1 00:00:02,132 --> 00:00:03,350 You're Angela Cassidy's son, right? 2 00:00:03,350 --> 00:00:05,135 Your mother's still out there. 3 00:00:05,135 --> 00:00:06,353 You sold secrets to the Russians, 4 00:00:06,353 --> 00:00:08,486 and then you just disappeared. 5 00:00:08,486 --> 00:00:10,096 I am not who you think I am. 6 00:00:10,096 --> 00:00:11,271 I need your help. 7 00:00:13,099 --> 00:00:15,841 I'm ordering you to cease and desist 8 00:00:15,841 --> 00:00:18,322 in any more personal investigation. 9 00:00:20,193 --> 00:00:24,110 I am working for the CIA. I never stopped. 10 00:00:24,110 --> 00:00:27,113 You know the truth. We all do. 11 00:00:27,113 --> 00:00:29,550 Mom, don't disappear on me again. 12 00:00:29,550 --> 00:00:30,421 Let me help you. 13 00:00:30,421 --> 00:00:32,031 Scott, forget about me. 14 00:00:32,031 --> 00:00:33,902 I love you. 15 00:00:42,607 --> 00:00:44,087 You said you put her in your backpack. 16 00:00:44,087 --> 00:00:45,436 I did put her in my backpack, 17 00:00:45,436 --> 00:00:46,480 but Piggy has a mind of her own. 18 00:00:46,480 --> 00:00:48,221 Don't be such a baby, Mads. 19 00:00:48,221 --> 00:00:50,354 I'll be quick. I promise. 20 00:00:50,354 --> 00:00:52,095 We'll help you look. 21 00:00:52,095 --> 00:00:54,271 Let's go. Let's go. 22 00:01:00,277 --> 00:01:01,626 Come on. - Everyone has their price. 23 00:01:01,626 --> 00:01:02,757 Papa's home. 24 00:01:02,757 --> 00:01:04,063 Can we say hi? 25 00:01:04,063 --> 00:01:05,760 Hold on. 26 00:01:05,760 --> 00:01:08,154 10 million. 27 00:01:08,154 --> 00:01:09,721 20. 28 00:01:09,721 --> 00:01:12,115 You know your credentials are worth so much more. 29 00:01:12,115 --> 00:01:13,333 No, he's on a work call. 30 00:01:13,333 --> 00:01:16,162 Come on, guys. Let's go. 31 00:01:16,162 --> 00:01:18,164 We gotta hurry. 32 00:01:22,386 --> 00:01:24,736 Piggy, where are you? 33 00:01:29,741 --> 00:01:30,785 Stay here. 34 00:01:30,785 --> 00:01:32,222 I'll be right back. 35 00:01:36,574 --> 00:01:37,749 Take it. 36 00:01:37,749 --> 00:01:39,054 Whatever you want, I won't tell a soul. 37 00:01:39,054 --> 00:01:40,926 - I can't run that risk. - No. 38 00:01:40,926 --> 00:01:43,189 Please, please--my two boys. 39 00:01:50,936 --> 00:01:52,894 - Ahh! 40 00:02:00,772 --> 00:02:01,860 What's going on? 41 00:02:01,860 --> 00:02:03,644 Come here. Come here. 42 00:02:17,397 --> 00:02:21,445 If you come out right now, I won't hurt the boys. 43 00:02:26,145 --> 00:02:27,973 Okay. 44 00:02:38,897 --> 00:02:40,899 Open it! 45 00:02:58,264 --> 00:03:00,788 - Morning. - Morning. 46 00:03:00,788 --> 00:03:03,138 We've got a visitor. 47 00:03:03,138 --> 00:03:05,445 Looks like he's having a rough day. 48 00:03:06,403 --> 00:03:07,665 Where's Scott? 49 00:03:07,665 --> 00:03:09,057 I called to give him a heads-up. 50 00:03:09,057 --> 00:03:11,059 Haven't heard back yet. 51 00:03:11,059 --> 00:03:12,278 Can I help you? 52 00:03:12,278 --> 00:03:13,366 We're screwed. 53 00:03:13,366 --> 00:03:14,889 We're 1,000% screwed. 54 00:03:14,889 --> 00:03:15,977 Okay, back up. 55 00:03:15,977 --> 00:03:18,371 - Who are you? - Adam Grayson, NSA. 56 00:03:18,371 --> 00:03:20,286 I'm here because my boss thinks we can 57 00:03:20,286 --> 00:03:21,635 put this genie back in the bottle, 58 00:03:21,635 --> 00:03:22,897 but I am telling you now, there is-- 59 00:03:22,897 --> 00:03:24,595 - Slow down. - There is no slowing down. 60 00:03:24,595 --> 00:03:26,423 Brian Lange, the bureau's NSA liaison, 61 00:03:26,423 --> 00:03:27,902 is being read in as we speak. 62 00:03:27,902 --> 00:03:30,383 This is a huge, and I mean absolutely massive, 63 00:03:30,383 --> 00:03:32,907 catastrophic disaster. - What happened? 64 00:03:32,907 --> 00:03:34,866 It's the biggest data breach the NSA has ever seen. 65 00:03:47,705 --> 00:03:49,924 Brian! 66 00:03:49,924 --> 00:03:51,274 Help! 67 00:03:51,274 --> 00:03:53,276 Brian! Help! 68 00:04:06,463 --> 00:04:08,116 Brian! 69 00:04:08,116 --> 00:04:09,509 Help! 70 00:04:16,081 --> 00:04:18,083 Stop, please! Stop! 71 00:04:20,607 --> 00:04:23,001 Stop, no. Brian. Stop! 72 00:04:23,001 --> 00:04:24,002 Brian! 73 00:04:24,002 --> 00:04:26,439 No! 74 00:04:46,720 --> 00:04:47,721 Lange. 75 00:04:49,549 --> 00:04:51,595 Call Dutton. I'm off till Tuesday. 76 00:04:54,075 --> 00:04:55,338 Okay. 77 00:05:02,736 --> 00:05:06,479 Do me a favor. Next time, start with that. 78 00:05:06,479 --> 00:05:08,438 I'll be there in an hour. 79 00:05:12,485 --> 00:05:15,358 Carl Lassen, the founder of Digital Wall, 80 00:05:15,358 --> 00:05:17,011 Europe's largest cybersecurity company. 81 00:05:17,011 --> 00:05:18,926 Lassen was shot dead in his home 82 00:05:18,926 --> 00:05:20,624 in Copenhagen yesterday afternoon. 83 00:05:20,624 --> 00:05:22,843 Now, Digital Wall has the most robust 84 00:05:22,843 --> 00:05:24,845 fiber-optic cable network in the world. 85 00:05:24,845 --> 00:05:27,065 So all of the internet traffic that passes between Russia, 86 00:05:27,065 --> 00:05:29,110 the Nordics, Western Europe, the U.S., 87 00:05:29,110 --> 00:05:30,677 it runs through these cables. 88 00:05:30,677 --> 00:05:32,940 So we believe someone killed Lassen to get to that data. 89 00:05:32,940 --> 00:05:35,334 I'm seeing Carl sold Digital Wall a year ago. 90 00:05:35,334 --> 00:05:37,510 Yeah, when Carl cashed out, he kept his board seats 91 00:05:37,510 --> 00:05:39,338 and security privileges. 92 00:05:39,338 --> 00:05:40,600 The killer stole his password, 93 00:05:40,600 --> 00:05:41,775 logged into Digital Wall's system. 94 00:05:41,775 --> 00:05:43,690 What exactly was stolen? 95 00:05:43,690 --> 00:05:45,518 Terabytes of top secret data. 96 00:05:45,518 --> 00:05:48,695 Military vulnerabilities, proprietary NSA weapons. 97 00:05:48,695 --> 00:05:51,655 Fortunately, we have a witness to the murder. 98 00:05:51,655 --> 00:05:54,353 Brie Martindale, American, Carl's au pair. 99 00:05:54,353 --> 00:05:55,833 Carl had a panic room in the house. 100 00:05:55,833 --> 00:05:57,748 Brie got in there just in time with Carl's two kids. 101 00:05:57,748 --> 00:06:00,185 Once the locks engaged, the cops are notified-- 102 00:06:00,185 --> 00:06:02,056 the killer boogied. - Where's Brie now? 103 00:06:02,056 --> 00:06:03,623 Under DDIS protection. 104 00:06:03,623 --> 00:06:05,495 Supervisory Special Agent Brian Lange, 105 00:06:05,495 --> 00:06:06,974 the bureau's liaison to the NSA-- 106 00:06:06,974 --> 00:06:08,715 he's gonna meet us in Copenhagen. 107 00:06:08,715 --> 00:06:11,022 He's done tours in both cyber and foreign counterintel. 108 00:06:11,022 --> 00:06:12,545 Has anybody heard from Scott today? 