Would you like to inspect the original subtitles? These are the user uploaded subtitles that are being translated:
1
00:00:00,734 --> 00:00:01,767
My name is avery ryan.
2
00:00:01,769 --> 00:00:03,302
I was a victim of cyber crime.
3
00:00:03,304 --> 00:00:06,038
Like you, I postedon social media,
4
00:00:06,040 --> 00:00:08,607
Checked my bank accountbalance online,
5
00:00:08,609 --> 00:00:10,676
Even keptthe confidential files
6
00:00:10,678 --> 00:00:13,112
Of my psychological practiceon my computer.
7
00:00:14,681 --> 00:00:17,616
Then I was hacked,and as a result,
8
00:00:17,618 --> 00:00:20,152
One of my patientswas murdered.
9
00:00:20,154 --> 00:00:23,722
My investigation into her death
led me to the fbi,
10
00:00:23,724 --> 00:00:26,558
Where I joined a teamof cyber experts
11
00:00:26,560 --> 00:00:29,461
To wage a war againsta new breed of criminal
12
00:00:29,463 --> 00:00:32,464
Hiding on the deep web...
13
00:00:32,466 --> 00:00:35,567
Infiltrating our daily livesin ways we never imagined...
14
00:00:37,270 --> 00:00:39,271
...Faceless...
15
00:00:39,273 --> 00:00:41,440
Nameless...
16
00:00:41,442 --> 00:00:43,275
Lurking inside our devices,
17
00:00:43,277 --> 00:00:45,677
Just a keystroke away.
18
00:00:52,252 --> 00:00:54,219
♪
19
00:01:21,815 --> 00:01:22,815
Mr. Nelson,
20
00:01:22,817 --> 00:01:24,817
You're late.
21
00:01:24,819 --> 00:01:26,485
(sighs)
I'm sorry, avery.
22
00:01:26,487 --> 00:01:28,087
It's just that getting up early
23
00:01:28,089 --> 00:01:29,588
Is something
my body's not used to.
24
00:01:31,091 --> 00:01:32,324
Okay, I feel you.
25
00:01:32,326 --> 00:01:33,759
All right, I'll have a talk
with my body,
26
00:01:33,761 --> 00:01:35,194
And we'll be here on time.
27
00:01:35,196 --> 00:01:36,228
What you doing?
28
00:01:36,230 --> 00:01:38,363
Oh, rescuing a spider.
29
00:01:38,365 --> 00:01:41,200
Oh. Um...
(laughs)
30
00:01:41,202 --> 00:01:43,769
Yeah, do not come near me. Look.
Look, I'm-I'm serious. (groans)
31
00:01:43,771 --> 00:01:45,170
Brody nelson,
don't tell me you're afraid
32
00:01:45,172 --> 00:01:47,206
Of a little spider?
A little spider?
33
00:01:47,208 --> 00:01:48,841
Avery, look at the size
of that thing. That's not...
34
00:01:48,843 --> 00:01:51,410
Why are you looking
on the ground?
35
00:01:51,412 --> 00:01:53,745
I dropped it.
You dropped it.
36
00:01:53,747 --> 00:01:54,746
Avery...
37
00:01:54,748 --> 00:01:56,215
Your bag...
Well...
38
00:01:56,217 --> 00:01:57,749
Aah!
(laughing)
39
00:01:57,751 --> 00:01:59,318
(shouting)
40
00:01:59,320 --> 00:02:01,253
Well, spiders don't like it
when you're late.
41
00:02:01,255 --> 00:02:03,222
Sifter:
So your plane's on the tarmac
42
00:02:03,224 --> 00:02:04,890
At national, and you're
scheduled to leave
43
00:02:04,892 --> 00:02:07,159
In an hour for
new york city.
44
00:02:07,161 --> 00:02:09,128
The kirkendahl
hotel believes
45
00:02:09,130 --> 00:02:11,763
That their computer
network has been hacked.
46
00:02:11,765 --> 00:02:13,198
That connects every
location worldwide.
47
00:02:13,200 --> 00:02:14,633
This is the kirkendahl file.
What do we got?
48
00:02:14,635 --> 00:02:16,401
Three days ago,
49
00:02:16,403 --> 00:02:19,271
The hotel's computer intrusion
detection system
50
00:02:19,273 --> 00:02:22,141
Went off, sent an alert
from their east side property.
51
00:02:22,143 --> 00:02:24,376
And they had their
I.T. Team take a look at it?
52
00:02:24,378 --> 00:02:26,378
It appeared to be a glitch,
happens all the time.
53
00:02:26,380 --> 00:02:28,380
They reset the system,
it happened again.
54
00:02:28,382 --> 00:02:30,549
There's evidence
of a remote cyber intrusion.
55
00:02:30,551 --> 00:02:33,218
Kirkendahl's
wi-fi has been compromised.
56
00:02:33,220 --> 00:02:35,320
That means the hackers
could have access to
57
00:02:35,322 --> 00:02:36,388
The corporate computers
58
00:02:36,390 --> 00:02:38,390
And the guests'
personal devices.
59
00:02:38,392 --> 00:02:40,325
And they probably discovered
a vulnerable protocol,
60
00:02:40,327 --> 00:02:42,294
Used a root kit to gain access.
61
00:02:42,296 --> 00:02:43,795
Nah, that's doing
it the hard way.
62
00:02:43,797 --> 00:02:46,365
There's a known exploit in the
authentication credential.
63
00:02:46,367 --> 00:02:48,267
You should know
that, right?
Of course I know that.
64
00:02:48,269 --> 00:02:51,570
Guys? Guys?
You spilled water
on your keyboard.
65
00:02:51,572 --> 00:02:52,838
Then I saw a spider.
66
00:02:52,840 --> 00:02:53,872
It's not like I
did it on purpose.
67
00:02:53,874 --> 00:02:55,674
Whatever.
Let's just reign in
68
00:02:55,676 --> 00:02:57,176
Our intellect here.
69
00:02:57,178 --> 00:02:59,545
That hotel is
right next to the u.N.
70
00:02:59,547 --> 00:03:01,246
A lot of high-profile people
stay there.
71
00:03:01,248 --> 00:03:02,648
Diplomats, dignitaries,
celebrities.
72
00:03:02,650 --> 00:03:05,184
Yeah, and the u.N. Is back
in session in two days.
73
00:03:05,186 --> 00:03:06,752
We could be looking
at a dark hotel scenario here.
74
00:03:06,754 --> 00:03:08,887
Hackers targeting
the guests.
Yeah, or an attack
75
00:03:08,889 --> 00:03:10,322
Against the kirkendahl
corporation itself.
76
00:03:10,324 --> 00:03:12,591
Either way,
documents could be released.
77
00:03:12,593 --> 00:03:15,394
E-mails, texts,
sensitive information
78
00:03:15,396 --> 00:03:17,796
That could embarrass or expose
some very important people.
79
00:03:17,798 --> 00:03:19,331
Well, I've got
a meeting coming up
80
00:03:19,333 --> 00:03:20,532
With the fbi director.
81
00:03:20,534 --> 00:03:22,334
I'll tell him my team is on it,
82
00:03:22,336 --> 00:03:24,503
And that none
of that will happen.
83
00:03:24,505 --> 00:03:26,538
Enjoy your flight.
84
00:03:41,955 --> 00:03:43,655
Woman: At the suggestionof our in-house
85
00:03:43,657 --> 00:03:46,391
Technical support team,
we shut down the wi-fi.
86
00:03:46,393 --> 00:03:49,228
Has any employee or guest
reported any strange e-mails,
87
00:03:49,230 --> 00:03:51,463
Of their individual
devices being hacked?
88
00:03:51,465 --> 00:03:54,466
What about pop-up alerts
instructing them
89
00:03:54,468 --> 00:03:56,868
To update a file
or a program?
90
00:03:56,870 --> 00:03:58,470
I don't know. Those pop-ups
appear all the time,
91
00:03:58,472 --> 00:04:00,405
Even on my home computer.
92
00:04:00,407 --> 00:04:02,407
Well, it's one of the ways
that devices are hacked.
93
00:04:02,409 --> 00:04:04,476
A free download
or product upgrade
94
00:04:04,478 --> 00:04:05,911
That looks like it's authentic.
95
00:04:05,913 --> 00:04:08,680
But instead of it being
the actual product,
96
00:04:08,682 --> 00:04:11,483
It's the delivery of malware--
malicious software.
97
00:04:11,485 --> 00:04:15,320
The code gets released intothe computer like a virus,
98
00:04:15,322 --> 00:04:16,755
And the hacker takes over.
99
00:04:16,757 --> 00:04:18,757
It's like the hacker'slurking inside the device.
100
00:04:18,759 --> 00:04:20,859
When a guest logs on toyour wi-fi, the hacker is able
101
00:04:20,861 --> 00:04:23,695
To see their room number,the last name on their account,
102
00:04:23,697 --> 00:04:24,963
Even get their passwords.
103
00:04:24,965 --> 00:04:26,632
But-but we-we shut down
the wi-fi,
104
00:04:26,634 --> 00:04:28,500
So that should
protect us, right?
105
00:04:28,502 --> 00:04:29,301
Mundo:
Depends.
106
00:04:29,303 --> 00:04:32,404
Some malware is programmed
to lay in wait
107
00:04:32,406 --> 00:04:34,373
For six hours, six days,
six months or more.
