1 00:00:01,350 --> 00:00:02,350 My name is Avery Ryan. 2 00:00:02,390 --> 00:00:03,690 I was a victim of cyber crime. 3 00:00:03,720 --> 00:00:06,420 Like you, I posted on social media, 4 00:00:06,460 --> 00:00:09,190 checked my bank account balance online, 5 00:00:09,230 --> 00:00:11,190 even kept the confidential files 6 00:00:11,230 --> 00:00:13,400 of my psychological practice on my computer. 7 00:00:14,860 --> 00:00:18,170 Then I was hacked, and as a result, 8 00:00:18,200 --> 00:00:20,200 one of my patients was murdered. 9 00:00:20,240 --> 00:00:23,170 My investigation into her death led me to the FBI, 10 00:00:23,210 --> 00:00:25,740 where I joined a team of cyber experts 11 00:00:25,780 --> 00:00:28,650 to wage a war against a new breed of criminal 12 00:00:28,680 --> 00:00:31,510 hiding on the Deep Web... 13 00:00:31,550 --> 00:00:34,720 infiltrating our daily lives in ways we never imagined... 14 00:00:36,490 --> 00:00:38,450 ...faceless... 15 00:00:38,490 --> 00:00:40,620 nameless... 16 00:00:40,660 --> 00:00:42,460 lurking inside our devices, 17 00:00:42,490 --> 00:00:45,090 just a keystroke away. 18 00:01:04,180 --> 00:01:07,520 Are you kidding me? You guys got to back me up. 19 00:01:07,550 --> 00:01:09,490 YOUNG MAN: Sorry, dude. 20 00:01:12,220 --> 00:01:14,320 Guys, I'm out. I got to go. 21 00:01:37,610 --> 00:01:40,620 GPS VOICE: In 100 feet, turn right on Ferris Avenue. 22 00:01:46,320 --> 00:01:48,320 You have reached your destination. 23 00:02:11,920 --> 00:02:13,930 * 24 00:02:35,000 --> 00:02:36,640 MAN: Hey! 25 00:02:36,670 --> 00:02:37,740 What are you doing in my yard? 26 00:02:37,770 --> 00:02:39,170 (gunshot) 27 00:02:44,950 --> 00:02:46,950 MAN: Oh, no. 28 00:02:57,560 --> 00:02:58,930 Mm... (both laughing) 29 00:03:04,830 --> 00:03:06,540 (alarm beeping) Mm! 30 00:03:06,570 --> 00:03:08,570 I got it. 31 00:03:12,040 --> 00:03:13,910 (alarm stops) 32 00:03:15,650 --> 00:03:19,430 Is it hot in here to you? 33 00:03:19,450 --> 00:03:21,580 So I was thinking... 34 00:03:21,620 --> 00:03:23,690 Yeah? 35 00:03:23,720 --> 00:03:25,720 ...we could go pick up Michelle from your mom's house, 36 00:03:25,760 --> 00:03:27,570 we can go to a Nationals game. 37 00:03:27,590 --> 00:03:29,560 The three of us can have dinner. 38 00:03:29,590 --> 00:03:30,860 Today? 39 00:03:30,890 --> 00:03:32,430 Yeah. 40 00:03:32,460 --> 00:03:33,930 Is that really a good idea? 41 00:03:33,960 --> 00:03:35,530 You're doing it again. 42 00:03:35,570 --> 00:03:36,840 Instead of telling me how you're feeling, 43 00:03:36,870 --> 00:03:38,430 you're pretending to ask me a question. 44 00:03:38,470 --> 00:03:40,870 Elijah... we had such a good night. 45 00:03:40,900 --> 00:03:42,610 Yeah, and we could have an even better day. 46 00:03:48,510 --> 00:03:50,480 Look, if you don't want to go to a baseball game, 47 00:03:50,510 --> 00:03:53,450 we could do something else. I just... 48 00:03:53,480 --> 00:03:55,750 I thought we agreed we wouldn't rush. 49 00:03:57,350 --> 00:03:59,760 I'm just... I'm not ready to bring Michelle into this. 50 00:03:59,790 --> 00:04:03,290 This? Meaning us? Yeah. 51 00:04:03,330 --> 00:04:05,560 Elijah, sometime soon, you and I-- we're gonna 52 00:04:05,600 --> 00:04:08,370 have to deal with the real issues that broke us up. 53 00:04:08,400 --> 00:04:11,400 I want to know that we're solid before we tell Michelle. 54 00:04:11,440 --> 00:04:14,950 (scoffs) I... I was ready to talk about moving back in. 55 00:04:14,970 --> 00:04:16,740 (phone chiming) 56 00:04:22,710 --> 00:04:23,750 What? What's wrong? 57 00:04:23,780 --> 00:04:25,650 I'm so sorry. I've got to go. 58 00:04:25,680 --> 00:04:27,720 Oh, all right, well, we'll... we'll talk later? 59 00:04:27,750 --> 00:04:30,420 Yes. 60 00:04:34,520 --> 00:04:35,790 RYAN: Yesterday 15-year-old 61 00:04:35,830 --> 00:04:38,740 Spencer Chapman was accidentally shot to death 62 00:04:38,760 --> 00:04:40,660 with a gun hidden in a hollowed-out 63 00:04:40,700 --> 00:04:42,800 18-volt cordless drill. 64 00:04:44,370 --> 00:04:46,370 (gunshot) 65 00:04:54,440 --> 00:04:56,880 MUNDO: Let me guess-- the gun that shot Spencer was a 66 00:04:56,910 --> 00:04:58,810 custom-built .22-caliber semiautomatic pistol 67 00:04:58,850 --> 00:05:00,080 with no serial number. 68 00:05:00,120 --> 00:05:02,690 SIFTER: The drill case and choice of weapon-- 69 00:05:02,720 --> 00:05:04,450 they're both signatures of one distributor. 70 00:05:04,490 --> 00:05:05,950 Trigger is back in business. 71 00:05:05,990 --> 00:05:08,460 Wait, who's-who's Trigger? A Deep Web arms dealer 72 00:05:08,490 --> 00:05:10,360 we've been chasing for years. 73 00:05:10,390 --> 00:05:12,760 Sells guns to anybody willing to pay his price. 74 00:05:12,800 --> 00:05:13,830 He disguises the guns so that 75 00:05:13,860 --> 00:05:15,930 the postal and mailing services can't detect 'em. 76 00:05:15,970 --> 00:05:17,640 His customers get delivery 77 00:05:17,670 --> 00:05:19,000 right to their front door. KRUMITZ: Every time we get close, 78 00:05:19,040 --> 00:05:20,680 Trigger dumps his site, goes underground, 79 00:05:20,700 --> 00:05:22,000 and starts all over. 80 00:05:22,040 --> 00:05:23,940 And that is why he's number seven 81 00:05:23,970 --> 00:05:25,810 on the Cyber Most Wanted list. 82 00:05:25,840 --> 00:05:27,540 NELSON: Wait a minute, there's a Cyber Most Wanted list? 83 00:05:27,580 --> 00:05:28,710 Well, what number was I? 84 00:05:28,750 --> 00:05:30,420 Mm. You didn't make the list. 85 00:05:30,450 --> 00:05:31,650 KRUMITZ: Hey, in my heart, 86 00:05:31,680 --> 00:05:33,650 you were always number one. Guys, 87 00:05:33,680 --> 00:05:35,380 if Trigger is active, we got a very small 88 00:05:35,420 --> 00:05:37,520 window of opportunity to finally catch this guy. 89 00:05:37,550 --> 00:05:39,860 Crime scene found Spencer's prints on both the drill 90 00:05:39,890 --> 00:05:42,430 and the World Send package that was sent to his house 91 00:05:42,460 --> 00:05:44,390 a half an hour before he was shot. 92 00:05:44,430 --> 00:05:46,630 Well, did Spencer Chapman think it was a gun or a drill? 93 00:05:46,660 --> 00:05:48,660 Do we think this kid went on the Deep Web 94 00:05:48,700 --> 00:05:50,100 and bought the gun himself? 95 00:05:50,130 --> 00:05:52,540 Well, that's what you're going to Chicago to find out. 96 00:05:54,670 --> 00:05:56,670 Shall we? 97 00:06:01,810 --> 00:06:03,550 WOMAN: This can't be real. 98 00:06:03,580 --> 00:06:05,610 He's just a kid. 99 00:06:05,650 --> 00:06:07,520 I don't understand. 100 00:06:07,550 --> 00:06:10,120 You think that-that Spencer got a gun from... 101 00:06:10,150 --> 00:06:11,890 where? There's a part of the Internet 102 00:06:11,920 --> 00:06:13,760 where people can remain anonymous. 103 00:06:13,790 --> 00:06:15,560 It's called the Deep Web. 104 00:06:15,590 --> 00:06:17,590 We think your son had access to it. 105 00:06:17,630 --> 00:06:19,030 Who would sell a gun to a 15-year-old kid? 106 00:06:19,060 --> 00:06:22,900 A Deep Web arms dealer who doesn't care who he sells to. 107 00:06:22,930 --> 00:06:24,670 Spencer spent his weekly allowance 108 00:06:24,700 --> 00:06:26,840 on music and movies and video games. 109 00:06:26,870 --> 00:06:29,740 I'm telling you-- he didn't buy a gun. 110 00:06:31,110 --> 00:06:33,780 My son is dead 111 00:06:33,810 --> 00:06:35,910 and you are making him out to be the criminal. 112 00:06:35,950 --> 00:06:37,760 Look, I know this is difficult, 113 00:06:37,780 --> 00:06:39,110 but I have to ask these questions 114 00:06:39,150 --> 00:06:42,750 so we can find the person who is responsible. 