1
00:00:38,665 --> 00:00:41,500
♪ ♪
2
00:01:10,531 --> 00:01:12,797
♪ ♪
3
00:01:14,768 --> 00:01:15,901
911. What is your emergency?
4
00:01:15,903 --> 00:01:17,068
I just witnessed a hit and run.
5
00:01:17,070 --> 00:01:18,136
911. What is your emergency?
6
00:01:18,138 --> 00:01:18,904
My apartment
building's on fire.
7
00:01:18,906 --> 00:01:20,005
There are people still inside!
8
00:01:20,007 --> 00:01:20,939
911. What's your emergency?
9
00:01:20,941 --> 00:01:21,973
How many people...
10
00:01:21,975 --> 00:01:23,175
I hear screams!
11
00:01:23,177 --> 00:01:24,609
911. What is your emergency?
12
00:01:24,611 --> 00:01:26,645
I need to get to a hospital.
13
00:01:26,647 --> 00:01:27,979
I'm five months pregnant.
14
00:01:27,981 --> 00:01:29,748
I'm feeling sharp,
stabbing pains.
15
00:01:31,885 --> 00:01:33,618
It's too soon for contractions.
16
00:01:33,620 --> 00:01:36,221
I'm at 249 West McCoy Street.
17
00:01:38,192 --> 00:01:41,126
Hello? Hello?
18
00:01:41,128 --> 00:01:43,295
911. What is your emergency?
19
00:01:43,297 --> 00:01:45,564
I need help.
I need an ambulance.
20
00:01:45,566 --> 00:01:47,999
I think my wife is
having a heart attack.
21
00:01:48,001 --> 00:01:49,834
She's collapsed.
What-what do I do?
22
00:01:49,836 --> 00:01:51,736
Hello?
Are you-- are you there?
23
00:01:51,738 --> 00:01:53,738
Hello! Help!
24
00:01:53,740 --> 00:01:55,473
Honey, sweetheart, stay with me.
25
00:01:55,475 --> 00:01:56,875
Hold on, sweetheart, hold on.
26
00:01:59,680 --> 00:02:01,813
Hello? Hello?
Hello? Hello?
27
00:02:01,815 --> 00:02:03,515
Someone help, please!
28
00:02:03,517 --> 00:02:04,683
I need help!
29
00:02:04,685 --> 00:02:06,084
Help! Help!
30
00:02:06,086 --> 00:02:07,652
911. What is your emergency?
31
00:02:07,654 --> 00:02:08,687
We need an ambulance.
32
00:02:08,689 --> 00:02:10,555
A man's fallen
from a scaffolding,
33
00:02:10,557 --> 00:02:12,123
but we can't tell if he's alive.
34
00:02:12,125 --> 00:02:14,392
There's blood everywhere
and he isn't moving.
35
00:02:14,394 --> 00:02:16,361
Hello? Can you hear me?
Are you there?
36
00:02:16,363 --> 00:02:17,729
Are you there?
Hello, hello?
37
00:02:17,731 --> 00:02:18,763
Sweeney, hold on.
Can you hear me?
38
00:02:18,765 --> 00:02:19,998
Hello?
39
00:02:20,000 --> 00:02:21,066
It's coming down!
40
00:02:21,068 --> 00:02:23,435
Watch out! Look out!
41
00:02:25,205 --> 00:02:26,838
Go, go!
42
00:02:26,840 --> 00:02:28,373
Something's wrong with my phone!
43
00:02:28,375 --> 00:02:30,375
Someone call 911!
44
00:02:32,212 --> 00:02:33,578
This is 911.
45
00:02:33,580 --> 00:02:34,713
What is your emergency?
46
00:02:34,715 --> 00:02:36,147
911. What's your emergency?
47
00:02:36,149 --> 00:02:37,549
What is your emergency?
48
00:02:37,551 --> 00:02:39,017
We've been flooded with reports
49
00:02:39,019 --> 00:02:41,052
of people having issues
calling 911 from cell phones.
50
00:02:41,054 --> 00:02:42,320
They say they connect
51
00:02:42,322 --> 00:02:44,389
to an operator, but then
the call drops off
52
00:02:44,391 --> 00:02:46,224
and their phone
freezes in call mode.
53
00:02:46,226 --> 00:02:47,192
What makes you think
54
00:02:47,194 --> 00:02:49,361
that this is a cyber intrusion
55
00:02:49,363 --> 00:02:52,163
and not a malfunction
of the New York City 911 system?
56
00:02:52,165 --> 00:02:53,665
Well, we've checked
and double-checked.
57
00:02:53,667 --> 00:02:56,001
There's no evidence
of a mechanical malfunction.
58
00:02:56,003 --> 00:02:58,203
Our IT guys believe
it's a hack within our system
59
00:02:58,205 --> 00:03:00,071
that affects
incoming cell phone calls.
60
00:03:00,073 --> 00:03:01,439
Anyone who places a call
from a land line
61
00:03:01,441 --> 00:03:02,974
doesn't experience the problem.
62
00:03:02,976 --> 00:03:06,645
Have you ruled out issues
with cell service providers?
63
00:03:06,647 --> 00:03:08,246
They've all confirmed
that cell towers in the city
64
00:03:08,248 --> 00:03:09,347
are properly functioning
65
00:03:09,349 --> 00:03:11,850
and all other wireless
phone traffic is normal.
66
00:03:11,852 --> 00:03:14,185
So it only happens
when someone calls 911?
67
00:03:14,187 --> 00:03:17,055
When someone calls 911
from a cell phone.
68
00:03:17,057 --> 00:03:18,490
Not getting help
when you want it?
69
00:03:18,492 --> 00:03:20,091
That's terrifying.
70
00:03:20,093 --> 00:03:23,194
The mayor and
Homeland Security are concerned
71
00:03:23,196 --> 00:03:24,896
that this could be
a well-crafted precursor
72
00:03:24,898 --> 00:03:27,198
to a terrorist attack.
73
00:03:27,200 --> 00:03:29,000
Raven says the first reports
of dropped 911 calls
74
00:03:29,002 --> 00:03:30,635
came in around
7:00 a.m. this morning.
75
00:03:30,637 --> 00:03:32,270
Complaints were made
to local precincts
76
00:03:32,272 --> 00:03:33,538
and cell service providers.
77
00:03:33,540 --> 00:03:35,607
My operators noticed
a decrease in call volume
78
00:03:35,609 --> 00:03:36,641
about the same time.
79
00:03:36,643 --> 00:03:37,742
But none have reported
80
00:03:37,744 --> 00:03:39,044
being abruptly disconnected
81
00:03:39,046 --> 00:03:40,178
or dropped from a call.
82
00:03:40,180 --> 00:03:41,212
Excuse me, Clayton?
83
00:03:41,214 --> 00:03:42,781
Sorry. Will you
excuse me a moment?
84
00:03:44,518 --> 00:03:46,918
According to my stats, there's
definitely something going on.
85
00:03:46,920 --> 00:03:48,920
Well, I've compared
the number of 911 calls
86
00:03:48,922 --> 00:03:50,689
from yesterday at this hour
87
00:03:50,691 --> 00:03:51,856
to those received this morning.
88
00:03:51,858 --> 00:03:53,958
Huge decrease
in cell phone calls.
89
00:03:53,960 --> 00:03:55,794
On a typical day,
the call center
90
00:03:55,796 --> 00:03:57,228
would get 24,000 calls,
91
00:03:57,230 --> 00:03:58,697
70% from cell phones.
92
00:03:58,699 --> 00:04:01,666
And this morning,
cellular calls went down to 30%.
93
00:04:01,668 --> 00:04:04,102
So there are
some cell phones out there
94
00:04:04,104 --> 00:04:06,838
that are connecting to 911
and completing the call.
95
00:04:06,840 --> 00:04:09,140
Right?
Yeah, but the strange thing is,
96
00:04:09,142 --> 00:04:11,142
is that most
of the calls are made
97
00:04:11,144 --> 00:04:13,578
from devices outside
of Manhattan, in the Boroughs.
98
00:04:13,580 --> 00:04:15,046
We plugged
into the 911 system.
99
00:04:15,048 --> 00:04:17,082
No evidence of malfunctions
100
00:04:17,084 --> 00:04:18,450
or indicators of compromise.
101
00:04:18,452 --> 00:04:20,185
Yeah, no known vulnerability,
no malware,
102
00:04:20,187 --> 00:04:22,020
not a trace of digital dust
that indicates a hack.
103
00:04:22,022 --> 00:04:24,089
I mean, these boxes
are squeaky clean.
104
00:04:24,091 --> 00:04:26,358
So there's nothing here that
can tell us what's going on.
105
00:04:26,360 --> 00:04:27,625
Okay, so that means
106
00:04:27,627 --> 00:04:30,595
the problem has to be
internal to the cell phones.
107
00:04:30,597 --> 00:04:31,896
They're all different
models and brands,
108
00:04:31,898 --> 00:04:33,598
in different locations
all over the city.
109
00:04:33,600 --> 00:04:35,400
Not to mention
that they all have
110
00:04:35,402 --> 00:04:36,701
different service providers.
111
00:04:36,703 --> 00:04:38,136
Other than them being
cell phones, I mean,
112
00:04:38,138 --> 00:04:39,371
they have no connection
to each other.
113
00:04:39,373 --> 00:04:41,373
Yeah, except they all
114
00:04:41,375 --> 00:04:43,208
dropped 911 calls, right?
115
00:04:43,210 --> 00:04:45,810
We need to get ahold
of one of those phones.
116
00:04:45,812 --> 00:04:47,278
I might be able
to help with you that.
117
00:04:47,280 --> 00:04:49,047
I have the latest
incident reports.
118
00:04:49,049 --> 00:04:50,749
There was an accident
at a construction site
119
00:04:50,751 --> 00:04:52,350
not far from here.
120
00:04:52,352 --> 00:04:53,752
The foreman called
for paramedics.
121
00:04:53,754 --> 00:04:55,420
Same thing happened.
Dropped call.
122
00:04:55,422 --> 00:04:57,555
There's a possibility
we can get that phone.
123
00:04:59,259 --> 00:05:01,526
♪ ♪
124
00:05:03,063 --> 00:05:05,029
Yeah, that's my cell number
125
00:05:05,031 --> 00:05:06,698
and I'm the site foreman.
126
00:05:09,169 --> 00:05:11,436
I called 911 when
the scaffolding collapsed.
127
00:05:11,438 --> 00:05:14,806
Sweeney dropped
from the third floor.
128
00:05:14,808 --> 00:05:16,875
And there were two others
who also dialed 911?
129
00:05:16,877 --> 00:05:19,010
Yeah, Henderson and Joe Lavelle.
