:28:31,266
Got my tablet back today.
682
00:28:31,298 --> 00:28:33,168
You know, I had all
my photos in there
683
00:28:33,200 --> 00:28:35,370
and my family stuff.
684
00:28:35,402 --> 00:28:38,432
It was good to see
my parents again.
685
00:28:38,471 --> 00:28:41,041
I haven't seen them
since the trial.
686
00:28:41,074 --> 00:28:43,004
It's complicated.
687
00:28:44,177 --> 00:28:45,547
Well, Sifter and I spoke
to the judge.
688
00:28:45,578 --> 00:28:46,878
She agreed to lift
your probation.
689
00:28:46,914 --> 00:28:48,784
Wow, that's-that's crazy.
690
00:28:48,816 --> 00:28:50,186
I didn't,
I didn't even know he liked me.
691
00:28:50,217 --> 00:28:51,817
(chuckling):
No, he-he doesn't.
692
00:28:54,021 --> 00:28:55,821
We all set?
693
00:28:55,856 --> 00:28:57,856
Oh, yeah. We embedded
a decoy passkey
694
00:28:57,891 --> 00:28:59,391
on the computer in the home,
695
00:28:59,426 --> 00:29:01,126
one infected
with our own malicious code.
696
00:29:01,161 --> 00:29:03,261
So when the bounty hunters try
to use that passkey,
697
00:29:03,296 --> 00:29:04,536
it'll infect their computer
698
00:29:04,564 --> 00:29:05,834
and we'll have complete
control over it.
699
00:29:05,866 --> 00:29:07,196
Well, they're reckless
and greedy.
700
00:29:07,234 --> 00:29:08,534
They'll want
immediate gratification.
701
00:29:08,568 --> 00:29:09,908
We won't have to wait long.
702
00:29:09,937 --> 00:29:11,177
All right, but when
they plug in,
703
00:29:11,204 --> 00:29:12,804
we'll be able to steal
the first passkey back.
704
00:29:12,840 --> 00:29:13,740
Not just steal it.
705
00:29:13,773 --> 00:29:16,043
We have to prove
it was on their computer.
706
00:29:16,076 --> 00:29:18,976
That passkey is the only thing
that links those men
707
00:29:19,012 --> 00:29:20,212
to the murder
and the home invasion.
708
00:29:20,247 --> 00:29:21,417
It's what's gonna give us
a conviction.
709
00:29:21,448 --> 00:29:24,858
Don't worry. We'll be screen-
capturing the entire session.
710
00:29:27,087 --> 00:29:28,187
(Nelson groans)
711
00:29:28,221 --> 00:29:30,121
We lost the connection to
the Schaeffers' computer.
712
00:29:30,157 --> 00:29:32,257
He'll get it back online.
713
00:29:32,292 --> 00:29:34,262
(groans)
714
00:29:44,071 --> 00:29:45,531
Krumitz, what the hell
are you doing?
715
00:29:45,572 --> 00:29:46,672
RYAN:
Krumitz left his radio.
716
00:29:46,706 --> 00:29:48,846
We're having technical issues.
Avery, we just got word.
717
00:29:48,876 --> 00:29:50,306
SWAT's reporting
a suspicious looking SUV
718
00:29:50,343 --> 00:29:52,073
that just entered
the neighborhood.
719
00:29:52,112 --> 00:29:53,372
How long?
720
00:29:53,413 --> 00:29:54,183
Two minutes at most.
721
00:29:54,214 --> 00:29:55,544
Bring up
the home security cameras.
722
00:29:55,582 --> 00:29:56,982
I need eyes on the perimeter.
723
00:29:58,919 --> 00:30:00,929
We got it.
724
00:30:04,491 --> 00:30:06,051
(groans)
725
00:30:06,093 --> 00:30:07,993
NELSON:
We got a problem, Elijah.
726
00:30:21,141 --> 00:30:24,041
Danny, it's okay.
727
00:30:24,077 --> 00:30:27,177
Just come stand by me
and your brother.
728
00:30:37,624 --> 00:30:39,494
We'll do
anything you ask.
729
00:30:39,526 --> 00:30:42,026
Please, just don't...
730
00:30:42,062 --> 00:30:44,062
don't hurt my family.
