CSI: Cyber (2015–2016): Season 2, Episode 17 - Flash Squad - full transcript
Users of a traffic app are being rerouted to remote locations and robbed by masked women.
Previously on CSI: Cyber...
I am trying to
look professional
before I go in front of the
judge for my 5K1 hearing.
You given any thought
to what you want to do after?
You don't trust me.
I just don't trust
your judgment.
It's like a parole island here.
NELSON: It's like,
no matter what I do right,
I can't shake what I did wrong.
Eight million.
I won't tell anybody. Come on.
You know where it is.
I didn't steal it.
I'm gonna find
out who did.
And when I do, I'm gonna put
that bastard in prison.
Come on. There's a spring
in your step,
you got a grin
a mile wide.
You, sir, are smitten.
Who is she?
Greer Latimore.
RUSSELL:
I'm really feeling it.
She's a former
Secret Service agent.
Dabble in
private investigations.
Oh, boy.
♪ ♪
♪ ... love, give me diamonds ♪
♪ ... love,
give me diamonds ♪
♪ ... love, give me diamonds ♪
♪ ... love,
give me diamonds ♪
♪ I'm already in love
with myself ♪
♪ So in love with myself ♪
♪ I'm already in love
with myself ♪
♪ ... love, give me diamonds ♪
♪ Oh, no, that love ...,
I won't do it ♪
♪ Love, love, love,
love, love... ♪
(car door closes)
Ready?
Please don't. I'm begging you.
Please don't...
WOMAN (echoing):
You shot him!
(panting)
(train horn blows in distance)
(panting)
You're late.
I'm sorry about that.
You sure you're willing to risk
going to jail for this?
That's my problem, not yours.
It's all there.
Make sure nobody knows
you got this from me.
(sighs)
(phone buzzes)
(siren wailing in distance)
(horns honking)
RAMIREZ: Where the hell
have you been?
Avery called the team together
three hours ago.
Okay. So where's everyone else?
On their way to Los Angeles.
And we're working from here.
The app Freelane
has been hacked.
Look at this.
Instead of directing L.A.
users to their destination,
it's sending them
to remote locations.
♪ ♪
A week ago, my I.T.
department flagged
a number of intrusions
into the network.
The hacker's knowledge of
the system led us to believe
that it could be one
of my employees.
Which is why they called
my private investigation firm.
So rather than reach out
to authorities,
they decided to keep
this investigation internal.
Exactly. It's in
the best interest
of the company to
avoid unnecessary panic.
Any loss of confidence, the
price of your stock plunges.
Based on the fact that you
called in the Cyber Division,
can we assume that
you've ruled out an inside job?
Yes. It appeared to be
an outside intrusion
that forced the algorithm
that calculates
the most efficient
route to malfunction.
But why hack Freelane?
MAN: Someone wanted
to reroute drivers.
Five of our users,
all in L.A.,
were led to
remote locations.
FEMALE ELECTRONIC VOICE:
Approaching destination.
You've arrived
at your destination.
LAPD reported
that each driver was robbed
at gunpoint by three young
women wearing masks.
I found a connection
between the Freelane app
and the robberies.
They targeted Freelane users
'cause they blindly follow
the app's navigation.
Most users don't even question
the app when it reroutes 'em.
They just go where it leads.
This is why I'll never give up
my Thomas Guide.
You can't hack
a spiral-bound stack of papers.
Freelane I.T.
just found
another intrusion
into the network,
but LAPD has no recent reports
of similar robberies.
KRUMITZ:
Well, let's plug in,
source the intrusions.
Let's do it.
Dude, who's
that stone-cold hottie
private investigator?
Greer.
What?!
That's Greer?
D.B.'s Gree...
Wow!
Diebenkorn for the win.
RYAN:
Mr. Jennings,
I recommend that you use
your app's direct messaging
feature to let
your users know
that they should avoid
any unfamiliar
routes.
No, I can't do that.
You can't or you won't?
The benefit of Freelane
is that it recommends
unfamiliar routes because
they're the least traveled
and often the fastest.
But we wouldn't know that
without our users.
You need the users in order
for your app to work.
Yes. It's crowd-sourced
navigation.
Users provide real-time updates
of traffic accidents,
lane closures,
stalled vehicles.
FEMALE ELECTRONIC VOICE:
Caution!
Vehicle on the shoulder ahead.
Has the vehicle moved?