115 00:06:42,790 --> 00:06:44,790 Did you ever go on to your son's social media accounts? 116 00:06:44,820 --> 00:06:47,160 Did you ever check his history on his computer? 117 00:06:47,190 --> 00:06:49,060 Yes, we do. 118 00:06:49,090 --> 00:06:50,930 We did it all the time. 119 00:06:50,960 --> 00:06:53,800 And Spencer understood the responsibilities of being online. 120 00:06:53,830 --> 00:06:56,030 And we had strict rules about what he could post 121 00:06:56,070 --> 00:06:57,680 and what sites he could visit. 122 00:06:57,700 --> 00:06:59,970 Ms. Ryan... 123 00:07:00,000 --> 00:07:02,610 our son was not who you're suggesting he might be. 124 00:07:06,080 --> 00:07:07,790 KRUMITZ: Spencer never 125 00:07:07,810 --> 00:07:10,680 accessed the Deep Web, but this kid was hiding a ton of stuff 126 00:07:10,710 --> 00:07:12,150 from his parents. Look at this. 127 00:07:12,180 --> 00:07:14,920 Notice anything weird? 128 00:07:16,290 --> 00:07:18,000 NELSON: Yeah, we might be looking 129 00:07:18,020 --> 00:07:21,160 at the only 15-year-old with no games, no Kik, no apps. 130 00:07:21,190 --> 00:07:22,830 Kid doesn't even have a FriendAgenda. 131 00:07:22,860 --> 00:07:24,890 Yeah, exactly. But check this out. 132 00:07:27,060 --> 00:07:28,930 This is Spencer's real tablet. 133 00:07:28,970 --> 00:07:31,010 NELSON: Oh, snap. He used a parental guidance app 134 00:07:31,030 --> 00:07:33,640 to hide what was on his tablet from his parents. Yup. 135 00:07:33,670 --> 00:07:35,570 Spencer gave his parents a passcode 136 00:07:35,610 --> 00:07:36,980 that only unlocked part of the tablet. 137 00:07:37,010 --> 00:07:38,670 That way, when they checked... Mm-hmm? 138 00:07:38,710 --> 00:07:40,740 ...all they saw was what he wanted them to see. 139 00:07:40,780 --> 00:07:41,740 Damn. 140 00:07:41,780 --> 00:07:42,910 That's legit, bro. 141 00:07:42,950 --> 00:07:45,910 If Spencer was hiding his online activity from his parents, 142 00:07:45,950 --> 00:07:47,280 what else was he hiding? 143 00:07:47,320 --> 00:07:49,650 You guys find anything? No evidence of the Deep Web 144 00:07:49,690 --> 00:07:51,650 on any of the devices, but this kid's got secrets, man. 145 00:07:51,690 --> 00:07:55,620 Well, Chicago PD recovered his cell phone from the scene. 146 00:07:55,660 --> 00:07:57,290 Let's see if that answers any questions. 147 00:07:57,330 --> 00:07:59,090 Spencer's parents 148 00:07:59,130 --> 00:08:00,830 say that they don't know Ramsey Scott, 149 00:08:00,860 --> 00:08:03,530 the man who witnessed Spencer's death, 150 00:08:03,570 --> 00:08:05,130 and that Spencer has no connection to him either. 151 00:08:05,170 --> 00:08:06,800 KRUMITZ: Well, let's just see about that. 152 00:08:11,140 --> 00:08:13,980 These coordinates match Ramsey Scott's home. 153 00:08:14,010 --> 00:08:15,540 Spencer wasn't just in the neighborhood. 154 00:08:15,580 --> 00:08:16,980 He went to his house on purpose. 155 00:08:17,010 --> 00:08:19,820 Yeah. It's time to find out what Ramsey Scott knows. 156 00:08:21,080 --> 00:08:22,280 DISPATCHER: Dispense all units to 157 00:08:22,320 --> 00:08:23,720 the Hoffman Carter Investments building 158 00:08:23,750 --> 00:08:25,120 at the 1100 block of Michigan Avenue. 159 00:08:25,150 --> 00:08:26,660 Shots fired. 160 00:08:37,000 --> 00:08:40,140 They've confirmed I.D. on the vic. It's Ramsey Scott. 161 00:08:40,170 --> 00:08:43,240 We found Spencer dead, and now this. 162 00:08:43,270 --> 00:08:44,970 All right, Spencer's death was an accident. 163 00:08:45,010 --> 00:08:47,310 This is murder. 164 00:08:47,340 --> 00:08:49,140 SIFTER: Chicago PD's 165 00:08:49,180 --> 00:08:51,010 turned the homicide investigation over to us. 166 00:08:51,050 --> 00:08:53,350 Without a doubt, it was premeditated murder. 167 00:08:53,380 --> 00:08:55,620 Ramsey Scott was shot with a .22-caliber 168 00:08:55,650 --> 00:08:58,790 semiautomatic pistol hidden in the shell of a power drill. 169 00:08:58,820 --> 00:09:00,720 Trigger was providing weapons for someone 170 00:09:00,760 --> 00:09:02,890 who clearly wanted Ramsey Scott dead. 171 00:09:02,930 --> 00:09:04,360 If, at first, you don't succeed... 172 00:09:04,390 --> 00:09:05,930 SIFTER: Wait a second, are you actually saying 173 00:09:05,960 --> 00:09:07,200 that Spencer Chapman went over 174 00:09:07,230 --> 00:09:09,670 to Ramsey Scott's house, in order to kill him? 175 00:09:09,700 --> 00:09:10,930 This was a 15-year-old boy. 176 00:09:10,970 --> 00:09:12,770 At this point, we can't rule it out. 177 00:09:12,800 --> 00:09:14,040 It looks like someone finished the job 178 00:09:14,070 --> 00:09:15,900 that Spencer failed to complete. 179 00:09:15,940 --> 00:09:17,970 If we can figure out the connection between Spencer and Ramsey... 180 00:09:18,010 --> 00:09:21,010 It would help us I.D. Ramsey's killer. 181 00:09:23,250 --> 00:09:25,880 I've been checking e-mails for two hours-- nothing. 182 00:09:25,920 --> 00:09:27,930 There's no apparent connection between Ramsey Scott 183 00:09:27,950 --> 00:09:29,920 and Spencer Chapman. I've looked at Spencer's calendar, 184 00:09:29,950 --> 00:09:31,990 FriendAgenda, all of his chats-- same thing. 185 00:09:32,020 --> 00:09:34,120 You think he really went to go shoot this guy? 186 00:09:34,160 --> 00:09:35,820 I mean, if I was 15 years old 187 00:09:35,860 --> 00:09:37,930 and somebody told me to go kill someone, I couldn't do it. 188 00:09:37,960 --> 00:09:40,030 I'm a grown-ass man, I couldn't even do it now. 189 00:09:40,060 --> 00:09:42,160 Really? You're fully grown? 190 00:09:42,200 --> 00:09:43,870 Best things come in small packages, Krummy. 191 00:09:45,800 --> 00:09:46,800 (sighs) 192 00:09:46,840 --> 00:09:49,140 RAMIREZ: What did I miss? No matches in Spencer 193 00:09:49,170 --> 00:09:50,740 and Ramsey's text messages. 194 00:09:50,770 --> 00:09:52,840 These two don't even have an app in common. Yeah. 195 00:09:52,880 --> 00:09:54,740 Scrubbed all these devices and got nothing. 196 00:09:54,780 --> 00:09:56,010 No connection between 197 00:09:56,050 --> 00:09:58,090 Spencer and Ramsey Scott, no digital evidence 198 00:09:58,110 --> 00:09:59,980 of Spencer purchasing a gun or a drill. 199 00:10:00,020 --> 00:10:01,920 Or even going on a Deep Web browser. 200 00:10:01,950 --> 00:10:03,920 You checked all the devices? 201 00:10:03,950 --> 00:10:05,350 Yeah, why? You read your 202 00:10:05,390 --> 00:10:06,920 probation document, listing all the devices 203 00:10:06,960 --> 00:10:08,660 you can't touch outside of work? 204 00:10:08,690 --> 00:10:10,030 All 162 pages? 205 00:10:10,060 --> 00:10:11,160 Yeah, I skimmed through it. 206 00:10:11,190 --> 00:10:13,260 Well, if you had read the whole thing, you would know 207 00:10:13,300 --> 00:10:15,300 that there's one device the FBI left out. 208 00:10:15,330 --> 00:10:17,070 One Spencer could have used to access 209 00:10:17,100 --> 00:10:19,030 a Deep Web browser. 210 00:10:19,070 --> 00:10:21,070 Good thing the FBI procedure is to grab everything 211 00:10:21,100 --> 00:10:23,740 plugged into the walls, because you guys are only looking 212 00:10:23,770 --> 00:10:26,240 into the obvious places. 213 00:10:26,280 --> 00:10:28,290 Game consoles are also computers. 214 00:10:28,310 --> 00:10:31,050 Modern ones even have the exact same capabilities-- 215 00:10:31,080 --> 00:10:33,080 messaging, apps... Internet connections. 216 00:10:33,120 --> 00:10:36,890 All of which we can recover data from. Raven, I love you. 217 00:10:36,920 --> 00:10:39,020 Wait a minute. Raven, you play Game Vex? 218 00:10:39,060 --> 00:10:40,200 No. 219 00:10:40,220 --> 00:10:43,030 I crush Game Vex. 220 00:10:47,760 --> 00:10:49,030 Spencer spent 221 00:10:49,070 --> 00:10:51,040 most of his time playing first-person shooters. 