1 00:00:00,820 --> 00:00:01,820 My name is Avery Ryan. 2 00:00:01,850 --> 00:00:03,350 I was a victim of cyber crime. 3 00:00:03,390 --> 00:00:06,090 Like you, I posted on social media, 4 00:00:06,120 --> 00:00:08,660 checked my bank account balance online, 5 00:00:08,690 --> 00:00:10,730 even kept the confidential files 6 00:00:10,760 --> 00:00:13,130 of my psychological practice on my computer. 7 00:00:14,760 --> 00:00:17,670 Then I was hacked, and as a result, 8 00:00:17,700 --> 00:00:20,200 one of my patients was murdered. 9 00:00:20,240 --> 00:00:23,770 My investigation into her death led me to the FBI, 10 00:00:23,810 --> 00:00:26,610 where I joined a team of cyber experts 11 00:00:26,640 --> 00:00:29,510 to wage a war against a new breed of criminal 12 00:00:29,550 --> 00:00:32,520 hiding on the Deep Web... 13 00:00:32,550 --> 00:00:35,580 infiltrating our daily lives in ways we never imagined... 14 00:00:37,350 --> 00:00:39,320 ...faceless... 15 00:00:39,360 --> 00:00:41,490 nameless... 16 00:00:41,530 --> 00:00:43,340 lurking inside our devices, 17 00:00:43,360 --> 00:00:45,690 just a keystroke away. 18 00:00:52,340 --> 00:00:54,240 * 19 00:01:21,900 --> 00:01:22,870 Mr. Nelson, 20 00:01:22,900 --> 00:01:24,870 you're late. 21 00:01:24,900 --> 00:01:26,540 (sighs) I'm sorry, Avery. 22 00:01:26,570 --> 00:01:28,140 It's just that getting up early 23 00:01:28,170 --> 00:01:29,610 is something my body's not used to. 24 00:01:31,180 --> 00:01:32,390 Okay, I feel you. 25 00:01:32,410 --> 00:01:33,810 All right, I'll have a talk with my body, 26 00:01:33,840 --> 00:01:35,240 and we'll be here on time. 27 00:01:35,280 --> 00:01:36,280 What you doing? 28 00:01:36,310 --> 00:01:38,410 Oh, rescuing a spider. 29 00:01:38,450 --> 00:01:41,250 Oh. Um... (laughs) 30 00:01:41,290 --> 00:01:43,830 Yeah, do not come near me. Look. Look, I'm-I'm serious. (groans) 31 00:01:43,850 --> 00:01:45,220 Brody Nelson, don't tell me you're afraid 32 00:01:45,260 --> 00:01:47,270 of a little spider? A little spider? 33 00:01:47,290 --> 00:01:48,890 Avery, look at the size of that thing. That's not... 34 00:01:48,930 --> 00:01:49,740 Uh-oh. Where...? (stammering) 35 00:01:49,760 --> 00:01:51,460 Why are you looking on the ground? 36 00:01:51,500 --> 00:01:53,810 I dropped it. You dropped it. 37 00:01:53,830 --> 00:01:54,800 Avery... 38 00:01:54,830 --> 00:01:56,270 Your bag... Well... 39 00:01:56,300 --> 00:01:57,800 Aah! (laughing) 40 00:01:57,830 --> 00:01:59,370 (shouting) 41 00:01:59,400 --> 00:02:01,300 Well, spiders don't like it when you're late. 42 00:02:01,340 --> 00:02:03,270 SIFTER: So your plane's on the tarmac 43 00:02:03,310 --> 00:02:04,940 at National, and you're scheduled to leave 44 00:02:04,970 --> 00:02:07,210 in an hour for New York City. 45 00:02:07,240 --> 00:02:09,180 The Kirkendahl Hotel believes 46 00:02:09,210 --> 00:02:11,810 that their computer network has been hacked. 47 00:02:11,850 --> 00:02:13,250 That connects every location worldwide. 48 00:02:13,280 --> 00:02:14,680 This is the Kirkendahl file. What do we got? 49 00:02:14,720 --> 00:02:16,450 Three days ago, 50 00:02:16,490 --> 00:02:19,320 the hotel's computer intrusion detection system 51 00:02:19,360 --> 00:02:22,190 went off, sent an alert from their East Side property. 52 00:02:22,230 --> 00:02:24,430 And they had their I.T. team take a look at it? 53 00:02:24,460 --> 00:02:26,430 It appeared to be a glitch, happens all the time. 54 00:02:26,460 --> 00:02:28,430 They reset the system, it happened again. 55 00:02:28,470 --> 00:02:30,610 There's evidence of a remote cyber intrusion. 56 00:02:30,630 --> 00:02:33,270 Kirkendahl's Wi-Fi has been compromised. 57 00:02:33,300 --> 00:02:35,370 That means the hackers could have access to 58 00:02:35,410 --> 00:02:36,450 the corporate computers 59 00:02:36,470 --> 00:02:38,440 and the guests' personal devices. 60 00:02:38,480 --> 00:02:40,390 And they probably discovered a vulnerable protocol, 61 00:02:40,410 --> 00:02:42,350 used a root kit to gain access. 62 00:02:42,380 --> 00:02:43,850 Nah, that's doing it the hard way. 63 00:02:43,880 --> 00:02:46,420 There's a known exploit in the authentication credential. 64 00:02:46,450 --> 00:02:48,320 You should know that, right? Of course I know that. 65 00:02:48,350 --> 00:02:49,420 Okay, well... Why wouldn't I know that? 66 00:02:49,450 --> 00:02:51,620 Guys? Guys? You spilled water on your keyboard. 67 00:02:51,660 --> 00:02:52,900 Then I saw a spider. 68 00:02:52,920 --> 00:02:53,920 It's not like I did it on purpose. 69 00:02:53,960 --> 00:02:55,720 Whatever. Let's just reign in 70 00:02:55,760 --> 00:02:57,230 our intellect here. 71 00:02:57,260 --> 00:02:59,600 That hotel is right next to the U.N. 72 00:02:59,630 --> 00:03:01,300 A lot of high-profile people stay there. 73 00:03:01,330 --> 00:03:02,700 Diplomats, dignitaries, celebrities. 74 00:03:02,730 --> 00:03:05,230 Yeah, and the U.N. is back in session in two days. 75 00:03:05,270 --> 00:03:06,800 We could be looking at a dark hotel scenario here. 76 00:03:06,840 --> 00:03:08,940 Hackers targeting the guests. Yeah, or an attack 77 00:03:08,970 --> 00:03:10,370 against the Kirkendahl Corporation itself. 78 00:03:10,410 --> 00:03:12,640 Either way, documents could be released. 79 00:03:12,680 --> 00:03:15,440 E-mails, texts, sensitive information 80 00:03:15,480 --> 00:03:17,850 that could embarrass or expose some very important people. 81 00:03:17,880 --> 00:03:19,380 Well, I've got a meeting coming up 82 00:03:19,420 --> 00:03:20,580 with the FBI Director. 83 00:03:20,620 --> 00:03:22,390 I'll tell him my team is on it, 84 00:03:22,420 --> 00:03:24,550 and that none of that will happen. 85 00:03:24,590 --> 00:03:26,560 Enjoy your flight. 86 00:03:42,040 --> 00:03:43,710 WOMAN: At the suggestion of our in-house 87 00:03:43,740 --> 00:03:46,440 technical support team, we shut down the Wi-Fi. 88 00:03:46,480 --> 00:03:49,280 Has any employee or guest reported any strange e-mails, 89 00:03:49,310 --> 00:03:50,250 or any evidence 90 00:03:50,280 --> 00:03:51,510 of their individual devices being hacked? 91 00:03:51,550 --> 00:03:52,380 No. 92 00:03:52,420 --> 00:03:54,520 What about pop-up alerts instructing them 93 00:03:54,550 --> 00:03:56,920 to update a file or a program? 94 00:03:56,950 --> 00:03:58,520 I don't know. Those pop-ups appear all the time, 95 00:03:58,560 --> 00:04:00,470 even on my home computer. 96 00:04:00,490 --> 00:04:02,460 Well, it's one of the ways that devices are hacked. 97 00:04:02,490 --> 00:04:04,530 A free download or product upgrade 98 00:04:04,560 --> 00:04:05,960 that looks like it's authentic. 99 00:04:06,000 --> 00:04:08,740 But instead of it being the actual product, 100 00:04:08,770 --> 00:04:11,540 it's the delivery of malware-- malicious software. 101 00:04:11,570 --> 00:04:12,770 MUNDO: And once someone opens it, 102 00:04:12,800 --> 00:04:15,370 the code gets released into the computer like a virus, 103 00:04:15,410 --> 00:04:16,820 and the hacker takes over. 104 00:04:16,840 --> 00:04:18,810 It's like the hacker's lurking inside the device. 105 00:04:18,840 --> 00:04:20,910 When a guest logs on to your Wi-Fi, the hacker is able 106 00:04:20,940 --> 00:04:23,750 to see their room number, the last name on their account, 107 00:04:23,780 --> 00:04:25,010 even get their passwords. 108 00:04:25,050 --> 00:04:26,680 But-but we-we shut down the Wi-Fi, 109 00:04:26,720 --> 00:04:28,550 so that should protect us, right? 110 00:04:28,590 --> 00:04:29,360 MUNDO: Depends. 111 00:04:29,390 --> 00:04:30,290 I mean, 112 00:04:30,320 --> 00:04:32,460 some malware is programmed to lay in wait 113 00:04:32,490 --> 00:04:34,420 for six hours, six days, six months or more. 114 00:04:34,460 --> 00:04:37,360 Should-should we be copying and deleting documents? 