108
00:04:34,375 --> 00:04:37,309
Should-should we be copying
and deleting documents?
109
00:04:37,311 --> 00:04:39,011
No. Despite the definition
of the word "delete,"
110
00:04:39,013 --> 00:04:41,446
In the cyber world, almost
anything can be recovered.
111
00:04:41,448 --> 00:04:46,451
Agent ryan, as in-house counsel
for the kirkendahl corporation,
112
00:04:46,453 --> 00:04:49,388
I can't stress enough
the importance of privacy here.
113
00:04:49,390 --> 00:04:50,856
It is something
that we guarantee
114
00:04:50,858 --> 00:04:53,492
To our board members,
our employees and our guests.
115
00:04:53,494 --> 00:04:55,460
There must be something
that we can do.
116
00:04:55,462 --> 00:04:58,297
Many of our guests use aliases
when checking in,
117
00:04:58,299 --> 00:05:01,066
But their real names and
home addresses are in our files.
118
00:05:01,068 --> 00:05:04,503
Some engage in activity
that we keep very confidential,
119
00:05:04,505 --> 00:05:06,838
And I'm talking about more than
just ordering an adult movie.
120
00:05:06,840 --> 00:05:08,607
We-we send e-mails and texts
121
00:05:08,609 --> 00:05:11,343
Containing confidential
company information--
122
00:05:11,345 --> 00:05:12,511
Bonuses, salaries,
123
00:05:12,513 --> 00:05:13,779
Mergers.
124
00:05:13,781 --> 00:05:15,781
Activity that will have
serious repercussions
125
00:05:15,783 --> 00:05:17,816
If those communications
became public.
126
00:05:17,818 --> 00:05:20,519
(phone ringing)
pardon me.
127
00:05:20,521 --> 00:05:22,721
Yes.
128
00:05:22,723 --> 00:05:24,723
Say that again.
129
00:05:24,725 --> 00:05:26,658
(sighs)
130
00:05:26,660 --> 00:05:27,826
All right.
131
00:05:27,828 --> 00:05:29,594
Our hotel
132
00:05:29,596 --> 00:05:30,929
Security footage has been wiped.
133
00:05:30,931 --> 00:05:35,701
Lobby... Entrances...Guest room corridors.
134
00:05:35,703 --> 00:05:38,403
Everything recordedin the past week.
135
00:05:38,405 --> 00:05:39,838
Was the system connected
to the wi-fi?
136
00:05:39,840 --> 00:05:41,873
Yes.
137
00:05:43,676 --> 00:05:45,744
Ryan: If your surveillance
footage was wiped,
138
00:05:45,746 --> 00:05:47,846
I don't think
our hacker is interested
139
00:05:47,848 --> 00:05:49,448
In these confidential files
140
00:05:49,450 --> 00:05:50,682
That you're worried
about, counselor.
141
00:05:50,684 --> 00:05:52,884
Something else
is going on here.
142
00:05:52,886 --> 00:05:55,420
Something happened here
at your hotel,
143
00:05:55,422 --> 00:05:57,889
And someone is trying
to cover it up.
144
00:05:57,891 --> 00:05:59,925
(rock music playing loudly)
man: Ms. Foster?
145
00:06:01,961 --> 00:06:04,563
This is the hotel manager.
146
00:06:04,565 --> 00:06:07,733
Ms. Foster, your music
is disturbing other guests!
147
00:06:20,546 --> 00:06:21,646
(music stops)
148
00:06:32,592 --> 00:06:34,760
Ms. Foster?
149
00:06:34,762 --> 00:06:36,862
Oh, geez.
150
00:06:39,565 --> 00:06:41,633
Security. Call 911.
151
00:06:46,439 --> 00:06:49,708
(camera clicking)
152
00:06:52,512 --> 00:06:54,679
(indistinct
police radio chatter)
153
00:06:59,018 --> 00:07:01,853
(whimpering)
154
00:07:03,723 --> 00:07:05,857
(camera clicking)
155
00:07:32,618 --> 00:07:34,653
Mundo:
The victim is adel foster,
156
00:07:34,655 --> 00:07:38,190
She checked into this
room five days ago alone.
157
00:07:38,192 --> 00:07:40,659
Driver's license
lists her address as
158
00:07:40,661 --> 00:07:44,496
Nypd are reaching out to new
jersey police and her family.
159
00:07:44,498 --> 00:07:45,664
Room's disorganized.
160
00:07:45,666 --> 00:07:47,799
Bruises on her wrists.
161
00:07:47,801 --> 00:07:49,868
Indicates... A struggle.
162
00:07:49,870 --> 00:07:51,937
Most likely, a crime of passion.
163
00:07:51,939 --> 00:07:53,472
Detectives canvassed
the hotel guests.
164
00:07:53,474 --> 00:07:55,140
Nobody heard or saw anything.
165
00:07:55,142 --> 00:07:58,610
Most belonged to the victim,
the rest to housekeeping.
166
00:07:58,612 --> 00:07:59,878
However,
167
00:07:59,880 --> 00:08:01,780
I did find this
in the plumbing.
168
00:08:01,782 --> 00:08:03,715
The victim's cell phone.
169
00:08:07,753 --> 00:08:11,490
The target tried to destroy
it and then flush it.
170
00:08:17,797 --> 00:08:22,701
Ryan: Well, the water likelycorroded the connectors.
171
00:08:22,703 --> 00:08:26,605
Data recovery isgonna be tough.
172
00:08:26,607 --> 00:08:28,106
The hotel invoice.
173
00:08:28,108 --> 00:08:30,075
Looks like around
3:00 this morning,
174
00:08:30,077 --> 00:08:32,010
She ordered a late-night
snack and a movie.
175
00:08:32,012 --> 00:08:33,645
Behavior of an insomniac.
176
00:08:33,647 --> 00:08:37,282
Food for one.
That indicates she was alone.
177
00:08:37,284 --> 00:08:39,918
Mundo:
Wait a minute. This is strange.
178
00:08:39,920 --> 00:08:42,587
What?
The medical examiner
just established
179
00:08:42,589 --> 00:08:44,122
Approximate time of death.
180
00:08:44,124 --> 00:08:45,624
Three nights ago.
181
00:08:45,626 --> 00:08:47,092
What?
182
00:08:47,094 --> 00:08:48,793
It's a hotel. How does
housekeeping not find the body?
183
00:08:48,795 --> 00:08:50,595
Stranger than that,
184
00:08:50,597 --> 00:08:52,764
According to the room invoice,
185
00:08:52,766 --> 00:08:56,201
Yesterday and the day before,
she ordered laundry,
186
00:08:56,203 --> 00:08:57,769
Room and spa services,
187
00:08:57,771 --> 00:08:58,904
And a movie.
188
00:08:58,906 --> 00:09:01,273
And this morning, breakfast.
189
00:09:01,275 --> 00:09:04,175
Well, it looks like
adel foster was alive
190
00:09:04,177 --> 00:09:06,778
For three days after she died.
191
00:09:10,049 --> 00:09:16,254
♪ I know you've deceived me,
now here's a surprise ♪
192
00:09:18,124 --> 00:09:23,895
♪ I know that you have, 'cause
there's magic in my eyes ♪
193
00:09:23,897 --> 00:09:28,066
♪ I can see
for miles and miles ♪
194
00:09:28,068 --> 00:09:31,603
♪ I can see for miles
and miles ♪
195
00:09:31,605 --> 00:09:35,941
♪ I can see
for miles and miles ♪
196
00:09:35,943 --> 00:09:39,644
♪ and miles...
197
00:09:39,646 --> 00:09:41,813
♪ oh, yeah.
198
00:09:52,793 --> 00:09:54,726
What have you got?
199
00:09:54,728 --> 00:09:56,695
Data from the kirkendahl hotel's
computer system.
200
00:09:56,697 --> 00:09:57,862
This is a blueprint layout
201
00:09:57,864 --> 00:09:59,030
Of a standard room.
202
00:09:59,032 --> 00:10:00,365
We can see the
computer controls
203
00:10:00,367 --> 00:10:02,801
And monitors pretty much
everything that happens.
204
00:10:02,803 --> 00:10:04,769
All run by one central
software package
205
00:10:04,771 --> 00:10:06,004
Called the
"digital butler."
206
00:10:06,006 --> 00:10:07,906
And this explains
why nobody in that hotel
207
00:10:07,908 --> 00:10:09,808
Found adel foster's body
for three days?
208
00:10:09,810 --> 00:10:11,009
We believe so.
209
00:10:11,011 --> 00:10:13,612
We detected malware
on the hotel server.
210
00:10:13,614 --> 00:10:15,313
It was sent to every employee
211
00:10:15,315 --> 00:10:16,848
Hidden inside a
party invitation.
212
00:10:16,850 --> 00:10:18,883
So that's how it
breached the firewall.
213
00:10:18,885 --> 00:10:21,886
Ah. And troy fell.
214
00:10:21,888 --> 00:10:23,755
Yeah, it was the trojans
themselves
215
00:10:23,757 --> 00:10:25,123
That opened up
their own city gates
216
00:10:25,125 --> 00:10:26,958
And pulled
the wooden horse inside.
217
00:10:26,960 --> 00:10:28,827
Just like the hotel employees
218
00:10:28,829 --> 00:10:30,829
Who opened the party invitation
and let in the malware.