130
00:05:19,012 --> 00:05:20,678
Just like me,
they reached the operator,
131
00:05:20,680 --> 00:05:23,248
and then the phones froze
and nobody was on the other end.
132
00:05:23,250 --> 00:05:24,816
Is there a way
to get in touch with them?
133
00:05:24,818 --> 00:05:26,217
I'd like to take a look
at their devices.
134
00:05:26,219 --> 00:05:27,819
Yeah, I can, uh,
135
00:05:27,821 --> 00:05:30,422
I can get you
their home number.
136
00:05:30,424 --> 00:05:31,589
This is crazy.
137
00:05:31,591 --> 00:05:32,957
That kid was only
20 years old.
138
00:05:32,959 --> 00:05:34,359
Bled to death because I couldn't
139
00:05:34,361 --> 00:05:36,094
get the paramedics here in time.
140
00:05:36,096 --> 00:05:37,429
And now, two more of my guys
141
00:05:37,431 --> 00:05:39,071
are in the hospital
in critical condition.
142
00:05:40,066 --> 00:05:41,733
I hope you can figure this out.
143
00:05:41,735 --> 00:05:43,735
You know,
on jobs like this,
144
00:05:43,737 --> 00:05:46,471
something happens every day
on these sites.
145
00:05:46,473 --> 00:05:50,008
I need to know that my guys
can get help when they need it.
146
00:05:50,010 --> 00:05:51,209
Excuse me.
147
00:05:59,753 --> 00:06:01,820
Eric O'Brian's phone
is infected with malware.
148
00:06:01,822 --> 00:06:04,322
I mean, it's gonna take time
to reverse-engineer the code
149
00:06:04,324 --> 00:06:06,458
and figure out exactly
what it does to a cell.
150
00:06:06,460 --> 00:06:07,659
Nah, forget the code.
151
00:06:07,661 --> 00:06:09,761
I cloned his device
to a known-good test phone.
152
00:06:09,763 --> 00:06:11,930
Let's just call 911
and see what happens.
153
00:06:11,932 --> 00:06:14,165
All right.
154
00:06:14,167 --> 00:06:15,867
911. What is your emergency?
155
00:06:15,869 --> 00:06:17,235
My name is
Daniel Krumitz.
156
00:06:17,237 --> 00:06:18,670
I'm an agent
with the FBI.
157
00:06:18,672 --> 00:06:20,405
Operator, if you
wouldn't mind
158
00:06:20,407 --> 00:06:22,574
standing up and
waving for me?
159
00:06:22,576 --> 00:06:24,476
911. What is
your emergency?
160
00:06:24,478 --> 00:06:26,244
How 'bout counting to ten?
161
00:06:26,246 --> 00:06:27,779
Hello? You there?
162
00:06:27,781 --> 00:06:29,247
Nope. Okay.
Already gone.
163
00:06:29,249 --> 00:06:30,782
That lasted about
three seconds.
164
00:06:30,784 --> 00:06:33,451
Hey, look, maybe he thought you
were a prank caller and hung up.
165
00:06:33,453 --> 00:06:35,320
You know, you don't exactly
sound like an FBI agent.
166
00:06:35,322 --> 00:06:37,856
An operator isn't gonna
hang up that quickly.
167
00:06:37,858 --> 00:06:40,024
They're required to make sure
there's no real emergency,
168
00:06:40,026 --> 00:06:41,593
regardless of what
the caller says.
169
00:06:41,595 --> 00:06:43,595
So maybe you didn't reach
an operator at all.
170
00:06:43,597 --> 00:06:45,897
Remember, operators haven't been
reporting dropped calls,
171
00:06:45,899 --> 00:06:47,866
only people dialing
in on cell phones have.
172
00:06:47,868 --> 00:06:49,033
Hmm.
173
00:06:50,670 --> 00:06:51,936
This test phone's
still active.
174
00:06:54,007 --> 00:06:55,340
It's frozen;
I'm locked out.
175
00:06:55,342 --> 00:06:56,774
That's the hacker's plan.
176
00:06:56,776 --> 00:06:57,976
When you attempt
to dial 911,
177
00:06:57,978 --> 00:06:59,310
you won't get a chance
to do it again.
178
00:06:59,312 --> 00:07:00,612
Or use a cell at all.
179
00:07:00,614 --> 00:07:02,480
It'll force you to find
a land line or a pay phone.
180
00:07:02,482 --> 00:07:03,381
A pay phone?
181
00:07:03,383 --> 00:07:04,582
And who uses
a land line anymore?
182
00:07:04,584 --> 00:07:05,850
Yeah.
I don't even have one in my apartment.
183
00:07:05,852 --> 00:07:07,619
I don't have one, either.
184
00:07:07,621 --> 00:07:09,153
Oh, look.
Krummy, check this, right?
185
00:07:09,155 --> 00:07:10,989
I got a timestamp
indicating the moment
186
00:07:10,991 --> 00:07:13,424
the malware infected
Eric O'Brian's phone, right?
187
00:07:13,426 --> 00:07:15,693
And just seconds
before that,
188
00:07:15,695 --> 00:07:18,263
his cell phone connected
to a Wi-Fi network.
189
00:07:18,265 --> 00:07:19,430
So that router
could be
190
00:07:19,432 --> 00:07:20,899
the source of the infection.
Mm-hmm.
191
00:07:20,901 --> 00:07:22,033
You got a location?
192
00:07:22,035 --> 00:07:23,167
Yeah.
193
00:07:23,169 --> 00:07:25,069
Two seconds.
194
00:07:25,071 --> 00:07:26,704
And... tah-dah.
195
00:07:26,706 --> 00:07:27,705
All right, I got it.
196
00:07:27,707 --> 00:07:28,773
I'm driving.
Let's go.
197
00:07:28,775 --> 00:07:31,242
What exactly does
an FBI agent sound like?
198
00:07:31,244 --> 00:07:33,545
Smooth, Krummy. Sturdy.
199
00:07:33,547 --> 00:07:35,046
Gotta sound like you just
finished the Ironman.
200
00:07:35,048 --> 00:07:37,081
I'm out of breath?
No, man.
201
00:07:37,083 --> 00:07:38,716
You gotta be tough.
You know, like a...
202
00:07:38,718 --> 00:07:39,884
like a bad-ass.
203
00:07:39,886 --> 00:07:41,819
Daniel Krumitz, FBI.
204
00:07:41,821 --> 00:07:44,489
Dan... Daniel Krumitz, FBI.
205
00:07:50,497 --> 00:07:52,746
The router that Eric's phone
connected to isn't here.
206
00:07:54,347 --> 00:07:55,277
You're sure you got
the right location?
207
00:07:55,278 --> 00:07:56,525
I'm positive.
208
00:07:56,636 --> 00:07:58,836
Well, maybe our hacker
removed the device.
209
00:07:58,838 --> 00:08:00,672
Wanted it to remain undetected.
210
00:08:00,674 --> 00:08:02,607
Wait, wait, guys,
it just showed up.
211
00:08:02,609 --> 00:08:04,642
And... now it's gone.
212
00:08:04,644 --> 00:08:06,511
That means it's moving.
213
00:08:06,513 --> 00:08:08,112
Wait, guys,
it's back up again.
214
00:08:08,114 --> 00:08:09,581
Signal's getting stronger.
215
00:08:09,583 --> 00:08:11,482
- Real strong.
- Is it coming?
216
00:08:11,484 --> 00:08:12,750
Oh, thank you.
217
00:08:15,622 --> 00:08:17,622
That's it, right there.
That's why the signal's moving.
218
00:08:17,624 --> 00:08:20,592
Free Wi-Fi. Stop that bus!
I'll call Avery and D.B.!
219
00:08:26,700 --> 00:08:28,933
Let's see what's
on the bus's router.
220
00:08:33,106 --> 00:08:35,173
Okay, same malware on
Eric O'Brian's phone.
221
00:08:35,175 --> 00:08:38,042
But... that's not
the interesting part.
222
00:08:38,044 --> 00:08:39,143
Nelson.
223
00:08:39,145 --> 00:08:40,979
No. Uh-uh.
224
00:08:40,981 --> 00:08:42,614
It... it can't be.
225
00:08:42,616 --> 00:08:43,615
I know, right?
226
00:08:43,617 --> 00:08:44,682
But it is, though, look.
Guys, guys.
227
00:08:44,684 --> 00:08:45,883
Hey, hey. Can we use words
228
00:08:45,885 --> 00:08:47,251
that actually mean something?
229
00:08:48,321 --> 00:08:49,454
It's like this, okay?
230
00:08:49,456 --> 00:08:51,556
I have the flu. I sneeze.
231
00:08:51,558 --> 00:08:52,924
If you're close enough to me,
232
00:08:52,926 --> 00:08:53,992
you get the flu.
233
00:08:53,994 --> 00:08:55,126
That's what this is.
234
00:08:55,128 --> 00:08:57,195
It's an airborne computer virus.
235
00:08:57,197 --> 00:08:59,464
It... it lives.
236
00:08:59,466 --> 00:09:00,832
What do you mean,
“it lives,” Krumitz?
237
00:09:00,834 --> 00:09:02,100
It was programmed to spread
238
00:09:02,102 --> 00:09:03,835
like a real virus.
It jumps from unsecured router
239
00:09:03,837 --> 00:09:05,169
to unsecured router
within 150 feet.
240
00:09:05,171 --> 00:09:07,939
So it infects
any wireless access point
241
00:09:07,941 --> 00:09:09,407
that's not password protected?
242
00:09:09,409 --> 00:09:10,475
And even the ones that use
243
00:09:10,477 --> 00:09:11,809
a default password
from the manufacturer.
244
00:09:11,811 --> 00:09:13,344
So this bus has been, like,
245
00:09:13,346 --> 00:09:14,946
“sneezing” all over town.
246
00:09:14,948 --> 00:09:19,250
Every unsecured router
in its path has been infected?
247
00:09:19,252 --> 00:09:22,820
And whenever
a Wi-Fi enabled phone connects
248
00:09:22,822 --> 00:09:25,256
to one of these infected
routers, it gets the virus.
249
00:09:25,258 --> 00:09:27,892
Malware automatically
jumps onto it.
250
00:09:27,894 --> 00:09:29,627
It's contagious.
251
00:09:29,629 --> 00:09:30,762
I've never seen anything
252
00:09:30,764 --> 00:09:31,929
in the wild
like this before.
253
00:09:31,931 --> 00:09:33,253
Can the virus jump
from phone to phone?
254
00:09:33,278 --> 00:09:33,867
No.
255
00:09:33,868 --> 00:09:35,600
Phones can only
get the virus
256
00:09:35,602 --> 00:09:37,642
if they're connected to
one of the infected routers.
257
00:09:39,072 --> 00:09:41,072
Well, at least these buses
stay on the same route, right?
258
00:09:41,074 --> 00:09:42,907
It'll help us
contain the infection.