109 00:06:12,545 --> 00:06:14,199 Not since yesterday. 110 00:06:14,199 --> 00:06:17,028 I mean, that is just odd-- him not showing up and no word? 111 00:06:17,028 --> 00:06:18,725 - Do we wait for him? - No, we can't. 112 00:06:18,725 --> 00:06:20,074 This case is too big. 113 00:06:20,074 --> 00:06:21,249 I'll keep trying to reach him. 114 00:06:21,249 --> 00:06:22,512 Okay. 115 00:06:24,078 --> 00:06:26,733 Agent Lange. 116 00:06:26,733 --> 00:06:28,387 You must be agent Vo. 117 00:06:28,387 --> 00:06:30,389 This is Special Agent Andre Raines, 118 00:06:30,389 --> 00:06:31,564 Megan Garretson from Europol. 119 00:06:31,564 --> 00:06:32,739 You're Brian Lange. 120 00:06:32,739 --> 00:06:34,262 You were ALAT in Scandinavia when 121 00:06:34,262 --> 00:06:36,395 that online abuse ring in Norway got busted, 122 00:06:36,395 --> 00:06:38,266 over 300 victims. 123 00:06:38,266 --> 00:06:39,572 My colleague sang your praises. 124 00:06:39,572 --> 00:06:42,314 Yeah, joint effort. 125 00:06:42,314 --> 00:06:43,707 Where is Agent Forrester? 126 00:06:43,707 --> 00:06:45,099 He's on his way. 127 00:06:45,099 --> 00:06:46,927 We'll get set up at the DDIS station. 128 00:06:46,927 --> 00:06:50,278 Great. Brian and I will cover here. 129 00:06:50,278 --> 00:06:52,106 If that's okay. 130 00:06:52,106 --> 00:06:53,107 After you. 131 00:07:00,114 --> 00:07:02,813 Agent Vo, this is Agent Lorens Faber, DDIS. 132 00:07:02,813 --> 00:07:05,076 Welcome to the Lassen residence, what we thought 133 00:07:05,076 --> 00:07:07,905 was the most secure home in all of Denmark. 134 00:07:07,905 --> 00:07:11,648 Electronic locks requiring both biometrics and pin codes, 135 00:07:11,648 --> 00:07:13,650 security cameras covering every square inch 136 00:07:13,650 --> 00:07:14,912 of the house. 137 00:07:14,912 --> 00:07:16,391 How'd the killer disable them? 138 00:07:16,391 --> 00:07:17,958 He didn't. 139 00:07:17,958 --> 00:07:19,743 If he had, the police would have been alerted instantly. 140 00:07:19,743 --> 00:07:21,788 He froze the cameras and looped the footage. 141 00:07:21,788 --> 00:07:24,008 Came and went without a trace. 142 00:07:30,884 --> 00:07:31,972 Brie? 143 00:07:31,972 --> 00:07:33,583 I'm Agent Vo. This is Agent Lange. 144 00:07:33,583 --> 00:07:34,932 We're with the FBI. 145 00:07:34,932 --> 00:07:36,324 Mads and Edvard-- where are they? 146 00:07:36,324 --> 00:07:38,588 Don't worry. The boys are with their mom. 147 00:07:38,588 --> 00:07:41,068 Can you tell us what you remember from yesterday? 148 00:07:41,068 --> 00:07:42,548 We weren't even supposed to be home. 149 00:07:42,548 --> 00:07:44,332 Me and the kids-- 150 00:07:44,332 --> 00:07:46,334 Carl asked me to get them out of the house in the morning. 151 00:07:46,334 --> 00:07:47,684 Did he say why? 152 00:07:47,684 --> 00:07:50,164 No, but he has been through a lot recently. 153 00:07:50,164 --> 00:07:51,688 I read in his file that he just got divorced. 154 00:07:51,688 --> 00:07:53,167 Is that what you're referring to? 155 00:07:53,167 --> 00:07:54,734 It started before that. 156 00:07:54,734 --> 00:07:56,997 After Carl sold his company, 157 00:07:56,997 --> 00:07:59,739 he started going out a lot, partying. 158 00:07:59,739 --> 00:08:01,567 What can you tell us about the ex-wife? 159 00:08:01,567 --> 00:08:02,829 Was the separation amicable? 160 00:08:02,829 --> 00:08:05,484 No. No, it wasn't amicable. 161 00:08:05,484 --> 00:08:09,314 And then after Susanne left, he really started slipping. 162 00:08:09,314 --> 00:08:11,534 I heard a woman's voice coming from his office 163 00:08:11,534 --> 00:08:13,884 at 2:00 in the morning, 164 00:08:13,884 --> 00:08:17,191 and nobody was allowed in there, not even me. 165 00:08:17,191 --> 00:08:19,454 All right, I will ask our SIA back in Budapest 166 00:08:19,454 --> 00:08:21,848 to try to pull that footage. 167 00:08:21,848 --> 00:08:23,458 We're gonna need a list of everybody 168 00:08:23,458 --> 00:08:25,939 who's been to the house recently, Carl's friends, 169 00:08:25,939 --> 00:08:27,593 your friends, everybody, okay? 170 00:08:27,593 --> 00:08:29,203 I wasn't allowed to have any guests. 171 00:08:29,203 --> 00:08:32,642 U.S. embassy liaisons here to discuss Brie's situation. 172 00:08:32,642 --> 00:08:33,860 Martin Russo. 173 00:08:33,860 --> 00:08:35,558 I'm the embassy's political attaché. 174 00:08:37,560 --> 00:08:39,562 Political attaché, huh? 175 00:08:39,562 --> 00:08:41,085 That's a good one. 176 00:08:45,393 --> 00:08:47,134 CIA. 177 00:08:47,134 --> 00:08:49,049 Grayson should have told me Langley was involved. 178 00:08:49,049 --> 00:08:50,921 He wasn't authorized to do so. 179 00:08:50,921 --> 00:08:52,618 Look, if we're not fully read in, we cannot do our job. 180 00:08:52,618 --> 00:08:54,185 Nobody's fully read in. 181 00:08:54,185 --> 00:08:56,274 Not even the highest echelons of the Danish PET 182 00:08:56,274 --> 00:08:58,058 knew Carl was our asset. 183 00:08:58,058 --> 00:09:00,670 If our allies found out about this secret arrangement-- 184 00:09:00,670 --> 00:09:02,106 Marty, why don't you just tell us 185 00:09:02,106 --> 00:09:04,804 what we're really walking into here? 186 00:09:04,804 --> 00:09:06,676 This morning, the German chancellor received 187 00:09:06,676 --> 00:09:08,547 a ransom demand of 5 million euros. 188 00:09:08,547 --> 00:09:11,071 Now, we have confirmed intel that a vulnerability 189 00:09:11,071 --> 00:09:13,596 in the MEGAL gas pipeline was part of the data 190 00:09:13,596 --> 00:09:15,685 Carl's killer intercepted. 191 00:09:15,685 --> 00:09:18,035 Germany refused to pay up. 192 00:09:18,035 --> 00:09:20,777 30 minutes later, this happened. 193 00:09:24,781 --> 00:09:27,261 It definitely wasn't a one-man show. 194 00:09:27,261 --> 00:09:29,437 Pulling off an attack like that takes resources. 195 00:09:29,437 --> 00:09:32,266 Have any state-sponsored groups claimed responsibility? 196 00:09:32,266 --> 00:09:33,528 Not yet. 197 00:09:33,528 --> 00:09:35,966 So we're all working the same case here. 198 00:09:35,966 --> 00:09:40,231 How about we all agree to play our cards face up? 199 00:09:41,580 --> 00:09:43,800 Cards face up? 200 00:09:43,800 --> 00:09:46,237 This coming from Brian Lange. 201 00:09:46,237 --> 00:09:48,631 That's rich. 202 00:09:48,631 --> 00:09:51,111 Carl's ex-wife is here. 203 00:09:51,111 --> 00:09:53,374 Well, how about this? Can you at least have Germany 204 00:09:53,374 --> 00:09:55,333 send over everything they've got so far? 205 00:09:55,333 --> 00:09:56,682 Because whoever killed Carl 206 00:09:56,682 --> 00:09:57,988 knows that they hit a gold mine. 207 00:09:59,511 --> 00:10:00,686 Great. 