219
00:10:30,831 --> 00:10:32,864
While they blindly
celebrated victory,
220
00:10:32,866 --> 00:10:34,966
Their enemy lay in wait.
221
00:10:34,968 --> 00:10:36,401
And troy fell.
222
00:10:39,905 --> 00:10:41,406
Krumitz:
Our hacker had
223
00:10:41,408 --> 00:10:43,942
Access to the hotel's
main computer.
224
00:10:43,944 --> 00:10:45,343
They found their way
to adel's guest room records
225
00:10:45,345 --> 00:10:47,112
And made it look
like she was alive and well
226
00:10:47,114 --> 00:10:49,381
Even though adel foster
was definitely dead.
227
00:10:49,383 --> 00:10:51,082
Well, that would
explain the manicure,
228
00:10:51,084 --> 00:10:53,385
The facial, ordering the movie,
229
00:10:53,387 --> 00:10:55,654
Even room service,
but what about housekeeping?
230
00:10:55,656 --> 00:10:57,055
No one ever
entered the room.
231
00:10:57,057 --> 00:10:58,256
Because the
"do not disturb" sign
232
00:10:58,258 --> 00:11:00,759
Is also controlled
by the computer system.
233
00:11:00,761 --> 00:11:03,895
Ramirez: Exactly. Maids won't
enter when the light is on.
234
00:11:03,897 --> 00:11:06,364
Hotels connect
physical devices and sensors
235
00:11:06,366 --> 00:11:08,833
In the hotel rooms
to one central computer
236
00:11:08,835 --> 00:11:10,902
To improve efficiency
and cut down cost--
237
00:11:10,904 --> 00:11:13,038
Controlling thermostats
and water temperature,
238
00:11:13,040 --> 00:11:15,106
Providing you with the ease
of ordering services
239
00:11:15,108 --> 00:11:17,809
From the hotel channel
on your television.
240
00:11:17,811 --> 00:11:20,011
From one computer,
they can control everything.
241
00:11:20,013 --> 00:11:21,846
Right. It's why they
sometimes charge you
242
00:11:21,848 --> 00:11:23,982
For the items in the
minibar just because
243
00:11:23,984 --> 00:11:26,851
You move them.
244
00:11:26,853 --> 00:11:28,853
Now, the pressuresensor on the shelves
245
00:11:28,855 --> 00:11:29,888
Sends a messageto the computer telling
246
00:11:29,890 --> 00:11:33,358
Its product has been consumed.
247
00:11:33,360 --> 00:11:36,161
But as we all know,
computers can be hacked.
248
00:11:36,163 --> 00:11:38,296
I actually met the hat
who wrote the code.
249
00:11:38,298 --> 00:11:41,232
Called it a hospitality hack.
250
00:11:41,234 --> 00:11:43,334
All right, now, once
a hacker intrudes
251
00:11:43,336 --> 00:11:45,303
The hotel computer
system, he has control
252
00:11:45,305 --> 00:11:47,739
Over room assignments,
check in, check out,
253
00:11:47,741 --> 00:11:49,908
Television,
254
00:11:49,910 --> 00:11:52,010
Thermostat...
255
00:11:52,012 --> 00:11:54,345
Oh, my favorite: The
remote control curtains.
256
00:11:54,347 --> 00:11:56,114
Check this out.
257
00:11:57,850 --> 00:11:59,451
Wait...
258
00:11:59,453 --> 00:12:02,053
Nelson, are you
really doing that?
259
00:12:02,055 --> 00:12:05,123
Did you actually
hack this hotel from ctoc?
260
00:12:05,125 --> 00:12:06,858
Yeah, that was me.
261
00:12:06,860 --> 00:12:09,461
The point is if all
the conveniences are connected
262
00:12:09,463 --> 00:12:11,730
Through software
to one central computer,
263
00:12:11,732 --> 00:12:13,832
Once the hacker's
inside the system,
264
00:12:13,834 --> 00:12:15,400
He can create orders
for room service,
265
00:12:15,402 --> 00:12:17,168
Housekeeping, laundry pickup...
266
00:12:17,170 --> 00:12:18,837
Ramirez:
And none of it really happened.
267
00:12:18,839 --> 00:12:22,874
Mundo: And all activity isrecorded under the guest's name
268
00:12:22,876 --> 00:12:24,109
And room number.
269
00:12:24,111 --> 00:12:25,844
Which explains why a dead woman
270
00:12:25,846 --> 00:12:27,412
Can order room serviceand a movie.
271
00:12:27,414 --> 00:12:29,247
Ryan:
So as far as the hotel knew,
272
00:12:29,249 --> 00:12:31,082
The minibarwas being restocked,
273
00:12:31,084 --> 00:12:32,784
The laundrywas being picked up,
274
00:12:32,786 --> 00:12:35,320
The maids were performingturndown services.
275
00:12:35,322 --> 00:12:38,256
A hacker can controlany guest's room 24/7.
276
00:12:39,492 --> 00:12:42,260
This is a very sophisticated
cover-up of a murder.
277
00:12:42,262 --> 00:12:45,029
We need to know more
about our victim, adel foster.
278
00:12:45,031 --> 00:12:47,332
Her devices are on their way
to you now, krumitz.
279
00:12:47,334 --> 00:12:49,367
We need to find
this hospitality hacker.
280
00:12:49,369 --> 00:12:51,402
You can't break into a system
this complex
281
00:12:51,404 --> 00:12:53,304
Without leaving some
digital dust behind.
282
00:12:53,306 --> 00:12:56,040
We're on it.
283
00:12:56,042 --> 00:12:57,776
All right, so we got
our victim's laptop,
284
00:12:57,778 --> 00:12:59,844
Tablet and destroyed cell.
285
00:12:59,846 --> 00:13:01,479
Our killer has
a three-day head start.
286
00:13:01,481 --> 00:13:03,281
Puts him right
where we want him.
287
00:13:03,283 --> 00:13:05,784
(chuckles) he thinks
he got away with murder.
288
00:13:05,786 --> 00:13:07,085
Which means he already
made a mistake
289
00:13:07,087 --> 00:13:08,987
That will lead
us right to him.
290
00:13:08,989 --> 00:13:11,289
We are gonna find adel
foster's murderer.
291
00:13:15,461 --> 00:13:17,462
Nelson:
You know, I really could have
292
00:13:17,464 --> 00:13:19,230
Used these things two years ago.
293
00:13:19,232 --> 00:13:21,366
But you know every time
apple introduces a new device,
294
00:13:21,368 --> 00:13:23,034
There's a new cord,
a new connector,
295
00:13:23,036 --> 00:13:24,936
And then all the old stuff
is not compatible with
296
00:13:24,938 --> 00:13:27,205
The new stuff, so then you...
You know, you got to go back,
297
00:13:27,207 --> 00:13:29,207
Buy all the new apple products,
connect them and...
298
00:13:29,209 --> 00:13:30,942
Dude, dude, really?
299
00:13:30,944 --> 00:13:32,043
We're trying to work here.
300
00:13:32,045 --> 00:13:33,578
Okay, well, then give me
something to do.
301
00:13:33,580 --> 00:13:36,948
Here. Lay out all the
pieces of this cell phone.
302
00:13:36,950 --> 00:13:38,183
Disassemble it,
remove the circuit board,
303
00:13:38,185 --> 00:13:40,118
Then scrub the resistor
jumper connections.
304
00:13:40,120 --> 00:13:42,086
There's a toothbrush
and alcohol solution
305
00:13:42,088 --> 00:13:44,122
Right over there.
Oh, okay.
306
00:13:44,124 --> 00:13:45,990
I see how you do.
307
00:13:45,992 --> 00:13:48,326
New guy gets
the poop phone.
What?
308
00:13:48,328 --> 00:13:50,395
I happen to know that this was
the phone that was recovered
309
00:13:50,397 --> 00:13:52,030
From the toilet
in the hotel room.
310
00:13:52,032 --> 00:13:53,932
He's right.
311
00:13:53,934 --> 00:13:55,300
That is the poop phone.
312
00:13:55,302 --> 00:13:57,168
Really? You're gonna
encourage this?
313
00:13:57,170 --> 00:13:59,170
And you're not even
that new anymore.
314
00:13:59,172 --> 00:14:00,271
Okay, you know what, nelson?
315
00:14:00,273 --> 00:14:02,874
Fine. I will gladly
take the poop phone
316
00:14:02,876 --> 00:14:05,043
If you just do me
one favor and stop talking.
317
00:14:05,045 --> 00:14:06,544
Guys.
Okay, what, you in a bad
mood or something, krummy?
318
00:14:06,546 --> 00:14:08,046
You want to
talk about it?
319
00:14:08,048 --> 00:14:09,881
Oh. You're having
girl problems.
320
00:14:09,883 --> 00:14:11,883
Oh, my...
I knew it.
321
00:14:11,885 --> 00:14:13,551
Raven, could you grab me
that pen over there
322
00:14:13,553 --> 00:14:15,186
And stab me with it?
That would be awesome.
323
00:14:15,188 --> 00:14:17,222
Guys, will you cut it out
and come here.
You got no game.
324
00:14:17,224 --> 00:14:19,157
I found something.
I have... I have game.
325
00:14:19,159 --> 00:14:22,160
I went back
to the employee party invitation
326
00:14:22,162 --> 00:14:23,928
Where the malware was embedded.
