1
00:00:03,097 --> 00:00:05,297
(whistling)
2
00:00:07,901 --> 00:00:10,102
(classical music playing)
3
00:00:38,665 --> 00:00:41,500
♪ ♪
4
00:01:10,531 --> 00:01:12,797
♪ ♪
5
00:01:14,768 --> 00:01:15,901
MALE OPERATOR:
911. What is your emergency?
6
00:01:15,903 --> 00:01:17,068
MAN:
I just witnessed a hit and run.
7
00:01:17,070 --> 00:01:18,136
FEMALE OPERATOR:
911. What is your emergency?
8
00:01:18,138 --> 00:01:18,904
WOMAN: My apartment
building's on fire.
9
00:01:18,906 --> 00:01:20,005
There are people still inside!
10
00:01:20,007 --> 00:01:20,939
FEMALE OPERATOR:
911. What's your emergency?
11
00:01:20,941 --> 00:01:21,973
CHILD:
How many people...
12
00:01:21,975 --> 00:01:23,175
WOMAN:
I hear screams!
13
00:01:23,177 --> 00:01:24,609
MALE OPERATOR:
911. What is your emergency?
14
00:01:24,611 --> 00:01:26,645
I need to get to a hospital.
15
00:01:26,647 --> 00:01:27,979
I'm five months pregnant.
16
00:01:27,981 --> 00:01:29,748
I'm feeling sharp,
stabbing pains.
17
00:01:29,750 --> 00:01:31,883
(gasping)
18
00:01:31,885 --> 00:01:33,618
It's too soon for contractions.
19
00:01:33,620 --> 00:01:36,221
I'm at 249 West McCoy Street.
20
00:01:38,192 --> 00:01:41,126
Hello? Hello?
21
00:01:41,128 --> 00:01:43,295
MALE OPERATOR:
911. What is your emergency?
22
00:01:43,297 --> 00:01:45,564
I need help.
I need an ambulance.
23
00:01:45,566 --> 00:01:47,999
I think my wife is
having a heart attack.
24
00:01:48,001 --> 00:01:49,834
She's collapsed.
What-what do I do?
25
00:01:49,836 --> 00:01:51,736
Hello?
Are you-- are you there?
26
00:01:51,738 --> 00:01:53,738
Hello! Help!
27
00:01:53,740 --> 00:01:55,473
Honey, sweetheart, stay with me.
28
00:01:55,475 --> 00:01:56,875
Hold on, sweetheart, hold on.
29
00:01:59,680 --> 00:02:01,813
Hello? Hello?
Hello? Hello?
30
00:02:01,815 --> 00:02:03,515
Someone help, please!
31
00:02:03,517 --> 00:02:04,683
I need help!
32
00:02:04,685 --> 00:02:06,084
Help! Help!
33
00:02:06,086 --> 00:02:07,652
MALE OPERATOR:
911. What is your emergency?
34
00:02:07,654 --> 00:02:08,687
We need an ambulance.
35
00:02:08,689 --> 00:02:10,555
A man's fallen
from a scaffolding,
36
00:02:10,557 --> 00:02:12,123
but we can't tell if he's alive.
37
00:02:12,125 --> 00:02:14,392
There's blood everywhere
and he isn't moving.
38
00:02:14,394 --> 00:02:16,361
Hello? Can you hear me?
Are you there?
39
00:02:16,363 --> 00:02:17,729
Are you there?
Hello, hello?
40
00:02:17,731 --> 00:02:18,763
Sweeney, hold on.
Can you hear me?
41
00:02:18,765 --> 00:02:19,998
Hello?
42
00:02:20,000 --> 00:02:21,066
It's coming down!
43
00:02:21,068 --> 00:02:23,435
Watch out! Look out!
44
00:02:23,437 --> 00:02:25,203
(shouting)
45
00:02:25,205 --> 00:02:26,838
Go, go!
46
00:02:26,840 --> 00:02:28,373
Something's wrong with my phone!
47
00:02:28,375 --> 00:02:30,375
Someone call 911!
48
00:02:32,212 --> 00:02:33,578
MALE OPERATOR 2:
This is 911.
49
00:02:33,580 --> 00:02:34,713
What is your emergency?
50
00:02:34,715 --> 00:02:36,147
FEMALE OPERATOR:
911. What's your emergency?
51
00:02:36,149 --> 00:02:37,549
What is your emergency?
52
00:02:37,551 --> 00:02:39,017
We've been flooded with reports
53
00:02:39,019 --> 00:02:41,052
of people having issues
calling 911 from cell phones.
54
00:02:41,054 --> 00:02:42,320
They say they connect
55
00:02:42,322 --> 00:02:44,389
to an operator, but then
the call drops off
56
00:02:44,391 --> 00:02:46,224
and their phone
freezes in call mode.
57
00:02:46,226 --> 00:02:47,192
What makes you think
58
00:02:47,194 --> 00:02:49,361
that this is a cyber intrusion
59
00:02:49,363 --> 00:02:52,163
and not a malfunction
of the New York City 911 system?
60
00:02:52,165 --> 00:02:53,665
Well, we've checked
and double-checked.
61
00:02:53,667 --> 00:02:56,001
There's no evidence
of a mechanical malfunction.
62
00:02:56,003 --> 00:02:58,203
Our IT guys believe
it's a hack within our system
63
00:02:58,205 --> 00:03:00,071
that affects
incoming cell phone calls.
64
00:03:00,073 --> 00:03:01,439
Anyone who places a call
from a land line
65
00:03:01,441 --> 00:03:02,974
doesn't experience the problem.
66
00:03:02,976 --> 00:03:06,645
Have you ruled out issues
with cell service providers?
67
00:03:06,647 --> 00:03:08,246
They've all confirmed
that cell towers in the city
68
00:03:08,248 --> 00:03:09,347
are properly functioning
69
00:03:09,349 --> 00:03:11,850
and all other wireless
phone traffic is normal.
70
00:03:11,852 --> 00:03:14,185
So it only happens
when someone calls 911?
71
00:03:14,187 --> 00:03:17,055
When someone calls 911
from a cell phone.
72
00:03:17,057 --> 00:03:18,490
Not getting help
when you want it?
73
00:03:18,492 --> 00:03:20,091
That's terrifying.
74
00:03:20,093 --> 00:03:23,194
RYAN: The mayor and
Homeland Security are concerned
75
00:03:23,196 --> 00:03:24,896
that this could be
a well-crafted precursor
76
00:03:24,898 --> 00:03:27,198
to a terrorist attack.
77
00:03:27,200 --> 00:03:29,000
Raven says the first reports
of dropped 911 calls
78
00:03:29,002 --> 00:03:30,635
came in around
7:00 a.m. this morning.
79
00:03:30,637 --> 00:03:32,270
Complaints were made
to local precincts
80
00:03:32,272 --> 00:03:33,538
and cell service providers.
81
00:03:33,540 --> 00:03:35,607
My operators noticed
a decrease in call volume
82
00:03:35,609 --> 00:03:36,641
about the same time.
83
00:03:36,643 --> 00:03:37,742
But none have reported
84
00:03:37,744 --> 00:03:39,044
being abruptly disconnected
85
00:03:39,046 --> 00:03:40,178
or dropped from a call.
86
00:03:40,180 --> 00:03:41,212
OPERATOR:
Excuse me, Clayton?
87
00:03:41,214 --> 00:03:42,781
Sorry. Will you
excuse me a moment?
88
00:03:44,518 --> 00:03:46,918
RAVEN: According to my stats, there's
definitely something going on.
89
00:03:46,920 --> 00:03:48,920
Well, I've compared
the number of 911 calls
90
00:03:48,922 --> 00:03:50,689
from yesterday at this hour
91
00:03:50,691 --> 00:03:51,856
to those received this morning.
92
00:03:51,858 --> 00:03:53,958
Huge decrease
in cell phone calls.
93
00:03:53,960 --> 00:03:55,794
On a typical day,
the call center
94
00:03:55,796 --> 00:03:57,228
would get 24,000 calls,
95
00:03:57,230 --> 00:03:58,697
70% from cell phones.
96
00:03:58,699 --> 00:04:01,666
And this morning,
cellular calls went down to 30%.
97
00:04:01,668 --> 00:04:04,102
RUSSELL: So there are
some cell phones out there
98
00:04:04,104 --> 00:04:06,838
that are connecting to 911
and completing the call.
99
00:04:06,840 --> 00:04:09,140
Right?
Yeah, but the strange thing is,
100
00:04:09,142 --> 00:04:11,142
is that most
of the calls are made
101
00:04:11,144 --> 00:04:13,578
from devices outside
of Manhattan, in the Boroughs.
102
00:04:13,580 --> 00:04:15,046
KRUMITZ: We plugged
into the 911 system.
103
00:04:15,048 --> 00:04:17,082
No evidence of malfunctions
104
00:04:17,084 --> 00:04:18,450
or indicators of compromise.
105
00:04:18,452 --> 00:04:20,185
Yeah, no known vulnerability,
no malware,
106
00:04:20,187 --> 00:04:22,020
not a trace of digital dust
that indicates a hack.
107
00:04:22,022 --> 00:04:24,089
I mean, these boxes
are squeaky clean.
108
00:04:24,091 --> 00:04:26,358
So there's nothing here that
can tell us what's going on.
109
00:04:26,360 --> 00:04:27,625
Okay, so that means
110
00:04:27,627 --> 00:04:30,595
the problem has to be
internal to the cell phones.
111
00:04:30,597 --> 00:04:31,896
They're all different
models and brands,
112
00:04:31,898 --> 00:04:33,598
in different locations
all over the city.
113
00:04:33,600 --> 00:04:35,400
Not to mention
that they all have
114
00:04:35,402 --> 00:04:36,701
different service providers.
115
00:04:36,703 --> 00:04:38,136
Other than them being
cell phones, I mean,
116
00:04:38,138 --> 00:04:39,371
they have no connection
to each other.
117
00:04:39,373 --> 00:04:41,373
RUSSELL:
Yeah, except they all
118
00:04:41,375 --> 00:04:43,208
dropped 911 calls, right?
119
00:04:43,210 --> 00:04:45,810
We need to get ahold
of one of those phones.
120
00:04:45,812 --> 00:04:47,278
I might be able
to help with you that.
121
00:04:47,280 --> 00:04:49,047
I have the latest
incident reports.
122
00:04:49,049 --> 00:04:50,749
There was an accident
at a construction site
123
00:04:50,751 --> 00:04:52,350
not far from here.
124
00:04:52,352 --> 00:04:53,752
The foreman called
for paramedics.
125
00:04:53,754 --> 00:04:55,420
Same thing happened.
Dropped call.
126
00:04:55,422 --> 00:04:57,555
There's a possibility
we can get that phone.
127
00:04:59,259 --> 00:05:01,526
♪ ♪
128
00:05:03,063 --> 00:05:05,029
FOREMAN:
Yeah, that's my cell number
129
00:05:05,031 --> 00:05:06,698
and I'm the site foreman.
130
00:05:09,169 --> 00:05:11,436
I called 911 when
the scaffolding collapsed.
131
00:05:11,438 --> 00:05:14,806
Sweeney dropped
from the third floor.
132
00:05:14,808 --> 00:05:16,875
And there were two others
who also dialed 911?