115 00:04:37,390 --> 00:04:39,060 No. Despite the definition of the word "delete," 116 00:04:39,100 --> 00:04:41,510 in the cyber world, almost anything can be recovered. 117 00:04:41,530 --> 00:04:46,500 Agent Ryan, as in-house counsel for the Kirkendahl Corporation, 118 00:04:46,540 --> 00:04:49,440 I can't stress enough the importance of privacy here. 119 00:04:49,470 --> 00:04:50,910 It is something that we guarantee 120 00:04:50,940 --> 00:04:53,540 to our board members, our employees and our guests. 121 00:04:53,580 --> 00:04:55,510 There must be something that we can do. 122 00:04:55,550 --> 00:04:58,360 Many of our guests use aliases when checking in, 123 00:04:58,380 --> 00:05:01,120 but their real names and home addresses are in our files. 124 00:05:01,150 --> 00:05:04,550 Some engage in activity that we keep very confidential, 125 00:05:04,590 --> 00:05:06,890 and I'm talking about more than just ordering an adult movie. 126 00:05:06,920 --> 00:05:08,660 We-we send e-mails and texts 127 00:05:08,690 --> 00:05:11,390 containing confidential company information-- 128 00:05:11,430 --> 00:05:12,560 bonuses, salaries, 129 00:05:12,600 --> 00:05:13,830 mergers. 130 00:05:13,860 --> 00:05:15,830 Activity that will have serious repercussions 131 00:05:15,870 --> 00:05:17,880 if those communications became public. 132 00:05:17,900 --> 00:05:20,570 (phone ringing) Pardon me. 133 00:05:20,600 --> 00:05:22,770 Yes. 134 00:05:22,810 --> 00:05:24,770 Say that again. 135 00:05:24,810 --> 00:05:26,710 (sighs) 136 00:05:26,740 --> 00:05:27,880 All right. 137 00:05:27,910 --> 00:05:29,650 Our hotel 138 00:05:29,680 --> 00:05:30,980 security footage has been wiped. 139 00:05:31,010 --> 00:05:35,750 Lobby... entrances... guest room corridors. 140 00:05:35,790 --> 00:05:38,460 Everything recorded in the past week. 141 00:05:38,490 --> 00:05:39,890 Was the system connected to the Wi-Fi? 142 00:05:39,920 --> 00:05:41,890 Yes. 143 00:05:43,760 --> 00:05:45,790 RYAN: If your surveillance footage was wiped, 144 00:05:45,830 --> 00:05:47,900 I don't think our hacker is interested 145 00:05:47,930 --> 00:05:49,500 in these confidential files 146 00:05:49,530 --> 00:05:50,730 that you're worried about, Counselor. 147 00:05:50,770 --> 00:05:52,940 Something else is going on here. 148 00:05:52,970 --> 00:05:55,470 Something happened here at your hotel, 149 00:05:55,510 --> 00:05:57,950 and someone is trying to cover it up. 150 00:05:57,970 --> 00:05:59,940 (rock music playing loudly) MAN: Ms. Foster? 151 00:06:02,050 --> 00:06:04,620 This is the hotel manager. 152 00:06:04,650 --> 00:06:07,750 Ms. Foster, your music is disturbing other guests! 153 00:06:20,630 --> 00:06:21,660 (music stops) 154 00:06:32,680 --> 00:06:34,810 Ms. Foster? 155 00:06:34,840 --> 00:06:36,880 Oh, geez. 156 00:06:39,650 --> 00:06:41,650 Security. Call 911. 157 00:06:46,520 --> 00:06:49,730 (camera clicking) 158 00:06:52,600 --> 00:06:54,700 (indistinct police radio chatter) 159 00:06:59,100 --> 00:07:01,870 (whimpering) 160 00:07:03,810 --> 00:07:05,870 (camera clicking) 161 00:07:32,700 --> 00:07:34,700 MUNDO: The victim is Adel Foster, 162 00:07:34,740 --> 00:07:35,770 24 years old. 163 00:07:35,810 --> 00:07:38,250 She checked into this room five days ago alone. 164 00:07:38,270 --> 00:07:40,710 Driver's license lists her address as 165 00:07:40,740 --> 00:07:41,910 East Rutherford, New Jersey. 166 00:07:41,950 --> 00:07:44,560 NYPD are reaching out to New Jersey Police and her family. 167 00:07:44,580 --> 00:07:45,710 Room's disorganized. 168 00:07:45,750 --> 00:07:47,850 Bruises on her wrists. 169 00:07:47,880 --> 00:07:49,920 Indicates... a struggle. 170 00:07:49,950 --> 00:07:51,990 Most likely, a crime of passion. 171 00:07:52,020 --> 00:07:53,520 Detectives canvassed the hotel guests. 172 00:07:53,560 --> 00:07:55,190 Nobody heard or saw anything. 173 00:07:55,220 --> 00:07:56,320 Crime scene lifted a few prints. 174 00:07:56,360 --> 00:07:58,660 Most belonged to the victim, the rest to housekeeping. 175 00:07:58,700 --> 00:07:59,940 However, 176 00:07:59,960 --> 00:08:01,830 I did find this in the plumbing. 177 00:08:01,870 --> 00:08:03,740 The victim's cell phone. 178 00:08:07,840 --> 00:08:11,510 The target tried to destroy it and then flush it. 179 00:08:17,880 --> 00:08:22,750 RYAN: Well, the water likely corroded the connectors. 180 00:08:22,790 --> 00:08:26,660 Data recovery is gonna be tough. 181 00:08:26,690 --> 00:08:28,160 The hotel invoice. 182 00:08:28,190 --> 00:08:30,130 Looks like around 3:00 this morning, 183 00:08:30,160 --> 00:08:32,060 she ordered a late-night snack and a movie. 184 00:08:32,100 --> 00:08:33,710 Behavior of an insomniac. 185 00:08:33,730 --> 00:08:37,330 Food for one. That indicates she was alone. 186 00:08:37,370 --> 00:08:39,970 MUNDO: Wait a minute. This is strange. 187 00:08:40,000 --> 00:08:42,640 What? The medical examiner just established 188 00:08:42,670 --> 00:08:44,170 approximate time of death. 189 00:08:44,210 --> 00:08:45,670 Three nights ago. 190 00:08:45,710 --> 00:08:47,140 What? 191 00:08:47,180 --> 00:08:48,840 It's a hotel. How does housekeeping not find the body? 192 00:08:48,880 --> 00:08:50,650 Stranger than that, 193 00:08:50,680 --> 00:08:52,820 according to the room invoice, 194 00:08:52,850 --> 00:08:56,250 yesterday and the day before, she ordered laundry, 195 00:08:56,290 --> 00:08:57,830 room and spa services, 196 00:08:57,850 --> 00:08:58,950 and a movie. 197 00:08:58,990 --> 00:09:01,320 And this morning, breakfast. 198 00:09:01,360 --> 00:09:04,230 Well, it looks like Adel Foster was alive 199 00:09:04,260 --> 00:09:06,800 for three days after she died. 200 00:09:10,130 --> 00:09:16,270 * I know you've deceived me, now here's a surprise * 201 00:09:18,210 --> 00:09:23,950 * I know that you have, 'cause there's magic in my eyes * 202 00:09:23,980 --> 00:09:28,120 * I can see for miles and miles * 203 00:09:28,150 --> 00:09:31,650 * I can see for miles and miles * 204 00:09:31,690 --> 00:09:35,990 * I can see for miles and miles * 205 00:09:36,030 --> 00:09:39,710 * And miles... 206 00:09:39,730 --> 00:09:41,830 * Oh, yeah. 207 00:09:52,880 --> 00:09:53,340 SIFTER: Okay, Raven, 208 00:09:53,380 --> 00:09:54,780 what have you got? 209 00:09:54,810 --> 00:09:56,750 Data from the Kirkendahl Hotel's computer system. 210 00:09:56,780 --> 00:09:57,910 This is a blueprint layout 211 00:09:57,950 --> 00:09:59,080 of a standard room. 212 00:09:59,120 --> 00:10:00,430 We can see the computer controls 213 00:10:00,450 --> 00:10:02,850 and monitors pretty much everything that happens. 214 00:10:02,890 --> 00:10:04,820 All run by one central software package 215 00:10:04,850 --> 00:10:06,050 called the "digital butler." 216 00:10:06,090 --> 00:10:07,960 And this explains why nobody in that hotel 217 00:10:07,990 --> 00:10:09,860 found Adel Foster's body for three days? 218 00:10:09,890 --> 00:10:11,060 We believe so. 219 00:10:11,090 --> 00:10:13,660 We detected malware on the hotel server. 220 00:10:13,700 --> 00:10:15,360 It was sent to every employee 221 00:10:15,400 --> 00:10:16,900 hidden inside a party invitation. 222 00:10:16,930 --> 00:10:18,930 So that's how it breached the firewall. 223 00:10:18,970 --> 00:10:21,940 Ah. And Troy fell. 224 00:10:21,970 --> 00:10:23,810 Yeah, it was the Trojans themselves 225 00:10:23,840 --> 00:10:25,170 that opened up their own city gates 226 00:10:25,210 --> 00:10:27,010 and pulled the wooden horse inside. 227 00:10:27,040 --> 00:10:28,880 Just like the hotel employees 228 00:10:28,910 --> 00:10:30,880 who opened the party invitation and let in the malware. 