208 00:10:07,040 --> 00:10:08,215 Brie! 209 00:10:09,477 --> 00:10:11,958 Oh! Oh. 210 00:10:11,958 --> 00:10:15,483 Hey, guys. It's okay. It's okay. 211 00:10:15,483 --> 00:10:16,876 She can leave now. 212 00:10:22,099 --> 00:10:23,796 I'll be looking at photo arrays 213 00:10:23,796 --> 00:10:24,841 if you have more questions. 214 00:10:24,841 --> 00:10:25,929 Thank you. 215 00:10:25,929 --> 00:10:28,366 Okay, go pack your bags now. 216 00:10:28,366 --> 00:10:30,498 Don't worry. You'll be leaving soon. 217 00:10:30,498 --> 00:10:31,848 Okay, go, go. 218 00:10:36,026 --> 00:10:38,202 Susanne, were you aware that your husband 219 00:10:38,202 --> 00:10:40,508 kept his security privileges at Digital Wall 220 00:10:40,508 --> 00:10:42,336 after he cashed out? 221 00:10:42,336 --> 00:10:45,339 Of course I knew, but whether he actually remained sober 222 00:10:45,339 --> 00:10:48,516 long enough to ever set foot back in the office, 223 00:10:48,516 --> 00:10:49,692 I haven't a clue. 224 00:10:49,692 --> 00:10:51,389 Ah, bad breakup, I take it? 225 00:10:53,870 --> 00:10:55,349 Beklager. 226 00:10:55,349 --> 00:10:57,395 That was the first word that Carl ever said to me. 227 00:10:57,395 --> 00:10:59,136 It means "I'm sorry." 228 00:10:59,136 --> 00:11:03,183 We were queuing for coffee, and he bumped into me by mistake. 229 00:11:03,183 --> 00:11:05,446 And Danes never apologize for something 230 00:11:05,446 --> 00:11:07,971 they do on accident, but-- 231 00:11:07,971 --> 00:11:11,322 but Carl said "beklager," because that was who he was. 232 00:11:11,322 --> 00:11:16,631 He was overly polite and, uh, and sheepish. 233 00:11:16,631 --> 00:11:18,198 And then he cashed out. 234 00:11:18,198 --> 00:11:20,026 And he thought that becoming a billionaire 235 00:11:20,026 --> 00:11:22,246 meant that he could loosen his tie. 236 00:11:22,246 --> 00:11:24,857 As for me, 237 00:11:24,857 --> 00:11:27,077 turns out I like sheepish. 238 00:11:30,254 --> 00:11:32,038 This was from two weeks ago. 239 00:11:32,038 --> 00:11:34,301 Do you recognize this woman in Carl's office? 240 00:11:34,301 --> 00:11:37,565 No, he probably met her at the club. 241 00:11:37,565 --> 00:11:38,523 What club? 242 00:11:40,612 --> 00:11:41,744 You don't know, do you? 243 00:11:43,963 --> 00:11:45,573 Swingers club. 244 00:11:49,795 --> 00:11:52,232 Our DOA spent his whole life on the straight and narrow. 245 00:11:52,232 --> 00:11:54,104 How does a guy like that end up at a club 246 00:11:54,104 --> 00:11:56,715 where check your inhibitions at the door is a requirement? 247 00:11:56,715 --> 00:11:58,891 I don't know, but it seems like a perfect place 248 00:11:58,891 --> 00:12:01,067 to entrap a square like him. 249 00:12:01,067 --> 00:12:04,114 Carl Lassen's autopsy just came in. 250 00:12:04,114 --> 00:12:06,464 This guy partied harder than a frat boy in Ibiza. 251 00:12:06,464 --> 00:12:08,901 The MDMA, that'll send your heart 252 00:12:08,901 --> 00:12:10,381 shooting out of your ribcage. 253 00:12:10,381 --> 00:12:12,078 And Lassen's phone, as requested. 254 00:12:13,601 --> 00:12:15,560 Security freaks don't just hang their dirty laundry 255 00:12:15,560 --> 00:12:17,780 out in the open. 256 00:12:20,304 --> 00:12:21,392 Hidden apps. 257 00:12:23,002 --> 00:12:25,613 And there we are-- the Velvet Room. 258 00:12:25,613 --> 00:12:28,094 Looks like a membership app to that private swingers club. 259 00:12:28,094 --> 00:12:29,574 Go in with our badges? 260 00:12:29,574 --> 00:12:32,664 No, that's a surefire way to get people to clam up. 261 00:12:32,664 --> 00:12:34,492 Undercover it is then. 262 00:12:36,102 --> 00:12:41,629 ♪ Sugar on my mind 263 00:12:44,458 --> 00:12:47,505 That's the blonde from Carl's office. 264 00:12:52,379 --> 00:12:53,903 I'm Samantha. 265 00:12:53,903 --> 00:12:55,426 This is my partner Michael. 266 00:12:55,426 --> 00:12:57,950 Mm, out-of-towners? Intriguing. 267 00:12:57,950 --> 00:12:59,386 I'm Martine. 268 00:13:05,479 --> 00:13:08,526 So how did you hear about the Velvet Room? 269 00:13:08,526 --> 00:13:09,788 From friends. 270 00:13:09,788 --> 00:13:12,182 We're members of the Luxe Castle in London. 271 00:13:12,182 --> 00:13:15,402 In that case, let me show you around. 272 00:13:15,402 --> 00:13:19,015 What Michael's too tactful to admit is, 273 00:13:19,015 --> 00:13:21,452 we saw what happened to Carl Lassen on the telly. 274 00:13:21,452 --> 00:13:23,933 Michael worked with him a few years ago. 275 00:13:23,933 --> 00:13:26,022 He was a nice chap. 276 00:13:26,022 --> 00:13:28,676 Ah, so you're here out of morbid curiosity, then? 277 00:13:28,676 --> 00:13:32,071 Oh, is that such a bad thing? 278 00:13:32,071 --> 00:13:36,467 Carl was a bit of a mess, but he was magnanimous, 279 00:13:36,467 --> 00:13:38,208 if you know what I mean. 280 00:13:38,208 --> 00:13:40,384 I went to his house once. 281 00:13:40,384 --> 00:13:42,212 Gorgeous mansion. 282 00:13:42,212 --> 00:13:44,867 But enough about Carl. 283 00:13:44,867 --> 00:13:47,478 Life is for the living. 284 00:13:51,786 --> 00:13:53,527 Who is he? 285 00:13:57,401 --> 00:14:00,012 We don't kiss and tell at the Velvet Room. 286 00:14:02,885 --> 00:14:05,365 Martinis first. 287 00:14:05,365 --> 00:14:08,238 Dessert later. 288 00:14:08,238 --> 00:14:11,241 Hey, what's the rush? 289 00:14:13,373 --> 00:14:15,462 Clean-cut, calloused knuckles, 290 00:14:15,462 --> 00:14:18,813 and I saw you check the side exits the second you walked in. 291 00:14:18,813 --> 00:14:20,163 I used to consult for the DDIS. 292 00:14:20,163 --> 00:14:22,252 I know a Fed when I see one. 293 00:14:22,252 --> 00:14:24,080 Then you should know walking away now just gives us 294 00:14:24,080 --> 00:14:26,604 more PC to come find you later. 295 00:14:29,433 --> 00:14:33,916 I'll give you this, but only because Carl was a friend. 296 00:14:33,916 --> 00:14:35,308 Look into his ex-wife. 297 00:14:35,308 --> 00:14:37,310 Carl screwed her over royally in the divorce. 298 00:14:37,310 --> 00:14:39,051 From what I heard, she's the one who left him. 299 00:14:39,051 --> 00:14:42,141 And he got his revenge, every kroner's worth. 300 00:14:47,973 --> 00:14:49,366 Germany sent over the ransomware message 301 00:14:49,366 --> 00:14:50,976 their chancellor received. 302 00:14:50,976 --> 00:14:53,065 Whoever's pulling the strings left us a breadcrumb, 303 00:14:53,065 --> 00:14:55,546 a signature hidden in the HTML code. 304 00:14:56,503 --> 00:15:00,420 Oh, man, the Army of Shadows. 