And then the user responses
help our algorithm narrow down
the options
for the fastest route.
Mr. Jennings,
we recognize the value
of your app,
but you have a responsibility
to let your users know
there is a risk.
Avery, we just sourced all
the intrusions onto the network.
Unfortunately,
they all lead back
to the same IP address in Syria.
Obviously a proxy.
And most likely using a command
and control server
to anonymize their IP address.
This is a dead end.
KRUMITZ: Guys, I just got
an I.D. on the latest
user to get rerouted.
It's Joel Matthews.
His cell phone
stopped moving
right in the middle
of his route.
Been there for hours.
Could be an active
crime scene.
(siren wailing, tires screech)
(tires screech, siren stops)
All right, we got a body!
(over radio): Charlie 2-3. I'm en route.
OFFICER:
Come with me!
Keep your eye on the rooftops.
(crossing signal bells dinging)
(siren approaching)
MUNDO: Two victims.
One male, one female.
RUSSELL: This guy
was shot at close range.
MUNDO: He's dead.
KRUMITZ: There's a mask.
More than likely
belongs to one of our suspects.
RYAN:
I got a pulse! She's alive!
Get the EMTs!
OFFICER: Nobody around, right?
FEMALE OFFICER: Nothing, Jack.
MUNDO: Requesting an EMT at the corner
of Mateo and Sixth.
♪ CSI Cyber 2x17 ♪
Flash Squad
Original Air Date on March 9, 2016
♪ I know you've deceived me,
now here's a surprise ♪
♪ I know that you have, 'cause
there's magic in my eyes ♪
♪ I can see
for miles and miles ♪
♪ I can see for miles
and miles ♪
♪ I can see
for miles and miles ♪
♪ And miles... ♪
♪ Oh, yeah. ♪
Hey, y'all, Flash Squad here.
Kisses.
I know you've been waiting
for our latest video.
Wanted to show you some of
the hot items we just picked up.
I know you're thinking
you need cold, hard cash
to get your hands
on this high-end fashion.
But, really,
all you need is this.
KRUMITZ: This is one of the
videos the group posted.
They call themselves
the Flash Squad.
I remember the good old days,
when criminals would just stash
their loot and lay low.
Now they make videos
bragging about it,
and social media turns 'em
into online celebrities
with thousands
of followers.
RYAN: Keeping up with
the Kardashians is expensive.
They just turned
to crime to do it.
Where'd you get this video?
I sent Raven
a picture of the mirrored mask
we recovered here
at the crime scene.
She used an image search.
According to the police report,
those luxury items the girls
were flaunting were reported
stolen two weeks ago.
So that confirms that the
Flash Squad is responsible
for the theft.
The question is:
are they hackers?
And Nelson sourced this video.
It was posted
from the same Syrian IP
that originated
the Freelane hack.
Looks like what started
as armed robbery
just escalated to murder.
(overlapping, indistinct
conversation and radio chatter)
Well, this turned out great.
Never imagined our paths
crossing professionally.
I know. I was
surprised by your call.
L.A.'s a long way from DC.
You take a lot of West
Coast investigations?
I oversee all
of our firm's L.A. clients.
I grew up here.
Didn't get home much
during my time
with the Secret Service.
This gives me a chance
to see my family.
I'm dating a... Valley Girl?
(imitating Valley accent):
Oh, my God. No.
You're dating
a Dena girl.
Pasadena.
MUNDO: No wallet or I.D.
on the male Vic.
Probably stolen.
Vehicle registration confirms
it's Joel Matthews.
34 years old.
Senior Executive at Palo Vista
Children's Hospital,
in Orange County.
No luck I.D.'ing
his female companion?
No. No sign of a wallet
or purse or cell.
Flash Squad
must've stolen those as well.
The robbery fits
the Flash Squad's M.O. but murder,
I'm not so sure about that.
The female victim
is still in surgery.
If she pulls through,
she may be able to I.D.
at least one of her attackers.
You see that?
Looks like the victim's car
was rear-ended.
LATIMORE: Fits with
the previous reported thefts.
All of the victims were involved
in a fender bender
before they were robbed.
RUSSELL:
Based on the location
of the paint transfer,
I'm guessing the killer
was driving a black SUV.
I'll have the locals
put out an APB. Although...
a black SUV with a young female
behind the wheel
isn't exactly gonna stand out
in Los Angeles.
Elijah, what are
you thinking?
