All language subtitles for CSI.Cyber.S01E06.The.Evil.Twin.1080p.WEB-DL.DD5.1.H.264-CtrlHD

af Afrikaans
sq Albanian
am Amharic
ar Arabic
hy Armenian
az Azerbaijani
eu Basque
be Belarusian
bn Bengali
bs Bosnian
bg Bulgarian
ca Catalan
ceb Cebuano
ny Chichewa
zh-CN Chinese (Simplified)
zh-TW Chinese (Traditional)
co Corsican
hr Croatian
cs Czech
da Danish
nl Dutch
en English
eo Esperanto
et Estonian
tl Filipino
fi Finnish
fr French
fy Frisian
gl Galician
ka Georgian
de German
el Greek
gu Gujarati
ht Haitian Creole
ha Hausa
haw Hawaiian
iw Hebrew
hi Hindi
hmn Hmong
hu Hungarian
is Icelandic
ig Igbo
id Indonesian
ga Irish
it Italian
ja Japanese
jw Javanese
kn Kannada
kk Kazakh
km Khmer
ko Korean
ku Kurdish (Kurmanji)
ky Kyrgyz
lo Lao
la Latin
lv Latvian
lt Lithuanian
lb Luxembourgish
mk Macedonian
mg Malagasy
ms Malay
ml Malayalam
mt Maltese
mi Maori
mr Marathi
mn Mongolian
my Myanmar (Burmese)
ne Nepali
no Norwegian
ps Pashto
fa Persian
pl Polish
pt Portuguese
pa Punjabi
ro Romanian
ru Russian
sm Samoan
gd Scots Gaelic
sr Serbian
st Sesotho
sn Shona
sd Sindhi
si Sinhala
sk Slovak
sl Slovenian
so Somali
es Spanish Download
su Sundanese
sw Swahili
sv Swedish
tg Tajik
ta Tamil
te Telugu
th Thai
tr Turkish
uk Ukrainian
ur Urdu
uz Uzbek
vi Vietnamese
cy Welsh
xh Xhosa
yi Yiddish
yo Yoruba
zu Zulu
or Odia (Oriya)
rw Kinyarwanda
tk Turkmen
tt Tatar
ug Uyghur
Would you like to inspect the original subtitles? These are the user uploaded subtitles that are being translated: 1 00:00:00,734 --> 00:00:01,767 My name is avery ryan. 2 00:00:01,769 --> 00:00:03,302 I was a victim of cyber crime. 3 00:00:03,304 --> 00:00:06,038 Like you, I posted on social media, 4 00:00:06,040 --> 00:00:08,607 Checked my bank account balance online, 5 00:00:08,609 --> 00:00:10,676 Even kept the confidential files 6 00:00:10,678 --> 00:00:13,112 Of my psychological practice on my computer. 7 00:00:14,681 --> 00:00:17,616 Then I was hacked, and as a result, 8 00:00:17,618 --> 00:00:20,152 One of my patients was murdered. 9 00:00:20,154 --> 00:00:23,722 My investigation into her death led me to the fbi, 10 00:00:23,724 --> 00:00:26,558 Where I joined a team of cyber experts 11 00:00:26,560 --> 00:00:29,461 To wage a war against a new breed of criminal 12 00:00:29,463 --> 00:00:32,464 Hiding on the deep web... 13 00:00:32,466 --> 00:00:35,567 Infiltrating our daily lives in ways we never imagined... 14 00:00:37,270 --> 00:00:39,271 ...Faceless... 15 00:00:39,273 --> 00:00:41,440 Nameless... 16 00:00:41,442 --> 00:00:43,275 Lurking inside our devices, 17 00:00:43,277 --> 00:00:45,677 Just a keystroke away. 18 00:00:52,252 --> 00:00:54,219 ♪ 19 00:01:21,815 --> 00:01:22,815 Mr. Nelson, 20 00:01:22,817 --> 00:01:24,817 You're late. 21 00:01:24,819 --> 00:01:26,485 (sighs) I'm sorry, avery. 22 00:01:26,487 --> 00:01:28,087 It's just that getting up early 23 00:01:28,089 --> 00:01:29,588 Is something my body's not used to. 24 00:01:31,091 --> 00:01:32,324 Okay, I feel you. 25 00:01:32,326 --> 00:01:33,759 All right, I'll have a talk with my body, 26 00:01:33,761 --> 00:01:35,194 And we'll be here on time. 27 00:01:35,196 --> 00:01:36,228 What you doing? 28 00:01:36,230 --> 00:01:38,363 Oh, rescuing a spider. 29 00:01:38,365 --> 00:01:41,200 Oh. Um... (laughs) 30 00:01:41,202 --> 00:01:43,769 Yeah, do not come near me. Look. Look, I'm-I'm serious. (groans) 31 00:01:43,771 --> 00:01:45,170 Brody nelson, don't tell me you're afraid 32 00:01:45,172 --> 00:01:47,206 Of a little spider? A little spider? 33 00:01:47,208 --> 00:01:48,841 Avery, look at the size of that thing. That's not... 34 00:01:48,843 --> 00:01:51,410 Why are you looking on the ground? 35 00:01:51,412 --> 00:01:53,745 I dropped it. You dropped it. 36 00:01:53,747 --> 00:01:54,746 Avery... 37 00:01:54,748 --> 00:01:56,215 Your bag... Well... 38 00:01:56,217 --> 00:01:57,749 Aah! (laughing) 39 00:01:57,751 --> 00:01:59,318 (shouting) 40 00:01:59,320 --> 00:02:01,253 Well, spiders don't like it when you're late. 41 00:02:01,255 --> 00:02:03,222 Sifter: So your plane's on the tarmac 42 00:02:03,224 --> 00:02:04,890 At national, and you're scheduled to leave 43 00:02:04,892 --> 00:02:07,159 In an hour for new york city. 44 00:02:07,161 --> 00:02:09,128 The kirkendahl hotel believes 45 00:02:09,130 --> 00:02:11,763 That their computer network has been hacked. 46 00:02:11,765 --> 00:02:13,198 That connects every location worldwide. 47 00:02:13,200 --> 00:02:14,633 This is the kirkendahl file. What do we got? 48 00:02:14,635 --> 00:02:16,401 Three days ago, 49 00:02:16,403 --> 00:02:19,271 The hotel's computer intrusion detection system 50 00:02:19,273 --> 00:02:22,141 Went off, sent an alert from their east side property. 51 00:02:22,143 --> 00:02:24,376 And they had their I.T. Team take a look at it? 52 00:02:24,378 --> 00:02:26,378 It appeared to be a glitch, happens all the time. 53 00:02:26,380 --> 00:02:28,380 They reset the system, it happened again. 54 00:02:28,382 --> 00:02:30,549 There's evidence of a remote cyber intrusion. 55 00:02:30,551 --> 00:02:33,218 Kirkendahl's wi-fi has been compromised. 56 00:02:33,220 --> 00:02:35,320 That means the hackers could have access to 57 00:02:35,322 --> 00:02:36,388 The corporate computers 58 00:02:36,390 --> 00:02:38,390 And the guests' personal devices. 59 00:02:38,392 --> 00:02:40,325 And they probably discovered a vulnerable protocol, 60 00:02:40,327 --> 00:02:42,294 Used a root kit to gain access. 61 00:02:42,296 --> 00:02:43,795 Nah, that's doing it the hard way. 62 00:02:43,797 --> 00:02:46,365 There's a known exploit in the authentication credential. 63 00:02:46,367 --> 00:02:48,267 You should know that, right? Of course I know that. 64 00:02:48,269 --> 00:02:51,570 Guys? Guys? You spilled water on your keyboard. 65 00:02:51,572 --> 00:02:52,838 Then I saw a spider. 66 00:02:52,840 --> 00:02:53,872 It's not like I did it on purpose. 67 00:02:53,874 --> 00:02:55,674 Whatever. Let's just reign in 68 00:02:55,676 --> 00:02:57,176 Our intellect here. 69 00:02:57,178 --> 00:02:59,545 That hotel is right next to the u.N. 70 00:02:59,547 --> 00:03:01,246 A lot of high-profile people stay there. 71 00:03:01,248 --> 00:03:02,648 Diplomats, dignitaries, celebrities. 72 00:03:02,650 --> 00:03:05,184 Yeah, and the u.N. Is back in session in two days. 73 00:03:05,186 --> 00:03:06,752 We could be looking at a dark hotel scenario here. 74 00:03:06,754 --> 00:03:08,887 Hackers targeting the guests. Yeah, or an attack 75 00:03:08,889 --> 00:03:10,322 Against the kirkendahl corporation itself. 76 00:03:10,324 --> 00:03:12,591 Either way, documents could be released. 77 00:03:12,593 --> 00:03:15,394 E-mails, texts, sensitive information 78 00:03:15,396 --> 00:03:17,796 That could embarrass or expose some very important people. 79 00:03:17,798 --> 00:03:19,331 Well, I've got a meeting coming up 80 00:03:19,333 --> 00:03:20,532 With the fbi director. 81 00:03:20,534 --> 00:03:22,334 I'll tell him my team is on it, 82 00:03:22,336 --> 00:03:24,503 And that none of that will happen. 83 00:03:24,505 --> 00:03:26,538 Enjoy your flight. 84 00:03:41,955 --> 00:03:43,655 Woman: At the suggestion of our in-house 85 00:03:43,657 --> 00:03:46,391 Technical support team, we shut down the wi-fi. 86 00:03:46,393 --> 00:03:49,228 Has any employee or guest reported any strange e-mails, 87 00:03:49,230 --> 00:03:51,463 Of their individual devices being hacked? 88 00:03:51,465 --> 00:03:54,466 What about pop-up alerts instructing them 89 00:03:54,468 --> 00:03:56,868 To update a file or a program? 90 00:03:56,870 --> 00:03:58,470 I don't know. Those pop-ups appear all the time, 91 00:03:58,472 --> 00:04:00,405 Even on my home computer. 