259
00:09:42,909 --> 00:09:44,308
But ultimately,
all the buses
260
00:09:44,310 --> 00:09:45,710
go back to home base.
261
00:09:45,712 --> 00:09:48,446
And then this infection jumps
from bus router to bus router.
262
00:09:48,448 --> 00:09:50,181
And then bright
and early this morning,
263
00:09:50,183 --> 00:09:52,950
all those buses went right back
into the streets of Manhattan.
264
00:09:52,952 --> 00:09:54,452
Increasing the number of people
265
00:09:54,454 --> 00:09:56,688
who won't get any help
when they call 911.
266
00:09:56,690 --> 00:09:57,955
This is an outbreak.
267
00:09:57,957 --> 00:09:59,724
We're looking
at an epidemic.
268
00:09:59,726 --> 00:10:02,460
We need to find patient zero.
269
00:10:08,013 --> 00:10:12,013
♪ CSI Cyber 2x12 ♪
Going Viral
Original Air Date on January 31, 2016
270
00:10:12,038 --> 00:10:18,476
♪ I know you've deceived me,
now here's a surprise ♪
271
00:10:20,013 --> 00:10:26,451
♪ I know that you have, 'cause
there's magic in my eyes ♪
272
00:10:26,453 --> 00:10:29,787
♪ I can see
for miles and miles ♪
273
00:10:29,789 --> 00:10:33,825
♪ I can see for miles
and miles ♪
274
00:10:33,827 --> 00:10:37,995
♪ I can see
for miles and miles ♪
275
00:10:37,997 --> 00:10:41,733
♪ And miles... ♪
276
00:10:41,735 --> 00:10:44,635
♪ Oh, yeah. ♪
277
00:10:44,659 --> 00:10:46,659
== sync, corrected by elderman ==
@elder_man
278
00:11:04,382 --> 00:11:08,785
The infected area has grown
by 25% in the past two hours.
279
00:11:08,788 --> 00:11:11,455
I've notified Port Authority
and service providers.
280
00:11:11,457 --> 00:11:13,557
All public routers
are being disconnected
281
00:11:13,559 --> 00:11:15,159
from buses and ferries.
282
00:11:15,161 --> 00:11:17,995
Have FBI communications
get in touch
283
00:11:17,997 --> 00:11:20,431
with all of the New Jersey,
Connecticut,
284
00:11:20,433 --> 00:11:22,566
Philadelphia news media outlets.
285
00:11:22,568 --> 00:11:24,201
Make sure they're
getting the word out
286
00:11:24,203 --> 00:11:26,604
that commuters should
turn off their Wi-Fi
287
00:11:26,606 --> 00:11:28,005
and not try to connect
288
00:11:28,007 --> 00:11:30,007
to any free or open
Wi-Fi sources.
289
00:11:30,009 --> 00:11:34,178
And remind them: use their
landlines when calling 911.
290
00:11:34,180 --> 00:11:36,580
This virus will definitely
cross state lines
291
00:11:36,582 --> 00:11:38,649
unless we're overly cautious.
292
00:11:38,651 --> 00:11:41,619
Yep, a virus warning is already
spreading through social media,
293
00:11:41,621 --> 00:11:43,220
and there's been a big surge
294
00:11:43,222 --> 00:11:45,322
in purchases
of old-school telephones.
295
00:11:45,324 --> 00:11:46,724
You're finally in style, D.B.
296
00:11:48,528 --> 00:11:51,061
Thanks very much.
Oh, hey, hold on a second.
297
00:11:51,063 --> 00:11:53,864
Little, uh, social protocol.
298
00:11:53,866 --> 00:11:56,233
Let's say you get a text
299
00:11:56,235 --> 00:11:58,469
clearly meant for somebody else,
sent by someone you don't know.
300
00:11:58,471 --> 00:12:00,871
Now, are you supposed
to, uh, text 'em right back
301
00:12:00,873 --> 00:12:02,606
and say they got
the wrong person?
302
00:12:02,608 --> 00:12:05,409
Kind of sounds like
a personal text then.
303
00:12:05,411 --> 00:12:07,378
Well, yeah, kind of.
304
00:12:07,380 --> 00:12:10,447
Wh-Why would you
just assume that?
305
00:12:10,449 --> 00:12:12,116
'Cause if it was something like
“I'm gonna be late”
306
00:12:12,118 --> 00:12:14,852
or “Call me,”
then it's easy to text back.
307
00:12:14,854 --> 00:12:16,320
You wouldn't give it
a second thought.
308
00:12:16,322 --> 00:12:18,255
But if suddenly
you get dropped
309
00:12:18,257 --> 00:12:20,658
into the middle
of someone else's drama...
310
00:12:20,660 --> 00:12:22,326
What did the text say?
311
00:12:22,328 --> 00:12:23,761
Well, uh, none of your business.
312
00:12:23,763 --> 00:12:25,529
You answered my question.
313
00:12:25,531 --> 00:12:26,630
I'll see you later.
314
00:12:26,632 --> 00:12:28,065
Come on, D.B.
315
00:12:28,067 --> 00:12:29,400
It's got to be
pretty juicy, huh?
316
00:12:29,402 --> 00:12:31,502
We'll talk about it
when I get back to DC.
317
00:12:31,504 --> 00:12:32,903
D.B., you can't just...
318
00:12:34,440 --> 00:12:35,673
Mayor Cavanaugh,
there's no evidence
319
00:12:35,675 --> 00:12:38,742
to suggest that the 911 hack
is a terrorist threat.
320
00:12:38,744 --> 00:12:40,344
Well, that's a relief.
321
00:12:40,346 --> 00:12:42,179
Do you know who's behind it?
322
00:12:42,181 --> 00:12:44,215
We have a profile of
who we're looking for.
323
00:12:44,217 --> 00:12:46,317
They're not part of a
politically motivated
324
00:12:46,319 --> 00:12:48,118
group or collective.
325
00:12:48,120 --> 00:12:49,853
They would have already
claimed responsibility by now.
326
00:12:49,855 --> 00:12:51,789
Our target is an individual
327
00:12:51,791 --> 00:12:54,792
who's celebrating his
power to cripple the city.
328
00:12:54,794 --> 00:12:58,829
He enjoys making people
feel desperate, helpless.
329
00:12:58,831 --> 00:13:01,532
There's a chance that he's tried
something like this in the past
330
00:13:01,534 --> 00:13:03,567
on a smaller scale.
331
00:13:03,569 --> 00:13:05,302
But this virus is an escalation.
332
00:13:05,304 --> 00:13:07,404
He?
It's most likely a man.
333
00:13:07,406 --> 00:13:10,507
Women go about things like this
in a less conspicuous way.
334
00:13:10,509 --> 00:13:12,276
I was told you have a plan.
335
00:13:12,278 --> 00:13:15,012
The malware is mimicking
a biicalirus,
336
00:13:15,014 --> 00:13:16,447
so we're using CDC protocol.
337
00:13:16,449 --> 00:13:18,082
We've identified how
it's transmitted,
338
00:13:18,084 --> 00:13:20,050
we've begun the containment,
339
00:13:20,052 --> 00:13:21,719
we're informing the public.
340
00:13:21,721 --> 00:13:24,321
My team is writing code,
an antidote,
341
00:13:24,323 --> 00:13:26,223
that will cure all
the infected phones
342
00:13:26,225 --> 00:13:29,193
and stop any new phones
from acquiring it.
343
00:13:29,195 --> 00:13:33,697
You are, Deputy Director Ryan,
as impressive as I was told.
344
00:13:33,699 --> 00:13:36,600
Which makes my next request
a little uncomfortable.
345
00:13:41,507 --> 00:13:43,407
Brody Nelson.
346
00:13:43,409 --> 00:13:45,476
He's one of my
cyber investigators.
347
00:13:45,478 --> 00:13:46,777
He's also the young man
348
00:13:46,779 --> 00:13:48,379
that hacked into
the New York Stock Exchange,
349
00:13:48,381 --> 00:13:50,214
created havoc
in the financial district.
350
00:13:50,216 --> 00:13:51,849
And I understand
that that tarnished
351
00:13:51,851 --> 00:13:54,151
your first term
in the mayor's office.
352
00:13:54,153 --> 00:13:55,319
This is not about me.
353
00:13:55,321 --> 00:13:57,221
I am well aware
of Brody Nelson's crimes.
354
00:13:57,223 --> 00:13:58,455
He is serving his time.
355
00:13:58,457 --> 00:14:00,791
I would prefer he were in prison
and not writing code
356
00:14:00,793 --> 00:14:02,259
for anything having
to do with my city.
357
00:14:02,261 --> 00:14:04,795
Well, that is not
your call, sir.
358
00:14:07,266 --> 00:14:09,500
Did you know that
eight-million-dollar transfer
359
00:14:09,502 --> 00:14:12,970
as a result of his financial
hack was never accounted for?
360
00:14:12,972 --> 00:14:15,239
That young man knows
where it is.
361
00:14:23,182 --> 00:14:25,916
The mayor's just bent out of
shape because their election's
362
00:14:25,918 --> 00:14:27,051
coming up.
363
00:14:27,053 --> 00:14:29,586
I did a terrible thing, D.B.
364
00:14:29,588 --> 00:14:31,255
Can't expect people to forget.
365
00:14:34,560 --> 00:14:36,126
You know what?
366
00:14:36,128 --> 00:14:37,528
I'm just gonna
image these devices
367
00:14:37,530 --> 00:14:38,796
and go back to DC with you.
368
00:14:38,798 --> 00:14:40,698
It'll be easier
for me to analyze
369
00:14:40,700 --> 00:14:44,335
the malware from Tear Down
and work on the antidote.
370
00:14:46,205 --> 00:14:48,105
Okay.
All right?
371
00:14:56,549 --> 00:14:58,515
Let me make this clear.
372
00:14:58,517 --> 00:15:01,418
I don't want Brody Nelson
working this case.
373
00:15:01,420 --> 00:15:04,154
If Brody Nelson doesn't work on
this case, then neither do I.
374
00:15:04,156 --> 00:15:05,456
So you let me know.
375
00:15:09,428 --> 00:15:11,762
The FBI has informed
us of a malware virus
376
00:15:11,764 --> 00:15:13,764
affecting the 911 emergency system.
...Wi-Fi has been discontinued.
377
00:15:13,766 --> 00:15:15,432
We ask that you use
a landline for all...
378
00:15:15,434 --> 00:15:16,734
911, what's your emergency?
379
00:15:16,736 --> 00:15:18,696
This is an emergency.
Excuse me, I need to make...
380
00:15:29,682 --> 00:15:31,682
What you got?
381
00:15:31,684 --> 00:15:33,517
I've infected these test phones
with the virus.