133
00:05:16,877 --> 00:05:19,010
Yeah, Henderson and Joe Lavelle.
134
00:05:19,012 --> 00:05:20,678
Just like me,
they reached the operator,
135
00:05:20,680 --> 00:05:23,248
and then the phones froze
and nobody was on the other end.
136
00:05:23,250 --> 00:05:24,816
Is there a way
to get in touch with them?
137
00:05:24,818 --> 00:05:26,217
I'd like to take a look
at their devices.
138
00:05:26,219 --> 00:05:27,819
Yeah, I can, uh,
139
00:05:27,821 --> 00:05:30,422
I can get you
their home number.
140
00:05:30,424 --> 00:05:31,589
This is crazy.
141
00:05:31,591 --> 00:05:32,957
That kid was only
20 years old.
142
00:05:32,959 --> 00:05:34,359
Bled to death because I couldn't
143
00:05:34,361 --> 00:05:36,094
get the paramedics here in time.
144
00:05:36,096 --> 00:05:37,429
And now, two more of my guys
145
00:05:37,431 --> 00:05:39,071
are in the hospital
in critical condition.
146
00:05:40,066 --> 00:05:41,733
I hope you can figure this out.
147
00:05:41,735 --> 00:05:43,735
You know,
on jobs like this,
148
00:05:43,737 --> 00:05:46,471
something happens every day
on these sites.
149
00:05:46,473 --> 00:05:50,008
I need to know that my guys
can get help when they need it.
150
00:05:50,010 --> 00:05:51,209
Excuse me.
151
00:05:51,211 --> 00:05:53,411
(indistinct chatter)
152
00:05:59,753 --> 00:06:01,820
NELSON: Eric O'Brian's phone
is infected with malware.
153
00:06:01,822 --> 00:06:04,322
I mean, it's gonna take time
to reverse-engineer the code
154
00:06:04,324 --> 00:06:06,458
and figure out exactly
what it does to a cell.
155
00:06:06,460 --> 00:06:07,659
Nah, forget the code.
156
00:06:07,661 --> 00:06:09,761
I cloned his device
to a known-good test phone.
157
00:06:09,763 --> 00:06:11,930
Let's just call 911
and see what happens.
158
00:06:11,932 --> 00:06:14,165
All right.
159
00:06:14,167 --> 00:06:15,867
MALE OPERATOR:
911. What is your emergency?
160
00:06:15,869 --> 00:06:17,235
My name is
Daniel Krumitz.
161
00:06:17,237 --> 00:06:18,670
I'm an agent
with the FBI.
162
00:06:18,672 --> 00:06:20,405
Operator, if you
wouldn't mind
163
00:06:20,407 --> 00:06:22,574
standing up and
waving for me?
164
00:06:22,576 --> 00:06:24,476
911. What is
your emergency?
165
00:06:24,478 --> 00:06:26,244
How 'bout counting to ten?
166
00:06:26,246 --> 00:06:27,779
Hello? You there?
167
00:06:27,781 --> 00:06:29,247
Nope. Okay.
Already gone.
168
00:06:29,249 --> 00:06:30,782
That lasted about
three seconds.
169
00:06:30,784 --> 00:06:33,451
Hey, look, maybe he thought you
were a prank caller and hung up.
170
00:06:33,453 --> 00:06:35,320
You know, you don't exactly
sound like an FBI agent.
171
00:06:35,322 --> 00:06:37,856
An operator isn't gonna
hang up that quickly.
172
00:06:37,858 --> 00:06:40,024
They're required to make sure
there's no real emergency,
173
00:06:40,026 --> 00:06:41,593
regardless of what
the caller says.
174
00:06:41,595 --> 00:06:43,595
So maybe you didn't reach
an operator at all.
175
00:06:43,597 --> 00:06:45,897
Remember, operators haven't been
reporting dropped calls,
176
00:06:45,899 --> 00:06:47,866
only people dialing
in on cell phones have.
177
00:06:47,868 --> 00:06:49,033
Hmm.
178
00:06:50,670 --> 00:06:51,936
This test phone's
still active.
179
00:06:54,007 --> 00:06:55,340
It's frozen;
I'm locked out.
180
00:06:55,342 --> 00:06:56,774
That's the hacker's plan.
181
00:06:56,776 --> 00:06:57,976
When you attempt
to dial 911,
182
00:06:57,978 --> 00:06:59,310
you won't get a chance
to do it again.
183
00:06:59,312 --> 00:07:00,612
Or use a cell at all.
184
00:07:00,614 --> 00:07:02,480
It'll force you to find
a land line or a pay phone.
185
00:07:02,482 --> 00:07:03,381
A pay phone?
186
00:07:03,383 --> 00:07:04,582
And who uses
a land line anymore?
187
00:07:04,584 --> 00:07:05,850
Yeah.
I don't even have one in my apartment.
188
00:07:05,852 --> 00:07:07,619
I don't have one, either.
189
00:07:07,621 --> 00:07:09,153
Oh, look.
Krummy, check this, right?
190
00:07:09,155 --> 00:07:10,989
I got a timestamp
indicating the moment
191
00:07:10,991 --> 00:07:13,424
the malware infected
Eric O'Brian's phone, right?
192
00:07:13,426 --> 00:07:15,693
And just seconds
before that,
193
00:07:15,695 --> 00:07:18,263
his cell phone connected
to a Wi-Fi network.
194
00:07:18,265 --> 00:07:19,430
So that router
could be
195
00:07:19,432 --> 00:07:20,899
the source of the infection.
Mm-hmm.
196
00:07:20,901 --> 00:07:22,033
You got a location?
197
00:07:22,035 --> 00:07:23,167
Yeah.
198
00:07:23,169 --> 00:07:25,069
Two seconds.
199
00:07:25,071 --> 00:07:26,704
And... tah-dah.
200
00:07:26,706 --> 00:07:27,705
All right, I got it.
201
00:07:27,707 --> 00:07:28,773
I'm driving.
Let's go.
202
00:07:28,775 --> 00:07:31,242
What exactly does
an FBI agent sound like?
203
00:07:31,244 --> 00:07:33,545
Smooth, Krummy. Sturdy.
204
00:07:33,547 --> 00:07:35,046
Gotta sound like you just
finished the Ironman.
205
00:07:35,048 --> 00:07:37,081
I'm out of breath?
No, man.
206
00:07:37,083 --> 00:07:38,716
You gotta be tough.
You know, like a...
207
00:07:38,718 --> 00:07:39,884
like a bad-ass.
208
00:07:39,886 --> 00:07:41,819
(tough voice):
Daniel Krumitz, FBI.
209
00:07:41,821 --> 00:07:44,489
(deeper voice):
Dan... Daniel Krumitz, FBI.
210
00:07:44,491 --> 00:07:47,158
(indistinct chatter)
211
00:07:50,497 --> 00:07:52,746
The router that Eric's phone
connected to isn't here.
212
00:07:54,347 --> 00:07:55,277
MUNDO: You're sure you got
the right location?
213
00:07:55,278 --> 00:07:56,525
NELSON: I'm positive.
214
00:07:56,636 --> 00:07:58,836
Well, maybe our hacker
removed the device.
215
00:07:58,838 --> 00:08:00,672
Wanted it to remain undetected.
216
00:08:00,674 --> 00:08:02,607
Wait, wait, guys,
it just showed up.
217
00:08:02,609 --> 00:08:04,642
And... now it's gone.
218
00:08:04,644 --> 00:08:06,511
That means it's moving.
219
00:08:06,513 --> 00:08:08,112
Wait, guys,
it's back up again.
220
00:08:08,114 --> 00:08:09,581
Signal's getting stronger.
221
00:08:09,583 --> 00:08:11,482
Real strong.
WOMAN: Is it coming?
222
00:08:11,484 --> 00:08:12,750
WOMAN 2:
Oh, thank you.
223
00:08:15,622 --> 00:08:17,622
That's it, right there.
That's why the signal's moving.
224
00:08:17,624 --> 00:08:20,592
Free Wi-Fi. Stop that bus!
I'll call Avery and D.B.!
225
00:08:26,700 --> 00:08:28,933
Let's see what's
on the bus's router.
226
00:08:33,106 --> 00:08:35,173
Okay, same malware on
Eric O'Brian's phone.
227
00:08:35,175 --> 00:08:38,042
But... that's not
the interesting part.
228
00:08:38,044 --> 00:08:39,143
Nelson.
229
00:08:39,145 --> 00:08:40,979
No. Uh-uh.
230
00:08:40,981 --> 00:08:42,614
It... it can't be.
231
00:08:42,616 --> 00:08:43,615
I know, right?
232
00:08:43,617 --> 00:08:44,682
But it is, though, look.
Guys, guys.
233
00:08:44,684 --> 00:08:45,883
Hey, hey. Can we use words
234
00:08:45,885 --> 00:08:47,251
that actually mean something?
235
00:08:47,253 --> 00:08:48,319
(laughs)
236
00:08:48,321 --> 00:08:49,454
KRUMITZ:
It's like this, okay?
237
00:08:49,456 --> 00:08:51,556
I have the flu. I sneeze.
238
00:08:51,558 --> 00:08:52,924
If you're close enough to me,
239
00:08:52,926 --> 00:08:53,992
you get the flu.
240
00:08:53,994 --> 00:08:55,126
That's what this is.
241
00:08:55,128 --> 00:08:57,195
It's an airborne computer virus.
242
00:08:57,197 --> 00:08:59,464
It... it lives.
243
00:08:59,466 --> 00:09:00,832
What do you mean,
“it lives,” Krumitz?
244
00:09:00,834 --> 00:09:02,100
NELSON:
It was programmed to spread
245
00:09:02,102 --> 00:09:03,835
like a real virus.
It jumps from unsecured router
246
00:09:03,837 --> 00:09:05,169
to unsecured router
within 150 feet.
247
00:09:05,171 --> 00:09:07,939
So it infects
any wireless access point
248
00:09:07,941 --> 00:09:09,407
that's not password protected?
249
00:09:09,409 --> 00:09:10,475
And even the ones that use
250
00:09:10,477 --> 00:09:11,809
a default password
from the manufacturer.
251
00:09:11,811 --> 00:09:13,344
So this bus has been, like,
252
00:09:13,346 --> 00:09:14,946
“sneezing” all over town.
253
00:09:14,948 --> 00:09:19,250
Every unsecured router
in its path has been infected?
254
00:09:19,252 --> 00:09:22,820
KRUMITZ: And whenever
a Wi-Fi enabled phone connects
255
00:09:22,822 --> 00:09:25,256
to one of these infected
routers, it gets the virus.
256
00:09:25,258 --> 00:09:27,892
Malware automatically
jumps onto it.
257
00:09:27,894 --> 00:09:29,627
RYAN:
It's contagious.
258
00:09:29,629 --> 00:09:30,762
I've never seen anything
259
00:09:30,764 --> 00:09:31,929
in the wild
like this before.
260
00:09:31,931 --> 00:09:33,253
Can the virus jump
from phone to phone?
261
00:09:33,278 --> 00:09:33,867
No.
262
00:09:33,868 --> 00:09:35,600
Phones can only
get the virus
263
00:09:35,602 --> 00:09:37,642
if they're connected to
one of the infected routers.
264
00:09:39,072 --> 00:09:41,072
Well, at least these buses
stay on the same route, right?