305 00:15:00,420 --> 00:15:01,987 Who? 306 00:15:01,987 --> 00:15:03,380 They're a hacker group-- 307 00:15:03,380 --> 00:15:05,469 supposedly responsible for the two largest 308 00:15:05,469 --> 00:15:08,472 data breaches in history, each worth 200 mil. 309 00:15:08,472 --> 00:15:09,995 - State-sponsored? - Independent. 310 00:15:09,995 --> 00:15:12,258 No home base, no known members, 311 00:15:12,258 --> 00:15:14,608 nobody even knows what country they're operating out of. 312 00:15:14,608 --> 00:15:16,306 What makes this group so unique is that they have 313 00:15:16,306 --> 00:15:18,569 operatives who specialize in social engineering, 314 00:15:18,569 --> 00:15:20,614 exploiting people rather than software. 315 00:15:20,614 --> 00:15:22,051 Maybe someone had a bone to pick with Carl 316 00:15:22,051 --> 00:15:23,878 and sold him out? 317 00:15:23,878 --> 00:15:26,533 Any word from that woman he was seeing at the Velvet Room? 318 00:15:26,533 --> 00:15:28,361 Ran Martine through Europol's DBs. 319 00:15:28,361 --> 00:15:29,928 Everything came back clean. 320 00:15:29,928 --> 00:15:32,452 Now, Carl and Susanne's divorce was more interesting. 321 00:15:32,452 --> 00:15:34,672 Intel came from Harald Bonnichsen, 322 00:15:34,672 --> 00:15:35,978 also in cybersecurity-- 323 00:15:35,978 --> 00:15:38,110 consulted for DDIS back in the day. 324 00:15:38,110 --> 00:15:39,764 What he said about Carl's ex-wife was spot on. 325 00:15:39,764 --> 00:15:41,287 Yeah, Susanne didn't receive a cent 326 00:15:41,287 --> 00:15:43,072 from Digital Wall's sale, 327 00:15:43,072 --> 00:15:45,074 and she wasn't shy about calling Carl out. 328 00:15:45,074 --> 00:15:47,380 This text was from six months ago. 329 00:15:47,380 --> 00:15:49,339 "Go to hell, you cheap bastard." 330 00:15:49,339 --> 00:15:52,124 Some, uh, increasingly vulgar insults followed. 331 00:15:52,124 --> 00:15:54,692 Okay, so Carl screws Susanne over, 332 00:15:54,692 --> 00:15:56,650 and now she wants her half of the cash out. 333 00:15:56,650 --> 00:15:59,740 So then she sells the intel on Carl to this hacker group. 334 00:15:59,740 --> 00:16:01,742 And not only does she get a massive payday, 335 00:16:01,742 --> 00:16:05,616 but with Carl gone, the assets actually pass back to her 336 00:16:05,616 --> 00:16:06,573 through the kids. 337 00:16:08,532 --> 00:16:10,273 Maybe. 338 00:16:14,712 --> 00:16:17,106 Excuse me. 339 00:16:17,106 --> 00:16:18,846 The Hub just received an encrypted message 340 00:16:18,846 --> 00:16:20,283 from the Army of Shadows. 341 00:16:20,283 --> 00:16:22,024 It's an intake form from a Russian prison. 342 00:16:22,024 --> 00:16:23,982 I just sent it to you. 343 00:16:23,982 --> 00:16:25,679 - Scott's mom. - Yeah. 344 00:16:25,679 --> 00:16:28,030 Vanessa Kincaide is one of her known aliases. 345 00:16:28,030 --> 00:16:29,988 The hackers want us to drop the case 346 00:16:29,988 --> 00:16:32,077 against them in exchange for her location. 347 00:16:32,077 --> 00:16:33,339 If Scott finds out, 348 00:16:33,339 --> 00:16:35,037 he would move heaven and Earth to find her. 349 00:16:35,037 --> 00:16:38,344 Cam, they also sent this message directly to Scott. 350 00:16:38,344 --> 00:16:39,998 And still no word? 351 00:16:39,998 --> 00:16:42,000 Nothing. He's gone dark. 352 00:16:49,877 --> 00:16:51,009 It's been 24 hours since any of us heard from Scott. 353 00:16:51,009 --> 00:16:53,838 Do we loop in HQ or-- - Not yet. 354 00:16:53,838 --> 00:16:57,189 I need you to get a copy of that file unredacted. 355 00:16:59,452 --> 00:17:01,802 See what you can fish out of the NSA discreetly. 356 00:17:01,802 --> 00:17:02,803 I'll try. 357 00:17:02,803 --> 00:17:03,848 Thank you. 358 00:17:06,546 --> 00:17:07,982 Everything good? 359 00:17:07,982 --> 00:17:10,550 Yeah, yeah, just getting more dirt on the ex. 360 00:17:10,550 --> 00:17:12,030 Are you ready? 361 00:17:13,771 --> 00:17:15,468 I don't know if anybody's ever told you this, 362 00:17:15,468 --> 00:17:18,515 but, uh, you have a terrible poker face. 363 00:17:26,827 --> 00:17:28,742 Yeah, I should probably loop you in on this. 364 00:17:38,622 --> 00:17:40,711 Well, my Russian isn't as sharp as it used to be, 365 00:17:40,711 --> 00:17:42,060 but nowhere on this document 366 00:17:42,060 --> 00:17:43,583 does it say the word "prisoner." 367 00:17:43,583 --> 00:17:45,890 Miss Vanessa Kincaide could be an employee. 368 00:17:45,890 --> 00:17:48,545 You know damn well that she's not. 369 00:17:48,545 --> 00:17:50,764 Kincaide is an alias for Angela Cassidy, 370 00:17:50,764 --> 00:17:54,507 a CIA agent who reported to you. 371 00:17:54,507 --> 00:17:56,205 And now you don't seem to give a rat's ass 372 00:17:56,205 --> 00:17:57,597 that she's been captured? 373 00:17:57,597 --> 00:17:59,860 I'm focused on the current mission. 374 00:17:59,860 --> 00:18:03,951 Yes or no, does the CIA know where Angela Cassidy is? 375 00:18:03,951 --> 00:18:07,085 Intelligence ops are compartmentalized by design. 376 00:18:07,085 --> 00:18:08,826 Don't give me that boilerplate BS, Marty. 377 00:18:08,826 --> 00:18:11,698 There's a living, breathing human being chained up 378 00:18:11,698 --> 00:18:14,092 in one of those compartments. 379 00:18:14,092 --> 00:18:16,225 And now you don't seem to give a rat's ass 380 00:18:16,225 --> 00:18:17,574 that she's been captured. 381 00:18:17,574 --> 00:18:21,099 Look at you, Brian, caring. 382 00:18:21,099 --> 00:18:23,145 I thought after what happened in Azerbaijan 383 00:18:23,145 --> 00:18:25,886 you'd traded that emotion in for a new pair of skis. 384 00:18:29,412 --> 00:18:30,848 Get in! 385 00:18:30,848 --> 00:18:32,850 No! 386 00:18:34,156 --> 00:18:38,508 Do you know where she is or not? 387 00:18:38,508 --> 00:18:41,206 Cassidy is one person. 388 00:18:41,206 --> 00:18:44,514 Four civilians died when that pipeline exploded. 389 00:18:44,514 --> 00:18:46,907 And believe me, it's only a matter of time 390 00:18:46,907 --> 00:18:48,213 until they stick a gun to our ribs. 391 00:18:48,213 --> 00:18:49,171 Okay. 392 00:18:51,782 --> 00:18:53,697 Is your head in the game or not? 393 00:18:53,697 --> 00:18:56,482 Because I'm giving Langley an update in five minutes. 394 00:18:56,482 --> 00:18:59,442 What do you want me to tell them? 395 00:18:59,442 --> 00:19:00,747 Don't worry about me. 396 00:19:05,709 --> 00:19:07,711 Selling Digital Wall should have made you 397 00:19:07,711 --> 00:19:10,670 a multibillionaire, but instead you settled 398 00:19:10,670 --> 00:19:12,585 for a fraction of what you were owed. 399 00:19:12,585 --> 00:19:15,632 Before we got married, Carl made me sign a form 400 00:19:15,632 --> 00:19:19,853 excluding Digital Wall from our joint assets 401 00:19:19,853 --> 00:19:22,769 to protect me from future liabilities 402 00:19:22,769 --> 00:19:25,076 in case the company ever went under. 