CSI: Cyber (2015–2016): Season 2, Episode 11 - 404: Flight Not Found - full transcript
The team is drawn into the world's first case of cyber-hijacking when they investigate what appears to be a hack into air traffic control.
00:00:00,000 --> 00:00:04,500K R S T E V
Argus Air 272,
deviation has not been approved.
Please return
to previously cleared route.
Do you read me?
Are you still there?
(static crackling)
Argus Air 272,
weather at current heading.
Return to cleared route.
Do you copy?
(rumbling)
Washington Center,
Argus 272.
We're experiencing
some turbulence.
Please advise. Over.
All we're getting
is static.
What, is it naptime down there?
(bell chiming)
Argus 272, if you read
transmission, ident. Ident.
(staticky communication)
(alarms beeping) Whoa.
Whoa. Whoa, whoa.
Wh-What is this?
I'll cross-check
the instruments.
See what that was all about.
Washington Center, Argus 272.
(staticky):
...read... how do you read?
Argus 272,
weather at current heading.
(alarm blaring)
I need a supervisor.
Looks like we've got
an ADS-B malfunction.
I've got phantom planes here.
They're all
Argus 272.
Argus Air 272, ident.
Ident immediately.
Get the Domestic Events Network
on the phone, ASAP.
We've got
an emergency situation.
This is your captain speaking.
We are approaching
a band of severe weather.
Fasten your seatbelts
and remain seated.
Thank you.
Transmission ident.
Do you read me?
Sir, I have them on the line.
Argus Air 272, do you read me?
If you read transmission, id...
Sir?
Sir, the planes just
disappeared. All the planes.
Argus Air Flight 272
is no longer on my scope.
SUPERVISOR:
What?
Flight 272 is gone.
Flight 272 took off
this afternoon from Tampa,
heading for Rhode Island.
We lost contact over
Wilmington, North Carolina,
an hour and a half ago.
Plane just disappeared.
Plane relay any indication
of mechanical failure?
Technical malfunction?
Not that I know of.
The flight was just off course.
I tried to contact the pilot,
and suddenly, phantom planes
appeared on the scope.
SUPERVISOR:
Our I.T. department
couldn't explain
the phantom planes,
but they did uncover
a cyber intrusion,
which we told you about.
Someone assigned Flight 272
an unauthenticated flight plan
right before takeoff.
Pilot couldn't have known.
That's why the plane veered off
course before it disappeared.
That plane wasn't
supposed to be
anywhere near that storm.
Any other planes
reporting problems?
No, but we're double checking.
If the hacker already intruded
into the system,
it's possible he has
a backdoor into the NAS,
and every flight
in the sky is vulnerable.
NELSON:
Come on, Krummy.
Why walk when you can glide?
I mean, look at this.
Huh?
Ooh.
With that Agent Pierce?
Rosalyn is in town
for a conference
and I'm her only friend in DC.
Look at Krummy.
Making moves.
Yeah.
Huh?
(chuckles)
NELSON:
Oh, snap.
That's Emmitt Smith.
That's Emmitt Sm...
Yo, DB is going
to be so jealous
he was out of
town for this.
Hey, Emmitt!
Hey, Emmitt!
Emmitt!
Oh, Emmitt!
Hey, man!
What's up? What's up?
Brody Nelson.
Brody? How you doing?
Yeah, yeah, yeah.
Daniel Krumitz.
Daniel.
Diehard
Redskins fan,
but I can still
appreciate
the NFL's all-time
leading rusher.
Thank you, man.
Man, I like
those wheels.
Oh, thanks, man.
Self-balancing electric scooter.
How fast can that thing go?
Only one way
to find out.
Think you still got
that first step?
You know it.
But, uh... I am in
my dress shoes.
Mmm, okay.
Go!
(whoops)
To the 40!
To the 30!
(whoops)
EMMITT: That's your friend, huh?
We work together.
But if you didn't
have dress shoes on,
would you have
raced him?
You know, when you
have the skills,
you got to put 'em to use.
Hmm.
What about you and me?
What about it?
In socks.
Bad idea. Sorry.
(phone chiming)
Come on, man.
Nelson!
We gotta go!
Uh...
Okay.
Bye, Emmitt Smith!
MAN: Hey, can I have your autograph?
WOMAN: Look, it's Emmitt Smith!
REPORTER:
An Argus Airline flight
has been reported missing
with 75 people on board.
A spokesman for the airline
has confirmed
that search and rescue teams...
REPORTER 2: ...friends and
family have gathered
outside the airport
and are demanding answers.
REPORTER 2: We're going live
now to T.F. Green Airport.
The flight was traveling
from Tampa, Florida,
to Providence, Rhode Island,
when it went missing.
Attempts to contact the plane
have not been successful.
We are coordinating with
the FAA, Department of Defense,
Homeland Security and NORAD.
Director! Director!
Director!
What about reports
of a potential crash site
in North Carolina?
Any rumors of a crash are false.
Deputy Director Ryan
of the Cyber Division
is prepared to fill you in
with what we do know.
Our investigation has uncovered
a cyber intrusion in the NAS
flight plan database.
We're currently assessing
if any other aircraft
has been affected.
At this point,
no one has come forward
to take credit for the hack.
But we do know
that the missing plane
was intentionally diverted
from its path.
But as of now, we simply have
no idea where Flight 272 is.
(reporters clamoring)
Well, you need to find out.
Our children are on that plane.
My daughter Emily
and her teammates.
What are you going
to do to find them?
I know that this is hard.
I know you need answers
and I wish I had them.
But our investigation is still
in its preliminary stages.
But you need to know
that it is everyone's
top priority
to find Flight 272.
Radar is searching.
Jets have been scrambled.
And I will do everything
in my power to find that plane.
And to find your children.
Question. Question.
Director...
Question! Director...
Question.
CONTROLLER: Monument Air 625,
Washington Center...
(sighs)
Krummy, this is
crazy, man.
It's like Malaysia Air
all over again.
I'm not finding anything that
explains those phantom planes.
Equipment
all checks out.
Yeah. Here, too.
Look, I don't think
the scope is to blame.
I mean, the FAA would have
figured that out themselves.
I mean, the fact that
they needed to call us at all
means that the intrusion's
much more sophisticated.
I'm thinking that Flight 272's
onboard GPS device
may have been tampered with.
Okay, wait a minute.
One device can cause 50 separate
phantom planes to appear?
Well, technically, if it can
create one, it can create 50,
and we both know that there's
not 50 Flight 272s
flying around up there.
The plane was flying
directly into bad weather.
Could a lightning strike
cause this kind of glitch?
No, I already ruled that out.
It had to be deliberate.
The plane's GPS device
should be telling us
exactly where
the plane actually was.
Yeah. Instead, it created
50 phantom planes
spread across a ten-mile radius.
And every one
of the phantom planes
is being broadcast
by a single GPS device.
Okay.
I'm gonna triangulate
the last known location
of the GPS device and I should
get the last known location
of the real Flight 272.
Looks like it crashed
right there.
Wilmington, North Carolina.
That elevation's low.
Too low.
(sirens wailing, horn blaring)
Director, I'm approaching
the crash site now.
There's nothing here.
ELIJAH: Krumitz, I thought there was
supposed to be a plane crash.
What, exactly,
are we looking for?
KRUMITZ: I'm sort of hoping
I'll know it when I see it.
I thought the aircraft's
GPS device
was broadcasting
those phantom planes,
but clearly,
I was wrong about that.
What else could do that?
Whatever it is,
it's in this field
and we just need to find it.
ELIJAH:
Tire tracks.
Somebody drove
through here recently.
Last couple of days,
I'd say.
Something was unloaded here,
and all that's left
are a bunch of cords
and empty cases.
(rustling, clinking)
I think we just found
our plane crash.
♪ ♪
Local units are running down
the tire tracks
we came across in North
Carolina, but it's a long shot.
How are you guys coming along?
This is what you and I
pulled out of that tree.
It's an inflatable antenna.
Like a GATR.
Military uses them during
ground combat for communication.
It's lightweight,
portable, powerful.
What was this one
being used for?
Software-defined radio.
He's a clever bastard.
Taking advantage of
Air Traffic Control's reliance
on GPS to monitor planes.
ADS-B.
It's the latest and greatest
in air traffic surveillance.
Just like in your car
or on your phone.
Tells the pilot
where he's going.
Tells Air Traffic Control
exactly where
the plane is located.
Yeah, but the
system was built
for convenience, not security.
An SD radio,
like this one here,
can spoof GPS signals.
NELSON: It could tell
Air Traffic Control
that there's planes
in the sky
even when there are none.
And Air Traffic Control
can't tell the difference
between the real planes
and these fake ones.
NELSON: Dot on the screen
is a dot on the screen.
It's all the same to them.
It's a huge vulnerability
and someone just exploited it.
ELIJAH:
So first, our hacker
assigned Flight 272
an unauthorized flight plan.