What do you make of that?
Not a train in sight.
So why is the crossing arm
still down?
That's a very good question.
I've got a malicious code
that allowed our black hat
to reroute Joel Matthews
to the train tracks.
Whoa! Whoa, look at this.
Nelson.
Yeah.
Hmm?
What's up?
Uh, nothing.
RAMIREZ: Our hacker used
the Freelane intrusion
to gain access
to Joel Matthews' entire phone.
There's digital dust
in his credit card app,
GPS, and his e-mail.
The moment Joel
logged into Freelane,
hackers were controlling
his device.
(phone beeps)
NELSON: And using his connection
to the Freelane network,
our thieves accessed his phone
and searched every app.
That's why there's
digital dust everywhere.
So it starts with the Flash
Squad finding Freelane users
to make purchases
at high-end stores.
NELSON: They then use Freelane
to direct their users
to a secluded spot, then...
armed robbery.
Joel Matthews' bank account
doesn't really paint a picture
of a man who shops
at high-end boutiques.
He's got less than two
grand in his savings.
Hm. That's because
he wasn't shopping.
Based on what I'm seeing
on his FriendAgenda page
he was picking up a donation--
watches.
He runs a charity auction
for a children's hospital.
Just wanted to say thanks to the
106 local businesses that have
already opened up their hearts.
We still have 22 hours left
until the silent auction.
It's not too late to donate.
Help me give
some amazing kids
another chance at life.
So unfair.
He seemed like such a good guy.
Okay. Okay, Nelson.
What is up?
I think I found proof
in my stock exchange case
that the FBI obtained
evidence unlawfully.
What?!
For the past few weeks I've been
searching for the $8 million
that went missing
in my stock market hack.
And you found it?
No. No, no.
I mean, it's long gone.
But I did find that a crucial
piece of evidence the FBI
used against me was outside the
scope of the federal warrant.
But you told me that your
prosecutors had a strong case.
Yeah, but my lawyer
said without this evidence...
the case is thin.
You hired a lawyer?
I had to, okay?
There's a chance that I can
overturn my conviction.
But Nelson...
you did hack the stock exchange.
You know you were convicted
because you were guilty.
No, what I know
is the FBI confiscated evidence
without a warrant.
Have you talked to Avery?
No. I still don't know
if I'm gonna file this
lawsuit against the FBI.
A lawsuit?!
You could go to jail.
Why would you want to risk that
over a technicality?
'Cause I want to have control
over my own life again, Raven,
that's why, okay?
You know? I want to...
I want to hang out
with my old friends.
Use a computer whenever,
wherever I want.
Look, man, this is my chance.
And I know
that it's risky, but...
I'm feeling really,
really good about this.
Promise me you're not gonna
get your hopes up too high.
Because Avery--
she's gonna do
what's best
for the Cyber Division...
not Brody Nelson.
RUSSELL: We're gonna be here
a while, till LAPD
gets answers
from Caltrans.
Yeah, well, now
that it's officially
a criminal investigation,
it's time for
the P.I. to bow out.
No, you're right, you're right.
Would it be wrong
for me to kiss you good-bye?
Yes.
(no voice)
Do we care?
Yes.
(chuckles)
Figure out why these
things are still down?
Not yet.
(crossing bell dinging)
RUSSELL:
What'd you just do?
Nothing.
KRUMITZ:
Hey, guys...
I think I'm doing that.
The phone is telling the gate
to lower and then I put it
in the Faraday Bag,
it blocks the signal,
arm lifts
back up.
RYAN: So, the cell
phone's communicating
with the train
crossing.
So when Joel Matthews' phone
approached the train tracks,
it somehow told
the crossing arm to drop,
trapping him.
Oh, yeah,
look at this--
discoloration of the bolt.
MUNDO: Fresh tool marks.
Bolt's still loose.
RUSSELL:
Oh, yeah.
I'm guessing this...
is the device
that triggered the arm to drop.
Okay, we got a cellular antenna.
It's possible that it detected
Joel's phone as they
approached the crossing here.
According to the
police report,
the last two robberies took
place at train crossings.
The first two at dead ends.
So the Flash Squad
rerouted their victims,
using that navigation app,
then forced them to
stop here, trapping them.
Ugh. I hope this
doesn't make us late.
(bang)
What the hell?
(crossing bell dinging)
Hands where I can see them!
Don't even think
about moving.