229 00:10:30,910 --> 00:10:32,920 While they blindly celebrated victory, 230 00:10:32,950 --> 00:10:35,020 their enemy lay in wait. 231 00:10:35,050 --> 00:10:36,420 And Troy fell. 232 00:10:39,990 --> 00:10:41,460 KRUMITZ: Our hacker had 233 00:10:41,490 --> 00:10:43,990 access to the hotel's main computer. 234 00:10:44,030 --> 00:10:45,390 They found their way to Adel's guest room records 235 00:10:45,430 --> 00:10:47,160 and made it look like she was alive and well 236 00:10:47,200 --> 00:10:49,430 even though Adel Foster was definitely dead. 237 00:10:49,470 --> 00:10:51,140 Well, that would explain the manicure, 238 00:10:51,170 --> 00:10:53,440 the facial, ordering the movie, 239 00:10:53,470 --> 00:10:55,700 even room service, but what about housekeeping? 240 00:10:55,740 --> 00:10:57,110 No one ever entered the room. 241 00:10:57,140 --> 00:10:58,310 Because the "do not disturb" sign 242 00:10:58,340 --> 00:11:00,810 is also controlled by the computer system. 243 00:11:00,840 --> 00:11:03,950 RAMIREZ: Exactly. Maids won't enter when the light is on. 244 00:11:03,980 --> 00:11:06,410 Hotels connect physical devices and sensors 245 00:11:06,450 --> 00:11:08,880 in the hotel rooms to one central computer 246 00:11:08,920 --> 00:11:10,950 to improve efficiency and cut down cost-- 247 00:11:10,990 --> 00:11:13,090 controlling thermostats and water temperature, 248 00:11:13,120 --> 00:11:15,160 providing you with the ease of ordering services 249 00:11:15,190 --> 00:11:17,860 from the hotel channel on your television. 250 00:11:17,890 --> 00:11:20,060 From one computer, they can control everything. 251 00:11:20,100 --> 00:11:21,900 Right. It's why they sometimes charge you 252 00:11:21,930 --> 00:11:24,030 for the items in the minibar just because 253 00:11:24,070 --> 00:11:26,900 you move them. 254 00:11:26,940 --> 00:11:28,900 Now, the pressure sensor on the shelves 255 00:11:28,940 --> 00:11:29,940 sends a message to the computer telling 256 00:11:29,970 --> 00:11:33,410 its product has been consumed. 257 00:11:33,440 --> 00:11:36,210 But as we all know, computers can be hacked. 258 00:11:36,250 --> 00:11:38,360 I actually met the hat who wrote the code. 259 00:11:38,380 --> 00:11:41,280 Called it a hospitality hack. 260 00:11:41,320 --> 00:11:43,390 All right, now, once a hacker intrudes 261 00:11:43,420 --> 00:11:45,350 the hotel computer system, he has control 262 00:11:45,390 --> 00:11:47,790 over room assignments, check in, check out, 263 00:11:47,820 --> 00:11:49,960 television, 264 00:11:49,990 --> 00:11:52,060 thermostat... 265 00:11:52,100 --> 00:11:54,410 Oh, my favorite: the remote control curtains. 266 00:11:54,430 --> 00:11:56,130 Check this out. 267 00:11:57,930 --> 00:11:59,500 Wait... 268 00:11:59,540 --> 00:12:02,110 Nelson, are you really doing that? 269 00:12:02,140 --> 00:12:05,170 Did you actually hack this hotel from CTOC? 270 00:12:05,210 --> 00:12:06,910 Yeah, that was me. 271 00:12:06,940 --> 00:12:09,510 The point is if all the conveniences are connected 272 00:12:09,550 --> 00:12:11,790 through software to one central computer, 273 00:12:11,820 --> 00:12:13,890 once the hacker's inside the system, 274 00:12:13,920 --> 00:12:15,450 he can create orders for room service, 275 00:12:15,480 --> 00:12:17,220 housekeeping, laundry pickup... 276 00:12:17,250 --> 00:12:18,890 RAMIREZ: And none of it really happened. 277 00:12:18,920 --> 00:12:20,190 It just looks like it did. 278 00:12:20,220 --> 00:12:22,930 MUNDO: And all activity is recorded under the guest's name 279 00:12:22,960 --> 00:12:24,160 and room number. 280 00:12:24,190 --> 00:12:25,890 Which explains why a dead woman 281 00:12:25,930 --> 00:12:27,460 can order room service and a movie. 282 00:12:27,500 --> 00:12:29,300 RYAN: So as far as the hotel knew, 283 00:12:29,330 --> 00:12:31,130 the minibar was being restocked, 284 00:12:31,170 --> 00:12:32,840 the laundry was being picked up, 285 00:12:32,870 --> 00:12:35,370 the maids were performing turndown services. 286 00:12:35,400 --> 00:12:38,270 A hacker can control any guest's room 24/7. 287 00:12:39,580 --> 00:12:42,320 This is a very sophisticated cover-up of a murder. 288 00:12:42,350 --> 00:12:45,090 We need to know more about our victim, Adel Foster. 289 00:12:45,110 --> 00:12:47,380 Her devices are on their way to you now, Krumitz. 290 00:12:47,420 --> 00:12:49,420 We need to find this hospitality hacker. 291 00:12:49,450 --> 00:12:51,450 You can't break into a system this complex 292 00:12:51,490 --> 00:12:53,360 without leaving some digital dust behind. 293 00:12:53,390 --> 00:12:56,090 We're on it. 294 00:12:56,130 --> 00:12:57,840 All right, so we got our victim's laptop, 295 00:12:57,860 --> 00:12:59,900 tablet and destroyed cell. 296 00:12:59,930 --> 00:13:01,530 Our killer has a three-day head start. 297 00:13:01,560 --> 00:13:03,330 Puts him right where we want him. 298 00:13:03,370 --> 00:13:05,830 (chuckles) He thinks he got away with murder. 299 00:13:05,870 --> 00:13:07,140 Which means he already made a mistake 300 00:13:07,170 --> 00:13:09,040 that will lead us right to him. 301 00:13:09,070 --> 00:13:11,310 We are gonna find Adel Foster's murderer. 302 00:13:15,540 --> 00:13:17,510 NELSON: You know, I really could have 303 00:13:17,550 --> 00:13:19,280 used these things two years ago. 304 00:13:19,320 --> 00:13:21,430 But you know every time Apple introduces a new device, 305 00:13:21,450 --> 00:13:23,090 there's a new cord, a new connector, 306 00:13:23,120 --> 00:13:24,990 and then all the old stuff is not compatible with 307 00:13:25,020 --> 00:13:27,260 the new stuff, so then you... you know, you got to go back, 308 00:13:27,290 --> 00:13:29,260 buy all the new Apple products, connect them and... 309 00:13:29,290 --> 00:13:30,990 Dude, dude, really? 310 00:13:31,030 --> 00:13:32,090 We're trying to work here. 311 00:13:32,130 --> 00:13:33,630 Okay, well, then give me something to do. 312 00:13:33,660 --> 00:13:37,000 Here. Lay out all the pieces of this cell phone. 313 00:13:37,030 --> 00:13:38,230 Disassemble it, remove the circuit board, 314 00:13:38,270 --> 00:13:40,170 then scrub the resistor jumper connections. 315 00:13:40,200 --> 00:13:42,140 There's a toothbrush and alcohol solution 316 00:13:42,170 --> 00:13:44,170 right over there. Oh, okay. 317 00:13:44,210 --> 00:13:46,040 I see how you do. 318 00:13:46,080 --> 00:13:48,390 New guy gets the poop phone. What? 319 00:13:48,410 --> 00:13:50,450 I happen to know that this was the phone that was recovered 320 00:13:50,480 --> 00:13:52,080 from the toilet in the hotel room. 321 00:13:52,120 --> 00:13:53,990 He's right. 322 00:13:54,020 --> 00:13:55,350 That is the poop phone. 323 00:13:55,380 --> 00:13:57,220 Really? You're gonna encourage this? 324 00:13:57,250 --> 00:13:59,220 And you're not even that new anymore. 325 00:13:59,260 --> 00:14:00,330 Okay, you know what, Nelson? 326 00:14:00,360 --> 00:14:02,930 Fine. I will gladly take the poop phone 327 00:14:02,960 --> 00:14:05,090 if you just do me one favor and stop talking. 328 00:14:05,130 --> 00:14:06,590 Guys. Okay, what, you in a bad mood or something, Krummy? 329 00:14:06,630 --> 00:14:08,100 You want to talk about it? 330 00:14:08,130 --> 00:14:09,930 Oh. You're having girl problems. 331 00:14:09,970 --> 00:14:11,930 Oh, my... I knew it. 332 00:14:11,970 --> 00:14:13,600 Raven, could you grab me that pen over there 333 00:14:13,640 --> 00:14:15,240 and stab me with it? That would be awesome. 334 00:14:15,270 --> 00:14:17,270 Guys, will you cut it out and come here. You got no game. 335 00:14:17,310 --> 00:14:19,210 I found something. I have... I have game. 336 00:14:19,240 --> 00:14:20,140 You guys. 337 00:14:20,180 --> 00:14:22,210 I went back to the employee party invitation 338 00:14:22,250 --> 00:14:23,990 where the malware was embedded. 