265
00:09:41,074 --> 00:09:42,907
It'll help us
contain the infection.
266
00:09:42,909 --> 00:09:44,308
RYAN: But ultimately,
all the buses
267
00:09:44,310 --> 00:09:45,710
go back to home base.
268
00:09:45,712 --> 00:09:48,446
And then this infection jumps
from bus router to bus router.
269
00:09:48,448 --> 00:09:50,181
And then bright
and early this morning,
270
00:09:50,183 --> 00:09:52,950
all those buses went right back
into the streets of Manhattan.
271
00:09:52,952 --> 00:09:54,452
Increasing the number of people
272
00:09:54,454 --> 00:09:56,688
who won't get any help
when they call 911.
273
00:09:56,690 --> 00:09:57,955
This is an outbreak.
274
00:09:57,957 --> 00:09:59,724
We're looking
at an epidemic.
275
00:09:59,726 --> 00:10:02,460
We need to find patient zero.
276
00:10:08,013 --> 00:10:12,013
♪ CSI Cyber 2x12 ♪
Going Viral
Original Air Date on January 31, 2016
277
00:10:12,038 --> 00:10:18,476
♪ I know you've deceived me,
now here's a surprise ♪
278
00:10:20,013 --> 00:10:26,451
♪ I know that you have, 'cause
there's magic in my eyes ♪
279
00:10:26,453 --> 00:10:29,787
♪ I can see
for miles and miles ♪
280
00:10:29,789 --> 00:10:33,825
♪ I can see for miles
and miles ♪
281
00:10:33,827 --> 00:10:37,995
♪ I can see
for miles and miles ♪
282
00:10:37,997 --> 00:10:41,733
♪ And miles... ♪
283
00:10:41,735 --> 00:10:44,635
♪ Oh, yeah. ♪
284
00:10:44,659 --> 00:10:46,659
== sync, corrected by elderman ==
@elder_man
285
00:10:58,643 --> 00:11:00,743
(indistinct chattering)
286
00:11:04,382 --> 00:11:08,785
The infected area has grown
by 25% in the past two hours.
287
00:11:08,788 --> 00:11:11,455
I've notified Port Authority
and service providers.
288
00:11:11,457 --> 00:11:13,557
All public routers
are being disconnected
289
00:11:13,559 --> 00:11:15,159
from buses and ferries.
290
00:11:15,161 --> 00:11:17,995
Have FBI communications
get in touch
291
00:11:17,997 --> 00:11:20,431
with all of the New Jersey,
Connecticut,
292
00:11:20,433 --> 00:11:22,566
Philadelphia news media outlets.
293
00:11:22,568 --> 00:11:24,201
Make sure they're
getting the word out
294
00:11:24,203 --> 00:11:26,604
that commuters should
turn off their Wi-Fi
295
00:11:26,606 --> 00:11:28,005
and not try to connect
296
00:11:28,007 --> 00:11:30,007
to any free or open
Wi-Fi sources.
297
00:11:30,009 --> 00:11:34,178
And remind them: use their
landlines when calling 911.
298
00:11:34,180 --> 00:11:36,580
This virus will definitely
cross state lines
299
00:11:36,582 --> 00:11:38,649
unless we're overly cautious.
300
00:11:38,651 --> 00:11:41,619
Yep, a virus warning is already
spreading through social media,
301
00:11:41,621 --> 00:11:43,220
and there's been a big surge
302
00:11:43,222 --> 00:11:45,322
in purchases
of old-school telephones.
303
00:11:45,324 --> 00:11:46,724
You're finally in style, D.B.
304
00:11:46,726 --> 00:11:48,526
(chuckles)
305
00:11:48,528 --> 00:11:51,061
Thanks very much.
Oh, hey, hold on a second.
306
00:11:51,063 --> 00:11:53,864
Little, uh, social protocol.
307
00:11:53,866 --> 00:11:56,233
Let's say you get a text
308
00:11:56,235 --> 00:11:58,469
clearly meant for somebody else,
sent by someone you don't know.
309
00:11:58,471 --> 00:12:00,871
Now, are you supposed
to, uh, text 'em right back
310
00:12:00,873 --> 00:12:02,606
and say they got
the wrong person?
311
00:12:02,608 --> 00:12:05,409
Kind of sounds like
a personal text then.
312
00:12:05,411 --> 00:12:07,378
Well, yeah, kind of.
313
00:12:07,380 --> 00:12:10,447
Wh-Why would you
just assume that?
314
00:12:10,449 --> 00:12:12,116
'Cause if it was something like
“I'm gonna be late”
315
00:12:12,118 --> 00:12:14,852
or “Call me,”
then it's easy to text back.
316
00:12:14,854 --> 00:12:16,320
You wouldn't give it
a second thought.
317
00:12:16,322 --> 00:12:18,255
But if suddenly
you get dropped
318
00:12:18,257 --> 00:12:20,658
into the middle
of someone else's drama...
319
00:12:20,660 --> 00:12:22,326
What did the text say?
320
00:12:22,328 --> 00:12:23,761
Well, uh, none of your business.
321
00:12:23,763 --> 00:12:25,529
(gasps)
You answered my question.
322
00:12:25,531 --> 00:12:26,630
I'll see you later.
323
00:12:26,632 --> 00:12:28,065
Come on, D.B.
324
00:12:28,067 --> 00:12:29,400
It's got to be
pretty juicy, huh?
325
00:12:29,402 --> 00:12:31,502
We'll talk about it
when I get back to DC.
326
00:12:31,504 --> 00:12:32,903
D.B., you can't just...
327
00:12:32,905 --> 00:12:34,438
(scoffs)
328
00:12:34,440 --> 00:12:35,673
Mayor Cavanaugh,
there's no evidence
329
00:12:35,675 --> 00:12:38,742
to suggest that the 911 hack
is a terrorist threat.
330
00:12:38,744 --> 00:12:40,344
Well, that's a relief.
331
00:12:40,346 --> 00:12:42,179
Do you know who's behind it?
332
00:12:42,181 --> 00:12:44,215
We have a profile of
who we're looking for.
333
00:12:44,217 --> 00:12:46,317
They're not part of a
politically motivated
334
00:12:46,319 --> 00:12:48,118
group or collective.
335
00:12:48,120 --> 00:12:49,853
They would have already
claimed responsibility by now.
336
00:12:49,855 --> 00:12:51,789
Our target is an individual
337
00:12:51,791 --> 00:12:54,792
who's celebrating his
power to cripple the city.
338
00:12:54,794 --> 00:12:58,829
He enjoys making people
feel desperate, helpless.
339
00:12:58,831 --> 00:13:01,532
There's a chance that he's tried
something like this in the past
340
00:13:01,534 --> 00:13:03,567
on a smaller scale.
341
00:13:03,569 --> 00:13:05,302
But this virus is an escalation.
342
00:13:05,304 --> 00:13:07,404
He?
It's most likely a man.
343
00:13:07,406 --> 00:13:10,507
Women go about things like this
in a less conspicuous way.
344
00:13:10,509 --> 00:13:12,276
I was told you have a plan.
345
00:13:12,278 --> 00:13:15,012
The malware is mimicking
a biicalirus,
346
00:13:15,014 --> 00:13:16,447
so we're using CDC protocol.
347
00:13:16,449 --> 00:13:18,082
We've identified how
it's transmitted,
348
00:13:18,084 --> 00:13:20,050
we've begun the containment,
349
00:13:20,052 --> 00:13:21,719
we're informing the public.
350
00:13:21,721 --> 00:13:24,321
My team is writing code,
an antidote,
351
00:13:24,323 --> 00:13:26,223
that will cure all
the infected phones
352
00:13:26,225 --> 00:13:29,193
and stop any new phones
from acquiring it.
353
00:13:29,195 --> 00:13:33,697
You are, Deputy Director Ryan,
as impressive as I was told.
354
00:13:33,699 --> 00:13:36,600
Which makes my next request
a little uncomfortable.
355
00:13:37,470 --> 00:13:40,371
(sighs)
356
00:13:41,507 --> 00:13:43,407
Brody Nelson.
357
00:13:43,409 --> 00:13:45,476
He's one of my
cyber investigators.
358
00:13:45,478 --> 00:13:46,777
He's also the young man
359
00:13:46,779 --> 00:13:48,379
that hacked into
the New York Stock Exchange,
360
00:13:48,381 --> 00:13:50,214
created havoc
in the financial district.
361
00:13:50,216 --> 00:13:51,849
And I understand
that that tarnished
362
00:13:51,851 --> 00:13:54,151
your first term
in the mayor's office.
363
00:13:54,153 --> 00:13:55,319
This is not about me.
364
00:13:55,321 --> 00:13:57,221
I am well aware
of Brody Nelson's crimes.
365
00:13:57,223 --> 00:13:58,455
He is serving his time.
366
00:13:58,457 --> 00:14:00,791
I would prefer he were in prison
and not writing code
367
00:14:00,793 --> 00:14:02,259
for anything having
to do with my city.
368
00:14:02,261 --> 00:14:04,795
Well, that is not
your call, sir.
369
00:14:07,266 --> 00:14:09,500
Did you know that
eight-million-dollar transfer
370
00:14:09,502 --> 00:14:12,970
as a result of his financial
hack was never accounted for?
371
00:14:12,972 --> 00:14:15,239
That young man knows
where it is.
372
00:14:23,182 --> 00:14:25,916
The mayor's just bent out of
shape because their election's
373
00:14:25,918 --> 00:14:27,051
coming up.
374
00:14:27,053 --> 00:14:29,586
(sighs)
I did a terrible thing, D.B.
375
00:14:29,588 --> 00:14:31,255
Can't expect people to forget.
376
00:14:34,560 --> 00:14:36,126
You know what?
377
00:14:36,128 --> 00:14:37,528
I'm just gonna
image these devices
378
00:14:37,530 --> 00:14:38,796
and go back to DC with you.
379
00:14:38,798 --> 00:14:40,698
It'll be easier
for me to analyze
380
00:14:40,700 --> 00:14:44,335
the malware from Tear Down
and work on the antidote.
381
00:14:46,205 --> 00:14:48,105
Okay.
All right?
382
00:14:56,549 --> 00:14:58,515
Let me make this clear.
383
00:14:58,517 --> 00:15:01,418
I don't want Brody Nelson
working this case.
384
00:15:01,420 --> 00:15:04,154
If Brody Nelson doesn't work on
this case, then neither do I.
385
00:15:04,156 --> 00:15:05,456
So you let me know.
386
00:15:09,428 --> 00:15:11,762
REPORTER: The FBI has informed
us of a malware virus
387
00:15:11,764 --> 00:15:13,764
affecting the 911 emergency system.
...Wi-Fi has been discontinued.
388
00:15:13,766 --> 00:15:15,432
We ask that you use
a landline for all...
389
00:15:15,434 --> 00:15:16,734
OPERATOR:
911, what's your emergency?
390
00:15:16,736 --> 00:15:18,696
This is an emergency.
Excuse me, I need to make...
391
00:15:29,682 --> 00:15:31,682
What you got?
392
00:15:31,684 --> 00:15:33,517
I've infected these test phones
with the virus.
393
00:15:33,519 --> 00:15:35,352
It lies dormant
until you dial 911,
394
00:15:35,354 --> 00:15:36,720
and this is what you hear.