Joel...
Just give us the watches
and no one gets hurt.
Yeah, but clearly, something
didn't go according to plans.
So maybe Joel fought back,
there was a struggle...
Get the watches from the car!
That was not
a smart move.
No, please, don't.
Don't shoot.
No, no, I didn't see
anything, I swear.
These girls are dangerous.
We have to get them
off the street
before they kill again.
(buzzing)
Hey. I thought I told you
not to call me on my new phone.
What... What do you mean
she's still alive?
No. that's... that's impossible.
You said they were both dead.
Oh...
Don't put this all on me.
You're an accomplice, Sophia,
don't forget that.
Grab your stuff
and get here now.
And don't call me on this phone.
MUNDO: Just got off the phone
with the hospital.
Our female Vic is still
unconscious, but
she's no longer a Jane Doe.
Locals ran prints
and got an I.D.
She's a child care worker.
Riley Van Lowe, 20 years old.
She's got a brother
in San Diego.
He's been informed,
he's driving up.
So now what?
Flash Squad
usually posts a video
of their latest
robbery within an hour,
but nothing yet.
Yeah, and I don't think they will.
Killing Joel was an accident
and now they're scrambling.
Yeah.
MUNDO: Botched robbery wouldn't
explain why they left that
Frankenstein'd device
on the train crossing arm.
KRUMITZ:
Uh, actually, it's not
just one device, it's two.
See this here?
It's a microcell.
People put it in their homes
to boost bad cell reception.
And that one over there--
that's an industrial radio.
The micro-controller,
here in the middle,
acts as a bridge, lets
'em talk to each other.
Can we trace these components
back to the person who built it?
There are no fingerprints,
no biologicals,
no forensic trace of any kind.
Whoever assembled
this hardware--
they were very careful.
I've imaged each component.
Sending it back
to Tear Down now.
Basically, our last hope
is digital dust.
NELSON:
All right, a million
Web searches later, I think
I've got this figured out.
Now, most rail lines
have something called
Positive Train Control.
It prevents accidents by putting
train controls--
like brake systems,
crossing guards-- online.
So if a conductor falls asleep,
someone in an office 100 miles
away could hit the brakes.
Which is smart, if the threat
is a drowsy conductor.
However, if the threat
is a sexy black hat thief...
It makes it easier for them
to take control
of the crossing arm.
This device
was clearly homemade.
The motherboard is exposed,
the soldering is raggedy,
and all of the parts are from
different manufacturers.
Yeah, and there's
no manual
to follow to help you put
this kind of thing together,
so... you go to the one source
that can tell you
how to build anything:
Internet.
Which means our targets
went through
the same process you did.
Anyone who searched
for all these components
is more than likely our target.
Yeah.
KRUMITZ: You are looking
at the search history
of the entire population
of Los Angeles.
That's 20-plus million people.
However, I created filters
based on search terms
associated with
the rogue device and Nelson's
train research.
20 million becomes 105.
All right, that's still
a long list, though.
We need to focus on what we know
about the hackers.
All right, they're female,
they're in their early 20s.
RUSSELL:
So we eliminate all men
and all females outside
of the age range.
All right, down to 30.
We know they're obsessed
with celebrity culture.
All right, so eliminate
anyone who hasn't
done a search on gossip
or popular culture sites
in the last 24 hours--
sites like TMZ
or Gossip News Entertainment.
KRUMITZ: Okay.
Down to eight.
Yes!
All right, what about
the watches the girls
stole from Joel?
There's a chance they would've
looked into their value
before committing
to the robbery, right?
Narrowing down
to anyone searching
for Ball watches...
One result. Boom, right there.
(phone buzzes)
All right, Krumitz,
match that IP address
to a physical address.
Elijah, you're with SWAT.
Hello?
SILVER: Deputy Director,
I've just been informed
that one of your black hats
is bringing a lawsuit
against the FBI.
What?
I'm looking at
the legal documents right now.
They just hit my desk.
Uh, sir, a-a few weeks ago,
I testified at Raven Ramirez's
5K1 hearing.
My recommendation was that
she spend more time with Cyber.
I guess she filed a suit.
But the lawsuit
wasn't filed by Ms. Ramirez.
It was filed by Brody Nelson.
I don't know what to say.
Sir... I need some time
to figure out what is going on.
Talk to Mr. Nelson.
Then get back to me.
Avery, we've got an address.
