1 00:00:04,071 --> 00:00:05,791 My name is Avery Ryan. 2 00:00:05,792 --> 00:00:07,991 I was a victim of cyber crime. 3 00:00:08,162 --> 00:00:10,696 Like you, I posted on social media, 4 00:00:10,698 --> 00:00:13,499 checked my bank account balance online, 5 00:00:13,501 --> 00:00:15,501 even kept the confidential files 6 00:00:15,503 --> 00:00:18,170 of my psychological practice on my computer. 7 00:00:18,506 --> 00:00:21,441 Then I was hacked, and as a result, 8 00:00:21,443 --> 00:00:24,076 one of my patients was murdered. 9 00:00:24,078 --> 00:00:26,446 My investigation into her death led me to the FBI, 10 00:00:26,448 --> 00:00:29,282 where I joined a team of cyber experts 11 00:00:29,284 --> 00:00:32,251 to wage a war against a new breed of criminal 12 00:00:32,253 --> 00:00:35,188 hiding on the Deep Web... 13 00:00:35,190 --> 00:00:38,524 infiltrating our daily lives in ways we never imagined... 14 00:00:39,894 --> 00:00:42,061 ...faceless... 15 00:00:42,063 --> 00:00:44,263 nameless... 16 00:00:44,265 --> 00:00:45,898 lurking inside our devices, 17 00:00:45,900 --> 00:00:48,701 just a keystroke away. 18 00:01:19,300 --> 00:01:20,633 Hi. 19 00:01:48,796 --> 00:01:51,063 ♪ ♪ 20 00:02:08,483 --> 00:02:10,883 Surprised I could get a ZoGo at this crazy hour. 21 00:02:10,885 --> 00:02:13,486 You guys still taking the online coupon? 22 00:02:16,357 --> 00:02:18,524 (alarm blaring) 23 00:02:25,633 --> 00:02:28,434 Hey, what'd you say your name was again? 24 00:02:29,237 --> 00:02:30,603 I didn't. 25 00:02:30,605 --> 00:02:33,105 (horn blaring) 26 00:02:44,285 --> 00:02:47,987 Hey, listen, I think maybe there's been a mix-up. 27 00:02:49,524 --> 00:02:51,457 Can you turn around? 28 00:02:51,459 --> 00:02:54,193 Change of plans. 29 00:02:57,498 --> 00:03:00,499 You can just pull over and-and just let me out. 30 00:03:12,046 --> 00:03:13,379 Hey, what are you doing? 31 00:03:13,381 --> 00:03:14,780 Why are we stopping here? 32 00:03:14,782 --> 00:03:16,148 Hey! 33 00:03:16,150 --> 00:03:17,483 Help! Somebody help me! 34 00:03:18,486 --> 00:03:20,319 (screaming) 35 00:03:29,731 --> 00:03:30,896 (screaming stops) 36 00:03:30,898 --> 00:03:32,031 (elevator bell dings) 37 00:03:32,033 --> 00:03:33,265 Elijah. 38 00:03:33,267 --> 00:03:35,167 Hey, I hear you're traveling to Boston with us. 39 00:03:35,169 --> 00:03:36,569 Yeah, when a government contractor 40 00:03:36,571 --> 00:03:38,371 with top secret clearance is murdered, 41 00:03:38,373 --> 00:03:40,706 alarm bells go off all over Washington. 42 00:03:40,708 --> 00:03:43,442 Attorney general's called me five times today. 43 00:03:43,444 --> 00:03:45,277 Cade Matthews' body dumped near the Riverway. 44 00:03:45,279 --> 00:03:47,513 According to Boston PD, his cell 45 00:03:47,515 --> 00:03:49,949 found at the scene was wiped along with all other devices 46 00:03:49,951 --> 00:03:51,250 at his home and his office. 47 00:03:51,252 --> 00:03:53,185 Have a look. 48 00:03:53,187 --> 00:03:55,354 MUNDO: Consultant for private military company. 49 00:03:55,356 --> 00:03:56,756 Derongard. 50 00:03:56,758 --> 00:03:58,190 Specialized in cyber security. 51 00:03:58,192 --> 00:03:59,725 Oh, the ultimate white hat. 52 00:03:59,727 --> 00:04:01,894 Bet he had a lot of data worth killing for. (phone rings) 53 00:04:01,896 --> 00:04:03,295 Attorney general again. 54 00:04:03,297 --> 00:04:06,198 So the target murders Cade, steals his government secrets 55 00:04:06,200 --> 00:04:07,333 and then wipes his devices clean 56 00:04:07,335 --> 00:04:08,834 to remove any trace of the intrusion. 57 00:04:08,836 --> 00:04:09,969 That's a smart move. 58 00:04:09,971 --> 00:04:12,138 Clean up a crime scene with bleach after the kill. 59 00:04:12,140 --> 00:04:14,273 Everything in here should recover the wiped info 60 00:04:14,275 --> 00:04:16,142 from the vic's devices, okay? Just plug it in. 61 00:04:16,144 --> 00:04:17,610 I already know all this, Krumitz. 62 00:04:17,612 --> 00:04:19,378 (sighs) This is a big case. 63 00:04:19,380 --> 00:04:21,313 I should be coming with you to Boston. 64 00:04:21,315 --> 00:04:24,483 No, you should be taking one of your 500 vacation days 65 00:04:24,485 --> 00:04:25,985 and not working. 66 00:04:25,987 --> 00:04:27,420 I can't stay at home. 67 00:04:27,422 --> 00:04:29,588 I got to stay busy; I got to do something. 68 00:04:29,590 --> 00:04:31,023 But you are all right? 69 00:04:31,025 --> 00:04:32,258 Yeah, I'm good. 70 00:04:32,260 --> 00:04:33,526 Come on, you're gonna be late. 71 00:04:33,528 --> 00:04:34,860 Ah! 72 00:04:34,862 --> 00:04:36,629 So, Krummy, you finally decided to take a page out of my book. 73 00:04:36,631 --> 00:04:39,131 I mean, your tie could use a little work, though. 74 00:04:39,133 --> 00:04:40,266 (elevator bell dings) 75 00:04:40,268 --> 00:04:42,034 Just saying, I'm digging it. 76 00:04:42,036 --> 00:04:43,335 Look, everybody's dressing up today. 77 00:04:43,337 --> 00:04:44,737 Looks like you had fun last night. 78 00:04:44,739 --> 00:04:46,906 - Who's the lucky guy? - Not in the mood, Nelson. 79 00:04:46,908 --> 00:04:49,475 RYAN: Raven, check the social media activity 80 00:04:49,477 --> 00:04:50,910 for our Boston murder victim, 81 00:04:50,912 --> 00:04:53,245 - Cade Matthews. - See if we can build a pattern 82 00:04:53,247 --> 00:04:54,480 of behavior prior to his death. 83 00:04:54,482 --> 00:04:55,781 - Shall we? - Yeah. 84 00:04:57,452 --> 00:04:59,985 Since when do you wear a tie? 85 00:04:59,987 --> 00:05:01,587 Says the girl in the party dress? 86 00:05:01,589 --> 00:05:03,556 Had a mix-up with ZoGo this morning. 87 00:05:03,558 --> 00:05:05,624 Couldn't get a car and didn't want to be late. 88 00:05:05,626 --> 00:05:09,061 Well, looks like it's you and me, Krumitz. 89 00:05:09,063 --> 00:05:11,297 Let's take over the world. 90 00:05:20,174 --> 00:05:22,041 Detective Linney. 91 00:05:22,043 --> 00:05:23,776 Crime Scene recovered Mr. Matthews' phone 92 00:05:23,778 --> 00:05:25,044 at the scene. 93 00:05:25,046 --> 00:05:26,512 Left it for you cyber guys to handle. 94 00:05:26,514 --> 00:05:27,947 Thank you, Detective. 95 00:05:27,949 --> 00:05:29,115 You got any guess as to 96 00:05:29,117 --> 00:05:30,916 - what we're looking at here? - Well, you know, 97 00:05:30,918 --> 00:05:32,451 we're a little early in the investigation 98 00:05:32,453 --> 00:05:33,652 even for speculations. 99 00:05:33,654 --> 00:05:35,387 Yeah, of course. It's just that 100 00:05:35,389 --> 00:05:37,490 it's kind of personal for the whole department. 101 00:05:37,492 --> 00:05:39,458 Cade Matthews was one of the cyber security experts 102 00:05:39,460 --> 00:05:43,295 to help us locate the Boston Marathon bombers. 103 00:05:43,297 --> 00:05:45,231 He stayed with us all night. He was... 104 00:05:45,233 --> 00:05:47,233 One of the best consultants we had here at Derongard. 105 00:05:47,235 --> 00:05:49,201 How long have you known Mr. Matthews? 106 00:05:49,203 --> 00:05:52,471 Uh, Cade and I have worked together very closely 107 00:05:52,473 --> 00:05:53,672 for the last two years. 108 00:05:53,674 --> 00:05:55,074 And how long have you been dating? 109 00:05:55,076 --> 00:05:56,876 You just referred to him 110 00:05:56,878 --> 00:05:58,177 by his first name. 111 00:05:58,179 --> 00:06:00,346 You told me that you worked closely together. 