395
00:15:36,722 --> 00:15:38,589
MALE VOICE: 911.
What is your emergency?
396
00:15:38,591 --> 00:15:41,859
Hello. Hello.
397
00:15:41,861 --> 00:15:43,127
No one there.
398
00:15:43,129 --> 00:15:45,162
That's because there was
never anyone there.
399
00:15:45,164 --> 00:15:46,497
It's a recorded voice.
400
00:15:46,499 --> 00:15:49,299
There's an audio file
hard-coded into the virus.
401
00:15:49,301 --> 00:15:50,601
Now, these phone calls
never make it
402
00:15:50,603 --> 00:15:51,802
to an actual 911 operator.
403
00:15:51,804 --> 00:15:53,103
Just a recorded voice.
404
00:15:53,105 --> 00:15:55,773
The hacker hijacked 911
405
00:15:55,775 --> 00:15:58,409
and made the caller believe
they were getting through.
406
00:15:58,411 --> 00:16:00,144
Mm-hmm, and not only that.
407
00:16:00,146 --> 00:16:01,845
Check this out.
(hums)
408
00:16:01,847 --> 00:16:03,914
MALE VOICE: 911.
What is your emergency?
409
00:16:03,916 --> 00:16:06,283
Say something.
Keep talking.
410
00:16:06,285 --> 00:16:08,852
Hello, this is D.B. Russell.
411
00:16:08,854 --> 00:16:11,255
Testing, one, two, three.
412
00:16:11,257 --> 00:16:14,224
The phone is not frozen, it's
recording everything I'm saying.
413
00:16:14,226 --> 00:16:15,225
Right.
414
00:16:15,227 --> 00:16:17,561
All right, so our
target is a man
415
00:16:17,563 --> 00:16:19,296
who... who gets
off on hearing
416
00:16:19,298 --> 00:16:21,365
the fear and the panic
of helpless people.
417
00:16:21,367 --> 00:16:25,402
He's recording the callers and
sending the audio... somewhere.
418
00:16:25,404 --> 00:16:27,471
And we don't know where?
419
00:16:27,473 --> 00:16:28,872
Nope.
420
00:16:28,874 --> 00:16:31,341
The files are bouncing
through proxy IPs.
421
00:16:31,343 --> 00:16:32,676
It's a dead end.
422
00:16:32,678 --> 00:16:35,312
(classical music plays)
423
00:16:46,125 --> 00:16:47,724
MALE VOICE: 911.
What is your emergency?
424
00:16:47,726 --> 00:16:49,993
WOMAN: Please help, someone
just broke into my house.
425
00:16:49,995 --> 00:16:51,328
He's strangling my husband.
426
00:16:51,330 --> 00:16:52,663
I'm hiding in the closet.
427
00:16:52,665 --> 00:16:53,964
Oh... oh, God. He's...
428
00:16:53,966 --> 00:16:55,299
MALE VOICE:
Try to stay calm, ma'am.
429
00:16:55,301 --> 00:16:57,668
I'm showing your address
is 754 Plymouth Way.
430
00:16:57,670 --> 00:16:58,902
Is that correct?
431
00:16:58,904 --> 00:17:00,337
WOMAN:
Yes, please hurry.
432
00:17:00,339 --> 00:17:01,905
I-I can hear him in the kitchen.
433
00:17:01,907 --> 00:17:03,941
(crying):
I think my husband's dead.
434
00:17:03,943 --> 00:17:05,242
MALE VOICE:
Help is on the way.
435
00:17:05,244 --> 00:17:07,311
WOMAN: Please hurry.
Where are you?
436
00:17:07,313 --> 00:17:08,745
Am I right or am I right?
437
00:17:08,747 --> 00:17:11,415
The voice of the 911 operator
embedded in the malware
438
00:17:11,417 --> 00:17:13,717
sounds like a long-lost
relative of T-Pain.
439
00:17:13,719 --> 00:17:15,652
Who Pain?
RAMIREZ: T-Pain.
440
00:17:15,654 --> 00:17:17,654
He's the king of auto-tune.
Yeah.
441
00:17:17,656 --> 00:17:18,755
And that is again?
442
00:17:18,757 --> 00:17:20,457
It's, like,
when a recording artist
443
00:17:20,459 --> 00:17:22,793
alters the pitch of their voice
when they sing off-key.
444
00:17:22,795 --> 00:17:24,862
Or when they suck.
445
00:17:24,864 --> 00:17:26,463
Well, if that's true and
the voice was distorted,
446
00:17:26,465 --> 00:17:28,131
then we should be able
to un-distort it.
447
00:17:28,133 --> 00:17:30,033
I just made that word up. All
right, let's get to work here.
448
00:17:30,035 --> 00:17:31,101
Play it again, Nelson.
449
00:17:31,103 --> 00:17:33,303
All right.
450
00:17:33,305 --> 00:17:35,038
MALE VOICE (slowly): 911.
What is your emer...
451
00:17:35,040 --> 00:17:36,840
Okay, Raven, isolate
452
00:17:36,842 --> 00:17:38,675
one of the ringing phones
in the background there.
453
00:17:38,677 --> 00:17:41,845
And pull up the ringtone used
by the 911 call center.
454
00:17:41,847 --> 00:17:43,080
That'll be our baseline.
455
00:17:43,082 --> 00:17:45,549
Right, once we match
the ringtones,
456
00:17:45,551 --> 00:17:47,784
we'll have the real voice
of our 911 operator.
457
00:17:47,786 --> 00:17:49,987
Exactly.
Okay, I am adjusting
458
00:17:49,989 --> 00:17:52,022
the pitch and speed
of the recording
459
00:17:52,024 --> 00:17:53,724
until the waveforms line up.
460
00:17:53,726 --> 00:17:56,260
MALE VOICE: 911.
What is your emergency?
461
00:17:56,262 --> 00:17:59,563
Okay, here we have our real
911 operator's voice.
462
00:17:59,565 --> 00:18:01,832
MALE VOICE: 911.
What is your emergency?
463
00:18:01,834 --> 00:18:04,368
Why would our target want
to distort this voice?
464
00:18:04,370 --> 00:18:07,337
To disguise it.
465
00:18:07,339 --> 00:18:08,839
This could be him.
466
00:18:08,841 --> 00:18:10,107
Right? Our target.
467
00:18:10,109 --> 00:18:11,508
I mean, why else would he do it?
468
00:18:11,510 --> 00:18:12,676
You think he works
at a call center.
469
00:18:12,678 --> 00:18:13,944
I don't know,
it's just a theory.
470
00:18:13,946 --> 00:18:15,445
Let's run this voice
471
00:18:15,447 --> 00:18:16,747
against all
of the male dispatchers
472
00:18:16,749 --> 00:18:18,649
in the New York City
call center database.
473
00:18:18,651 --> 00:18:19,917
All right?
474
00:18:19,919 --> 00:18:21,852
Maybe we'll get lucky here,
get an I.D.
475
00:18:24,590 --> 00:18:25,856
NELSON:
Got him.
476
00:18:25,858 --> 00:18:28,458
RYAN:
Leo Finch.
477
00:18:28,460 --> 00:18:30,060
Look at his profile.
478
00:18:30,062 --> 00:18:33,030
He was fired from the call
center exactly a year ago today.
479
00:18:33,032 --> 00:18:35,032
Well, that's motive for revenge.
480
00:18:35,034 --> 00:18:36,967
Let's see, he was fired for...
481
00:18:36,969 --> 00:18:39,536
“failure to properly
dispatch emergency units”"
482
00:18:39,538 --> 00:18:42,673
“poor decision making”"
“refusal to follow protocol”"
483
00:18:42,675 --> 00:18:44,274
Also looks like there
were several instances
484
00:18:44,276 --> 00:18:45,542
of slow dispatch times
485
00:18:45,544 --> 00:18:47,878
and sending paramedics
to the wrong address.
486
00:18:47,880 --> 00:18:49,813
Delayed dispatch times suggests
487
00:18:49,815 --> 00:18:51,515
he wanted to keep
the panicked callers on the line
488
00:18:51,517 --> 00:18:52,683
as long as possible.
489
00:18:52,685 --> 00:18:54,818
He enjoyed hearing
their desperation.
490
00:18:54,820 --> 00:18:58,555
Their pleading made him feel
powerful and in control.
491
00:18:58,557 --> 00:19:00,591
Leo is an auditory voyeur.
492
00:19:00,593 --> 00:19:02,159
Well, that's twisted.
Call Elijah.
493
00:19:02,161 --> 00:19:04,261
Tell him there's a door
he has to kick down.
494
00:19:12,638 --> 00:19:13,804
Clear!
495
00:19:13,806 --> 00:19:15,405
Clear!
496
00:19:20,713 --> 00:19:22,245
Clear!
497
00:19:23,015 --> 00:19:24,615
All clear!
Clear!
498
00:19:38,358 --> 00:19:41,040
MUNDO: Victims are
Mary and Roger Ingram. (sighs)
499
00:19:41,140 --> 00:19:42,573
Ligature marks around the neck
500
00:19:42,575 --> 00:19:44,508
and petechial hemorrhaging in
the eyes suggest strangulation.
501
00:19:44,510 --> 00:19:46,443
We have a time of death?
502
00:19:46,445 --> 00:19:48,211
MUNDO: According to
the on-site coroner report,
503
00:19:48,213 --> 00:19:49,980
body temp puts TOD
somewhere between 5:00
504
00:19:49,982 --> 00:19:51,415
and 7:00 a.m. this morning.
505
00:19:51,417 --> 00:19:53,183
Any signs of forced entry?
No.
506
00:19:53,185 --> 00:19:55,752
And nothing to suggest
that Leo Finch lives here.
507
00:19:55,754 --> 00:19:57,788
Police are canvassing
the area right now,
508
00:19:57,790 --> 00:20:00,090
seeing if anybody
recognizes Leo's photo.
509
00:20:00,092 --> 00:20:02,359
MAN:
Agent Mundo.
510
00:20:05,331 --> 00:20:08,265
KRUMITZ: Looks like Mary
tried to call for help.
511
00:20:08,267 --> 00:20:10,801
She's still clenching
this phone.
512
00:20:10,803 --> 00:20:12,002
Cadaveric spasm.
513
00:20:12,004 --> 00:20:14,738
It occurs in violent,
intense deaths.
514
00:20:14,740 --> 00:20:17,541
That's why her hand is
clenched around the phone.
515
00:20:17,543 --> 00:20:18,875
Battery's dead.
516
00:20:18,877 --> 00:20:20,711
See if it has the virus.
517
00:20:31,857 --> 00:20:34,191
Malware is exactly the same
as all the others.
518
00:20:34,193 --> 00:20:38,161
According to the call log, Mary
tried to call 911 at 6:23 a.m.
519
00:20:38,163 --> 00:20:40,530
Please hurry,
he's strangling my husband.
520
00:20:40,532 --> 00:20:42,532
I think he killed him.
521
00:20:42,534 --> 00:20:44,368
I can hear him coming.
522
00:20:44,370 --> 00:20:46,169
Hello, is anyone there?
523
00:20:46,171 --> 00:20:47,704
Hello?
524
00:20:49,008 --> 00:20:50,741
Hello?
