CSI: Cyber (2015–2016): Season 1, Episode 11 - Ghost in the Machine - full transcript

My name is Avery Ryan.

I was a victim of cyber crime.

Like you, I posted
on social media,

checked my bank account
balance online,

even kept
the confidential files

of my psychological practice
on my computer.

Then I was hacked,
and as a result,

one of my patients
was murdered.

My investigation into her death
led me to the FBI,

where I joined a team
of cyber experts

to wage a war against
a new breed of criminal



hiding on the Deep Web...

infiltrating our daily lives
in ways we never imagined...

...faceless...

nameless...

lurking inside our devices,

just a keystroke away.

Are you kidding me?
You guys got to back me up.

YOUNG MAN:
Sorry, dude.

Guys, I'm out. I got to go.

GPS VOICE: In 100 feet,
turn right on Ferris Avenue.

You have reached
your destination.

♪ ♪

MAN:
Hey!

What are you doing in my yard?



(gunshot)

MAN:
Oh, no.

Mm...
(both laughing)

(alarm beeping)
Mm!

I got it.

(alarm stops)

Is it hot in
here to you?

So I was thinking...

Yeah?

...we could go pick up
Michelle from your mom's house,

we can go to a Nationals game.

The three of us
can have dinner.

Today?

Yeah.

Is that really a good idea?

You're doing it again.

Instead of telling me
how you're feeling,

you're pretending
to ask me a question.

Elijah... we had
such a good night.

Yeah, and we could
have an even better day.

Look, if you don't want
to go to a baseball game,

we could do something else.
I just...

I thought we agreed
we wouldn't rush.

I'm just... I'm not ready
to bring Michelle into this.

This? Meaning us?
Yeah.

Elijah, sometime soon,
you and I-- we're gonna

have to deal with the real
issues that broke us up.

I want to know that we're solid
before we tell Michelle.

(scoffs) I... I was ready to
talk about moving back in.

(phone chiming)

What? What's wrong?

I'm so sorry.
I've got to go.

Oh, all right, well,
we'll... we'll talk later?

Yes.

RYAN:
Yesterday 15-year-old

Spencer Chapman was
accidentally shot to death

with a gun hidden
in a hollowed-out

18-volt cordless drill.

(gunshot)

MUNDO: Let me guess-- the gun
that shot Spencer was a

custom-built .22-caliber
semiautomatic pistol

with no serial number.

SIFTER: The drill case
and choice of weapon--

they're both signatures
of one distributor.

Trigger is back
in business.

Wait, who's-who's Trigger?
A Deep Web arms dealer

we've been chasing for years.

Sells guns to anybody
willing to pay his price.

He disguises the guns so that

the postal and mailing services
can't detect 'em.

His customers get delivery

right to their front door.
KRUMITZ: Every time we get close,

Trigger dumps his site,
goes underground,

and starts all over.

And that is why
he's number seven

on the Cyber
Most Wanted list.

NELSON: Wait a minute, there's
a Cyber Most Wanted list?

Well, what number was I?

Mm. You didn't
make the list.

KRUMITZ:
Hey, in my heart,

you were always number one.
Guys,

if Trigger is active,
we got a very small

window of opportunity
to finally catch this guy.

Crime scene found Spencer's
prints on both the drill

and the World Send package
that was sent to his house

a half an hour
before he was shot.

Well, did Spencer Chapman
think it was a gun or a drill?

Do we think this kid went
on the Deep Web

and bought the gun himself?

Well, that's what you're going
to Chicago to find out.

Shall we?

WOMAN:
This can't be real.

He's just a kid.

I don't understand.

You think that-that
Spencer got a gun from...

where?
There's a part of the Internet

where people
can remain anonymous.

It's called the Deep Web.

We think your son
had access to it.

Who would sell a gun
to a 15-year-old kid?

A Deep Web arms dealer who
doesn't care who he sells to.

Spencer spent
his weekly allowance

on music and movies
and video games.

I'm telling you--
he didn't buy a gun.