112 00:06:00,348 --> 00:06:02,848 I only asked how long you've known him. 113 00:06:02,850 --> 00:06:04,416 Regina, you're his boss. 114 00:06:04,418 --> 00:06:06,819 An office romance might make 115 00:06:06,821 --> 00:06:09,155 other employees nervous, insecure, 116 00:06:09,157 --> 00:06:10,923 - or feel threatened. - No one else knew. 117 00:06:10,925 --> 00:06:13,325 Cade thought that they did, 118 00:06:13,327 --> 00:06:15,261 but he was just being... 119 00:06:15,263 --> 00:06:16,862 Paranoid. 120 00:06:16,864 --> 00:06:18,297 That's how I'd describe him. 121 00:06:18,299 --> 00:06:20,166 He said that he didn't like having 122 00:06:20,168 --> 00:06:22,301 the information that he did, and that rival companies 123 00:06:22,303 --> 00:06:23,936 could possibly be coming after him for it. 124 00:06:23,938 --> 00:06:25,471 Did he tell you what kind of information 125 00:06:25,473 --> 00:06:26,605 he was talking about? 126 00:06:26,607 --> 00:06:28,841 Cade was consulting on 15 classified projects 127 00:06:28,843 --> 00:06:30,709 for the military and NASA. 128 00:06:30,711 --> 00:06:32,111 I didn't even know all the details. 129 00:06:32,113 --> 00:06:33,712 When was the last time you saw him? 130 00:06:33,714 --> 00:06:35,381 A week ago. 131 00:06:35,383 --> 00:06:36,949 Last night. 132 00:06:36,951 --> 00:06:38,851 He ended the relationship. 133 00:06:38,853 --> 00:06:40,519 Said it was inappropriate. 134 00:06:40,521 --> 00:06:42,188 Did you kill him? 135 00:06:42,990 --> 00:06:45,591 No. 136 00:06:45,593 --> 00:06:48,260 I loved him. 137 00:06:50,031 --> 00:06:52,097 Excuse me. 138 00:06:54,969 --> 00:06:57,736 Coroner confirmed C.O.D.-- asphyxiation. 139 00:06:57,738 --> 00:06:59,171 He was strangled. 140 00:06:59,173 --> 00:07:00,773 There were signs of a struggle, 141 00:07:00,775 --> 00:07:03,108 some odd skin abrasions they think were due to a stun gun. 142 00:07:03,110 --> 00:07:05,110 They also recovered 143 00:07:05,112 --> 00:07:08,414 a small children's toy block that was in his mouth. 144 00:07:08,416 --> 00:07:10,082 A message from the killer. 145 00:07:10,084 --> 00:07:11,517 What was the letter? 146 00:07:11,519 --> 00:07:12,885 A number. 147 00:07:12,887 --> 00:07:14,253 Two. 148 00:07:16,691 --> 00:07:18,157 Okay, so let me get this straight. 149 00:07:18,159 --> 00:07:20,492 You jump on to moving trains, you kick down doors, 150 00:07:20,494 --> 00:07:22,194 and you know computer forensics? 151 00:07:22,196 --> 00:07:25,664 You're like a badass Bill Gates, just younger. 152 00:07:25,666 --> 00:07:27,533 And not as rich. 153 00:07:27,535 --> 00:07:29,034 (chuckles) All right, the data from Cade's work computer 154 00:07:29,036 --> 00:07:30,536 was backed up by the Derongard servers. 155 00:07:30,538 --> 00:07:31,604 It's recoverable. 156 00:07:31,606 --> 00:07:33,138 Wait a minute. 157 00:07:33,140 --> 00:07:34,640 - Is this right? - What? 158 00:07:34,642 --> 00:07:36,775 The target didn't wipe Cade's devices like we thought. 159 00:07:36,777 --> 00:07:38,410 Looks like Cade remotely wiped them himself 160 00:07:38,412 --> 00:07:39,845 before he was murdered. 161 00:07:39,847 --> 00:07:41,881 There's evidence of a text-enabled kill switch 162 00:07:41,883 --> 00:07:43,983 on his cell. 163 00:07:46,287 --> 00:07:48,754 (screaming) 164 00:07:48,756 --> 00:07:51,090 This wasn't a killer trying to get rid of a digital trace. 165 00:07:51,092 --> 00:07:53,492 This was a victim protecting confidential information. 166 00:07:53,494 --> 00:07:55,160 Yeah. 167 00:07:55,162 --> 00:07:56,462 Cellebrite just recovered 168 00:07:56,464 --> 00:07:58,397 the files from his phone. 169 00:07:58,399 --> 00:07:59,765 Now let's see. 170 00:07:59,767 --> 00:08:01,867 The last thing Cade did before he died 171 00:08:01,869 --> 00:08:04,403 - was access the ZoGo app, - Right. 172 00:08:04,405 --> 00:08:06,639 destroy his files, 173 00:08:06,641 --> 00:08:08,407 and dial 911. 174 00:08:12,446 --> 00:08:14,246 Raven, I'm gonna need you to dig up a recording 175 00:08:14,248 --> 00:08:17,316 of a 911 phone call from Cade Matthews' cell phone 176 00:08:17,318 --> 00:08:19,418 at 5:25 this morning. 177 00:08:19,420 --> 00:08:21,287 OPERATOR: 911, what's your emergency? 178 00:08:21,289 --> 00:08:23,289 CADE: Hi, I'd like to order a pizza. 179 00:08:23,291 --> 00:08:24,690 Large. 180 00:08:24,692 --> 00:08:27,259 Uh, pepperoni, extra pepperonis. 181 00:08:27,261 --> 00:08:28,460 Sir, you dialed the police. 182 00:08:28,462 --> 00:08:29,762 Yeah, I'm not home right now. 183 00:08:29,764 --> 00:08:32,164 Are you guys still good to deliver? 184 00:08:32,166 --> 00:08:33,499 Sir, this is an emergency line. 185 00:08:33,501 --> 00:08:34,667 Are you having an emergency? 186 00:08:34,669 --> 00:08:36,235 He was trying to get help. 187 00:08:36,237 --> 00:08:38,237 Yeah, according to the operator, she didn't get the location 188 00:08:38,239 --> 00:08:39,705 of his cell before the call disconnected. 189 00:08:39,707 --> 00:08:41,307 Well, based on tower signals, 190 00:08:41,309 --> 00:08:43,275 we can triangulate a rough area, but it's a pretty large section 191 00:08:43,277 --> 00:08:45,811 of the city, nowhere near the body dump site. 192 00:08:45,813 --> 00:08:49,081 We do know he ordered a ZoGo at 5:17 a.m. 193 00:08:49,083 --> 00:08:50,849 What do we know about his ZoGo driver? 194 00:08:50,851 --> 00:08:52,751 Huh. Well, this is weird. 195 00:08:52,753 --> 00:08:55,187 According to Cade's account, 196 00:08:55,189 --> 00:08:57,456 five different drivers picked him up. 197 00:08:59,694 --> 00:09:01,860 Well, he couldn't have been in five different cars 198 00:09:01,862 --> 00:09:03,295 all at the same time. 199 00:09:03,297 --> 00:09:04,997 So which car did he get in? 200 00:09:04,999 --> 00:09:06,432 That's impossible. 201 00:09:06,434 --> 00:09:08,867 No one passenger could be assigned 202 00:09:08,869 --> 00:09:10,402 five drivers for a single trip. 203 00:09:10,404 --> 00:09:12,104 MUNDO: Well, Cade Matthew's 204 00:09:12,106 --> 00:09:13,939 ZoGo profile suggests otherwise. 205 00:09:13,941 --> 00:09:16,842 Well, we did experience a glitch in the system last night. 206 00:09:16,844 --> 00:09:18,544 Um, we ran a check 207 00:09:18,546 --> 00:09:19,878 and we rebooted the entire system 208 00:09:19,880 --> 00:09:21,847 along the Eastern Seaboard. 209 00:09:21,849 --> 00:09:23,182 That could easily explain the confusion. 210 00:09:23,184 --> 00:09:24,383 There were several complaints 211 00:09:24,385 --> 00:09:25,384 and a couple missed rides. 212 00:09:25,386 --> 00:09:26,518 No, you were hacked. 213 00:09:26,520 --> 00:09:28,153 At 5:10 a.m., to be exact. 214 00:09:28,155 --> 00:09:29,421 Looks like a hacker wrote a script 215 00:09:29,423 --> 00:09:30,522 that took the unique identifier 216 00:09:30,524 --> 00:09:31,590 of the passenger's phone 217 00:09:31,592 --> 00:09:33,092 and bounced it to five separate drivers. 218 00:09:33,094 --> 00:09:35,094 So we don't know who picked up Cade. 219 00:09:35,096 --> 00:09:37,062 Target turned the ZoGo system into a shell game 220 00:09:37,064 --> 00:09:38,430 so he could hide himself. 221 00:09:38,432 --> 00:09:40,366 I'm gonna need the last names of those five drivers. 222 00:09:40,368 --> 00:09:41,967 I can't give you those names. 223 00:09:41,969 --> 00:09:43,902 I think maybe you're missing my point, Derrick. 224 00:09:43,904 --> 00:09:45,804 Those five drivers are suspects in a murder. 