The pilot, unaware of the hack,
did what he was supposed to do,
and diverted the plane,
per those instructions.
Next, they spoofed
a bunch of signals
so Air Traffic Control couldn't
keep track of the real plane,
and in the chaos,
Flight 272
slipped away.
We're not just looking
for a missing plane.
This is a cyber hijacking.
♪ CSI Cyber 2x11 ♪
404: Flight Not Found
Original Air Date on January 10, 2016
♪ I know you've deceived me,
now here's a surprise ♪
♪ I know that you have, 'cause
there's magic in my eyes ♪
♪ I can see
for miles and miles ♪
♪ I can see for miles
and miles ♪
♪ I can see
for miles and miles ♪
♪ And miles... ♪
♪ Oh, yeah. ♪
K R S T E V
Flight 272 has been missing
for a little over three hours.
This is the distance
a plane could've traveled
during that time.
KRUMITZ: Current search area
is half a million square miles.
Plane disappeared
into bad weather.
There's no way of telling
what direction it's heading now.
The SD radio created
50 fake planes
in order to mask which direction
the real Flight 272
was heading when it vanished.
It's like a "Zerg Rush"--
it's a gaming strategy,
where you implement a swarm to
overtake a stronger opponent.
But in this case,
our cyber hijacker
used spoofed signals
to confuse air traffic control.
And because of the chaos,
there's no way of knowing
what the plane's
final heading was.
Jets were scrambled,
but with visibility so low,
the plane was
long gone.
Good news--
no plane crashes
or signs of debris
have been reported.
So as far as we know,
Flight 272 is still airborne.
Bad news-- they now have less
than two hours of fuel left.
And the pilot has no idea that
the flight plan's been altered,
so he'll be running out of fuel
with no plan on where to land.
MUNDO: Coast Guard search
and rescue is out there.
Every plane in the sky
is on the lookout,
but time is not on our side.
How can a commercial airplane
just vanish?
Ground-based radar can detect
a plane flying over land
or up to 200 miles
off the coast,
and they've come up empty,
so we're guessing that
this flight is out to sea.
KRUMITZ: The real
weird thing is
the plane's GPS signal should
still work and it's not.
Along with half a dozen
other communication devices
used to talk to the
ground, I mean,
the plane went silent.
Could the pilot have
turned that off?
GPS locators all come on
when the plane does.
Pilot can't just
disconnect them.
Our missing plane
went completely dark.
It just, it makes no sense.
Is there some kind
of object or-or device
that could interfere
with all those signals?
Possibly, yeah.
Something could be
running interference,
like a, like a
signal disrupter.
It would have to be
physically brought on board
by somebody who's
on that plane now.
MUNDO:
71 passengers
and four crew members.
That means we have 75 suspects.
We have a possible hijacker
on that flight.
We need to single them out.
Pull up the flight manifest.
We're looking for outliers;
anyone who stands out.
All right, how about
the guy in 2F?
Edger Miller--
bought his ticket
at the airport today.
What do we know about
Edger Miller on social media?
"Edger Miller-- single."
Occupation listed--
mechanical engineer.
And he's worked
at the telephone company
for two years.
Well, an engineer might know
a little something
about hijacking a plane.
Think that it might be
a domestic terrorist?
I'm not ruling anything out.
Okay, check out 12C.
Paul Lammers.
He's on a one-way ticket.
No return booked.
RAMIREZ:
Paul's ex-military.
Started working
in the private sector
two years ago.
Married, three children.
Okay, recent post
says that he was heading
to Providence to bid
on a new construction job.
Well, that explains
the open-ended travel.
He's not sure how long
he'll be there.
How about Erica Chan, seat 10D?
Flying on a Chinese passport.
Immigration
has her visiting
the United States
on a student visa.
(thunder crashing)
RAMIREZ: No American social
media presence that I can find.
I'll have Interpol check Renren,
see if she posted
anything at home.
Rows four and five.
Those are the high schoolers
returning home.
Volleyball team.
Our children are on that plane.
My daughter Emily
and her teammates.
There's eight students
and two chaperones.
RAMIREZ: They can't
possibly be involved.
RYAN: Right now,
everyone's a suspect.
What do we know about our pilot?
Veteran pilot.
He's been with Argus
Air for 12 years.
Personnel file is,
well, spotless.
Okay, recent
relationship status--
married to divorced to single.
You think
Richard Reynolds cracked?
Maybe another
German Wings situation?
You know, pilot kills himself
along with everybody
else on board?
RYAN: I don't
know about that.
Look at all this support
he's receiving.
Friends, family--
they're all commenting
with love and support.
And changing
his relationship status
to single means
that he is healing.
Richard's moving on.
And as far as we know,
pilot's following protocol.
Lost radio communication--
he'll stick to his flight plan.
Our cyber hijackers
thought this through.
This is meticulously
planned, well-executed,
but high-risk.
They have to be on board
to make this work.
What would motivate
someone to do that?
No one's taking credit
for the attack.
Yeah, and no one's defecting
from Florida to Rhode Island.
I doubt it's political.
Then what is so important
about Flight 272?
Argus 272 at flight level 350.
How do you read, over?
(static crackling)
There's nothing.
No radio,
even the datalink's a bust.
(thunder rumbling)
The storm's not
letting up, is it?
Well, I've flown
through worse weather.
Just stick to the flight
plan, we should be fine.
We start diverting
on our own,
we're liable to end up in
someone else's airspace,
and that's how midair
collisions happen.
You all right?
Yeah, yeah.
Just... heart's racing.
I feel like my blood sugar's
a little low.
I'm gonna have
a flight attendant
bring me an orange juice.
Well, listen,
without radio contact,
we're virtually
flying blind.
Do whatever you got to do.
I need you at 100%.
ARTIE: This is just
a big misunderstanding!
MAN: Sir, you're gonna
have to calm down!
Talk to Agent Mundo, Agent
Krumitz-- they can vouch for me!
You're gonna have to talk to me.
Oh, you're Deputy Director Ryan.
It's a pleasure
to meet you.
I've heard great things
about you.
All right, on your feet.
I'm-I'm, uh, Artie Sneed.
Artie?
Uh, has anyone mentioned me?
I think I've heard
your name before.
I just didn't know
that you were
visiting us today.
Ma'am, this man was attempting
to enter the building
with doctored documentation.
No, no, no, no, no.
That's my pass
from the last time I was here,
it just had the wrong date.
I changed the date, which
was actually very easy.
Very, very easy.
RYAN: Mr. Sneed!
We're in the midst of a crisis.
I don't have time for this.
If you want to speak
to one of my agents,
I recommend you call first.
No, no, wait, wait! Wait.
The missing plane?
I saw it on the news today.
It just vanished?
I think I can help you
figure out why.
And you stand right here.
Okay?
Everyone is in position,
whenever you're ready.
Okay, turning it on now.
(blipping,
low electronic squealing)
Mark, am I blocking your signal?
No, still green.
Amy?
All this to figure out how
our missing plane went silent?
Oh, hey, Elijah.
I'll tell you,
that boss of yours--
she is a hell of a woman.
She put me
through the wringer
before she'd even
let me come up here.
She's not a huge fan
of uninvited guests.
Oh, she is a force
to be reckoned with.
Artie?
What is all this?
Oh, this is great.
What I have done
is devised a way
to bring the plane to us.
I reconstructed
the entire plane, Flight 272.
If you look over here,
this is the left wing,
which stretches out
across Pennsylvania Avenue.
And right now,
I'm standing on the engine.
You kind of have
to use your imagination.
And you'll notice
that each one of these techs
is holding various
different pieces
of communication equipment
that will be found
on Flight 272.
And I'm holding
a signal jammer.
It can block a wide range
of radio frequencies.
Take that thing
to a movie theater,
and no one around you will be
getting any phone calls.
And that signal jammer explains
why our plane is invisible.
Our hijacker has a device
like this on board.
Well, anyone sitting in the
first 15 rows of the airplane,
with a signal jammer like this,
is gonna block all
the instruments in the cockpit.
Which would render
all the radios useless.
But I'm sensing
there's a bigger issue here.
Guys?
Amy, still nothing?
Mark, am I blocking
your signal?
No?
Engine manufacturers
equip their engines
with self-diagnostic tools that
wirelessly talk to the ground.
Air traffic control should be
getting updates from them.
But that's just
not the case with Flight 272.
ARTIE: You see,
(clears throat) the plane's
fuselage causes
too much attenuation
so that a common, um,
signal jammer
can't block these
kinds of signals.
So that signal jammer's
not strong enough?
Correct, no.
Artie, why do you know
so much about airplanes?
Uh, Baltimore
RC Aeronautics Club.
Charter Member.
We strive for accuracy,
which, believe me,
takes tremendous
amount of research;
planes schematics, etc.
You'd be surprised
what you can find
if you know--
Got it, got it.
Artie, did you bring
anything strong enough
to reach the engines
through the fuselage?