403 00:19:25,076 --> 00:19:27,426 Maybe I shouldn't have signed that document. 404 00:19:27,426 --> 00:19:31,517 But you could have contested that document, but you didn't. 405 00:19:31,517 --> 00:19:34,825 Well, Carl is the-- 406 00:19:34,825 --> 00:19:37,262 Carl was the father of my children, 407 00:19:37,262 --> 00:19:42,963 and you're implying that I had him killed to what? 408 00:19:42,963 --> 00:19:45,705 To add a few extra zeroes to my bank statement? 409 00:19:45,705 --> 00:19:48,795 I have seen it happen before numerous times. 410 00:19:48,795 --> 00:19:50,536 Say I fought harder, 411 00:19:50,536 --> 00:19:52,495 I dragged the divorce on for longer. 412 00:19:52,495 --> 00:19:55,846 Look what that money did to Carl. 413 00:19:55,846 --> 00:19:58,327 That money destroyed him. 414 00:20:02,200 --> 00:20:04,289 I'd like to talk to the boys now, if that's okay. 415 00:20:04,289 --> 00:20:06,378 The last thing they need is some stranger 416 00:20:06,378 --> 00:20:08,337 peppering them with questions. 417 00:20:08,337 --> 00:20:10,164 Their father just died. 418 00:20:10,164 --> 00:20:12,297 That is right, and I think they'd wanna help 419 00:20:12,297 --> 00:20:14,473 find out who killed him. 420 00:20:19,696 --> 00:20:23,917 Edvard, Mads, my name is Cameron. 421 00:20:23,917 --> 00:20:26,137 And I just wanted to say that I am very sorry 422 00:20:26,137 --> 00:20:27,530 about what happened to your dad. 423 00:20:27,530 --> 00:20:28,705 It is not fair. 424 00:20:33,362 --> 00:20:36,930 I can't imagine what you guys must be feeling. 425 00:20:39,281 --> 00:20:41,848 Is it okay if I ask you some questions? 426 00:20:44,111 --> 00:20:47,463 I heard your dad made a lot of new friends recently. 427 00:20:47,463 --> 00:20:49,856 Did you ever meet any of them? 428 00:20:49,856 --> 00:20:53,425 Nobody ever came to the house. 429 00:20:53,425 --> 00:20:55,906 That's not true. 430 00:20:55,906 --> 00:20:58,343 I saw Aksel this one time. 431 00:20:58,343 --> 00:21:00,127 He was visiting Brie. 432 00:21:00,127 --> 00:21:01,259 Who's Aksel? 433 00:21:01,259 --> 00:21:03,305 Brie's special friend. 434 00:21:06,525 --> 00:21:09,789 Security systems been messed with a handful of times. 435 00:21:09,789 --> 00:21:11,400 And whoever did it used the same technique 436 00:21:11,400 --> 00:21:12,966 as Carl's killer. 437 00:21:12,966 --> 00:21:14,533 Any clips of the secret boyfriend approaching 438 00:21:14,533 --> 00:21:15,926 the house from the driveway? - No. 439 00:21:15,926 --> 00:21:17,362 Aksel and Brie must have carefully 440 00:21:17,362 --> 00:21:19,016 planned his every visit. 441 00:21:19,016 --> 00:21:22,236 There's no way he parked on the property--too risky. 442 00:21:22,236 --> 00:21:23,977 How about the closest main street? 443 00:21:23,977 --> 00:21:25,109 A couple neighbors surrendered 444 00:21:25,109 --> 00:21:26,719 door cam footage to the DDIS. 445 00:21:26,719 --> 00:21:27,851 Crosscheck that against any instances 446 00:21:27,851 --> 00:21:29,853 when the cameras went down. - Mm-hmm. 447 00:21:29,853 --> 00:21:32,377 Fort Meade needed that visual on Aksel yesterday. 448 00:21:32,377 --> 00:21:33,378 What's our ETA? 449 00:21:33,378 --> 00:21:35,293 We're working on it. 450 00:21:35,293 --> 00:21:36,773 I'm sorry. 451 00:21:36,773 --> 00:21:38,165 Deputy director just chewed me out, 452 00:21:38,165 --> 00:21:39,906 said I should have flagged that Carl system's 453 00:21:39,906 --> 00:21:41,473 been compromised before. 454 00:21:41,473 --> 00:21:43,867 Amanda, got that visual for you. 455 00:21:46,260 --> 00:21:48,350 Same guy every time. 456 00:21:48,350 --> 00:21:49,612 It's gotta be Aksel. 457 00:21:49,612 --> 00:21:52,658 Thank you, Kyle. Send this to Cameron. 458 00:21:55,444 --> 00:21:57,402 Hey. 459 00:21:57,402 --> 00:21:58,621 How'd it go? 460 00:21:58,621 --> 00:22:01,363 Oh, not great, actually. 461 00:22:03,582 --> 00:22:06,324 Listen, has Forrester ever disappeared like this before? 462 00:22:06,324 --> 00:22:07,934 No. 463 00:22:07,934 --> 00:22:09,022 Alcohol problems? 464 00:22:09,022 --> 00:22:11,503 Is he promiscuous? - No. 465 00:22:11,503 --> 00:22:13,679 Scott wouldn't just up and leave 466 00:22:13,679 --> 00:22:15,420 without a damn good reason. 467 00:22:17,770 --> 00:22:19,642 I'm sorry, if any of us went MIA, 468 00:22:19,642 --> 00:22:22,122 he would do everything to find us. 469 00:22:22,122 --> 00:22:25,996 Yeah, well, he might be looking for you as a civilian, 470 00:22:25,996 --> 00:22:28,085 because career-wise, he's got one foot 471 00:22:28,085 --> 00:22:30,392 on the banana peel and the other on a roller skate. 472 00:22:31,915 --> 00:22:33,177 I should let Andre and Megan know. 473 00:22:33,177 --> 00:22:34,570 Don't. 474 00:22:34,570 --> 00:22:36,180 They need to stay on point. 475 00:22:42,795 --> 00:22:44,406 You recognize him? 476 00:22:44,406 --> 00:22:46,059 You lied to us. 477 00:22:46,059 --> 00:22:49,062 You've been messing with Carl's security system for months. 478 00:22:49,062 --> 00:22:51,195 I--I was afraid to say. 479 00:22:51,195 --> 00:22:53,066 Look, I knew how it would look. 480 00:22:54,416 --> 00:22:57,331 Lying to us about Aksel is a federal offense. 481 00:22:57,331 --> 00:22:59,638 Now, we're not required to press charges, 482 00:22:59,638 --> 00:23:02,032 but we will if you continue to cover up for him. 483 00:23:02,032 --> 00:23:04,077 No, there's nothing to cover up, okay? 484 00:23:04,077 --> 00:23:06,253 Carl was out every night bringing back god knows who 485 00:23:06,253 --> 00:23:08,212 from that club and damn near OD'ing 486 00:23:08,212 --> 00:23:10,040 while his kids were asleep down the hall. 487 00:23:10,040 --> 00:23:12,216 And he's got the nerve to tell me I can't have guests? 488 00:23:12,216 --> 00:23:14,131 So you disabled Carl's security system? 489 00:23:14,131 --> 00:23:16,394 - Yes. - Tell us about Aksel. 490 00:23:16,394 --> 00:23:18,701 He's 28, grew up here. 491 00:23:18,701 --> 00:23:20,224 He's a graphic designer. 492 00:23:20,224 --> 00:23:22,966 And in no way is he involved in any of this. 493 00:23:22,966 --> 00:23:24,750 Did he ever ask you to show him how 494 00:23:24,750 --> 00:23:26,143 to access the security system? 495 00:23:30,800 --> 00:23:33,193 Aksel's full name, where he lives, 496 00:23:33,193 --> 00:23:35,457 what kind of car he drives, everything. 497 00:23:43,813 --> 00:23:46,990 Aksel Blom, FBI, open up. 498 00:23:55,302 --> 00:23:57,957 Hey, FBI--hey! 499 00:24:18,717 --> 00:24:19,762 Hey! 500 00:24:43,612 --> 00:24:45,570 Are you good? 501 00:24:45,570 --> 00:24:46,745 Yeah. 502 00:24:46,745 --> 00:24:49,226 Aksel was gearing up to do a runner. 