225 00:09:45,806 --> 00:09:47,373 A man is dead, 226 00:09:47,375 --> 00:09:49,308 and the last thing he did was use ZoGo. 227 00:09:49,310 --> 00:09:51,710 I can't give you the names because they're not our drivers. 228 00:09:51,712 --> 00:09:53,412 They're independent contractors who use our service. 229 00:09:53,414 --> 00:09:54,780 We just supply the app. 230 00:09:54,782 --> 00:09:56,215 You take a cut of the fare. 231 00:09:56,217 --> 00:09:57,383 You're the transportation company. 232 00:09:57,385 --> 00:09:59,284 No, we are not responsible nor are we liable 233 00:09:59,286 --> 00:10:00,419 for any transportation services 234 00:10:00,421 --> 00:10:02,187 provided by the drivers. 235 00:10:02,189 --> 00:10:03,322 That is clearly stated 236 00:10:03,324 --> 00:10:04,823 in our terms of service agreement. (scoffs) 237 00:10:04,825 --> 00:10:06,158 We are a software company 238 00:10:06,160 --> 00:10:07,659 that links drivers to passengers. 239 00:10:07,661 --> 00:10:09,862 We provide an app; we're an idea company. 240 00:10:09,864 --> 00:10:12,464 An idea company? How about that? 241 00:10:12,466 --> 00:10:13,090 Yeah. 242 00:10:13,114 --> 00:10:14,934 Here's an idea. How about you take a closer look 243 00:10:14,935 --> 00:10:16,068 at some of your Yelp reviews. 244 00:10:16,070 --> 00:10:18,037 Yeah, you have over 50 negative reviews, 245 00:10:18,039 --> 00:10:19,171 which claims that your drivers 246 00:10:19,173 --> 00:10:21,173 are offering drugs to their passengers. 247 00:10:21,175 --> 00:10:22,241 We do background checks. 248 00:10:22,243 --> 00:10:23,776 Beyond that, we are not responsible 249 00:10:23,778 --> 00:10:25,377 for what the drivers do in their own vehicles. 250 00:10:25,379 --> 00:10:27,579 Oh, well, according to the FBI database, 251 00:10:27,581 --> 00:10:29,548 at least a dozen ZoGo drivers have criminal records, 252 00:10:29,550 --> 00:10:31,417 including felony convictions for drug dealing. 253 00:10:31,419 --> 00:10:32,651 And if you had actually run 254 00:10:32,653 --> 00:10:34,086 background checks, you'd know that. 255 00:10:34,088 --> 00:10:35,220 So, here's another idea. 256 00:10:35,222 --> 00:10:37,356 Before you lie again to a federal agent, 257 00:10:37,358 --> 00:10:39,725 how about you get me the names of those drivers? 258 00:10:40,628 --> 00:10:42,161 I'll see what I can do. 259 00:10:43,397 --> 00:10:47,166 This is exactly why I take a taxi. 260 00:10:47,168 --> 00:10:48,934 Man, I use ZoGo all the time. 261 00:10:48,936 --> 00:10:50,469 It's cheaper than a cab. 262 00:10:50,471 --> 00:10:52,905 Look, pay right on your phone, get in, get out. 263 00:10:52,907 --> 00:10:55,174 Tip's included in the price. 264 00:10:55,176 --> 00:10:56,608 Is murder extra? 265 00:10:56,610 --> 00:10:58,010 Did Raven learn anything 266 00:10:58,012 --> 00:10:59,778 from Cade Matthews' social media profile? 267 00:10:59,780 --> 00:11:00,913 Very little. 268 00:11:00,915 --> 00:11:03,082 He only clocked a few hours online a week. 269 00:11:03,084 --> 00:11:04,716 He rarely texted or posted, and last night 270 00:11:04,718 --> 00:11:06,785 was the first time he'd ever taken a ZoGo. 271 00:11:06,787 --> 00:11:08,153 Spoke to all five ZoGo drivers. 272 00:11:08,155 --> 00:11:10,722 They all claim they didn't pick up Cade Matthews. 273 00:11:10,724 --> 00:11:12,558 NELSON: So, we accessed their personal cell phones, 274 00:11:12,560 --> 00:11:13,759 which also tracks their movement. 275 00:11:13,761 --> 00:11:15,494 All five drivers were nowhere near 276 00:11:15,496 --> 00:11:16,762 where Cade was picked up. 277 00:11:16,764 --> 00:11:18,330 Yeah, and all the devices were clean. 278 00:11:18,332 --> 00:11:19,698 They were not hacked in any way. 279 00:11:19,700 --> 00:11:22,334 Which mean all five drivers have a verified digital alibi. 280 00:11:22,336 --> 00:11:24,603 The ZoGo system was wrong. 281 00:11:24,605 --> 00:11:26,238 Right before he died, he got a message sent 282 00:11:26,240 --> 00:11:27,372 to his ZoGo app saying that his ride was 283 00:11:27,374 --> 00:11:29,174 canceled because he was a no-show. 284 00:11:29,176 --> 00:11:31,777 Guys, if he wasn't in a ZoGo, where was he? 285 00:11:31,779 --> 00:11:33,612 Ghost car. 286 00:11:33,614 --> 00:11:35,514 Our target hacked the app. 287 00:11:35,516 --> 00:11:37,950 Diverted all the data onto his cell phone. 288 00:11:37,952 --> 00:11:39,952 Masqueraded as a ZoGo driver. 289 00:11:39,954 --> 00:11:41,887 Cade got in his car thinking it was a real ZoGo. 290 00:11:41,889 --> 00:11:44,123 You know, ZoGo has made it socially acceptable 291 00:11:44,125 --> 00:11:45,858 to just get in the car with a stranger. 292 00:11:45,860 --> 00:11:47,359 At least taxis are regulated. 293 00:11:47,361 --> 00:11:49,928 There's accountability. No, not with this app. 294 00:11:49,930 --> 00:11:52,131 You get in that car, you're playing Russian roulette. 295 00:11:52,133 --> 00:11:53,632 Bet you Cade didn't ask for the driver's name. 296 00:11:53,634 --> 00:11:55,734 Probably didn't compare the face to the photo on the app. 297 00:11:55,736 --> 00:11:57,903 I rarely check the face on the app with the driver. 298 00:11:57,905 --> 00:11:59,771 Yeah, well, that blind faith is gonna get you 299 00:11:59,773 --> 00:12:01,039 in trouble some day, Nelson. 300 00:12:01,041 --> 00:12:03,275 You know what? I'm gonna think twice about that. 301 00:12:03,277 --> 00:12:05,277 I just see the logo on the car window and I assume 302 00:12:05,279 --> 00:12:07,012 - it's my ZoGo, so... - Well, the psychology 303 00:12:07,014 --> 00:12:09,214 makes sense. Cade was a first-time ZoGo user. 304 00:12:09,216 --> 00:12:11,383 Unlike Nelson, he didn't know better. 305 00:12:11,385 --> 00:12:13,652 A car arrived at his location. It looked like a ZoGo. 306 00:12:13,654 --> 00:12:15,888 He trusted the app. He didn't question it. 307 00:12:15,890 --> 00:12:17,723 This technology may have made life easier. 308 00:12:17,725 --> 00:12:19,625 It sure has not made it safer. 309 00:12:19,627 --> 00:12:21,693 Cade Matthews learned that one the hard way. 310 00:12:21,695 --> 00:12:24,062 He's dead because the technology is so hackable. 311 00:12:24,064 --> 00:12:25,797 The killer used the ZoGo system as a disguise 312 00:12:25,799 --> 00:12:26,709 so he could commit murder. 313 00:12:26,733 --> 00:12:27,700 But how did he know Cade Matthews 314 00:12:27,701 --> 00:12:30,602 needed a ride at that exact time? 315 00:12:30,604 --> 00:12:31,637 He didn't. 316 00:12:31,639 --> 00:12:32,704 It was a random kill. 317 00:12:32,706 --> 00:12:34,940 Cade happened to be the unlucky victim 318 00:12:34,942 --> 00:12:37,509 who climbed into the killer's fake ZoGo during the glitch. 319 00:12:37,511 --> 00:12:39,011 And Cade panicked once he was in the car 320 00:12:39,013 --> 00:12:40,179 because he thought the driver was after 321 00:12:40,181 --> 00:12:41,713 his confidential information. 322 00:12:41,715 --> 00:12:42,714 That's when he wiped the files. 323 00:12:42,716 --> 00:12:44,116 Two. 324 00:12:44,118 --> 00:12:46,018 The child's block in Cade Matthews' mouth 325 00:12:46,020 --> 00:12:48,720 was the number two-- as in second. 326 00:12:48,722 --> 00:12:49,988 Not first. 327 00:12:49,990 --> 00:12:51,623 Somewhere out there, there's another victim. 