92 00:04:00,407 --> 00:04:02,407 Well, it's one of the ways that devices are hacked. 93 00:04:02,409 --> 00:04:04,476 A free download or product upgrade 94 00:04:04,478 --> 00:04:05,911 That looks like it's authentic. 95 00:04:05,913 --> 00:04:08,680 But instead of it being the actual product, 96 00:04:08,682 --> 00:04:11,483 It's the delivery of malware-- malicious software. 97 00:04:11,485 --> 00:04:15,320 The code gets released into the computer like a virus, 98 00:04:15,322 --> 00:04:16,755 And the hacker takes over. 99 00:04:16,757 --> 00:04:18,757 It's like the hacker's lurking inside the device. 100 00:04:18,759 --> 00:04:20,859 When a guest logs on to your wi-fi, the hacker is able 101 00:04:20,861 --> 00:04:23,695 To see their room number, the last name on their account, 102 00:04:23,697 --> 00:04:24,963 Even get their passwords. 103 00:04:24,965 --> 00:04:26,632 But-but we-we shut down the wi-fi, 104 00:04:26,634 --> 00:04:28,500 So that should protect us, right? 105 00:04:28,502 --> 00:04:29,301 Mundo: Depends. 106 00:04:29,303 --> 00:04:32,404 Some malware is programmed to lay in wait 107 00:04:32,406 --> 00:04:34,373 For six hours, six days, six months or more. 108 00:04:34,375 --> 00:04:37,309 Should-should we be copying and deleting documents? 109 00:04:37,311 --> 00:04:39,011 No. Despite the definition of the word "delete," 110 00:04:39,013 --> 00:04:41,446 In the cyber world, almost anything can be recovered. 111 00:04:41,448 --> 00:04:46,451 Agent ryan, as in-house counsel for the kirkendahl corporation, 112 00:04:46,453 --> 00:04:49,388 I can't stress enough the importance of privacy here. 113 00:04:49,390 --> 00:04:50,856 It is something that we guarantee 114 00:04:50,858 --> 00:04:53,492 To our board members, our employees and our guests. 115 00:04:53,494 --> 00:04:55,460 There must be something that we can do. 116 00:04:55,462 --> 00:04:58,297 Many of our guests use aliases when checking in, 117 00:04:58,299 --> 00:05:01,066 But their real names and home addresses are in our files. 118 00:05:01,068 --> 00:05:04,503 Some engage in activity that we keep very confidential, 119 00:05:04,505 --> 00:05:06,838 And I'm talking about more than just ordering an adult movie. 120 00:05:06,840 --> 00:05:08,607 We-we send e-mails and texts 121 00:05:08,609 --> 00:05:11,343 Containing confidential company information-- 122 00:05:11,345 --> 00:05:12,511 Bonuses, salaries, 123 00:05:12,513 --> 00:05:13,779 Mergers. 124 00:05:13,781 --> 00:05:15,781 Activity that will have serious repercussions 125 00:05:15,783 --> 00:05:17,816 If those communications became public. 126 00:05:17,818 --> 00:05:20,519 (phone ringing) pardon me. 127 00:05:20,521 --> 00:05:22,721 Yes. 128 00:05:22,723 --> 00:05:24,723 Say that again. 129 00:05:24,725 --> 00:05:26,658 (sighs) 130 00:05:26,660 --> 00:05:27,826 All right. 131 00:05:27,828 --> 00:05:29,594 Our hotel 132 00:05:29,596 --> 00:05:30,929 Security footage has been wiped. 133 00:05:30,931 --> 00:05:35,701 Lobby... Entrances... Guest room corridors. 134 00:05:35,703 --> 00:05:38,403 Everything recorded in the past week. 135 00:05:38,405 --> 00:05:39,838 Was the system connected to the wi-fi? 136 00:05:39,840 --> 00:05:41,873 Yes. 137 00:05:43,676 --> 00:05:45,744 Ryan: If your surveillance footage was wiped, 138 00:05:45,746 --> 00:05:47,846 I don't think our hacker is interested 139 00:05:47,848 --> 00:05:49,448 In these confidential files 140 00:05:49,450 --> 00:05:50,682 That you're worried about, counselor. 141 00:05:50,684 --> 00:05:52,884 Something else is going on here. 142 00:05:52,886 --> 00:05:55,420 Something happened here at your hotel, 143 00:05:55,422 --> 00:05:57,889 And someone is trying to cover it up. 144 00:05:57,891 --> 00:05:59,925 (rock music playing loudly) man: Ms. Foster? 145 00:06:01,961 --> 00:06:04,563 This is the hotel manager. 146 00:06:04,565 --> 00:06:07,733 Ms. Foster, your music is disturbing other guests! 147 00:06:20,546 --> 00:06:21,646 (music stops) 148 00:06:32,592 --> 00:06:34,760 Ms. Foster? 149 00:06:34,762 --> 00:06:36,862 Oh, geez. 150 00:06:39,565 --> 00:06:41,633 Security. Call 911. 151 00:06:46,439 --> 00:06:49,708 (camera clicking) 152 00:06:52,512 --> 00:06:54,679 (indistinct police radio chatter) 153 00:06:59,018 --> 00:07:01,853 (whimpering) 154 00:07:03,723 --> 00:07:05,857 (camera clicking) 155 00:07:32,618 --> 00:07:34,653 Mundo: The victim is adel foster, 156 00:07:34,655 --> 00:07:38,190 She checked into this room five days ago alone. 157 00:07:38,192 --> 00:07:40,659 Driver's license lists her address as 158 00:07:40,661 --> 00:07:44,496 Nypd are reaching out to new jersey police and her family. 159 00:07:44,498 --> 00:07:45,664 Room's disorganized. 160 00:07:45,666 --> 00:07:47,799 Bruises on her wrists. 161 00:07:47,801 --> 00:07:49,868 Indicates... A struggle. 162 00:07:49,870 --> 00:07:51,937 Most likely, a crime of passion. 163 00:07:51,939 --> 00:07:53,472 Detectives canvassed the hotel guests. 164 00:07:53,474 --> 00:07:55,140 Nobody heard or saw anything. 165 00:07:55,142 --> 00:07:58,610 Most belonged to the victim, the rest to housekeeping. 166 00:07:58,612 --> 00:07:59,878 However, 167 00:07:59,880 --> 00:08:01,780 I did find this in the plumbing. 168 00:08:01,782 --> 00:08:03,715 The victim's cell phone. 169 00:08:07,753 --> 00:08:11,490 The target tried to destroy it and then flush it. 170 00:08:17,797 --> 00:08:22,701 Ryan: Well, the water likely corroded the connectors. 171 00:08:22,703 --> 00:08:26,605 Data recovery is gonna be tough. 172 00:08:26,607 --> 00:08:28,106 The hotel invoice. 173 00:08:28,108 --> 00:08:30,075 Looks like around 3:00 this morning, 174 00:08:30,077 --> 00:08:32,010 She ordered a late-night snack and a movie. 175 00:08:32,012 --> 00:08:33,645 Behavior of an insomniac. 176 00:08:33,647 --> 00:08:37,282 Food for one. That indicates she was alone. 177 00:08:37,284 --> 00:08:39,918 Mundo: Wait a minute. This is strange. 178 00:08:39,920 --> 00:08:42,587 What? The medical examiner just established 179 00:08:42,589 --> 00:08:44,122 Approximate time of death. 180 00:08:44,124 --> 00:08:45,624 Three nights ago. 181 00:08:45,626 --> 00:08:47,092 What? 182 00:08:47,094 --> 00:08:48,793 It's a hotel. How does housekeeping not find the body? 183 00:08:48,795 --> 00:08:50,595 Stranger than that, 184 00:08:50,597 --> 00:08:52,764 According to the room invoice, 185 00:08:52,766 --> 00:08:56,201 Yesterday and the day before, she ordered laundry, 186 00:08:56,203 --> 00:08:57,769 Room and spa services, 187 00:08:57,771 --> 00:08:58,904 And a movie. 188 00:08:58,906 --> 00:09:01,273 And this morning, breakfast. 189 00:09:01,275 --> 00:09:04,175 Well, it looks like adel foster was alive 190 00:09:04,177 --> 00:09:06,778 For three days after she died. 191 00:09:10,049 --> 00:09:16,254 ♪ I know you've deceived me, now here's a surprise ♪ 192 00:09:18,124 --> 00:09:23,895 ♪ I know that you have, 'cause there's magic in my eyes ♪ 193 00:09:23,897 --> 00:09:28,066 ♪ I can see for miles and miles ♪ 194 00:09:28,068 --> 00:09:31,603 ♪ I can see for miles and miles ♪ 195 00:09:31,605 --> 00:09:35,941 ♪ I can see for miles and miles ♪ 196 00:09:35,943 --> 00:09:39,644 ♪ and miles... 197 00:09:39,646 --> 00:09:41,813 ♪ oh, yeah. 198 00:09:52,793 --> 00:09:54,726 What have you got? 199 00:09:54,728 --> 00:09:56,695 Data from the kirkendahl hotel's computer system. 200 00:09:56,697 --> 00:09:57,862 This is a blueprint layout 201 00:09:57,864 --> 00:09:59,030 Of a standard room. 202 00:09:59,032 --> 00:10:00,365 We can see the computer controls 203 00:10:00,367 --> 00:10:02,801 And monitors pretty much everything that happens. 