222 00:10:51,070 --> 00:10:53,700 KRUMITZ: Well, according to these logs, Spencer spent about 223 00:10:53,740 --> 00:10:55,400 six hours a day playing video games. 224 00:10:55,440 --> 00:10:57,870 Looks like, his favorite game, by far, 225 00:10:57,910 --> 00:10:59,780 was Blacklight: Retribution. 226 00:10:59,810 --> 00:11:02,110 Oh. It's an online multiplayer game. 227 00:11:02,150 --> 00:11:04,420 You play an agent working for a black ops organization. 228 00:11:04,450 --> 00:11:07,050 Each map is a different mission fighting terrorists. 229 00:11:07,080 --> 00:11:09,050 This is the leaderboard. 230 00:11:09,090 --> 00:11:11,800 MUNDO: Whoa. Check out his history. 231 00:11:11,820 --> 00:11:13,960 Spencer was pretty good at this. He's a top 50 player. 232 00:11:13,990 --> 00:11:15,090 Well, what happened? In December of last year 233 00:11:15,120 --> 00:11:18,030 he was doing so well, and suddenly he dropped in rank. 234 00:11:18,060 --> 00:11:19,330 RAMIREZ: Well, usually that means 235 00:11:19,360 --> 00:11:21,030 parents have cut down on game time. 236 00:11:21,060 --> 00:11:23,470 RYAN: Okay. But did any of this activity lead us to Trigger? 237 00:11:23,500 --> 00:11:25,900 RAMIREZ: Unfortunately, there's no evidence 238 00:11:25,940 --> 00:11:29,280 of Spencer using his Game Vex to access the Deep Web. 239 00:11:29,310 --> 00:11:31,020 NELSON: But we found something else. 240 00:11:31,040 --> 00:11:33,180 I recovered Spencer's Game Vex messages. 241 00:11:33,210 --> 00:11:35,910 Basically the in-console e-mail account. 242 00:11:35,950 --> 00:11:38,190 I did find this odd message between Spencer 243 00:11:38,210 --> 00:11:39,920 and a gamer with the handle VIPER75. 244 00:11:39,950 --> 00:11:42,150 You guys should check this out. 245 00:11:42,190 --> 00:11:46,200 MUNDO: "Your mission: go to 42.01665 246 00:11:46,220 --> 00:11:48,920 "and -87.45021. 247 00:11:48,960 --> 00:11:50,930 "Walk four paces north. Four paces east. 248 00:11:50,960 --> 00:11:52,930 "Drop package. Leave. 249 00:11:52,960 --> 00:11:55,330 You will be rewarded." Longitude and latitude. 250 00:11:55,360 --> 00:11:58,800 Looks like VIPER75 was sending Spencer on a real-world mission. 251 00:11:58,840 --> 00:12:00,010 Pull up the coordinates. 252 00:12:03,410 --> 00:12:05,970 SIFTER: Right. 253 00:12:06,010 --> 00:12:07,410 That's Ramsey Scott's house. 254 00:12:07,440 --> 00:12:09,110 Let's see the crime scene photos. 255 00:12:09,150 --> 00:12:12,190 Do we have an overall photo of the house? 256 00:12:12,220 --> 00:12:14,230 Great. Raven, 257 00:12:14,250 --> 00:12:15,980 highlight Spencer's footsteps 258 00:12:16,020 --> 00:12:19,190 from the coordinates to where we found his body. 259 00:12:20,220 --> 00:12:24,360 Four paces north and four paces east. 260 00:12:24,390 --> 00:12:27,360 "Drop package. Leave. You will be rewarded." 261 00:12:27,400 --> 00:12:29,200 The package was the gun. 262 00:12:29,230 --> 00:12:31,870 That's what Spencer was doing at Ramsey Scott's property. 263 00:12:31,900 --> 00:12:33,970 VIPER75 purchased the Deep Web gun, sent it 264 00:12:34,000 --> 00:12:36,200 to Spencer with instructions on where to put it. 265 00:12:36,240 --> 00:12:37,310 Spencer wasn't there to shoot Ramsey. 266 00:12:37,340 --> 00:12:39,170 He was just delivering the gun. 267 00:12:39,210 --> 00:12:42,180 Why did VIPER75 want Ramsey Scott dead? 268 00:12:42,210 --> 00:12:44,850 Or, for that matter, use a kid to deliver the gun? 269 00:12:44,880 --> 00:12:47,380 We need to learn more about VIPER75 to figure that out. 270 00:12:47,420 --> 00:12:49,920 He's our unknown variable. 271 00:12:49,950 --> 00:12:52,220 When we find him, we find our murderer. 272 00:12:52,260 --> 00:12:54,370 Yeah, and the icing on the cake, 273 00:12:54,390 --> 00:12:57,160 we take down Trigger. 274 00:13:01,630 --> 00:13:07,970 * I know you've deceived me, now here's a surprise * 275 00:13:09,910 --> 00:13:15,440 * I know that you have, 'cause there's magic in my eyes * 276 00:13:15,480 --> 00:13:19,610 * I can see for miles and miles * 277 00:13:19,650 --> 00:13:23,150 * I can see for miles and miles * 278 00:13:23,190 --> 00:13:27,520 * I can see for miles and miles * 279 00:13:27,560 --> 00:13:31,190 * And miles... 280 00:13:31,230 --> 00:13:33,330 * Oh, yeah. 281 00:13:56,390 --> 00:13:57,430 (chuckles) 282 00:13:57,450 --> 00:13:59,620 Oh, my God, it worked. 283 00:13:59,660 --> 00:14:02,600 Avery, Elijah, come in here. Check this out. 284 00:14:02,630 --> 00:14:03,740 RYAN: What do you got? 285 00:14:03,760 --> 00:14:06,930 Okay, most gamers enjoy the thrill of trash-talking 286 00:14:06,960 --> 00:14:09,630 the other players in real time via headset, right? Right. 287 00:14:09,670 --> 00:14:12,440 YOUNG MAN: Dude, you suck. Get out of the way. 288 00:14:12,470 --> 00:14:14,000 Those dudes were wearing heavy armor. 289 00:14:14,040 --> 00:14:16,000 Can't take them all out by myself. 290 00:14:16,040 --> 00:14:17,010 YOUNG MAN: You got pwned. 291 00:14:17,040 --> 00:14:17,870 There is a place 292 00:14:17,910 --> 00:14:19,940 that stores information unintentionally 293 00:14:19,980 --> 00:14:21,610 on a console. 294 00:14:21,640 --> 00:14:22,950 Thousands of bits of data 295 00:14:22,980 --> 00:14:24,680 are constantly being sent back and forth 296 00:14:24,710 --> 00:14:26,010 from the memory and the hard drive. 297 00:14:26,050 --> 00:14:27,480 It's called the swap space, 298 00:14:27,520 --> 00:14:31,050 and this data includes video and snippets of audio. 299 00:14:37,690 --> 00:14:40,930 Audio? Like Viper's voice? 300 00:14:40,960 --> 00:14:44,200 Exactly. So I wrote up a defrag program that will isolate 301 00:14:44,230 --> 00:14:48,340 any audio chats in the games between Spencer and VIPER75. 302 00:14:48,370 --> 00:14:51,210 Cool. Ready? Here we go. 303 00:14:51,240 --> 00:14:54,210 I'm running a defrag to consolidate the audio data 304 00:14:54,240 --> 00:14:56,580 so it makes sense when we play it back. 305 00:14:59,320 --> 00:15:01,560 SPENCER: I sent you... invite. Did you get it? 306 00:15:01,580 --> 00:15:04,020 VIPER75: Affirmative... for battle. 307 00:15:04,050 --> 00:15:06,050 Next time we play, 308 00:15:06,090 --> 00:15:07,560 I'll bring out the tox nade. 309 00:15:07,590 --> 00:15:10,090 SPENCER: Market area. Too many snipers. 310 00:15:10,130 --> 00:15:11,690 I... pass the level. 311 00:15:11,730 --> 00:15:13,030 Where's your dog? 312 00:15:13,060 --> 00:15:16,060 What's... name? 313 00:15:16,100 --> 00:15:17,370 SPENCER: Outside. Sam. 314 00:15:17,400 --> 00:15:18,970 VIPER75: When do your parents come home? 315 00:15:19,000 --> 00:15:20,640 SPENCER: They work all the time. 316 00:15:20,670 --> 00:15:22,600 Mission Commander, behind you! 317 00:15:22,640 --> 00:15:25,110 VIPER75: Thanks, Ghost37. 318 00:15:25,140 --> 00:15:28,080 Well, that got creepy fast. 319 00:15:28,110 --> 00:15:30,110 Did you hear those questions: 320 00:15:30,150 --> 00:15:33,020 When are your parents home? What's the dog's name? Yeah, 321 00:15:33,050 --> 00:15:35,150 this was an online casing of Spencer's home. 322 00:15:35,180 --> 00:15:37,120 Viper was profiling his target, establishing 323 00:15:37,150 --> 00:15:38,320 pattern of life, trying to figure out 324 00:15:38,350 --> 00:15:40,120 when Spencer was the most vulnerable. 325 00:15:40,160 --> 00:15:41,490 Through a game console. 326 00:15:41,520 --> 00:15:44,030 The online gaming world is a haven for predators: 327 00:15:44,060 --> 00:15:47,130 pedophiles, sex offenders, and radicalizers. 