328 00:12:51,625 --> 00:12:53,025 Number one. 329 00:12:53,027 --> 00:12:54,993 A victim that hasn't been found yet. 330 00:12:54,995 --> 00:12:57,496 Guys, I hate to state the obvious, but, uh... 331 00:12:57,498 --> 00:13:00,465 three, four, five. 332 00:13:00,467 --> 00:13:03,335 Our target is a serial killer using ZoGos 333 00:13:03,337 --> 00:13:06,071 to find his prey. 334 00:13:06,085 --> 00:13:10,085 ♪ CSI Cyber 1x03 ♪ Killer En Route Original Air Date on March 18, 2015 335 00:13:10,086 --> 00:13:15,781 ♪ I know you've deceived me, now here's a surprise ♪ 336 00:13:17,351 --> 00:13:23,155 ♪ I know that you have, 'cause there's magic in my eyes ♪ 337 00:13:23,157 --> 00:13:27,326 ♪ I can see for miles and miles ♪ 338 00:13:27,328 --> 00:13:30,662 ♪ I can see for miles and miles ♪ 339 00:13:30,664 --> 00:13:35,334 ♪ I can see for miles and miles ♪ 340 00:13:35,336 --> 00:13:38,770 ♪ And miles... ♪ 341 00:13:38,772 --> 00:13:41,340 ♪ Oh, yeah. ♪ 342 00:13:41,364 --> 00:13:47,864 == sync, corrected by elderman == @elder_man 343 00:13:57,783 --> 00:13:59,183 So, what are we looking at here? 344 00:13:59,185 --> 00:14:01,385 Our killer's M.O. is very specific. 345 00:14:01,387 --> 00:14:02,620 Everything he does 346 00:14:02,622 --> 00:14:05,489 is calculated. It has a purpose. 347 00:14:05,491 --> 00:14:08,292 Detective, can we have access to all your missing person files? 348 00:14:08,294 --> 00:14:09,793 Any cases with even a hint 349 00:14:09,795 --> 00:14:11,528 of similarity to Cade Matthews' murder? 350 00:14:11,530 --> 00:14:13,697 All right. 351 00:14:15,901 --> 00:14:17,167 Check this out. 352 00:14:17,169 --> 00:14:19,370 Network diagnosis shows that a glitch occurred 353 00:14:19,372 --> 00:14:20,504 in the system three days ago. 354 00:14:20,506 --> 00:14:22,506 - 5:10 a.m.? - Yeah. 355 00:14:22,508 --> 00:14:24,775 That's the same glitch at the exact same time as this morning. 356 00:14:24,777 --> 00:14:25,709 - A pattern. - And that glitch 357 00:14:25,711 --> 00:14:26,944 created the perfect window 358 00:14:26,946 --> 00:14:29,480 of opportunity to kill his first victim 359 00:14:29,482 --> 00:14:31,548 three days ago. 360 00:14:31,550 --> 00:14:33,183 Why can't I pick you up? 361 00:14:33,185 --> 00:14:36,787 Francine, it will be easier if we go together. 362 00:14:36,789 --> 00:14:38,455 Fine. Okay? Fine. 363 00:14:38,457 --> 00:14:40,457 Meet me there, but don't be late. 364 00:14:40,459 --> 00:14:43,227 Because you're always late. 365 00:14:43,229 --> 00:14:46,163 And don't forget to bring a photo I.D. 366 00:14:46,165 --> 00:14:47,231 Everything okay? 367 00:14:47,233 --> 00:14:48,632 You seem flustered. 368 00:14:48,634 --> 00:14:49,733 I'm good. 369 00:14:49,735 --> 00:14:51,001 So... 370 00:14:51,003 --> 00:14:53,103 three days ago, 122 people in Boston 371 00:14:53,105 --> 00:14:54,505 ordered a ZoGo pickup 372 00:14:54,507 --> 00:14:56,740 between 5:10 and 5:45 a.m. 373 00:14:58,210 --> 00:15:01,345 Looks like the map glitch led to a lot of cancelations. 374 00:15:01,347 --> 00:15:03,847 And annoyed customers like myself. 375 00:15:03,849 --> 00:15:05,916 Yeah, but did anyone go missing? 376 00:15:05,918 --> 00:15:08,952 I cross-referenced all 122 clients 377 00:15:08,954 --> 00:15:11,288 with missing person reports. 378 00:15:11,290 --> 00:15:13,123 Nothing showed up. 379 00:15:13,125 --> 00:15:14,591 But still... 380 00:15:14,593 --> 00:15:16,093 it could be someone out there 381 00:15:16,095 --> 00:15:17,494 - they haven't found yet. - That's a sad thought. 382 00:15:17,496 --> 00:15:18,562 Happens all the time. 383 00:15:18,564 --> 00:15:19,930 People don't give a second thought 384 00:15:19,932 --> 00:15:21,632 to someone they haven't seen in a couple days or... 385 00:15:21,634 --> 00:15:23,600 friend or family who hasn't e-mailed back 386 00:15:23,602 --> 00:15:25,436 or texted. 387 00:15:27,640 --> 00:15:30,507 What's wrong, Krumitz? 388 00:15:30,509 --> 00:15:32,643 Stay focused, Raven. 389 00:15:34,146 --> 00:15:35,446 Avery believes there's another body out there. 390 00:15:35,448 --> 00:15:36,647 And we have to find it. 391 00:15:36,649 --> 00:15:37,748 Our target's first victim 392 00:15:37,750 --> 00:15:39,083 would've ordered a ZoGo. 393 00:15:39,085 --> 00:15:41,518 Starting there, let's just narrow down our list. 394 00:15:41,520 --> 00:15:43,721 Using the ZoGo passenger database, we can eliminate 395 00:15:43,723 --> 00:15:45,322 anyone in Boston who ordered a ZoGo pickup 396 00:15:45,324 --> 00:15:47,791 after the glitch was fixed three days ago. 397 00:15:47,793 --> 00:15:48,959 I get it. 398 00:15:48,961 --> 00:15:51,261 We're eliminating people who are still alive. 399 00:15:51,263 --> 00:15:52,563 So that means we can eliminate 400 00:15:52,565 --> 00:15:55,466 anyone who posted on social media in the last few days. 401 00:15:55,468 --> 00:15:56,734 Uh-huh. 402 00:15:59,839 --> 00:16:01,972 That leaves us with 27 people. 403 00:16:01,974 --> 00:16:03,107 That's not bad. 404 00:16:03,109 --> 00:16:04,742 All we got to do is call each one... Wait. 405 00:16:04,744 --> 00:16:07,311 ZoGo patrons' credit cards are linked on the accounts. 406 00:16:07,313 --> 00:16:09,713 They may not have ordered a ZoGo, but 407 00:16:09,715 --> 00:16:12,282 if there was recent activity on their cards, that would suggest 408 00:16:12,284 --> 00:16:13,884 - that they're alive and well. - Nice! 409 00:16:13,886 --> 00:16:16,553 Check that. 410 00:16:16,555 --> 00:16:17,755 Melissa Drake. 411 00:16:17,757 --> 00:16:20,357 And that's her cell number. 412 00:16:20,359 --> 00:16:22,025 She ordered a ZoGo at the same time 413 00:16:22,027 --> 00:16:24,528 Cade Matthews did-- 5:17 a.m. (line ringing) 414 00:16:24,530 --> 00:16:26,864 She's not answering the cell phone attached on her profile. 415 00:16:26,866 --> 00:16:30,200 Melissa Drake. 416 00:16:30,202 --> 00:16:32,469 Where are you? 417 00:16:32,471 --> 00:16:34,505 Melissa was picked up at 5:17 a.m. 418 00:16:34,507 --> 00:16:37,975 from her home at 932 North Croft Avenue, 419 00:16:37,977 --> 00:16:39,443 Bay Village. 420 00:16:39,445 --> 00:16:40,844 But no one reported her missing. 421 00:16:40,846 --> 00:16:42,279 Her family and friends think she's out of the country 422 00:16:42,281 --> 00:16:44,248 on vacation; they didn't expect to hear from her. 423 00:16:44,250 --> 00:16:45,983 She ordered a car to the airport, was a no-show 424 00:16:45,985 --> 00:16:47,317 - at the hotel. - So, more than likely, 425 00:16:47,319 --> 00:16:49,386 Melissa never even made it out of Boston. 426 00:16:49,388 --> 00:16:51,422 We have to find her so we can establish a link 427 00:16:51,424 --> 00:16:52,424 between our two victims. 428 00:16:52,425 --> 00:16:53,957 God, can I just stay optimistic here, 429 00:16:53,959 --> 00:16:56,760 and hope she's in an airport bar somewhere? 430 00:16:56,762 --> 00:16:58,729 Based on the M.O. of Cade Matthews' killer, 431 00:16:58,731 --> 00:16:59,963 Cade was picked up 432 00:16:59,965 --> 00:17:02,766 at 5:17 a.m. like Melissa Drake. 433 00:17:02,768 --> 00:17:04,268 And he was killed in the car within ten minutes. 434 00:17:04,270 --> 00:17:06,142 Now, most killers don't want to drive around 435 00:17:06,143 --> 00:17:08,558 for longer than 20 minutes with a dead body in their car. 436 00:17:08,559 --> 00:17:10,073 And he'd avoid bridges and tunnels because 437 00:17:10,075 --> 00:17:12,209 traffic jams and accidents prevent an easy escape. 438 00:17:12,211 --> 00:17:14,244 That gives us a search area of approximately 439 00:17:14,246 --> 00:17:15,446 two miles in any direction. 