525
00:20:56,015 --> 00:20:57,180
(screams)
526
00:20:59,151 --> 00:21:00,851
MUNDO:
Avery.
527
00:21:00,853 --> 00:21:03,687
There's a basement apartment.
528
00:21:09,461 --> 00:21:11,128
This is an odd setup.
529
00:21:11,130 --> 00:21:13,797
Cheap furniture,
egg carton acoustics,
530
00:21:13,799 --> 00:21:15,432
but very expensive speakers.
531
00:21:33,786 --> 00:21:36,253
Found a laptop.
532
00:21:36,255 --> 00:21:37,821
This is a Benning.
533
00:21:37,823 --> 00:21:40,123
Leo has a $50,000 violin
534
00:21:40,125 --> 00:21:42,125
and lives in a cheap rental?
535
00:21:42,127 --> 00:21:44,327
It's funny--
some of the best coders
536
00:21:44,329 --> 00:21:45,829
are talented musicians.
537
00:21:45,831 --> 00:21:48,331
Both highly technical,
deal with complex numbers.
538
00:21:48,333 --> 00:21:50,300
Clearly, Leo's obsession
was sound.
539
00:21:50,302 --> 00:21:52,803
KRUMITZ:
I'm imaging Leo's computer.
540
00:21:52,805 --> 00:21:54,638
He's over 200 audio files
on his hard drive.
541
00:21:54,640 --> 00:21:57,274
They're all 911 calls,
and he's the operator.
542
00:21:57,276 --> 00:21:59,209
RYAN:
Leo is an addict.
543
00:21:59,211 --> 00:22:01,611
The 911 calls are his drug.
544
00:22:01,613 --> 00:22:04,181
It's like an arsonist
getting a job as a firefighter
545
00:22:04,183 --> 00:22:06,216
or a pedophile
who becomes a teacher.
546
00:22:06,218 --> 00:22:08,251
Leo got his fix
at work.
547
00:22:08,253 --> 00:22:10,020
Until he was fired a year ago,
548
00:22:10,022 --> 00:22:12,889
and he was cut off from his drug
549
00:22:12,891 --> 00:22:16,827
and had to find a new way
to feed his addiction.
550
00:22:16,829 --> 00:22:17,829
The virus.
551
00:22:19,565 --> 00:22:20,697
Whoa, Krumitz, get-- come here.
552
00:22:20,699 --> 00:22:22,699
Is this what I think it is?
553
00:22:26,672 --> 00:22:28,238
That could be
the original source code
554
00:22:28,240 --> 00:22:29,940
for the virus.
555
00:22:31,243 --> 00:22:32,743
Okay, we've got something.
556
00:22:32,745 --> 00:22:35,612
This computer connected
to 26 bus routers
557
00:22:35,614 --> 00:22:38,482
at Port Authority
at 11:00 p.m. last night.
558
00:22:38,484 --> 00:22:40,283
That's 26 patient zeros.
559
00:22:40,285 --> 00:22:42,352
This is not
an experiment gone wrong.
560
00:22:42,354 --> 00:22:44,488
This was a calculated attack.
561
00:22:44,490 --> 00:22:46,323
No, Leo wanted to infect
every corner of the city,
562
00:22:46,325 --> 00:22:48,258
and he wanted to do it fast.
563
00:22:57,236 --> 00:22:59,636
RAMIREZ: 61 confirmed cases
in New Jersey.
564
00:22:59,638 --> 00:23:00,971
38 in Connecticut.
565
00:23:00,973 --> 00:23:02,506
And 23 in Upstate New York.
566
00:23:02,508 --> 00:23:04,174
Even with the news
alerts and warnings,
567
00:23:04,176 --> 00:23:05,678
the virus has officially
568
00:23:05,679 --> 00:23:06,993
spread through the
tristate area.
569
00:23:07,017 --> 00:23:09,837
Well, the good news is the
infection rate should slow down
570
00:23:09,899 --> 00:23:11,231
in the less densely
populated areas.
571
00:23:11,233 --> 00:23:12,332
Bad news?
572
00:23:12,334 --> 00:23:14,368
A complete quarantine
looks impossible.
573
00:23:14,370 --> 00:23:17,838
And local precincts are overrun
with emergency calls
574
00:23:17,840 --> 00:23:19,406
and hospitals are
flooded with walk-ins.
575
00:23:19,408 --> 00:23:20,774
Some people are resorting
to social media
576
00:23:20,776 --> 00:23:22,376
to announce
their emergencies.
577
00:23:22,378 --> 00:23:24,411
Nelson,
we need that antidote.
578
00:23:24,413 --> 00:23:25,546
How's it going?
579
00:23:25,548 --> 00:23:26,847
Krummy sent me
the source code of the virus
580
00:23:26,849 --> 00:23:28,348
from Leo Finch's laptop.
581
00:23:28,350 --> 00:23:30,517
Now that I can see exactly
how the virus is written,
582
00:23:30,519 --> 00:23:33,153
it shouldn't take long to write
a code to counteract it.
583
00:23:33,155 --> 00:23:34,788
But the problem is
584
00:23:34,790 --> 00:23:36,723
how to push it to all
the phones that need it.
585
00:23:36,725 --> 00:23:38,358
Yeah, a software update through
the vendors will take days.
586
00:23:38,360 --> 00:23:39,560
Mm-hmm.
587
00:23:39,562 --> 00:23:40,861
Wait a minute.
588
00:23:40,863 --> 00:23:43,363
What about using something
like the AMBER Alert, right?
589
00:23:43,365 --> 00:23:45,418
It sends
push notifications to phones
590
00:23:45,419 --> 00:23:46,995
during child abductions.
591
00:23:47,019 --> 00:23:48,788
It's instant, it's regional.
592
00:23:48,789 --> 00:23:49,479
What do you think?
593
00:23:49,503 --> 00:23:50,571
I mean, AMBER Alerts
are only designed
594
00:23:50,595 --> 00:23:52,237
to display alphanumeric text.
595
00:23:52,238 --> 00:23:53,871
You can't use them
to push code.
596
00:23:53,873 --> 00:23:55,256
And there are regulations.
597
00:23:55,257 --> 00:23:56,590
I mean, FTC, DOJ, FEMA.
598
00:23:56,592 --> 00:23:57,724
Right.
Wait, wait, wait.
599
00:23:57,726 --> 00:23:59,927
Are you saying it's impossible?
600
00:23:59,929 --> 00:24:02,229
I'm saying it's never been done before.
Right.
601
00:24:02,231 --> 00:24:03,530
Well, there's a first
time for everything.
602
00:24:03,532 --> 00:24:05,568
You-you two were black
hats, weren't you?
603
00:24:05,569 --> 00:24:06,435
The best.
604
00:24:06,436 --> 00:24:07,128
Notorious.
605
00:24:07,129 --> 00:24:08,729
Okay, so you'll
hack it, right?
606
00:24:08,731 --> 00:24:11,098
And I'll take full
responsibility.
607
00:24:11,100 --> 00:24:13,867
Matter of fact, I will call
Director Silver right now.
608
00:24:13,869 --> 00:24:16,603
Work on the FCC,
DOJ part of this thing.
609
00:24:16,605 --> 00:24:19,306
All right, man said
hack, let's hack.
610
00:24:38,727 --> 00:24:40,894
Look at this.
611
00:24:42,264 --> 00:24:44,364
A pair of pliers,
612
00:24:44,366 --> 00:24:46,867
some kind of metal pins
613
00:24:46,869 --> 00:24:48,535
and a bloody violin string.
614
00:24:48,537 --> 00:24:50,604
I think we may be looking
at the murder weapon.
615
00:24:50,606 --> 00:24:52,606
(screaming)
616
00:24:52,608 --> 00:24:55,242
(both grunting)
617
00:24:55,244 --> 00:24:57,344
All right, well,
whatever Leo's endgame is,
618
00:24:57,346 --> 00:24:59,780
if he left two bodies upstairs
and a murder weapon in the wall,
619
00:24:59,782 --> 00:25:01,748
it's a pretty safe bet
he's not coming back here
620
00:25:01,750 --> 00:25:02,816
anytime soon.
621
00:25:02,818 --> 00:25:04,551
Guys, look at this.
622
00:25:04,553 --> 00:25:07,488
It looks like these three 911
recordings were Leo's favorites.
623
00:25:07,490 --> 00:25:09,790
They were played
over a thousand times.
624
00:25:09,792 --> 00:25:11,458
And he even put them
on a separate playlist.
625
00:25:11,460 --> 00:25:12,726
Here, listen to this.
626
00:25:12,728 --> 00:25:14,695
FINCH:
911, what's your emergency?
627
00:25:14,697 --> 00:25:17,030
MAN: My buddy, he fell!
It's bad; it's-it's real bad!
628
00:25:17,032 --> 00:25:18,899
We need an ambulance!
Sir, what's your location?
629
00:25:18,901 --> 00:25:20,834
MAN: Construction site
at Lexington and 12th!
630
00:25:20,836 --> 00:25:22,369
I don't think he's conscious.
631
00:25:22,371 --> 00:25:23,670
FINCH:
I'm dispatching paramedics now.
632
00:25:23,672 --> 00:25:25,005
Calm down and describe
what you see.
633
00:25:25,007 --> 00:25:26,273
MAN:
There's a lot of blood!
634
00:25:26,275 --> 00:25:27,441
He must've fallen 50 or 60 feet
635
00:25:27,443 --> 00:25:29,343
or something-- please hurry!
636
00:25:29,345 --> 00:25:30,377
There's blood all over his head!
637
00:25:30,379 --> 00:25:31,578
I'm pretty sure
his legs are broken.
638
00:25:31,580 --> 00:25:32,646
FINCH: All right,
be careful not to move him.
639
00:25:32,648 --> 00:25:33,648
Help is on the way.
640
00:25:33,849 --> 00:25:35,549
Is this from today?
641
00:25:35,551 --> 00:25:37,718
Uh, no.
642
00:25:37,720 --> 00:25:38,785
According to the metadata,
643
00:25:38,787 --> 00:25:40,420
this recording's
from two years ago.
644
00:25:40,422 --> 00:25:42,989
But what's strange is that it
happened at the same time of day
645
00:25:42,991 --> 00:25:45,158
as the construction
incident.
646
00:25:45,160 --> 00:25:46,159
Scaffolding pins.
647
00:25:46,161 --> 00:25:47,427
There's traces of paint and rust
648
00:25:47,429 --> 00:25:48,862
in the grooves of the pliers.
649
00:25:48,864 --> 00:25:50,731
What happened at that
construction site this morning
650
00:25:50,733 --> 00:25:51,832
was no accident.
651
00:25:51,834 --> 00:25:53,133
MAN: All right,
what do we got?
652
00:25:53,135 --> 00:25:54,201
(creaking)
653
00:25:54,203 --> 00:25:55,602
Help! Help!
654
00:25:55,604 --> 00:25:56,970
Play the next one.
655
00:25:56,972 --> 00:25:59,533
FINCH:
911, what's your emergency?
656
00:25:59,583 --> 00:26:00,108
WOMAN:
Please help.
657
00:26:00,132 --> 00:26:01,275
Someone just broke
into my house.
658
00:26:01,276 --> 00:26:02,676
He's strangling my husband.
659
00:26:02,678 --> 00:26:04,311
I'm hiding in a closet.