339 00:14:24,010 --> 00:14:26,050 I couldn't find the information on the computer that sent it. 340 00:14:26,080 --> 00:14:27,280 The hacker anonymized it. 341 00:14:27,320 --> 00:14:30,950 So, I responded yes. I got back an auto-reply confirmation, 342 00:14:30,990 --> 00:14:34,290 and guess what-- our hacker forgot to anonymize that e-mail. 343 00:14:34,320 --> 00:14:37,330 Pretty sure it's the same one that sent the invitation. 344 00:14:37,360 --> 00:14:39,090 And I got his I.P. address on the computer. 345 00:14:39,130 --> 00:14:40,600 Yeah! These guys never think two steps ahead. 346 00:14:40,630 --> 00:14:42,500 I love this job. This is gonna 347 00:14:42,530 --> 00:14:44,100 lead us right to our hacker. 348 00:14:55,580 --> 00:14:58,580 * 349 00:15:03,420 --> 00:15:05,390 Evan Wescott? Is this your computer? 350 00:15:05,420 --> 00:15:07,960 Yes. Why? FBI. 351 00:15:07,990 --> 00:15:09,590 You're under arrest for computer fraud 352 00:15:09,630 --> 00:15:11,970 in connection with the murder of Adel Foster. 353 00:15:12,000 --> 00:15:13,240 What? What are you talking about? Hey, whoa. 354 00:15:13,260 --> 00:15:15,300 Hold on a minute. I don't even know who that is. 355 00:15:15,330 --> 00:15:18,600 You got the wrong guy. (grunts) I didn't kill anybody. 356 00:15:18,630 --> 00:15:22,040 We can do this the hard way, or you can come quietly. 357 00:15:28,240 --> 00:15:31,080 You hacked the Kirkendahl Hotel's main computer, Evan. 358 00:15:31,110 --> 00:15:34,220 We know this because the I.P. address of the device used 359 00:15:34,250 --> 00:15:36,080 led us back to your laptop. 360 00:15:36,120 --> 00:15:38,090 That's impossible. I don't even know how to do 361 00:15:38,120 --> 00:15:39,720 something like that. MUNDO: You created a backdoor 362 00:15:39,760 --> 00:15:41,300 in the computer systems and took control 363 00:15:41,320 --> 00:15:42,190 of the hotel's hospitality functions-- 364 00:15:42,230 --> 00:15:43,440 maid service, 365 00:15:43,460 --> 00:15:44,630 room service, minibar. 366 00:15:44,660 --> 00:15:46,090 You murdered Adel and activated 367 00:15:46,130 --> 00:15:47,130 those services to make it look 368 00:15:47,160 --> 00:15:50,270 like she was alive three days after her death. 369 00:15:50,300 --> 00:15:52,770 What? That's insane. I didn't kill anybody. 370 00:15:52,800 --> 00:15:54,640 Your cell phone places you at the hotel 371 00:15:54,670 --> 00:15:56,640 at the exact time of Adel Foster's murder. 372 00:15:56,670 --> 00:16:01,110 Your phone's location services puts you in that hotel. 373 00:16:01,140 --> 00:16:02,580 Location services? 374 00:16:02,610 --> 00:16:04,650 MUNDO: The little program that's always running 375 00:16:04,680 --> 00:16:06,610 in the background of your phone. 376 00:16:06,650 --> 00:16:08,380 Logs everywhere you go. 377 00:16:08,420 --> 00:16:10,290 RYAN: Nifty little feature. 378 00:16:10,320 --> 00:16:14,260 See the elevation listed here? 29.7 meters. 379 00:16:14,290 --> 00:16:16,690 That's roughly seven floors. 380 00:16:16,730 --> 00:16:19,200 Her body was found in room 715. 381 00:16:19,230 --> 00:16:21,030 Okay, I-I'm not a murderer. 382 00:16:21,060 --> 00:16:22,100 MUNDO: Really? 383 00:16:22,130 --> 00:16:23,330 'Cause you sure sound like one 384 00:16:23,370 --> 00:16:25,330 in the text that you sent Adel. 385 00:16:25,370 --> 00:16:27,570 We found that on your phone. 386 00:16:29,140 --> 00:16:31,140 These are not my text messages. 387 00:16:31,170 --> 00:16:34,240 And I already told you, I don't know anybody named Adel. 388 00:16:34,280 --> 00:16:36,810 Are you sure you never talked to her? 389 00:16:36,850 --> 00:16:39,320 This is surveillance footage from your bar, Evade, 390 00:16:39,350 --> 00:16:40,380 on the night she was murdered. 391 00:16:40,420 --> 00:16:42,650 * 392 00:16:53,530 --> 00:16:56,200 I mean, 'cause that sure as hell looks like her, 393 00:16:56,230 --> 00:16:58,500 and that is definitely you. 394 00:16:58,530 --> 00:17:01,340 Look, man, a lot of people come into my club. 395 00:17:01,370 --> 00:17:03,270 And, yeah, I meet a lot of women. MUNDO: Yeah? 396 00:17:03,310 --> 00:17:05,310 Well, this one was murdered three days ago. 397 00:17:06,340 --> 00:17:07,510 Where were you? 398 00:17:07,540 --> 00:17:09,540 I was at the club. 399 00:17:09,580 --> 00:17:11,210 I'm always at the club. 400 00:17:13,320 --> 00:17:15,250 It's a pretty crowded place at night. 401 00:17:15,280 --> 00:17:18,190 Could easily step out for an hour, and no one would miss you. 402 00:17:18,220 --> 00:17:20,290 This is ridiculous. I didn't do anything. 403 00:17:20,320 --> 00:17:22,360 At first, I couldn't understand why you went to all the trouble 404 00:17:22,390 --> 00:17:25,360 to make it look like Adel was still alive. 405 00:17:25,390 --> 00:17:27,630 MUNDO: You wanted to buy yourself time 406 00:17:27,660 --> 00:17:29,830 to create an alibi. The hotel hack. 407 00:17:29,870 --> 00:17:31,380 And you certainly can't deny 408 00:17:31,400 --> 00:17:33,240 that you were capable of doing it. 409 00:17:33,270 --> 00:17:35,340 You were a computer science major 410 00:17:35,370 --> 00:17:36,800 at Kenniwick University. 411 00:17:36,840 --> 00:17:38,510 Day one, nobody found the body. 412 00:17:38,540 --> 00:17:41,340 Day two, no one came for you. 413 00:17:41,380 --> 00:17:43,850 MUNDO: Day three, you got comfortable. 414 00:17:43,880 --> 00:17:45,380 You distanced yourself from the murder. 415 00:17:45,410 --> 00:17:46,210 You thought there was no evidence 416 00:17:46,250 --> 00:17:47,320 tying you to the scene of the crime. 417 00:17:47,350 --> 00:17:50,420 You got away with murder. 418 00:17:50,450 --> 00:17:51,490 Almost. EVAN: No. 419 00:17:51,520 --> 00:17:52,690 I didn't kill anybody. 420 00:17:52,720 --> 00:17:54,420 I didn't do any of these things. 421 00:17:54,460 --> 00:17:55,720 Evan... 422 00:17:55,760 --> 00:17:59,390 your devices tell us you're lying. 423 00:18:05,430 --> 00:18:08,100 * 424 00:18:37,830 --> 00:18:38,600 MAN: Shane Tillman. 425 00:18:38,630 --> 00:18:42,800 Adel is... er, was... my girlfriend. 426 00:18:42,840 --> 00:18:44,670 I don't understand how this happened. 427 00:18:44,710 --> 00:18:46,810 Doesn't the hotel have security? 428 00:18:46,840 --> 00:18:48,710 We're still investigating the circumstances 429 00:18:48,740 --> 00:18:49,710 surrounding Adel's death. 430 00:18:49,750 --> 00:18:50,520 You mean her murder. 431 00:18:52,720 --> 00:18:54,730 When her cell kept going to voicemail, 432 00:18:54,750 --> 00:18:55,580 I called the-the hotel, and she... 433 00:18:55,620 --> 00:18:57,650 they said that she was still checked in. 434 00:18:57,690 --> 00:18:59,890 I thought that she had lost her phone. 435 00:18:59,920 --> 00:19:01,890 You know? I mean, she does that a lot. 436 00:19:01,920 --> 00:19:03,930 But I never thought... 437 00:19:07,360 --> 00:19:09,500 ...you know, that, um, that she was dead. 438 00:19:09,530 --> 00:19:11,570 You spoke to her the night that she was killed. 439 00:19:11,600 --> 00:19:12,600 Yeah, she seemed excited. 440 00:19:12,640 --> 00:19:14,280 Talking a mile a minute. 441 00:19:14,300 --> 00:19:15,570 (sniffles) 442 00:19:15,600 --> 00:19:16,540 Adel saved up money 443 00:19:16,570 --> 00:19:18,540 for months for this trip. 444 00:19:18,570 --> 00:19:21,340 You know, she had a whole itinerary: 445 00:19:21,380 --> 00:19:24,510 Coney Island, Statue of Liberty, Empire State Building, 446 00:19:24,550 --> 00:19:25,950 a couple of Broadway shows. 447 00:19:25,980 --> 00:19:27,720 Why didn't you go with her? 448 00:19:29,720 --> 00:19:31,890 I got called into work last minute. 449 00:19:31,920 --> 00:19:33,560 What do you do? 450 00:19:33,590 --> 00:19:35,790 Some part-time stuff. 