204 00:10:02,803 --> 00:10:04,769 All run by one central software package 205 00:10:04,771 --> 00:10:06,004 Called the "digital butler." 206 00:10:06,006 --> 00:10:07,906 And this explains why nobody in that hotel 207 00:10:07,908 --> 00:10:09,808 Found adel foster's body for three days? 208 00:10:09,810 --> 00:10:11,009 We believe so. 209 00:10:11,011 --> 00:10:13,612 We detected malware on the hotel server. 210 00:10:13,614 --> 00:10:15,313 It was sent to every employee 211 00:10:15,315 --> 00:10:16,848 Hidden inside a party invitation. 212 00:10:16,850 --> 00:10:18,883 So that's how it breached the firewall. 213 00:10:18,885 --> 00:10:21,886 Ah. And troy fell. 214 00:10:21,888 --> 00:10:23,755 Yeah, it was the trojans themselves 215 00:10:23,757 --> 00:10:25,123 That opened up their own city gates 216 00:10:25,125 --> 00:10:26,958 And pulled the wooden horse inside. 217 00:10:26,960 --> 00:10:28,827 Just like the hotel employees 218 00:10:28,829 --> 00:10:30,829 Who opened the party invitation and let in the malware. 219 00:10:30,831 --> 00:10:32,864 While they blindly celebrated victory, 220 00:10:32,866 --> 00:10:34,966 Their enemy lay in wait. 221 00:10:34,968 --> 00:10:36,401 And troy fell. 222 00:10:39,905 --> 00:10:41,406 Krumitz: Our hacker had 223 00:10:41,408 --> 00:10:43,942 Access to the hotel's main computer. 224 00:10:43,944 --> 00:10:45,343 They found their way to adel's guest room records 225 00:10:45,345 --> 00:10:47,112 And made it look like she was alive and well 226 00:10:47,114 --> 00:10:49,381 Even though adel foster was definitely dead. 227 00:10:49,383 --> 00:10:51,082 Well, that would explain the manicure, 228 00:10:51,084 --> 00:10:53,385 The facial, ordering the movie, 229 00:10:53,387 --> 00:10:55,654 Even room service, but what about housekeeping? 230 00:10:55,656 --> 00:10:57,055 No one ever entered the room. 231 00:10:57,057 --> 00:10:58,256 Because the "do not disturb" sign 232 00:10:58,258 --> 00:11:00,759 Is also controlled by the computer system. 233 00:11:00,761 --> 00:11:03,895 Ramirez: Exactly. Maids won't enter when the light is on. 234 00:11:03,897 --> 00:11:06,364 Hotels connect physical devices and sensors 235 00:11:06,366 --> 00:11:08,833 In the hotel rooms to one central computer 236 00:11:08,835 --> 00:11:10,902 To improve efficiency and cut down cost-- 237 00:11:10,904 --> 00:11:13,038 Controlling thermostats and water temperature, 238 00:11:13,040 --> 00:11:15,106 Providing you with the ease of ordering services 239 00:11:15,108 --> 00:11:17,809 From the hotel channel on your television. 240 00:11:17,811 --> 00:11:20,011 From one computer, they can control everything. 241 00:11:20,013 --> 00:11:21,846 Right. It's why they sometimes charge you 242 00:11:21,848 --> 00:11:23,982 For the items in the minibar just because 243 00:11:23,984 --> 00:11:26,851 You move them. 244 00:11:26,853 --> 00:11:28,853 Now, the pressure sensor on the shelves 245 00:11:28,855 --> 00:11:29,888 Sends a message to the computer telling 246 00:11:29,890 --> 00:11:33,358 Its product has been consumed. 247 00:11:33,360 --> 00:11:36,161 But as we all know, computers can be hacked. 248 00:11:36,163 --> 00:11:38,296 I actually met the hat who wrote the code. 249 00:11:38,298 --> 00:11:41,232 Called it a hospitality hack. 250 00:11:41,234 --> 00:11:43,334 All right, now, once a hacker intrudes 251 00:11:43,336 --> 00:11:45,303 The hotel computer system, he has control 252 00:11:45,305 --> 00:11:47,739 Over room assignments, check in, check out, 253 00:11:47,741 --> 00:11:49,908 Television, 254 00:11:49,910 --> 00:11:52,010 Thermostat... 255 00:11:52,012 --> 00:11:54,345 Oh, my favorite: The remote control curtains. 256 00:11:54,347 --> 00:11:56,114 Check this out. 257 00:11:57,850 --> 00:11:59,451 Wait... 258 00:11:59,453 --> 00:12:02,053 Nelson, are you really doing that? 259 00:12:02,055 --> 00:12:05,123 Did you actually hack this hotel from ctoc? 260 00:12:05,125 --> 00:12:06,858 Yeah, that was me. 261 00:12:06,860 --> 00:12:09,461 The point is if all the conveniences are connected 262 00:12:09,463 --> 00:12:11,730 Through software to one central computer, 263 00:12:11,732 --> 00:12:13,832 Once the hacker's inside the system, 264 00:12:13,834 --> 00:12:15,400 He can create orders for room service, 265 00:12:15,402 --> 00:12:17,168 Housekeeping, laundry pickup... 266 00:12:17,170 --> 00:12:18,837 Ramirez: And none of it really happened. 267 00:12:18,839 --> 00:12:22,874 Mundo: And all activity is recorded under the guest's name 268 00:12:22,876 --> 00:12:24,109 And room number. 269 00:12:24,111 --> 00:12:25,844 Which explains why a dead woman 270 00:12:25,846 --> 00:12:27,412 Can order room service and a movie. 271 00:12:27,414 --> 00:12:29,247 Ryan: So as far as the hotel knew, 272 00:12:29,249 --> 00:12:31,082 The minibar was being restocked, 273 00:12:31,084 --> 00:12:32,784 The laundry was being picked up, 274 00:12:32,786 --> 00:12:35,320 The maids were performing turndown services. 275 00:12:35,322 --> 00:12:38,256 A hacker can control any guest's room 24/7. 276 00:12:39,492 --> 00:12:42,260 This is a very sophisticated cover-up of a murder. 277 00:12:42,262 --> 00:12:45,029 We need to know more about our victim, adel foster. 278 00:12:45,031 --> 00:12:47,332 Her devices are on their way to you now, krumitz. 279 00:12:47,334 --> 00:12:49,367 We need to find this hospitality hacker. 280 00:12:49,369 --> 00:12:51,402 You can't break into a system this complex 281 00:12:51,404 --> 00:12:53,304 Without leaving some digital dust behind. 282 00:12:53,306 --> 00:12:56,040 We're on it. 283 00:12:56,042 --> 00:12:57,776 All right, so we got our victim's laptop, 284 00:12:57,778 --> 00:12:59,844 Tablet and destroyed cell. 285 00:12:59,846 --> 00:13:01,479 Our killer has a three-day head start. 286 00:13:01,481 --> 00:13:03,281 Puts him right where we want him. 287 00:13:03,283 --> 00:13:05,784 (chuckles) he thinks he got away with murder. 288 00:13:05,786 --> 00:13:07,085 Which means he already made a mistake 289 00:13:07,087 --> 00:13:08,987 That will lead us right to him. 290 00:13:08,989 --> 00:13:11,289 We are gonna find adel foster's murderer. 291 00:13:15,461 --> 00:13:17,462 Nelson: You know, I really could have 292 00:13:17,464 --> 00:13:19,230 Used these things two years ago. 293 00:13:19,232 --> 00:13:21,366 But you know every time apple introduces a new device, 294 00:13:21,368 --> 00:13:23,034 There's a new cord, a new connector, 295 00:13:23,036 --> 00:13:24,936 And then all the old stuff is not compatible with 296 00:13:24,938 --> 00:13:27,205 The new stuff, so then you... You know, you got to go back, 297 00:13:27,207 --> 00:13:29,207 Buy all the new apple products, connect them and... 298 00:13:29,209 --> 00:13:30,942 Dude, dude, really? 299 00:13:30,944 --> 00:13:32,043 We're trying to work here. 300 00:13:32,045 --> 00:13:33,578 Okay, well, then give me something to do. 301 00:13:33,580 --> 00:13:36,948 Here. Lay out all the pieces of this cell phone. 302 00:13:36,950 --> 00:13:38,183 Disassemble it, remove the circuit board, 303 00:13:38,185 --> 00:13:40,118 Then scrub the resistor jumper connections. 304 00:13:40,120 --> 00:13:42,086 There's a toothbrush and alcohol solution 305 00:13:42,088 --> 00:13:44,122 Right over there. Oh, okay. 306 00:13:44,124 --> 00:13:45,990 I see how you do. 307 00:13:45,992 --> 00:13:48,326 New guy gets the poop phone. What? 308 00:13:48,328 --> 00:13:50,395 I happen to know that this was the phone that was recovered 309 00:13:50,397 --> 00:13:52,030 From the toilet in the hotel room. 310 00:13:52,032 --> 00:13:53,932 He's right. 311 00:13:53,934 --> 00:13:55,300 That is the poop phone. 