660
00:26:04,313 --> 00:26:06,012
FINCH:
Try to stay calm, ma'am.
661
00:26:06,014 --> 00:26:07,414
I'm showing your address
as 754 Plymouth Way.
662
00:26:07,416 --> 00:26:08,715
Is that correct?
663
00:26:08,717 --> 00:26:09,783
WOMAN:
Yes, please hurry!
664
00:26:09,785 --> 00:26:11,284
I can hear him in the kitchen.
665
00:26:11,286 --> 00:26:12,652
Oh! I think my husband's dead.
666
00:26:12,654 --> 00:26:14,121
FINCH:
Help is on the way.
667
00:26:14,123 --> 00:26:15,455
WOMAN:
Why is this taking so long?
668
00:26:15,457 --> 00:26:17,390
Why is no one coming?
669
00:26:17,392 --> 00:26:19,793
This is very similar
to the scene upstairs.
670
00:26:19,795 --> 00:26:21,528
This is exactly what happened
671
00:26:21,530 --> 00:26:23,463
to Mary and Roger Ingram.
672
00:26:23,465 --> 00:26:24,798
This is also
another old recording
673
00:26:24,800 --> 00:26:26,399
and it happened
at the same time
674
00:26:26,401 --> 00:26:28,969
as the murders
this morning, 6:23 a.m.
675
00:26:28,971 --> 00:26:31,972
Listening is
a deeply immersive experience.
676
00:26:31,974 --> 00:26:33,106
FINCH:
Sir, what's your location?
677
00:26:33,108 --> 00:26:35,108
MAN: Construction site
at Lexington...
678
00:26:35,110 --> 00:26:37,344
RYAN: Every time Leo listen
to one of these recordings,
679
00:26:37,346 --> 00:26:39,780
he envisioned himself
in the scene.
680
00:26:39,782 --> 00:26:42,048
We need an ambulance.
RYAN: First, he's a witness.
681
00:26:42,050 --> 00:26:43,316
...can't tell if he's alive.
682
00:26:43,318 --> 00:26:45,385
There's blood everywhere
and he's not moving.
683
00:26:45,387 --> 00:26:47,220
RYAN: Then he's the victim.
Please help.
684
00:26:47,222 --> 00:26:49,222
Someone just broke
into my house.
685
00:26:49,224 --> 00:26:50,657
He's strangling my husband.
686
00:26:50,659 --> 00:26:52,125
(creaks)
687
00:26:52,127 --> 00:26:53,693
RYAN:
Now, Leo's the killer.
688
00:26:53,695 --> 00:26:55,095
(woman gasps)
No.
689
00:26:55,097 --> 00:26:56,263
No, no!
690
00:26:56,265 --> 00:26:58,598
He's recreating
his greatest hits.
691
00:26:58,600 --> 00:27:00,200
(woman screams)
KRUMITZ: Yeah, but what does the virus
692
00:27:00,202 --> 00:27:01,802
have to do with all this?
And why today?
693
00:27:01,804 --> 00:27:03,003
RYAN:
It's the anniversary
694
00:27:03,005 --> 00:27:04,538
of the day he was fired.
695
00:27:04,540 --> 00:27:06,573
Look, Leo is a sadist
696
00:27:06,575 --> 00:27:08,275
who's aroused
by the sound of fear.
697
00:27:08,277 --> 00:27:10,944
The virus does
everything that he needs.
698
00:27:10,946 --> 00:27:13,780
The dropped calls delay
the emergency responders,
699
00:27:13,782 --> 00:27:16,883
which maximizes
the victims' panic.
700
00:27:16,885 --> 00:27:19,219
Leo records the calls
701
00:27:19,221 --> 00:27:20,754
so he can enjoy them later.
702
00:27:20,756 --> 00:27:22,989
It's his version
703
00:27:22,991 --> 00:27:24,424
of a serial killer
taking a trophy.
704
00:27:24,426 --> 00:27:25,525
Krumitz, didn't
you say there were
705
00:27:25,527 --> 00:27:27,360
three recordings
on that playlist?
706
00:27:29,631 --> 00:27:31,164
FINCH:
911, what's your emergency?
707
00:27:31,166 --> 00:27:32,299
BOY:
Help! He's stabbing him.
708
00:27:32,301 --> 00:27:33,700
He's stabbing my dad!
709
00:27:33,702 --> 00:27:35,335
FINCH:
What's your name? Where are you?
710
00:27:35,337 --> 00:27:37,337
BOY: Dylan.
And I don't know where I am.
711
00:27:37,339 --> 00:27:38,705
We just... we left the game.
712
00:27:38,707 --> 00:27:39,639
It's an alley.
713
00:27:39,641 --> 00:27:40,640
FINCH:
Help is on the way.
714
00:27:40,642 --> 00:27:41,942
BOY:
The man just left!
715
00:27:41,944 --> 00:27:42,876
I'm scared.
716
00:27:42,878 --> 00:27:44,277
FINCH:
It's okay, Dylan.
717
00:27:44,279 --> 00:27:46,079
I need you to go to your dad
Tell me what you see.
718
00:27:46,081 --> 00:27:47,080
BOY: He's not moving!
719
00:27:47,082 --> 00:27:48,582
(whimpering)
720
00:27:48,584 --> 00:27:52,018
Leo mimicked the first two
recordings on the playlist.
721
00:27:52,020 --> 00:27:53,520
And this recording
722
00:27:53,522 --> 00:27:55,589
is of a man being stabbed in
an alley in front of his son.
723
00:27:55,591 --> 00:27:57,390
It happened
at 8:53 at night.
724
00:27:57,392 --> 00:27:59,292
This is his next move.
725
00:27:59,294 --> 00:28:00,560
He's gonna kill again.
726
00:28:00,562 --> 00:28:01,962
We need to stop Leo Finch.
727
00:28:01,964 --> 00:28:03,163
MUNDO:
Yeah, but how?
728
00:28:03,165 --> 00:28:05,131
There are thousands of alleys
in New York City.
729
00:28:19,019 --> 00:28:21,286
♪ ♪
730
00:28:21,288 --> 00:28:22,954
Okay, everybody, listen up.
731
00:28:22,956 --> 00:28:26,048
We're basically looking
for a-an alley in a haystack.
732
00:28:26,072 --> 00:28:28,077
Leo's two copycat killings
733
00:28:28,079 --> 00:28:31,062
took place the same time
of day as the original crimes,
734
00:28:31,162 --> 00:28:33,765
which means at approximately
8:53 tonight,
735
00:28:33,789 --> 00:28:36,111
somebody is gonna get stabbed.
736
00:28:36,300 --> 00:28:39,001
So let's get going on this.
All right?
737
00:28:39,003 --> 00:28:41,039
We've got just over an hour
to find this Leo Finch
738
00:28:41,040 --> 00:28:42,840
before he finds his next victim.
739
00:28:42,842 --> 00:28:45,976
D.B., I figured out
what the three 911 calls
740
00:28:45,978 --> 00:28:47,577
on Leo's playlist
all have in common.
741
00:28:47,579 --> 00:28:49,345
They all lasted
over 20 minutes...
742
00:28:49,347 --> 00:28:52,348
almost three times longer
than your average 911 call.
743
00:28:52,350 --> 00:28:54,951
The victims all
died because Leo
744
00:28:54,953 --> 00:28:56,753
didn't dispatch
the paramedics in time.
745
00:28:56,755 --> 00:28:58,989
So he orchestrated their deaths.
746
00:28:58,991 --> 00:29:00,223
NELSON:
Just spoke to the NYPD.
747
00:29:00,554 --> 00:29:01,986
They issued a BOLO for Leo.
748
00:29:01,988 --> 00:29:03,187
And I sent them the antidote.
749
00:29:03,189 --> 00:29:04,655
They'll push it
to all cell phones in the area
750
00:29:04,657 --> 00:29:06,124
using AMBER Alerts.
Right.
751
00:29:06,126 --> 00:29:07,592
So you guys figured out the, uh,
752
00:29:07,594 --> 00:29:09,460
alphanumeric problem,
did you?
753
00:29:09,462 --> 00:29:10,995
We used a buffer
overflow exploit,
754
00:29:10,997 --> 00:29:12,597
thank you very much.
755
00:29:12,599 --> 00:29:15,099
NELSON: That's right.
It'll flood the phones
756
00:29:15,101 --> 00:29:16,200
with a specific sequence of text
757
00:29:16,202 --> 00:29:17,935
to force the NYPD home page
to pop up.
758
00:29:17,937 --> 00:29:20,303
Now, that home page will have
a download for the antidote.
759
00:29:20,305 --> 00:29:21,971
Basically, we're geniuses.
760
00:29:21,973 --> 00:29:23,140
Exactly.
Basically.
761
00:29:23,142 --> 00:29:24,407
Basically.
Do me a favor, though, will you?
762
00:29:24,409 --> 00:29:26,610
Call NYPD back,
tell them to display
763
00:29:26,612 --> 00:29:28,478
a photo of Leo Finch
with the antidote.
764
00:29:28,480 --> 00:29:31,515
Might as well make the city
our eyes and ears.
765
00:29:31,517 --> 00:29:33,383
Uh... yeah, uh...
766
00:29:33,385 --> 00:29:34,618
I think you should do that.
767
00:29:34,620 --> 00:29:36,452
Why is that?
Might get a little pushback.
768
00:29:36,454 --> 00:29:38,820
Apparently, they've been
chatting with my pal the mayor.
769
00:29:38,822 --> 00:29:40,456
Yeah, Nelson,
this has nothing to do
770
00:29:40,458 --> 00:29:41,890
with your Stock Exchange hack,
all right?
771
00:29:41,892 --> 00:29:43,392
Call them back,
772
00:29:43,394 --> 00:29:44,793
tell them to post the photo
773
00:29:44,795 --> 00:29:46,762
and the antidote.
Come on, buddy.
774
00:29:46,764 --> 00:29:48,730
This is your hero moment.
775
00:29:49,399 --> 00:29:50,766
You got this, Nelson.
776
00:29:50,768 --> 00:29:52,134
Right, right.
777
00:29:52,136 --> 00:29:53,468
My hero moment.
All right.
778
00:30:06,382 --> 00:30:08,616
I just talked to
the police chief.
779
00:30:08,618 --> 00:30:11,418
He told me that you're
using an AMBER Alert
780
00:30:11,420 --> 00:30:14,154
to send out an antidote
written by Brody Nelson.
781
00:30:14,156 --> 00:30:15,121
That's correct.
782
00:30:15,123 --> 00:30:16,056
We'll have to verify that code
783
00:30:16,058 --> 00:30:17,791
before it goes out
to the public.
784
00:30:17,793 --> 00:30:19,359
I've hired a private
security firm.
785
00:30:19,361 --> 00:30:22,028
No, that's not necessary
and we don't have the time.
786
00:30:22,030 --> 00:30:23,497
We are chasing a killer, here.
787
00:30:23,499 --> 00:30:25,566
I'm well aware of that,
and I'm shocked
788
00:30:25,568 --> 00:30:26,932
that you would even
trust a black hat
789
00:30:26,934 --> 00:30:28,167
with something this critical.
790
00:30:28,169 --> 00:30:30,236
I've heard about your
unconventional tactics,
791
00:30:30,238 --> 00:30:31,370
Deputy Director,
792
00:30:31,372 --> 00:30:33,072
but this is inappropriate
and dangerous.