327
00:14:23,930 --> 00:14:25,997
I couldn't find the information
on the computer that sent it.
328
00:14:25,999 --> 00:14:30,902
So, I responded yes. I got back
an auto-reply confirmation,
329
00:14:30,904 --> 00:14:34,239
And guess what-- our hacker
forgot to anonymize that e-mail.
330
00:14:34,241 --> 00:14:37,275
Pretty sure it's the same one
that sent the invitation.
331
00:14:37,277 --> 00:14:39,043
And I got his I.P. Address
on the computer.
332
00:14:39,045 --> 00:14:40,545
Yeah! These guys never
think two steps ahead.
333
00:14:40,547 --> 00:14:42,447
I love this job.
This is gonna
334
00:14:42,449 --> 00:14:44,082
Lead us right
to our hacker.
335
00:14:55,494 --> 00:14:58,563
♪
336
00:15:03,335 --> 00:15:05,336
Evan wescott? Is
this your computer?
337
00:15:05,338 --> 00:15:07,906
Yes. Why?
Fbi.
338
00:15:07,908 --> 00:15:09,540
You're under arrest
for computer fraud
339
00:15:09,542 --> 00:15:11,910
In connection with the
murder of adel foster.
340
00:15:11,912 --> 00:15:13,177
What? What are you
talking about? Hey, whoa.
341
00:15:13,179 --> 00:15:15,246
Hold on a minute.
I don't even know who that is.
342
00:15:15,248 --> 00:15:18,549
You got the wrong guy.
(grunts) I didn't kill anybody.
343
00:15:18,551 --> 00:15:22,020
We can do this the hard way,
or you can come quietly.
344
00:15:28,160 --> 00:15:31,029
You hacked the kirkendahl
hotel's main computer, evan.
345
00:15:31,031 --> 00:15:34,165
We know this because the I.P.
Address of the device used
346
00:15:34,167 --> 00:15:36,034
Led us back to your laptop.
347
00:15:36,036 --> 00:15:38,036
That's impossible.
I don't even know how to do
348
00:15:38,038 --> 00:15:39,671
Something like that.
Mundo:
You created a backdoor
349
00:15:39,673 --> 00:15:41,239
In the computer systems
and took control
350
00:15:41,241 --> 00:15:42,140
Of the hotel's
hospitality functions--
351
00:15:42,142 --> 00:15:43,374
Maid service,
352
00:15:43,376 --> 00:15:44,575
Room service, minibar.
353
00:15:44,577 --> 00:15:46,044
You murdered adel and activated
354
00:15:46,046 --> 00:15:50,214
Like she was alive
three days after her death.
355
00:15:50,216 --> 00:15:52,717
What? That's insane.
I didn't kill anybody.
356
00:15:52,719 --> 00:15:54,585
Your cell phone
places you at the hotel
357
00:15:54,587 --> 00:15:56,587
At the exact time
of adel foster's murder.
358
00:15:56,589 --> 00:16:01,059
Your phone's location services
puts you in that hotel.
359
00:16:01,061 --> 00:16:02,527
Location services?
360
00:16:02,529 --> 00:16:04,595
Mundo: The little programthat's always running
361
00:16:04,597 --> 00:16:06,564
In the backgroundof your phone.
362
00:16:06,566 --> 00:16:08,333
Logs everywhere you go.
363
00:16:08,335 --> 00:16:10,234
Ryan:
Nifty little feature.
364
00:16:10,236 --> 00:16:14,205
See the elevation listed
here? 29.7 meters.
365
00:16:14,207 --> 00:16:16,641
That's roughly
seven floors.
366
00:16:16,643 --> 00:16:19,143
Her body was found
in room 715.
367
00:16:19,145 --> 00:16:20,979
Okay, I-I'm not a murderer.
368
00:16:20,981 --> 00:16:22,046
Mundo:
Really?
369
00:16:22,048 --> 00:16:23,281
'cause you sure
sound like one
370
00:16:23,283 --> 00:16:25,283
In the text that
you sent adel.
371
00:16:25,285 --> 00:16:27,552
We found that
on your phone.
372
00:16:29,054 --> 00:16:31,089
These are not my text messages.
373
00:16:31,091 --> 00:16:34,192
And I already told you,
I don't know anybody named adel.
374
00:16:34,194 --> 00:16:36,761
Are you sure you
never talked to her?
375
00:16:36,763 --> 00:16:39,263
This is surveillance footage
from your bar, evade,
376
00:16:39,265 --> 00:16:40,331
On the night she
was murdered.
377
00:16:40,333 --> 00:16:42,633
♪
378
00:16:53,445 --> 00:16:56,147
I mean, 'cause that
sure as hell looks like her,
379
00:16:56,149 --> 00:16:58,449
And that is definitely you.
380
00:16:58,451 --> 00:17:01,285
Look, man, a lot of people
come into my club.
381
00:17:01,287 --> 00:17:03,221
And, yeah, I meet
a lot of women.
Mundo: Yeah?
382
00:17:03,223 --> 00:17:05,289
Well, this one was murdered
three days ago.
383
00:17:06,258 --> 00:17:07,458
Where were you?
384
00:17:07,460 --> 00:17:09,494
I was at the club.
385
00:17:09,496 --> 00:17:11,195
I'm always at the club.
386
00:17:13,232 --> 00:17:15,199
It's a pretty crowded place
at night.
387
00:17:15,201 --> 00:17:18,136
Could easily step out for an
hour, and no one would miss you.
388
00:17:18,138 --> 00:17:20,238
This is ridiculous.
I didn't do anything.
389
00:17:20,240 --> 00:17:22,306
At first, I couldn't understand
why you went to all the trouble
390
00:17:22,308 --> 00:17:25,309
To make it look like
adel was still alive.
391
00:17:25,311 --> 00:17:27,578
Mundo: You wanted
to buy yourself time
392
00:17:27,580 --> 00:17:29,781
To create an alibi.
The hotel hack.
393
00:17:29,783 --> 00:17:31,315
And you certainly
can't deny
394
00:17:31,317 --> 00:17:33,184
That you were
capable of doing it.
395
00:17:33,186 --> 00:17:35,286
You were a computer
science major
396
00:17:35,288 --> 00:17:36,754
At kenniwick university.
397
00:17:36,756 --> 00:17:38,456
Day one, nobody found the body.
398
00:17:38,458 --> 00:17:41,292
Day two, no one came for you.
399
00:17:41,294 --> 00:17:43,795
Mundo: Day three,
you got comfortable.
400
00:17:43,797 --> 00:17:45,329
You distanced yourself
from the murder.
401
00:17:45,331 --> 00:17:47,265
Tying you to
the scene of the crime.
402
00:17:47,267 --> 00:17:50,368
You got away with murder.
403
00:17:50,370 --> 00:17:51,436
Almost.
Evan:
No.
404
00:17:51,438 --> 00:17:52,637
I didn't kill anybody.
405
00:17:52,639 --> 00:17:54,372
I didn't do any of these things.
406
00:17:54,374 --> 00:17:55,673
Evan...
407
00:17:55,675 --> 00:17:59,377
Your devices tell us
you're lying.
408
00:18:05,350 --> 00:18:08,086
♪
409
00:18:37,750 --> 00:18:42,753
Adel is... Er, was...
My girlfriend.
410
00:18:42,755 --> 00:18:44,622
I don't understand
how this happened.
411
00:18:44,624 --> 00:18:46,757
Doesn't the hotel
have security?
412
00:18:46,759 --> 00:18:48,659
We're still investigating
the circumstances
413
00:18:48,661 --> 00:18:49,660
Surrounding
adel's death.
414
00:18:52,631 --> 00:18:54,665
When her cell kept
going to voicemail,
415
00:18:54,667 --> 00:18:57,602
They said that she was
still checked in.
416
00:18:57,604 --> 00:18:59,837
I thought that
she had lost her phone.
417
00:18:59,839 --> 00:19:01,839
You know? I mean,
she does that a lot.
418
00:19:01,841 --> 00:19:03,908
But I never thought...
419
00:19:07,279 --> 00:19:09,447
...You know, that, um,
that she was dead.
420
00:19:09,449 --> 00:19:11,516
You spoke to her the night
that she was killed.
421
00:19:11,518 --> 00:19:12,550
Yeah, she seemed excited.
422
00:19:12,552 --> 00:19:14,218
Talking a mile a minute.
423
00:19:14,220 --> 00:19:15,520
(sniffles)
424
00:19:15,522 --> 00:19:16,487
Adel saved up money
425
00:19:16,489 --> 00:19:18,489
For months for this trip.
426
00:19:18,491 --> 00:19:21,292
You know, she had
a whole itinerary:
427
00:19:21,294 --> 00:19:24,462
Coney island, statue of liberty,
empire state building,
428
00:19:24,464 --> 00:19:25,897
A couple of broadway shows.
429
00:19:25,899 --> 00:19:27,698
Why didn't you
go with her?
430
00:19:29,635 --> 00:19:31,836
I got called into work
last minute.
431
00:19:31,838 --> 00:19:33,504
What do you do?
432
00:19:33,506 --> 00:19:35,740
Some part-time stuff.
433
00:19:35,742 --> 00:19:37,508
Operations and safety
at the hospital,
434
00:19:37,510 --> 00:19:42,313
They were short on staff
and needed some extra help.