503 00:24:52,403 --> 00:24:54,144 Data might be hosed. 504 00:24:54,144 --> 00:24:56,320 Clothes in the wardrobe still had tags in, 505 00:24:56,320 --> 00:24:59,410 knives not a single nick. 506 00:24:59,410 --> 00:25:01,194 Aksel probably didn't even really live there. 507 00:25:01,194 --> 00:25:02,500 What about personal effects? 508 00:25:02,500 --> 00:25:07,026 Uh, just this on the fridge. 509 00:25:09,376 --> 00:25:11,248 The only reason this guy had an apartment 510 00:25:11,248 --> 00:25:14,251 was to sell to Brie that he had a life. 511 00:25:14,251 --> 00:25:16,296 If he was hooked up with the Army of Shadows, 512 00:25:16,296 --> 00:25:17,733 he could be a sock puppet. 513 00:25:17,733 --> 00:25:19,343 - A what? - Sock puppet. 514 00:25:19,343 --> 00:25:21,650 It's a term hackers use to describe a persona 515 00:25:21,650 --> 00:25:24,478 that only exists online. 516 00:25:24,478 --> 00:25:25,784 This was in the waste bin. 517 00:25:25,784 --> 00:25:27,481 Thanks, Freya. 518 00:25:27,481 --> 00:25:29,832 Okay, the motherboard is still in decent condition. 519 00:25:29,832 --> 00:25:32,356 Let's see what we can pull. 520 00:25:32,356 --> 00:25:33,749 Aksel's banking details 521 00:25:33,749 --> 00:25:35,664 tied to the apartment rental were made up. 522 00:25:35,664 --> 00:25:36,839 Claire spoke with the landlord, 523 00:25:36,839 --> 00:25:38,580 and Aksel always paid in cash. 524 00:25:38,580 --> 00:25:40,538 Whoever this guy was, his prints weren't on any 525 00:25:40,538 --> 00:25:42,496 of the DDIS or Europol systems. 526 00:25:42,496 --> 00:25:43,889 How about dental records? 527 00:25:43,889 --> 00:25:45,587 Faber is still trying to get a match for what 528 00:25:45,587 --> 00:25:46,849 was left of his jaw, but that could take 529 00:25:46,849 --> 00:25:48,633 a week, maybe longer. I'll check again. 530 00:25:48,633 --> 00:25:50,113 Do you think Aksel killed Carl? 531 00:25:50,113 --> 00:25:51,549 Brie saw the killer's face. 532 00:25:51,549 --> 00:25:53,072 She would have ID'ed him from the jump. 533 00:25:53,072 --> 00:25:54,900 Well, not if they were working together. 534 00:25:54,900 --> 00:25:56,859 No, she told us how to find him. 535 00:25:56,859 --> 00:25:58,338 I don't think she's involved. 536 00:25:58,338 --> 00:26:00,689 These hackers knew exactly how extensive Carl's 537 00:26:00,689 --> 00:26:02,821 security protocols would be, and they zeroed in 538 00:26:02,821 --> 00:26:05,128 on his one vulnerability, Brie. 539 00:26:05,128 --> 00:26:06,520 That was Russo. 540 00:26:06,520 --> 00:26:09,654 The DOD just got hit with a ransom demand, 500 mil. 541 00:26:09,654 --> 00:26:11,395 Have Grayson confirm the intel. 542 00:26:11,395 --> 00:26:13,571 Russo already did. Al Udeid Air Base. 543 00:26:13,571 --> 00:26:15,747 The hackers are threatening to leak a zero-day 544 00:26:15,747 --> 00:26:17,488 that'll shut down its AMDR receptors. 545 00:26:17,488 --> 00:26:19,751 Now, if that happens, all it'll take is one enemy 546 00:26:19,751 --> 00:26:22,014 deploying one precision strike missile, 547 00:26:22,014 --> 00:26:24,800 and 8,000 troops get pancaked in seconds. 548 00:26:24,800 --> 00:26:27,193 - How much time have we got? - One hour. 549 00:26:29,761 --> 00:26:30,762 One second. 550 00:26:32,634 --> 00:26:34,810 Your colleague here recovered Aksel Blom's phone. 551 00:26:34,810 --> 00:26:37,290 We have proof that he was paid to kill Lassen 552 00:26:37,290 --> 00:26:38,901 along with clear instructions to keep the au pair 553 00:26:38,901 --> 00:26:40,250 out of the equation. 554 00:26:40,250 --> 00:26:41,904 Your American is exonerated. 555 00:26:41,904 --> 00:26:43,557 She's free to go. 556 00:26:43,557 --> 00:26:45,037 You think something's off. 557 00:26:45,037 --> 00:26:46,909 All of Aksel's hard drives have been drilled through 558 00:26:46,909 --> 00:26:49,346 with the precision of a robot doing brain surgery. 559 00:26:49,346 --> 00:26:51,174 This phone is the only thing 560 00:26:51,174 --> 00:26:52,697 that wasn't blitzed beyond repair. 561 00:26:52,697 --> 00:26:54,438 Well, you caught him in the middle of his exit plans. 562 00:26:54,438 --> 00:26:56,222 It's possible he wasn't finished destroying the phone. 563 00:26:56,222 --> 00:26:58,137 So why'd he put it in the trash? 564 00:26:58,137 --> 00:27:00,270 Look, we're being led down a path here. 565 00:27:00,270 --> 00:27:02,272 Brie is a loose end. 566 00:27:02,272 --> 00:27:03,665 They want us to let her go so they can 567 00:27:03,665 --> 00:27:05,536 get rid of the only person who can ID the killer. 568 00:27:05,536 --> 00:27:07,625 Offer Miss Martindale any protection you like, 569 00:27:07,625 --> 00:27:10,976 but the DDIS has no reason to detain her any longer. 570 00:27:10,976 --> 00:27:12,630 Wait a second, Agent Faber. 571 00:27:14,850 --> 00:27:18,114 What if we give Carl's killer exactly what he wants? 572 00:27:26,644 --> 00:27:28,733 Look, we know you never meant for anything bad 573 00:27:28,733 --> 00:27:30,474 to happen to Carl. 574 00:27:30,474 --> 00:27:32,781 And the DDIS is ready to take you home. 575 00:27:32,781 --> 00:27:35,218 Okay. 576 00:27:35,218 --> 00:27:37,263 But we really need your help. 577 00:27:37,263 --> 00:27:38,743 Did you find Aksel? 578 00:27:40,527 --> 00:27:42,791 He didn't make it. 579 00:27:42,791 --> 00:27:45,837 What? 580 00:27:48,100 --> 00:27:50,189 W-what happened? 581 00:27:50,189 --> 00:27:51,756 It was an accident. 582 00:27:51,756 --> 00:27:53,453 But, Brie, you should know that Aksel 583 00:27:53,453 --> 00:27:56,282 wasn't who he said he was. 584 00:27:56,282 --> 00:27:58,763 Well, then who was he then? 585 00:27:58,763 --> 00:28:03,507 We don't know, and we may never find out. 586 00:28:03,507 --> 00:28:05,770 I am sorry, but you got played. 587 00:28:17,477 --> 00:28:21,438 Whatever you need, I'm in. 588 00:28:22,439 --> 00:28:24,528 Thank you. 589 00:28:26,095 --> 00:28:29,446 Well, I hope you have a safe flight home, Brie. 590 00:28:29,446 --> 00:28:31,404 On behalf of the DDIS, I'd like 591 00:28:31,404 --> 00:28:33,755 to apologize for any confusion regarding 592 00:28:33,755 --> 00:28:35,800 your American's involvement in Lassen's murder. 593 00:28:35,800 --> 00:28:38,890 Well, the FBI appreciates your cooperation. 594 00:28:38,890 --> 00:28:41,893 Take Miss Martindale to the Lufthavnens Plads Hotel. 595 00:28:48,595 --> 00:28:50,728 Your team's in position at the hotel? 596 00:28:50,728 --> 00:28:52,121 I've got a tactical team inside 597 00:28:52,121 --> 00:28:53,818 and snipers at the ready. 