440 00:17:15,448 --> 00:17:16,647 If the body was dumped 441 00:17:16,649 --> 00:17:18,949 three days ago and we haven't found it yet, 442 00:17:18,951 --> 00:17:21,485 it means it's off the beaten path. 443 00:17:23,389 --> 00:17:24,822 (sirens wailing) 444 00:17:24,824 --> 00:17:27,424 (tires screech) 445 00:17:30,129 --> 00:17:32,596 (indistinct radio transmission) 446 00:17:32,598 --> 00:17:34,231 Hope you don't mind me asking, 447 00:17:34,233 --> 00:17:36,233 but how'd you know there was a body down here? 448 00:17:36,235 --> 00:17:39,436 It's, uh, it's kind of what we do. 449 00:17:39,438 --> 00:17:40,938 Melissa Drake. 450 00:17:46,412 --> 00:17:49,012 All right, ligature marks around her neck. 451 00:17:49,014 --> 00:17:52,249 Petechial hemorrhage in her eyes. 452 00:17:52,251 --> 00:17:53,851 Both Cade and Melissa were strangled. 453 00:18:08,133 --> 00:18:09,666 Number one. 454 00:18:12,304 --> 00:18:13,403 You got something? 455 00:18:13,405 --> 00:18:15,005 Sure did. 456 00:18:15,007 --> 00:18:17,107 Every intrusion leaves digital dust, right? 457 00:18:17,109 --> 00:18:19,710 Yeah, like fingerprints at a crime scene. 458 00:18:19,712 --> 00:18:21,378 Just takes time to find it. 459 00:18:21,380 --> 00:18:23,080 I figured if I could uncover how the target got 460 00:18:23,082 --> 00:18:24,715 into the ZoGo network, I can find 461 00:18:24,717 --> 00:18:26,383 - the dust to track him. - Right. 462 00:18:26,385 --> 00:18:28,185 So I accessed the journaling system on the server 463 00:18:28,187 --> 00:18:30,153 and scanned all the inbound e-mails. 464 00:18:30,155 --> 00:18:33,824 And I did find one that was sent to every employee. 465 00:18:33,826 --> 00:18:35,325 “Free tax review. 466 00:18:35,327 --> 00:18:36,493 Beat the deadline.” 467 00:18:36,495 --> 00:18:39,663 He got in through a simple phishing attack? 468 00:18:39,665 --> 00:18:42,533 He knew somebody'd open the file attached to that e-mail. 469 00:18:42,535 --> 00:18:44,101 NELSON: It was the secretary. 470 00:18:44,103 --> 00:18:46,670 As soon as she opened it up-- blam! 471 00:18:46,672 --> 00:18:48,038 Malware onto the ZoGo network. 472 00:18:48,040 --> 00:18:49,273 SIFTER: So, our target sent out an e-mail 473 00:18:49,275 --> 00:18:51,275 to the ZoGo employees, it spread malware, 474 00:18:51,277 --> 00:18:53,143 infected the entire system 475 00:18:53,145 --> 00:18:54,912 and allowed the target to pose as a driver 476 00:18:54,914 --> 00:18:56,813 and commit two murders? 477 00:18:56,815 --> 00:18:57,881 - Yeah. - All right. 478 00:18:57,883 --> 00:18:59,016 Get Krumitz and Raven to trace 479 00:18:59,018 --> 00:19:00,784 the origin of that phishing e-mail. 480 00:19:00,786 --> 00:19:01,952 Okay, I'm on it. 481 00:19:01,954 --> 00:19:03,787 I checked the Internet headers 482 00:19:03,789 --> 00:19:04,955 on the e-mail with the malware, 483 00:19:04,957 --> 00:19:07,424 and found an IP address. 484 00:19:07,426 --> 00:19:09,493 Wait, whoever e-mailed this malware 485 00:19:09,495 --> 00:19:11,094 didn't bother to scrub their headers? 486 00:19:11,096 --> 00:19:12,663 Apparently not. 487 00:19:12,665 --> 00:19:13,897 Well, it doesn't make sense. 488 00:19:13,899 --> 00:19:15,332 Who's tech savvy enough to inject malware 489 00:19:15,334 --> 00:19:16,867 into the ZoGo server...? 490 00:19:16,869 --> 00:19:18,135 Krumitz, we've got a physical address. 491 00:19:18,137 --> 00:19:20,704 - Just call Avery and Elijah. - Right. 492 00:19:33,452 --> 00:19:36,119 Looking for Patrick Murphy. 493 00:19:51,437 --> 00:19:53,937 MAN: Hey, Murphy, I want to talk to you about... 494 00:19:55,140 --> 00:19:57,207 We got a runner! 495 00:19:57,209 --> 00:20:00,243 OFFICER: Police! Get down on the ground! 496 00:20:00,245 --> 00:20:03,246 Get down! Get down! 497 00:20:03,248 --> 00:20:05,415 Freeze! 498 00:20:06,418 --> 00:20:08,418 (grunting) 499 00:20:10,522 --> 00:20:12,122 Patrick Murphy! 500 00:20:12,124 --> 00:20:14,358 Nice to meet you. 501 00:20:14,360 --> 00:20:16,760 You're under arrest. 502 00:20:24,620 --> 00:20:26,887 MURPHY: Just because I drove a black car doesn't mean I'm guilty. 503 00:20:26,889 --> 00:20:27,955 MUNDO: You're right, it doesn't. 504 00:20:27,957 --> 00:20:29,156 What makes you guilty is your 505 00:20:29,158 --> 00:20:30,991 I.P. address was used to send a phishing e-mail. 506 00:20:30,993 --> 00:20:33,293 Your motive is your cab company's been 507 00:20:33,295 --> 00:20:35,062 hemorrhaging clients to ZoGo. 508 00:20:35,064 --> 00:20:36,964 We found two bodies in your area of operation. 509 00:20:36,966 --> 00:20:38,765 You're looking at a double homicide. 510 00:20:38,767 --> 00:20:40,033 “A double homicide”?! (stammers) 511 00:20:40,035 --> 00:20:41,168 I didn't kill anybody. 512 00:20:41,170 --> 00:20:42,903 I sent e-mails into ZoGo. 513 00:20:42,905 --> 00:20:45,239 Like a fake coupon to piss off their customers. 514 00:20:45,241 --> 00:20:47,441 Deliver a little business back to me. Yeah. 515 00:20:47,443 --> 00:20:49,343 I didn't even send it-- I had to hire a guy to send it for me! 516 00:20:49,345 --> 00:20:50,878 You've been vandalizing ZoGo-- 517 00:20:50,880 --> 00:20:53,013 slashing tires, harassing drivers 518 00:20:53,015 --> 00:20:55,115 for the past six months. 519 00:20:55,117 --> 00:20:56,183 I hate ZoGo, okay? 520 00:20:56,185 --> 00:20:57,618 I want to drive them out of Boston. 521 00:20:57,620 --> 00:20:59,686 But that doesn't mean I want to kill anybody over it. 522 00:20:59,688 --> 00:21:02,055 I sank my entire life savings into this taxi company. 523 00:21:02,057 --> 00:21:04,892 And then these punks from San Francisco create an app. 524 00:21:04,894 --> 00:21:07,060 Suddenly, anybody off the street can be a driver. 525 00:21:07,062 --> 00:21:09,062 How am I supposed to feed my family, huh? 526 00:21:09,064 --> 00:21:09,997 You tell me that. 527 00:21:09,999 --> 00:21:11,865 How old's your daughter? 528 00:21:11,867 --> 00:21:13,133 15? 16? 529 00:21:13,135 --> 00:21:15,602 Yeah, 15. 530 00:21:18,707 --> 00:21:20,807 RYAN: Got glitter paint on his cuticles. 531 00:21:20,809 --> 00:21:22,409 Lots of arts and crafts. 532 00:21:23,245 --> 00:21:25,612 Your daughter's a cheerleader? 533 00:21:25,614 --> 00:21:27,681 Look at his license plate frame. 534 00:21:28,417 --> 00:21:30,117 “Go Spartans”" 535 00:21:30,119 --> 00:21:32,953 Now, tell me, did you keep any of her childhood toy blocks? 536 00:21:32,955 --> 00:21:34,788 Toy blocks? 537 00:21:38,561 --> 00:21:40,494 He's not our guy. 538 00:21:40,496 --> 00:21:42,563 NELSON: We've got nothing so far. 539 00:21:42,565 --> 00:21:43,864 Taxi driver was a dead end. 540 00:21:43,866 --> 00:21:45,566 Coupon had nothing to do with the murders. 541 00:21:45,568 --> 00:21:46,733 Back to square one. 542 00:21:46,735 --> 00:21:48,001 Anything on your side, Krummy? 543 00:21:48,003 --> 00:21:49,436 Checked out ZoGo's firewall. 544 00:21:49,438 --> 00:21:52,839 It stopped 15 separate attacks in the last two weeks. 545 00:21:55,010 --> 00:21:56,843 But here's the odd thing. 546 00:21:56,845 --> 00:21:58,745 The attacks stopped three days ago. 547 00:21:58,747 --> 00:22:01,415 Wow, that's when ZoGo had its first glitch. 548 00:22:01,417 --> 00:22:03,083 That's when our first victim died. 549 00:22:03,085 --> 00:22:04,751 Right, why would the attacks stop, though? 550 00:22:04,753 --> 00:22:06,820 I mean, did the target just give up? 551 00:22:06,822 --> 00:22:09,156 No, since he couldn't penetrate the ZoGo firewall, 552 00:22:09,158 --> 00:22:11,491 he got into the system, just not remotely. 