435
00:19:42,315 --> 00:19:44,549
I was trying to save money
so we could go to europe.
436
00:19:46,485 --> 00:19:48,219
I think, uh...
437
00:19:48,221 --> 00:19:50,521
I think she wanted to experience
new york this time on her own.
438
00:19:50,523 --> 00:19:52,256
She loved the city.
439
00:19:54,226 --> 00:19:55,693
Even though we were
in east rutherford,
440
00:19:55,695 --> 00:19:57,728
We didn't get
up here often.
441
00:19:59,631 --> 00:20:01,599
I'm sorry. I, uh...
442
00:20:01,601 --> 00:20:03,301
I just can't believe
443
00:20:03,303 --> 00:20:05,236
She's gone.
444
00:20:05,238 --> 00:20:07,638
All right. Every piece is
scrubbed, dried and connected.
445
00:20:07,640 --> 00:20:09,507
Between that spider
this morning
446
00:20:09,509 --> 00:20:11,542
And this phone, boy, I
could so use a hot shower.
447
00:20:11,544 --> 00:20:12,977
Dude, man up.
448
00:20:12,979 --> 00:20:16,847
We are gonna rebuild adel's
phone and resurrect its memory.
449
00:20:16,849 --> 00:20:18,282
You mean we
can do that?
450
00:20:18,284 --> 00:20:19,884
We can actually get
data off of this thing?
451
00:20:19,886 --> 00:20:21,586
Watch and learn, son.
452
00:20:21,588 --> 00:20:23,454
This is how
the good guys do it.
453
00:20:23,456 --> 00:20:25,656
Watch and learn.
454
00:20:25,658 --> 00:20:27,692
♪
455
00:20:47,713 --> 00:20:49,847
♪
456
00:21:00,959 --> 00:21:02,893
You see what I'm seeing?
457
00:21:02,895 --> 00:21:04,028
Yeah.
458
00:21:04,030 --> 00:21:06,998
Mundo: So krumitz was ableto pull some data
459
00:21:07,000 --> 00:21:09,500
Off adel's phone, but the
threatening text messages
460
00:21:09,502 --> 00:21:10,701
From evan
aren't there.
461
00:21:10,703 --> 00:21:11,902
Were they deleted?
462
00:21:11,904 --> 00:21:13,437
They never existed.
463
00:21:13,439 --> 00:21:15,439
So I double-checked with
evan's service provider.
464
00:21:15,441 --> 00:21:17,508
They have no record of the
calls or the texts either.
465
00:21:17,510 --> 00:21:20,511
Which means evan didn't send
or receive those texts.
466
00:21:20,513 --> 00:21:22,580
So how did they get
on his phone?
467
00:21:22,582 --> 00:21:24,715
So elijah sent me everything
he pulled off
468
00:21:24,717 --> 00:21:26,417
Evan wescott's phone.
469
00:21:26,419 --> 00:21:27,885
Those text message conversations
470
00:21:27,887 --> 00:21:29,954
Between evan and adel
were faked.
471
00:21:29,956 --> 00:21:32,523
How can somebody fake a text
on another device?
472
00:21:32,525 --> 00:21:34,392
Once you get a text message
into your phone,
473
00:21:34,394 --> 00:21:36,294
It's added to
one long database.
474
00:21:36,296 --> 00:21:38,663
If you're smart enoughand have the right software,
475
00:21:38,665 --> 00:21:40,931
You can manipulate that fileand make it look
476
00:21:40,933 --> 00:21:43,801
Like you're getting textmessages from whoever you want.
477
00:21:43,803 --> 00:21:44,869
Whenever you want.
478
00:21:44,871 --> 00:21:48,339
Or to someone else's phone.
479
00:21:48,341 --> 00:21:51,642
Mmm. "happy new year, krumitz,
480
00:21:51,644 --> 00:21:54,679
From your best pal, sifter."
481
00:21:54,681 --> 00:21:57,648
Sent from your phone
January 1, 2016.
482
00:21:57,650 --> 00:21:58,649
That is impressive.
483
00:21:58,651 --> 00:22:01,652
And a little creepy.
Yeah.
484
00:22:01,654 --> 00:22:03,454
Now, would you need
physical access to evan's phone
485
00:22:03,456 --> 00:22:08,092
No. Plus, evan's phone doesn't
even have the software necessary
486
00:22:08,094 --> 00:22:11,095
To manipulate the database--
it had to be done remotely.
487
00:22:11,097 --> 00:22:13,631
And that's not all.
Gps coordinates
488
00:22:13,633 --> 00:22:14,932
That put evan wescott
in the hotel room
489
00:22:14,934 --> 00:22:16,434
At the time of the murder...
490
00:22:16,436 --> 00:22:17,635
Faked.
Faked.
491
00:22:17,637 --> 00:22:19,770
His phone was hacked.
Yeah!
492
00:22:19,772 --> 00:22:20,805
Oh...
(grunts)
493
00:22:20,807 --> 00:22:23,074
Avery,
494
00:22:23,076 --> 00:22:25,810
All of our digital evidence
is lying to us.
495
00:22:25,812 --> 00:22:27,745
Is krumitz sure
no mistake was made?
496
00:22:27,747 --> 00:22:30,014
What about the
malware injected
497
00:22:30,016 --> 00:22:32,483
Into the hotel's
computer system?
498
00:22:32,485 --> 00:22:34,051
It came from
evan wescott's computer.
499
00:22:34,053 --> 00:22:36,520
But krumitz doesn't believe
evan is our hacker.
500
00:22:36,522 --> 00:22:38,389
He's sure?
Sifter: Yes.
501
00:22:38,391 --> 00:22:40,524
And how many times have you
told me that daniel krumitz is
502
00:22:40,526 --> 00:22:42,526
The best white hat
hacker ever?
503
00:22:42,528 --> 00:22:46,597
Looks like evan wescott
is being framed for murder.
504
00:22:52,905 --> 00:22:56,774
They had to route the
intrusion through his laptop,
505
00:22:56,776 --> 00:22:58,642
Change the gps,
and create those text messages.
506
00:22:58,644 --> 00:23:00,044
Maybe he framed himself.
507
00:23:00,046 --> 00:23:02,580
Clearly, you're new to this
and don't understand
508
00:23:02,582 --> 00:23:04,915
The behavior of a criminal.
Other than yourself.
509
00:23:04,917 --> 00:23:07,051
What I understand is I would do
anything not to go to prison.
510
00:23:07,053 --> 00:23:09,887
Pretty risky to frame yourself.
It's working for evan.
You believe he's innocent.
511
00:23:09,889 --> 00:23:11,522
I believe in cyber evidence.
512
00:23:11,524 --> 00:23:15,459
I'm just saying his devices
could be manipulated by anybody.
513
00:23:15,461 --> 00:23:17,161
Evidence doesn't point
to the identity of a hacker.
514
00:23:17,163 --> 00:23:19,163
So what happened
when we caught you?
515
00:23:19,165 --> 00:23:20,598
See, why you want
to get all personal?
516
00:23:20,600 --> 00:23:21,732
What?
That's what I'm saying...
517
00:23:21,734 --> 00:23:23,834
Guys? Guys?
(arguing continues)
518
00:23:23,836 --> 00:23:25,803
Stop! Stop! Focus on the case!
Whatever, whatever.
519
00:23:25,805 --> 00:23:26,871
Focus on the case.
520
00:23:26,873 --> 00:23:28,706
Whoever hacked them,
521
00:23:28,708 --> 00:23:30,741
Gained access to
at least one
522
00:23:30,743 --> 00:23:31,909
Of evan wescott's devices.
523
00:23:31,911 --> 00:23:33,744
Evan has full access
to all of his devices.
524
00:23:33,746 --> 00:23:35,045
Physical access
is the easiest,
525
00:23:35,047 --> 00:23:37,415
Which is why I think it's evan.
Physical access
526
00:23:37,417 --> 00:23:38,749
Is also the riskiest.
527
00:23:38,751 --> 00:23:39,917
Nelson, just for a minute,
528
00:23:39,919 --> 00:23:41,919
Try to buy into the fact
that adel's killer
529
00:23:41,921 --> 00:23:46,424
The hacker behind this
had to have skills.
530
00:23:46,426 --> 00:23:48,192
Evan has a computer
science degree.
531
00:23:48,194 --> 00:23:49,794
(scoffs, groans)
I'm just saying!
532
00:23:49,796 --> 00:23:51,862
All right, fine,
I'll, uh...
533
00:23:51,864 --> 00:23:53,764
I'll play along.
534
00:23:53,766 --> 00:23:55,766
The hacker could've easily
done this remotely.
535
00:23:55,768 --> 00:23:57,835
If I'd done it,
I'd "war drive" him.
536
00:23:59,037 --> 00:24:01,872
Pull up to his house.
537
00:24:01,874 --> 00:24:03,574
Hack into his wi-fi,
538
00:24:03,576 --> 00:24:05,543
Plant everythingon his computer and phone
539
00:24:05,545 --> 00:24:09,580
While he's still inside,totally oblivious.
540
00:24:09,582 --> 00:24:10,915
It's still too risky.
541
00:24:10,917 --> 00:24:12,650
You're sitting
outside of his house.
542
00:24:12,652 --> 00:24:14,185
What if somebody sees you?