My son is dead

and you are making him out
to be the criminal.

Look, I know this is difficult,

but I have to ask
these questions

so we can find the person
who is responsible.

Did you ever go on to your
son's social media accounts?

Did you ever check his
history on his computer?

Yes, we do.

We did it all the time.

And Spencer understood
the responsibilities of being online.

And we had strict rules
about what he could post

and what sites he could visit.

Ms. Ryan...

our son was not who you're
suggesting he might be.

KRUMITZ:
Spencer never

accessed the Deep Web, but this
kid was hiding a ton of stuff

from his parents.
Look at this.

Notice anything weird?

NELSON:
Yeah, we might be looking

at the only 15-year-old
with no games, no Kik, no apps.

Kid doesn't even
have a FriendAgenda.

Yeah, exactly.
But check this out.

This is Spencer's real tablet.

NELSON: Oh, snap.
He used a parental guidance app

to hide what was on his tablet
from his parents.

Yup.

Spencer gave his parents
a passcode

that only unlocked
part of the tablet.

That way, when they checked...
Mm-hmm?

...all they saw
was what he wanted them to see.

Damn.

That's legit, bro.

If Spencer was hiding his online
activity from his parents,

what else was he hiding?

You guys find anything?
No evidence of the Deep Web

on any of the devices,
but this kid's got secrets, man.

Well, Chicago PD recovered
his cell phone from the scene.

Let's see if that
answers any questions.

Spencer's parents

say that they don't
know Ramsey Scott,

the man who witnessed
Spencer's death,

and that Spencer
has no connection to him either.

KRUMITZ: Well, let's just
see about that.

These coordinates
match Ramsey Scott's home.

Spencer wasn't just
in the neighborhood.

He went to his house on purpose.

Yeah. It's time to find out
what Ramsey Scott knows.

DISPATCHER:
Dispense all units to

the Hoffman Carter
Investments building

at the 1100 block
of Michigan Avenue.

Shots fired.

They've confirmed I.D.
on the Vic. It's Ramsey Scott.

We found Spencer dead,
and now this.

All right, Spencer's death
was an accident.

This is murder.

SIFTER:
Chicago PD's

turned the homicide
investigation over to us.

Without a doubt,
it was premeditated murder.

Ramsey Scott was shot
with a .22-caliber

semiautomatic pistol hidden
in the shell of a power drill.

Trigger was providing
weapons for someone

who clearly wanted
Ramsey Scott dead.

If, at first,
you don't succeed...

SIFTER: Wait a second,
are you actually saying

that Spencer Chapman went over

to Ramsey Scott's house,
in order to kill him?

This was a 15-year-old boy.

At this point,
we can't rule it out.

It looks like someone
finished the job

that Spencer failed to complete.

If we can figure out the connection
between Spencer and Ramsey...

It would help us I.D.
Ramsey's killer.

I've been checking e-mails
for two hours-- nothing.

There's no apparent connection
between Ramsey Scott

and Spencer Chapman.
I've looked at Spencer's calendar,

FriendAgenda,
all of his chats-- same thing.

You think he really
went to go shoot this guy?

I mean,
if I was 15 years old

and somebody told me to go kill
someone, I couldn't do it.

I'm a grown-ass man,
I couldn't even do it now.

Really? You're fully grown?

Best things
come in small packages, Krummy.

(sighs)

RAMIREZ: What did I miss?
No matches in Spencer

and Ramsey's
text messages.

These two don't even have an app in common.
Yeah.

Scrubbed all these
devices and got nothing.

No connection
between

Spencer and Ramsey Scott,
no digital evidence

of Spencer purchasing
a gun or a drill.

Or even going
on a Deep Web browser.

You checked all the devices?

Yeah, why?
You read your

probation document,
listing all the devices

you can't touch
outside of work?

All 162 pages?

Yeah, I skimmed through it.

Well, if you had read
the whole thing, you would know

that there's one device
the FBI left out.

One Spencer could
have used to access

a Deep Web browser.