312 00:13:55,302 --> 00:13:57,168 Really? You're gonna encourage this? 313 00:13:57,170 --> 00:13:59,170 And you're not even that new anymore. 314 00:13:59,172 --> 00:14:00,271 Okay, you know what, nelson? 315 00:14:00,273 --> 00:14:02,874 Fine. I will gladly take the poop phone 316 00:14:02,876 --> 00:14:05,043 If you just do me one favor and stop talking. 317 00:14:05,045 --> 00:14:06,544 Guys. Okay, what, you in a bad mood or something, krummy? 318 00:14:06,546 --> 00:14:08,046 You want to talk about it? 319 00:14:08,048 --> 00:14:09,881 Oh. You're having girl problems. 320 00:14:09,883 --> 00:14:11,883 Oh, my... I knew it. 321 00:14:11,885 --> 00:14:13,551 Raven, could you grab me that pen over there 322 00:14:13,553 --> 00:14:15,186 And stab me with it? That would be awesome. 323 00:14:15,188 --> 00:14:17,222 Guys, will you cut it out and come here. You got no game. 324 00:14:17,224 --> 00:14:19,157 I found something. I have... I have game. 325 00:14:19,159 --> 00:14:22,160 I went back to the employee party invitation 326 00:14:22,162 --> 00:14:23,928 Where the malware was embedded. 327 00:14:23,930 --> 00:14:25,997 I couldn't find the information on the computer that sent it. 328 00:14:25,999 --> 00:14:30,902 So, I responded yes. I got back an auto-reply confirmation, 329 00:14:30,904 --> 00:14:34,239 And guess what-- our hacker forgot to anonymize that e-mail. 330 00:14:34,241 --> 00:14:37,275 Pretty sure it's the same one that sent the invitation. 331 00:14:37,277 --> 00:14:39,043 And I got his I.P. Address on the computer. 332 00:14:39,045 --> 00:14:40,545 Yeah! These guys never think two steps ahead. 333 00:14:40,547 --> 00:14:42,447 I love this job. This is gonna 334 00:14:42,449 --> 00:14:44,082 Lead us right to our hacker. 335 00:14:55,494 --> 00:14:58,563 ♪ 336 00:15:03,335 --> 00:15:05,336 Evan wescott? Is this your computer? 337 00:15:05,338 --> 00:15:07,906 Yes. Why? Fbi. 338 00:15:07,908 --> 00:15:09,540 You're under arrest for computer fraud 339 00:15:09,542 --> 00:15:11,910 In connection with the murder of adel foster. 340 00:15:11,912 --> 00:15:13,177 What? What are you talking about? Hey, whoa. 341 00:15:13,179 --> 00:15:15,246 Hold on a minute. I don't even know who that is. 342 00:15:15,248 --> 00:15:18,549 You got the wrong guy. (grunts) I didn't kill anybody. 343 00:15:18,551 --> 00:15:22,020 We can do this the hard way, or you can come quietly. 344 00:15:28,160 --> 00:15:31,029 You hacked the kirkendahl hotel's main computer, evan. 345 00:15:31,031 --> 00:15:34,165 We know this because the I.P. Address of the device used 346 00:15:34,167 --> 00:15:36,034 Led us back to your laptop. 347 00:15:36,036 --> 00:15:38,036 That's impossible. I don't even know how to do 348 00:15:38,038 --> 00:15:39,671 Something like that. Mundo: You created a backdoor 349 00:15:39,673 --> 00:15:41,239 In the computer systems and took control 350 00:15:41,241 --> 00:15:42,140 Of the hotel's hospitality functions-- 351 00:15:42,142 --> 00:15:43,374 Maid service, 352 00:15:43,376 --> 00:15:44,575 Room service, minibar. 353 00:15:44,577 --> 00:15:46,044 You murdered adel and activated 354 00:15:46,046 --> 00:15:50,214 Like she was alive three days after her death. 355 00:15:50,216 --> 00:15:52,717 What? That's insane. I didn't kill anybody. 356 00:15:52,719 --> 00:15:54,585 Your cell phone places you at the hotel 357 00:15:54,587 --> 00:15:56,587 At the exact time of adel foster's murder. 358 00:15:56,589 --> 00:16:01,059 Your phone's location services puts you in that hotel. 359 00:16:01,061 --> 00:16:02,527 Location services? 360 00:16:02,529 --> 00:16:04,595 Mundo: The little program that's always running 361 00:16:04,597 --> 00:16:06,564 In the background of your phone. 362 00:16:06,566 --> 00:16:08,333 Logs everywhere you go. 363 00:16:08,335 --> 00:16:10,234 Ryan: Nifty little feature. 364 00:16:10,236 --> 00:16:14,205 See the elevation listed here? 29.7 meters. 365 00:16:14,207 --> 00:16:16,641 That's roughly seven floors. 366 00:16:16,643 --> 00:16:19,143 Her body was found in room 715. 367 00:16:19,145 --> 00:16:20,979 Okay, I-I'm not a murderer. 368 00:16:20,981 --> 00:16:22,046 Mundo: Really? 369 00:16:22,048 --> 00:16:23,281 'cause you sure sound like one 370 00:16:23,283 --> 00:16:25,283 In the text that you sent adel. 371 00:16:25,285 --> 00:16:27,552 We found that on your phone. 372 00:16:29,054 --> 00:16:31,089 These are not my text messages. 373 00:16:31,091 --> 00:16:34,192 And I already told you, I don't know anybody named adel. 374 00:16:34,194 --> 00:16:36,761 Are you sure you never talked to her? 375 00:16:36,763 --> 00:16:39,263 This is surveillance footage from your bar, evade, 376 00:16:39,265 --> 00:16:40,331 On the night she was murdered. 377 00:16:40,333 --> 00:16:42,633 ♪ 378 00:16:53,445 --> 00:16:56,147 I mean, 'cause that sure as hell looks like her, 379 00:16:56,149 --> 00:16:58,449 And that is definitely you. 380 00:16:58,451 --> 00:17:01,285 Look, man, a lot of people come into my club. 381 00:17:01,287 --> 00:17:03,221 And, yeah, I meet a lot of women. Mundo: Yeah? 382 00:17:03,223 --> 00:17:05,289 Well, this one was murdered three days ago. 383 00:17:06,258 --> 00:17:07,458 Where were you? 384 00:17:07,460 --> 00:17:09,494 I was at the club. 385 00:17:09,496 --> 00:17:11,195 I'm always at the club. 386 00:17:13,232 --> 00:17:15,199 It's a pretty crowded place at night. 387 00:17:15,201 --> 00:17:18,136 Could easily step out for an hour, and no one would miss you. 388 00:17:18,138 --> 00:17:20,238 This is ridiculous. I didn't do anything. 389 00:17:20,240 --> 00:17:22,306 At first, I couldn't understand why you went to all the trouble 390 00:17:22,308 --> 00:17:25,309 To make it look like adel was still alive. 391 00:17:25,311 --> 00:17:27,578 Mundo: You wanted to buy yourself time 392 00:17:27,580 --> 00:17:29,781 To create an alibi. The hotel hack. 393 00:17:29,783 --> 00:17:31,315 And you certainly can't deny 394 00:17:31,317 --> 00:17:33,184 That you were capable of doing it. 395 00:17:33,186 --> 00:17:35,286 You were a computer science major 396 00:17:35,288 --> 00:17:36,754 At kenniwick university. 397 00:17:36,756 --> 00:17:38,456 Day one, nobody found the body. 398 00:17:38,458 --> 00:17:41,292 Day two, no one came for you. 399 00:17:41,294 --> 00:17:43,795 Mundo: Day three, you got comfortable. 400 00:17:43,797 --> 00:17:45,329 You distanced yourself from the murder. 401 00:17:45,331 --> 00:17:47,265 Tying you to the scene of the crime. 402 00:17:47,267 --> 00:17:50,368 You got away with murder. 403 00:17:50,370 --> 00:17:51,436 Almost. Evan: No. 404 00:17:51,438 --> 00:17:52,637 I didn't kill anybody. 405 00:17:52,639 --> 00:17:54,372 I didn't do any of these things. 406 00:17:54,374 --> 00:17:55,673 Evan... 407 00:17:55,675 --> 00:17:59,377 Your devices tell us you're lying. 408 00:18:05,350 --> 00:18:08,086 ♪ 409 00:18:37,750 --> 00:18:42,753 Adel is... Er, was... My girlfriend. 410 00:18:42,755 --> 00:18:44,622 I don't understand how this happened. 411 00:18:44,624 --> 00:18:46,757 Doesn't the hotel have security? 412 00:18:46,759 --> 00:18:48,659 We're still investigating the circumstances 413 00:18:48,661 --> 00:18:49,660 Surrounding adel's death. 414 00:18:52,631 --> 00:18:54,665 When her cell kept going to voicemail, 415 00:18:54,667 --> 00:18:57,602 They said that she was still checked in. 416 00:18:57,604 --> 00:18:59,837 I thought that she had lost her phone. 417 00:18:59,839 --> 00:19:01,839 You know? I mean, she does that a lot. 418 00:19:01,841 --> 00:19:03,908 But I never thought... 419 00:19:07,279 --> 00:19:09,447 ...You know, that, um, that she was dead. 420 00:19:09,449 --> 00:19:11,516 You spoke to her the night that she was killed. 