382
00:15:33,519 --> 00:15:35,352
It lies dormant
until you dial 911,
383
00:15:35,354 --> 00:15:36,720
and this is what you hear.
384
00:15:36,722 --> 00:15:38,589
911.
What is your emergency?
385
00:15:38,591 --> 00:15:41,859
Hello. Hello.
386
00:15:41,861 --> 00:15:43,127
No one there.
387
00:15:43,129 --> 00:15:45,162
That's because there was
never anyone there.
388
00:15:45,164 --> 00:15:46,497
It's a recorded voice.
389
00:15:46,499 --> 00:15:49,299
There's an audio file
hard-coded into the virus.
390
00:15:49,301 --> 00:15:50,601
Now, these phone calls
never make it
391
00:15:50,603 --> 00:15:51,802
to an actual 911 operator.
392
00:15:51,804 --> 00:15:53,103
Just a recorded voice.
393
00:15:53,105 --> 00:15:55,773
The hacker hijacked 911
394
00:15:55,775 --> 00:15:58,409
and made the caller believe
they were getting through.
395
00:15:58,411 --> 00:16:00,144
Mm-hmm, and not only that.
396
00:16:00,146 --> 00:16:01,845
Check this out.
397
00:16:01,847 --> 00:16:03,914
911.
What is your emergency?
398
00:16:03,916 --> 00:16:06,283
Say something.
Keep talking.
399
00:16:06,285 --> 00:16:08,852
Hello, this is D.B. Russell.
400
00:16:08,854 --> 00:16:11,255
Testing, one, two, three.
401
00:16:11,257 --> 00:16:14,224
The phone is not frozen, it's
recording everything I'm saying.
402
00:16:14,226 --> 00:16:15,225
Right.
403
00:16:15,227 --> 00:16:17,561
All right, so our
target is a man
404
00:16:17,563 --> 00:16:19,296
who... who gets
off on hearing
405
00:16:19,298 --> 00:16:21,365
the fear and the panic
of helpless people.
406
00:16:21,367 --> 00:16:25,402
He's recording the callers and
sending the audio... somewhere.
407
00:16:25,404 --> 00:16:27,471
And we don't know where?
408
00:16:27,473 --> 00:16:28,872
Nope.
409
00:16:28,874 --> 00:16:31,341
The files are bouncing
through proxy IPs.
410
00:16:31,343 --> 00:16:32,676
It's a dead end.
411
00:16:46,125 --> 00:16:47,724
911.
What is your emergency?
412
00:16:47,726 --> 00:16:49,993
Please help, someone
just broke into my house.
413
00:16:49,995 --> 00:16:51,328
He's strangling my husband.
414
00:16:51,330 --> 00:16:52,663
I'm hiding in the closet.
415
00:16:52,665 --> 00:16:53,964
Oh... oh, God. He's...
416
00:16:53,966 --> 00:16:55,299
Try to stay calm, ma'am.
417
00:16:55,301 --> 00:16:57,668
I'm showing your address
is 754 Plymouth Way.
418
00:16:57,670 --> 00:16:58,902
Is that correct?
419
00:16:58,904 --> 00:17:00,337
Yes, please hurry.
420
00:17:00,339 --> 00:17:01,905
I-I can hear him in the kitchen.
421
00:17:01,907 --> 00:17:03,941
I think my husband's dead.
422
00:17:03,943 --> 00:17:05,242
Help is on the way.
423
00:17:05,244 --> 00:17:07,311
Please hurry.
Where are you?
424
00:17:07,313 --> 00:17:08,745
Am I right or am I right?
425
00:17:08,747 --> 00:17:11,415
The voice of the 911 operator
embedded in the malware
426
00:17:11,417 --> 00:17:13,717
sounds like a long-lost
relative of T-Pain.
427
00:17:13,719 --> 00:17:15,652
- Who Pain?
T-Pain.
428
00:17:15,654 --> 00:17:17,654
He's the king of auto-tune.
Yeah.
429
00:17:17,656 --> 00:17:18,755
And that is again?
430
00:17:18,757 --> 00:17:20,457
It's, like,
when a recording artist
431
00:17:20,459 --> 00:17:22,793
alters the pitch of their voice
when they sing off-key.
432
00:17:22,795 --> 00:17:24,862
Or when they suck.
433
00:17:24,864 --> 00:17:26,463
Well, if that's true and
the voice was distorted,
434
00:17:26,465 --> 00:17:28,131
then we should be able
to un-distort it.
435
00:17:28,133 --> 00:17:30,033
I just made that word up. All
right, let's get to work here.
436
00:17:30,035 --> 00:17:31,101
Play it again, Nelson.
437
00:17:31,103 --> 00:17:33,303
All right.
438
00:17:33,305 --> 00:17:35,038
911.
What is your emer...
439
00:17:35,040 --> 00:17:36,840
Okay, Raven, isolate
440
00:17:36,842 --> 00:17:38,675
one of the ringing phones
in the background there.
441
00:17:38,677 --> 00:17:41,845
And pull up the ringtone used
by the 911 call center.
442
00:17:41,847 --> 00:17:43,080
That'll be our baseline.
443
00:17:43,082 --> 00:17:45,549
Right, once we match
the ringtones,
444
00:17:45,551 --> 00:17:47,784
we'll have the real voice
of our 911 operator.
445
00:17:47,786 --> 00:17:49,987
Exactly.
Okay, I am adjusting
446
00:17:49,989 --> 00:17:52,022
the pitch and speed
of the recording
447
00:17:52,024 --> 00:17:53,724
until the waveforms line up.
448
00:17:53,726 --> 00:17:56,260
911.
What is your emergency?
449
00:17:56,262 --> 00:17:59,563
Okay, here we have our real
911 operator's voice.
450
00:17:59,565 --> 00:18:01,832
911.
What is your emergency?
451
00:18:01,834 --> 00:18:04,368
Why would our target want
to distort this voice?
452
00:18:04,370 --> 00:18:07,337
To disguise it.
453
00:18:07,339 --> 00:18:08,839
This could be him.
454
00:18:08,841 --> 00:18:10,107
Right? Our target.
455
00:18:10,109 --> 00:18:11,508
I mean, why else would he do it?
456
00:18:11,510 --> 00:18:12,676
You think he works
at a call center.
457
00:18:12,678 --> 00:18:13,944
I don't know,
it's just a theory.
458
00:18:13,946 --> 00:18:15,445
Let's run this voice
459
00:18:15,447 --> 00:18:16,747
against all
of the male dispatchers
460
00:18:16,749 --> 00:18:18,649
in the New York City
call center database.
461
00:18:18,651 --> 00:18:19,917
All right?
462
00:18:19,919 --> 00:18:21,852
Maybe we'll get lucky here,
get an I.D.
463
00:18:24,590 --> 00:18:25,856
Got him.
464
00:18:25,858 --> 00:18:28,458
Leo Finch.
465
00:18:28,460 --> 00:18:30,060
Look at his profile.
466
00:18:30,062 --> 00:18:33,030
He was fired from the call
center exactly a year ago today.
467
00:18:33,032 --> 00:18:35,032
Well, that's motive for revenge.
468
00:18:35,034 --> 00:18:36,967
Let's see, he was fired for...
469
00:18:36,969 --> 00:18:39,536
“failure to properly
dispatch emergency units”"
470
00:18:39,538 --> 00:18:42,673
“poor decision making”"
“refusal to follow protocol”"
471
00:18:42,675 --> 00:18:44,274
Also looks like there
were several instances
472
00:18:44,276 --> 00:18:45,542
of slow dispatch times
473
00:18:45,544 --> 00:18:47,878
and sending paramedics
to the wrong address.
474
00:18:47,880 --> 00:18:49,813
Delayed dispatch times suggests
475
00:18:49,815 --> 00:18:51,515
he wanted to keep
the panicked callers on the line
476
00:18:51,517 --> 00:18:52,683
as long as possible.
477
00:18:52,685 --> 00:18:54,818
He enjoyed hearing
their desperation.
478
00:18:54,820 --> 00:18:58,555
Their pleading made him feel
powerful and in control.
479
00:18:58,557 --> 00:19:00,591
Leo is an auditory voyeur.
480
00:19:00,593 --> 00:19:02,159
Well, that's twisted.
Call Elijah.
481
00:19:02,161 --> 00:19:04,261
Tell him there's a door
he has to kick down.
482
00:19:12,638 --> 00:19:13,804
Clear!
483
00:19:13,806 --> 00:19:15,405
Clear!
484
00:19:20,713 --> 00:19:22,245
Clear!
485
00:19:23,015 --> 00:19:24,615
All clear!
Clear!
486
00:19:38,358 --> 00:19:41,040
Victims are
Mary and Roger Ingram.
487
00:19:41,140 --> 00:19:42,573
Ligature marks around the neck
488
00:19:42,575 --> 00:19:44,508
and petechial hemorrhaging in
the eyes suggest strangulation.
489
00:19:44,510 --> 00:19:46,443
We have a time of death?
490
00:19:46,445 --> 00:19:48,211
According to
the on-site coroner report,
491
00:19:48,213 --> 00:19:49,980
body temp puts TOD
somewhere between 5:00
492
00:19:49,982 --> 00:19:51,415
and 7:00 a.m. this morning.
493
00:19:51,417 --> 00:19:53,183
Any signs of forced entry?
No.
494
00:19:53,185 --> 00:19:55,752
And nothing to suggest
that Leo Finch lives here.
495
00:19:55,754 --> 00:19:57,788
Police are canvassing
the area right now,
496
00:19:57,790 --> 00:20:00,090
seeing if anybody
recognizes Leo's photo.
497
00:20:00,092 --> 00:20:02,359
Agent Mundo.
498
00:20:05,331 --> 00:20:08,265
Looks like Mary
tried to call for help.
499
00:20:08,267 --> 00:20:10,801
She's still clenching
this phone.
500
00:20:10,803 --> 00:20:12,002
Cadaveric spasm.
501
00:20:12,004 --> 00:20:14,738
It occurs in violent,
intense deaths.
502
00:20:14,740 --> 00:20:17,541
That's why her hand is
clenched around the phone.
503
00:20:17,543 --> 00:20:18,875
Battery's dead.
504
00:20:18,877 --> 00:20:20,711
See if it has the virus.
505
00:20:31,857 --> 00:20:34,191
Malware is exactly the same
as all the others.
506
00:20:34,193 --> 00:20:38,161
According to the call log, Mary
tried to call 911 at 6:23 a.m.
507
00:20:38,163 --> 00:20:40,530
Please hurry,
he's strangling my husband.
508
00:20:40,532 --> 00:20:42,532
I think he killed him.
509
00:20:42,534 --> 00:20:44,368
I can hear him coming.
510
00:20:44,370 --> 00:20:46,169
Hello, is anyone there?