Maybe. Um...
Let's see, uh...
I just got to find--
Aha!
(grunts)
This is what we call
a white noise generator.
Uh, essentially,
it's a-a, a signal jammer
on steroids.
How do we know it's working?
(jammer beeping quietly)
(alarm beeping)
WOMAN: What's going on?
(staffers murmuring)
Oh, it's working.
It's jamming the signal
right here in CTOC.
MAN: What is this?
(murmuring continues)
This is the only thing
strong enough
to make Flight 272
become invisible.
So, how does someone get that
through airport security
and onto our plane?
We're looking
for anyone on our flight
traveling with a large
piece of equipment.
Anything suspicious at all.
Just found the flight crew.
I'm cueing it up now.
RYAN: Right there.
Our copilot set off
the metal detector.
All right, TSA logs report
that our copilot,
Anthony Briggs,
has an implanted
insulin pump.
Now, Argus personnel file
doesn't have any
mention of diabetes.
Yeah, well that's 'cause
commercial airline
pilots aren't
permitted to be
insulin dependent.
My flying buddies
talk about this.
Pilots with conditions
that should ground them,
they just simply don't tell
the FAA about the diagnosis.
It's doctor/patient
confidentiality.
But TSA doesn't know
about those regulations.
So they just check the paperwork
and let 'em through.
But keeping a secret
from your employer
does not make you a hijacker.
Yeah, well, he
travels light.
He didn't bring that white
noise generator on board.
RAMIREZ: Hey,
I got Edger Miller.
RYAN: The guy who bought
the same-day ticket.
Yeah, I did some more digging
on his travel plans.
Turns out that he's
flying home to Providence
to surprise his mother
for her birthday.
MUNDO:
He's clean.
Guys, I think I got
something here.
Erica Chan,
Chinese national.
Check this out.
According to the TSA log,
Erica had a doctor's note
approving her travel with her
portable oxygen concentrator.
It's a breathing apparatus.
How many healthy-looking
young women in their 20s
suffer from emphysema?
Not many. This is
our white noise generator.
And Erica Chan is our hijacker.
(thunder crashing)
All right, 68 minutes before
that flight runs out of fuel.
That's less than
a quarter of a tank left.
What the hell
is Erica Chan after?
Well, she went to one of
the top universities in China.
She majored in computer science.
Why come to America
and hijack a plane?
Is she a terrorist?
A dozen major U.S. cities
within her reach.
Terrorist MO is
to make a statement.
You hijack a plane to crash it.
You hold passengers hostage,
then you make demands.
None of that's
happened.
Erica Chan has something else
in store for this plane.
RAMIREZ:
I found another intrusion.
Tampa Bay Drugs.
Pharmacy is near the airport.
Erica Chan prescribed herself 20
milligrams of liquid morphine.
That's powerful stuff.
RYAN: Take a little,
it'll knock you out.
You take a lot, it'll kill you.
All right, so Erica
Chan hijacks a plane
and brings along a
powerful sedative.
What's her plan?
The plane was just
the first step.
I think Miss Chan is after
someone on that flight.
MAN:
Thank you.
Hi. Is that seat taken?
Oh, um, here, take the aisle.
The window's always
a little cold.
Thank you.
Mm-hmm.
You know, no matter
what flight I'm on,
I somehow always end up
next to the chatty housewife.
I've had my
fair share.
(polite chuckle) I recommend a good
pair of headphones.
(chuckles)
Oops.
Oh.
Sorry.
I got you.
Thank you.
Here you go.
Thank you.
Okay, this is a white noise
generator, creates static
across a wide range
of frequencies,
overpowering all
other communications.
So this is why we can't
talk to the plane
and the plane
can't talk to us.
Yeah, and we can't
find the plane
because of the white
noise generator.
And we can't get rid
of the white noise generator
because we're not on the plane.
So we need to find something
that's on the plane,
and still operating,
and allows us to communicate
with Flight 272 despite
the white noise generator.
All right.
(wheels squeaking)
Oh, sorry.
I-I guess I could
use some WD-40.
I-I'm sorry.
KRUMITZ: Yes.
Wait a minute.
Artie, that's it!
It...
Okay, it's-it's
a high-pitched squeak.
What-what-what did I miss?
I don't know, but I love it when
he's excited like this, Artie.
(wheels squeaking)
Ah! Uh...
Ms. Ryan?
Ms. Ryan, I-I wanted to
apologize again for barging in.
Oh, that's
all right, Artie.
This time.
To the point, I was
wondering if maybe, uh,
I could offer you
and your team my services
on a more official level.
What I'm trying
to say is:
do you take on, um, civilian
partners-- consultants?
Our budget's a little
tight at this time.
Uh, I get it,
I really do.
I'm very affordable;
ridiculously so.
I was thinking maybe I could
share some of my specialties
and maybe pick up
a few new ones.
You've got very smart
people that work here.
We could think of it as a kind
of a... um, an internship.
You see, I really
just enjoy
hanging around with you guys,
and I was looking forward
to maybe getting
to know you better.
RAMIREZ:
Avery?
There's a U.S. marshal
that needs to talk to you.
Uh, I'll take
the call in my office.
Actually,
she's here.
She's coming up.
Thank you.
You're welcome.
Deputy Director,
my office found
a complication with
your missing plane.
I've got a U.S. marshal
on board, Irvin Minkler.
Flying under
a pseudonym, I assume,
which is why a marshal didn't
come up on the flight manifest.
I really can't
disclose...
Ms. Stoller, I'm not interested
in DoJ protocol right now.
Mr. Minkler is on the job,
or you wouldn't be here.
So is it witness protection,
or is it prisoner transport?
The nature of this particular
case is very sensitive.
Witness protection it is.
We have reason to believe
that this woman is targeting
someone on our
missing flight.
Erica Chan?
If this woman is
on that flight,
you can be sure she's there
to kill my witness.
STOLLER: Erica Chan's target
is a 16-year-old girl
named Natalie Roth.
She was taking out the trash in
the alley behind her apartment
and witnessed a murder.
Now, I'm breaking protocol here,
but she's been living under
the alias Rebecca Taylor.
RYAN: I know that
name, Rebecca Taylor.
She's one of the girls coming
back from that volleyball trip.
STOLLER: Yeah,
we reluctantly agreed
to let her go on
this trip for school.
We thought we could
keep her safe.
A young girl
witnesses a murder,
and she and her entire family
end up in witness protection?
The murderer in question
is a lieutenant
in the Chinese Triads.
They made sure
three other witnesses
turned up dead
in the last year alone.
And Erica Chan's trying
to make that an even four.
She managed to track down
a witness, hijack a plane--
how far will she go
to kill Rebecca Taylor?
The Triads don't like
to be disappointed.
She will kill her mark
or die trying.
Like Artie's squeaky cart,
the missing plane's in-flight
entertainment system
communicates at a
very high frequency.
We should be able
to hear that frequency
over the white
noise generator.
All right, so the
plane's squeaking.
We just need
to listen.
KRUMITZ: Exactly. And using
ground stations and satellites,
(radar pinging)
we should be able to hear it.
Well, what exactly
are we listening for?
Anything transmitting
at 30,000 feet.
Wait a minute, guys,
we have a bigger problem here.
Anthony Briggs,
the copilot--
he's got an implanted
insulin pump.
It communicates with a receiver
using radio frequencies.
KRUMITZ: You're right.
The white noise generator
would interfere with that.
Which is definitely
not good.
I mean, his device could just
decide to empty its contents.
We're talking a lethal dose
of insulin for the copilot.
Would the copilot even
know what was happening?
I mean,
could he stop it?
Not until it's too late.
We need to find that plane and
get that man to a hospital.
Avery, I have
more bad news.
Wait, we're on course,
but this can't be right.
They've got us hundreds
of miles off the shoreline,
when we should be heading
in for a landing.
I need a...
I need...
Anthony. Anthony.
I need a shot.
(syringe rattles onto floor)
Anthony!
Anthony!
(syringe clatters onto floor)
(sighing heavily)
(radar pinging)
KRUMITZ: We got it.
We've located the plane's
entertainment system's
frequency.
We found Flight 272.
NELSON: All right, pulling up
a live satellite image
of its location now.
It's confirmed, Colonel,
send them out.
Pentagon's scrambling
fighter jets.
They should make contact
with the airline pilot
within minutes.
Something's troubling you.
What is Erica Chan waiting for?
She's on that plane,
she's within striking distance
of her target.
If she'd already killed
Rebecca Taylor,
she'd want that plane
to land as soon as possible.
Why is that plane
still airborne?
You're right, the longer
she's in the air,
the higher the chance
she gets caught.
Erica must know that.
Okay, I uncovered
several failed attempts
to hack the WITSEC database.
That's not how Erica
got the flight info.
Instead, she found a weak link:
a low-level marshal
fell victim to a classic
spearfishing campaign.
MUNDO:
Leaked the flight number
and the U.S. marshal
transporting the witness.