Good thing the FBI procedure
is to grab everything

plugged into the walls, because
you guys are only looking

into the obvious places.

Game consoles
are also computers.

Modern ones even have
the exact same capabilities--

messaging, apps...
Internet connections.

All of which we can recover data
from. Raven, I love you.

Wait a minute. Raven,
you play Game Vex?

No.

I crush Game Vex.

Spencer spent

most of his time playing
first-person shooters.

KRUMITZ: Well, according to these logs,
Spencer spent about

six hours a day
playing video games.

Looks like,
his favorite game, by far,

was Blacklight: Retribution.

Oh. It's an online
multiplayer game.

You play an agent working
for a black ops organization.

Each map is a different
mission fighting terrorists.

This is the leaderboard.

MUNDO: Whoa.
Check out his history.

Spencer was pretty good at this.
He's a top 50 player.

Well, what happened?
In December of last year

he was doing so well,
and suddenly he dropped in rank.

RAMIREZ:
Well, usually that means

parents have cut down
on game time.

RYAN: Okay. But did any of this
activity lead us to Trigger?

RAMIREZ: Unfortunately,
there's no evidence

of Spencer using his Game Vex
to access the Deep Web.

NELSON: But we found
something else.

I recovered Spencer's
Game Vex messages.

Basically
the in-console e-mail account.

I did find this odd message
between Spencer

and a gamer
with the handle VIPER75.

You guys should
check this out.

MUNDO:
"Your mission: go to 42.01665

"and -87.45021.

"Walk four paces north.
Four paces east.

"Drop package. Leave.

You will be rewarded."
Longitude and latitude.

Looks like VIPER75 was sending
Spencer on a real-world mission.

Pull up the coordinates.

SIFTER:
Right.

That's Ramsey
Scott's house.

Let's see
the crime scene photos.

Do we have an overall photo
of the house?

Great. Raven,

highlight Spencer's footsteps

from the coordinates to
where we found his body.

Four paces north
and four paces east.

"Drop package. Leave.
You will be rewarded."

The package was the gun.

That's what Spencer was doing
at Ramsey Scott's property.

VIPER75 purchased
the Deep Web gun, sent it

to Spencer with instructions
on where to put it.

Spencer wasn't there
to shoot Ramsey.

He was just delivering the gun.

Why did VIPER75 want
Ramsey Scott dead?

Or, for that matter,
use a kid to deliver the gun?

We need to learn more about
VIPER75 to figure that out.

He's our unknown variable.

When we find him,
we find our murderer.

Yeah, and the icing
on the cake,

we take down Trigger.

♪ CSI Cyber 1x11 ♪
Ghost in the Machine
Original Air Date on May 12, 2015

♪ I know you've deceived me,
now here's a surprise ♪

♪ I know that you have, 'cause
there's magic in my eyes ♪

♪ I can see
for miles and miles ♪

♪ I can see for miles
and miles ♪

♪ I can see
for miles and miles ♪

♪ And miles... ♪

♪ Oh, yeah. ♪

== sync, corrected by elderman ==
@elder_man

(chuckles)

Oh, my God, it worked.

Avery, Elijah, come in here.
Check this out.

RYAN:
What do you got?

Okay, most gamers enjoy
the thrill of trash-talking

the other players in real
time via headset, right?

Right.

YOUNG MAN: Dude, you suck.
Get out of the way.

Those dudes
were wearing heavy armor.

Can't take them all out
by myself.

YOUNG MAN:
You got pwned.

There is a place

that stores information
unintentionally

on a console.

Thousands of
bits of data

are constantly being
sent back and forth

from the memory
and the hard drive.

It's called the swap space,

and this data includes video
and snippets of audio.

Audio? Like Viper's voice?

Exactly. So I wrote up a defrag
program that will isolate

any audio chats in the games
between Spencer and VIPER75.

Cool. Ready? Here we go.

I'm running a defrag
to consolidate the audio data

so it makes sense
when we play it back.