511
00:20:46,171 --> 00:20:47,704
Hello?
512
00:20:49,008 --> 00:20:50,741
Hello?
513
00:20:59,151 --> 00:21:00,851
Avery.
514
00:21:00,853 --> 00:21:03,687
There's a basement apartment.
515
00:21:09,461 --> 00:21:11,128
This is an odd setup.
516
00:21:11,130 --> 00:21:13,797
Cheap furniture,
egg carton acoustics,
517
00:21:13,799 --> 00:21:15,432
but very expensive speakers.
518
00:21:33,786 --> 00:21:36,253
Found a laptop.
519
00:21:36,255 --> 00:21:37,821
This is a Benning.
520
00:21:37,823 --> 00:21:40,123
Leo has a $50,000 violin
521
00:21:40,125 --> 00:21:42,125
and lives in a cheap rental?
522
00:21:42,127 --> 00:21:44,327
It's funny--
some of the best coders
523
00:21:44,329 --> 00:21:45,829
are talented musicians.
524
00:21:45,831 --> 00:21:48,331
Both highly technical,
deal with complex numbers.
525
00:21:48,333 --> 00:21:50,300
Clearly, Leo's obsession
was sound.
526
00:21:50,302 --> 00:21:52,803
I'm imaging Leo's computer.
527
00:21:52,805 --> 00:21:54,638
He's over 200 audio files
on his hard drive.
528
00:21:54,640 --> 00:21:57,274
They're all 911 calls,
and he's the operator.
529
00:21:57,276 --> 00:21:59,209
Leo is an addict.
530
00:21:59,211 --> 00:22:01,611
The 911 calls are his drug.
531
00:22:01,613 --> 00:22:04,181
It's like an arsonist
getting a job as a firefighter
532
00:22:04,183 --> 00:22:06,216
or a pedophile
who becomes a teacher.
533
00:22:06,218 --> 00:22:08,251
Leo got his fix
at work.
534
00:22:08,253 --> 00:22:10,020
Until he was fired a year ago,
535
00:22:10,022 --> 00:22:12,889
and he was cut off from his drug
536
00:22:12,891 --> 00:22:16,827
and had to find a new way
to feed his addiction.
537
00:22:16,829 --> 00:22:17,829
The virus.
538
00:22:19,565 --> 00:22:20,697
Whoa, Krumitz, get-- come here.
539
00:22:20,699 --> 00:22:22,699
Is this what I think it is?
540
00:22:26,672 --> 00:22:28,238
That could be
the original source code
541
00:22:28,240 --> 00:22:29,940
for the virus.
542
00:22:31,243 --> 00:22:32,743
Okay, we've got something.
543
00:22:32,745 --> 00:22:35,612
This computer connected
to 26 bus routers
544
00:22:35,614 --> 00:22:38,482
at Port Authority
at 11:00 p.m. last night.
545
00:22:38,484 --> 00:22:40,283
That's 26 patient zeros.
546
00:22:40,285 --> 00:22:42,352
This is not
an experiment gone wrong.
547
00:22:42,354 --> 00:22:44,488
This was a calculated attack.
548
00:22:44,490 --> 00:22:46,323
No, Leo wanted to infect
every corner of the city,
549
00:22:46,325 --> 00:22:48,258
and he wanted to do it fast.
550
00:22:57,236 --> 00:22:59,636
61 confirmed cases
in New Jersey.
551
00:22:59,638 --> 00:23:00,971
38 in Connecticut.
552
00:23:00,973 --> 00:23:02,506
And 23 in Upstate New York.
553
00:23:02,508 --> 00:23:04,174
Even with the news
alerts and warnings,
554
00:23:04,176 --> 00:23:05,678
the virus has officially
555
00:23:05,679 --> 00:23:06,993
spread through the
tristate area.
556
00:23:07,017 --> 00:23:09,837
Well, the good news is the
infection rate should slow down
557
00:23:09,899 --> 00:23:11,231
in the less densely
populated areas.
558
00:23:11,233 --> 00:23:12,332
Bad news?
559
00:23:12,334 --> 00:23:14,368
A complete quarantine
looks impossible.
560
00:23:14,370 --> 00:23:17,838
And local precincts are overrun
with emergency calls
561
00:23:17,840 --> 00:23:19,406
and hospitals are
flooded with walk-ins.
562
00:23:19,408 --> 00:23:20,774
Some people are resorting
to social media
563
00:23:20,776 --> 00:23:22,376
to announce
their emergencies.
564
00:23:22,378 --> 00:23:24,411
Nelson,
we need that antidote.
565
00:23:24,413 --> 00:23:25,546
How's it going?
566
00:23:25,548 --> 00:23:26,847
Krummy sent me
the source code of the virus
567
00:23:26,849 --> 00:23:28,348
from Leo Finch's laptop.
568
00:23:28,350 --> 00:23:30,517
Now that I can see exactly
how the virus is written,
569
00:23:30,519 --> 00:23:33,153
it shouldn't take long to write
a code to counteract it.
570
00:23:33,155 --> 00:23:34,788
But the problem is
571
00:23:34,790 --> 00:23:36,723
how to push it to all
the phones that need it.
572
00:23:36,725 --> 00:23:38,358
Yeah, a software update through
the vendors will take days.
573
00:23:38,360 --> 00:23:39,560
Mm-hmm.
574
00:23:39,562 --> 00:23:40,861
Wait a minute.
575
00:23:40,863 --> 00:23:43,363
What about using something
like the AMBER Alert, right?
576
00:23:43,365 --> 00:23:45,418
It sends
push notifications to phones
577
00:23:45,419 --> 00:23:46,995
during child abductions.
578
00:23:47,019 --> 00:23:48,788
It's instant, it's regional.
579
00:23:48,789 --> 00:23:49,479
What do you think?
580
00:23:49,503 --> 00:23:50,571
I mean, AMBER Alerts
are only designed
581
00:23:50,595 --> 00:23:52,237
to display alphanumeric text.
582
00:23:52,238 --> 00:23:53,871
You can't use them
to push code.
583
00:23:53,873 --> 00:23:55,256
And there are regulations.
584
00:23:55,257 --> 00:23:56,590
I mean, FTC, DOJ, FEMA.
585
00:23:56,592 --> 00:23:57,724
Right.
Wait, wait, wait.
586
00:23:57,726 --> 00:23:59,927
Are you saying it's impossible?
587
00:23:59,929 --> 00:24:02,229
I'm saying it's never been done before.
Right.
588
00:24:02,231 --> 00:24:03,530
Well, there's a first
time for everything.
589
00:24:03,532 --> 00:24:05,568
You-you two were black
hats, weren't you?
590
00:24:05,569 --> 00:24:06,435
The best.
591
00:24:06,436 --> 00:24:07,128
Notorious.
592
00:24:07,129 --> 00:24:08,729
Okay, so you'll
hack it, right?
593
00:24:08,731 --> 00:24:11,098
And I'll take full
responsibility.
594
00:24:11,100 --> 00:24:13,867
Matter of fact, I will call
Director Silver right now.
595
00:24:13,869 --> 00:24:16,603
Work on the FCC,
DOJ part of this thing.
596
00:24:16,605 --> 00:24:19,306
All right, man said
hack, let's hack.
597
00:24:38,727 --> 00:24:40,894
Look at this.
598
00:24:42,264 --> 00:24:44,364
A pair of pliers,
599
00:24:44,366 --> 00:24:46,867
some kind of metal pins
600
00:24:46,869 --> 00:24:48,535
and a bloody violin string.
601
00:24:48,537 --> 00:24:50,604
I think we may be looking
at the murder weapon.
602
00:24:55,244 --> 00:24:57,344
All right, well,
whatever Leo's endgame is,
603
00:24:57,346 --> 00:24:59,780
if he left two bodies upstairs
and a murder weapon in the wall,
604
00:24:59,782 --> 00:25:01,748
it's a pretty safe bet
he's not coming back here
605
00:25:01,750 --> 00:25:02,816
anytime soon.
606
00:25:02,818 --> 00:25:04,551
Guys, look at this.
607
00:25:04,553 --> 00:25:07,488
It looks like these three 911
recordings were Leo's favorites.
608
00:25:07,490 --> 00:25:09,790
They were played
over a thousand times.
609
00:25:09,792 --> 00:25:11,458
And he even put them
on a separate playlist.
610
00:25:11,460 --> 00:25:12,726
Here, listen to this.
611
00:25:12,728 --> 00:25:14,695
911, what's your emergency?
612
00:25:14,697 --> 00:25:17,030
My buddy, he fell!
It's bad; it's-it's real bad!
613
00:25:17,032 --> 00:25:18,899
We need an ambulance!
Sir, what's your location?
614
00:25:18,901 --> 00:25:20,834
Construction site
at Lexington and 12th!
615
00:25:20,836 --> 00:25:22,369
I don't think he's conscious.
616
00:25:22,371 --> 00:25:23,670
I'm dispatching paramedics now.
617
00:25:23,672 --> 00:25:25,005
Calm down and describe
what you see.
618
00:25:25,007 --> 00:25:26,273
There's a lot of blood!
619
00:25:26,275 --> 00:25:27,441
He must've fallen 50 or 60 feet
620
00:25:27,443 --> 00:25:29,343
or something-- please hurry!
621
00:25:29,345 --> 00:25:30,377
There's blood all over his head!
622
00:25:30,379 --> 00:25:31,578
I'm pretty sure
his legs are broken.
623
00:25:31,580 --> 00:25:32,646
All right,
be careful not to move him.
624
00:25:32,648 --> 00:25:33,648
Help is on the way.
625
00:25:33,849 --> 00:25:35,549
Is this from today?
626
00:25:35,551 --> 00:25:37,718
Uh, no.
627
00:25:37,720 --> 00:25:38,785
According to the metadata,
628
00:25:38,787 --> 00:25:40,420
this recording's
from two years ago.
629
00:25:40,422 --> 00:25:42,989
But what's strange is that it
happened at the same time of day
630
00:25:42,991 --> 00:25:45,158
as the construction
incident.
631
00:25:45,160 --> 00:25:46,159
Scaffolding pins.
632
00:25:46,161 --> 00:25:47,427
There's traces of paint and rust
633
00:25:47,429 --> 00:25:48,862
in the grooves of the pliers.
634
00:25:48,864 --> 00:25:50,731
What happened at that
construction site this morning
635
00:25:50,733 --> 00:25:51,832
was no accident.
636
00:25:51,834 --> 00:25:53,133
All right,
what do we got?
637
00:25:54,203 --> 00:25:55,602
Help! Help!
638
00:25:55,604 --> 00:25:56,970
Play the next one.
639
00:25:56,972 --> 00:25:59,533
911, what's your emergency?
640
00:25:59,583 --> 00:26:00,108
Please help.