What about the witness's name?
I don't see it
anywhere here.
Wait, that's what
Erica's waiting for.
She doesn't know
who the target is.
That's why she diverted the
plane with the flight-plan hack.
She wanted
to make sure
she had enough time
to locate her target.
Rebecca Taylor is traveling
with her volleyball team.
The marshal would keep
his distance tailing,
rather than draw attention.
Marshal's not sitting
with the witness.
And if Erica has identified
the marshal, he's in danger.
We need to find
a way to warn him.
I may have a way to do that.
The same in-flight
entertainment system
we used to track the plane
is equipped with
passenger-to-passenger texting.
Yeah, those things do way more
than just show movies.
You can use those to chat
with friends, order drinks...
Can use it to send the
marshal a warning.
NELSON: I'm on it.
Checking the manifest.
All right, I got it.
He's in seat 7C.
Yeah, wait a minute, though.
We don't know what's
going on up there.
And instead of warning
the air marshal,
we might be alerting Erica
to the fact
that we're on to her.
That's a risk we have to take.
(bell chiming)
(blipping)
KRUMITZ:
We got a response.
"Give me the witness's name,
or I'll drop this plane
out of the sky."
(sighs)
Erica got to the marshal.
We're too late.
This hijacking just turned
into a standoff at 30,000 feet.
FIGHTER PILOT: Negative comms
with aircraft.
Utilizing flashlights
at this time.
Yes, sir, I'll pass that along.
Fighter pilots have made visual
contact with Flight 272's pilot.
They're escorting
him in for a landing.
Make sure they're aware
of the situation.
Report any change in status.
We don't know what Erica Chan
is capable of.
She said she could drop that
plane out of the sky.
We know that she's
a proficient hacker,
but can she do that?
MUNDO:
Air Force pilots are reporting
that Flight 272
is falling, fast.
She saw the jets.
This is her counterattack.
Mayday, mayday.
This is Argus 272.
If anyone is reading me,
we are losing thrust.
(alarm blaring)
Throttle not responding.
My first officer is
in need of medical attention.
We are losing altitude.
Repeat, we are losing altitude.
Can anyone read me?
(passengers gasping, murmuring)
(gasping)
Oh, God!
GIRL:
Are you all right?
(everyone talking at once)
(keypad blipping)
How did Erica just do that?
The only thing
I can think of, uh...
hard-wire in through the plane's
entertainment system.
She must be issuing
commands through
the thrust-management
computer.
Erica has control
of the engines!
ARTIE: (clears throat)
A security researcher
claimed to have done it
successfully,
but the airlines are all
denying that it's possible.
Typical big business:
Deny the problem
and hope that it goes away.
How do we stop
Erica Chan?
We're already in communication
with the in-flight
entertainment system.
I should be able to
kick Erica off.
And if that doesn't work,
what's our backup plan?
(clears throat) Uh, well,
worst-case scenario,
the pilot might be able
to pull the onboard computer,
but that would leave the plane
with only partial hydraulics.
But... he should have
full control
of the engines again.
That would make the plane
tough as hell to fly.
It'd be like
a school bus with wings.
You'd need to be
an incredibly skilled pilot
to bring that plane down safely.
RYAN:
With the copilot sick,
he would have to do it
all by himself.
That doesn't help
his chances.
KRUMITZ:
Artie's right.
The only way to
ensure Erica Chan
can't take control
of the aircraft
is to pull that computer.
Artie, I need to know
exactly what happens
if you unplug a
commercial airliner's
onboard computer
in flight.
If we go this route,
I don't want any surprises.
Yes, ma'am.
Raven, try to kick
Erica off.
I'll buy you time.
Okay.
Krumitz, compose
a message to Ms. Chan.
This is Deputy Director
Avery Ryan. FBI Cyber.
It's time to negotiate.
(typing rapidly)
KRUMITZ: Give me the name
and we all go home.
Doesn't sound like
she's interested.
She sounds in control,
but she's panicking.
Talking to the FBI couldn't have
been part of her plan.
"Give me the name."
That means the she didn't
get the witness's name
from the marshal.
She is out of options;
she needs an out.
Let's see what happens
if we push her.
Erica.
It's over. You've failed.
(sighs) "Either I kill
the witness
or I kill us all.
Your choice."
The fighter pilots have been
given shoot-down authority.
If the plane gets too close
to a metropolitan area,
while still under
Erica Chan's control,
the fighter jets
will fire.
At the speed
they're traveling...
That's less than ten minutes!
(sighs) Raven...
I'm working as fast
as I can.
Even if I do succeed,
there's a bigger problem:
Once I kick Erica off
the plane's system,
there's no way of stopping her
from hacking back in.
We need someone on board to get
her computer away from her.
(blipping)
Ma'am...
I'm gonna need that computer.
Okay.
(passengers screaming)
(alarm blaring)
REYNOLDS: Somebody! Anybody!
Can anybody hear me?
(passengers shouting,
screaming)
Mayday! Mayday!
This is Argus 272.
If anyone is reading me,
I have lost the engines.
I'm gonna do my best
to maintain glide speed.
Fighter pilots
have taken tactical positions,
armed with short-range
air-to-air missiles.
They will fire on that plane
to save lives on the ground.
Tell them to hold off
as long as they can.
Raven, why is that
plane still falling?
Looks like Erica Chan's
final act of vengeance
was to zero out
the plane's thrust.
Pilot won't be able
to overpower the autopilot.
We're out of options.
Artie!
(alarms blaring)
Artie,
how safe is it for the pilot
to unplug that computer?
From what I can tell,
if the pilot disconnects
the onboard computer,
he should be able to regain
full control of the engines
without any undesirable
side effects, but--
he'd have to readjust fast.
That's our plan.
How do we get the pilot
that message?
The entertainment system can't
communicate with the cockpit.
The jets may have a way
to pass that along.
REYNOLDS:
What the hell was that?
That pilot is sending
a distress signal.
We're gonna have to
pull the computer.
What've we got to lose?
Oh!
(passengers screaming)
Is this gonna work?
If this doesn't work,
nothing will.
Fighter jets
are prepared to fire.
REYNOLDS: Come on!
Pilot has regained
control of the plane.
(all cheering, whooping)
That's what
I'm talking ' about!
KRUMITZ:
Oh, yeah!
(gasping)
(sighs with relief)
Yeah!
Yes!
Good work, Mr. Sneed.
Well, good guessing, really,
but... thank you.
(sirens wailing)
(low, indistinct
conversation)
All right, ma'am.
You're gonna need
to come with me.
REYNOLDS:
...and, most importantly,
I'd like to thank everybody
who brought us home today.
I couldn't have done it alone.
It was nice to know we had
a great team on the ground,
watching our backs.
They're the ones who helped me
land my aircraft safely.
(applause)
Should I get you a cot?
Oh! No, no, no, no, no, no.
Uh, uh,
I was leaving.
I promise.
I was just, uh...
just finishing up.
It's a patch for the in-flight
entertainment system.
Get that to the FAA,
and air travel
will be safe once again.
Thanks, Artie.
(laughing softly)
It was a hell of a day.
I'm still buzzing
from that victory.
(laughs)
Whew! I'm, uh,
I was gonna go grab a bite.
Um... can I buy you dinner?
Are you asking me on a date?
Well, you're a powerful,
beautiful woman.
You bet I am.
Artie...
I don't date our consultants.
I get it.
I understand.
Wait.
(laughs)
Does this mean I'm a consultant?
But you have to promise
that you'll call first,
'cause I can't guarantee
that the agents
in the lobby
won't see you or your...
cart as a threat and shoot you.
I understand. Yes.
Yes, ma'am.
Artie,
we're the FBI--
we just handshake.
(laughs):
All right.
Good night.
Good night.
(whirring)
(indistinct chatter)
Hey.
RAVEN: Who!
Ah.
(laughs)
(sighs)
How do I look?
Sharp. Nice wheels.
MUNDO:
Big date?
Uh, sort of. Sort of. Yeah.
Is it cool
if I borrow the drift board?
Yeah, man, no problem--
but I thought Rosalyn couldn't make it.
Well, she couldn't, but we...
made other arrangements.
Figured who needs patience
when we have technology.
So I'm taking her on a
video chat tour of DC
at night.
(chuckles)
Nice!
Ah!
(electronic dinging)
Oh... ah!
(chuckles)
Okay, she's ready.
Shirt... good?
Aw, you got this, Krummy.
Yeah.
Okay, okay, okay.
Hey!
Hey, how are you?
Okay, ready?
Ready to get started?
All right, this is CTOC.
You remember CTOC. Okay.
These are my friends.
Hey.
KRUMITZ: Say hi.
Hey, there!
Coop!
That's, uh...
this is Artie.
Um... Artie's
just leaving.
Oh, hey. You want me
to walk you out?
MUNDO: Our little Krummy
went and got himself
a video chat date.