SPENCER: I sent you... invite.
Did you get it?

VIPER75:
Affirmative... for battle.

Next time we play,

I'll bring out the tox nade.

SPENCER:
Market area. Too many snipers.

I... pass the level.

Where's your dog?

What's... name?

SPENCER:
Outside. Sam.

VIPER75:
When do your parents come home?

SPENCER:
They work all the time.

Mission Commander, behind you!

VIPER75:
Thanks, Ghost37.

Well, that got creepy fast.

Did you hear
those questions:

When are your parents home?
What's the dog's name?

Yeah, this was an online casing
of Spencer's home.

Viper was profiling his target,
establishing

pattern of life,
trying to figure out

when Spencer was
the most vulnerable.

Through a game console.

The online gaming world
is a haven for predators:

pedophiles, sex offenders,
and radicalizers.

They hide behind their handles
to make friends with these kids,

to earn their trust.
These kids don't even know

they're talking
to someone whose goal

is to take advantage of them.

It's how Viper manipulated
Spencer.

I'm a gamer.
I love playing online.

But as a parent,
Michelle is gonna hate me.

She's not gonna get to do anything.
You can always use

the access controls-- just
don't let her play online.

I shouldn't have to.

Krumitz, most parents
are relieved when their kids

are in the safety of their
own home, playing video games,

'cause they think it means
they don't have to worry

about who their kids
are hanging out with,

are they getting
into trouble, are they safe.

Now that's-that's
just not true anymore.

No parent

would allow their child
to go outside

and play
with a 45-year-old stranger.

(phone rings) With this,
it happens every day.

Nelson, what's up?

I'll be right there.

We know why Spencer
dropped off

the Blacklight
leaderboard so quickly.

His avatar was hacked.

Check this out.

RAMIREZ: This is Spencer's
avatar, Ghost37,

when he was at the top
of the leaderboard months ago.

His inventory was loaded
with the best weapons and armor.

And this is our man Ghost37
right after he was hacked.

I mean, dude lost
his warzone battle armor,

his breakguard legplates,
and his volk helmet.

I mean, everything.

The hacker
basically reset his character.

That's months of time and effort
down the drain.

Not to mention the real-world
money for upgrades.

It would be completely
devastating as a gamer.

The psychology of loss is just
as devastating,

whether it's real-world
or cyber.

How does this relate to VIPER75?

Guess who hacked Spencer.

How do we know
it was VIPER75?

This is Viper's inventory on the
same date Spencer was hacked--

December 26.

Spencer lost his warzone
battle armor, his volk helmet,

and his breakguard legplates.

So, on that same day,

all those items showed up
in Viper's inventory?

RAMIREZ:
Then, a few days later,

VIPER75 sent Spencer
a suit of titan armor

and a Polaris helmet,

which is extremely
rare in the game.

And Spencer's

been climbing
that leaderboard ever since.

So Viper hacks Spencer,
then he played the role

of savior and gave him
a suit of armor.

But it wasn't a gift.

It's a trade
for a favor; a task.

I'll scratch your back,
you deliver a gun.

He was using his power
as mission commander

over his team in the real world.

Search for any gamers in Chicago

who rocketed up the leaderboard
as quickly as Spencer did.

I'm gonna go search
for the identity of VIPER75.

So Game Vex refuses to give us
access to VIPER75's account.

They do realize this is
a federal investigation

and we already have
two dead.

I made them
well aware of that.

They would only share
two things:

VIPER75 is using a VPN,

and he set up his account

with a prepaid credit card.

He's covering his tracks,
which means

we won't be able to I.D. him
from his account.

Well, ever since
Snowden went rogue,

these little tech firms have
become obsessed with privacy.

Tell that to Spencer's parents.
Avery,

these tech companies are only
concerned with the bottom line.

Now, if customers found out
that their private info

was being given out,
even to law enforcement,

they'd just stop playing.

But, look,
I haven't given up.

I will see a magistrate,

try to get a warrant to
let us into Viper's account.