Or your car?
543
00:24:14,187 --> 00:24:17,521
The best way to do it is from
the safety of your own home.
544
00:24:17,523 --> 00:24:18,856
All you have to dois "spear phish" him--
545
00:24:18,858 --> 00:24:20,691
A socially engineered attack.
546
00:24:20,693 --> 00:24:22,693
Send evan an e-mailwith a fake link
547
00:24:22,695 --> 00:24:25,830
From his bank or something,wait for him to click on it,
548
00:24:25,832 --> 00:24:26,897
And then boom!
549
00:24:26,899 --> 00:24:28,732
Full access to his laptop
550
00:24:28,734 --> 00:24:31,969
And any device that connectsto it, like his phone!
551
00:24:31,971 --> 00:24:34,672
Okay, so how you know he's gonna
click on it? And when?
552
00:24:34,674 --> 00:24:36,607
Whoever did this
was short on time.
553
00:24:36,609 --> 00:24:38,676
The best way to stay anonymous
and get instant access
554
00:24:38,678 --> 00:24:40,144
To evan's devices is
to wait for him
555
00:24:40,146 --> 00:24:42,213
To connect to an open
wi-fi signal somewhere.
556
00:24:42,215 --> 00:24:45,216
Anywhere they're advertisingfree wi-fi is like a hacker's
557
00:24:45,218 --> 00:24:48,052
Virtual playground-- tonsof unexpected people unaware
558
00:24:48,054 --> 00:24:50,221
That the person next to themsharing the same connection
559
00:24:50,223 --> 00:24:51,822
Could be intrudingonto their devices
560
00:24:51,824 --> 00:24:53,924
And stealingall their information.
561
00:24:53,926 --> 00:24:57,261
Or in evan's case,adding information.
562
00:24:57,263 --> 00:24:58,762
Look, I still think
he could've done it himself.
563
00:24:58,764 --> 00:24:59,763
I mean, that's just me.
564
00:24:59,765 --> 00:25:01,699
Wi-fi is the best option.
565
00:25:01,701 --> 00:25:03,834
So... Where was evan hacked?
566
00:25:03,836 --> 00:25:05,736
Well, according to his frequent
locations on evan's phone,
567
00:25:05,738 --> 00:25:07,705
He went to the gym
three or four times a week.
568
00:25:07,707 --> 00:25:09,006
Most gyms have free wi-fi.
Restaurants, too.
569
00:25:09,008 --> 00:25:11,575
I bet you he was
eating out every night.
570
00:25:11,577 --> 00:25:13,677
You know, club owners
score mad dates.
571
00:25:13,679 --> 00:25:16,714
How often is
he at carla's cafe?
572
00:25:17,716 --> 00:25:19,683
Ramirez:
Almost every day.
573
00:25:21,686 --> 00:25:23,254
Well, according to the
network logs in evan's laptop,
574
00:25:23,256 --> 00:25:24,855
He connected
to the coffee shop's wi-fi
575
00:25:24,857 --> 00:25:26,190
The morning after the murder.
576
00:25:26,192 --> 00:25:27,825
You still think
it's a possibility
577
00:25:27,827 --> 00:25:29,093
That he framed himself?
578
00:25:29,095 --> 00:25:31,862
Yeah. I do.
579
00:25:39,037 --> 00:25:41,805
All right.
So I spoke to the manager.
580
00:25:41,807 --> 00:25:44,742
They're just there
as a crime deterrent.
581
00:25:44,744 --> 00:25:46,744
They don't record
a damn thing.
582
00:25:46,746 --> 00:25:49,313
But... The wi-fi went
down three days ago
583
00:25:49,315 --> 00:25:54,585
Now, according to evan's laptop,
he was long gone at that time.
584
00:25:54,587 --> 00:25:56,687
But not onto the cafe's router.
585
00:25:56,689 --> 00:26:00,024
Maybe someone set up
an evil twin router.
586
00:26:00,026 --> 00:26:02,026
And that's how he got hacked.
Now, my phone...
587
00:26:02,028 --> 00:26:04,061
Can give the illusion
of being a wi-fi signal,
588
00:26:04,063 --> 00:26:05,596
Same as a twin router.
589
00:26:05,598 --> 00:26:08,299
All I have to do is activate
my own personal hot spot
590
00:26:08,301 --> 00:26:11,268
From my device,
and I am open wi-fi.
591
00:26:11,270 --> 00:26:13,270
I can even name it
anything I want.
592
00:26:13,272 --> 00:26:16,073
Say we're
in carla's cafe, right?
593
00:26:16,075 --> 00:26:19,944
Think I'll name
my new hot spot network...
594
00:26:19,946 --> 00:26:21,712
"carla's cafe."
595
00:26:21,714 --> 00:26:23,247
Now, log on to the free wi-fi.
596
00:26:25,884 --> 00:26:27,184
(laughs)
597
00:26:27,186 --> 00:26:29,119
Which one? There are two.
598
00:26:29,121 --> 00:26:32,590
The one I just created
and the real one.
599
00:26:32,592 --> 00:26:34,792
I'm guessing
our target eliminated
600
00:26:34,794 --> 00:26:36,927
The real carla's cafe wi-fi.
601
00:26:36,929 --> 00:26:38,696
Evan came in,
602
00:26:38,698 --> 00:26:41,632
Logged on tothe decoy signal...
603
00:26:41,634 --> 00:26:44,201
And the hackergained control of his device.
604
00:26:44,203 --> 00:26:45,669
You just did all that
with your phone?
605
00:26:45,671 --> 00:26:47,871
Just a few clicks of a button.
606
00:26:47,873 --> 00:26:51,609
Now, I-I can't control
your device from my phone,
607
00:26:51,611 --> 00:26:53,844
But our target hadan actual router.
608
00:26:53,846 --> 00:26:55,913
He was able to pushany information he wanted
609
00:26:55,915 --> 00:26:59,016
Onto evan's devices.
610
00:26:59,018 --> 00:27:01,018
I mean, anytime
you log on to open wi-fi,
611
00:27:01,020 --> 00:27:04,955
Or in our case,
you become a murder suspect.
612
00:27:04,957 --> 00:27:09,860
Looks like it just happened
to evan wescott.
613
00:27:12,797 --> 00:27:14,264
Raven, I need you
to track down
614
00:27:14,266 --> 00:27:16,400
The owner of an
evil twin router.
615
00:27:26,945 --> 00:27:29,747
(chuckles)
right.
616
00:27:29,814 --> 00:27:31,148
Nelson thinks
evan framed himself.
617
00:27:31,150 --> 00:27:33,317
That would be a smart move.
618
00:27:33,319 --> 00:27:35,653
You don't really
believe that, do you?
619
00:27:35,655 --> 00:27:37,187
Nelson thinks the
way hackers do.
620
00:27:37,189 --> 00:27:38,856
But...
621
00:27:38,858 --> 00:27:40,924
Evan has no motive.
622
00:27:40,926 --> 00:27:43,427
And no definitive
connection to adel foster
623
00:27:43,429 --> 00:27:45,963
Other than a kiss;
and kisses rarely
624
00:27:45,965 --> 00:27:47,331
Get you convicted of murder.
625
00:27:51,102 --> 00:27:53,937
You miss new york.
626
00:27:53,939 --> 00:27:55,873
Yeah, feeling a
bit nostalgic.
627
00:27:55,875 --> 00:27:58,909
I opened my first
practice in manhattan.
628
00:27:58,911 --> 00:28:00,444
Hung the shingle
on a brownstone
629
00:28:00,446 --> 00:28:02,913
Just like that one there.
Went from
630
00:28:02,915 --> 00:28:05,249
Analyzing minds to
analyzing cyber criminals.
631
00:28:05,251 --> 00:28:08,218
Wasn't really a plan,
it just happened.
632
00:28:08,220 --> 00:28:10,020
You ever think
about moving back?
633
00:28:10,022 --> 00:28:11,321
No.
634
00:28:11,323 --> 00:28:13,791
I only think about one thing.
635
00:28:13,793 --> 00:28:16,427
Catching the guy that
hacked and stole my files.
636
00:28:16,429 --> 00:28:18,962
There isn't a morning where
I don't wake up wondering
637
00:28:18,964 --> 00:28:20,431
If today's the day
that he's gonna
638
00:28:20,433 --> 00:28:22,733
Release private
patient information.
639
00:28:22,735 --> 00:28:24,268
And the whole nightmare
will start all over again.
640
00:28:24,270 --> 00:28:26,136
We'll catch him.
641
00:28:26,138 --> 00:28:28,138
(sighs)
642
00:28:28,140 --> 00:28:30,974
You know what I miss
about this place?
643
00:28:30,976 --> 00:28:32,076
The mets.
644
00:28:32,078 --> 00:28:34,144
The mets?
(laughs)
645
00:28:35,346 --> 00:28:37,414
I would comment,
but you'd probably fire me.
646
00:28:39,350 --> 00:28:41,752
But there is one question
I can't shake, elijah.
647
00:28:41,754 --> 00:28:43,120
Evan wescott.
648
00:28:43,122 --> 00:28:44,354
What about him?
649
00:28:44,356 --> 00:28:46,123
Well, the beauty
of an open wi-fi hack
650
00:28:46,125 --> 00:28:48,125
Is its sheer randomness.