793
00:30:33,074 --> 00:30:34,773
Mayor Cavanaugh,
how many more lives
794
00:30:34,775 --> 00:30:35,974
are you willing to jeopardize?
795
00:30:35,976 --> 00:30:37,109
No one cares more
796
00:30:37,111 --> 00:30:39,178
about the citizens
of this city than I do.
797
00:30:39,180 --> 00:30:40,246
That's why I'm here.
798
00:30:40,248 --> 00:30:43,015
Brody Nelson's antidote
will save lives.
799
00:30:43,017 --> 00:30:45,149
Now, I could go
over your head with this,
800
00:30:45,151 --> 00:30:47,252
but I'm not sure
that you could weather
801
00:30:47,254 --> 00:30:49,053
the political embarrassment.
802
00:30:49,055 --> 00:30:51,756
If this goes sideways,
it's on you.
803
00:30:54,727 --> 00:30:57,262
♪
804
00:30:58,564 --> 00:31:01,198
(indistinct chatter,
phone chimes)
805
00:31:21,619 --> 00:31:23,786
RAMIREZ: The public's responding
to the AMBER Alert.
806
00:31:23,788 --> 00:31:25,888
I've got multiple reports
of Leo Finch
807
00:31:25,890 --> 00:31:27,590
at Madison and 140th.
808
00:31:27,592 --> 00:31:28,991
Pellham Park.
That's Harlem.
809
00:31:28,993 --> 00:31:30,960
Yeah, but we've got several
sightings on the east side.
810
00:31:30,962 --> 00:31:33,263
I mean, guy can't be
in two places at once.
811
00:31:33,265 --> 00:31:34,929
Dopplegangers?
812
00:31:34,931 --> 00:31:36,197
No.
813
00:31:36,199 --> 00:31:37,466
No, we made
a mistake. Uh...
814
00:31:37,468 --> 00:31:38,667
What do you mean?
815
00:31:38,669 --> 00:31:40,869
We sent the AMBER Alert
to everyone.
816
00:31:40,871 --> 00:31:43,037
Everyone.
817
00:31:43,039 --> 00:31:44,406
Including Leo Finch.
818
00:31:57,185 --> 00:31:58,486
Yeah, okay, all right.
819
00:31:58,488 --> 00:31:59,487
Time to call Mom.
820
00:31:59,489 --> 00:32:01,555
Let's get Avery on the phone.
821
00:32:01,557 --> 00:32:03,758
Um, Avery.
822
00:32:03,760 --> 00:32:04,992
We're striking out here.
823
00:32:04,994 --> 00:32:08,395
It looks like Leo could be
reporting false sightings.
824
00:32:08,397 --> 00:32:10,029
So what do you think?
825
00:32:10,031 --> 00:32:12,365
Let's review everything
we know about Leo Finch.
826
00:32:12,367 --> 00:32:13,667
We know that
he's meticulous
827
00:32:13,669 --> 00:32:15,335
about the details
in his recreations.
828
00:32:15,337 --> 00:32:17,236
The boy in the third
911 call said
829
00:32:17,238 --> 00:32:19,606
that he and his dad were leaving a game.
MUNDO: The police report said
830
00:32:19,608 --> 00:32:21,240
Mets tickets were found
in the dad's jacket pocket.
831
00:32:21,242 --> 00:32:22,208
It was a baseball game.
832
00:32:22,210 --> 00:32:23,643
Yeah, but it's not
baseball season.
833
00:32:23,645 --> 00:32:27,012
RYAN: Well, let's concentrate
on another sporting event.
834
00:32:28,715 --> 00:32:30,015
All right, here we go.
835
00:32:30,017 --> 00:32:31,249
I got hockey in Manhattan,
basketball in Brooklyn.
836
00:32:31,251 --> 00:32:33,285
MUNDO: Which one fits our window?
Both.
837
00:32:33,287 --> 00:32:35,587
Let's compare them
with the BOLO locations.
838
00:32:35,589 --> 00:32:37,222
Okay, we've got
six sightings of Leo
839
00:32:37,224 --> 00:32:39,458
around the arena in Manhattan,
only one in Brooklyn.
840
00:32:39,460 --> 00:32:41,293
RYAN:
It's the hockey game.
841
00:32:41,295 --> 00:32:42,960
Which ends in 15 minutes.
842
00:32:42,962 --> 00:32:44,696
KRUMITZ: The original stabbing
took place in an alley
843
00:32:44,698 --> 00:32:46,631
two blocks away
from the stadium.
844
00:32:46,633 --> 00:32:48,599
All right, how many alleys
are there within that range
845
00:32:48,601 --> 00:32:49,900
of the arena?
846
00:32:49,902 --> 00:32:51,436
One second.
847
00:32:51,438 --> 00:32:52,903
RAMIREZ:
Three.
848
00:32:52,905 --> 00:32:54,905
All right, well, this is a guy
that sticks to details, right?
849
00:32:54,907 --> 00:32:56,273
Let's pull up some old
crime scene photos,
850
00:32:56,275 --> 00:32:57,908
see if we can narrow
it down to one.
851
00:32:57,910 --> 00:33:00,276
Remember, Leo is a
deviant audiophile.
852
00:33:00,278 --> 00:33:02,912
It isn't about what we see,
it's about what we hear.
853
00:33:02,914 --> 00:33:05,081
Raven, pull up
the original 911 recording
854
00:33:05,083 --> 00:33:06,883
of the alley stabbing.
855
00:33:06,885 --> 00:33:08,084
Isolate the background sound.
856
00:33:08,086 --> 00:33:09,486
Okay.
857
00:33:09,488 --> 00:33:10,587
FINCH: 911.
What's your emergency?
858
00:33:10,589 --> 00:33:12,288
BOY:
Help, he's stabbing him!
859
00:33:12,290 --> 00:33:13,357
He's stabbing my dad!
860
00:33:13,359 --> 00:33:14,424
FINCH:
What's your name?
861
00:33:14,426 --> 00:33:15,759
Stop. Go back.
862
00:33:15,761 --> 00:33:16,792
(rumbling)
863
00:33:16,794 --> 00:33:18,427
That's an elevated train.
864
00:33:18,429 --> 00:33:20,095
Pull up a subway map.
865
00:33:20,097 --> 00:33:23,232
Look for any trains near
the arena that go above ground.
866
00:33:26,102 --> 00:33:28,337
RAMIREZ: Got it, it's the alley
between West 4th and Bleeker.
867
00:33:28,339 --> 00:33:29,273
Notify the arena.
868
00:33:29,274 --> 00:33:30,738
I'll have 'em redirect crowds
away from that alley,
869
00:33:30,742 --> 00:33:32,641
have NYPD clear
the streets.
870
00:33:32,643 --> 00:33:34,376
Let's go get Leo Finch.
871
00:33:41,675 --> 00:33:44,843
(thunder crashing)
872
00:33:55,787 --> 00:33:57,988
(siren chirps)
MUNDO: It's over, Leo!
873
00:33:57,990 --> 00:33:59,490
FBI!
874
00:33:59,492 --> 00:34:01,925
We have you surrounded!
875
00:34:01,927 --> 00:34:04,161
Got a visual on Leo,
he is armed.
876
00:34:04,928 --> 00:34:06,363
Drop the knife, Leo!
877
00:34:07,565 --> 00:34:09,098
Nobody's coming out
of that arena.
878
00:34:09,100 --> 00:34:12,068
We've sealed the exits,
we've cleared the streets.
879
00:34:12,070 --> 00:34:13,637
There's no one here
for you to harm.
880
00:34:13,639 --> 00:34:15,372
So drop the knife.
Drop it now.
881
00:34:15,374 --> 00:34:16,873
They're mine!
882
00:34:16,875 --> 00:34:18,441
They're mine!
You can't take them!
883
00:34:18,443 --> 00:34:19,476
Do not take one more step.
884
00:34:19,478 --> 00:34:20,477
Give them back to me!
885
00:34:20,479 --> 00:34:21,710
They're all I have!
886
00:34:21,712 --> 00:34:24,012
MUNDO: Take one more step,
and I will shoot!
887
00:34:25,615 --> 00:34:27,716
RYAN:
Stand down, Elijah.
888
00:34:27,718 --> 00:34:29,084
We confiscated his computer.
889
00:34:29,086 --> 00:34:31,654
He's talking about the
recordings he had saved on it.
890
00:34:31,656 --> 00:34:33,855
MUNDO:
He came here to kill someone.
891
00:34:33,857 --> 00:34:35,023
He came to satisfy an addiction.
892
00:34:35,025 --> 00:34:36,758
Leo's a junkie.
He came to get a fix.
893
00:34:36,760 --> 00:34:38,459
We could still
end this peacefully.
894
00:34:38,461 --> 00:34:41,262
Krumitz, pull up the third
recording on Leo's playlist.
895
00:34:41,264 --> 00:34:43,498
We need to find a way to play
it for Leo at the scene.
896
00:34:43,500 --> 00:34:47,001
Okay, the squad cars all have
P.A. systems with bullhorns.
897
00:34:47,003 --> 00:34:48,369
Operator, this is
Agent Daniel Krumitz.
898
00:34:48,371 --> 00:34:49,304
Connect me to dispatch.
899
00:34:49,306 --> 00:34:50,672
MAN:
Hold your fire!
900
00:34:50,674 --> 00:34:54,676
KRUMITZ: Officer, I need you
to turn on your P.A. system.
901
00:34:56,611 --> 00:34:58,945
FINCH: 911.
What's your emergency?
902
00:34:58,947 --> 00:35:00,814
BOY: Help, he's stabbing him!
He's stabbing my dad!
903
00:35:00,816 --> 00:35:03,049
FINCH: What's your name?
Where are you?
904
00:35:03,051 --> 00:35:04,284
BOY: Dylan, I don't know
where I am.
905
00:35:04,286 --> 00:35:05,852
We just... we left the game.
It's an alley.
906
00:35:05,854 --> 00:35:07,954
FINCH:
Help is on the way.
907
00:35:07,956 --> 00:35:10,023
BOY: The man just left.
I'm scared.
908
00:35:10,025 --> 00:35:12,592
FINCH: Hey, Dylan, I need you
to go to your dad.
909
00:35:12,594 --> 00:35:13,726
Tell me what you see.
910
00:35:13,728 --> 00:35:15,160
BOY:
He's not moving.
911
00:35:18,432 --> 00:35:19,665
He was going for his knife.
912
00:35:24,571 --> 00:35:27,906
Someone call 911.
913
00:35:27,908 --> 00:35:29,874
I've been hurt.
914
00:35:29,876 --> 00:35:32,076
I need help.
915
00:35:36,515 --> 00:35:38,783
♪
916
00:35:48,192 --> 00:35:50,628
Nice code, brother. Huh?
917
00:35:50,630 --> 00:35:52,763
You're gonna leave me hanging?
My bad, bro.
918
00:35:52,765 --> 00:35:54,898
(scoffs)
That's old news, Nelson.
919
00:35:54,900 --> 00:35:57,100
NELSON: Yeah, but not to the
mayor of New York City.
920
00:35:57,102 --> 00:35:58,335
I mean, all he saw
was a black hat
921
00:35:58,337 --> 00:35:59,570
who brought down
the stock exchange.