328 00:15:47,160 --> 00:15:49,500 They hide behind their handles to make friends with these kids, 329 00:15:49,530 --> 00:15:51,700 to earn their trust. These kids don't even know 330 00:15:51,730 --> 00:15:53,370 they're talking to someone whose goal 331 00:15:53,400 --> 00:15:55,040 is to take advantage of them. 332 00:15:55,070 --> 00:15:56,770 It's how Viper manipulated Spencer. 333 00:15:56,810 --> 00:15:59,120 I'm a gamer. I love playing online. 334 00:15:59,140 --> 00:16:02,110 But as a parent, Michelle is gonna hate me. 335 00:16:02,150 --> 00:16:04,190 She's not gonna get to do anything. You can always use 336 00:16:04,210 --> 00:16:07,350 the access controls-- just don't let her play online. I shouldn't have to. 337 00:16:07,380 --> 00:16:09,680 Krumitz, most parents are relieved when their kids 338 00:16:09,720 --> 00:16:11,720 are in the safety of their own home, playing video games, 339 00:16:11,750 --> 00:16:13,720 'cause they think it means they don't have to worry 340 00:16:13,760 --> 00:16:15,390 about who their kids are hanging out with, 341 00:16:15,420 --> 00:16:17,390 are they getting into trouble, are they safe. 342 00:16:17,430 --> 00:16:20,130 Now that's-that's just not true anymore. 343 00:16:20,160 --> 00:16:21,000 No parent 344 00:16:21,030 --> 00:16:22,630 would allow their child to go outside 345 00:16:22,670 --> 00:16:25,040 and play with a 45-year-old stranger. 346 00:16:25,070 --> 00:16:27,040 (phone rings) With this, it happens every day. 347 00:16:27,070 --> 00:16:29,570 Nelson, what's up? 348 00:16:29,610 --> 00:16:31,620 I'll be right there. 349 00:16:38,080 --> 00:16:39,780 We know why Spencer dropped off 350 00:16:39,820 --> 00:16:41,260 the Blacklight leaderboard so quickly. 351 00:16:41,280 --> 00:16:43,190 His avatar was hacked. 352 00:16:43,220 --> 00:16:44,790 Check this out. 353 00:16:44,820 --> 00:16:47,260 RAMIREZ: This is Spencer's avatar, Ghost37, 354 00:16:47,290 --> 00:16:50,190 when he was at the top of the leaderboard months ago. 355 00:16:50,230 --> 00:16:54,100 His inventory was loaded with the best weapons and armor. 356 00:16:57,270 --> 00:16:59,570 And this is our man Ghost37 right after he was hacked. 357 00:16:59,600 --> 00:17:01,500 I mean, dude lost his warzone battle armor, 358 00:17:01,540 --> 00:17:03,570 his breakguard legplates, and his volk helmet. 359 00:17:03,610 --> 00:17:05,610 I mean, everything. 360 00:17:07,410 --> 00:17:09,380 The hacker basically reset his character. 361 00:17:09,410 --> 00:17:12,380 That's months of time and effort down the drain. 362 00:17:12,420 --> 00:17:14,690 Not to mention the real-world money for upgrades. 363 00:17:14,720 --> 00:17:16,780 It would be completely devastating as a gamer. 364 00:17:16,820 --> 00:17:19,120 The psychology of loss is just as devastating, 365 00:17:19,160 --> 00:17:21,400 whether it's real-world or cyber. 366 00:17:21,420 --> 00:17:23,660 How does this relate to VIPER75? 367 00:17:23,690 --> 00:17:25,360 Guess who hacked Spencer. 368 00:17:25,390 --> 00:17:27,200 How do we know it was VIPER75? 369 00:17:27,230 --> 00:17:30,270 This is Viper's inventory on the same date Spencer was hacked-- 370 00:17:30,300 --> 00:17:31,670 December 26. 371 00:17:31,700 --> 00:17:33,670 Spencer lost his warzone battle armor, his volk helmet, 372 00:17:33,700 --> 00:17:36,400 and his breakguard legplates. 373 00:17:36,440 --> 00:17:37,710 So, on that same day, 374 00:17:37,740 --> 00:17:39,640 all those items showed up in Viper's inventory? 375 00:17:39,680 --> 00:17:41,190 RAMIREZ: Then, a few days later, 376 00:17:41,210 --> 00:17:44,180 VIPER75 sent Spencer a suit of titan armor 377 00:17:44,210 --> 00:17:45,650 and a polaris helmet, 378 00:17:45,680 --> 00:17:47,650 which is extremely rare in the game. 379 00:17:47,680 --> 00:17:49,120 And Spencer's 380 00:17:49,150 --> 00:17:51,690 been climbing that leaderboard ever since. 381 00:17:51,720 --> 00:17:54,160 So Viper hacks Spencer, then he played the role 382 00:17:54,190 --> 00:17:56,360 of savior and gave him a suit of armor. 383 00:17:56,390 --> 00:17:58,230 But it wasn't a gift. 384 00:17:58,260 --> 00:18:00,230 It's a trade for a favor; a task. 385 00:18:00,260 --> 00:18:01,830 I'll scratch your back, you deliver a gun. 386 00:18:01,860 --> 00:18:03,570 He was using his power as mission commander 387 00:18:03,600 --> 00:18:05,770 over his team in the real world. 388 00:18:05,800 --> 00:18:08,240 Search for any gamers in Chicago 389 00:18:08,270 --> 00:18:11,310 who rocketed up the leaderboard as quickly as Spencer did. 390 00:18:11,340 --> 00:18:15,340 I'm gonna go search for the identity of VIPER75. 391 00:18:18,950 --> 00:18:23,250 So Game Vex refuses to give us access to VIPER75's account. 392 00:18:23,290 --> 00:18:25,850 They do realize this is a federal investigation 393 00:18:25,890 --> 00:18:27,290 and we already have two dead. 394 00:18:27,320 --> 00:18:28,720 I made them well aware of that. 395 00:18:28,760 --> 00:18:30,330 They would only share two things: 396 00:18:30,360 --> 00:18:31,660 VIPER75 is using a VPN, 397 00:18:31,690 --> 00:18:33,260 and he set up his account 398 00:18:33,300 --> 00:18:34,860 with a prepaid credit card. 399 00:18:34,900 --> 00:18:36,300 He's covering his tracks, which means 400 00:18:36,330 --> 00:18:38,370 we won't be able to I.D. him from his account. 401 00:18:38,400 --> 00:18:40,300 Well, ever since Snowden went rogue, 402 00:18:40,340 --> 00:18:43,170 these little tech firms have become obsessed with privacy. 403 00:18:43,210 --> 00:18:45,310 Tell that to Spencer's parents. Avery, 404 00:18:45,340 --> 00:18:47,480 these tech companies are only concerned with the bottom line. 405 00:18:47,510 --> 00:18:49,540 Now, if customers found out that their private info 406 00:18:49,580 --> 00:18:51,550 was being given out, even to law enforcement, 407 00:18:51,580 --> 00:18:53,520 they'd just stop playing. 408 00:18:53,550 --> 00:18:55,180 But, look, I haven't given up. 409 00:18:55,220 --> 00:18:56,520 I will see a magistrate, 410 00:18:56,550 --> 00:18:58,820 try to get a warrant to let us into Viper's account. 411 00:18:58,850 --> 00:19:01,690 I just wish I were walking in there with a stronger case. 412 00:19:03,690 --> 00:19:05,260 MUNDO: Wow. 413 00:19:05,290 --> 00:19:06,230 He didn't look happy. 414 00:19:06,260 --> 00:19:07,230 Neither do you. 415 00:19:07,260 --> 00:19:10,330 Your call. 416 00:19:10,370 --> 00:19:12,800 Just Devon. We're... 417 00:19:12,840 --> 00:19:14,650 I don't know what we're doing. 418 00:19:17,840 --> 00:19:20,640 We seem to have very different definitions 419 00:19:20,680 --> 00:19:22,340 of our relationship. 420 00:19:22,380 --> 00:19:24,210 Did you really think it was gonna be easy? 421 00:19:24,250 --> 00:19:26,450 Yeah. I thought the hard part was done. 422 00:19:26,480 --> 00:19:28,280 It's okay to be scared. 423 00:19:29,620 --> 00:19:31,950 Okay, enough of the psychoanalysis. 424 00:19:31,990 --> 00:19:32,890 All right... 425 00:19:32,920 --> 00:19:34,760 Nelson and Raven brought me up to speed. 426 00:19:34,790 --> 00:19:37,760 I guess Viper hacked Spencer so he could groom him? 427 00:19:37,790 --> 00:19:39,930 First, Viper emotionally bonded with Spencer. 428 00:19:42,270 --> 00:19:43,810 He boosted Spencer's confidence. 429 00:19:45,700 --> 00:19:51,240 He invited Spencer to join his team on the battlefield. 430 00:19:51,270 --> 00:19:52,670 (video game gunfire) 431 00:19:58,380 --> 00:20:02,980 Viper became his mission commander, an authority figure. 