651
00:28:48,127 --> 00:28:51,328
Our killer could've framed
anyone on his router
652
00:28:51,330 --> 00:28:53,230
For adel's murder.
653
00:28:53,232 --> 00:28:55,499
You think the target
chose evan specifically.
654
00:28:55,501 --> 00:28:57,768
Adel went to evan's club
the night of the murder.
655
00:28:57,770 --> 00:28:59,903
And the next morning,
evan ends up at carla's cafe
656
00:28:59,905 --> 00:29:02,840
At the exact same time
as the evil twin router.
657
00:29:02,842 --> 00:29:04,274
It feels personal.
658
00:29:04,276 --> 00:29:06,510
Our target crafted
a murder for evan.
659
00:29:06,512 --> 00:29:08,212
Fabricated texts
660
00:29:08,214 --> 00:29:11,949
And gps data, linked
him to the hotel hack.
661
00:29:11,951 --> 00:29:15,786
He set up evan as a fall guy
for a reason, but why?
662
00:29:18,223 --> 00:29:20,290
I identified the
router that was used
663
00:29:20,292 --> 00:29:22,126
To hack evan in carla's cafe.
664
00:29:22,128 --> 00:29:23,327
The latest and greatest
665
00:29:23,329 --> 00:29:25,162
In evil twin deception, huh?
666
00:29:25,164 --> 00:29:28,232
Manufacturer gave me the big
box store where it was sold.
667
00:29:28,234 --> 00:29:30,000
All right, from your smirk,
I'm guessing
668
00:29:30,002 --> 00:29:31,969
It was purchased recently.
Mm-hmm.
669
00:29:31,971 --> 00:29:34,238
Point of sale puts that
gentleman at the register.
670
00:29:34,240 --> 00:29:36,306
He paid cash.
671
00:29:36,308 --> 00:29:39,076
Get this to avery and elijah.
672
00:29:39,078 --> 00:29:40,277
We've got him.
673
00:29:40,279 --> 00:29:42,446
(tablet chimes)
674
00:29:42,448 --> 00:29:45,249
Look who was in manhattan
the morning after adel's murder.
675
00:29:45,251 --> 00:29:47,417
Just got this from raven.
676
00:29:47,419 --> 00:29:50,420
Oh. The heartbroken boyfriend.
677
00:29:55,960 --> 00:29:58,195
Mundo:
Shane tillman, fbi!
678
00:30:06,337 --> 00:30:08,338
He's not here.
679
00:30:11,309 --> 00:30:13,277
I'm gonna image the hard drive,
680
00:30:13,279 --> 00:30:16,146
Send it to nelson and krumitz
to comb through the data.
681
00:30:16,148 --> 00:30:18,248
Ryan:
Broken cup.
682
00:30:20,819 --> 00:30:22,386
Damaged wall.
683
00:30:22,388 --> 00:30:23,887
There was an argument.
684
00:30:28,593 --> 00:30:30,227
Adel wasn't visiting new york.
685
00:30:30,229 --> 00:30:32,963
She was running away from shane.
686
00:30:32,965 --> 00:30:35,065
You know, something struck
me as odd when I saw
687
00:30:35,067 --> 00:30:37,467
The bruises on her wrist
at the crime scene.
688
00:30:37,469 --> 00:30:40,270
Look. They're purple,
almost black.
689
00:30:40,272 --> 00:30:42,339
If she'd gotten these during
the struggle the night
690
00:30:42,341 --> 00:30:44,975
That she was killed, they'd
be pink or not even visible.
691
00:30:44,977 --> 00:30:47,544
She got these before
the night she was killed.
692
00:30:50,949 --> 00:30:54,284
Adel was leaving shane.
693
00:30:54,286 --> 00:30:55,619
He came home.
694
00:30:59,924 --> 00:31:00,991
Stop it!
695
00:31:00,993 --> 00:31:02,259
He pulled her things
out of her bag
696
00:31:02,261 --> 00:31:04,061
To prevent her from leaving.
697
00:31:04,063 --> 00:31:05,529
When she escaped,
he grabbed her wrists,
698
00:31:05,531 --> 00:31:06,997
Which caused the bruising.
699
00:31:06,999 --> 00:31:08,298
(both grunting)
700
00:31:08,300 --> 00:31:10,367
Oh, god!
(groaning)
701
00:31:15,139 --> 00:31:18,575
When she left,
he started drinking.
702
00:31:18,577 --> 00:31:20,043
He followed her
703
00:31:20,045 --> 00:31:21,545
To new york and
he killed her.
704
00:31:21,547 --> 00:31:25,148
My god.
705
00:31:25,150 --> 00:31:28,252
Even when women get the courage
to leave abusive relationships,
706
00:31:28,254 --> 00:31:30,387
Sometimes they still get killed.
707
00:31:30,389 --> 00:31:32,256
So what's his next move?
708
00:31:32,258 --> 00:31:34,358
Well, he's angry.
709
00:31:34,360 --> 00:31:36,059
He's calculated.
710
00:31:36,061 --> 00:31:37,427
He's got
nothing to lose.
711
00:31:45,003 --> 00:31:47,271
And he's armed and dangerous.
712
00:31:47,273 --> 00:31:48,906
Ramirez:
I just hit a dead end.
713
00:31:48,908 --> 00:31:50,607
Tillman's phone's
not showing a signal.
714
00:31:50,609 --> 00:31:53,377
He must have turned it off.
There's no way to track him.
715
00:31:53,379 --> 00:31:55,279
I'll see what we can do
with tillman's laptop.
716
00:31:55,281 --> 00:31:57,381
His recent online activity
should give us a glimpse
717
00:31:57,383 --> 00:32:02,019
Yeah, well, clearing
your history may hide porn sites
718
00:32:02,021 --> 00:32:04,288
From your girlfriend, but
it won't hide anything from me.
719
00:32:04,290 --> 00:32:08,191
Browser artifacts are easily
recovered with the right tools.
720
00:32:08,193 --> 00:32:10,394
Oh, check it out. Mostly
new york news affiliates.
721
00:32:10,396 --> 00:32:12,930
He's following the adel foster
murder investigation.
You think he knows
722
00:32:12,932 --> 00:32:14,364
We're onto him?
Always assume
723
00:32:14,366 --> 00:32:16,066
That the bad guys are two steps
ahead of you, nelson.
724
00:32:16,068 --> 00:32:17,301
That way, you're
prepared for anything,
725
00:32:17,303 --> 00:32:19,202
And you're never
caught off guard.
726
00:32:19,204 --> 00:32:22,539
Hey, man, he visited a
cell phone locating site?
727
00:32:22,541 --> 00:32:24,374
I mean, what, he
lost his cell phone?
728
00:32:24,376 --> 00:32:26,143
No, he wasn't looking
for his phone.
729
00:32:26,145 --> 00:32:28,011
He was tracking
someone else. Look.
730
00:32:28,013 --> 00:32:29,313
That area code is 212.
731
00:32:29,315 --> 00:32:31,315
That's new york, not jersey.
732
00:32:31,317 --> 00:32:33,350
Krumitz:
I'll call elijah.
733
00:32:33,352 --> 00:32:35,652
Elijah, shane tillman is using
734
00:32:35,654 --> 00:32:37,654
A cell phone locationtracking site.
735
00:32:37,656 --> 00:32:39,423
He's going after evan wescott!
736
00:32:39,425 --> 00:32:41,425
♪
737
00:33:20,064 --> 00:33:21,598
Whoa, whoa, whoa, hey.
738
00:33:21,600 --> 00:33:23,266
Problem is with me.
739
00:33:23,268 --> 00:33:24,768
Just let these
people go.
Shut up!
740
00:33:24,770 --> 00:33:27,304
This wouldn't be happening
if it wasn't for you.
741
00:33:27,306 --> 00:33:29,506
You took her away from me.
Buddy, I think you
got the wrong guy.
742
00:33:29,508 --> 00:33:31,575
It was you! It was you!
743
00:33:31,577 --> 00:33:34,411
I saw you with adel
right here in this bar.
744
00:33:43,187 --> 00:33:46,256
Look, man, just drop the gun,
and we can talk
745
00:33:46,258 --> 00:33:48,392
About whatever it is that
you think may have happened.
746
00:33:48,394 --> 00:33:50,727
No, I know what happened!
I know what happened!
747
00:33:50,729 --> 00:33:52,596
(siren wailing)
748
00:33:59,470 --> 00:34:01,405
You took her away from me.
749
00:34:01,407 --> 00:34:02,773
Of course, you don't remember.
750
00:34:02,775 --> 00:34:04,474
There's so many women,
aren't there?
751
00:34:04,476 --> 00:34:05,809
You just have to have them all?
752
00:34:05,811 --> 00:34:08,745
I needed a chance to explain,
to say I was sorry.
753
00:34:08,747 --> 00:34:12,082
To say I was sorry.
754
00:34:12,084 --> 00:34:13,717
But you...
You were all over her.
755
00:34:13,719 --> 00:34:16,186
And I could see in her eyes,
she wasn't coming back to me.
756
00:34:16,188 --> 00:34:17,721
Shane?
757
00:34:18,790 --> 00:34:20,824
Stay where you are!
758
00:34:22,060 --> 00:34:23,794
Stay where you are!
759
00:34:23,796 --> 00:34:26,696
Or this isn't gonna end
the way you want it to.