451 00:19:35,820 --> 00:19:37,560 Operations and Safety at the hospital, 452 00:19:37,590 --> 00:19:38,630 and I work construction on the weekends. 453 00:19:38,660 --> 00:19:42,360 They were short on staff and needed some extra help. 454 00:19:42,400 --> 00:19:44,570 I was trying to save money so we could go to Europe. 455 00:19:46,570 --> 00:19:48,270 I think, uh... 456 00:19:48,300 --> 00:19:50,570 I think she wanted to experience New York this time on her own. 457 00:19:50,610 --> 00:19:52,270 She loved the city. 458 00:19:54,310 --> 00:19:55,740 Even though we were in East Rutherford, 459 00:19:55,780 --> 00:19:57,750 we didn't get up here often. 460 00:19:59,720 --> 00:20:01,660 I'm sorry. I, uh... 461 00:20:01,680 --> 00:20:03,350 I just can't believe 462 00:20:03,390 --> 00:20:05,290 she's gone. 463 00:20:05,320 --> 00:20:07,690 All right. Every piece is scrubbed, dried and connected. 464 00:20:07,720 --> 00:20:09,560 Between that spider this morning 465 00:20:09,590 --> 00:20:11,590 and this phone, boy, I could so use a hot shower. 466 00:20:11,630 --> 00:20:13,030 Dude, man up. 467 00:20:13,060 --> 00:20:14,230 It's time to Frankenstein this thing. 468 00:20:14,260 --> 00:20:16,900 We are gonna rebuild Adel's phone and resurrect its memory. 469 00:20:16,930 --> 00:20:18,330 You mean we can do that? 470 00:20:18,370 --> 00:20:19,930 We can actually get data off of this thing? 471 00:20:19,970 --> 00:20:21,640 Watch and learn, son. 472 00:20:21,670 --> 00:20:23,510 This is how the good guys do it. 473 00:20:23,540 --> 00:20:25,710 Watch and learn. 474 00:20:25,740 --> 00:20:27,710 * 475 00:20:47,800 --> 00:20:49,860 * 476 00:21:01,040 --> 00:21:02,940 You see what I'm seeing? 477 00:21:02,980 --> 00:21:04,080 Yeah. 478 00:21:04,110 --> 00:21:05,210 A problem. 479 00:21:05,250 --> 00:21:07,050 MUNDO: So Krumitz was able to pull some data 480 00:21:07,080 --> 00:21:09,550 off Adel's phone, but the threatening text messages 481 00:21:09,590 --> 00:21:10,760 from Evan aren't there. 482 00:21:10,790 --> 00:21:11,950 Were they deleted? 483 00:21:11,990 --> 00:21:13,490 They never existed. 484 00:21:13,520 --> 00:21:15,490 So I double-checked with Evan's service provider. 485 00:21:15,520 --> 00:21:17,560 They have no record of the calls or the texts either. 486 00:21:17,590 --> 00:21:20,560 Which means Evan didn't send or receive those texts. 487 00:21:20,600 --> 00:21:22,630 So how did they get on his phone? 488 00:21:22,670 --> 00:21:24,780 So Elijah sent me everything he pulled off 489 00:21:24,800 --> 00:21:26,470 Evan Wescott's phone. 490 00:21:26,500 --> 00:21:27,940 Those text message conversations 491 00:21:27,970 --> 00:21:30,000 between Evan and Adel were faked. 492 00:21:30,040 --> 00:21:32,570 How can somebody fake a text on another device? 493 00:21:32,610 --> 00:21:34,440 Once you get a text message into your phone, 494 00:21:34,480 --> 00:21:36,340 it's added to one long database. 495 00:21:36,380 --> 00:21:38,710 If you're smart enough and have the right software, 496 00:21:38,750 --> 00:21:40,980 you can manipulate that file and make it look 497 00:21:41,020 --> 00:21:43,850 like you're getting text messages from whoever you want. 498 00:21:43,890 --> 00:21:44,920 Whenever you want. 499 00:21:44,950 --> 00:21:48,390 Or to someone else's phone. 500 00:21:48,420 --> 00:21:51,690 Mmm. "Happy New Year, Krumitz, 501 00:21:51,730 --> 00:21:54,730 from your best pal, Sifter." 502 00:21:54,760 --> 00:21:57,700 Sent from your phone January 1, 2016. 503 00:21:57,730 --> 00:21:58,700 That is impressive. 504 00:21:58,730 --> 00:22:01,700 And a little creepy. Yeah. 505 00:22:01,740 --> 00:22:03,510 Now, would you need physical access to Evan's phone 506 00:22:03,540 --> 00:22:04,770 to fake those text messages? 507 00:22:04,810 --> 00:22:08,140 No. Plus, Evan's phone doesn't even have the software necessary 508 00:22:08,180 --> 00:22:11,150 to manipulate the database-- it had to be done remotely. 509 00:22:11,180 --> 00:22:13,680 And that's not all. GPS coordinates 510 00:22:13,720 --> 00:22:14,980 that put Evan Wescott in the hotel room 511 00:22:15,020 --> 00:22:16,480 at the time of the murder... 512 00:22:16,520 --> 00:22:17,690 Faked. Faked. 513 00:22:17,720 --> 00:22:19,820 His phone was hacked. Yeah! 514 00:22:19,860 --> 00:22:20,870 Oh... (grunts) 515 00:22:20,890 --> 00:22:23,120 Avery, 516 00:22:23,160 --> 00:22:25,860 all of our digital evidence is lying to us. 517 00:22:25,890 --> 00:22:27,800 Is Krumitz sure no mistake was made? 518 00:22:27,830 --> 00:22:28,530 He's positive. 519 00:22:28,560 --> 00:22:30,060 What about the malware injected 520 00:22:30,100 --> 00:22:32,530 into the hotel's computer system? 521 00:22:32,570 --> 00:22:34,100 It came from Evan Wescott's computer. 522 00:22:34,140 --> 00:22:36,570 But Krumitz doesn't believe Evan is our hacker. 523 00:22:36,610 --> 00:22:38,450 He's sure? SIFTER: Yes. 524 00:22:38,470 --> 00:22:40,580 And how many times have you told me that Daniel Krumitz is 525 00:22:40,610 --> 00:22:42,580 the best white hat hacker ever? 526 00:22:42,610 --> 00:22:46,610 Looks like Evan Wescott is being framed for murder. 527 00:22:52,990 --> 00:22:54,090 KRUMITZ: For someone to frame Evan, 528 00:22:54,120 --> 00:22:56,820 they had to route the intrusion through his laptop, 529 00:22:56,860 --> 00:22:58,690 change the GPS, and create those text messages. 530 00:22:58,730 --> 00:23:00,090 Maybe he framed himself. 531 00:23:00,130 --> 00:23:02,630 Clearly, you're new to this and don't understand 532 00:23:02,670 --> 00:23:04,980 the behavior of a criminal. Other than yourself. 533 00:23:05,000 --> 00:23:07,100 What I understand is I would do anything not to go to prison. 534 00:23:07,140 --> 00:23:09,950 Pretty risky to frame yourself. It's working for Evan. You believe he's innocent. 535 00:23:09,970 --> 00:23:11,570 I believe in cyber evidence. 536 00:23:11,610 --> 00:23:12,810 Okay, I'm not saying the evidence is wrong. 537 00:23:12,840 --> 00:23:15,510 I'm just saying his devices could be manipulated by anybody. 538 00:23:15,540 --> 00:23:17,210 Evidence doesn't point to the identity of a hacker. 539 00:23:17,250 --> 00:23:19,220 So what happened when we caught you? 540 00:23:19,250 --> 00:23:20,650 See, why you want to get all personal? 541 00:23:20,680 --> 00:23:21,780 What? That's what I'm saying... 542 00:23:21,820 --> 00:23:23,890 Guys? Guys? (arguing continues) 543 00:23:23,920 --> 00:23:25,850 Stop! Stop! Focus on the case! Whatever, whatever. 544 00:23:25,890 --> 00:23:26,920 Focus on the case. 545 00:23:26,960 --> 00:23:28,770 Whoever hacked them, 546 00:23:28,790 --> 00:23:30,790 gained access to at least one 547 00:23:30,830 --> 00:23:31,960 of Evan Wescott's devices. 548 00:23:31,990 --> 00:23:33,800 Evan has full access to all of his devices. 549 00:23:33,830 --> 00:23:35,100 Physical access is the easiest, 550 00:23:35,130 --> 00:23:37,470 which is why I think it's Evan. Physical access 551 00:23:37,500 --> 00:23:38,800 is also the riskiest. 552 00:23:38,830 --> 00:23:39,970 Nelson, just for a minute, 553 00:23:40,000 --> 00:23:41,970 try to buy into the fact that Adel's killer 554 00:23:42,000 --> 00:23:42,940 might not be Evan Wescott. 555 00:23:42,970 --> 00:23:46,470 The hacker behind this had to have skills. 556 00:23:46,510 --> 00:23:48,240 Evan has a computer science degree. 557 00:23:48,280 --> 00:23:49,840 (scoffs, groans) I'm just saying! 558 00:23:49,880 --> 00:23:51,910 All right, fine, I'll, uh... 559 00:23:51,950 --> 00:23:53,820 I'll play along. 560 00:23:53,850 --> 00:23:55,820 The hacker could've easily done this remotely. 561 00:23:55,850 --> 00:23:57,850 If I'd done it, I'd "war drive" him. 562 00:23:59,120 --> 00:24:01,920 Pull up to his house. 