432 00:20:03,020 --> 00:20:05,750 Then he hacked him. Took everything 433 00:20:05,790 --> 00:20:09,620 his online character had. Just ruined him in the game. 434 00:20:09,660 --> 00:20:10,830 And then poor Spencer turned 435 00:20:10,860 --> 00:20:12,660 to the last person he should've trusted. 436 00:20:12,700 --> 00:20:15,310 His new online friend Viper, who willingly restocked 437 00:20:15,330 --> 00:20:17,730 his weapons and his armor. 438 00:20:17,770 --> 00:20:19,800 Once he proved to Spencer 439 00:20:19,840 --> 00:20:22,410 that he could get him back in the game, he promised him 440 00:20:22,440 --> 00:20:24,670 something huge if he could complete a real-world mission. 441 00:20:24,710 --> 00:20:26,670 There are a lot of gamers out there. 442 00:20:26,710 --> 00:20:28,840 How did Viper select Spencer? 443 00:20:29,880 --> 00:20:31,850 The game did it for him. 444 00:20:31,880 --> 00:20:34,280 Viper was choosing the best players in Chicago 445 00:20:34,320 --> 00:20:36,280 who were in the top 50 on the leaderboard, 446 00:20:36,320 --> 00:20:37,820 and Spencer was one of them. 447 00:20:37,850 --> 00:20:38,620 RAMIREZ: We're at the tail end 448 00:20:38,650 --> 00:20:40,360 of our search for a second gamer 449 00:20:40,390 --> 00:20:41,690 who fits Spencer's profile. 450 00:20:41,720 --> 00:20:43,930 A former high-ranking player who had a sudden tumble. 451 00:20:43,960 --> 00:20:45,460 One who spends a lot of time in the game, 452 00:20:45,490 --> 00:20:46,890 is invested in his character, and has 453 00:20:46,930 --> 00:20:50,060 the most to lose. We narrowed the field down to players in Chicago 454 00:20:50,100 --> 00:20:51,470 by using the leaderboard. 455 00:20:51,500 --> 00:20:54,300 Uh, check out the last 24 hours. 456 00:21:02,110 --> 00:21:03,610 Ace. 457 00:21:03,650 --> 00:21:06,680 Look at his hours. Almost five a day. 458 00:21:06,720 --> 00:21:08,390 Can we get his address from his Game Vex player account? 459 00:21:08,420 --> 00:21:10,520 No. Sifter's having a hard time getting them to cooperate. 460 00:21:10,550 --> 00:21:12,750 Wait. Hold on. 461 00:21:12,790 --> 00:21:14,420 We might not even need them. 462 00:21:14,460 --> 00:21:16,090 Most gamers are monogamous with their handles, 463 00:21:16,120 --> 00:21:17,790 so, let me see something. 464 00:21:17,830 --> 00:21:20,460 Boom. 465 00:21:20,500 --> 00:21:21,900 This dude's got a ToggleFly account. 466 00:21:21,930 --> 00:21:24,100 We can get his IP address from this. 467 00:21:24,130 --> 00:21:26,400 RYAN: Call the service provider, get a physical address. 468 00:21:26,440 --> 00:21:30,310 It's time for Ace to hit pause. 469 00:21:31,410 --> 00:21:33,910 (rapid gunfire) 470 00:21:33,940 --> 00:21:35,740 MALE VOICE: The path is clear, Mission Commander. 471 00:21:35,780 --> 00:21:37,950 MUNDO: Tell us what you know about VIPER75. 472 00:21:37,980 --> 00:21:39,710 He's my hero. 473 00:21:39,750 --> 00:21:40,820 Your hero?! 474 00:21:40,850 --> 00:21:42,050 Yeah, on the battlefield. 475 00:21:42,080 --> 00:21:43,650 He's my mission commander. 476 00:21:43,690 --> 00:21:45,490 Major skills, always has my back. 477 00:21:45,520 --> 00:21:47,920 See, when I got hacked, I lost my polaris helmet, 478 00:21:47,960 --> 00:21:50,590 submachine guns, throwing knives, everything-- 479 00:21:50,630 --> 00:21:52,030 I was a noob all over again. 480 00:21:52,060 --> 00:21:54,500 And that's when VIPER75 contacted you? 481 00:21:54,530 --> 00:21:56,400 Yeah. He saved me. 482 00:21:56,430 --> 00:21:58,670 Sent me a gunman suit, dataluxe battlevest, 483 00:21:58,700 --> 00:22:00,470 warzone battle armor. 484 00:22:00,500 --> 00:22:02,440 I mean, I was like a god after that. 485 00:22:02,470 --> 00:22:04,040 Micah, did you deliver a package 486 00:22:04,070 --> 00:22:06,140 to the Hoffman Carter Investments Building last night? 487 00:22:06,170 --> 00:22:08,040 First rule of Viper's missions-- 488 00:22:08,080 --> 00:22:10,010 you don't talk about the missions. 489 00:22:10,050 --> 00:22:11,820 FATHER: Micah, what mission? 490 00:22:11,850 --> 00:22:14,820 What did you do? 491 00:22:14,850 --> 00:22:18,150 Answer his question now! Okay! 492 00:22:18,190 --> 00:22:19,320 All right! It's no big deal. 493 00:22:19,350 --> 00:22:21,690 All I did was deliver the package to the coordinates. 494 00:22:21,720 --> 00:22:23,490 There was a gun in that package, Micah. 495 00:22:23,530 --> 00:22:25,660 What?! A gun that was used to kill a man. 496 00:22:25,690 --> 00:22:27,760 I never looked inside! I didn't know what it was! 497 00:22:27,800 --> 00:22:29,400 Look, I wasn't supposed to look inside. 498 00:22:29,430 --> 00:22:31,030 Viper told me not to. 499 00:22:31,070 --> 00:22:32,270 And you're sure? 500 00:22:32,300 --> 00:22:36,100 You're sure that Micah that delivered the gun that-that...? 501 00:22:37,870 --> 00:22:41,010 MUNDO: VIPER75 sent you all sorts of stuff 502 00:22:41,040 --> 00:22:42,080 when you were hacked. 503 00:22:42,110 --> 00:22:43,880 What did he send you when you completed your mission? 504 00:22:43,910 --> 00:22:45,650 When you delivered the package? 505 00:22:45,680 --> 00:22:48,580 He gave me a katana sword. 506 00:22:48,620 --> 00:22:51,520 Micah and Spencer didn't know what was in those packages. 507 00:22:51,550 --> 00:22:53,150 They were just delivery men. 508 00:22:53,190 --> 00:22:55,160 Then Viper swooped in, took the gun 509 00:22:55,190 --> 00:22:57,460 and killed Ramsey Scott. 510 00:22:57,490 --> 00:22:59,160 Um, we might have a problem. 511 00:22:59,190 --> 00:23:02,100 Micah said that VIPER75 gave him a gunman suit, 512 00:23:02,130 --> 00:23:04,570 a dataluxe battlevest and warzone battle armor 513 00:23:04,600 --> 00:23:07,170 to replace what he lost when he had been hacked. 514 00:23:07,200 --> 00:23:09,040 It was part of VIPER's grooming. 515 00:23:09,070 --> 00:23:12,210 He created a need, and then he filled it. Right. 516 00:23:12,240 --> 00:23:14,010 But where'd he get the game inventory? 517 00:23:14,040 --> 00:23:15,880 See, weapons and armor can't be 518 00:23:15,910 --> 00:23:17,780 created by gamers, it can only be acquired. 519 00:23:17,810 --> 00:23:19,450 Now, Spencer didn't have a gunman suit 520 00:23:19,480 --> 00:23:20,650 or a dataluxe battlevest. 521 00:23:20,680 --> 00:23:22,480 So, where'd it come from? 522 00:23:22,520 --> 00:23:24,520 This is bigger than we thought. 523 00:23:24,550 --> 00:23:26,190 Another gamer's been hacked. 524 00:23:26,220 --> 00:23:28,160 He's recruiting another soldier, 525 00:23:28,190 --> 00:23:32,560 taking items, and awarding them to another. 526 00:23:32,600 --> 00:23:35,540 Yeah... one's gonna be all too happy to do Viper's bidding 527 00:23:35,560 --> 00:23:38,170 for an almighty katana sword. 528 00:23:39,840 --> 00:23:42,180 Nelson, I think I might have found what Avery 529 00:23:42,200 --> 00:23:43,840 and Elijah are looking for. 530 00:23:43,870 --> 00:23:45,110 Goldenbeast. 531 00:23:45,140 --> 00:23:47,210 Looks like he was hacked a few months back. 532 00:23:47,240 --> 00:23:48,210 Let's see. Shot up the leaderboards 533 00:23:48,240 --> 00:23:50,240 and broke into the top 50 just this morning, 534 00:23:50,280 --> 00:23:51,380 using that katana sword. 535 00:23:51,410 --> 00:23:54,180 The gift Micah received after he completed his mission. 536 00:23:54,220 --> 00:23:56,020 It means another gun was just delivered, 537 00:23:56,050 --> 00:23:57,650 and someone else is gonna get murdered. 538 00:23:57,690 --> 00:23:59,090 Yeah, if it hasn't happened already. 539 00:24:18,940 --> 00:24:20,910 FBI. 540 00:24:20,940 --> 00:24:22,110 We're looking for Corey Smith. 541 00:24:22,140 --> 00:24:24,510 Corey! 