553 00:22:11,493 --> 00:22:13,527 He infiltrated them from within. 554 00:22:13,529 --> 00:22:14,828 A Trojan horse. 555 00:22:14,830 --> 00:22:17,197 Not like the virus, like the Trojan War. 556 00:22:17,199 --> 00:22:18,398 He infiltrated the HQ. 557 00:22:18,400 --> 00:22:20,334 Yeah, that's not easy to do. 558 00:22:20,336 --> 00:22:21,435 Yeah, but it's also not impossible. 559 00:22:21,437 --> 00:22:22,936 There's a few ways you can do it. 560 00:22:22,938 --> 00:22:24,037 My first approach-- 561 00:22:24,039 --> 00:22:26,373 tailgate in with the returning lunch crowd, 562 00:22:26,375 --> 00:22:28,008 take the flash drive with the malware on it, 563 00:22:28,010 --> 00:22:29,643 place it somewhere in the lobby. 564 00:22:32,848 --> 00:22:34,448 Someone's gonna pick it up, plug it in, 565 00:22:34,450 --> 00:22:35,849 to see whose it is. 566 00:22:35,851 --> 00:22:37,084 Option two-- 567 00:22:37,086 --> 00:22:39,119 walk in with the evil twin router, 568 00:22:39,121 --> 00:22:40,821 give it right to the receptionist at the front desk. 569 00:22:40,823 --> 00:22:42,155 Uh, hey, wait a minute. 570 00:22:42,157 --> 00:22:43,590 There's no Josh Hayes here. 571 00:22:43,592 --> 00:22:44,524 Uh, must be new. 572 00:22:44,526 --> 00:22:46,093 Just, uh, check the system again. 573 00:22:46,095 --> 00:22:47,561 Now your evil twin router's gonna pose 574 00:22:47,563 --> 00:22:48,962 like a trusted network, 575 00:22:48,964 --> 00:22:51,465 tricking all the employee's devices into connecting to it, 576 00:22:51,467 --> 00:22:53,333 and then eavesdropping on their traffic. 577 00:22:53,335 --> 00:22:54,835 Yeah, okay. 578 00:22:54,837 --> 00:22:56,136 Mm-hmm. 579 00:22:56,138 --> 00:22:57,671 I'll buy that. 580 00:22:58,741 --> 00:23:00,507 MUNDO: We're looking for an evil twin router. 581 00:23:00,509 --> 00:23:02,542 It's a wireless device that doesn't belong. 582 00:23:02,544 --> 00:23:03,810 Yes, I know what it is. 583 00:23:03,812 --> 00:23:05,078 I run a tech startup. 584 00:23:05,080 --> 00:23:07,114 Great-- then let us run this investigation. 585 00:23:07,116 --> 00:23:08,882 Got it. 586 00:23:09,752 --> 00:23:11,251 - You see this router here? - Yeah. 587 00:23:11,253 --> 00:23:13,854 It's different than all the others on ZoGo's network. 588 00:23:13,856 --> 00:23:16,289 Confirmation our target is using an evil twin router. 589 00:23:16,291 --> 00:23:18,291 Yeah, and according to ZoGo's employee records, 590 00:23:18,293 --> 00:23:19,960 five employees are on vacation. 591 00:23:19,962 --> 00:23:22,462 Any one of them could have received the package. 592 00:23:22,464 --> 00:23:24,231 It would still be on their desk. 593 00:23:34,343 --> 00:23:36,877 Susan Waters? 594 00:23:36,879 --> 00:23:38,378 Yep. 595 00:23:44,286 --> 00:23:46,019 Wow. 596 00:23:46,021 --> 00:23:48,021 That's nice work. 597 00:23:48,023 --> 00:23:49,790 MUNDO: No, no, hold on-- you plug into that thing, 598 00:23:49,792 --> 00:23:52,025 the target's gonna know we're on to him-- he could flee. 599 00:23:52,027 --> 00:23:54,628 Yeah, and if we don't plug in, we can't run a diagnostics on it 600 00:23:54,630 --> 00:23:56,630 and get an I.P. address for our target. 601 00:23:56,632 --> 00:23:57,964 All right. 602 00:23:57,966 --> 00:23:59,399 - Go for it. - All right. 603 00:24:12,247 --> 00:24:13,146 (pounding on door) 604 00:24:13,148 --> 00:24:14,781 MUNDO: Richard Davis, FBI! 605 00:24:36,438 --> 00:24:39,239 Clear. MAN: South bathroom is clear! 606 00:24:40,375 --> 00:24:41,708 MAN 2: Back all clear! 607 00:24:41,710 --> 00:24:43,176 MAN 3: Side all clear! 608 00:25:02,364 --> 00:25:03,697 Hey, Avery. 609 00:25:03,699 --> 00:25:05,899 You're gonna want to see this. 610 00:25:10,472 --> 00:25:12,706 RYAN: Michael. 611 00:25:16,545 --> 00:25:18,278 Sweet boy. 612 00:25:18,280 --> 00:25:20,447 “Hit-and-run kills unidentified seven-year-old boy.” 613 00:25:20,449 --> 00:25:22,582 RYAN: Let me guess, a ZoGo driver. 614 00:25:22,584 --> 00:25:23,817 That was six months ago. 615 00:25:23,819 --> 00:25:26,119 At 5:17 a.m. 616 00:25:26,121 --> 00:25:28,121 Looks like the driver fled the country, 617 00:25:28,123 --> 00:25:30,090 avoided charges. 618 00:25:30,092 --> 00:25:32,259 And the police dismissed the case against ZoGo. 619 00:25:32,261 --> 00:25:35,662 Makes for one very pissed off father who snapped. 620 00:25:35,664 --> 00:25:37,964 Oh, boy. 621 00:25:37,966 --> 00:25:40,500 Four, five, six, seven. 622 00:25:40,502 --> 00:25:42,235 The one and two children's blocks were 623 00:25:42,237 --> 00:25:43,403 our first two victims. 624 00:25:43,405 --> 00:25:45,405 Three is missing. 625 00:25:45,407 --> 00:25:47,607 We might already be too late. 626 00:26:13,035 --> 00:26:15,035 I knew you'd be late. 627 00:26:15,037 --> 00:26:16,570 Hey, I'm actually right on time. 628 00:26:16,572 --> 00:26:18,572 You always tell me to be somewhere 15 minutes 629 00:26:18,574 --> 00:26:20,040 before I actually have to be there. 630 00:26:20,042 --> 00:26:21,642 Yeah, because you're always late. 631 00:26:24,914 --> 00:26:28,916 Look, I just came here to tell you, 632 00:26:28,918 --> 00:26:31,285 I can't do this, Daniel. 633 00:26:32,788 --> 00:26:33,788 What? 634 00:26:33,789 --> 00:26:35,556 It makes me feel bad. 635 00:26:35,558 --> 00:26:37,591 All the horrible memories start coming back. 636 00:26:37,593 --> 00:26:38,759 I get bad dreams. 637 00:26:38,761 --> 00:26:40,327 Just... I'm done. 638 00:26:40,329 --> 00:26:41,762 - Francine, you have to do it. - Why? 639 00:26:41,764 --> 00:26:43,564 You're gonna make me go in there alone? 640 00:26:43,566 --> 00:26:46,266 You don't have to do it, either, okay? 641 00:26:46,268 --> 00:26:48,302 It's been 17 years. 642 00:26:55,010 --> 00:26:57,744 Look, Francine, you're already here. 643 00:26:57,746 --> 00:27:00,247 Just do it-- it'll be over before you know it. 644 00:27:00,249 --> 00:27:01,915 Are you even listening to me? 645 00:27:01,917 --> 00:27:04,284 I don't want to do this. 646 00:27:04,286 --> 00:27:07,254 I miss them too much. 647 00:27:07,256 --> 00:27:10,757 It hurts too much to remember. 648 00:27:10,759 --> 00:27:12,426 Look, I know this sounds real horrible, 649 00:27:12,428 --> 00:27:16,430 but I want to forget what happened, Daniel. 650 00:27:20,102 --> 00:27:22,803 I'll never forget what happened. 651 00:27:40,322 --> 00:27:43,790 ♪ ♪ 652 00:28:01,143 --> 00:28:03,610 Raven, what did you get at the DMV? 653 00:28:03,612 --> 00:28:07,514 A black 2013 Camry registered to Richard Davis. 654 00:28:07,516 --> 00:28:10,817 Massachusetts license-- Five-Mary-Victor-Nora-one-one. 655 00:28:10,819 --> 00:28:12,853 Does that car have a navigation system? 656 00:28:12,855 --> 00:28:14,221 Checking. 657 00:28:14,223 --> 00:28:15,455 Yes. 658 00:28:15,457 --> 00:28:16,990 It has a satellite GPS system. 659 00:28:16,992 --> 00:28:19,259 All right, run the GPS-- see if you can get a location. 660 00:28:19,261 --> 00:28:20,694 I've got his car. 661 00:28:20,696 --> 00:28:24,564 Looks like it's parked at 634 Elm Street in Charlestown. 662 00:28:24,566 --> 00:28:26,066 Sending the map to you right now. 663 00:28:26,068 --> 00:28:27,068 Attagirl. 664 00:28:27,069 --> 00:28:28,935 Elijah, I have a job for you! 665 00:28:32,074 --> 00:28:34,441 Davis' car is parked one block east of us. 666 00:28:34,443 --> 00:28:35,409 Take SWAT. 667 00:28:35,411 --> 00:28:37,010 On my way. 668 00:28:50,726 --> 00:28:52,959 ♪ ♪ 669 00:29:07,643 --> 00:29:09,910 WOMAN: Court is in session, please be seated. 