731
00:30:52,472 --> 00:30:55,942
Just take what you want.
732
00:30:55,976 --> 00:30:58,246
No one's stopping you;
we're the only ones here.
733
00:30:58,278 --> 00:30:59,418
Check the back,
make sure we're alone.
734
00:31:09,289 --> 00:31:10,489
(whispering):
How'd he get here?
735
00:31:10,523 --> 00:31:13,553
(whispering): He came for a
video game for his sleepover.
736
00:31:13,593 --> 00:31:15,093
Where's my mom and dad?
737
00:31:15,128 --> 00:31:16,568
It's okay, Jeffrey.
738
00:31:16,596 --> 00:31:18,596
Just do what
I tell you.
739
00:31:21,234 --> 00:31:22,964
JEREMY:
All clear.
740
00:31:24,637 --> 00:31:26,437
You.
Me?
741
00:31:26,473 --> 00:31:29,143
You got a computer in here
somewhere-- take me to it.
742
00:31:29,176 --> 00:31:30,976
Danny, do what the
man tells you to do.
743
00:31:31,011 --> 00:31:32,311
Listen to your mother.
744
00:31:32,345 --> 00:31:33,675
She'll get you
out of this alive.
745
00:31:34,714 --> 00:31:36,144
It's, uh,
it's upstairs.
746
00:31:36,183 --> 00:31:37,513
Move.
747
00:31:47,527 --> 00:31:49,497
Have your men hold.
748
00:31:49,529 --> 00:31:51,969
I got two FBI agents
and an innocent in there.
749
00:31:51,999 --> 00:31:53,639
We storm the house at the wrong
time, somebody will get killed.
750
00:31:53,666 --> 00:31:55,236
How the hell did
that kid get in there?
751
00:31:55,268 --> 00:31:57,008
Avery just spotted him
coming in the back door
752
00:31:57,037 --> 00:31:58,377
through the security camera.
753
00:32:00,240 --> 00:32:02,050
I need more men in the back--
there's a hole in that fence.
754
00:32:02,075 --> 00:32:03,245
Fill it now.
755
00:32:03,276 --> 00:32:04,576
How we doing on your end?
756
00:32:04,611 --> 00:32:06,111
Trap's set--
those guys take the bait,
757
00:32:06,146 --> 00:32:07,986
we'll have them dead to rights.
758
00:32:08,015 --> 00:32:09,985
Jail for life, and some.
759
00:32:10,017 --> 00:32:11,987
Um, we've got a volatile
situation in there, Nelson.
760
00:32:12,019 --> 00:32:13,089
We can't wait long.
761
00:32:14,287 --> 00:32:16,457
HENRY:
Sit.
762
00:32:16,489 --> 00:32:19,029
Okay, you got it, but do
you mind lowering your gun?
763
00:32:21,394 --> 00:32:23,394
Open the
system's folder.
764
00:32:24,697 --> 00:32:27,637
Just give me a minute--
I-I'm not good with computers.
765
00:32:27,667 --> 00:32:29,167
Uh, here, here?
766
00:32:29,202 --> 00:32:30,262
Open it.
767
00:32:34,607 --> 00:32:36,447
Now utilities.
768
00:32:37,810 --> 00:32:39,150
Here?
769
00:32:42,149 --> 00:32:44,019
You see two, you moron?
770
00:32:44,051 --> 00:32:46,281
NELSON: This is not good, man,
we're in trouble.
771
00:32:46,319 --> 00:32:48,089
Look, this guy's gonna go ahead
and miss the decoy file.
772
00:32:48,121 --> 00:32:49,421
He has Krumitz looking
in the wrong place.
773
00:32:49,456 --> 00:32:50,656
Nelson, these guys have
short tempers.
774
00:32:50,690 --> 00:32:52,030
Failure is not an option.
775
00:32:52,059 --> 00:32:53,029
Okay, look, uh...
776
00:32:53,060 --> 00:32:54,530
I have an idea.
777
00:33:02,235 --> 00:33:03,705
Open that folder
there, "Installers."
778
00:33:03,736 --> 00:33:04,706
(groans)
779
00:33:04,737 --> 00:33:06,237
(keyboard clacking)
780
00:33:06,273 --> 00:33:07,403
Uh...