542 00:24:26,650 --> 00:24:27,820 Wait here. 543 00:24:30,890 --> 00:24:32,120 Stop! FBI! 544 00:24:46,100 --> 00:24:47,640 (panting) 545 00:24:48,270 --> 00:24:49,800 (panting) 546 00:24:51,310 --> 00:24:52,940 (panting) 547 00:24:52,980 --> 00:24:54,250 Don't come any closer. 548 00:24:54,280 --> 00:24:56,580 Calm down, okay? We just want to talk to you. 549 00:24:57,710 --> 00:24:59,080 Corey, no! 550 00:25:00,220 --> 00:25:03,160 (grunting, car alarm blaring) 551 00:25:05,790 --> 00:25:07,790 (car alarm blaring, Corey panting) 552 00:25:12,960 --> 00:25:16,100 I need an ambulance, 1218 East Superior Road. 553 00:25:16,130 --> 00:25:16,960 Okay. 554 00:25:17,000 --> 00:25:19,100 Don't move. We're getting you help. 555 00:25:19,130 --> 00:25:20,330 I thought I could make it. 556 00:25:20,370 --> 00:25:22,000 I make the jumps all the time. 557 00:25:23,240 --> 00:25:25,640 (groaning) 558 00:25:25,670 --> 00:25:27,610 Where's the package? 559 00:25:27,640 --> 00:25:28,840 What package? 560 00:25:28,880 --> 00:25:30,680 We know you're Goldenbeast. 561 00:25:30,710 --> 00:25:32,150 I'm AlphaArcher. 562 00:25:32,180 --> 00:25:33,750 Jessica's Goldenbeast. 563 00:25:34,820 --> 00:25:36,780 (siren approaching) 564 00:25:38,820 --> 00:25:40,820 Jessica? 565 00:25:42,390 --> 00:25:44,590 Jessica? 566 00:25:47,630 --> 00:25:50,200 (indistinct radio communication) 567 00:25:50,230 --> 00:25:53,640 Corey told the paramedics he ran because he had drugs. 568 00:25:53,670 --> 00:25:55,040 Now, the charge for drug paraphernalia 569 00:25:55,070 --> 00:25:56,200 is virtually nothing. 570 00:25:56,240 --> 00:25:57,970 And then he jumps. 571 00:25:58,010 --> 00:26:00,140 He had to have known he wasn't gonna make it. 572 00:26:00,180 --> 00:26:02,190 We just witnessed a prime example 573 00:26:02,210 --> 00:26:04,380 of Game Transfer Phenomena, 574 00:26:04,410 --> 00:26:06,850 or what we call "GTP under the influence." 575 00:26:06,880 --> 00:26:09,220 GTP? Sounds like something 576 00:26:09,250 --> 00:26:11,650 they'll be selling a pill for soon. (laughs) 577 00:26:11,690 --> 00:26:13,020 There's a documented history 578 00:26:13,060 --> 00:26:15,400 of videogamers experiencing involuntary impulses 579 00:26:15,420 --> 00:26:18,660 to perform gaming actions in the real world. 580 00:26:18,690 --> 00:26:20,030 The more they play the game, 581 00:26:20,060 --> 00:26:22,330 the more they are in the game, in real life. 582 00:26:22,360 --> 00:26:24,330 Corey thought that he could 583 00:26:24,370 --> 00:26:25,170 jump to that other balcony to escape. 584 00:26:25,200 --> 00:26:28,200 MALE VOICE: You got to jump, man! 585 00:26:28,240 --> 00:26:30,070 ...because he'd done it so many times in the game. 586 00:26:30,110 --> 00:26:32,750 That-That's just plain crazy. 587 00:26:34,340 --> 00:26:37,680 The shipping label matches the one 588 00:26:37,710 --> 00:26:39,980 on the box in Spencer's trash. 589 00:26:40,020 --> 00:26:41,790 Right here. Message from Viper 590 00:26:41,820 --> 00:26:43,690 to Goldenbeast came in this morning. 591 00:26:43,720 --> 00:26:48,320 "Your package will arrive today. When it does, deliver to 592 00:26:48,360 --> 00:26:52,330 41.8774 and -87.6106." 593 00:26:52,360 --> 00:26:55,300 Looks like it's Grant Park. 594 00:26:55,330 --> 00:26:56,960 "Walk eight paces north from 595 00:26:57,000 --> 00:26:58,670 between the trees, and four paces east." 596 00:26:58,700 --> 00:27:00,300 Goldenbeast already has her katana sword. 597 00:27:00,340 --> 00:27:02,180 Means she completed her mission. 598 00:27:02,200 --> 00:27:03,810 Viper might be at the park now. 599 00:27:03,840 --> 00:27:06,270 Let's go. 600 00:27:09,480 --> 00:27:13,080 So, Avery and Elijah are hunting down Goldenbeast and Viper. 601 00:27:13,120 --> 00:27:15,930 That leaves us the Deep Web arms dealer Trigger. 602 00:27:15,950 --> 00:27:18,350 Now, we haven't had any physical evidence 603 00:27:18,390 --> 00:27:21,090 that could possibly lead us to him until now. 604 00:27:21,120 --> 00:27:24,260 Got three gun shipping boxes, three postmarks. 605 00:27:24,290 --> 00:27:25,290 Did you find anything? 606 00:27:25,330 --> 00:27:27,390 I plotted those postmarks, 607 00:27:27,430 --> 00:27:28,330 and look at this. 608 00:27:28,360 --> 00:27:29,830 Trigger shipped from these three post offices 609 00:27:29,870 --> 00:27:30,910 to hide his location. 610 00:27:30,930 --> 00:27:34,940 More than likely, he lives within that triangle. 611 00:27:34,970 --> 00:27:36,270 That's a huge area. 612 00:27:36,300 --> 00:27:37,740 That's almost all of Hillsborough County, Florida. 613 00:27:37,770 --> 00:27:39,140 Yeah, too big to search. 614 00:27:39,170 --> 00:27:40,370 What if he finds us? 615 00:27:40,410 --> 00:27:42,410 Let's slip him a cookie. 616 00:27:42,440 --> 00:27:43,410 What, a supercookie? 617 00:27:43,450 --> 00:27:44,960 Yeah, let's do that. 618 00:27:44,980 --> 00:27:47,010 What is a... what is a supercookie? 619 00:27:47,050 --> 00:27:48,120 It's like tagging a migrating animal. 620 00:27:48,150 --> 00:27:50,280 Once an animal, or in this case, an I.P. address, 621 00:27:50,320 --> 00:27:51,850 gets tagged, we can follow it 622 00:27:51,890 --> 00:27:53,150 wherever it goes. 623 00:27:53,190 --> 00:27:54,260 Well, how do you attach this supercookie 624 00:27:54,290 --> 00:27:55,420 to a criminal in the Deep Web? 625 00:27:55,460 --> 00:27:56,290 Yeah, but we got to get the target 626 00:27:56,320 --> 00:27:57,760 to click the link or open an e-mail. 627 00:27:57,790 --> 00:27:58,830 Got to trick 'em. 628 00:27:58,860 --> 00:28:01,400 What if we put out a news article on the Internet 629 00:28:01,430 --> 00:28:02,830 about young Spencer being killed 630 00:28:02,870 --> 00:28:05,380 with a Deep Web gun hidden in a power drill? 631 00:28:05,400 --> 00:28:06,430 I mean, that would get Trigger's attention, 632 00:28:06,470 --> 00:28:07,870 and get him to click on the article. 633 00:28:07,900 --> 00:28:09,070 I mean, like anyone else 634 00:28:09,100 --> 00:28:09,940 who follows that link, 635 00:28:09,970 --> 00:28:11,740 a supercookie will embed itself 636 00:28:11,770 --> 00:28:13,040 in a part of the operating system 637 00:28:13,080 --> 00:28:15,750 that he can't see or access. 638 00:28:15,780 --> 00:28:17,780 That article could get thousands of hits. 639 00:28:17,810 --> 00:28:19,150 I mean, how will we know which one is Trigger? 640 00:28:19,180 --> 00:28:20,480 KRUMITZ: Well, we can't know for sure, 641 00:28:20,520 --> 00:28:21,660 but the list of suspects that click that article, 642 00:28:21,680 --> 00:28:26,390 and go back into the Deep Web will be way smaller. 643 00:28:26,420 --> 00:28:29,060 Yeah, but, again, why would this guy, who's never been caught... 644 00:28:29,090 --> 00:28:31,090 I mean, why would he click on that article, 645 00:28:31,130 --> 00:28:33,130 let alone read it? RAMIREZ: I think it has something 646 00:28:33,160 --> 00:28:35,160 to do with his narcissistic desire 647 00:28:35,200 --> 00:28:36,430 to read about himself. 648 00:28:36,460 --> 00:28:38,500 Oh, snap. Look. It's the next Avery Ryan. 649 00:28:38,530 --> 00:28:40,840 KRUMITZ: Well, practically speaking, 650 00:28:40,870 --> 00:28:42,140 I'd say he'd probably click on the article 651 00:28:42,170 --> 00:28:43,500 to find out exactly how much we know about him. 652 00:28:43,540 --> 00:28:45,510 Yeah, all right, this makes sense. 653 00:28:45,540 --> 00:28:47,880 Okay, you write the article, 654 00:28:47,910 --> 00:28:49,910 and I will contact the newspapers in the Tampa area. 655 00:28:49,950 --> 00:28:51,960 We will get this posted on their homepages. 