(sighs)
NELSON: Charm her from afar,
then go in for the kill!
That boy, Krummy.
See, that's my...
that's my, that's my dawn!
Come on.
K R S T E V
Argus Air 272,
deviation has not been approved.
Please return
to previously cleared route.
Do you read me?
Are you still there?
(static crackling)
Argus Air 272,
weather at current heading.
Return to cleared route.
Do you copy?
(rumbling)
Washington Center,
Argus 272.
We're experiencing
some turbulence.
Please advise. Over.
All we're getting
is static.
What, is it naptime down there?
(bell chiming)
Argus 272, if you read
transmission, ident. Ident.
(staticky communication)
(alarms beeping) Whoa.
Whoa. Whoa, whoa.
Wh-What is this?
I'll cross-check
the instruments.
See what that was all about.
Washington Center, Argus 272.
(staticky):
...read... how do you read?
Argus 272,
weather at current heading.
(alarm blaring)
I need a supervisor.
Looks like we've got
an ADS-B malfunction.
I've got phantom planes here.
They're all
Argus 272.
Argus Air 272, ident.
Ident immediately.
Get the Domestic Events Network
on the phone, ASAP.
We've got
an emergency situation.
This is your captain speaking.
We are approaching
a band of severe weather.
Fasten your seatbelts
and remain seated.
Thank you.
Transmission ident.
Do you read me?
Sir, I have them on the line.
Argus Air 272, do you read me?
If you read transmission, id...
Sir?
Sir, the planes just
disappeared. All the planes.
Argus Air Flight 272
is no longer on my scope.
SUPERVISOR:
What?
Flight 272 is gone.
Flight 272 took off
this afternoon from Tampa,
heading for Rhode Island.
We lost contact over
Wilmington, North Carolina,
an hour and a half ago.
Plane just disappeared.
Plane relay any indication
of mechanical failure?
Technical malfunction?
Not that I know of.
The flight was just off course.
I tried to contact the pilot,
and suddenly, phantom planes
appeared on the scope.
SUPERVISOR:
Our I.T. department
couldn't explain
the phantom planes,
but they did uncover
a cyber intrusion,
which we told you about.
Someone assigned Flight 272
an unauthenticated flight plan
right before takeoff.
Pilot couldn't have known.
That's why the plane veered off
course before it disappeared.
That plane wasn't
supposed to be
anywhere near that storm.
Any other planes
reporting problems?
No, but we're double checking.
If the hacker already intruded
into the system,
it's possible he has
a backdoor into the NAS,
and every flight
in the sky is vulnerable.
NELSON:
Come on, Krummy.
Why walk when you can glide?
I mean, look at this.
Huh?
Ooh.
With that Agent Pierce?
Rosalyn is in town
for a conference
and I'm her only friend in DC.
Look at Krummy.
Making moves.
Yeah.
Huh?
(chuckles)
NELSON:
Oh, snap.
That's Emmitt Smith.
That's Emmitt Sm...
Yo, DB is going
to be so jealous
he was out of
town for this.
Hey, Emmitt!
Hey, Emmitt!
Emmitt!
Oh, Emmitt!
Hey, man!
What's up? What's up?
Brody Nelson.
Brody? How you doing?
Yeah, yeah, yeah.
Daniel Krumitz.
Daniel.
Diehard
Redskins fan,
but I can still
appreciate
the NFL's all-time
leading rusher.
Thank you, man.
Man, I like
those wheels.
Oh, thanks, man.
Self-balancing electric scooter.
How fast can that thing go?
Only one way
to find out.
Think you still got
that first step?
You know it.
But, uh... I am in
my dress shoes.
Mmm, okay.
Go!
(whoops)
To the 40!
To the 30!
(whoops)
EMMITT: That's your friend, huh?
We work together.
But if you didn't
have dress shoes on,
would you have
raced him?
You know, when you
have the skills,
you got to put 'em to use.
Hmm.
What about you and me?
What about it?
In socks.
Bad idea. Sorry.
(phone chiming)
Come on, man.
Nelson!
We gotta go!
Uh...
Okay.
Bye, Emmitt Smith!
MAN: Hey, can I have your autograph?
WOMAN: Look, it's Emmitt Smith!
REPORTER:
An Argus Airline flight
has been reported missing
with 75 people on board.
A spokesman for the airline
has confirmed
that search and rescue teams...
REPORTER 2: ...friends and
family have gathered
outside the airport
and are demanding answers.
REPORTER 2: We're going live
now to T.F. Green Airport.
The flight was traveling
from Tampa, Florida,
to Providence, Rhode Island,
when it went missing.
Attempts to contact the plane
have not been successful.
We are coordinating with
the FAA, Department of Defense,
Homeland Security and NORAD.
Director! Director!
Director!
What about reports
of a potential crash site
in North Carolina?
Any rumors of a crash are false.
Deputy Director Ryan
of the Cyber Division
is prepared to fill you in
with what we do know.
Our investigation has uncovered
a cyber intrusion in the NAS
flight plan database.
We're currently assessing
if any other aircraft
has been affected.
At this point,
no one has come forward
to take credit for the hack.
But we do know
that the missing plane
was intentionally diverted
from its path.
But as of now, we simply have
no idea where Flight 272 is.
(reporters clamoring)
Well, you need to find out.
Our children are on that plane.
My daughter Emily
and her teammates.
What are you going
to do to find them?
I know that this is hard.
I know you need answers
and I wish I had them.
But our investigation is still
in its preliminary stages.
But you need to know
that it is everyone's
top priority
to find Flight 272.
Radar is searching.
Jets have been scrambled.
And I will do everything
in my power to find that plane.
And to find your children.
Question. Question.
Director...
Question! Director...
Question.
CONTROLLER: Monument Air 625,
Washington Center...
(sighs)
Krummy, this is
crazy, man.
It's like Malaysia Air
all over again.
I'm not finding anything that
explains those phantom planes.
Equipment
all checks out.
Yeah. Here, too.
Look, I don't think
the scope is to blame.
I mean, the FAA would have
figured that out themselves.
I mean, the fact that
they needed to call us at all
means that the intrusion's
much more sophisticated.
I'm thinking that Flight 272's
onboard GPS device
may have been tampered with.
Okay, wait a minute.
One device can cause 50 separate
phantom planes to appear?
Well, technically, if it can
create one, it can create 50,
and we both know that there's
not 50 Flight 272s
flying around up there.
The plane was flying
directly into bad weather.
Could a lightning strike
cause this kind of glitch?
No, I already ruled that out.
It had to be deliberate.
The plane's GPS device
should be telling us
exactly where
the plane actually was.
Yeah. Instead, it created
50 phantom planes
spread across a ten-mile radius.
And every one
of the phantom planes
is being broadcast
by a single GPS device.
Okay.
I'm gonna triangulate
the last known location
of the GPS device and I should
get the last known location
of the real Flight 272.
Looks like it crashed
right there.
Wilmington, North Carolina.
That elevation's low.
Too low.
(sirens wailing, horn blaring)
Director, I'm approaching
the crash site now.
There's nothing here.
ELIJAH: Krumitz, I thought there was
supposed to be a plane crash.
What, exactly,
are we looking for?
KRUMITZ: I'm sort of hoping
I'll know it when I see it.
I thought the aircraft's
GPS device
was broadcasting
those phantom planes,
but clearly,
I was wrong about that.
What else could do that?
Whatever it is,
it's in this field
and we just need to find it.
ELIJAH:
Tire tracks.
Somebody drove
through here recently.
Last couple of days,
I'd say.
Something was unloaded here,
and all that's left
are a bunch of cords
and empty cases.
(rustling, clinking)
I think we just found
our plane crash.
♪ ♪
Local units are running down
the tire tracks
we came across in North
Carolina, but it's a long shot.
How are you guys coming along?
This is what you and I
pulled out of that tree.
It's an inflatable antenna.
Like a GATR.
Military uses them during
ground combat for communication.
It's lightweight,
portable, powerful.
What was this one
being used for?
Software-defined radio.
He's a clever bastard.
Taking advantage of
Air Traffic Control's reliance
on GPS to monitor planes.
ADS-B.
It's the latest and greatest
in air traffic surveillance.
Just like in your car
or on your phone.
Tells the pilot
where he's going.
Tells Air Traffic Control
exactly where
the plane is located.
Yeah, but the
system was built
for convenience, not security.
An SD radio,
like this one here,
can spoof GPS signals.
NELSON: It could tell
Air Traffic Control
that there's planes
in the sky
even when there are none.
And Air Traffic Control
can't tell the difference
between the real planes
and these fake ones.
NELSON: Dot on the screen
is a dot on the screen.
It's all the same to them.
It's a huge vulnerability
and someone just exploited it.
ELIJAH:
So first, our hacker
assigned Flight 272
an unauthorized flight plan.
The pilot, unaware of the hack,
did what he was supposed to do,
and diverted the plane,
per those instructions.