641
00:26:00,132 --> 00:26:01,275
Someone just broke
into my house.
642
00:26:01,276 --> 00:26:02,676
He's strangling my husband.
643
00:26:02,678 --> 00:26:04,311
I'm hiding in a closet.
644
00:26:04,313 --> 00:26:06,012
Try to stay calm, ma'am.
645
00:26:06,014 --> 00:26:07,414
I'm showing your address
as 754 Plymouth Way.
646
00:26:07,416 --> 00:26:08,715
Is that correct?
647
00:26:08,717 --> 00:26:09,783
Yes, please hurry!
648
00:26:09,785 --> 00:26:11,284
I can hear him in the kitchen.
649
00:26:11,286 --> 00:26:12,652
Oh! I think my husband's dead.
650
00:26:12,654 --> 00:26:14,121
Help is on the way.
651
00:26:14,123 --> 00:26:15,455
Why is this taking so long?
652
00:26:15,457 --> 00:26:17,390
Why is no one coming?
653
00:26:17,392 --> 00:26:19,793
This is very similar
to the scene upstairs.
654
00:26:19,795 --> 00:26:21,528
This is exactly what happened
655
00:26:21,530 --> 00:26:23,463
to Mary and Roger Ingram.
656
00:26:23,465 --> 00:26:24,798
This is also
another old recording
657
00:26:24,800 --> 00:26:26,399
and it happened
at the same time
658
00:26:26,401 --> 00:26:28,969
as the murders
this morning, 6:23 a.m.
659
00:26:28,971 --> 00:26:31,972
Listening is
a deeply immersive experience.
660
00:26:31,974 --> 00:26:33,106
Sir, what's your location?
661
00:26:33,108 --> 00:26:35,108
Construction site
at Lexington...
662
00:26:35,110 --> 00:26:37,344
Every time Leo listen
to one of these recordings,
663
00:26:37,346 --> 00:26:39,780
he envisioned himself
in the scene.
664
00:26:39,782 --> 00:26:42,048
- We need an ambulance.
- First, he's a witness.
665
00:26:42,050 --> 00:26:43,316
...can't tell if he's alive.
666
00:26:43,318 --> 00:26:45,385
There's blood everywhere
and he's not moving.
667
00:26:45,387 --> 00:26:47,220
Then he's the victim.
Please help.
668
00:26:47,222 --> 00:26:49,222
Someone just broke
into my house.
669
00:26:49,224 --> 00:26:50,657
He's strangling my husband.
670
00:26:52,127 --> 00:26:53,693
Now, Leo's the killer.
671
00:26:53,695 --> 00:26:55,095
No.
672
00:26:55,097 --> 00:26:56,263
No, no!
673
00:26:56,265 --> 00:26:58,598
He's recreating
his greatest hits.
674
00:26:58,600 --> 00:27:00,200
Yeah, but what does the virus
675
00:27:00,202 --> 00:27:01,802
have to do with all this?
And why today?
676
00:27:01,804 --> 00:27:03,003
It's the anniversary
677
00:27:03,005 --> 00:27:04,538
of the day he was fired.
678
00:27:04,540 --> 00:27:06,573
Look, Leo is a sadist
679
00:27:06,575 --> 00:27:08,275
who's aroused
by the sound of fear.
680
00:27:08,277 --> 00:27:10,944
The virus does
everything that he needs.
681
00:27:10,946 --> 00:27:13,780
The dropped calls delay
the emergency responders,
682
00:27:13,782 --> 00:27:16,883
which maximizes
the victims' panic.
683
00:27:16,885 --> 00:27:19,219
Leo records the calls
684
00:27:19,221 --> 00:27:20,754
so he can enjoy them later.
685
00:27:20,756 --> 00:27:22,989
It's his version
686
00:27:22,991 --> 00:27:24,424
of a serial killer
taking a trophy.
687
00:27:24,426 --> 00:27:25,525
Krumitz, didn't
you say there were
688
00:27:25,527 --> 00:27:27,360
three recordings
on that playlist?
689
00:27:29,631 --> 00:27:31,164
911, what's your emergency?
690
00:27:31,166 --> 00:27:32,299
Help! He's stabbing him.
691
00:27:32,301 --> 00:27:33,700
He's stabbing my dad!
692
00:27:33,702 --> 00:27:35,335
What's your name? Where are you?
693
00:27:35,337 --> 00:27:37,337
Dylan.
And I don't know where I am.
694
00:27:37,339 --> 00:27:38,705
We just... we left the game.
695
00:27:38,707 --> 00:27:39,639
It's an alley.
696
00:27:39,641 --> 00:27:40,640
Help is on the way.
697
00:27:40,642 --> 00:27:41,942
The man just left!
698
00:27:41,944 --> 00:27:42,876
I'm scared.
699
00:27:42,878 --> 00:27:44,277
It's okay, Dylan.
700
00:27:44,279 --> 00:27:46,079
I need you to go to your dad
Tell me what you see.
701
00:27:46,081 --> 00:27:47,080
He's not moving!
702
00:27:48,584 --> 00:27:52,018
Leo mimicked the first two
recordings on the playlist.
703
00:27:52,020 --> 00:27:53,520
And this recording
704
00:27:53,522 --> 00:27:55,589
is of a man being stabbed in
an alley in front of his son.
705
00:27:55,591 --> 00:27:57,390
It happened
at 8:53 at night.
706
00:27:57,392 --> 00:27:59,292
This is his next move.
707
00:27:59,294 --> 00:28:00,560
He's gonna kill again.
708
00:28:00,562 --> 00:28:01,962
We need to stop Leo Finch.
709
00:28:01,964 --> 00:28:03,163
Yeah, but how?
710
00:28:03,165 --> 00:28:05,131
There are thousands of alleys
in New York City.
711
00:28:19,019 --> 00:28:21,286
♪ ♪
712
00:28:21,288 --> 00:28:22,954
Okay, everybody, listen up.
713
00:28:22,956 --> 00:28:26,048
We're basically looking
for a-an alley in a haystack.
714
00:28:26,072 --> 00:28:28,077
Leo's two copycat killings
715
00:28:28,079 --> 00:28:31,062
took place the same time
of day as the original crimes,
716
00:28:31,162 --> 00:28:33,765
which means at approximately
8:53 tonight,
717
00:28:33,789 --> 00:28:36,111
somebody is gonna get stabbed.
718
00:28:36,300 --> 00:28:39,001
So let's get going on this.
All right?
719
00:28:39,003 --> 00:28:41,039
We've got just over an hour
to find this Leo Finch
720
00:28:41,040 --> 00:28:42,840
before he finds his next victim.
721
00:28:42,842 --> 00:28:45,976
D.B., I figured out
what the three 911 calls
722
00:28:45,978 --> 00:28:47,577
on Leo's playlist
all have in common.
723
00:28:47,579 --> 00:28:49,345
They all lasted
over 20 minutes...
724
00:28:49,347 --> 00:28:52,348
almost three times longer
than your average 911 call.
725
00:28:52,350 --> 00:28:54,951
The victims all
died because Leo
726
00:28:54,953 --> 00:28:56,753
didn't dispatch
the paramedics in time.
727
00:28:56,755 --> 00:28:58,989
So he orchestrated their deaths.
728
00:28:58,991 --> 00:29:00,223
Just spoke to the NYPD.
729
00:29:00,554 --> 00:29:01,986
They issued a BOLO for Leo.
730
00:29:01,988 --> 00:29:03,187
And I sent them the antidote.
731
00:29:03,189 --> 00:29:04,655
They'll push it
to all cell phones in the area
732
00:29:04,657 --> 00:29:06,124
using AMBER Alerts.
Right.
733
00:29:06,126 --> 00:29:07,592
So you guys figured out the, uh,
734
00:29:07,594 --> 00:29:09,460
alphanumeric problem,
did you?
735
00:29:09,462 --> 00:29:10,995
We used a buffer
overflow exploit,
736
00:29:10,997 --> 00:29:12,597
thank you very much.
737
00:29:12,599 --> 00:29:15,099
That's right.
It'll flood the phones
738
00:29:15,101 --> 00:29:16,200
with a specific sequence of text
739
00:29:16,202 --> 00:29:17,935
to force the NYPD home page
to pop up.
740
00:29:17,937 --> 00:29:20,303
Now, that home page will have
a download for the antidote.
741
00:29:20,305 --> 00:29:21,971
Basically, we're geniuses.
742
00:29:21,973 --> 00:29:23,140
Exactly.
Basically.
743
00:29:23,142 --> 00:29:24,407
Basically.
Do me a favor, though, will you?
744
00:29:24,409 --> 00:29:26,610
Call NYPD back,
tell them to display
745
00:29:26,612 --> 00:29:28,478
a photo of Leo Finch
with the antidote.
746
00:29:28,480 --> 00:29:31,515
Might as well make the city
our eyes and ears.
747
00:29:31,517 --> 00:29:33,383
Uh... yeah, uh...
748
00:29:33,385 --> 00:29:34,618
I think you should do that.
749
00:29:34,620 --> 00:29:36,452
Why is that?
Might get a little pushback.
750
00:29:36,454 --> 00:29:38,820
Apparently, they've been
chatting with my pal the mayor.
751
00:29:38,822 --> 00:29:40,456
Yeah, Nelson,
this has nothing to do
752
00:29:40,458 --> 00:29:41,890
with your Stock Exchange hack,
all right?
753
00:29:41,892 --> 00:29:43,392
Call them back,
754
00:29:43,394 --> 00:29:44,793
tell them to post the photo
755
00:29:44,795 --> 00:29:46,762
and the antidote.
Come on, buddy.
756
00:29:46,764 --> 00:29:48,730
This is your hero moment.
757
00:29:49,399 --> 00:29:50,766
You got this, Nelson.
758
00:29:50,768 --> 00:29:52,134
Right, right.
759
00:29:52,136 --> 00:29:53,468
My hero moment.
All right.
760
00:30:06,382 --> 00:30:08,616
I just talked to
the police chief.
761
00:30:08,618 --> 00:30:11,418
He told me that you're
using an AMBER Alert
762
00:30:11,420 --> 00:30:14,154
to send out an antidote
written by Brody Nelson.
763
00:30:14,156 --> 00:30:15,121
That's correct.
764
00:30:15,123 --> 00:30:16,056
We'll have to verify that code
765
00:30:16,058 --> 00:30:17,791
before it goes out
to the public.
766
00:30:17,793 --> 00:30:19,359
I've hired a private
security firm.
767
00:30:19,361 --> 00:30:22,028
No, that's not necessary
and we don't have the time.
768
00:30:22,030 --> 00:30:23,497
We are chasing a killer, here.