670 00:29:11,613 --> 00:29:13,146 (gavel slams) 671 00:29:21,123 --> 00:29:23,757 I was ten years old 672 00:29:23,759 --> 00:29:28,395 when Taylor Pettis shot and killed my parents 673 00:29:28,397 --> 00:29:30,997 in that convenience store that night. 674 00:29:32,801 --> 00:29:37,437 I was... ten years old when... 675 00:29:37,439 --> 00:29:40,707 I broke the news to my grandmother 676 00:29:40,709 --> 00:29:44,044 that her only son had died. 677 00:29:44,046 --> 00:29:48,382 I was just a kid. 678 00:29:48,384 --> 00:29:50,717 Today I'm 28. 679 00:29:50,719 --> 00:29:53,987 And I thought 680 00:29:53,989 --> 00:29:56,923 that by now, I'd be capable of forgiveness. 681 00:29:58,694 --> 00:30:00,927 That maturity would lessen the pain. 682 00:30:03,766 --> 00:30:05,599 But I was wrong. 683 00:30:07,403 --> 00:30:09,236 I still miss my mom and dad. 684 00:30:09,238 --> 00:30:13,039 They never got to see what I became. 685 00:30:13,041 --> 00:30:15,208 I never got to make them proud. 686 00:30:20,215 --> 00:30:22,449 That man destroyed my life. 687 00:30:26,121 --> 00:30:28,422 He not only took my parents away, 688 00:30:28,424 --> 00:30:31,458 but because of him, I lost my best friend-- 689 00:30:31,460 --> 00:30:33,693 my sister, Francine. 690 00:30:36,532 --> 00:30:39,232 We don't laugh together anymore. 691 00:30:39,234 --> 00:30:41,535 But why would we? 692 00:30:41,537 --> 00:30:44,404 He shattered our childhood. 693 00:30:45,774 --> 00:30:47,974 He crushed our souls. 694 00:30:55,384 --> 00:30:58,652 And for that, Taylor Pettis should never be freed. 695 00:31:07,095 --> 00:31:08,762 MUNDO: Richard Davis left us a picture 696 00:31:08,764 --> 00:31:10,730 of a man's hand and a toy block. 697 00:31:10,732 --> 00:31:12,199 Is the man dead? 698 00:31:12,201 --> 00:31:13,333 Can't tell. 699 00:31:13,335 --> 00:31:14,668 Richard Davis is toying with us. 700 00:31:14,670 --> 00:31:16,369 The placement of the block doesn't fit the pattern. 701 00:31:16,371 --> 00:31:17,571 He hasn't killed yet. 702 00:31:17,573 --> 00:31:19,539 Something in him wants us to stop him. 703 00:31:19,541 --> 00:31:20,640 Well, he got kicked off of ZoGo. 704 00:31:20,642 --> 00:31:22,008 He'll have to create a new account, right? 705 00:31:22,010 --> 00:31:23,710 There's no way he can beat the intrusion detection system 706 00:31:23,712 --> 00:31:25,712 and a layer-three firewall. 707 00:31:25,714 --> 00:31:27,681 And no time to set up a new evil twin router. 708 00:31:27,683 --> 00:31:29,349 Well, he knows we're on to him. 709 00:31:29,351 --> 00:31:30,584 Well, he's not done yet. 710 00:31:30,586 --> 00:31:31,952 His message is clear-- 711 00:31:31,954 --> 00:31:34,354 he will kill someone else at 5:17. 712 00:31:34,356 --> 00:31:36,022 But he can't pick up any passengers 713 00:31:36,024 --> 00:31:38,024 unless he's a registered driver in their system. 714 00:31:38,026 --> 00:31:40,393 No, he doesn't have to be a registered driver-- 715 00:31:40,395 --> 00:31:42,762 he could open a new account. 716 00:31:42,764 --> 00:31:44,331 As a passenger. 717 00:32:06,989 --> 00:32:09,256 ♪ ♪ 718 00:32:21,802 --> 00:32:23,769 It's 5:00 a.m. 719 00:32:23,771 --> 00:32:25,471 We have less than half an hour 720 00:32:25,473 --> 00:32:26,538 to get Richard Davis in cuffs 721 00:32:26,540 --> 00:32:27,740 before he attempts another killing 722 00:32:27,742 --> 00:32:29,341 at 5:17 a.m. 723 00:32:29,343 --> 00:32:31,343 Krumitz is working on narrowing our target's location. 724 00:32:31,345 --> 00:32:32,678 Let's roll. 725 00:32:36,918 --> 00:32:39,652 Okay, we need to narrow this down to one rider and fast. 726 00:32:39,654 --> 00:32:40,786 What do we know? 727 00:32:40,788 --> 00:32:42,421 We blew up the target's ZoGo profile. 728 00:32:42,423 --> 00:32:43,956 If he's taking a ride right now, 729 00:32:43,958 --> 00:32:45,691 he's doing it with a new account. 730 00:32:45,693 --> 00:32:47,393 Okay, so we're looking for an active passenger 731 00:32:47,395 --> 00:32:49,595 traveling on a newly created account. 732 00:32:50,698 --> 00:32:53,098 Leaves 37. 733 00:32:53,100 --> 00:32:55,501 But you can't get a ride without an active credit card. 734 00:32:58,072 --> 00:32:59,505 And he's not using his own. 735 00:32:59,507 --> 00:33:01,173 Prepaid credit card. 736 00:33:01,175 --> 00:33:03,676 You can pick one up in any drugstore, no questions asked. 737 00:33:04,979 --> 00:33:07,947 We're still looking at 19 possibilities. 738 00:33:07,949 --> 00:33:10,082 Richard Davis ditched his phone in his car. 739 00:33:10,084 --> 00:33:11,817 If he ordered a ZoGo, 740 00:33:11,819 --> 00:33:14,353 he would need a phone with the app loaded onto it. 741 00:33:14,355 --> 00:33:15,754 He needed a new cell phone. 742 00:33:15,756 --> 00:33:17,890 One activated in the last three hours. 743 00:33:19,794 --> 00:33:20,993 Yes. 744 00:33:20,995 --> 00:33:23,529 Now let's see what ZoGo driver picked him up. 745 00:33:24,765 --> 00:33:27,399 We can track him using the driver's cell's GPS. 746 00:33:27,401 --> 00:33:30,436 RAMIREZ: I'll link everyone to this map. 747 00:33:30,438 --> 00:33:32,271 Richard Davis is in a ZoGo 748 00:33:32,273 --> 00:33:33,906 six blocks south of us heading west. 749 00:33:33,908 --> 00:33:36,141 (tires squealing) Hang on. 750 00:33:40,948 --> 00:33:42,114 The ZoGo's still en route. 751 00:33:42,116 --> 00:33:43,282 Our killer hasn't pounced yet. 752 00:33:43,284 --> 00:33:45,150 All right, let's get there before he does. 753 00:33:50,424 --> 00:33:52,491 Nelson, do you have imaging coordinates? 754 00:33:52,493 --> 00:33:54,360 Got them. Backup's on the move. 755 00:33:54,362 --> 00:33:55,494 Wait, wait, suspect just turned. 756 00:33:55,496 --> 00:33:57,329 He's heading south toward Boston Common. 757 00:34:01,335 --> 00:34:03,402 You sure this is the right way, man? 758 00:34:03,404 --> 00:34:05,637 Just keep going. 759 00:34:12,947 --> 00:34:14,980 Now how about you throw that cell phone out the window? 760 00:34:14,982 --> 00:34:17,182 I can't have you calling anybody. 761 00:34:28,329 --> 00:34:30,262 We just lost the signal. 762 00:34:30,264 --> 00:34:31,830 Richard Davis must be on to us. 763 00:34:31,832 --> 00:34:34,033 We need to find a way to track him. 764 00:34:34,035 --> 00:34:35,367 Nelson, find a cell catcher. 765 00:34:35,369 --> 00:34:37,369 It'll grab any cell signal in a one-mile radius. 766 00:34:37,371 --> 00:34:39,104 Okay, but didn't the driver's cell phone die? 767 00:34:39,106 --> 00:34:40,672 We're not tracking the driver's cell. 768 00:34:40,674 --> 00:34:42,808 We're tracking Richard Davis' burner cell. 769 00:34:42,810 --> 00:34:45,878 We'll track the IMEI number and get the current coordinates. 770 00:34:45,880 --> 00:34:47,379 Work fast. If he gets out of your range, 771 00:34:47,381 --> 00:34:48,514 we won't get there in time. 772 00:34:48,516 --> 00:34:51,483 (horn blaring) 773 00:34:51,485 --> 00:34:53,619 Faster. You need to go faster. 774 00:34:53,621 --> 00:34:55,154 That'll just bring attention to us, man. 775 00:34:55,156 --> 00:34:57,122 I didn't ask you. Now floor it. 776 00:35:05,566 --> 00:35:07,132 Cell catcher is up and running. 