656 00:28:55,180 --> 00:28:56,850 DISPATCH: All units dispatch to Grant Park. 657 00:28:56,890 --> 00:28:59,160 Possible suspect in the area. 658 00:28:59,190 --> 00:29:01,960 (sirens blaring) 659 00:29:09,200 --> 00:29:11,070 Chicago PD just picked up Goldenbeast. 660 00:29:11,100 --> 00:29:13,230 Viper trains them well. She's not talking. 661 00:29:18,540 --> 00:29:19,710 We don't need her. 662 00:29:19,740 --> 00:29:22,510 Longitude and latitude places her in this area of the park. 663 00:29:22,540 --> 00:29:23,780 All right. 664 00:29:23,810 --> 00:29:27,150 What was it, eight paces north from between the trees, right? 665 00:29:29,620 --> 00:29:31,820 And four paces east. 666 00:29:38,860 --> 00:29:40,900 Avery, I found it. 667 00:29:40,930 --> 00:29:42,260 Same type of drill case. 668 00:29:44,300 --> 00:29:46,600 It's empty. Damn it! We're too late. 669 00:29:46,630 --> 00:29:48,240 VIPER75 has the gun. 670 00:29:48,270 --> 00:29:50,140 Well, we know he likes to kills his victims 671 00:29:50,170 --> 00:29:52,170 as close as possible to the drop-off location 672 00:29:52,210 --> 00:29:54,310 to minimize his contact with the murder weapon. 673 00:29:54,340 --> 00:29:56,080 He should still be in the park. 674 00:29:56,110 --> 00:29:58,910 There's so many people. Anybody could be the suspect. 675 00:29:58,950 --> 00:30:01,350 RYAN: Or worse yet-- 676 00:30:01,380 --> 00:30:03,180 a victim. 677 00:30:12,590 --> 00:30:14,400 (gunfire, screaming) 678 00:30:14,430 --> 00:30:16,100 Came from this direction. 679 00:30:16,130 --> 00:30:18,370 (people screaming) 680 00:30:22,640 --> 00:30:24,240 (panting) 681 00:30:24,270 --> 00:30:25,370 Elijah. 682 00:30:25,410 --> 00:30:27,110 The gun. 683 00:30:27,140 --> 00:30:29,980 Yeah, but no body. 684 00:30:30,010 --> 00:30:31,150 You think he made us, 685 00:30:31,180 --> 00:30:32,180 fired the gunshot as a distraction 686 00:30:32,210 --> 00:30:33,210 so he could escape? 687 00:30:33,250 --> 00:30:36,320 He's done here. 688 00:30:52,200 --> 00:30:53,000 (phone ringing) 689 00:30:53,040 --> 00:30:55,450 This is Raven. 690 00:30:55,470 --> 00:30:57,270 Raven, I need you to do a tower dump. 691 00:30:57,310 --> 00:30:59,280 Give me all the numbers to all the cell phones that connect 692 00:30:59,310 --> 00:31:01,980 to the cell towers around Grant Park beginning... 693 00:31:02,010 --> 00:31:03,410 15 minutes ago. 694 00:31:03,450 --> 00:31:05,660 I'm on it. I'm pulling it up now. 695 00:31:17,630 --> 00:31:18,670 Got another one. 696 00:31:18,690 --> 00:31:21,700 Yeah, 64.167.84.259. 697 00:31:21,730 --> 00:31:23,400 All right, I'm tracking it 698 00:31:23,430 --> 00:31:25,430 right now. 699 00:31:29,340 --> 00:31:30,600 SIFTER: What is that insanity? 700 00:31:30,640 --> 00:31:33,710 That is us tracking the supercookie results 701 00:31:33,740 --> 00:31:35,940 to get to Trigger, our gun dealer. 702 00:31:35,980 --> 00:31:37,280 Just got another Deep Web hit. 703 00:31:37,310 --> 00:31:38,650 NELSON: False alarm. 704 00:31:38,680 --> 00:31:40,380 Just a dude checking out some banned books. 705 00:31:40,420 --> 00:31:42,460 This is like looking for a needle in a haystack. 706 00:31:42,480 --> 00:31:45,120 And all those people clicked on the news article 707 00:31:45,150 --> 00:31:46,720 we created? Yeah. Now we can see 708 00:31:46,750 --> 00:31:47,890 whatever Web site they visit. Yeah, and get an alert 709 00:31:47,920 --> 00:31:50,360 if they visit the Deep Web. It's pretty sweet, right? 710 00:31:50,390 --> 00:31:52,460 Of those, how many visited the Deep Web? 711 00:31:52,490 --> 00:31:54,730 Hundreds. Anybody doing anything illegal? 712 00:31:54,760 --> 00:31:56,160 Mostly hackers swapping code. 713 00:31:56,200 --> 00:31:57,430 Others just, you know, 714 00:31:57,470 --> 00:31:58,480 shopping for stolen comic books, 715 00:31:58,500 --> 00:32:00,370 that type of stuff. And of course, 716 00:32:00,400 --> 00:32:03,670 the bread and butter of the Internet: Porn. 717 00:32:03,710 --> 00:32:04,680 Huh? 718 00:32:04,710 --> 00:32:06,240 I'm not sure those words should 719 00:32:06,270 --> 00:32:07,240 go together in a sentence, but... 720 00:32:07,280 --> 00:32:08,720 (beeping) We got another one. 721 00:32:08,740 --> 00:32:10,180 Sweet, all right. These are all the 722 00:32:10,210 --> 00:32:12,110 Web sites our supercookie has detected this person 723 00:32:12,150 --> 00:32:13,280 made a visit to. 724 00:32:14,320 --> 00:32:18,020 At the top of the list, you can see our article. 725 00:32:18,050 --> 00:32:20,550 See that red one at the bottom-- 726 00:32:20,590 --> 00:32:22,690 dot.mist-- that's Deep Web. 727 00:32:22,720 --> 00:32:25,230 We might actually have something here. 728 00:32:25,260 --> 00:32:28,000 Arsenal. Anonymous handguns. Is this him? Is this Trigger? 729 00:32:28,030 --> 00:32:30,000 There's only one way to find out. 730 00:32:30,030 --> 00:32:32,770 Let's see... that's it! 731 00:32:32,800 --> 00:32:35,070 That's Trigger's Deep Web marketplace. 732 00:32:35,100 --> 00:32:36,740 This is it. How do we find him? 733 00:32:36,770 --> 00:32:38,440 Well, we've got the IP address, 734 00:32:38,470 --> 00:32:40,010 so we have the location: 735 00:32:40,040 --> 00:32:41,240 Tampa Public Library. 736 00:32:41,280 --> 00:32:42,540 It's easier for Trigger to stay 737 00:32:42,580 --> 00:32:44,750 anonymous when he logs on at a public place. 738 00:32:44,780 --> 00:32:46,580 (whoops) Oh, yeah. 739 00:32:46,610 --> 00:32:49,220 Um... Just... just... all right. 740 00:33:07,340 --> 00:33:08,550 (over radio com): I've spotted Trigger. 741 00:33:08,570 --> 00:33:12,270 Green shirt, southwest work station. 742 00:33:19,380 --> 00:33:21,180 Remember, this whole case is shot 743 00:33:21,220 --> 00:33:22,680 if he's able to lock us out. 744 00:33:22,720 --> 00:33:25,050 Separate him from the keyboard immediately. 745 00:33:25,090 --> 00:33:27,520 Don't let him shut the computer down. 746 00:33:28,790 --> 00:33:30,290 Go, go, go! 747 00:33:32,730 --> 00:33:34,430 (grunts) (people shrieking) FBI! 748 00:33:34,460 --> 00:33:36,730 Remain calm and clear the area. 749 00:33:39,170 --> 00:33:40,570 Stay down. 750 00:33:45,810 --> 00:33:48,680 Yeah, we got you, Trigger. You have the right to remain silent. 751 00:33:48,710 --> 00:33:50,710 I suggest you take advantage of that right. 752 00:33:52,350 --> 00:33:53,310 What do we got? All right, 753 00:33:53,350 --> 00:33:55,580 he's logged in to his Deep Web gun sales site. 754 00:33:55,620 --> 00:33:57,480 Looks like VIPER75 paid for three guns 755 00:33:57,520 --> 00:33:58,720 shipped to addresses matching 756 00:33:58,750 --> 00:33:59,750 Spencer Chapman, 757 00:33:59,790 --> 00:34:01,220 Micah Gordon 758 00:34:01,260 --> 00:34:02,560 and Jessica Pope. 759 00:34:02,590 --> 00:34:03,760 AKA Goldenbeast. Okay. 760 00:34:03,790 --> 00:34:06,090 Wait a minute. 761 00:34:06,130 --> 00:34:07,790 We've got an order for a Walther PPK/S pistol 762 00:34:07,830 --> 00:34:09,830 to be sent to a Chicago address. 763 00:34:09,860 --> 00:34:11,700 The tracking number says it was just delivered. 764 00:34:12,770 --> 00:34:15,070 Means the hit is still on. 765 00:34:16,500 --> 00:34:18,610 Avery, we've got I.D. on two of the occupants 766 00:34:18,640 --> 00:34:20,440 of the address where the gun is being delivered. 767 00:34:20,480 --> 00:34:23,150 One male, one female, each of them has a smartphone. 768 00:34:23,180 --> 00:34:24,810 KRUMITZ: And we spoke to their cell service providers and 769 00:34:24,850 --> 00:34:26,850 we are up on their location. We're sending it to you now. 770 00:34:28,850 --> 00:34:30,580 It's all you two. RYAN: We got it. 771 00:34:30,620 --> 00:34:32,120 All right, our targets 772 00:34:32,150 --> 00:34:33,690 are moving in different directions. 