769
00:30:23,499 --> 00:30:25,566
I'm well aware of that,
and I'm shocked
770
00:30:25,568 --> 00:30:26,932
that you would even
trust a black hat
771
00:30:26,934 --> 00:30:28,167
with something this critical.
772
00:30:28,169 --> 00:30:30,236
I've heard about your
unconventional tactics,
773
00:30:30,238 --> 00:30:31,370
Deputy Director,
774
00:30:31,372 --> 00:30:33,072
but this is inappropriate
and dangerous.
775
00:30:33,074 --> 00:30:34,773
Mayor Cavanaugh,
how many more lives
776
00:30:34,775 --> 00:30:35,974
are you willing to jeopardize?
777
00:30:35,976 --> 00:30:37,109
No one cares more
778
00:30:37,111 --> 00:30:39,178
about the citizens
of this city than I do.
779
00:30:39,180 --> 00:30:40,246
That's why I'm here.
780
00:30:40,248 --> 00:30:43,015
Brody Nelson's antidote
will save lives.
781
00:30:43,017 --> 00:30:45,149
Now, I could go
over your head with this,
782
00:30:45,151 --> 00:30:47,252
but I'm not sure
that you could weather
783
00:30:47,254 --> 00:30:49,053
the political embarrassment.
784
00:30:49,055 --> 00:30:51,756
If this goes sideways,
it's on you.
785
00:30:54,727 --> 00:30:57,262
♪
786
00:31:21,619 --> 00:31:23,786
The public's responding
to the AMBER Alert.
787
00:31:23,788 --> 00:31:25,888
I've got multiple reports
of Leo Finch
788
00:31:25,890 --> 00:31:27,590
at Madison and 140th.
789
00:31:27,592 --> 00:31:28,991
Pellham Park.
That's Harlem.
790
00:31:28,993 --> 00:31:30,960
Yeah, but we've got several
sightings on the east side.
791
00:31:30,962 --> 00:31:33,263
I mean, guy can't be
in two places at once.
792
00:31:33,265 --> 00:31:34,929
Dopplegangers?
793
00:31:34,931 --> 00:31:36,197
No.
794
00:31:36,199 --> 00:31:37,466
No, we made
a mistake. Uh...
795
00:31:37,468 --> 00:31:38,667
What do you mean?
796
00:31:38,669 --> 00:31:40,869
We sent the AMBER Alert
to everyone.
797
00:31:40,871 --> 00:31:43,037
Everyone.
798
00:31:43,039 --> 00:31:44,406
Including Leo Finch.
799
00:31:57,185 --> 00:31:58,486
Yeah, okay, all right.
800
00:31:58,488 --> 00:31:59,487
Time to call Mom.
801
00:31:59,489 --> 00:32:01,555
Let's get Avery on the phone.
802
00:32:01,557 --> 00:32:03,758
Um, Avery.
803
00:32:03,760 --> 00:32:04,992
We're striking out here.
804
00:32:04,994 --> 00:32:08,395
It looks like Leo could be
reporting false sightings.
805
00:32:08,397 --> 00:32:10,029
So what do you think?
806
00:32:10,031 --> 00:32:12,365
Let's review everything
we know about Leo Finch.
807
00:32:12,367 --> 00:32:13,667
We know that
he's meticulous
808
00:32:13,669 --> 00:32:15,335
about the details
in his recreations.
809
00:32:15,337 --> 00:32:17,236
The boy in the third
911 call said
810
00:32:17,238 --> 00:32:19,606
- that he and his dad were leaving a game.
- The police report said
811
00:32:19,608 --> 00:32:21,240
Mets tickets were found
in the dad's jacket pocket.
812
00:32:21,242 --> 00:32:22,208
It was a baseball game.
813
00:32:22,210 --> 00:32:23,643
Yeah, but it's not
baseball season.
814
00:32:23,645 --> 00:32:27,012
Well, let's concentrate
on another sporting event.
815
00:32:28,715 --> 00:32:30,015
All right, here we go.
816
00:32:30,017 --> 00:32:31,249
I got hockey in Manhattan,
basketball in Brooklyn.
817
00:32:31,251 --> 00:32:33,285
Which one fits our window?
Both.
818
00:32:33,287 --> 00:32:35,587
Let's compare them
with the BOLO locations.
819
00:32:35,589 --> 00:32:37,222
Okay, we've got
six sightings of Leo
820
00:32:37,224 --> 00:32:39,458
around the arena in Manhattan,
only one in Brooklyn.
821
00:32:39,460 --> 00:32:41,293
It's the hockey game.
822
00:32:41,295 --> 00:32:42,960
Which ends in 15 minutes.
823
00:32:42,962 --> 00:32:44,696
The original stabbing
took place in an alley
824
00:32:44,698 --> 00:32:46,631
two blocks away
from the stadium.
825
00:32:46,633 --> 00:32:48,599
All right, how many alleys
are there within that range
826
00:32:48,601 --> 00:32:49,900
of the arena?
827
00:32:49,902 --> 00:32:51,436
One second.
828
00:32:51,438 --> 00:32:52,903
Three.
829
00:32:52,905 --> 00:32:54,905
All right, well, this is a guy
that sticks to details, right?
830
00:32:54,907 --> 00:32:56,273
Let's pull up some old
crime scene photos,
831
00:32:56,275 --> 00:32:57,908
see if we can narrow
it down to one.
832
00:32:57,910 --> 00:33:00,276
Remember, Leo is a
deviant audiophile.
833
00:33:00,278 --> 00:33:02,912
It isn't about what we see,
it's about what we hear.
834
00:33:02,914 --> 00:33:05,081
Raven, pull up
the original 911 recording
835
00:33:05,083 --> 00:33:06,883
of the alley stabbing.
836
00:33:06,885 --> 00:33:08,084
Isolate the background sound.
837
00:33:08,086 --> 00:33:09,486
Okay.
838
00:33:09,488 --> 00:33:10,587
911.
What's your emergency?
839
00:33:10,589 --> 00:33:12,288
Help, he's stabbing him!
840
00:33:12,290 --> 00:33:13,357
He's stabbing my dad!
841
00:33:13,359 --> 00:33:14,424
What's your name?
842
00:33:14,426 --> 00:33:15,759
Stop. Go back.
843
00:33:16,794 --> 00:33:18,427
That's an elevated train.
844
00:33:18,429 --> 00:33:20,095
Pull up a subway map.
845
00:33:20,097 --> 00:33:23,232
Look for any trains near
the arena that go above ground.
846
00:33:26,102 --> 00:33:28,337
Got it, it's the alley
between West 4th and Bleeker.
847
00:33:28,339 --> 00:33:29,273
Notify the arena.
848
00:33:29,274 --> 00:33:30,738
I'll have 'em redirect crowds
away from that alley,
849
00:33:30,742 --> 00:33:32,641
have NYPD clear
the streets.
850
00:33:32,643 --> 00:33:34,376
Let's go get Leo Finch.
851
00:33:55,787 --> 00:33:57,988
It's over, Leo!
852
00:33:57,990 --> 00:33:59,490
FBI!
853
00:33:59,492 --> 00:34:01,925
We have you surrounded!
854
00:34:01,927 --> 00:34:04,161
Got a visual on Leo,
he is armed.
855
00:34:04,928 --> 00:34:06,363
Drop the knife, Leo!
856
00:34:07,565 --> 00:34:09,098
Nobody's coming out
of that arena.
857
00:34:09,100 --> 00:34:12,068
We've sealed the exits,
we've cleared the streets.
858
00:34:12,070 --> 00:34:13,637
There's no one here
for you to harm.
859
00:34:13,639 --> 00:34:15,372
So drop the knife.
Drop it now.
860
00:34:15,374 --> 00:34:16,873
They're mine!
861
00:34:16,875 --> 00:34:18,441
They're mine!
You can't take them!
862
00:34:18,443 --> 00:34:19,476
Do not take one more step.
863
00:34:19,478 --> 00:34:20,477
Give them back to me!
864
00:34:20,479 --> 00:34:21,710
They're all I have!
865
00:34:21,712 --> 00:34:24,012
Take one more step,
and I will shoot!
866
00:34:25,615 --> 00:34:27,716
Stand down, Elijah.
867
00:34:27,718 --> 00:34:29,084
We confiscated his computer.
868
00:34:29,086 --> 00:34:31,654
He's talking about the
recordings he had saved on it.
869
00:34:31,656 --> 00:34:33,855
He came here to kill someone.
870
00:34:33,857 --> 00:34:35,023
He came to satisfy an addiction.
871
00:34:35,025 --> 00:34:36,758
Leo's a junkie.
He came to get a fix.
872
00:34:36,760 --> 00:34:38,459
We could still
end this peacefully.
873
00:34:38,461 --> 00:34:41,262
Krumitz, pull up the third
recording on Leo's playlist.
874
00:34:41,264 --> 00:34:43,498
We need to find a way to play
it for Leo at the scene.
875
00:34:43,500 --> 00:34:47,001
Okay, the squad cars all have
P.A. systems with bullhorns.
876
00:34:47,003 --> 00:34:48,369
Operator, this is
Agent Daniel Krumitz.
877
00:34:48,371 --> 00:34:49,304
Connect me to dispatch.
878
00:34:49,306 --> 00:34:50,672
Hold your fire!
879
00:34:50,674 --> 00:34:54,676
Officer, I need you
to turn on your P.A. system.
880
00:34:56,611 --> 00:34:58,945
911.
What's your emergency?
881
00:34:58,947 --> 00:35:00,814
Help, he's stabbing him!
He's stabbing my dad!
882
00:35:00,816 --> 00:35:03,049
What's your name?
Where are you?
883
00:35:03,051 --> 00:35:04,284
Dylan, I don't know
where I am.
884
00:35:04,286 --> 00:35:05,852
We just... we left the game.
It's an alley.
885
00:35:05,854 --> 00:35:07,954
Help is on the way.
886
00:35:07,956 --> 00:35:10,023
The man just left.
I'm scared.
887
00:35:10,025 --> 00:35:12,592
Hey, Dylan, I need you
to go to your dad.
888
00:35:12,594 --> 00:35:13,726
Tell me what you see.
889
00:35:13,728 --> 00:35:15,160
He's not moving.
890
00:35:18,432 --> 00:35:19,665
He was going for his knife.
891
00:35:24,571 --> 00:35:27,906
Someone call 911.
892
00:35:27,908 --> 00:35:29,874
I've been hurt.
893
00:35:29,876 --> 00:35:32,076
I need help.
894
00:35:36,515 --> 00:35:38,783
♪
895
00:35:48,192 --> 00:35:50,628
Nice code, brother. Huh?
896
00:35:50,630 --> 00:35:52,763
You're gonna leave me hanging?
My bad, bro.
897
00:35:52,765 --> 00:35:54,898
That's old news, Nelson.
898
00:35:54,900 --> 00:35:57,100
Yeah, but not to the
mayor of New York City.