777 00:35:07,134 --> 00:35:08,400 It shouldn't take long to get a hit. 778 00:35:08,402 --> 00:35:10,636 As long as our killer has his cell phone on. 779 00:35:10,638 --> 00:35:11,904 Got it. Yes. 780 00:35:11,906 --> 00:35:13,539 Target's moving south through downtown and fast. 781 00:35:13,541 --> 00:35:15,107 He's almost out of range. 782 00:35:15,109 --> 00:35:16,742 If he gets any further ahead, he's gone. 783 00:35:16,744 --> 00:35:18,210 Sifter, we need to slow him down. 784 00:35:18,212 --> 00:35:20,446 Avery, I know what you're asking, and it's complicated. 785 00:35:20,448 --> 00:35:23,649 We're gonna have to wake up a magistrate judge on duty 786 00:35:23,651 --> 00:35:25,250 and get a title three emergency. 787 00:35:25,252 --> 00:35:27,052 We don't have time for that. 788 00:35:28,089 --> 00:35:30,322 Oh, screw it. I'll apologize later. 789 00:35:30,324 --> 00:35:31,457 What's a title three? 790 00:35:31,459 --> 00:35:33,258 We're gonna change a few traffic lights. 791 00:35:33,260 --> 00:35:34,760 All right, I'm gonna call Raven. 792 00:35:34,762 --> 00:35:36,795 Tell Raven we're headed north towards Beacon Hill. 793 00:35:36,797 --> 00:35:38,697 KRUMITZ: Careful, Raven. 794 00:35:38,699 --> 00:35:39,998 Don't trigger the CMU. 795 00:35:40,000 --> 00:35:41,400 I know, I got it. 796 00:35:48,676 --> 00:35:50,309 Just like riding a bike. 797 00:35:50,311 --> 00:35:52,644 I hacked into the Boston SCADA system, 798 00:35:52,646 --> 00:35:54,413 and we now have complete control 799 00:35:54,415 --> 00:35:57,249 of every traffic light in the greater metropolitan area. 800 00:35:57,251 --> 00:35:58,917 That's an awful lot of power. 801 00:35:58,919 --> 00:36:00,519 Stay on task, Raven. 802 00:36:00,521 --> 00:36:02,454 Not the time to slip your black hat back on. 803 00:36:02,456 --> 00:36:03,689 I know, I know. 804 00:36:03,691 --> 00:36:04,823 Let's throw our target some roadblocks, 805 00:36:04,825 --> 00:36:06,225 show him where we want him to go. 806 00:36:06,227 --> 00:36:07,292 Nothing but red? 807 00:36:07,294 --> 00:36:09,228 No, no, not red. Green. 808 00:36:09,230 --> 00:36:11,563 Green causes the most chaos. 809 00:36:13,434 --> 00:36:15,300 (horns blaring) 810 00:36:17,037 --> 00:36:18,804 Looks like he got caught in traffic. 811 00:36:18,806 --> 00:36:20,272 Thank you, Raven. 812 00:36:21,575 --> 00:36:23,909 (horns continue) 813 00:36:23,911 --> 00:36:26,145 (sirens approaching) What do you want me to do, man? 814 00:36:33,087 --> 00:36:34,586 He's caught in the same gridlock we are. 815 00:36:34,588 --> 00:36:35,621 He can't be that far ahead. 816 00:36:35,623 --> 00:36:36,889 Let's go. 817 00:36:36,891 --> 00:36:38,390 (horns continue) 818 00:36:43,931 --> 00:36:46,098 (drivers shouting indistinctly) 819 00:37:12,159 --> 00:37:14,159 MAN: Get back in your car! 820 00:37:14,161 --> 00:37:15,827 Stay in your cars! 821 00:37:18,132 --> 00:37:20,299 (gunshots, screaming) 822 00:37:21,502 --> 00:37:24,369 FBI! Stop! 823 00:37:27,308 --> 00:37:29,174 Get down! Get down! 824 00:37:29,176 --> 00:37:31,276 (gunshot) Stay in your vehicles. 825 00:37:35,115 --> 00:37:36,615 (gunshots, screaming) 826 00:37:45,292 --> 00:37:46,558 (tires squealing) 827 00:37:46,560 --> 00:37:47,693 RYAN: Richard Davis! 828 00:37:47,695 --> 00:37:49,528 Freeze! 829 00:38:07,047 --> 00:38:09,314 MUNDO: FBI! Drop the gun! 830 00:38:17,825 --> 00:38:19,591 Richard, you don't have to do this. 831 00:38:26,233 --> 00:38:28,634 (indistinct radio transmission) 832 00:38:34,575 --> 00:38:36,608 They didn't care about my son. 833 00:38:36,610 --> 00:38:38,977 They have to pay for that. 834 00:38:39,880 --> 00:38:42,047 What happened to your son was tragic. 835 00:38:42,049 --> 00:38:44,016 Horrible. 836 00:38:44,018 --> 00:38:46,652 But killing random innocent people is no solution. 837 00:38:46,654 --> 00:38:50,155 He was my only child. 838 00:38:50,157 --> 00:38:52,824 Someone has to pay. 839 00:39:16,884 --> 00:39:19,251 I'm coming out. 840 00:39:24,124 --> 00:39:27,359 Richard. 841 00:39:27,361 --> 00:39:29,995 I understand exactly what you're going through. 842 00:39:32,266 --> 00:39:35,934 That ache that you feel like will never go away. 843 00:39:35,936 --> 00:39:38,603 I saw a picture of Michael. 844 00:39:38,605 --> 00:39:40,472 Richard. 845 00:39:43,477 --> 00:39:45,944 Think about how sweet he was. 846 00:39:48,182 --> 00:39:49,981 How he would never 847 00:39:49,983 --> 00:39:52,584 want to hurt anybody. 848 00:40:16,877 --> 00:40:18,343 I'm sorry. 849 00:40:18,345 --> 00:40:19,544 Sorry. 850 00:40:19,546 --> 00:40:20,645 I'm so sorry. 851 00:40:20,647 --> 00:40:22,481 I'm so sorry. 852 00:40:46,173 --> 00:40:48,273 Hey, we did good in Boston. 853 00:40:48,275 --> 00:40:49,541 Hey. 854 00:40:49,543 --> 00:40:51,076 My SWAT vest still fits. 855 00:40:51,078 --> 00:40:52,811 Next time I'm getting my hands dirty. 856 00:40:52,813 --> 00:40:55,013 (chuckles) 857 00:40:56,216 --> 00:40:57,849 What? 858 00:40:57,851 --> 00:41:01,219 I just... (sighs) 859 00:41:01,221 --> 00:41:02,421 I don't know, I mean, 860 00:41:02,423 --> 00:41:04,055 if anything ever happened to Michelle, 861 00:41:04,057 --> 00:41:06,558 like if somebody hurt her, 862 00:41:06,560 --> 00:41:08,427 I don't know, I might become 863 00:41:08,429 --> 00:41:09,795 Richard Davis. 864 00:41:09,797 --> 00:41:11,963 I know you. 865 00:41:11,965 --> 00:41:15,066 You are no Richard Davis. 866 00:41:18,238 --> 00:41:19,805 Where's Krumitz? 867 00:41:19,807 --> 00:41:21,139 I just got us shots. 868 00:41:21,141 --> 00:41:23,241 He had to take a phone call. 869 00:41:23,243 --> 00:41:25,343 Oh, shots, huh? 870 00:41:25,345 --> 00:41:27,446 Pulling another all-nighter? 871 00:41:27,448 --> 00:41:29,748 It wasn't an all-nighter, it was a date. 872 00:41:29,750 --> 00:41:32,317 Well, a date that lasted until 6:00 in the morning. 873 00:41:32,319 --> 00:41:34,519 It was a good date. 874 00:41:46,633 --> 00:41:48,400 Krumitz, finish your story. 875 00:41:48,402 --> 00:41:50,402 You were telling us about how your parole hearing went today? 876 00:41:50,404 --> 00:41:52,437 Yeah, um... 877 00:41:55,809 --> 00:41:57,542 I'm sorry. 878 00:41:57,544 --> 00:41:59,177 Uh, I got to go. 879 00:41:59,179 --> 00:42:01,980 Krumitz, you okay? 880 00:42:06,453 --> 00:42:08,520 Whoa, Daniel, Daniel, what is it? 881 00:42:09,590 --> 00:42:10,689 That was the prosecutor. 882 00:42:10,691 --> 00:42:12,624 They released Taylor Pettis an hour ago. 883 00:42:12,626 --> 00:42:14,059 He's a free man. 884 00:42:14,061 --> 00:42:16,628 Daniel, you need to know 885 00:42:16,630 --> 00:42:18,563 you did everything you could. 886 00:42:18,565 --> 00:42:21,266 I figured he'd get out of jail someday, 887 00:42:21,268 --> 00:42:24,369 but I didn't think it would be today. 888 00:42:24,371 --> 00:42:25,770 Whatever you need, bud... 889 00:42:26,440 --> 00:42:27,772 ...we're here for you. 890 00:42:27,774 --> 00:42:29,174 SIFTER: Krumitz, 891 00:42:29,176 --> 00:42:31,109 you're not alone. 892 00:42:31,111 --> 00:42:33,144 I'm sorry, man. 893 00:42:33,146 --> 00:42:35,347 But, you know, Batman lost his parents, too. 894 00:42:35,349 --> 00:42:37,449 (chuckles softly) 895 00:42:38,252 --> 00:42:40,118 You're Batman, Krummy. 896 00:42:40,120 --> 00:42:42,354 Be Batman. 897 00:42:42,356 --> 00:42:44,856 Does that make you Robin? 898 00:42:44,858 --> 00:42:48,426 No, I'm-I'm not Robin. 899 00:42:48,428 --> 00:42:50,228 (laughter, chattering) 900 00:42:55,332 --> 00:43:01,832 == sync, corrected by elderman == @elder_man