I just wish I were walking
in there with a stronger case.

MUNDO:
Wow.

He didn't look happy.

Neither do you.

Your call.

Just Devon. We're...

I don't know what we're doing.

We seem to have very
different definitions

of our relationship.

Did you really think
it was gonna be easy?

Yeah. I thought
the hard part was done.

It's okay to be scared.

Okay, enough of
the psychoanalysis.

All right...

Nelson and Raven brought me up
to speed.

I guess Viper hacked Spencer
so he could groom him?

First, Viper emotionally
bonded with Spencer.

He boosted
Spencer's confidence.

He invited Spencer to join
his team on the battlefield.

(video game gunfire)

Then he hacked him.
Took everything

his online character had.
Just ruined him in the game.

And then poor Spencer turned

to the last person
he should've trusted.

His new online friend Viper,
who willingly restocked

his weapons and his armor.

Once he proved to Spencer

that he could get him back
in the game, he promised him

something huge if he could
complete a real-world mission.

There are a lot of gamers
out there.

How did Viper select Spencer?

The game did it for him.

Viper was choosing the
best players in Chicago

who were in the top 50
on the leaderboard,

and Spencer was one of them.

RAMIREZ:
We're at the tail end

of our search for
a second gamer

who fits
Spencer's profile.

A former high-ranking player
who had a sudden tumble.

One who spends a lot of time
in the game,

is invested
in his character, and has

the most to lose.

We narrowed the field down
to players in Chicago

by using the leaderboard.

Uh, check out
the last 24 hours.

Ace.

Look at his hours.
Almost five a day.

Can we get his address from
his Game Vex player account?

No. Sifter's having a hard time
getting them to cooperate.

Wait. Hold on.

We might not
even need them.

Most gamers are monogamous
with their handles,

so, let me see something.

Boom.

This dude's got
a ToggleFly account.

We can get his IP address
from this.

RYAN: Call the service provider,
get a physical address.

It's time for Ace
to hit pause.

(rapid gunfire)

MALE VOICE: The path is clear,
Mission Commander.

MUNDO: Tell us what you know
about VIPER75.

He's my hero.

Your hero?!

Yeah, on the battlefield.

He's my mission commander.

Major skills,
always has my back.

See, when I got hacked,
I lost my Polaris helmet,

submachine guns, throwing
knives, everything--

I was a noob
all over again.

And that's when VIPER75
contacted you?

Yeah. He saved me.

Sent me a gunman suit,
dataluxe battlevest,

warzone battle armor.

I mean, I was
like a god after that.

Micah, did you deliver a package

to the Hoffman Carter
Investments Building last night?

First rule of Viper's missions--

you don't talk
about the missions.

FATHER:
Micah, what mission?

What did you do?

Answer his question now!
Okay!

All right! It's no big deal.

All I did was deliver the
package to the coordinates.

There was a gun
in that package, Micah.

What?!
A gun that was used to kill a man.

I never looked inside!
I didn't know what it was!

Look, I wasn't supposed
to look inside.

Viper told me not to.

And you're sure?

You're sure that Micah that
delivered the gun that-that...?

MUNDO: VIPER75 sent you
all sorts of stuff

when you were hacked.

What did he send you
when you completed your mission?

When you delivered
the package?

He gave me a katana sword.

Micah and Spencer didn't know
what was in those packages.

They were just delivery men.

Then Viper swooped in,
took the gun

and killed Ramsey Scott.

Um, we might have a problem.

Micah said that VIPER75
gave him a gunman suit,

a dataluxe battlevest
and warzone battle armor

to replace what he lost
when he had been hacked.

It was part
of VIPER's grooming.

He created a need, and then he filled it.
Right.

But where'd he get
the game inventory?

See, weapons and
armor can't be

created by gamers,
it can only be acquired.

Now, Spencer didn't
have a gunman suit

or a dataluxe battlevest.

So, where'd
it come from?

This is bigger than we thought.

Another gamer's been hacked.