421 00:19:11,518 --> 00:19:12,550 Yeah, she seemed excited. 422 00:19:12,552 --> 00:19:14,218 Talking a mile a minute. 423 00:19:14,220 --> 00:19:15,520 (sniffles) 424 00:19:15,522 --> 00:19:16,487 Adel saved up money 425 00:19:16,489 --> 00:19:18,489 For months for this trip. 426 00:19:18,491 --> 00:19:21,292 You know, she had a whole itinerary: 427 00:19:21,294 --> 00:19:24,462 Coney island, statue of liberty, empire state building, 428 00:19:24,464 --> 00:19:25,897 A couple of broadway shows. 429 00:19:25,899 --> 00:19:27,698 Why didn't you go with her? 430 00:19:29,635 --> 00:19:31,836 I got called into work last minute. 431 00:19:31,838 --> 00:19:33,504 What do you do? 432 00:19:33,506 --> 00:19:35,740 Some part-time stuff. 433 00:19:35,742 --> 00:19:37,508 Operations and safety at the hospital, 434 00:19:37,510 --> 00:19:42,313 They were short on staff and needed some extra help. 435 00:19:42,315 --> 00:19:44,549 I was trying to save money so we could go to europe. 436 00:19:46,485 --> 00:19:48,219 I think, uh... 437 00:19:48,221 --> 00:19:50,521 I think she wanted to experience new york this time on her own. 438 00:19:50,523 --> 00:19:52,256 She loved the city. 439 00:19:54,226 --> 00:19:55,693 Even though we were in east rutherford, 440 00:19:55,695 --> 00:19:57,728 We didn't get up here often. 441 00:19:59,631 --> 00:20:01,599 I'm sorry. I, uh... 442 00:20:01,601 --> 00:20:03,301 I just can't believe 443 00:20:03,303 --> 00:20:05,236 She's gone. 444 00:20:05,238 --> 00:20:07,638 All right. Every piece is scrubbed, dried and connected. 445 00:20:07,640 --> 00:20:09,507 Between that spider this morning 446 00:20:09,509 --> 00:20:11,542 And this phone, boy, I could so use a hot shower. 447 00:20:11,544 --> 00:20:12,977 Dude, man up. 448 00:20:12,979 --> 00:20:16,847 We are gonna rebuild adel's phone and resurrect its memory. 449 00:20:16,849 --> 00:20:18,282 You mean we can do that? 450 00:20:18,284 --> 00:20:19,884 We can actually get data off of this thing? 451 00:20:19,886 --> 00:20:21,586 Watch and learn, son. 452 00:20:21,588 --> 00:20:23,454 This is how the good guys do it. 453 00:20:23,456 --> 00:20:25,656 Watch and learn. 454 00:20:25,658 --> 00:20:27,692 ♪ 455 00:20:47,713 --> 00:20:49,847 ♪ 456 00:21:00,959 --> 00:21:02,893 You see what I'm seeing? 457 00:21:02,895 --> 00:21:04,028 Yeah. 458 00:21:04,030 --> 00:21:06,998 Mundo: So krumitz was able to pull some data 459 00:21:07,000 --> 00:21:09,500 Off adel's phone, but the threatening text messages 460 00:21:09,502 --> 00:21:10,701 From evan aren't there. 461 00:21:10,703 --> 00:21:11,902 Were they deleted? 462 00:21:11,904 --> 00:21:13,437 They never existed. 463 00:21:13,439 --> 00:21:15,439 So I double-checked with evan's service provider. 464 00:21:15,441 --> 00:21:17,508 They have no record of the calls or the texts either. 465 00:21:17,510 --> 00:21:20,511 Which means evan didn't send or receive those texts. 466 00:21:20,513 --> 00:21:22,580 So how did they get on his phone? 467 00:21:22,582 --> 00:21:24,715 So elijah sent me everything he pulled off 468 00:21:24,717 --> 00:21:26,417 Evan wescott's phone. 469 00:21:26,419 --> 00:21:27,885 Those text message conversations 470 00:21:27,887 --> 00:21:29,954 Between evan and adel were faked. 471 00:21:29,956 --> 00:21:32,523 How can somebody fake a text on another device? 472 00:21:32,525 --> 00:21:34,392 Once you get a text message into your phone, 473 00:21:34,394 --> 00:21:36,294 It's added to one long database. 474 00:21:36,296 --> 00:21:38,663 If you're smart enough and have the right software, 475 00:21:38,665 --> 00:21:40,931 You can manipulate that file and make it look 476 00:21:40,933 --> 00:21:43,801 Like you're getting text messages from whoever you want. 477 00:21:43,803 --> 00:21:44,869 Whenever you want. 478 00:21:44,871 --> 00:21:48,339 Or to someone else's phone. 479 00:21:48,341 --> 00:21:51,642 Mmm. "happy new year, krumitz, 480 00:21:51,644 --> 00:21:54,679 From your best pal, sifter." 481 00:21:54,681 --> 00:21:57,648 Sent from your phone January 1, 2016. 482 00:21:57,650 --> 00:21:58,649 That is impressive. 483 00:21:58,651 --> 00:22:01,652 And a little creepy. Yeah. 484 00:22:01,654 --> 00:22:03,454 Now, would you need physical access to evan's phone 485 00:22:03,456 --> 00:22:08,092 No. Plus, evan's phone doesn't even have the software necessary 486 00:22:08,094 --> 00:22:11,095 To manipulate the database-- it had to be done remotely. 487 00:22:11,097 --> 00:22:13,631 And that's not all. Gps coordinates 488 00:22:13,633 --> 00:22:14,932 That put evan wescott in the hotel room 489 00:22:14,934 --> 00:22:16,434 At the time of the murder... 490 00:22:16,436 --> 00:22:17,635 Faked. Faked. 491 00:22:17,637 --> 00:22:19,770 His phone was hacked. Yeah! 492 00:22:19,772 --> 00:22:20,805 Oh... (grunts) 493 00:22:20,807 --> 00:22:23,074 Avery, 494 00:22:23,076 --> 00:22:25,810 All of our digital evidence is lying to us. 495 00:22:25,812 --> 00:22:27,745 Is krumitz sure no mistake was made? 496 00:22:27,747 --> 00:22:30,014 What about the malware injected 497 00:22:30,016 --> 00:22:32,483 Into the hotel's computer system? 498 00:22:32,485 --> 00:22:34,051 It came from evan wescott's computer. 499 00:22:34,053 --> 00:22:36,520 But krumitz doesn't believe evan is our hacker. 500 00:22:36,522 --> 00:22:38,389 He's sure? Sifter: Yes. 501 00:22:38,391 --> 00:22:40,524 And how many times have you told me that daniel krumitz is 502 00:22:40,526 --> 00:22:42,526 The best white hat hacker ever? 503 00:22:42,528 --> 00:22:46,597 Looks like evan wescott is being framed for murder. 504 00:22:52,905 --> 00:22:56,774 They had to route the intrusion through his laptop, 505 00:22:56,776 --> 00:22:58,642 Change the gps, and create those text messages. 506 00:22:58,644 --> 00:23:00,044 Maybe he framed himself. 507 00:23:00,046 --> 00:23:02,580 Clearly, you're new to this and don't understand 508 00:23:02,582 --> 00:23:04,915 The behavior of a criminal. Other than yourself. 509 00:23:04,917 --> 00:23:07,051 What I understand is I would do anything not to go to prison. 510 00:23:07,053 --> 00:23:09,887 Pretty risky to frame yourself. It's working for evan. You believe he's innocent. 511 00:23:09,889 --> 00:23:11,522 I believe in cyber evidence. 512 00:23:11,524 --> 00:23:15,459 I'm just saying his devices could be manipulated by anybody. 513 00:23:15,461 --> 00:23:17,161 Evidence doesn't point to the identity of a hacker. 514 00:23:17,163 --> 00:23:19,163 So what happened when we caught you? 515 00:23:19,165 --> 00:23:20,598 See, why you want to get all personal? 516 00:23:20,600 --> 00:23:21,732 What? That's what I'm saying... 517 00:23:21,734 --> 00:23:23,834 Guys? Guys? (arguing continues) 518 00:23:23,836 --> 00:23:25,803 Stop! Stop! Focus on the case! Whatever, whatever. 519 00:23:25,805 --> 00:23:26,871 Focus on the case. 520 00:23:26,873 --> 00:23:28,706 Whoever hacked them, 521 00:23:28,708 --> 00:23:30,741 Gained access to at least one 522 00:23:30,743 --> 00:23:31,909 Of evan wescott's devices. 523 00:23:31,911 --> 00:23:33,744 Evan has full access to all of his devices. 524 00:23:33,746 --> 00:23:35,045 Physical access is the easiest, 525 00:23:35,047 --> 00:23:37,415 Which is why I think it's evan. Physical access 526 00:23:37,417 --> 00:23:38,749 Is also the riskiest. 527 00:23:38,751 --> 00:23:39,917 Nelson, just for a minute, 528 00:23:39,919 --> 00:23:41,919 Try to buy into the fact that adel's killer 529 00:23:41,921 --> 00:23:46,424 The hacker behind this had to have skills. 530 00:23:46,426 --> 00:23:48,192 Evan has a computer science degree. 531 00:23:48,194 --> 00:23:49,794 (scoffs, groans) I'm just saying! 