922
00:35:59,572 --> 00:36:01,672
(scoffs) It's like
no matter what I do right,
923
00:36:01,674 --> 00:36:03,039
I can't shake what I did wrong.
924
00:36:03,041 --> 00:36:04,774
This is what pops up
when I Google my name.
925
00:36:04,776 --> 00:36:05,775
Look at this.
926
00:36:05,777 --> 00:36:08,444
RYAN:
Hey, come on.
927
00:36:08,446 --> 00:36:10,112
You didn't have to come
back to Washington.
928
00:36:10,114 --> 00:36:11,347
You could have stayed
in New York.
929
00:36:11,349 --> 00:36:14,083
I know, but I was...
I was a distraction.
930
00:36:14,085 --> 00:36:16,118
You had to go
to bat for me.
931
00:36:16,120 --> 00:36:18,288
It's not like anything Mayor
Cavanaugh said wasn't true.
932
00:36:18,290 --> 00:36:20,722
Really? You really
took that eight million?
933
00:36:20,724 --> 00:36:21,990
Except for that, Krummy.
934
00:36:21,992 --> 00:36:24,293
Hey, we cleared you
of that long ago.
935
00:36:24,295 --> 00:36:26,728
The fact remains
you can't rewrite history,
936
00:36:26,730 --> 00:36:28,497
but you can make it.
937
00:36:28,499 --> 00:36:30,766
And that is exactly
what you did today.
938
00:36:30,768 --> 00:36:31,933
Own that.
939
00:36:31,935 --> 00:36:34,135
You should be
very proud of yourself.
940
00:36:34,137 --> 00:36:36,538
Thank you, Avery.
941
00:36:40,609 --> 00:36:41,942
KRUMITZ:
Eight million.
942
00:36:41,944 --> 00:36:43,544
Oh, my God.
You can tell me.
943
00:36:43,546 --> 00:36:45,913
I won't tell anybody.
Come on, you know where it is.
944
00:36:45,915 --> 00:36:47,981
Let's go get it right now.
- I didn't steal it.
945
00:36:47,983 --> 00:36:49,583
But I'm gonna find out
946
00:36:49,585 --> 00:36:50,951
who did.
947
00:36:50,953 --> 00:36:55,221
And when I do... I'm gonna put
that bastard in prison.
948
00:37:00,528 --> 00:37:03,229
Here, let me read
this to you.
949
00:37:03,231 --> 00:37:04,864
Okay.
950
00:37:04,866 --> 00:37:08,702
"I'm taking a chance, hoping
this is still your number.
951
00:37:08,704 --> 00:37:11,637
"I know it's been two years.
But fingers crossed,
952
00:37:11,639 --> 00:37:13,405
"and divorce in the rearview...
953
00:37:13,407 --> 00:37:15,173
Maybe""
Question mark.
954
00:37:15,175 --> 00:37:16,575
"I'm at
Le Petit Paris
955
00:37:16,577 --> 00:37:19,812
every night from 8:00
until they throw me out."
956
00:37:19,814 --> 00:37:21,647
And then she signs it:
"Foolish Heart."
957
00:37:21,649 --> 00:37:23,048
So you got a new phone
958
00:37:23,050 --> 00:37:25,718
and her new number, and whoever
had that number before you
959
00:37:25,720 --> 00:37:27,653
was supposed to get that text.
960
00:37:27,655 --> 00:37:30,087
I-I know, I should have texted
her right back when I got it,
961
00:37:30,089 --> 00:37:31,121
but I didn't, I-I waited.
962
00:37:31,123 --> 00:37:33,157
But then I figured,
you know,
963
00:37:33,159 --> 00:37:37,127
she would assume that her text
hadn't gone through, right?
964
00:37:37,129 --> 00:37:38,629
Mm-hmm.
- And maybe that was better
965
00:37:38,631 --> 00:37:42,132
than letting her know that I,
you know, a complete stranger,
966
00:37:42,134 --> 00:37:45,169
knew that she'd...
put herself out there.
967
00:37:45,171 --> 00:37:46,603
And I just didn't want
968
00:37:46,605 --> 00:37:47,838
to embarrass her.
969
00:37:47,840 --> 00:37:49,906
How do you know it's a her?
970
00:37:50,742 --> 00:37:52,041
Well, that's a good point.
971
00:37:52,043 --> 00:37:53,810
Okay, end of conversation.
(laughs)
972
00:37:53,812 --> 00:37:55,245
No, wait a minute.
973
00:37:55,247 --> 00:37:57,681
You fantasized about who it would be, D.B.
No, I didn't,
974
00:37:57,683 --> 00:37:58,715
no, I didn't.
975
00:37:58,717 --> 00:37:59,916
Yeah, you investigated it.
976
00:37:59,918 --> 00:38:01,050
No, I did not investigate.
977
00:38:01,052 --> 00:38:02,718
Yeah, you did.
I called the restaurant.
978
00:38:02,720 --> 00:38:04,319
(gasps) See?
- That's all. I call... (laughs)
979
00:38:04,321 --> 00:38:07,055
They said that
a rather attractive woman
980
00:38:07,057 --> 00:38:09,458
came there every night
the same time.
981
00:38:09,460 --> 00:38:11,427
And I... I knew
982
00:38:11,429 --> 00:38:13,629
that she was roughly
in my age group.
983
00:38:13,631 --> 00:38:15,831
Oh.
- "Foolish Heart""
984
00:38:15,833 --> 00:38:18,166
That's a reference
to a Steve Perry song.
985
00:38:18,168 --> 00:38:20,167
♪
986
00:38:20,169 --> 00:38:21,870
That's a rock star
before your time.
987
00:38:21,872 --> 00:38:24,873
Anyway, this...
the whole text, it just...
988
00:38:24,875 --> 00:38:27,409
you know, it seemed
so brave and... and honest,
989
00:38:27,411 --> 00:38:29,343
and... I'm curious.
990
00:38:29,345 --> 00:38:31,780
You hijacked another man's text.
991
00:38:31,782 --> 00:38:33,180
Yes, I did.
992
00:38:33,182 --> 00:38:34,315
(both laugh)
993
00:38:34,317 --> 00:38:35,950
So you're gonna meet her
at the restaurant,
994
00:38:35,952 --> 00:38:37,217
or what?
995
00:38:38,520 --> 00:38:40,421
No. No.
996
00:38:40,423 --> 00:38:42,689
♪
997
00:38:45,860 --> 00:38:49,563
(indistinct chatter)
998
00:38:57,304 --> 00:38:59,238
(sighs)
999
00:39:05,078 --> 00:39:06,946
(inhales sharply)
1000
00:39:07,681 --> 00:39:09,949
♪
1001
00:39:11,684 --> 00:39:14,152
(ice rattling)
1002
00:39:15,020 --> 00:39:16,488
Hi.
1003
00:39:17,323 --> 00:39:18,523
Hi.
1004
00:39:18,525 --> 00:39:20,291
(chuckles):
Forgive me for asking,
1005
00:39:20,293 --> 00:39:22,494
but are-are you...
here alone?
1006
00:39:22,496 --> 00:39:23,728
Uh...
1007
00:39:23,730 --> 00:39:25,296
I am.
1008
00:39:25,298 --> 00:39:26,565
Yeah. Of course.
1009
00:39:26,567 --> 00:39:28,031
Um... sorry, no,
1010
00:39:28,033 --> 00:39:29,266
I don't mean of course,
I mean...
1011
00:39:29,268 --> 00:39:31,535
I have a confession to make.
Oh, really?
1012
00:39:31,537 --> 00:39:33,604
Shouldn't I know your name
before we jump
1013
00:39:33,606 --> 00:39:35,506
right into the serious stuff?
Yes, yeah.
1014
00:39:35,508 --> 00:39:37,508
Sorry. Uh, D.B.
1015
00:39:37,510 --> 00:39:39,309
Greer.
- Nice to meet you.
1016
00:39:39,311 --> 00:39:40,611
See, I, uh...
1017
00:39:40,613 --> 00:39:44,147
I received this today,
and... obviously,
1018
00:39:44,149 --> 00:39:45,949
it was not meant for me.
1019
00:39:45,951 --> 00:39:47,617
I should have texted
you right back,
1020
00:39:47,619 --> 00:39:49,652
but I didn't, and I'm sorry.
1021
00:39:50,454 --> 00:39:52,188
Mmm.
1022
00:39:52,190 --> 00:39:54,457
Yeah. Yeah, awkward.
1023
00:39:54,459 --> 00:39:56,192
No, not for me.
1024
00:39:56,194 --> 00:39:58,528
Because I didn't write
that text.
1025
00:39:58,530 --> 00:40:01,297
(laughs): Really.
1026
00:40:01,299 --> 00:40:02,397
You're kidding.
1027
00:40:02,399 --> 00:40:04,466
Oh, boy. (sighs)
1028
00:40:05,301 --> 00:40:07,435
So...
1029
00:40:08,204 --> 00:40:10,472
(laughing):
Oh...
1030
00:40:10,474 --> 00:40:12,073
Oh, man.
1031
00:40:12,075 --> 00:40:15,210
Well, shame on her.
- (laughs)
1032
00:40:15,212 --> 00:40:17,813
Soliciting men via text.
1033
00:40:17,815 --> 00:40:19,146
So...
1034
00:40:19,148 --> 00:40:21,148
can I buy you a drink?
1035
00:40:21,150 --> 00:40:22,617
Really?
1036
00:40:22,619 --> 00:40:25,185
Seems like you could use one.
1037
00:40:25,187 --> 00:40:28,255
Shouldn't I know your last name
before we... jump into
1038
00:40:28,257 --> 00:40:31,025
the serious stuff?
Greer Latimore.
1039
00:40:31,027 --> 00:40:33,060
D.B. Russell.
1040
00:40:33,062 --> 00:40:35,129
Nice to meet you.
1041
00:40:35,131 --> 00:40:37,230
You, too.
1042
00:40:37,232 --> 00:40:40,634
♪ Foolish heart...
- So, uh...
1043
00:40:40,636 --> 00:40:42,201
what do you do...
1044
00:40:42,203 --> 00:40:43,637
Greer Latimore?
1045
00:40:43,639 --> 00:40:45,672
Former Secret Service.
1046
00:40:45,674 --> 00:40:48,241
Dabble in...
private investigations.
1047
00:40:48,243 --> 00:40:49,776
♪ Foolish, foolish heart...
Nuh-uh.
1048
00:40:49,778 --> 00:40:51,011
Uh-huh.
1049
00:40:51,013 --> 00:40:53,145
Oh, boy.
1050
00:40:53,147 --> 00:40:54,413
What are you drinking?
1051
00:40:54,415 --> 00:40:55,781
♪ You've been wrong before...
Something manly.
1052
00:40:55,783 --> 00:40:57,315
(laughs)
1053
00:40:57,317 --> 00:40:58,584
Okay.
1054
00:40:58,586 --> 00:40:59,785
Tequila.
1055
00:40:59,787 --> 00:41:01,854
Very manly.
- Yes, yes.
1056
00:41:01,856 --> 00:41:04,356
♪ Foolish, foolish heart...
Excuse me.
1057
00:41:09,605 --> 00:41:16,105
== sync, corrected by elderman ==
@elder_man