781
00:33:10,177 --> 00:33:12,147
You clicked the wrong folder,
you idiot.
782
00:33:12,179 --> 00:33:14,519
(sighs)
Yes.
783
00:33:14,547 --> 00:33:17,217
No, I didn't. No, I didn't.
784
00:33:17,250 --> 00:33:18,690
Wait, wait, wait,
wait, is that it?
785
00:33:18,718 --> 00:33:20,088
Is that it?
Is that it?
786
00:33:21,154 --> 00:33:23,054
HENRY:
That's it.
787
00:33:23,090 --> 00:33:25,060
Good.
788
00:33:25,092 --> 00:33:27,092
Load it on this.
789
00:33:33,266 --> 00:33:35,366
These men'll be leaving
soon, honey.
790
00:33:35,402 --> 00:33:38,132
This will all
be over, I promise.
791
00:33:38,171 --> 00:33:39,731
I said no talking.
792
00:33:39,772 --> 00:33:41,202
Of course.
793
00:33:41,241 --> 00:33:43,101
I apologize.
794
00:33:53,286 --> 00:33:55,826
My son needs to go
to the restroom.
795
00:33:55,855 --> 00:33:57,825
Yeah, well...
796
00:33:57,857 --> 00:33:59,227
he can hold it.
797
00:33:59,259 --> 00:34:01,799
And shut up.
798
00:34:04,231 --> 00:34:06,831
Get over there.
799
00:34:06,866 --> 00:34:08,466
It's about time, man--
did you get it?
800
00:34:08,501 --> 00:34:10,201
I got it, calm down.
801
00:34:11,738 --> 00:34:13,708
JEREMY:
This is taking too long, bro.
802
00:34:13,740 --> 00:34:16,250
We got to get out of here.
803
00:34:16,276 --> 00:34:17,806
Wait a second.
804
00:34:17,844 --> 00:34:20,214
It's payday.
805
00:34:26,919 --> 00:34:28,129
I'm in.
806
00:34:28,155 --> 00:34:29,055
I'm gonna go ahead
and deactivate
807
00:34:29,088 --> 00:34:30,658
these fools' Internet.
It's gonna buy me
808
00:34:30,690 --> 00:34:32,230
some time to find a passkey
809
00:34:32,259 --> 00:34:33,599
before they discover
we slipped them a decoy.
810
00:34:33,626 --> 00:34:35,826
Things are getting tense
in there, Nelson,
811
00:34:35,862 --> 00:34:37,522
we can't wait long.
I'm trying-- I know, I know.
812
00:34:39,399 --> 00:34:41,239
What the hell
is taking so long?
813
00:34:45,238 --> 00:34:46,208
Damn signal.
814
00:34:46,239 --> 00:34:47,339
What?
815
00:34:47,374 --> 00:34:49,204
Wi-Fi isn't working--
give me a sec.
816
00:34:49,242 --> 00:34:50,442
Running a diagnostic.
817
00:34:53,780 --> 00:34:55,690
Now what?
818
00:34:59,486 --> 00:35:01,626
We got an intrusion.
819
00:35:01,654 --> 00:35:03,254
Son of a...
820
00:35:04,624 --> 00:35:05,754
(Jeffrey whimpers)
821
00:35:05,792 --> 00:35:07,852
Shut that kid up
and start talking.
822
00:35:07,894 --> 00:35:09,264
We're running
out of time, Nelson.
823
00:35:09,296 --> 00:35:10,596
I know, I know.
824
00:35:10,630 --> 00:35:12,300
Look, just-just wait, okay?
825
00:35:13,300 --> 00:35:15,410
Can't wait any longer.
826
00:35:15,435 --> 00:35:17,205
JEREMY:
I knew it.
827
00:35:17,237 --> 00:35:18,507
There's no way
these two are family.
828
00:35:18,538 --> 00:35:19,508
Look at that picture.
829
00:35:19,539 --> 00:35:21,479
That's the kid,
all right.
830
00:35:21,508 --> 00:35:23,208
But who the hell are these two?
831
00:35:24,211 --> 00:35:25,611
HENRY: Something
ain't right here.
832
00:35:26,679 --> 00:35:28,189
Talk.