598 00:28:53,818 --> 00:28:55,864 She'll be safe. 599 00:28:59,345 --> 00:29:00,303 Ready? 600 00:29:00,303 --> 00:29:02,348 Yep. 601 00:29:44,608 --> 00:29:45,827 We've got company. 602 00:29:49,178 --> 00:29:50,396 Cam. They're not waiting. 603 00:29:50,396 --> 00:29:51,615 They're hitting us now. 604 00:31:08,779 --> 00:31:10,128 ID'ed the mercenary 605 00:31:10,128 --> 00:31:12,696 who attacked Smitty and Andre-- Afrim Kurti. 606 00:31:12,696 --> 00:31:14,132 Any connection to the Army of Shadows? 607 00:31:14,132 --> 00:31:16,004 As far as I can tell, he's a for-hire gunman 608 00:31:16,004 --> 00:31:17,309 on the dark web. 609 00:31:17,309 --> 00:31:18,920 Charges 100,000 euro a head. 610 00:31:18,920 --> 00:31:20,399 I found the crypto transaction between Kurti 611 00:31:20,399 --> 00:31:21,792 and whoever hired him. 612 00:31:21,792 --> 00:31:23,707 I got the account number, but that wallet never 613 00:31:23,707 --> 00:31:24,969 traded on the usual platforms. 614 00:31:24,969 --> 00:31:26,536 There's no way of tracking the owner. 615 00:31:26,536 --> 00:31:27,885 Pull up a blockchain explorer. 616 00:31:27,885 --> 00:31:29,539 Grab all the transactions for that account. 617 00:31:29,539 --> 00:31:32,977 Okay, one sec. 618 00:31:32,977 --> 00:31:34,152 Got it. 619 00:31:34,152 --> 00:31:35,675 Do a search for any duplicates. 620 00:31:35,675 --> 00:31:37,895 - That filter doesn't exist. - Scoot over. 621 00:31:37,895 --> 00:31:40,376 Repeat transactions are just ways to wash cash. 622 00:31:40,376 --> 00:31:43,379 So once we pull the IP info for whatever's left... 623 00:31:45,163 --> 00:31:46,295 The killer's local. 624 00:31:46,295 --> 00:31:48,036 Grab all the tenants at this address 625 00:31:48,036 --> 00:31:51,169 and crosscheck the list with Carl's emails and texts. 626 00:31:53,650 --> 00:31:54,738 SikkerTech Security. 627 00:31:54,738 --> 00:31:56,174 It's owned by Harald Bonnichsen. 628 00:31:56,174 --> 00:31:58,046 Andre and Smitty already met him at the Velvet Room. 629 00:31:58,046 --> 00:31:59,395 He emailed Carl asking him to invest. 630 00:31:59,395 --> 00:32:01,397 The deal fell through at the last minute. 631 00:32:01,397 --> 00:32:02,833 Send this to Cameron. 632 00:32:10,406 --> 00:32:11,798 Sorry to interrupt. 633 00:32:11,798 --> 00:32:12,756 You're probably gonna wanna hear this 634 00:32:12,756 --> 00:32:15,150 in private, Harald. 635 00:32:27,640 --> 00:32:30,774 You are under arrest for conspiracy to commit murder. 636 00:32:30,774 --> 00:32:32,036 What? 637 00:32:32,036 --> 00:32:33,298 You had Carl Lassen killed, 638 00:32:33,298 --> 00:32:35,561 and then you tried to silence the witness. 639 00:32:35,561 --> 00:32:37,607 Carl was a friend, a mentor. 640 00:32:37,607 --> 00:32:39,348 Sure. But you envied him. 641 00:32:39,348 --> 00:32:40,392 I mean, it makes sense. 642 00:32:40,392 --> 00:32:41,915 You both had the same skill set. 643 00:32:41,915 --> 00:32:44,440 I think maybe even yours were a little sharper, right? 644 00:32:44,440 --> 00:32:48,226 I mean, considering that you were once a black hat hacker. 645 00:32:48,226 --> 00:32:49,967 How did you come across that information? 646 00:32:49,967 --> 00:32:52,622 The DDIS unsealed your file. 647 00:32:52,622 --> 00:32:53,971 We know you weaseled your way 648 00:32:53,971 --> 00:32:56,147 into a consulting deal to get out of jail time. 649 00:32:56,147 --> 00:32:58,628 We traced your crypto payment to the hit men 650 00:32:58,628 --> 00:33:00,238 that you hired to kill Brie. 651 00:33:00,238 --> 00:33:02,414 The transaction's IP address just happened 652 00:33:02,414 --> 00:33:03,981 to match SikkerTech's. 653 00:33:03,981 --> 00:33:06,070 You really think I'd be so daft 654 00:33:06,070 --> 00:33:09,987 to pay a hit man out of my own office and not use a VPN? 655 00:33:09,987 --> 00:33:13,121 Dollar signs make people sloppy sometimes, 656 00:33:13,121 --> 00:33:15,775 even someone in the Army of Shadows. 657 00:33:17,690 --> 00:33:20,041 I'm being framed. 658 00:33:20,041 --> 00:33:22,347 The Army is selling you the story you wanna hear. 659 00:33:23,740 --> 00:33:25,176 Then tell us the truth. 660 00:33:26,438 --> 00:33:28,919 Carl thought money would make him happy. 661 00:33:28,919 --> 00:33:31,139 But instead, it made him obsolete. 662 00:33:31,139 --> 00:33:33,880 The man would show up at the Velvet Room 663 00:33:33,880 --> 00:33:35,621 drunk out of his mind, blabbering about 664 00:33:35,621 --> 00:33:39,147 his top secret security privileges. 665 00:33:39,147 --> 00:33:41,410 He was practically begging to be hacked. 666 00:33:43,325 --> 00:33:46,197 So I sold intel on Carl, 667 00:33:46,197 --> 00:33:48,939 who he was, what his habits were, 668 00:33:48,939 --> 00:33:50,854 how to get to the people that mattered to him 669 00:33:50,854 --> 00:33:53,726 to exploit his security privileges. 670 00:33:53,726 --> 00:33:55,902 But I did not kill him. 671 00:33:55,902 --> 00:33:58,514 So who did? 672 00:33:58,514 --> 00:34:02,126 Philip Baranza, a former member of UNC1151, 673 00:34:02,126 --> 00:34:04,650 a Belarusian state-sponsored hacker group. 674 00:34:04,650 --> 00:34:08,263 Harald is claiming that Baranza started the Army of Shadows. 675 00:34:08,263 --> 00:34:11,744 So Baranza activates one of his operatives, Aksel, 676 00:34:11,744 --> 00:34:13,877 to seduce Brie into giving him access 677 00:34:13,877 --> 00:34:15,226 to Carl's security system. 678 00:34:15,226 --> 00:34:17,402 Now, according to Harald, Baranza is operating 679 00:34:17,402 --> 00:34:19,448 out of a vacant building in Knippelsbro. 680 00:34:19,448 --> 00:34:20,884 What's our timeline? 681 00:34:20,884 --> 00:34:23,234 Baranza's ransomware to the DOD goes live in 15. 682 00:34:23,234 --> 00:34:24,801 So let's move. 683 00:34:33,244 --> 00:34:34,419 Pull the trigger if you need to, 684 00:34:34,419 --> 00:34:37,161 but remember, we need this guy alive. 685 00:35:05,233 --> 00:35:06,756 FBI! Hands where I can see them! 686 00:35:43,184 --> 00:35:46,012 I have something you want. 687 00:35:46,012 --> 00:35:47,797 Scott Forrester. 688 00:35:55,761 --> 00:35:57,154 Where are we at? 689 00:35:57,154 --> 00:35:58,503 We secured all of Baranza's devices. 690 00:35:58,503 --> 00:36:00,375 The data breach is 100% contained, 691 00:36:00,375 --> 00:36:03,247 and the ransomware request to the DOD has been shut down. 692 00:36:03,247 --> 00:36:05,249 I'd say we all earned our paycheck today, didn't we? 693 00:36:05,249 --> 00:36:07,643 Do I turned Baranza over to Russo? 