Next, they spoofed
a bunch of signals
so Air Traffic Control couldn't
keep track of the real plane,
and in the chaos,
Flight 272
slipped away.
We're not just looking
for a missing plane.
This is a cyber hijacking.
♪ CSI Cyber 2x11 ♪
404: Flight Not Found
Original Air Date on January 10, 2016
♪ I know you've deceived me,
now here's a surprise ♪
♪ I know that you have, 'cause
there's magic in my eyes ♪
♪ I can see
for miles and miles ♪
♪ I can see for miles
and miles ♪
♪ I can see
for miles and miles ♪
♪ And miles... ♪
♪ Oh, yeah. ♪
K R S T E V
Flight 272 has been missing
for a little over three hours.
This is the distance
a plane could've traveled
during that time.
KRUMITZ: Current search area
is half a million square miles.
Plane disappeared
into bad weather.
There's no way of telling
what direction it's heading now.
The SD radio created
50 fake planes
in order to mask which direction
the real Flight 272
was heading when it vanished.
It's like a "Zerg Rush"--
it's a gaming strategy,
where you implement a swarm to
overtake a stronger opponent.
But in this case,
our cyber hijacker
used spoofed signals
to confuse air traffic control.
And because of the chaos,
there's no way of knowing
what the plane's
final heading was.
Jets were scrambled,
but with visibility so low,
the plane was
long gone.
Good news--
no plane crashes
or signs of debris
have been reported.
So as far as we know,
Flight 272 is still airborne.
Bad news-- they now have less
than two hours of fuel left.
And the pilot has no idea that
the flight plan's been altered,
so he'll be running out of fuel
with no plan on where to land.
MUNDO: Coast Guard search
and rescue is out there.
Every plane in the sky
is on the lookout,
but time is not on our side.
How can a commercial airplane
just vanish?
Ground-based radar can detect
a plane flying over land
or up to 200 miles
off the coast,
and they've come up empty,
so we're guessing that
this flight is out to sea.
KRUMITZ: The real
weird thing is
the plane's GPS signal should
still work and it's not.
Along with half a dozen
other communication devices
used to talk to the
ground, I mean,
the plane went silent.
Could the pilot have
turned that off?
GPS locators all come on
when the plane does.
Pilot can't just
disconnect them.
Our missing plane
went completely dark.
It just, it makes no sense.
Is there some kind
of object or-or device
that could interfere
with all those signals?
Possibly, yeah.
Something could be
running interference,
like a, like a
signal disrupter.
It would have to be
physically brought on board
by somebody who's
on that plane now.
MUNDO:
71 passengers
and four crew members.
That means we have 75 suspects.
We have a possible hijacker
on that flight.
We need to single them out.
Pull up the flight manifest.
We're looking for outliers;
anyone who stands out.
All right, how about
the guy in 2F?
Edger Miller--
bought his ticket
at the airport today.
What do we know about
Edger Miller on social media?
"Edger Miller-- single."
Occupation listed--
mechanical engineer.
And he's worked
at the telephone company
for two years.
Well, an engineer might know
a little something
about hijacking a plane.
Think that it might be
a domestic terrorist?
I'm not ruling anything out.
Okay, check out 12C.
Paul Lammers.
He's on a one-way ticket.
No return booked.
RAMIREZ:
Paul's ex-military.
Started working
in the private sector
two years ago.
Married, three children.
Okay, recent post
says that he was heading
to Providence to bid
on a new construction job.
Well, that explains
the open-ended travel.
He's not sure how long
he'll be there.
How about Erica Chan, seat 10D?
Flying on a Chinese passport.
Immigration
has her visiting
the United States
on a student visa.
(thunder crashing)
RAMIREZ: No American social
media presence that I can find.
I'll have Interpol check Renren,
see if she posted
anything at home.
Rows four and five.
Those are the high schoolers
returning home.
Volleyball team.
Our children are on that plane.
My daughter Emily
and her teammates.
There's eight students
and two chaperones.
RAMIREZ: They can't
possibly be involved.
RYAN: Right now,
everyone's a suspect.
What do we know about our pilot?
Veteran pilot.
He's been with Argus
Air for 12 years.
Personnel file is,
well, spotless.
Okay, recent
relationship status--
married to divorced to single.
You think
Richard Reynolds cracked?
Maybe another
German Wings situation?
You know, pilot kills himself
along with everybody
else on board?
RYAN: I don't
know about that.
Look at all this support
he's receiving.
Friends, family--
they're all commenting
with love and support.
And changing
his relationship status
to single means
that he is healing.
Richard's moving on.
And as far as we know,
pilot's following protocol.
Lost radio communication--
he'll stick to his flight plan.
Our cyber hijackers
thought this through.
This is meticulously
planned, well-executed,
but high-risk.
They have to be on board
to make this work.
What would motivate
someone to do that?
No one's taking credit
for the attack.
Yeah, and no one's defecting
from Florida to Rhode Island.
I doubt it's political.
Then what is so important
about Flight 272?
Argus 272 at flight level 350.
How do you read, over?
(static crackling)
There's nothing.
No radio,
even the datalink's a bust.
(thunder rumbling)
The storm's not
letting up, is it?
Well, I've flown
through worse weather.
Just stick to the flight
plan, we should be fine.
We start diverting
on our own,
we're liable to end up in
someone else's airspace,
and that's how midair
collisions happen.
You all right?
Yeah, yeah.
Just... heart's racing.
I feel like my blood sugar's
a little low.
I'm gonna have
a flight attendant
bring me an orange juice.
Well, listen,
without radio contact,
we're virtually
flying blind.
Do whatever you got to do.
I need you at 100%.
ARTIE: This is just
a big misunderstanding!
MAN: Sir, you're gonna
have to calm down!
Talk to Agent Mundo, Agent
Krumitz-- they can vouch for me!
You're gonna have to talk to me.
Oh, you're Deputy Director Ryan.
It's a pleasure
to meet you.
I've heard great things
about you.
All right, on your feet.
I'm-I'm, uh, Artie Sneed.
Artie?
Uh, has anyone mentioned me?
I think I've heard
your name before.
I just didn't know
that you were
visiting us today.
Ma'am, this man was attempting
to enter the building
with doctored documentation.
No, no, no, no, no.
That's my pass
from the last time I was here,
it just had the wrong date.
I changed the date, which
was actually very easy.
Very, very easy.
RYAN: Mr. Sneed!
We're in the midst of a crisis.
I don't have time for this.
If you want to speak
to one of my agents,
I recommend you call first.
No, no, wait, wait! Wait.
The missing plane?
I saw it on the news today.
It just vanished?
I think I can help you
figure out why.
And you stand right here.
Okay?
Everyone is in position,
whenever you're ready.
Okay, turning it on now.
(blipping,
low electronic squealing)
Mark, am I blocking your signal?
No, still green.
Amy?
All this to figure out how
our missing plane went silent?
Oh, hey, Elijah.
I'll tell you,
that boss of yours--
she is a hell of a woman.
She put me
through the wringer
before she'd even
let me come up here.
She's not a huge fan
of uninvited guests.
Oh, she is a force
to be reckoned with.
Artie?
What is all this?
Oh, this is great.
What I have done
is devised a way
to bring the plane to us.
I reconstructed
the entire plane, Flight 272.
If you look over here,
this is the left wing,
which stretches out
across Pennsylvania Avenue.
And right now,
I'm standing on the engine.
You kind of have
to use your imagination.
And you'll notice
that each one of these techs
is holding various
different pieces
of communication equipment
that will be found
on Flight 272.
And I'm holding
a signal jammer.
It can block a wide range
of radio frequencies.
Take that thing
to a movie theater,
and no one around you will be
getting any phone calls.
And that signal jammer explains
why our plane is invisible.
Our hijacker has a device
like this on board.
Well, anyone sitting in the
first 15 rows of the airplane,
with a signal jammer like this,
is gonna block all
the instruments in the cockpit.
Which would render
all the radios useless.
But I'm sensing
there's a bigger issue here.
Guys?
Amy, still nothing?
Mark, am I blocking
your signal?
No?
Engine manufacturers
equip their engines
with self-diagnostic tools that
wirelessly talk to the ground.
Air traffic control should be
getting updates from them.
But that's just
not the case with Flight 272.
ARTIE: You see,
(clears throat) the plane's
fuselage causes
too much attenuation
so that a common, um,
signal jammer
can't block these
kinds of signals.
So that signal jammer's
not strong enough?
Correct, no.
Artie, why do you know
so much about airplanes?
Uh, Baltimore
RC Aeronautics Club.
Charter Member.
We strive for accuracy,
which, believe me,
takes tremendous
amount of research;
planes schematics, etc.
You'd be surprised
what you can find
if you know--
Got it, got it.
Artie, did you bring
anything strong enough
to reach the engines
through the fuselage?
Maybe. Um...
Let's see, uh...
I just got to find--
Aha!
(grunts)
This is what we call
a white noise generator.