532 00:23:49,796 --> 00:23:51,862 All right, fine, I'll, uh... 533 00:23:51,864 --> 00:23:53,764 I'll play along. 534 00:23:53,766 --> 00:23:55,766 The hacker could've easily done this remotely. 535 00:23:55,768 --> 00:23:57,835 If I'd done it, I'd "war drive" him. 536 00:23:59,037 --> 00:24:01,872 Pull up to his house. 537 00:24:01,874 --> 00:24:03,574 Hack into his wi-fi, 538 00:24:03,576 --> 00:24:05,543 Plant everything on his computer and phone 539 00:24:05,545 --> 00:24:09,580 While he's still inside, totally oblivious. 540 00:24:09,582 --> 00:24:10,915 It's still too risky. 541 00:24:10,917 --> 00:24:12,650 You're sitting outside of his house. 542 00:24:12,652 --> 00:24:14,185 What if somebody sees you? Or your car? 543 00:24:14,187 --> 00:24:17,521 The best way to do it is from the safety of your own home. 544 00:24:17,523 --> 00:24:18,856 All you have to do is "spear phish" him-- 545 00:24:18,858 --> 00:24:20,691 A socially engineered attack. 546 00:24:20,693 --> 00:24:22,693 Send evan an e-mail with a fake link 547 00:24:22,695 --> 00:24:25,830 From his bank or something, wait for him to click on it, 548 00:24:25,832 --> 00:24:26,897 And then boom! 549 00:24:26,899 --> 00:24:28,732 Full access to his laptop 550 00:24:28,734 --> 00:24:31,969 And any device that connects to it, like his phone! 551 00:24:31,971 --> 00:24:34,672 Okay, so how you know he's gonna click on it? And when? 552 00:24:34,674 --> 00:24:36,607 Whoever did this was short on time. 553 00:24:36,609 --> 00:24:38,676 The best way to stay anonymous and get instant access 554 00:24:38,678 --> 00:24:40,144 To evan's devices is to wait for him 555 00:24:40,146 --> 00:24:42,213 To connect to an open wi-fi signal somewhere. 556 00:24:42,215 --> 00:24:45,216 Anywhere they're advertising free wi-fi is like a hacker's 557 00:24:45,218 --> 00:24:48,052 Virtual playground-- tons of unexpected people unaware 558 00:24:48,054 --> 00:24:50,221 That the person next to them sharing the same connection 559 00:24:50,223 --> 00:24:51,822 Could be intruding onto their devices 560 00:24:51,824 --> 00:24:53,924 And stealing all their information. 561 00:24:53,926 --> 00:24:57,261 Or in evan's case, adding information. 562 00:24:57,263 --> 00:24:58,762 Look, I still think he could've done it himself. 563 00:24:58,764 --> 00:24:59,763 I mean, that's just me. 564 00:24:59,765 --> 00:25:01,699 Wi-fi is the best option. 565 00:25:01,701 --> 00:25:03,834 So... Where was evan hacked? 566 00:25:03,836 --> 00:25:05,736 Well, according to his frequent locations on evan's phone, 567 00:25:05,738 --> 00:25:07,705 He went to the gym three or four times a week. 568 00:25:07,707 --> 00:25:09,006 Most gyms have free wi-fi. Restaurants, too. 569 00:25:09,008 --> 00:25:11,575 I bet you he was eating out every night. 570 00:25:11,577 --> 00:25:13,677 You know, club owners score mad dates. 571 00:25:13,679 --> 00:25:16,714 How often is he at carla's cafe? 572 00:25:17,716 --> 00:25:19,683 Ramirez: Almost every day. 573 00:25:21,686 --> 00:25:23,254 Well, according to the network logs in evan's laptop, 574 00:25:23,256 --> 00:25:24,855 He connected to the coffee shop's wi-fi 575 00:25:24,857 --> 00:25:26,190 The morning after the murder. 576 00:25:26,192 --> 00:25:27,825 You still think it's a possibility 577 00:25:27,827 --> 00:25:29,093 That he framed himself? 578 00:25:29,095 --> 00:25:31,862 Yeah. I do. 579 00:25:39,037 --> 00:25:41,805 All right. So I spoke to the manager. 580 00:25:41,807 --> 00:25:44,742 They're just there as a crime deterrent. 581 00:25:44,744 --> 00:25:46,744 They don't record a damn thing. 582 00:25:46,746 --> 00:25:49,313 But... The wi-fi went down three days ago 583 00:25:49,315 --> 00:25:54,585 Now, according to evan's laptop, he was long gone at that time. 584 00:25:54,587 --> 00:25:56,687 But not onto the cafe's router. 585 00:25:56,689 --> 00:26:00,024 Maybe someone set up an evil twin router. 586 00:26:00,026 --> 00:26:02,026 And that's how he got hacked. Now, my phone... 587 00:26:02,028 --> 00:26:04,061 Can give the illusion of being a wi-fi signal, 588 00:26:04,063 --> 00:26:05,596 Same as a twin router. 589 00:26:05,598 --> 00:26:08,299 All I have to do is activate my own personal hot spot 590 00:26:08,301 --> 00:26:11,268 From my device, and I am open wi-fi. 591 00:26:11,270 --> 00:26:13,270 I can even name it anything I want. 592 00:26:13,272 --> 00:26:16,073 Say we're in carla's cafe, right? 593 00:26:16,075 --> 00:26:19,944 Think I'll name my new hot spot network... 594 00:26:19,946 --> 00:26:21,712 "carla's cafe." 595 00:26:21,714 --> 00:26:23,247 Now, log on to the free wi-fi. 596 00:26:25,884 --> 00:26:27,184 (laughs) 597 00:26:27,186 --> 00:26:29,119 Which one? There are two. 598 00:26:29,121 --> 00:26:32,590 The one I just created and the real one. 599 00:26:32,592 --> 00:26:34,792 I'm guessing our target eliminated 600 00:26:34,794 --> 00:26:36,927 The real carla's cafe wi-fi. 601 00:26:36,929 --> 00:26:38,696 Evan came in, 602 00:26:38,698 --> 00:26:41,632 Logged on to the decoy signal... 603 00:26:41,634 --> 00:26:44,201 And the hacker gained control of his device. 604 00:26:44,203 --> 00:26:45,669 You just did all that with your phone? 605 00:26:45,671 --> 00:26:47,871 Just a few clicks of a button. 606 00:26:47,873 --> 00:26:51,609 Now, I-I can't control your device from my phone, 607 00:26:51,611 --> 00:26:53,844 But our target had an actual router. 608 00:26:53,846 --> 00:26:55,913 He was able to push any information he wanted 609 00:26:55,915 --> 00:26:59,016 Onto evan's devices. 610 00:26:59,018 --> 00:27:01,018 I mean, anytime you log on to open wi-fi, 611 00:27:01,020 --> 00:27:04,955 Or in our case, you become a murder suspect. 612 00:27:04,957 --> 00:27:09,860 Looks like it just happened to evan wescott. 613 00:27:12,797 --> 00:27:14,264 Raven, I need you to track down 614 00:27:14,266 --> 00:27:16,400 The owner of an evil twin router. 615 00:27:26,945 --> 00:27:29,747 (chuckles) right. 616 00:27:29,814 --> 00:27:31,148 Nelson thinks evan framed himself. 617 00:27:31,150 --> 00:27:33,317 That would be a smart move. 618 00:27:33,319 --> 00:27:35,653 You don't really believe that, do you? 619 00:27:35,655 --> 00:27:37,187 Nelson thinks the way hackers do. 620 00:27:37,189 --> 00:27:38,856 But... 621 00:27:38,858 --> 00:27:40,924 Evan has no motive. 622 00:27:40,926 --> 00:27:43,427 And no definitive connection to adel foster 623 00:27:43,429 --> 00:27:45,963 Other than a kiss; and kisses rarely 624 00:27:45,965 --> 00:27:47,331 Get you convicted of murder. 625 00:27:51,102 --> 00:27:53,937 You miss new york. 626 00:27:53,939 --> 00:27:55,873 Yeah, feeling a bit nostalgic. 627 00:27:55,875 --> 00:27:58,909 I opened my first practice in manhattan. 628 00:27:58,911 --> 00:28:00,444 Hung the shingle on a brownstone 629 00:28:00,446 --> 00:28:02,913 Just like that one there. Went from 630 00:28:02,915 --> 00:28:05,249 Analyzing minds to analyzing cyber criminals. 631 00:28:05,251 --> 00:28:08,218 Wasn't really a plan, it just happened. 632 00:28:08,220 --> 00:28:10,020 You ever think about moving back? 633 00:28:10,022 --> 00:28:11,321 No. 634 00:28:11,323 --> 00:28:13,791 I only think about one thing. 635 00:28:13,793 --> 00:28:16,427 Catching the guy that hacked and stole my files. 636 00:28:16,429 --> 00:28:18,962 There isn't a morning where I don't wake up wondering 637 00:28:18,964 --> 00:28:20,431 If today's the day that he's gonna 638 00:28:20,433 --> 00:28:22,733 Release private patient information. 639 00:28:22,735 --> 00:28:24,268 And the whole nightmare will start all over again. 640 00:28:24,270 --> 00:28:26,136 We'll catch him. 641 00:28:26,138 --> 00:28:28,138 (sighs) 642 00:28:28,140 --> 00:28:30,974 You know what I miss about this place? 