760
00:34:26,698 --> 00:34:28,799
Let her go and
put down the gun.
761
00:34:28,801 --> 00:34:30,767
He killed my girlfriend,
and you did nothing.
762
00:34:30,769 --> 00:34:33,770
At the count of three,
I'm gonna discharge this weapon.
763
00:34:33,772 --> 00:34:35,138
You need to decide
764
00:34:35,140 --> 00:34:37,140
What you're gonna
do. One, two...
765
00:34:37,142 --> 00:34:38,542
Okay.
766
00:34:38,544 --> 00:34:40,243
Okay.
767
00:34:42,447 --> 00:34:43,447
Good.
768
00:34:43,449 --> 00:34:44,648
Now kick it
towards me.
769
00:35:04,235 --> 00:35:05,602
Stay right where you are.
770
00:35:10,108 --> 00:35:12,175
W-wait, don't do
that, don't do that.
771
00:35:12,177 --> 00:35:14,211
I can't live without her!
772
00:35:14,213 --> 00:35:15,345
Shane. Shane!
773
00:35:18,516 --> 00:35:19,649
I got you!
774
00:35:19,651 --> 00:35:20,784
Hang on!
775
00:35:20,786 --> 00:35:22,185
I got you!
776
00:35:43,875 --> 00:35:46,143
♪
777
00:36:08,599 --> 00:36:09,933
Ryan:
Are you okay?
778
00:36:09,935 --> 00:36:12,669
Yeah. Yeah.
779
00:36:12,671 --> 00:36:13,837
We got him.
780
00:36:13,839 --> 00:36:15,505
We're not done.
781
00:36:15,507 --> 00:36:17,641
We still haven't put
shane tillman
782
00:36:17,643 --> 00:36:19,809
In that hotel room
at the time of the murder.
783
00:36:19,811 --> 00:36:22,212
We still have to prove
who killed adel foster.
784
00:36:24,482 --> 00:36:25,949
Anything on shane's phone?
785
00:36:25,951 --> 00:36:28,451
I need to know what we've got
before I question him.
786
00:36:28,453 --> 00:36:29,519
Sifter:
Well, nothing concrete.
787
00:36:29,521 --> 00:36:31,354
I'm heading in now
for an update.
788
00:36:31,356 --> 00:36:33,223
Krumitz: Yeah!
Nelson: That's what
I'm talking about!
789
00:36:33,225 --> 00:36:34,357
We got it.
790
00:36:34,359 --> 00:36:36,193
We found proof.
791
00:36:36,928 --> 00:36:38,929
(stammers)
792
00:36:38,931 --> 00:36:40,864
I'm gonna call you back.
793
00:36:40,866 --> 00:36:42,933
Wh-what kind of proof
did you find?
794
00:36:42,935 --> 00:36:46,369
Proof that shane tillman was
at the scene of the crime.
795
00:36:46,371 --> 00:36:48,471
Proof that he murdered
adel foster?
796
00:36:48,473 --> 00:36:49,839
If we're lucky, both.
797
00:36:49,841 --> 00:36:51,541
It's called a motion
tracking chip.
798
00:36:51,543 --> 00:36:52,842
Most new smartphones
have them,
799
00:36:52,844 --> 00:36:57,314
It's a motion co-processor that
collects and stores motion data
800
00:36:57,316 --> 00:37:00,317
On the phone's accelerometers,
gyroscopes and compasses.
801
00:37:00,319 --> 00:37:01,551
All right, so
basically it just...
802
00:37:01,553 --> 00:37:02,819
It records movement.
803
00:37:02,821 --> 00:37:04,821
Yeah, it's how an exercise app
knows the difference
804
00:37:04,823 --> 00:37:06,356
Between when you're jogging
versus walking,
805
00:37:06,358 --> 00:37:08,558
Which direction
you're headed--
806
00:37:08,560 --> 00:37:10,460
Pretty much however
your phone's moving.
807
00:37:10,462 --> 00:37:11,695
Krumitz:
As the phone moves,
808
00:37:11,697 --> 00:37:14,264
The motion tracking chip
records all of it.
809
00:37:14,266 --> 00:37:15,999
It will detect a pitch,
a roll, a tilt--
810
00:37:16,001 --> 00:37:18,001
Every movement the phone makes.
811
00:37:18,003 --> 00:37:20,537
Right, and it's
always on.
And it's separate
from the main processor.
812
00:37:20,539 --> 00:37:22,539
Let me get this right--
so if data were altered
813
00:37:22,541 --> 00:37:24,874
On that device, it would
never cross your minds
814
00:37:24,876 --> 00:37:26,543
To manipulate that file.
815
00:37:26,545 --> 00:37:28,545
Exactly.
So we pulled all the data
816
00:37:28,547 --> 00:37:32,649
Off shane's motion tracking
chip, and this is what we found.
817
00:37:32,651 --> 00:37:34,551
So the one on the left is
the motion tracking chip
818
00:37:34,553 --> 00:37:36,953
From shane's phone; the one
on the right is adele's.
819
00:37:36,955 --> 00:37:40,957
To the last time adel's phone
moved before she was murdered.
820
00:37:47,265 --> 00:37:49,299
Nelson: Most people keep theirphones in their pants pockets.
821
00:37:49,301 --> 00:37:51,401
Krumitz: Which means the phonewas recording their movement.
822
00:37:51,403 --> 00:37:54,838
So if two people were fighting,
and we had both phones...
823
00:37:54,840 --> 00:37:56,273
Sifter: Right, we couldreenact the fight.
824
00:37:56,275 --> 00:37:57,474
Nelson:
Yeah.
825
00:38:15,326 --> 00:38:16,660
Who is he?!
826
00:38:16,662 --> 00:38:18,828
Who is he?
827
00:38:18,830 --> 00:38:20,664
Tell me who he is!
Leave me alone!
828
00:38:20,666 --> 00:38:22,732
I'm not your
girlfriend anymore!
829
00:38:40,418 --> 00:38:42,352
Adel?
830
00:38:51,896 --> 00:38:54,531
Well, this not only puts
shane tillman in the room
831
00:38:54,533 --> 00:38:58,101
At the time of the murder,
it proves that he killed her.
832
00:39:04,809 --> 00:39:07,477
Avery: You covered your tracksfrom every possible angle.
833
00:39:07,479 --> 00:39:09,479
You wiped your phone
of any wrongdoing,
834
00:39:09,481 --> 00:39:11,481
Pushed all the evidence
to evan's devices,
835
00:39:11,483 --> 00:39:14,784
You even hacked the hotel,
wiped its security footage.
836
00:39:14,786 --> 00:39:16,786
Ryan:
It was all very clever.
837
00:39:16,788 --> 00:39:19,022
But you forgot
one thing.
838
00:39:19,024 --> 00:39:21,024
One thing most people
don't know about--
839
00:39:21,026 --> 00:39:23,860
Your phone's
motion tracking chip.
840
00:39:25,963 --> 00:39:29,699
Cyber-synchronized
offender and victim.
841
00:39:31,635 --> 00:39:34,404
Records every
movement.
842
00:39:34,406 --> 00:39:37,374
Proves you killed
your girlfriend.
843
00:39:37,376 --> 00:39:38,908
(sniffles)
844
00:39:53,858 --> 00:39:55,925
What's this?
845
00:39:58,996 --> 00:40:00,397
Nelson: No!
(ryan stammers)
846
00:40:01,432 --> 00:40:03,032
No, no! You freed it?!
847
00:40:03,034 --> 00:40:04,701
Oh, what?
848
00:40:04,703 --> 00:40:07,404
Uh, there was a cup in
the middle of the floor.
849
00:40:07,406 --> 00:40:08,872
Hey, welcome back.
850
00:40:08,874 --> 00:40:10,407
Good job.
(grumbles)
851
00:40:10,409 --> 00:40:13,109
He has been preoccupied
with a little spider.
852
00:40:13,111 --> 00:40:14,778
What is all that?
(chuckles)
853
00:40:14,780 --> 00:40:16,479
What?
Some compressed air.
854
00:40:16,481 --> 00:40:18,047
I was gonna turn it over,
zap it, freeze it,
855
00:40:18,049 --> 00:40:19,482
Then I was gonna
set it free.
856
00:40:19,484 --> 00:40:20,884
Aw.
Cryonic preservation?
857
00:40:20,886 --> 00:40:22,852
I'm not hunting
that thing down again.
858
00:40:22,854 --> 00:40:25,789
Okay, I will help you
look for your spider.
859
00:40:25,791 --> 00:40:26,823
Thank you.
860
00:40:26,825 --> 00:40:27,924
We'll find it,
861
00:40:27,926 --> 00:40:29,459
And elijah will arrest it.
Yeah.
862
00:40:29,461 --> 00:40:30,427
Krumitz:
Well, now I have to help.
863
00:40:30,429 --> 00:40:32,462
Yeah. (shouts)
864
00:40:32,464 --> 00:40:34,097
Why... Why would
y'all do that?
(laughter)
865
00:40:34,099 --> 00:40:35,565
Why would
y'all do that?!
866
00:40:35,567 --> 00:40:39,569
Captioning sponsored by
cbs
867
00:40:39,571 --> 00:40:41,638
Captioned by
media access group at wgbh
access.Wgbh.Org
62745
Can't find what you're looking for?
Get subtitles in any language from opensubtitles.com, and translate them here.