773 00:34:33,720 --> 00:34:34,960 We're gonna have to split up. 774 00:34:34,990 --> 00:34:37,890 One of them's gonna drop off a gun that's gonna kill someone. 775 00:34:37,930 --> 00:34:40,340 We have to stop them before they get to Viper. 776 00:34:48,540 --> 00:34:50,870 RAMIREZ: Avery, the tower dump got us a match. 777 00:34:50,910 --> 00:34:53,220 Viper's next target is Kim Hawthorne. 778 00:34:53,240 --> 00:34:55,140 I'm sending you her address. 779 00:35:17,800 --> 00:35:20,270 RYAN: VIPER75. 780 00:35:25,270 --> 00:35:26,540 You got the wrong guy. 781 00:35:26,570 --> 00:35:28,240 (chuckles) Really? 782 00:35:28,280 --> 00:35:30,880 So you're not here to kill Kim Hawthorne? 783 00:35:30,910 --> 00:35:32,880 But this is her building, right? 784 00:35:32,910 --> 00:35:34,420 Who are you? 785 00:35:34,450 --> 00:35:36,380 How do you know that name? 786 00:35:36,420 --> 00:35:39,350 Special Agent Avery Ryan, FBI. 787 00:35:39,390 --> 00:35:41,520 You were smart when you shot the gun in the park. 788 00:35:41,560 --> 00:35:42,960 You made it pretty tough to determine 789 00:35:42,990 --> 00:35:44,760 who your intended victim was, 790 00:35:44,790 --> 00:35:46,930 till you came here tonight. 791 00:35:48,900 --> 00:35:51,830 We compared every phone number 792 00:35:51,870 --> 00:35:55,340 that pinged a cell tower near Grant Park 793 00:35:55,370 --> 00:35:56,270 during your little stunt, 794 00:35:56,300 --> 00:35:58,640 and all the cell phones in this area. 795 00:35:58,670 --> 00:36:01,410 And there was one in common: 796 00:36:01,440 --> 00:36:03,710 Kim Hawthorne. 797 00:36:03,750 --> 00:36:06,760 We know the connection between Ramsey Scott and Kim Hawthorne. 798 00:36:06,780 --> 00:36:10,250 They were both witnesses at your father's trial. 799 00:36:10,290 --> 00:36:12,230 He was serving 15 years 800 00:36:12,250 --> 00:36:14,620 (alarm ringing) for felony bank robbery. 801 00:36:14,660 --> 00:36:16,720 Aah! 802 00:36:16,760 --> 00:36:19,960 VIPER75: They're both lying bastards. My father got 803 00:36:19,990 --> 00:36:21,830 locked up and was murdered in prison. 804 00:36:21,860 --> 00:36:23,730 They deserve to die, not him. 805 00:36:23,770 --> 00:36:25,940 Your father was a criminal and so are you. 806 00:36:34,680 --> 00:36:37,580 And now you tried to kill a federal agent. 807 00:36:37,610 --> 00:36:41,350 Lucky for me, we got here before you did. 808 00:36:56,960 --> 00:36:59,000 I'll find another way. 809 00:36:59,030 --> 00:37:01,470 I'll get my revenge. 810 00:37:01,500 --> 00:37:02,800 You can't stop me. 811 00:37:06,410 --> 00:37:07,570 (tires screech) 812 00:37:07,610 --> 00:37:09,680 (sirens wailing) Freeze! 813 00:37:12,450 --> 00:37:14,380 Don't move. 814 00:37:15,380 --> 00:37:16,750 Game over. 815 00:37:16,780 --> 00:37:19,620 I guess so. 816 00:37:40,540 --> 00:37:43,880 (sighs) I think it's time to lay off the gaming for a while. 817 00:37:43,910 --> 00:37:46,550 (laughs) Leave it to the kids. 818 00:37:46,580 --> 00:37:48,350 Just do it in moderation. 819 00:37:48,380 --> 00:37:50,980 Maybe turn off the chat function. 820 00:37:51,020 --> 00:37:53,950 Everybody listen up. 821 00:37:53,990 --> 00:37:56,890 What we do here is one of the hardest jobs there is: 822 00:37:56,920 --> 00:37:59,330 chasing nameless, faceless criminals 823 00:37:59,360 --> 00:38:00,660 who hide behind computers. 824 00:38:00,700 --> 00:38:02,410 It takes dedication, 825 00:38:02,430 --> 00:38:03,900 skills, 826 00:38:03,930 --> 00:38:05,330 and patience. 827 00:38:05,370 --> 00:38:07,470 Which is why it's important for us 828 00:38:07,500 --> 00:38:09,440 to recognize our victories. 829 00:38:09,470 --> 00:38:11,970 Krumitz, please pull up the list. 830 00:38:12,010 --> 00:38:14,580 Mm-hmm. 831 00:38:17,110 --> 00:38:18,810 You know what to do. 832 00:38:21,580 --> 00:38:24,080 (whooping, applause) 833 00:38:24,120 --> 00:38:25,350 Nice work. 834 00:38:25,390 --> 00:38:28,690 Ah. Yeah. 835 00:38:29,720 --> 00:38:31,760 Way to go. Nice, nice. 836 00:38:31,790 --> 00:38:33,690 (whoops) 837 00:38:33,730 --> 00:38:36,400 KRUMITZ: Oh, well, 838 00:38:36,430 --> 00:38:37,330 that was short-lived. 839 00:38:37,370 --> 00:38:39,610 Still can't believe I wasn't on the list. 840 00:38:39,630 --> 00:38:42,470 I was. Y'all punking me, right? 841 00:38:42,500 --> 00:38:44,000 Like, I know I'm on the list, I... 842 00:38:44,040 --> 00:38:46,440 I'm really not on the list? For real? 843 00:38:48,640 --> 00:38:50,910 Sorry to bother you at work. 844 00:38:50,950 --> 00:38:52,860 No, no, no, it's fine. No, we just, uh, 845 00:38:52,880 --> 00:38:54,580 we just solved a case, so... 846 00:38:54,620 --> 00:38:57,020 it's a good day. 847 00:38:57,050 --> 00:38:59,020 Just got even better. 848 00:38:59,050 --> 00:39:00,590 Sounds like it. 849 00:39:02,420 --> 00:39:04,760 You know, when I heard your voice mail... 850 00:39:04,790 --> 00:39:07,090 Okay, about the voice mail, listen, I'm-I'm sorry. 851 00:39:07,130 --> 00:39:10,000 I... I should not have given you that ultimatum. 852 00:39:10,030 --> 00:39:11,770 No, you were right. 853 00:39:11,800 --> 00:39:13,870 It has to be all or nothing. 854 00:39:16,740 --> 00:39:19,170 And, uh... 855 00:39:19,210 --> 00:39:20,770 I want it all. 856 00:39:20,810 --> 00:39:22,880 You know, I thought about 857 00:39:22,910 --> 00:39:25,980 why we split up in the first place. 858 00:39:26,010 --> 00:39:28,780 We weren't good at saying what we wanted 859 00:39:28,820 --> 00:39:30,520 or how we felt. 860 00:39:30,550 --> 00:39:32,050 No, we were... 861 00:39:34,120 --> 00:39:35,620 ...we were afraid. 862 00:39:37,830 --> 00:39:41,040 I stayed so we could be together. 863 00:39:41,060 --> 00:39:43,060 All three of us. 864 00:39:57,780 --> 00:39:59,710 Michelle and I will see you at home. 865 00:40:04,190 --> 00:40:06,530 (laughing) 866 00:40:06,550 --> 00:40:07,850 You good? 867 00:40:07,890 --> 00:40:09,460 Better than good. 868 00:40:09,490 --> 00:40:11,590 RAMIREZ: Who's in? NELSON: Oh, hell, yeah. 869 00:40:11,630 --> 00:40:12,860 Pass the controller. 870 00:40:12,890 --> 00:40:14,660 I'll show you how it's done, okay? 871 00:40:14,700 --> 00:40:16,230 You talking smack to me? Come on, 872 00:40:16,260 --> 00:40:17,830 you want to play with these guys. 873 00:40:17,870 --> 00:40:19,540 Uh, actually, if it's okay with you, I'm gonna... 874 00:40:19,570 --> 00:40:20,730 I'm gonna go home. 875 00:40:20,770 --> 00:40:21,840 Mm...! 876 00:40:21,870 --> 00:40:23,970 All right, Krumitz, are you in? 877 00:40:24,010 --> 00:40:25,820 No. No way. 878 00:40:25,840 --> 00:40:27,970 Come on, bro. What? No. 879 00:40:28,010 --> 00:40:29,780 Okay, I'm in, I'm in. Can't wait All right, Sifter. 880 00:40:29,810 --> 00:40:31,810 to see the look on my son's face when you teach me 881 00:40:31,850 --> 00:40:33,610 how to "pwn" him. 882 00:40:34,550 --> 00:40:37,150 What? I listen when you guys talk. 883 00:40:37,180 --> 00:40:40,690 All right, you've been warned, I'm gonna smoke you. 884 00:40:40,720 --> 00:40:43,560 That doesn't seem likely. I think not. 885 00:40:43,590 --> 00:40:44,830 Oh, look at that. Sifter, you gotta move 886 00:40:44,860 --> 00:40:46,660 You're going the wrong way. your player first. 887 00:40:46,690 --> 00:40:48,860 I'm just looking for the "pwn" button here. There's no "pwn" button. 888 00:40:48,900 --> 00:40:50,560 RAMIREZ: Oh, I'm right behind you, Avery. 889 00:40:50,600 --> 00:40:52,200 Don't even think about it-- that's mine, that's mine! 890 00:40:52,230 --> 00:40:56,170 Captioning sponsored by CBS 891 00:40:56,200 --> 00:40:58,200 Captioned by Media Access Group at WGBH access.wgbh.org