643 00:28:30,976 --> 00:28:32,076 The mets. 644 00:28:32,078 --> 00:28:34,144 The mets? (laughs) 645 00:28:35,346 --> 00:28:37,414 I would comment, but you'd probably fire me. 646 00:28:39,350 --> 00:28:41,752 But there is one question I can't shake, elijah. 647 00:28:41,754 --> 00:28:43,120 Evan wescott. 648 00:28:43,122 --> 00:28:44,354 What about him? 649 00:28:44,356 --> 00:28:46,123 Well, the beauty of an open wi-fi hack 650 00:28:46,125 --> 00:28:48,125 Is its sheer randomness. 651 00:28:48,127 --> 00:28:51,328 Our killer could've framed anyone on his router 652 00:28:51,330 --> 00:28:53,230 For adel's murder. 653 00:28:53,232 --> 00:28:55,499 You think the target chose evan specifically. 654 00:28:55,501 --> 00:28:57,768 Adel went to evan's club the night of the murder. 655 00:28:57,770 --> 00:28:59,903 And the next morning, evan ends up at carla's cafe 656 00:28:59,905 --> 00:29:02,840 At the exact same time as the evil twin router. 657 00:29:02,842 --> 00:29:04,274 It feels personal. 658 00:29:04,276 --> 00:29:06,510 Our target crafted a murder for evan. 659 00:29:06,512 --> 00:29:08,212 Fabricated texts 660 00:29:08,214 --> 00:29:11,949 And gps data, linked him to the hotel hack. 661 00:29:11,951 --> 00:29:15,786 He set up evan as a fall guy for a reason, but why? 662 00:29:18,223 --> 00:29:20,290 I identified the router that was used 663 00:29:20,292 --> 00:29:22,126 To hack evan in carla's cafe. 664 00:29:22,128 --> 00:29:23,327 The latest and greatest 665 00:29:23,329 --> 00:29:25,162 In evil twin deception, huh? 666 00:29:25,164 --> 00:29:28,232 Manufacturer gave me the big box store where it was sold. 667 00:29:28,234 --> 00:29:30,000 All right, from your smirk, I'm guessing 668 00:29:30,002 --> 00:29:31,969 It was purchased recently. Mm-hmm. 669 00:29:31,971 --> 00:29:34,238 Point of sale puts that gentleman at the register. 670 00:29:34,240 --> 00:29:36,306 He paid cash. 671 00:29:36,308 --> 00:29:39,076 Get this to avery and elijah. 672 00:29:39,078 --> 00:29:40,277 We've got him. 673 00:29:40,279 --> 00:29:42,446 (tablet chimes) 674 00:29:42,448 --> 00:29:45,249 Look who was in manhattan the morning after adel's murder. 675 00:29:45,251 --> 00:29:47,417 Just got this from raven. 676 00:29:47,419 --> 00:29:50,420 Oh. The heartbroken boyfriend. 677 00:29:55,960 --> 00:29:58,195 Mundo: Shane tillman, fbi! 678 00:30:06,337 --> 00:30:08,338 He's not here. 679 00:30:11,309 --> 00:30:13,277 I'm gonna image the hard drive, 680 00:30:13,279 --> 00:30:16,146 Send it to nelson and krumitz to comb through the data. 681 00:30:16,148 --> 00:30:18,248 Ryan: Broken cup. 682 00:30:20,819 --> 00:30:22,386 Damaged wall. 683 00:30:22,388 --> 00:30:23,887 There was an argument. 684 00:30:28,593 --> 00:30:30,227 Adel wasn't visiting new york. 685 00:30:30,229 --> 00:30:32,963 She was running away from shane. 686 00:30:32,965 --> 00:30:35,065 You know, something struck me as odd when I saw 687 00:30:35,067 --> 00:30:37,467 The bruises on her wrist at the crime scene. 688 00:30:37,469 --> 00:30:40,270 Look. They're purple, almost black. 689 00:30:40,272 --> 00:30:42,339 If she'd gotten these during the struggle the night 690 00:30:42,341 --> 00:30:44,975 That she was killed, they'd be pink or not even visible. 691 00:30:44,977 --> 00:30:47,544 She got these before the night she was killed. 692 00:30:50,949 --> 00:30:54,284 Adel was leaving shane. 693 00:30:54,286 --> 00:30:55,619 He came home. 694 00:30:59,924 --> 00:31:00,991 Stop it! 695 00:31:00,993 --> 00:31:02,259 He pulled her things out of her bag 696 00:31:02,261 --> 00:31:04,061 To prevent her from leaving. 697 00:31:04,063 --> 00:31:05,529 When she escaped, he grabbed her wrists, 698 00:31:05,531 --> 00:31:06,997 Which caused the bruising. 699 00:31:06,999 --> 00:31:08,298 (both grunting) 700 00:31:08,300 --> 00:31:10,367 Oh, god! (groaning) 701 00:31:15,139 --> 00:31:18,575 When she left, he started drinking. 702 00:31:18,577 --> 00:31:20,043 He followed her 703 00:31:20,045 --> 00:31:21,545 To new york and he killed her. 704 00:31:21,547 --> 00:31:25,148 My god. 705 00:31:25,150 --> 00:31:28,252 Even when women get the courage to leave abusive relationships, 706 00:31:28,254 --> 00:31:30,387 Sometimes they still get killed. 707 00:31:30,389 --> 00:31:32,256 So what's his next move? 708 00:31:32,258 --> 00:31:34,358 Well, he's angry. 709 00:31:34,360 --> 00:31:36,059 He's calculated. 710 00:31:36,061 --> 00:31:37,427 He's got nothing to lose. 711 00:31:45,003 --> 00:31:47,271 And he's armed and dangerous. 712 00:31:47,273 --> 00:31:48,906 Ramirez: I just hit a dead end. 713 00:31:48,908 --> 00:31:50,607 Tillman's phone's not showing a signal. 714 00:31:50,609 --> 00:31:53,377 He must have turned it off. There's no way to track him. 715 00:31:53,379 --> 00:31:55,279 I'll see what we can do with tillman's laptop. 716 00:31:55,281 --> 00:31:57,381 His recent online activity should give us a glimpse 717 00:31:57,383 --> 00:32:02,019 Yeah, well, clearing your history may hide porn sites 718 00:32:02,021 --> 00:32:04,288 From your girlfriend, but it won't hide anything from me. 719 00:32:04,290 --> 00:32:08,191 Browser artifacts are easily recovered with the right tools. 720 00:32:08,193 --> 00:32:10,394 Oh, check it out. Mostly new york news affiliates. 721 00:32:10,396 --> 00:32:12,930 He's following the adel foster murder investigation. You think he knows 722 00:32:12,932 --> 00:32:14,364 We're onto him? Always assume 723 00:32:14,366 --> 00:32:16,066 That the bad guys are two steps ahead of you, nelson. 724 00:32:16,068 --> 00:32:17,301 That way, you're prepared for anything, 725 00:32:17,303 --> 00:32:19,202 And you're never caught off guard. 726 00:32:19,204 --> 00:32:22,539 Hey, man, he visited a cell phone locating site? 727 00:32:22,541 --> 00:32:24,374 I mean, what, he lost his cell phone? 728 00:32:24,376 --> 00:32:26,143 No, he wasn't looking for his phone. 729 00:32:26,145 --> 00:32:28,011 He was tracking someone else. Look. 730 00:32:28,013 --> 00:32:29,313 That area code is 212. 731 00:32:29,315 --> 00:32:31,315 That's new york, not jersey. 732 00:32:31,317 --> 00:32:33,350 Krumitz: I'll call elijah. 733 00:32:33,352 --> 00:32:35,652 Elijah, shane tillman is using 734 00:32:35,654 --> 00:32:37,654 A cell phone location tracking site. 735 00:32:37,656 --> 00:32:39,423 He's going after evan wescott! 736 00:32:39,425 --> 00:32:41,425 ♪ 737 00:33:20,064 --> 00:33:21,598 Whoa, whoa, whoa, hey. 738 00:33:21,600 --> 00:33:23,266 Problem is with me. 739 00:33:23,268 --> 00:33:24,768 Just let these people go. Shut up! 740 00:33:24,770 --> 00:33:27,304 This wouldn't be happening if it wasn't for you. 741 00:33:27,306 --> 00:33:29,506 You took her away from me. Buddy, I think you got the wrong guy. 742 00:33:29,508 --> 00:33:31,575 It was you! It was you! 743 00:33:31,577 --> 00:33:34,411 I saw you with adel right here in this bar. 744 00:33:43,187 --> 00:33:46,256 Look, man, just drop the gun, and we can talk 745 00:33:46,258 --> 00:33:48,392 About whatever it is that you think may have happened. 746 00:33:48,394 --> 00:33:50,727 No, I know what happened! I know what happened! 747 00:33:50,729 --> 00:33:52,596 (siren wailing) 748 00:33:59,470 --> 00:34:01,405 You took her away from me. 749 00:34:01,407 --> 00:34:02,773 Of course, you don't remember. 750 00:34:02,775 --> 00:34:04,474 There's so many women, aren't there? 751 00:34:04,476 --> 00:34:05,809 You just have to have them all? 752 00:34:05,811 --> 00:34:08,745 I needed a chance to explain, to say I was sorry. 753 00:34:08,747 --> 00:34:12,082 To say I was sorry. 