563 00:24:01,960 --> 00:24:03,630 Hack into his Wi-Fi, 564 00:24:03,660 --> 00:24:05,590 plant everything on his computer and phone 565 00:24:05,630 --> 00:24:09,630 while he's still inside, totally oblivious. 566 00:24:09,670 --> 00:24:10,980 It's still too risky. 567 00:24:11,000 --> 00:24:12,700 You're sitting outside of his house. 568 00:24:12,740 --> 00:24:14,250 What if somebody sees you? Or your car? 569 00:24:14,270 --> 00:24:17,570 The best way to do it is from the safety of your own home. 570 00:24:17,610 --> 00:24:18,910 All you have to do is "spear phish" him-- 571 00:24:18,940 --> 00:24:20,740 a socially engineered attack. 572 00:24:20,780 --> 00:24:22,740 Send Evan an e-mail with a fake link 573 00:24:22,780 --> 00:24:25,880 from his bank or something, wait for him to click on it, 574 00:24:25,910 --> 00:24:26,950 and then boom! 575 00:24:26,980 --> 00:24:28,780 Full access to his laptop 576 00:24:28,820 --> 00:24:32,020 and any device that connects to it, like his phone! 577 00:24:32,050 --> 00:24:34,720 Okay, so how you know he's gonna click on it? And when? 578 00:24:34,760 --> 00:24:36,660 Whoever did this was short on time. 579 00:24:36,690 --> 00:24:38,730 The best way to stay anonymous and get instant access 580 00:24:38,760 --> 00:24:40,190 to Evan's devices is to wait for him 581 00:24:40,230 --> 00:24:42,260 to connect to an open Wi-Fi signal somewhere. 582 00:24:42,300 --> 00:24:45,270 Anywhere they're advertising free Wi-Fi is like a hacker's 583 00:24:45,300 --> 00:24:48,100 virtual playground-- tons of unexpected people unaware 584 00:24:48,140 --> 00:24:50,270 that the person next to them sharing the same connection 585 00:24:50,310 --> 00:24:51,880 could be intruding onto their devices 586 00:24:51,910 --> 00:24:53,980 and stealing all their information. 587 00:24:54,010 --> 00:24:57,310 Or in Evan's case, adding information. 588 00:24:57,350 --> 00:24:58,820 Look, I still think he could've done it himself. 589 00:24:58,850 --> 00:24:59,810 I mean, that's just me. 590 00:24:59,850 --> 00:25:01,750 Wi-Fi is the best option. 591 00:25:01,780 --> 00:25:03,890 So... where was Evan hacked? 592 00:25:03,920 --> 00:25:05,790 Well, according to his frequent locations on Evan's phone, 593 00:25:05,820 --> 00:25:07,760 he went to the gym three or four times a week. 594 00:25:07,790 --> 00:25:09,060 Most gyms have free Wi-Fi. Restaurants, too. 595 00:25:09,090 --> 00:25:11,630 I bet you he was eating out every night. 596 00:25:11,660 --> 00:25:13,730 You know, club owners score mad dates. 597 00:25:13,760 --> 00:25:16,730 How often is he at Carla's Cafe? 598 00:25:17,800 --> 00:25:19,700 RAMIREZ: Almost every day. 599 00:25:21,770 --> 00:25:23,300 Well, according to the network logs in Evan's laptop, 600 00:25:23,340 --> 00:25:24,910 he connected to the coffee shop's Wi-Fi 601 00:25:24,940 --> 00:25:26,240 the morning after the murder. 602 00:25:26,270 --> 00:25:27,880 You still think it's a possibility 603 00:25:27,910 --> 00:25:29,140 that he framed himself? 604 00:25:29,180 --> 00:25:31,880 Yeah. I do. 605 00:25:39,120 --> 00:25:41,860 All right. So I spoke to the manager. 606 00:25:41,890 --> 00:25:42,790 The surveillance cameras are all dummies. 607 00:25:42,830 --> 00:25:44,800 They're just there as a crime deterrent. 608 00:25:44,830 --> 00:25:46,790 They don't record a damn thing. 609 00:25:46,830 --> 00:25:49,360 But... the Wi-Fi went down three days ago 610 00:25:49,400 --> 00:25:50,630 at 10:32 a.m. 611 00:25:50,670 --> 00:25:54,640 Now, according to Evan's laptop, he was long gone at that time. 612 00:25:54,670 --> 00:25:56,740 But not onto the cafe's router. 613 00:25:56,770 --> 00:26:00,070 Maybe someone set up an evil twin router. 614 00:26:00,110 --> 00:26:02,080 And that's how he got hacked. Now, my phone... 615 00:26:02,110 --> 00:26:04,110 can give the illusion of being a Wi-Fi signal, 616 00:26:04,150 --> 00:26:05,650 same as a twin router. 617 00:26:05,680 --> 00:26:08,350 All I have to do is activate my own personal hot spot 618 00:26:08,380 --> 00:26:11,320 from my device, and I am open Wi-Fi. 619 00:26:11,350 --> 00:26:13,320 I can even name it anything I want. 620 00:26:13,360 --> 00:26:16,130 Say we're in Carla's Cafe, right? 621 00:26:16,160 --> 00:26:19,990 Think I'll name my new hot spot network... 622 00:26:20,030 --> 00:26:21,760 "Carla's Cafe." 623 00:26:21,800 --> 00:26:23,260 Now, log on to the free Wi-Fi. 624 00:26:25,970 --> 00:26:27,230 (laughs) 625 00:26:27,270 --> 00:26:29,170 Which one? There are two. 626 00:26:29,200 --> 00:26:30,100 Exactly. 627 00:26:30,140 --> 00:26:32,640 The one I just created and the real one. 628 00:26:32,680 --> 00:26:34,850 I'm guessing our target eliminated 629 00:26:34,880 --> 00:26:36,980 the real Carla's Cafe Wi-Fi. 630 00:26:37,010 --> 00:26:38,750 Evan came in, 631 00:26:38,780 --> 00:26:41,680 logged on to the decoy signal... 632 00:26:41,720 --> 00:26:44,250 and the hacker gained control of his device. 633 00:26:44,290 --> 00:26:45,720 You just did all that with your phone? 634 00:26:45,750 --> 00:26:47,920 Just a few clicks of a button. 635 00:26:47,960 --> 00:26:51,660 Now, I-I can't control your device from my phone, 636 00:26:51,690 --> 00:26:53,900 but our target had an actual router. 637 00:26:53,930 --> 00:26:55,960 He was able to push any information he wanted 638 00:26:56,000 --> 00:26:59,070 onto Evan's devices. 639 00:26:59,100 --> 00:27:01,070 I mean, anytime you log on to open Wi-Fi, 640 00:27:01,100 --> 00:27:02,040 you leave yourself vulnerable. 641 00:27:02,070 --> 00:27:05,010 Or in our case, you become a murder suspect. 642 00:27:05,040 --> 00:27:05,970 It can happen to anyone. 643 00:27:06,010 --> 00:27:09,880 Looks like it just happened to Evan Wescott. 644 00:27:12,880 --> 00:27:14,320 Raven, I need you to track down 645 00:27:14,350 --> 00:27:16,420 the owner of an evil twin router. 646 00:27:27,030 --> 00:27:29,760 (chuckles) Right. 647 00:27:29,900 --> 00:27:31,200 Nelson thinks Evan framed himself. 648 00:27:31,230 --> 00:27:33,370 That would be a smart move. 649 00:27:33,400 --> 00:27:35,700 You don't really believe that, do you? 650 00:27:35,740 --> 00:27:37,240 Nelson thinks the way hackers do. 651 00:27:37,270 --> 00:27:38,910 But... 652 00:27:38,940 --> 00:27:40,980 Evan has no motive. 653 00:27:41,010 --> 00:27:43,480 And no definitive connection to Adel Foster 654 00:27:43,510 --> 00:27:46,010 other than a kiss; and kisses rarely 655 00:27:46,050 --> 00:27:47,350 get you convicted of murder. 656 00:27:51,190 --> 00:27:53,990 You miss New York. 657 00:27:54,020 --> 00:27:55,920 Yeah, feeling a bit nostalgic. 658 00:27:55,960 --> 00:27:58,960 I opened my first practice in Manhattan. 659 00:27:58,990 --> 00:28:00,490 Hung the shingle on a brownstone 660 00:28:00,530 --> 00:28:02,960 just like that one there. Went from 661 00:28:03,000 --> 00:28:05,300 analyzing minds to analyzing cyber criminals. 662 00:28:05,330 --> 00:28:08,270 Wasn't really a plan, it just happened. 663 00:28:08,300 --> 00:28:10,070 You ever think about moving back? 664 00:28:10,110 --> 00:28:11,380 No. 665 00:28:11,410 --> 00:28:13,840 I only think about one thing. 666 00:28:13,880 --> 00:28:16,480 Catching the guy that hacked and stole my files. 667 00:28:16,510 --> 00:28:19,010 There isn't a morning where I don't wake up wondering 668 00:28:19,050 --> 00:28:20,480 if today's the day that he's gonna 669 00:28:20,520 --> 00:28:22,790 release private patient information. 670 00:28:22,820 --> 00:28:24,320 And the whole nightmare will start all over again. 671 00:28:24,350 --> 00:28:26,190 We'll catch him. 672 00:28:26,220 --> 00:28:28,190 (sighs) 673 00:28:28,220 --> 00:28:31,030 You know what I miss about this place? 