He's recruiting
another soldier,

taking items,
and awarding them to another.

Yeah... one's gonna be all
too happy to do Viper's bidding

for an almighty katana sword.

Nelson, I think I might
have found what Avery

and Elijah
are looking for.

Goldenbeast.

Let's see.
Shot up the leaderboards

and broke into the top 50
just this morning,

using that katana sword.

The gift Micah received
after he completed his mission.

It means another gun
was just delivered,

and someone else is
gonna get murdered.

Yeah, if it hasn't
happened already.

FBI.

We're looking for Corey Smith.

Corey!

Wait here.

Stop! FBI!

(panting)

(panting)

(panting)

Don't come any closer.

Calm down, okay?
We just want to talk to you.

Corey, no!

(grunting, car alarm blaring)

(car alarm blaring,
Corey panting)

I need an ambulance,
1218 East Superior Road.

Okay.

Don't move.
We're getting you help.

I thought I could make it.

I make the jumps all the time.

(groaning)

Where's the package?

What package?

We know you're Goldenbeast.

I'm AlphaArcher.

Jessica's Goldenbeast.

(siren approaching)

Jessica?

Jessica?

(indistinct radio communication)

Corey told the paramedics
he ran because he had drugs.

Now, the charge
for drug paraphernalia

is virtually nothing.

And then he jumps.

He had to have known
he wasn't gonna make it.

We just witnessed
a prime example

of Game Transfer Phenomena,

or what we call
"GTP under the influence".

GTP? Sounds like something

they'll be selling a pill for soon.
(laughs)

There's a documented history

of videogamers experiencing
involuntary impulses

to perform gaming actions
in the real world.

The more they
play the game,

the more they are
in the game, in real life.

Corey thought that he could

jump to that other
balcony to escape.

MALE VOICE:
You got to jump, man!

...because he'd done it
so many times in the game.

That-That's just plain crazy.

The shipping label
matches the one

on the box
in Spencer's trash.

Right here.
Message from Viper

to Goldenbeast came in
this morning.

"Your package will arrive today.
When it does, deliver to

41.8774 and -87.6106."

Looks like it's Grant Park.

"Walk eight paces north from

between the trees,
and four paces east."

Goldenbeast already has
her katana sword.

Means she completed her mission.

Viper might be at the park now.

Let's go.

So, Avery and Elijah are hunting
down Goldenbeast and Viper.

That leaves us the Deep Web
arms dealer Trigger.

Now, we haven't had
any physical evidence

that could possibly
lead us to him until now.

Got three gun shipping boxes,
three postmarks.

Did you find anything?

I plotted those postmarks,

and look at this.

Trigger shipped from
these three post offices

to hide his location.

More than likely, he lives
within that triangle.

That's a huge area.

That's almost all of
Hillsborough County, Florida.

Yeah, too big to search.

What if he finds us?

Let's slip him a cookie.

What, a supercookie?

Yeah, let's do that.

What is a... what
is a supercookie?

It's like tagging a
migrating animal.

Once an animal, or in
this case, an I.P. address,

gets tagged, we can follow it

wherever it goes.

Well, how do you attach
this supercookie

to a criminal in the Deep Web?

Yeah, but we got
to get the target

to click the link
or open an e-mail.

Got to trick 'em.

What if we put out a news
article on the Internet

about young Spencer being killed

with a Deep Web gun
hidden in a power drill?

I mean, that would get
Trigger's attention,

and get him
to click on the article.

I mean, like anyone else

who follows that link,

a supercookie
will embed itself

in a part
of the operating system

that he can't see or access.

That article could
get thousands of hits.

I mean, how will we know
which one is Trigger?

KRUMITZ:
Well, we can't know for sure,

but the list of suspects
that click that article,

and go back into the Deep Web
will be way smaller.

Yeah, but, again, why would this
guy, who's never been caught...

I mean, why would he click
on that article,

let alone read it?
RAMIREZ: I think it has something

to do
with his narcissistic desire

to read about himself.