694 00:36:11,255 --> 00:36:12,387 Not yet. 695 00:36:19,437 --> 00:36:20,743 That's him. 696 00:36:20,743 --> 00:36:23,136 I'll never forget those eyes, 697 00:36:23,136 --> 00:36:26,009 the way he stared back at me after he shot Carl. 698 00:36:28,054 --> 00:36:29,317 Thank you, Brie. 699 00:36:29,317 --> 00:36:31,014 The DDIS will take you straight to the airport. 700 00:36:31,014 --> 00:36:34,278 Your parents are waiting for you back in Baltimore. 701 00:36:34,278 --> 00:36:37,238 It seems you're one man short. 702 00:36:37,238 --> 00:36:41,546 I know where the Agent Forrester is 703 00:36:41,546 --> 00:36:45,246 along with his mother, Angela Cassidy. 704 00:36:45,246 --> 00:36:49,075 You can still save them, but you have to act now. 705 00:36:54,603 --> 00:36:56,300 Cameron, get resituated. 706 00:36:56,300 --> 00:36:58,302 I'll take care of this guy. 707 00:37:01,349 --> 00:37:02,698 Trust me. 708 00:37:14,449 --> 00:37:18,017 Well, you certainly got our attention, Mr. Baranza, 709 00:37:18,017 --> 00:37:20,498 I'm all ears. 710 00:37:20,498 --> 00:37:23,109 I can tell you where he's headed. 711 00:37:23,109 --> 00:37:25,721 There is an encrypted file on my laptop. 712 00:37:25,721 --> 00:37:27,462 Even the most skilled tech 713 00:37:27,462 --> 00:37:30,160 will take roughly ten hours to decrypt it. 714 00:37:30,160 --> 00:37:33,859 That file will self-destruct, and I am the only person 715 00:37:33,859 --> 00:37:37,167 with the decryption keys, which I will gladly hand over, 716 00:37:37,167 --> 00:37:39,604 but I want full immunity. 717 00:37:42,955 --> 00:37:45,523 You've got five minutes. 718 00:37:57,274 --> 00:37:59,363 How much time do we have? 719 00:37:59,363 --> 00:38:01,670 Three minutes. 720 00:38:01,670 --> 00:38:05,413 Okay, we're looking at three layers of solid 256 encryption. 721 00:38:05,413 --> 00:38:07,240 I want every single station cycling through at least 722 00:38:07,240 --> 00:38:09,852 a hundred keys a second. 723 00:38:09,852 --> 00:38:12,507 I feel like I haven't been perfectly clear as to where 724 00:38:12,507 --> 00:38:13,856 exactly it is you're headed. 725 00:38:13,856 --> 00:38:18,382 So allow me to paint the picture. 726 00:38:18,382 --> 00:38:21,385 No visitors. None. 727 00:38:21,385 --> 00:38:25,302 23 hours a day in solitary. 728 00:38:27,478 --> 00:38:31,177 Being alone doesn't scare me, 729 00:38:31,177 --> 00:38:33,397 but time-- 730 00:38:33,397 --> 00:38:35,399 time is invaluable. 731 00:38:37,880 --> 00:38:40,491 Got a match for the first layer. 732 00:38:40,491 --> 00:38:42,101 Second one just cleared. 733 00:38:42,101 --> 00:38:43,407 Kyle, how close are we? 734 00:38:43,407 --> 00:38:44,756 Almost there. 735 00:38:48,717 --> 00:38:50,849 Uncuff me. 736 00:38:50,849 --> 00:38:52,808 Leave the door unlocked. 737 00:38:54,287 --> 00:38:56,899 Nobody has to know how I got out. 738 00:38:56,899 --> 00:39:00,859 But you should do it now 739 00:39:00,859 --> 00:39:04,254 because that file will self-destruct 740 00:39:04,254 --> 00:39:06,256 in one minute, 741 00:39:06,256 --> 00:39:10,216 along with Angela Cassidy's location. 742 00:39:10,216 --> 00:39:14,264 Come on, come on, come on, come on, come on, come on. 743 00:39:14,264 --> 00:39:16,962 What happened? Where's the file? 744 00:39:21,140 --> 00:39:22,925 Does anybody have a copy? 745 00:39:22,925 --> 00:39:25,754 It looks like all instances self-deleted. 746 00:39:25,754 --> 00:39:27,146 It's gotta be here somewhere. 747 00:39:40,290 --> 00:39:42,945 Where are we at with the file? 748 00:39:42,945 --> 00:39:45,034 It's gone. 749 00:39:45,034 --> 00:39:46,165 I'm sorry, Cam. 750 00:39:46,165 --> 00:39:48,472 We tried every trick. 751 00:39:57,568 --> 00:40:00,484 I need to bring you both in on something. 752 00:40:07,143 --> 00:40:08,492 It's regarding Scott. 753 00:40:17,893 --> 00:40:20,243 I know Baranza intercepted those prison documents 754 00:40:20,243 --> 00:40:23,812 in the data breach, and I know the NSA has access to them. 755 00:40:23,812 --> 00:40:25,683 I need you to tell me where Angela Cassidy is being held. 756 00:40:25,683 --> 00:40:26,815 Look, working for the NSA is like being 757 00:40:26,815 --> 00:40:30,514 a tiny piece of a giant Jigsaw puzzle. 758 00:40:30,514 --> 00:40:35,171 You have no idea what the larger picture is, just-- 759 00:40:35,171 --> 00:40:36,651 you have a specific role. 760 00:40:36,651 --> 00:40:39,044 The company's loyalty can turn on a dime. 761 00:40:39,044 --> 00:40:40,829 One minute, they're protecting you. 762 00:40:40,829 --> 00:40:42,091 The next, they're scrubbing you from their files 763 00:40:42,091 --> 00:40:44,528 like they did to Cassidy. 764 00:40:44,528 --> 00:40:45,877 It's not my orders. 765 00:40:52,318 --> 00:40:55,017 The secret booze drawer-- that's been restocked, yes? 766 00:40:55,017 --> 00:40:57,280 Sure has. 767 00:40:57,280 --> 00:40:59,935 Great working with you all. 768 00:40:59,935 --> 00:41:02,677 Amanda. 769 00:41:02,677 --> 00:41:04,069 It's been a pleasure. 770 00:41:15,603 --> 00:41:17,561 We can explore backchannels, 771 00:41:17,561 --> 00:41:19,128 try to get ahold of the original document. 772 00:41:19,128 --> 00:41:21,043 No, if Russia gets wind that we are asking around, 773 00:41:21,043 --> 00:41:22,871 they will make sure that Cassidy 774 00:41:22,871 --> 00:41:25,047 is never seen again, for good, and Scott along with her. 775 00:41:25,047 --> 00:41:27,310 I just got off a call with my friend in Operational Tech. 776 00:41:27,310 --> 00:41:29,878 I had him comb through Forrester's phone remotely. 777 00:41:29,878 --> 00:41:32,054 The encrypted message that Scott received 778 00:41:32,054 --> 00:41:34,622 regarding Vanessa Kincaide, he opened it, accessed it. 779 00:41:34,622 --> 00:41:35,884 He's gonna find his mom. 780 00:41:35,884 --> 00:41:37,494 The Kremlin's got over 100 penitentiaries, 781 00:41:37,494 --> 00:41:39,322 and those are just the ones we know about. 782 00:41:39,322 --> 00:41:41,063 Where do we even start? 783 00:41:42,412 --> 00:41:44,022 Tate, I got an update. 784 00:41:44,022 --> 00:41:46,111 Grayson gave me two pieces of information, 785 00:41:46,111 --> 00:41:48,461 Dagny Andersen and Oslo. 786 00:41:50,115 --> 00:41:52,422 The Norwegian Minister of Foreign Affairs? 787 00:41:52,422 --> 00:41:53,902 How's she involved in this? 788 00:41:53,902 --> 00:41:56,731 Andersen has been trying to secure the release 789 00:41:56,731 --> 00:41:59,516 of two Norwegian journalists who were imprisoned 790 00:41:59,516 --> 00:42:02,606 six months ago by the Kremlin. 791 00:42:08,438 --> 00:42:10,614 We're at your mercy right now, Brian. 792 00:42:10,614 --> 00:42:12,703 So you can either help us find Scott and his mom 793 00:42:12,703 --> 00:42:15,053 or you can deep-six this whole thing.