674 00:28:31,060 --> 00:28:32,130 The Mets. 675 00:28:32,160 --> 00:28:34,160 The Mets? (laughs) 676 00:28:35,430 --> 00:28:37,430 I would comment, but you'd probably fire me. 677 00:28:39,430 --> 00:28:41,800 But there is one question I can't shake, Elijah. 678 00:28:41,840 --> 00:28:43,170 Evan Wescott. 679 00:28:43,210 --> 00:28:44,420 What about him? 680 00:28:44,440 --> 00:28:46,170 Well, the beauty of an open Wi-Fi hack 681 00:28:46,210 --> 00:28:48,180 is its sheer randomness. 682 00:28:48,210 --> 00:28:51,380 Our killer could've framed anyone on his router 683 00:28:51,410 --> 00:28:53,280 for Adel's murder. 684 00:28:53,320 --> 00:28:55,560 You think the target chose Evan specifically. 685 00:28:55,580 --> 00:28:57,820 Adel went to Evan's club the night of the murder. 686 00:28:57,850 --> 00:28:59,950 And the next morning, Evan ends up at Carla's Cafe 687 00:28:59,990 --> 00:29:02,890 at the exact same time as the evil twin router. 688 00:29:02,930 --> 00:29:04,340 It feels personal. 689 00:29:04,360 --> 00:29:06,560 Our target crafted a murder for Evan. 690 00:29:06,590 --> 00:29:08,260 Fabricated texts 691 00:29:08,300 --> 00:29:12,000 and GPS data, linked him to the hotel hack. 692 00:29:12,030 --> 00:29:15,800 He set up Evan as a fall guy for a reason, but why? 693 00:29:18,310 --> 00:29:20,340 I identified the router that was used 694 00:29:20,380 --> 00:29:22,190 to hack Evan in Carla's Cafe. 695 00:29:22,210 --> 00:29:23,380 The latest and greatest 696 00:29:23,410 --> 00:29:25,210 in evil twin deception, huh? 697 00:29:25,250 --> 00:29:28,280 Manufacturer gave me the big box store where it was sold. 698 00:29:28,320 --> 00:29:30,050 All right, from your smirk, I'm guessing 699 00:29:30,090 --> 00:29:32,030 it was purchased recently. Mm-hmm. 700 00:29:32,050 --> 00:29:34,290 Point of sale puts that gentleman at the register. 701 00:29:34,320 --> 00:29:36,360 He paid cash. 702 00:29:36,390 --> 00:29:39,130 Get this to Avery and Elijah. 703 00:29:39,160 --> 00:29:40,330 We've got him. 704 00:29:40,360 --> 00:29:42,500 (tablet chimes) 705 00:29:42,530 --> 00:29:45,300 Look who was in Manhattan the morning after Adel's murder. 706 00:29:45,330 --> 00:29:47,470 Just got this from Raven. 707 00:29:47,500 --> 00:29:50,440 Oh. The heartbroken boyfriend. 708 00:29:56,040 --> 00:29:58,210 MUNDO: Shane Tillman, FBI! 709 00:30:06,420 --> 00:30:08,360 He's not here. 710 00:30:11,390 --> 00:30:13,330 I'm gonna image the hard drive, 711 00:30:13,360 --> 00:30:16,200 send it to Nelson and Krumitz to comb through the data. 712 00:30:16,230 --> 00:30:18,270 RYAN: Broken cup. 713 00:30:20,900 --> 00:30:22,440 Damaged wall. 714 00:30:22,470 --> 00:30:23,910 There was an argument. 715 00:30:28,680 --> 00:30:30,280 Adel wasn't visiting New York. 716 00:30:30,310 --> 00:30:33,010 She was running away from Shane. 717 00:30:33,050 --> 00:30:35,120 You know, something struck me as odd when I saw 718 00:30:35,150 --> 00:30:37,520 the bruises on her wrist at the crime scene. 719 00:30:37,550 --> 00:30:40,320 Look. They're purple, almost black. 720 00:30:40,360 --> 00:30:42,400 If she'd gotten these during the struggle the night 721 00:30:42,420 --> 00:30:45,030 that she was killed, they'd be pink or not even visible. 722 00:30:45,060 --> 00:30:47,560 She got these before the night she was killed. 723 00:30:51,030 --> 00:30:54,340 Adel was leaving Shane. 724 00:30:54,370 --> 00:30:55,640 He came home. 725 00:31:00,010 --> 00:31:01,040 Stop it! 726 00:31:01,080 --> 00:31:02,310 He pulled her things out of her bag 727 00:31:02,340 --> 00:31:04,110 to prevent her from leaving. 728 00:31:04,150 --> 00:31:05,580 When she escaped, he grabbed her wrists, 729 00:31:05,610 --> 00:31:07,050 which caused the bruising. 730 00:31:07,080 --> 00:31:08,350 (both grunting) 731 00:31:08,380 --> 00:31:10,380 Oh, God! (groaning) 732 00:31:15,220 --> 00:31:18,630 When she left, he started drinking. 733 00:31:18,660 --> 00:31:20,090 He followed her 734 00:31:20,130 --> 00:31:21,600 to New York and he killed her. 735 00:31:21,630 --> 00:31:25,200 My God. 736 00:31:25,230 --> 00:31:28,300 Even when women get the courage to leave abusive relationships, 737 00:31:28,340 --> 00:31:30,440 sometimes they still get killed. 738 00:31:30,470 --> 00:31:32,310 So what's his next move? 739 00:31:32,340 --> 00:31:34,410 Well, he's angry. 740 00:31:34,440 --> 00:31:36,110 He's calculated. 741 00:31:36,140 --> 00:31:37,440 He's got nothing to lose. 742 00:31:45,090 --> 00:31:47,320 And he's armed and dangerous. 743 00:31:47,360 --> 00:31:48,970 RAMIREZ: I just hit a dead end. 744 00:31:48,990 --> 00:31:50,660 Tillman's phone's not showing a signal. 745 00:31:50,690 --> 00:31:53,430 He must have turned it off. There's no way to track him. 746 00:31:53,460 --> 00:31:55,330 I'll see what we can do with Tillman's laptop. 747 00:31:55,360 --> 00:31:57,430 His recent online activity should give us a glimpse 748 00:31:57,470 --> 00:31:58,380 into his state of mind. 749 00:31:58,400 --> 00:31:59,430 Yeah, browser history has been cleared. 750 00:31:59,470 --> 00:32:02,070 Yeah, well, clearing your history may hide porn sites 751 00:32:02,100 --> 00:32:04,340 from your girlfriend, but it won't hide anything from me. 752 00:32:04,370 --> 00:32:08,240 Browser artifacts are easily recovered with the right tools. 753 00:32:08,280 --> 00:32:10,440 Oh, check it out. Mostly New York news affiliates. 754 00:32:10,480 --> 00:32:12,980 He's following the Adel Foster murder investigation. You think he knows 755 00:32:13,020 --> 00:32:14,430 we're onto him? Always assume 756 00:32:14,450 --> 00:32:16,120 that the bad guys are two steps ahead of you, Nelson. 757 00:32:16,150 --> 00:32:17,350 That way, you're prepared for anything, 758 00:32:17,390 --> 00:32:19,260 and you're never caught off guard. 759 00:32:19,290 --> 00:32:22,590 Hey, man, he visited a cell phone locating site? 760 00:32:22,620 --> 00:32:24,430 I mean, what, he lost his cell phone? 761 00:32:24,460 --> 00:32:26,190 No, he wasn't looking for his phone. 762 00:32:26,230 --> 00:32:28,060 He was tracking someone else. Look. 763 00:32:28,100 --> 00:32:29,360 That area code is 212. 764 00:32:29,400 --> 00:32:31,370 That's New York, not Jersey. 765 00:32:31,400 --> 00:32:33,400 KRUMITZ: I'll call Elijah. 766 00:32:33,440 --> 00:32:35,710 Elijah, Shane Tillman is using 767 00:32:35,740 --> 00:32:37,700 a cell phone location tracking site. 768 00:32:37,740 --> 00:32:39,470 He's going after Evan Wescott! 769 00:32:39,510 --> 00:32:41,440 * 770 00:33:20,150 --> 00:33:21,650 Whoa, whoa, whoa, hey. 771 00:33:21,680 --> 00:33:23,320 Problem is with me. 772 00:33:23,350 --> 00:33:24,820 Just let these people go. Shut up! 773 00:33:24,850 --> 00:33:27,350 This wouldn't be happening if it wasn't for you. 774 00:33:27,390 --> 00:33:29,560 You took her away from me. Buddy, I think you got the wrong guy. 775 00:33:29,590 --> 00:33:31,630 It was you! It was you! 776 00:33:31,660 --> 00:33:34,430 I saw you with Adel right here in this bar. 777 00:33:43,270 --> 00:33:46,310 Look, man, just drop the gun, and we can talk 778 00:33:46,340 --> 00:33:48,440 about whatever it is that you think may have happened. 779 00:33:48,480 --> 00:33:50,780 No, I know what happened! I know what happened! 780 00:33:50,810 --> 00:33:52,610 (siren wailing) 781 00:33:59,550 --> 00:34:01,460 You took her away from me. 782 00:34:01,490 --> 00:34:02,820 Of course, you don't remember. 783 00:34:02,860 --> 00:34:04,530 There's so many women, aren't there? 784 00:34:04,560 --> 00:34:05,860 You just have to have them all? 785 00:34:05,890 --> 00:34:08,800 I needed a chance to explain, to say I was sorry. 786 00:34:08,830 --> 00:34:12,130 To say I was sorry. 