Oh, snap. Look.
It's the next Avery Ryan.

KRUMITZ:
Well, practically speaking,

I'd say he'd probably
click on the article

to find out exactly
how much we know about him.

Yeah, all right,
this makes sense.

Okay, you write the article,

and I will contact the
newspapers in the Tampa area.

We will get this posted
on their homepages.

DISPATCH: All units dispatch
to Grant Park.

Possible suspect in the area.

(sirens blaring)

Chicago PD just
picked up Goldenbeast.

Viper trains them well.
She's not talking.

We don't need her.

Longitude and latitude places
her in this area of the park.

All right.

What was it, eight paces north
from between the trees, right?

And four paces east.

Avery, I found it.

Same type of drill case.

It's empty. Damn it!
We're too late.

VIPER75 has the gun.

Well, we know he likes
to kills his victims

as close as possible
to the drop-off location

to minimize his contact
with the murder weapon.

He should still be in the park.

There's so many people.
Anybody could be the suspect.

a victim.

(gunfire, screaming)

Came from this
direction.

(people screaming)

(panting)

Elijah.

The gun.

Yeah, but no body.

You think he made us,

fired the gunshot
as a distraction

so he could escape?

He's done here.

(phone ringing)

This is Raven.

Raven, I need you
to do a tower dump.

Give me all the numbers to all
the cell phones that connect

to the cell towers around
Grant Park beginning...

15 minutes ago.

I'm on it.
I'm pulling it up now.

Got another one.

Yeah, 64.167.84.259.

All right, I'm tracking it

right now.

SIFTER:
What is that insanity?

That is us tracking
the supercookie results

to get to Trigger,
our gun dealer.

Just got another Deep Web hit.

NELSON:
False alarm.

Just a dude checking
out some banned books.

This is like looking
for a needle in a haystack.

And all those people
clicked on the news article

we created?
Yeah. Now we can see

whatever Web site they visit.
Yeah, and get an alert

if they visit the Deep Web.
It's pretty sweet, right?

Of those, how many
visited the Deep Web?

Hundreds.
Anybody doing anything illegal?

Mostly hackers swapping code.

Others just, you know,

shopping for stolen comic books,

that type of stuff.
And of course,

the bread and butter
of the Internet: Porn.

Huh?

I'm not sure those words should

go together
in a sentence, but...

(beeping)
We got another one.

Sweet, all right.
These are all the

Web sites our supercookie
has detected this person

made a visit to.

At the top of the list,
you can see our article.

See that red one
at the bottom--

dot.mist-- that's Deep Web.

We might actually
have something here.

Arsenal. Anonymous handguns.
Is this him? Is this Trigger?

There's only
one way to find out.

Let's see...
that's it!

That's Trigger's
Deep Web marketplace.

This is it.
How do we find him?

Well, we've got
the IP address,

so we have the location:

Tampa Public Library.

It's easier for Trigger to stay

anonymous when he logs
on at a public place.

(whoops)
Oh, yeah.

Um...
Just... just... all right.

(over radio com):
I've spotted Trigger.

Green shirt,
southwest work station.

Remember,
this whole case is shot

if he's able to lock us out.

Separate him from
the keyboard immediately.

Don't let him
shut the computer down.

Go, go, go!

(grunts)
(people shrieking) FBI!

Remain calm and clear the area.

Stay down.

Yeah, we got you, Trigger.
You have the right to remain silent.

I suggest you take
advantage of that right.

What do we got?
All right,

he's logged in
to his Deep Web gun sales site.

Looks like VIPER75
paid for three guns

shipped to addresses
matching

Spencer Chapman,

Micah Gordon

and Jessica Pope.

AKA Goldenbeast. Okay.

Wait a minute.

We've got an order
for a Walther PPK/S pistol

to be sent to a Chicago address.

The tracking number
says it was just delivered.

Means the hit is still on.

Avery, we've got I.D.
on two of the occupants

of the address where the gun
is being delivered.

One male, one female,
each of them has a smartphone.