Uh, essentially,
it's a-a, a signal jammer
on steroids.
How do we know it's working?
(jammer beeping quietly)
(alarm beeping)
WOMAN: What's going on?
(staffers murmuring)
Oh, it's working.
It's jamming the signal
right here in CTOC.
MAN: What is this?
(murmuring continues)
This is the only thing
strong enough
to make Flight 272
become invisible.
So, how does someone get that
through airport security
and onto our plane?
We're looking
for anyone on our flight
traveling with a large
piece of equipment.
Anything suspicious at all.
Just found the flight crew.
I'm cueing it up now.
RYAN: Right there.
Our copilot set off
the metal detector.
All right, TSA logs report
that our copilot,
Anthony Briggs,
has an implanted
insulin pump.
Now, Argus personnel file
doesn't have any
mention of diabetes.
Yeah, well that's 'cause
commercial airline
pilots aren't
permitted to be
insulin dependent.
My flying buddies
talk about this.
Pilots with conditions
that should ground them,
they just simply don't tell
the FAA about the diagnosis.
It's doctor/patient
confidentiality.
But TSA doesn't know
about those regulations.
So they just check the paperwork
and let 'em through.
But keeping a secret
from your employer
does not make you a hijacker.
Yeah, well, he
travels light.
He didn't bring that white
noise generator on board.
RAMIREZ: Hey,
I got Edger Miller.
RYAN: The guy who bought
the same-day ticket.
Yeah, I did some more digging
on his travel plans.
Turns out that he's
flying home to Providence
to surprise his mother
for her birthday.
MUNDO:
He's clean.
Guys, I think I got
something here.
Erica Chan,
Chinese national.
Check this out.
According to the TSA log,
Erica had a doctor's note
approving her travel with her
portable oxygen concentrator.
It's a breathing apparatus.
How many healthy-looking
young women in their 20s
suffer from emphysema?
Not many. This is
our white noise generator.
And Erica Chan is our hijacker.
(thunder crashing)
All right, 68 minutes before
that flight runs out of fuel.
That's less than
a quarter of a tank left.
What the hell
is Erica Chan after?
Well, she went to one of
the top universities in China.
She majored in computer science.
Why come to America
and hijack a plane?
Is she a terrorist?
A dozen major U.S. cities
within her reach.
Terrorist MO is
to make a statement.
You hijack a plane to crash it.
You hold passengers hostage,
then you make demands.
None of that's
happened.
Erica Chan has something else
in store for this plane.
RAMIREZ:
I found another intrusion.
Tampa Bay Drugs.
Pharmacy is near the airport.
Erica Chan prescribed herself 20
milligrams of liquid morphine.
That's powerful stuff.
RYAN: Take a little,
it'll knock you out.
You take a lot, it'll kill you.
All right, so Erica
Chan hijacks a plane
and brings along a
powerful sedative.
What's her plan?
The plane was just
the first step.
I think Miss Chan is after
someone on that flight.
MAN:
Thank you.
Hi. Is that seat taken?
Oh, um, here, take the aisle.
The window's always
a little cold.
Thank you.
Mm-hmm.
You know, no matter
what flight I'm on,
I somehow always end up
next to the chatty housewife.
I've had my
fair share.
(polite chuckle) I recommend a good
pair of headphones.
(chuckles)
Oops.
Oh.
Sorry.
I got you.
Thank you.
Here you go.
Thank you.
Okay, this is a white noise
generator, creates static
across a wide range
of frequencies,
overpowering all
other communications.
So this is why we can't
talk to the plane
and the plane
can't talk to us.
Yeah, and we can't
find the plane
because of the white
noise generator.
And we can't get rid
of the white noise generator
because we're not on the plane.
So we need to find something
that's on the plane,
and still operating,
and allows us to communicate
with Flight 272 despite
the white noise generator.
All right.
(wheels squeaking)
Oh, sorry.
I-I guess I could
use some WD-40.
I-I'm sorry.
KRUMITZ: Yes.
Wait a minute.
Artie, that's it!
It...
Okay, it's-it's
a high-pitched squeak.
What-what-what did I miss?
I don't know, but I love it when
he's excited like this, Artie.
(wheels squeaking)
Ah! Uh...
Ms. Ryan?
Ms. Ryan, I-I wanted to
apologize again for barging in.
Oh, that's
all right, Artie.
This time.
To the point, I was
wondering if maybe, uh,
I could offer you
and your team my services
on a more official level.
What I'm trying
to say is:
do you take on, um, civilian
partners-- consultants?
Our budget's a little
tight at this time.
Uh, I get it,
I really do.
I'm very affordable;
ridiculously so.
I was thinking maybe I could
share some of my specialties
and maybe pick up
a few new ones.
You've got very smart
people that work here.
We could think of it as a kind
of a... um, an internship.
You see, I really
just enjoy
hanging around with you guys,
and I was looking forward
to maybe getting
to know you better.
RAMIREZ:
Avery?
There's a U.S. marshal
that needs to talk to you.
Uh, I'll take
the call in my office.
Actually,
she's here.
She's coming up.
Thank you.
You're welcome.
Deputy Director,
my office found
a complication with
your missing plane.
I've got a U.S. marshal
on board, Irvin Minkler.
Flying under
a pseudonym, I assume,
which is why a marshal didn't
come up on the flight manifest.
I really can't
disclose...
Ms. Stoller, I'm not interested
in DoJ protocol right now.
Mr. Minkler is on the job,
or you wouldn't be here.
So is it witness protection,
or is it prisoner transport?
The nature of this particular
case is very sensitive.
Witness protection it is.
We have reason to believe
that this woman is targeting
someone on our
missing flight.
Erica Chan?
If this woman is
on that flight,
you can be sure she's there
to kill my witness.
STOLLER: Erica Chan's target
is a 16-year-old girl
named Natalie Roth.
She was taking out the trash in
the alley behind her apartment
and witnessed a murder.
Now, I'm breaking protocol here,
but she's been living under
the alias Rebecca Taylor.
RYAN: I know that
name, Rebecca Taylor.
She's one of the girls coming
back from that volleyball trip.
STOLLER: Yeah,
we reluctantly agreed
to let her go on
this trip for school.
We thought we could
keep her safe.
A young girl
witnesses a murder,
and she and her entire family
end up in witness protection?
The murderer in question
is a lieutenant
in the Chinese Triads.
They made sure
three other witnesses
turned up dead
in the last year alone.
And Erica Chan's trying
to make that an even four.
She managed to track down
a witness, hijack a plane--
how far will she go
to kill Rebecca Taylor?
The Triads don't like
to be disappointed.
She will kill her mark
or die trying.
Like Artie's squeaky cart,
the missing plane's in-flight
entertainment system
communicates at a
very high frequency.
We should be able
to hear that frequency
over the white
noise generator.
All right, so the
plane's squeaking.
We just need
to listen.
KRUMITZ: Exactly. And using
ground stations and satellites,
(radar pinging)
we should be able to hear it.
Well, what exactly
are we listening for?
Anything transmitting
at 30,000 feet.
Wait a minute, guys,
we have a bigger problem here.
Anthony Briggs,
the copilot--
he's got an implanted
insulin pump.
It communicates with a receiver
using radio frequencies.
KRUMITZ: You're right.
The white noise generator
would interfere with that.
Which is definitely
not good.
I mean, his device could just
decide to empty its contents.
We're talking a lethal dose
of insulin for the copilot.
Would the copilot even
know what was happening?
I mean,
could he stop it?
Not until it's too late.
We need to find that plane and
get that man to a hospital.
Avery, I have
more bad news.
Wait, we're on course,
but this can't be right.
They've got us hundreds
of miles off the shoreline,
when we should be heading
in for a landing.
I need a...
I need...
Anthony. Anthony.
I need a shot.
(syringe rattles onto floor)
Anthony!
Anthony!
(syringe clatters onto floor)
(sighing heavily)
(radar pinging)
KRUMITZ: We got it.
We've located the plane's
entertainment system's
frequency.
We found Flight 272.
NELSON: All right, pulling up
a live satellite image
of its location now.
It's confirmed, Colonel,
send them out.
Pentagon's scrambling
fighter jets.
They should make contact
with the airline pilot
within minutes.
Something's troubling you.
What is Erica Chan waiting for?
She's on that plane,
she's within striking distance
of her target.
If she'd already killed
Rebecca Taylor,
she'd want that plane
to land as soon as possible.
Why is that plane
still airborne?
You're right, the longer
she's in the air,
the higher the chance
she gets caught.
Erica must know that.
Okay, I uncovered
several failed attempts
to hack the WITSEC database.
That's not how Erica
got the flight info.
Instead, she found a weak link:
a low-level marshal
fell victim to a classic
spearfishing campaign.
MUNDO:
Leaked the flight number
and the U.S. marshal
transporting the witness.
What about the witness's name?
I don't see it
anywhere here.
Wait, that's what
Erica's waiting for.
She doesn't know
who the target is.