787 00:34:12,170 --> 00:34:13,770 But you... you were all over her. 788 00:34:13,800 --> 00:34:16,240 And I could see in her eyes, she wasn't coming back to me. 789 00:34:16,270 --> 00:34:17,740 Shane? 790 00:34:18,870 --> 00:34:20,840 Stay where you are! 791 00:34:22,140 --> 00:34:23,840 Stay where you are! 792 00:34:23,880 --> 00:34:26,750 Or this isn't gonna end the way you want it to. 793 00:34:26,780 --> 00:34:28,850 Let her go and put down the gun. 794 00:34:28,880 --> 00:34:30,820 He killed my girlfriend, and you did nothing. 795 00:34:30,850 --> 00:34:31,950 You set him free. 796 00:34:31,990 --> 00:34:33,820 At the count of three, I'm gonna discharge this weapon. 797 00:34:33,860 --> 00:34:35,200 You need to decide 798 00:34:35,220 --> 00:34:37,190 what you're gonna do. One, two... 799 00:34:37,230 --> 00:34:38,600 Okay. 800 00:34:38,630 --> 00:34:40,260 Okay. 801 00:34:42,530 --> 00:34:43,500 Good. 802 00:34:43,530 --> 00:34:44,670 Now kick it towards me. 803 00:35:04,320 --> 00:35:05,620 Stay right where you are. 804 00:35:10,190 --> 00:35:12,230 W-Wait, don't do that, don't do that. 805 00:35:12,260 --> 00:35:14,260 I can't live without her! 806 00:35:14,300 --> 00:35:15,360 Shane. Shane! 807 00:35:18,600 --> 00:35:19,700 I got you! 808 00:35:19,730 --> 00:35:20,830 Hang on! 809 00:35:20,870 --> 00:35:22,200 I got you! 810 00:35:43,960 --> 00:35:46,160 * 811 00:36:08,680 --> 00:36:09,980 RYAN: Are you okay? 812 00:36:10,020 --> 00:36:12,720 Yeah. Yeah. 813 00:36:12,750 --> 00:36:13,890 We got him. 814 00:36:13,920 --> 00:36:15,560 We're not done. 815 00:36:15,590 --> 00:36:17,690 We still haven't put Shane Tillman 816 00:36:17,730 --> 00:36:19,870 in that hotel room at the time of the murder. 817 00:36:19,890 --> 00:36:22,230 We still have to prove who killed Adel Foster. 818 00:36:24,570 --> 00:36:26,000 Anything on Shane's phone? 819 00:36:26,030 --> 00:36:28,500 I need to know what we've got before I question him. 820 00:36:28,540 --> 00:36:29,570 SIFTER: Well, nothing concrete. 821 00:36:29,600 --> 00:36:31,410 I'm heading in now for an update. 822 00:36:31,440 --> 00:36:33,270 KRUMITZ: Yeah! NELSON: That's what I'm talking about! 823 00:36:33,310 --> 00:36:34,410 We got it. 824 00:36:34,440 --> 00:36:36,210 We found proof. 825 00:36:37,010 --> 00:36:38,980 (stammers) 826 00:36:39,010 --> 00:36:40,910 I'm gonna call you back. 827 00:36:40,950 --> 00:36:42,980 Wh-What kind of proof did you find? 828 00:36:43,020 --> 00:36:46,420 Proof that Shane Tillman was at the scene of the crime. 829 00:36:46,450 --> 00:36:48,520 Proof that he murdered Adel Foster? 830 00:36:48,560 --> 00:36:49,890 If we're lucky, both. 831 00:36:49,920 --> 00:36:51,590 It's called a motion tracking chip. 832 00:36:51,630 --> 00:36:52,890 Most new smartphones have them, 833 00:36:52,930 --> 00:36:54,160 but most people don't know they exist. 834 00:36:54,200 --> 00:36:57,370 It's a motion co-processor that collects and stores motion data 835 00:36:57,400 --> 00:37:00,370 on the phone's accelerometers, gyroscopes and compasses. 836 00:37:00,400 --> 00:37:01,600 All right, so basically it just... 837 00:37:01,640 --> 00:37:02,870 it records movement. 838 00:37:02,900 --> 00:37:04,870 Yeah, it's how an exercise app knows the difference 839 00:37:04,910 --> 00:37:06,410 between when you're jogging versus walking, 840 00:37:06,440 --> 00:37:08,610 which direction you're headed-- 841 00:37:08,640 --> 00:37:10,510 pretty much however your phone's moving. 842 00:37:10,550 --> 00:37:11,760 KRUMITZ: As the phone moves, 843 00:37:11,780 --> 00:37:14,320 the motion tracking chip records all of it. 844 00:37:14,350 --> 00:37:16,050 It will detect a pitch, a roll, a tilt-- 845 00:37:16,080 --> 00:37:18,050 every movement the phone makes. 846 00:37:18,090 --> 00:37:20,600 Right, and it's always on. And it's separate from the main processor. 847 00:37:20,620 --> 00:37:22,590 Let me get this right-- so if data were altered 848 00:37:22,620 --> 00:37:24,930 on that device, it would never cross your minds 849 00:37:24,960 --> 00:37:26,590 to manipulate that file. 850 00:37:26,630 --> 00:37:28,600 Exactly. So we pulled all the data 851 00:37:28,630 --> 00:37:32,700 off Shane's motion tracking chip, and this is what we found. 852 00:37:32,730 --> 00:37:34,600 So the one on the left is the motion tracking chip 853 00:37:34,640 --> 00:37:37,000 from Shane's phone; the one on the right is Adele's. 854 00:37:37,040 --> 00:37:38,270 Yeah, we synced both of them up 855 00:37:38,310 --> 00:37:40,970 to the last time Adel's phone moved before she was murdered. 856 00:37:47,350 --> 00:37:49,350 NELSON: Most people keep their phones in their pants pockets. 857 00:37:49,380 --> 00:37:51,450 KRUMITZ: Which means the phone was recording their movement. 858 00:37:51,490 --> 00:37:54,890 So if two people were fighting, and we had both phones... 859 00:37:54,920 --> 00:37:56,320 SIFTER: Right, we could reenact the fight. 860 00:37:56,360 --> 00:37:57,490 NELSON: Yeah. 861 00:38:15,410 --> 00:38:16,710 Who is he?! 862 00:38:16,740 --> 00:38:18,880 Who is he? 863 00:38:18,910 --> 00:38:20,710 Tell me who he is! Leave me alone! 864 00:38:20,750 --> 00:38:22,750 I'm not your girlfriend anymore! 865 00:38:40,500 --> 00:38:42,370 Adel? 866 00:38:51,980 --> 00:38:54,580 Well, this not only puts Shane Tillman in the room 867 00:38:54,620 --> 00:38:58,120 at the time of the murder, it proves that he killed her. 868 00:39:04,890 --> 00:39:07,530 AVERY: You covered your tracks from every possible angle. 869 00:39:07,560 --> 00:39:09,530 You wiped your phone of any wrongdoing, 870 00:39:09,560 --> 00:39:11,530 pushed all the evidence to Evan's devices, 871 00:39:11,570 --> 00:39:14,840 you even hacked the hotel, wiped its security footage. 872 00:39:14,870 --> 00:39:16,840 RYAN: It was all very clever. 873 00:39:16,870 --> 00:39:19,070 But you forgot one thing. 874 00:39:19,110 --> 00:39:21,070 One thing most people don't know about-- 875 00:39:21,110 --> 00:39:23,880 your phone's motion tracking chip. 876 00:39:26,050 --> 00:39:29,720 Cyber-synchronized offender and victim. 877 00:39:31,720 --> 00:39:34,460 Records every movement. 878 00:39:34,490 --> 00:39:37,420 Proves you killed your girlfriend. 879 00:39:37,460 --> 00:39:38,930 (sniffles) 880 00:39:53,940 --> 00:39:55,940 What's this? 881 00:39:59,080 --> 00:40:00,410 NELSON: No! (Ryan stammers) 882 00:40:01,520 --> 00:40:03,080 No, no! You freed it?! 883 00:40:03,120 --> 00:40:04,750 Oh, what? 884 00:40:04,790 --> 00:40:07,450 Uh, there was a cup in the middle of the floor. 885 00:40:07,490 --> 00:40:08,920 Hey, welcome back. 886 00:40:08,960 --> 00:40:10,460 Good job. (grumbles) 887 00:40:10,490 --> 00:40:13,160 He has been preoccupied with a little spider. 888 00:40:13,190 --> 00:40:14,830 What is all that? (chuckles) 889 00:40:14,860 --> 00:40:16,530 What? Some compressed air. 890 00:40:16,560 --> 00:40:18,100 I was gonna turn it over, zap it, freeze it, 891 00:40:18,130 --> 00:40:19,530 then I was gonna set it free. 892 00:40:19,570 --> 00:40:20,930 Aw. Cryonic preservation? 893 00:40:20,970 --> 00:40:22,900 I'm not hunting that thing down again. 894 00:40:22,940 --> 00:40:25,840 Okay, I will help you look for your spider. 895 00:40:25,870 --> 00:40:26,870 Thank you. 896 00:40:26,910 --> 00:40:27,970 We'll find it, 897 00:40:28,010 --> 00:40:29,510 and Elijah will arrest it. Yeah. 898 00:40:29,540 --> 00:40:30,480 KRUMITZ: Well, now I have to help. 899 00:40:30,510 --> 00:40:32,510 Yeah. (shouts) 900 00:40:32,550 --> 00:40:34,150 Why... why would y'all do that? (laughter) 901 00:40:34,180 --> 00:40:35,620 Why would y'all do that?! 902 00:40:35,650 --> 00:40:39,620 Captioning sponsored by CBS 903 00:40:39,650 --> 00:40:41,660 Captioned by Media Access Group at WGBH access.wgbh.org