899
00:35:57,102 --> 00:35:58,335
I mean, all he saw
was a black hat
900
00:35:58,337 --> 00:35:59,570
who brought down
the stock exchange.
901
00:35:59,572 --> 00:36:01,672
It's like
no matter what I do right,
902
00:36:01,674 --> 00:36:03,039
I can't shake what I did wrong.
903
00:36:03,041 --> 00:36:04,774
This is what pops up
when I Google my name.
904
00:36:04,776 --> 00:36:05,775
Look at this.
905
00:36:05,777 --> 00:36:08,444
Hey, come on.
906
00:36:08,446 --> 00:36:10,112
You didn't have to come
back to Washington.
907
00:36:10,114 --> 00:36:11,347
You could have stayed
in New York.
908
00:36:11,349 --> 00:36:14,083
I know, but I was...
I was a distraction.
909
00:36:14,085 --> 00:36:16,118
You had to go
to bat for me.
910
00:36:16,120 --> 00:36:18,288
It's not like anything Mayor
Cavanaugh said wasn't true.
911
00:36:18,290 --> 00:36:20,722
Really? You really
took that eight million?
912
00:36:20,724 --> 00:36:21,990
Except for that, Krummy.
913
00:36:21,992 --> 00:36:24,293
Hey, we cleared you
of that long ago.
914
00:36:24,295 --> 00:36:26,728
The fact remains
you can't rewrite history,
915
00:36:26,730 --> 00:36:28,497
but you can make it.
916
00:36:28,499 --> 00:36:30,766
And that is exactly
what you did today.
917
00:36:30,768 --> 00:36:31,933
Own that.
918
00:36:31,935 --> 00:36:34,135
You should be
very proud of yourself.
919
00:36:34,137 --> 00:36:36,538
Thank you, Avery.
920
00:36:40,609 --> 00:36:41,942
Eight million.
921
00:36:41,944 --> 00:36:43,544
Oh, my God.
You can tell me.
922
00:36:43,546 --> 00:36:45,913
I won't tell anybody.
Come on, you know where it is.
923
00:36:45,915 --> 00:36:47,981
Let's go get it right now.
- I didn't steal it.
924
00:36:47,983 --> 00:36:49,583
But I'm gonna find out
925
00:36:49,585 --> 00:36:50,951
who did.
926
00:36:50,953 --> 00:36:55,221
And when I do... I'm gonna put
that bastard in prison.
927
00:37:00,528 --> 00:37:03,229
Here, let me read
this to you.
928
00:37:03,231 --> 00:37:04,864
Okay.
929
00:37:04,866 --> 00:37:08,702
"I'm taking a chance, hoping
this is still your number.
930
00:37:08,704 --> 00:37:11,637
"I know it's been two years.
But fingers crossed,
931
00:37:11,639 --> 00:37:13,405
"and divorce in the rearview...
932
00:37:13,407 --> 00:37:15,173
Maybe""
Question mark.
933
00:37:15,175 --> 00:37:16,575
"I'm at
Le Petit Paris
934
00:37:16,577 --> 00:37:19,812
every night from 8:00
until they throw me out."
935
00:37:19,814 --> 00:37:21,647
"Foolish Heart."
936
00:37:21,649 --> 00:37:23,048
So you got a new phone
937
00:37:23,050 --> 00:37:25,718
and her new number, and whoever
had that number before you
938
00:37:25,720 --> 00:37:27,653
was supposed to get that text.
939
00:37:27,655 --> 00:37:30,087
I-I know, I should have texted
her right back when I got it,
940
00:37:30,089 --> 00:37:31,121
but I didn't, I-I waited.
941
00:37:31,123 --> 00:37:33,157
But then I figured,
you know,
942
00:37:33,159 --> 00:37:37,127
she would assume that her text
hadn't gone through, right?
943
00:37:37,129 --> 00:37:38,629
Mm-hmm.
- And maybe that was better
944
00:37:38,631 --> 00:37:42,132
than letting her know that I,
you know, a complete stranger,
945
00:37:42,134 --> 00:37:45,169
knew that she'd...
put herself out there.
946
00:37:45,171 --> 00:37:46,603
And I just didn't want
947
00:37:46,605 --> 00:37:47,838
to embarrass her.
948
00:37:47,840 --> 00:37:49,906
How do you know it's a her?
949
00:37:50,742 --> 00:37:52,041
Well, that's a good point.
950
00:37:52,043 --> 00:37:53,810
Okay, end of conversation.
951
00:37:53,812 --> 00:37:55,245
No, wait a minute.
952
00:37:55,247 --> 00:37:57,681
You fantasized about who it would be, D.B.
No, I didn't,
953
00:37:57,683 --> 00:37:58,715
no, I didn't.
954
00:37:58,717 --> 00:37:59,916
Yeah, you investigated it.
955
00:37:59,918 --> 00:38:01,050
No, I did not investigate.
956
00:38:01,052 --> 00:38:02,718
Yeah, you did.
I called the restaurant.
957
00:38:02,720 --> 00:38:04,319
See?
- That's all. I call...
958
00:38:04,321 --> 00:38:07,055
They said that
a rather attractive woman
959
00:38:07,057 --> 00:38:09,458
came there every night
the same time.
960
00:38:09,460 --> 00:38:11,427
And I... I knew
961
00:38:11,429 --> 00:38:13,629
that she was roughly
in my age group.
962
00:38:13,631 --> 00:38:15,831
Oh.
- "Foolish Heart""
963
00:38:15,833 --> 00:38:18,166
That's a reference
to a Steve Perry song.
964
00:38:18,168 --> 00:38:20,167
♪
965
00:38:20,169 --> 00:38:21,870
That's a rock star
before your time.
966
00:38:21,872 --> 00:38:24,873
Anyway, this...
the whole text, it just...
967
00:38:24,875 --> 00:38:27,409
you know, it seemed
so brave and... and honest,
968
00:38:27,411 --> 00:38:29,343
and... I'm curious.
969
00:38:29,345 --> 00:38:31,780
You hijacked another man's text.
970
00:38:31,782 --> 00:38:33,180
Yes, I did.
971
00:38:34,317 --> 00:38:35,950
So you're gonna meet her
at the restaurant,
972
00:38:35,952 --> 00:38:37,217
or what?
973
00:38:38,520 --> 00:38:40,421
No. No.
974
00:38:40,423 --> 00:38:42,689
♪
975
00:39:07,681 --> 00:39:09,949
♪
976
00:39:15,020 --> 00:39:16,488
Hi.
977
00:39:17,323 --> 00:39:18,523
Hi.
978
00:39:18,525 --> 00:39:20,291
Forgive me for asking,
979
00:39:20,293 --> 00:39:22,494
but are-are you...
here alone?
980
00:39:22,496 --> 00:39:23,728
Uh...
981
00:39:23,730 --> 00:39:25,296
I am.
982
00:39:25,298 --> 00:39:26,565
Yeah. Of course.
983
00:39:26,567 --> 00:39:28,031
Um... sorry, no,
984
00:39:28,033 --> 00:39:29,266
I don't mean of course,
I mean...
985
00:39:29,268 --> 00:39:31,535
I have a confession to make.
Oh, really?
986
00:39:31,537 --> 00:39:33,604
Shouldn't I know your name
before we jump
987
00:39:33,606 --> 00:39:35,506
right into the serious stuff?
Yes, yeah.
988
00:39:35,508 --> 00:39:37,508
Sorry. Uh, D.B.
989
00:39:37,510 --> 00:39:39,309
Greer.
- Nice to meet you.
990
00:39:39,311 --> 00:39:40,611
See, I, uh...
991
00:39:40,613 --> 00:39:44,147
I received this today,
and... obviously,
992
00:39:44,149 --> 00:39:45,949
it was not meant for me.
993
00:39:45,951 --> 00:39:47,617
I should have texted
you right back,
994
00:39:47,619 --> 00:39:49,652
but I didn't, and I'm sorry.
995
00:39:50,454 --> 00:39:52,188
Mmm.
996
00:39:52,190 --> 00:39:54,457
Yeah. Yeah, awkward.
997
00:39:54,459 --> 00:39:56,192
No, not for me.
998
00:39:56,194 --> 00:39:58,528
Because I didn't write
that text.
999
00:39:58,530 --> 00:40:01,297
Really.
1000
00:40:01,299 --> 00:40:02,397
You're kidding.
1001
00:40:02,399 --> 00:40:04,466
Oh, boy.
1002
00:40:05,301 --> 00:40:07,435
So...
1003
00:40:08,204 --> 00:40:10,472
Oh...
1004
00:40:10,474 --> 00:40:12,073
Oh, man.
1005
00:40:12,075 --> 00:40:15,210
Well, shame on her.
1006
00:40:15,212 --> 00:40:17,813
Soliciting men via text.
1007
00:40:17,815 --> 00:40:19,146
So...
1008
00:40:19,148 --> 00:40:21,148
can I buy you a drink?
1009
00:40:21,150 --> 00:40:22,617
Really?
1010
00:40:22,619 --> 00:40:25,185
Seems like you could use one.
1011
00:40:25,187 --> 00:40:28,255
Shouldn't I know your last name
before we... jump into
1012
00:40:28,257 --> 00:40:31,025
the serious stuff?
Greer Latimore.
1013
00:40:31,027 --> 00:40:33,060
D.B. Russell.
1014
00:40:33,062 --> 00:40:35,129
Nice to meet you.
1015
00:40:35,131 --> 00:40:37,230
You, too.
1016
00:40:37,232 --> 00:40:40,634
♪ Foolish heart...
- So, uh...
1017
00:40:40,636 --> 00:40:42,201
what do you do...
1018
00:40:42,203 --> 00:40:43,637
Greer Latimore?
1019
00:40:43,639 --> 00:40:45,672
Former Secret Service.
1020
00:40:45,674 --> 00:40:48,241
Dabble in...
private investigations.
1021
00:40:48,243 --> 00:40:49,776
♪ Foolish, foolish heart...
Nuh-uh.
1022
00:40:49,778 --> 00:40:51,011
Uh-huh.
1023
00:40:51,013 --> 00:40:53,145
Oh, boy.
1024
00:40:53,147 --> 00:40:54,413
What are you drinking?
1025
00:40:54,415 --> 00:40:55,781
♪ You've been wrong before...
Something manly.
1026
00:40:57,317 --> 00:40:58,584
Okay.
1027
00:40:58,586 --> 00:40:59,785
Tequila.
1028
00:40:59,787 --> 00:41:01,854
Very manly.
- Yes, yes.
1029
00:41:01,856 --> 00:41:04,356
♪ Foolish, foolish heart...
Excuse me.
1030
00:41:09,605 --> 00:41:16,105
== sync, corrected by elderman ==
@elder_man