754 00:34:12,084 --> 00:34:13,717 But you... You were all over her. 755 00:34:13,719 --> 00:34:16,186 And I could see in her eyes, she wasn't coming back to me. 756 00:34:16,188 --> 00:34:17,721 Shane? 757 00:34:18,790 --> 00:34:20,824 Stay where you are! 758 00:34:22,060 --> 00:34:23,794 Stay where you are! 759 00:34:23,796 --> 00:34:26,696 Or this isn't gonna end the way you want it to. 760 00:34:26,698 --> 00:34:28,799 Let her go and put down the gun. 761 00:34:28,801 --> 00:34:30,767 He killed my girlfriend, and you did nothing. 762 00:34:30,769 --> 00:34:33,770 At the count of three, I'm gonna discharge this weapon. 763 00:34:33,772 --> 00:34:35,138 You need to decide 764 00:34:35,140 --> 00:34:37,140 What you're gonna do. One, two... 765 00:34:37,142 --> 00:34:38,542 Okay. 766 00:34:38,544 --> 00:34:40,243 Okay. 767 00:34:42,447 --> 00:34:43,447 Good. 768 00:34:43,449 --> 00:34:44,648 Now kick it towards me. 769 00:35:04,235 --> 00:35:05,602 Stay right where you are. 770 00:35:10,108 --> 00:35:12,175 W-wait, don't do that, don't do that. 771 00:35:12,177 --> 00:35:14,211 I can't live without her! 772 00:35:14,213 --> 00:35:15,345 Shane. Shane! 773 00:35:18,516 --> 00:35:19,649 I got you! 774 00:35:19,651 --> 00:35:20,784 Hang on! 775 00:35:20,786 --> 00:35:22,185 I got you! 776 00:35:43,875 --> 00:35:46,143 ♪ 777 00:36:08,599 --> 00:36:09,933 Ryan: Are you okay? 778 00:36:09,935 --> 00:36:12,669 Yeah. Yeah. 779 00:36:12,671 --> 00:36:13,837 We got him. 780 00:36:13,839 --> 00:36:15,505 We're not done. 781 00:36:15,507 --> 00:36:17,641 We still haven't put shane tillman 782 00:36:17,643 --> 00:36:19,809 In that hotel room at the time of the murder. 783 00:36:19,811 --> 00:36:22,212 We still have to prove who killed adel foster. 784 00:36:24,482 --> 00:36:25,949 Anything on shane's phone? 785 00:36:25,951 --> 00:36:28,451 I need to know what we've got before I question him. 786 00:36:28,453 --> 00:36:29,519 Sifter: Well, nothing concrete. 787 00:36:29,521 --> 00:36:31,354 I'm heading in now for an update. 788 00:36:31,356 --> 00:36:33,223 Krumitz: Yeah! Nelson: That's what I'm talking about! 789 00:36:33,225 --> 00:36:34,357 We got it. 790 00:36:34,359 --> 00:36:36,193 We found proof. 791 00:36:36,928 --> 00:36:38,929 (stammers) 792 00:36:38,931 --> 00:36:40,864 I'm gonna call you back. 793 00:36:40,866 --> 00:36:42,933 Wh-what kind of proof did you find? 794 00:36:42,935 --> 00:36:46,369 Proof that shane tillman was at the scene of the crime. 795 00:36:46,371 --> 00:36:48,471 Proof that he murdered adel foster? 796 00:36:48,473 --> 00:36:49,839 If we're lucky, both. 797 00:36:49,841 --> 00:36:51,541 It's called a motion tracking chip. 798 00:36:51,543 --> 00:36:52,842 Most new smartphones have them, 799 00:36:52,844 --> 00:36:57,314 It's a motion co-processor that collects and stores motion data 800 00:36:57,316 --> 00:37:00,317 On the phone's accelerometers, gyroscopes and compasses. 801 00:37:00,319 --> 00:37:01,551 All right, so basically it just... 802 00:37:01,553 --> 00:37:02,819 It records movement. 803 00:37:02,821 --> 00:37:04,821 Yeah, it's how an exercise app knows the difference 804 00:37:04,823 --> 00:37:06,356 Between when you're jogging versus walking, 805 00:37:06,358 --> 00:37:08,558 Which direction you're headed-- 806 00:37:08,560 --> 00:37:10,460 Pretty much however your phone's moving. 807 00:37:10,462 --> 00:37:11,695 Krumitz: As the phone moves, 808 00:37:11,697 --> 00:37:14,264 The motion tracking chip records all of it. 809 00:37:14,266 --> 00:37:15,999 It will detect a pitch, a roll, a tilt-- 810 00:37:16,001 --> 00:37:18,001 Every movement the phone makes. 811 00:37:18,003 --> 00:37:20,537 Right, and it's always on. And it's separate from the main processor. 812 00:37:20,539 --> 00:37:22,539 Let me get this right-- so if data were altered 813 00:37:22,541 --> 00:37:24,874 On that device, it would never cross your minds 814 00:37:24,876 --> 00:37:26,543 To manipulate that file. 815 00:37:26,545 --> 00:37:28,545 Exactly. So we pulled all the data 816 00:37:28,547 --> 00:37:32,649 Off shane's motion tracking chip, and this is what we found. 817 00:37:32,651 --> 00:37:34,551 So the one on the left is the motion tracking chip 818 00:37:34,553 --> 00:37:36,953 From shane's phone; the one on the right is adele's. 819 00:37:36,955 --> 00:37:40,957 To the last time adel's phone moved before she was murdered. 820 00:37:47,265 --> 00:37:49,299 Nelson: Most people keep their phones in their pants pockets. 821 00:37:49,301 --> 00:37:51,401 Krumitz: Which means the phone was recording their movement. 822 00:37:51,403 --> 00:37:54,838 So if two people were fighting, and we had both phones... 823 00:37:54,840 --> 00:37:56,273 Sifter: Right, we could reenact the fight. 824 00:37:56,275 --> 00:37:57,474 Nelson: Yeah. 825 00:38:15,326 --> 00:38:16,660 Who is he?! 826 00:38:16,662 --> 00:38:18,828 Who is he? 827 00:38:18,830 --> 00:38:20,664 Tell me who he is! Leave me alone! 828 00:38:20,666 --> 00:38:22,732 I'm not your girlfriend anymore! 829 00:38:40,418 --> 00:38:42,352 Adel? 830 00:38:51,896 --> 00:38:54,531 Well, this not only puts shane tillman in the room 831 00:38:54,533 --> 00:38:58,101 At the time of the murder, it proves that he killed her. 832 00:39:04,809 --> 00:39:07,477 Avery: You covered your tracks from every possible angle. 833 00:39:07,479 --> 00:39:09,479 You wiped your phone of any wrongdoing, 834 00:39:09,481 --> 00:39:11,481 Pushed all the evidence to evan's devices, 835 00:39:11,483 --> 00:39:14,784 You even hacked the hotel, wiped its security footage. 836 00:39:14,786 --> 00:39:16,786 Ryan: It was all very clever. 837 00:39:16,788 --> 00:39:19,022 But you forgot one thing. 838 00:39:19,024 --> 00:39:21,024 One thing most people don't know about-- 839 00:39:21,026 --> 00:39:23,860 Your phone's motion tracking chip. 840 00:39:25,963 --> 00:39:29,699 Cyber-synchronized offender and victim. 841 00:39:31,635 --> 00:39:34,404 Records every movement. 842 00:39:34,406 --> 00:39:37,374 Proves you killed your girlfriend. 843 00:39:37,376 --> 00:39:38,908 (sniffles) 844 00:39:53,858 --> 00:39:55,925 What's this? 845 00:39:58,996 --> 00:40:00,397 Nelson: No! (ryan stammers) 846 00:40:01,432 --> 00:40:03,032 No, no! You freed it?! 847 00:40:03,034 --> 00:40:04,701 Oh, what? 848 00:40:04,703 --> 00:40:07,404 Uh, there was a cup in the middle of the floor. 849 00:40:07,406 --> 00:40:08,872 Hey, welcome back. 850 00:40:08,874 --> 00:40:10,407 Good job. (grumbles) 851 00:40:10,409 --> 00:40:13,109 He has been preoccupied with a little spider. 852 00:40:13,111 --> 00:40:14,778 What is all that? (chuckles) 853 00:40:14,780 --> 00:40:16,479 What? Some compressed air. 854 00:40:16,481 --> 00:40:18,047 I was gonna turn it over, zap it, freeze it, 855 00:40:18,049 --> 00:40:19,482 Then I was gonna set it free. 856 00:40:19,484 --> 00:40:20,884 Aw. Cryonic preservation? 857 00:40:20,886 --> 00:40:22,852 I'm not hunting that thing down again. 858 00:40:22,854 --> 00:40:25,789 Okay, I will help you look for your spider. 859 00:40:25,791 --> 00:40:26,823 Thank you. 860 00:40:26,825 --> 00:40:27,924 We'll find it, 861 00:40:27,926 --> 00:40:29,459 And elijah will arrest it. Yeah. 862 00:40:29,461 --> 00:40:30,427 Krumitz: Well, now I have to help. 863 00:40:30,429 --> 00:40:32,462 Yeah. (shouts) 864 00:40:32,464 --> 00:40:34,097 Why... Why would y'all do that? (laughter) 865 00:40:34,099 --> 00:40:35,565 Why would y'all do that?! 866 00:40:35,567 --> 00:40:39,569 Captioning sponsored by cbs 867 00:40:39,571 --> 00:40:41,638 Captioned by media access group at wgbh access.Wgbh.Org 62745

Can't find what you're looking for?
Get subtitles in any language from opensubtitles.com, and translate them here.