That's why she diverted the
plane with the flight-plan hack.
She wanted
to make sure
she had enough time
to locate her target.
Rebecca Taylor is traveling
with her volleyball team.
The marshal would keep
his distance tailing,
rather than draw attention.
Marshal's not sitting
with the witness.
And if Erica has identified
the marshal, he's in danger.
We need to find
a way to warn him.
I may have a way to do that.
The same in-flight
entertainment system
we used to track the plane
is equipped with
passenger-to-passenger texting.
Yeah, those things do way more
than just show movies.
You can use those to chat
with friends, order drinks...
Can use it to send the
marshal a warning.
NELSON: I'm on it.
Checking the manifest.
All right, I got it.
He's in seat 7C.
Yeah, wait a minute, though.
We don't know what's
going on up there.
And instead of warning
the air marshal,
we might be alerting Erica
to the fact
that we're on to her.
That's a risk we have to take.
(bell chiming)
(blipping)
KRUMITZ:
We got a response.
"Give me the witness's name,
or I'll drop this plane
out of the sky."
(sighs)
Erica got to the marshal.
We're too late.
This hijacking just turned
into a standoff at 30,000 feet.
FIGHTER PILOT: Negative comms
with aircraft.
Utilizing flashlights
at this time.
Yes, sir, I'll pass that along.
Fighter pilots have made visual
contact with Flight 272's pilot.
They're escorting
him in for a landing.
Make sure they're aware
of the situation.
Report any change in status.
We don't know what Erica Chan
is capable of.
She said she could drop that
plane out of the sky.
We know that she's
a proficient hacker,
but can she do that?
MUNDO:
Air Force pilots are reporting
that Flight 272
is falling, fast.
She saw the jets.
This is her counterattack.
Mayday, mayday.
This is Argus 272.
If anyone is reading me,
we are losing thrust.
(alarm blaring)
Throttle not responding.
My first officer is
in need of medical attention.
We are losing altitude.
Repeat, we are losing altitude.
Can anyone read me?
(passengers gasping, murmuring)
(gasping)
Oh, God!
GIRL:
Are you all right?
(everyone talking at once)
(keypad blipping)
How did Erica just do that?
The only thing
I can think of, uh...
hard-wire in through the plane's
entertainment system.
She must be issuing
commands through
the thrust-management
computer.
Erica has control
of the engines!
ARTIE: (clears throat)
A security researcher
claimed to have done it
successfully,
but the airlines are all
denying that it's possible.
Typical big business:
Deny the problem
and hope that it goes away.
How do we stop
Erica Chan?
We're already in communication
with the in-flight
entertainment system.
I should be able to
kick Erica off.
And if that doesn't work,
what's our backup plan?
(clears throat) Uh, well,
worst-case scenario,
the pilot might be able
to pull the onboard computer,
but that would leave the plane
with only partial hydraulics.
But... he should have
full control
of the engines again.
That would make the plane
tough as hell to fly.
It'd be like
a school bus with wings.
You'd need to be
an incredibly skilled pilot
to bring that plane down safely.
RYAN:
With the copilot sick,
he would have to do it
all by himself.
That doesn't help
his chances.
KRUMITZ:
Artie's right.
The only way to
ensure Erica Chan
can't take control
of the aircraft
is to pull that computer.
Artie, I need to know
exactly what happens
if you unplug a
commercial airliner's
onboard computer
in flight.
If we go this route,
I don't want any surprises.
Yes, ma'am.
Raven, try to kick
Erica off.
I'll buy you time.
Okay.
Krumitz, compose
a message to Ms. Chan.
This is Deputy Director
Avery Ryan. FBI Cyber.
It's time to negotiate.
(typing rapidly)
KRUMITZ: Give me the name
and we all go home.
Doesn't sound like
she's interested.
She sounds in control,
but she's panicking.
Talking to the FBI couldn't have
been part of her plan.
"Give me the name."
That means the she didn't
get the witness's name
from the marshal.
She is out of options;
she needs an out.
Let's see what happens
if we push her.
Erica.
It's over. You've failed.
(sighs) "Either I kill
the witness
or I kill us all.
Your choice."
The fighter pilots have been
given shoot-down authority.
If the plane gets too close
to a metropolitan area,
while still under
Erica Chan's control,
the fighter jets
will fire.
At the speed
they're traveling...
That's less than ten minutes!
(sighs) Raven...
I'm working as fast
as I can.
Even if I do succeed,
there's a bigger problem:
Once I kick Erica off
the plane's system,
there's no way of stopping her
from hacking back in.
We need someone on board to get
her computer away from her.
(blipping)
Ma'am...
I'm gonna need that computer.
Okay.
(passengers screaming)
(alarm blaring)
REYNOLDS: Somebody! Anybody!
Can anybody hear me?
(passengers shouting,
screaming)
Mayday! Mayday!
This is Argus 272.
If anyone is reading me,
I have lost the engines.
I'm gonna do my best
to maintain glide speed.
Fighter pilots
have taken tactical positions,
armed with short-range
air-to-air missiles.
They will fire on that plane
to save lives on the ground.
Tell them to hold off
as long as they can.
Raven, why is that
plane still falling?
Looks like Erica Chan's
final act of vengeance
was to zero out
the plane's thrust.
Pilot won't be able
to overpower the autopilot.
We're out of options.
Artie!
(alarms blaring)
Artie,
how safe is it for the pilot
to unplug that computer?
From what I can tell,
if the pilot disconnects
the onboard computer,
he should be able to regain
full control of the engines
without any undesirable
side effects, but--
he'd have to readjust fast.
That's our plan.
How do we get the pilot
that message?
The entertainment system can't
communicate with the cockpit.
The jets may have a way
to pass that along.
REYNOLDS:
What the hell was that?
That pilot is sending
a distress signal.
We're gonna have to
pull the computer.
What've we got to lose?
Oh!
(passengers screaming)
Is this gonna work?
If this doesn't work,
nothing will.
Fighter jets
are prepared to fire.
REYNOLDS: Come on!
Pilot has regained
control of the plane.
(all cheering, whooping)
That's what
I'm talking ' about!
KRUMITZ:
Oh, yeah!
(gasping)
(sighs with relief)
Yeah!
Yes!
Good work, Mr. Sneed.
Well, good guessing, really,
but... thank you.
(sirens wailing)
(low, indistinct
conversation)
All right, ma'am.
You're gonna need
to come with me.
REYNOLDS:
...and, most importantly,
I'd like to thank everybody
who brought us home today.
I couldn't have done it alone.
It was nice to know we had
a great team on the ground,
watching our backs.
They're the ones who helped me
land my aircraft safely.
(applause)
Should I get you a cot?
Oh! No, no, no, no, no, no.
Uh, uh,
I was leaving.
I promise.
I was just, uh...
just finishing up.
It's a patch for the in-flight
entertainment system.
Get that to the FAA,
and air travel
will be safe once again.
Thanks, Artie.
(laughing softly)
It was a hell of a day.
I'm still buzzing
from that victory.
(laughs)
Whew! I'm, uh,
I was gonna go grab a bite.
Um... can I buy you dinner?
Are you asking me on a date?
Well, you're a powerful,
beautiful woman.
You bet I am.
Artie...
I don't date our consultants.
I get it.
I understand.
Wait.
(laughs)
Does this mean I'm a consultant?
But you have to promise
that you'll call first,
'cause I can't guarantee
that the agents
in the lobby
won't see you or your...
cart as a threat and shoot you.
I understand. Yes.
Yes, ma'am.
Artie,
we're the FBI--
we just handshake.
(laughs):
All right.
Good night.
Good night.
(whirring)
(indistinct chatter)
Hey.
RAVEN: Who!
Ah.
(laughs)
(sighs)
How do I look?
Sharp. Nice wheels.
MUNDO:
Big date?
Uh, sort of. Sort of. Yeah.
Is it cool
if I borrow the drift board?
Yeah, man, no problem--
but I thought Rosalyn couldn't make it.
Well, she couldn't, but we...
made other arrangements.
Figured who needs patience
when we have technology.
So I'm taking her on a
video chat tour of DC
at night.
(chuckles)
Nice!
Ah!
(electronic dinging)
Oh... ah!
(chuckles)
Okay, she's ready.
Shirt... good?
Aw, you got this, Krummy.
Yeah.
Okay, okay, okay.
Hey!
Hey, how are you?
Okay, ready?
Ready to get started?
All right, this is CTOC.
You remember CTOC. Okay.
These are my friends.
Hey.
KRUMITZ: Say hi.
Hey, there!
Coop!
That's, uh...
this is Artie.
Um... Artie's
just leaving.
Oh, hey. You want me
to walk you out?
MUNDO: Our little Krummy
went and got himself
a video chat date.
(sighs)
NELSON: Charm her from afar,
then go in for the kill!
That boy, Krummy.
See, that's my...
that's my, that's my dawn!
Come on.
K R S T E V