KRUMITZ: And we spoke to their
cell service providers and

we are up on their location.
We're sending it to you now.

It's all you two.
RYAN: We got it.

All right, our targets

are moving in
different directions.

We're gonna
have to split up.

One of them's gonna drop off a
gun that's gonna kill someone.

We have to stop them
before they get to Viper.

RAMIREZ: Avery, the tower dump
got us a match.

Viper's next target
is Kim Hawthorne.

I'm sending you her address.

RYAN:
VIPER75.

You got the wrong guy.

(chuckles)
Really?

So you're not here
to kill Kim Hawthorne?

But this is her
building, right?

Who are you?

How do you know that name?

Special Agent Avery Ryan, FBI.

You were smart when
you shot the gun in the park.

You made it pretty tough
to determine

who your intended victim was,

till you
came here tonight.

We compared every phone number

that pinged a cell tower
near Grant Park

during your little stunt,

and all the cell phones
in this area.

And there was one in common:

Kim Hawthorne.

We know the connection between
Ramsey Scott and Kim Hawthorne.

They were both witnesses
at your father's trial.

He was serving 15 years

(alarm ringing)
for felony bank robbery.

Aah!

VIPER75: They're both lying bastards.
My father got

locked up and was
murdered in prison.

They deserve to die, not him.

Your father was
a criminal and so are you.

And now you tried
to kill a federal agent.

Lucky for me,
we got here before you did.

I'll find another way.

I'll get my revenge.

You can't stop me.

(tires screech)

(sirens wailing)
Freeze!

Don't move.

Game over.

(sighs) I think it's time to
lay off the gaming for a while.

(laughs)
Leave it to the kids.

Just do it in moderation.

Maybe turn off
the chat function.

Everybody listen up.

What we do here is one of
the hardest jobs there is:

chasing nameless,
faceless criminals

who hide behind computers.

It takes dedication,

skills,

and patience.

Which is why
it's important for us

to recognize our victories.

Krumitz,
please pull up the list.

Mm-hmm.

You know what to do.

(whooping, applause)

Nice work.

Ah.
Yeah.

Way to go.
Nice, nice.

(whoops)

KRUMITZ:
Oh, well,

that was short-lived.

Still can't believe
I wasn't on the list.

I was.
Y'all punking me, right?

Like, I know I'm on
the list, I...

I'm really not
on the list? For real?

Sorry to bother you
at work.

No, no, no, it's fine.
No, we just, uh,

we just solved
a case, so...

it's a good day.

Just got even better.

Sounds like it.

You know, when I heard
your voice mail...

Okay, about the voice mail,
listen, I'm-I'm sorry.

I... I should not have
given you that ultimatum.

No, you were right.

It has to be all or nothing.

And, uh...

I want it all.

You know,
I thought about

why we split up
in the first place.

We weren't good at saying
what we wanted

or how we felt.

No, we were...

...we were afraid.

I stayed so we could
be together.

All three of us.

Michelle and I will
see you at home.

(laughing)

You good?

Better than good.

RAMIREZ: Who's in?
NELSON: Oh, hell, yeah.

Pass the controller.

I'll show you how
it's done, okay?

You talking smack to me?
Come on,

you want to play
with these guys.

Uh, actually, if it's okay
with you, I'm gonna...

I'm gonna go home.

Mm...!

All right, Krumitz, are you in?

No. No way.

Come on, bro.
What? No.

Okay, I'm in, I'm in.
Don't wait All right, Sifter.

to see the look on my son's
face when you teach me

how to "pwn" him.

What? I listen
when you guys talk.

All right, you've been warned,
I'm gonna smoke you.

That doesn't seem likely.
I think not.

Oh, look at that.
Sifter, you gotta move

You're going the wrong way.
your player first.

I'm just looking for the "pwn" button here.
There's no "pwn" button.

RAMIREZ: Oh, I'm right
behind you, Avery.

Don't even think about it--
that's mine, that's mine!

== sync, corrected by elderman ==
@elder_man