833
00:35:28,215 --> 00:35:29,285
Or die.
834
00:35:31,851 --> 00:35:33,581
FBI!
835
00:35:33,620 --> 00:35:34,660
Get down.
836
00:35:34,687 --> 00:35:36,657
Down on the ground! FBI!
Drop it now!
837
00:35:38,925 --> 00:35:40,425
Your hands where I can see them!
838
00:35:40,460 --> 00:35:41,430
Don't move!
839
00:35:45,532 --> 00:35:47,362
Everybody okay?
840
00:35:47,400 --> 00:35:48,370
You okay?
841
00:35:48,401 --> 00:35:49,361
Yeah.
842
00:35:50,903 --> 00:35:52,533
Clear!
843
00:35:52,572 --> 00:35:53,532
He'll live.
844
00:35:53,573 --> 00:35:54,543
MAN:
Entry clear!
845
00:35:54,574 --> 00:35:55,544
Encrypted.
846
00:35:55,575 --> 00:35:56,705
We'll never get in.
847
00:35:56,743 --> 00:35:57,843
Did Nelson get the file?
848
00:35:57,877 --> 00:35:59,617
I don't know--
couldn't wait.
849
00:35:59,646 --> 00:36:01,616
Nelson.
850
00:36:01,648 --> 00:36:02,988
Did you get
the passkey?
851
00:36:03,015 --> 00:36:04,755
Repeat-- did you
get the passkey?
852
00:36:04,784 --> 00:36:06,614
Oh, yeah, we got it.
853
00:36:06,653 --> 00:36:08,323
Those fools are going down.
854
00:36:17,964 --> 00:36:19,934
Okay.
855
00:36:19,966 --> 00:36:21,606
Bitcoins are back
in your account.
856
00:36:21,634 --> 00:36:23,604
Though you should
change your passkey.
857
00:36:23,636 --> 00:36:25,936
I won't need to.
858
00:36:25,972 --> 00:36:27,972
Getting out
of the bitcoin business.
859
00:36:30,710 --> 00:36:33,620
In fact,
we're selling the store.
860
00:36:35,448 --> 00:36:36,588
It's time.
861
00:36:36,616 --> 00:36:37,986
Thank you.
862
00:36:39,018 --> 00:36:40,658
(door closes)
863
00:36:41,688 --> 00:36:42,558
Pop.
864
00:36:46,926 --> 00:36:49,326
I'm sorry.
865
00:36:55,702 --> 00:36:58,602
ELLIS: Promise me you'll
stay close to home.
866
00:36:58,638 --> 00:37:00,638
STEPHEN:
Always.
867
00:37:13,653 --> 00:37:14,623
You ever get sleep?
868
00:37:15,988 --> 00:37:18,498
You have any idea how much
paperwork is required
869
00:37:18,525 --> 00:37:20,495
after you discharge a
government-issued firearm?
870
00:37:20,527 --> 00:37:23,497
You know, I heard you handled
yourself pretty well.
871
00:37:23,530 --> 00:37:25,500
Came face-to-face
with an armed killer,
872
00:37:25,532 --> 00:37:27,492
heard you took him down,
no hesitation.
873
00:37:27,534 --> 00:37:29,904
Come on, man,
you got some skills.
874
00:37:29,936 --> 00:37:31,606
Standard FBI training.
875
00:37:31,638 --> 00:37:33,308
(mocking):
"Standard FBI training."
876
00:37:33,340 --> 00:37:34,310
No, n-n-no.
877
00:37:34,341 --> 00:37:35,641
You?
878
00:37:35,675 --> 00:37:37,705
You are
the real deal, bro.
879
00:37:37,744 --> 00:37:38,844
Well, I did what
I had to do.
880
00:37:38,878 --> 00:37:40,718
You know, a man with
a gun in your face,
881
00:37:40,747 --> 00:37:41,717
kid in the room,
882
00:37:41,748 --> 00:37:42,848
bad guy's got
to go down.
883
00:37:42,882 --> 00:37:44,712
Even if it was
only a flesh wound.
884
00:37:44,751 --> 00:37:46,711
I mean, really, it's just
instinct at that point.
885
00:37:46,753 --> 00:37:49,753
You know, training takes
over, muscle memory kicks in.
886
00:37:49,789 --> 00:37:51,599
And when that guy
made a move on me,
887
00:37:51,624 --> 00:37:53,594
his gun taking aim,
888
00:37:53,626 --> 00:37:56,326
bayonet inches
from this face...
889
00:37:56,363 --> 00:37:57,663
Whose bayonet?
890
00:37:57,697 --> 00:37:59,667
...I could smell
the gunpowder residue.
891
00:37:59,699 --> 00:38:01,409
Appomattox, Nelson.
892
00:38:01,434 --> 00:38:03,464
Appomattox.
893
00:38:03,503 --> 00:38:04,933
Hey.
Yo.
894
00:38:04,971 --> 00:38:07,671
All I knew was--
it was on.
895
00:38:07,707 --> 00:38:09,807
Him or me.
896
00:38:09,842 --> 00:38:12,072
And it wasn't gonna
be me.
897
00:38:12,111 --> 00:38:13,071
That's right, baby.
898
00:38:13,112 --> 00:38:14,412
That's why you here.
899
00:38:14,447 --> 00:38:16,047
(grunts)
900
00:38:16,082 --> 00:38:18,082
Daniel Krumitz
coming through.
901
00:38:31,731 --> 00:38:32,831
Hey.
902
00:38:32,865 --> 00:38:36,365
* Sweetly touching my emotions
903
00:38:36,403 --> 00:38:37,663
* I wanna stop
904
00:38:37,704 --> 00:38:38,674
(Nelson grunts)
905
00:38:38,705 --> 00:38:40,135
* And thank you, baby
906
00:38:40,172 --> 00:38:42,802
* I just wanna stop
907
00:38:42,842 --> 00:38:44,812
* And thank you, baby
908
00:38:44,844 --> 00:38:46,814
(imitates music)
909
00:38:46,846 --> 00:38:49,446
RYAN AND NELSON:
* How sweet it is
910
00:38:49,482 --> 00:38:51,852
* To be loved by you...
911
00:38:51,884 --> 00:38:52,954
No, you didn't.
912
00:38:52,985 --> 00:38:54,655
Yes, I did.
913
00:38:54,687 --> 00:38:57,527
(chuckles)
914
00:38:57,557 --> 00:38:59,527
You know, uh...
915
00:38:59,559 --> 00:39:00,999
it's my mother's
favorite song.
916
00:39:01,027 --> 00:39:03,067
Me and my pops used
to sing it to her
917
00:39:03,095 --> 00:39:04,735
every year on
her birthday.
918
00:39:04,764 --> 00:39:07,094
Call your parents,
Brody Nelson.
919
00:39:08,568 --> 00:39:10,538
(sighs)
Can't.
920
00:39:10,570 --> 00:39:13,040
It's just not
the same anymore.
921
00:39:13,072 --> 00:39:16,572
I embarrassed them,
went to jail.
922
00:39:16,609 --> 00:39:18,719
Just not the son they
thought they raised.
923
00:39:18,745 --> 00:39:20,945
Call them anyway.
924
00:39:20,980 --> 00:39:23,120
Why do I get the feeling
that giving my stuff back
925
00:39:23,149 --> 00:39:24,959
is a part of one of
your master plans
926
00:39:24,984 --> 00:39:26,954
that Elijah's always
talking about?
927
00:39:26,986 --> 00:39:28,886
I don't know.
928
00:39:34,160 --> 00:39:35,800
(scoffs)
929
00:39:35,828 --> 00:39:40,698
RYAN: * How sweet it is
to be loved by you. *
930
00:39:44,604 --> 00:39:46,874
(dialing)
931
00:39:46,906 --> 00:39:49,106
(line ringing)
932
00:39:52,712 --> 00:39:53,672
MAN:
Hello.
933
00:39:53,713 --> 00:39:55,813
Hey, Dad?
934
00:39:55,848 --> 00:39:57,188
Hey, it's Brody.
935
00:40:00,186 --> 00:40:02,826
Yeah, no, it-it's me,
Pop, it's me.
936
00:40:27,947 --> 00:40:33,917
Captioning sponsored by
CBS
937
00:40:33,953 --> 00:40:35,783
Captioned by
Media Access Group at WGBH
access.wgbh.org