AGENT:
Hup! Let's go, hup!
FBI!
OFFICER: Clear!
OFFICER 2: Don't move!
Clear.
OFFICER:
Freeze.
OFFICER:
All clear.
MUNDO:
It's clear!
It's all clear.
Oh, wow.
I didn't even know you could
find a couch that shade of pink.
AGENT:
Yeah, there's nobody here.
Guys, what do you see
in each one of these photos?
That's Riley Van Lowe.
RUSSELL:
The female victim.
RYAN:
She wasn't a victim at all.
She didn't even know
Joel Matthews.
She met him is the night
she went to rob him.
Riley Van Lowe
is a member of the Flash Squad.
All right, cheap furniture,
but the closet's full
of high-end clothes,
shoes, and handbags.
RUSSELL:
Got a shoebox
full of expensive-looking
jewelry.
Oh, yeah,
here we go--
it's the amethyst ring
that we saw in the video.
I just found evidence
on Ms. Van Lowe's laptop
proving that
this device was used
to shoot the Flash Squad
videos, confirming that
she was part of that robbery.
Standard soldering kit.
This has everything
they would need
to rig the device
used to hack
the train-crossing arm.
So Riley is the Flash Squad's
hardware hacker.
This changes everything
that happened that night.
What the hell?!
Hands where I
can see them!
Don't even think about moving!
Please.
Don't.
Which leaves one big
unanswered question.
Yeah. Why was Riley shot
during the robbery?
Well, maybe Joel Matthews
got a gun away from one
of the girls and shot her.
It's not possible. There's no
GSR trace on his hands.
MUNDO: Well, we know from
the police report that Riley's
gunshot wound was not
self-inflicted.
Something happened that night
that caused one of those girls
to shoot her.
MUNDO: Unfortunately,
we can't ask Riley.
Her condition is the same.
She's stable, but unconscious.
RUSSELL: Riley knows
all the details
of what happened
at the train crossing.
She's of value to us.
But she's gonna be
a huge threat to her friends.
If she wakes up.
MUNDO:
Yeah, I'm gonna put
two uniforms on her right now.
Make sure we have eyes
on Ms. Van Lowe at all times.
MAN:
What do you mean I can't go in?
What do you mean I can't go in?!
Someone tell me what happened
to my little sister!
Uh, Mister, uh, Van Lowe...
I'm FBI Deputy Director
Avery Ryan.
We need to talk.
What if she wakes up?
This is bad.
I mean bad bad.
What are we gonna do?
I don't know.
I don't know.
Just shut up and let me think.
What if she rats us out?
She wanted to call the cops
back at the tracks.
If she does, that's your fault.
You're the one who wanted
to bring her into the group.
You said
we needed someone good
with hardware.
I was just trying to help.
Well, you didn't help, Sophia.
You brought us a problem.
(sighs heavily)
How much cash
do you have on you?
I don't know.
60 bucks, maybe.
We gotta get out of here.
We can sell some
of the stuff we stole.
I don't think
running is a good idea.
We should just
turn ourselves in,
explain this was just
supposed to be fun,
nobody was supposed to get hurt.
Are you crazy?
This isn't high school.
We killed someone.
We got only one option.
We're getting
the hell out of here
together.
Say it.
Okay.
Okay. We run.
MADISON:
I know you've been waiting
for our latest video,
so here it is.
Wanted to show you some of
the hot items we just picked up.
Uh, my sister was studying
to be a clinical engineer.
She wanted to help people,
not hurt them.
There's no way
Riley's one of these girls.
We matched
this amethyst birthstone ring
to one that we found here
in the apartment.
The ring was never
on the list of items
reported stolen.
My mom gave her that ring.
This makes no sense.
Do you recognize any of these
girls as your sister's friends?
Their voices maybe?
No. Riley had a hard time
making friends.
She was always
so focused on school.
We haven't spoken since
she moved to L.A. two years ago.
I hated the guy she was dating.
She stopped taking my calls.
I was so excited
to get a call about Riley.
Then I found out
she's in the hospital,
and now you're telling me
she's a thief.
I just...
It's a lot to process.
Do you know who shot her?
We're still trying to figure out
what happened last night.
RAMIREZ:
I have been through
all of Riley Van Lowe's social
media accounts and e-mails.
There's not a single mention
of Flash Squad or anything
that can help identify
the other members of the crew.
I scanned Riley's hard drive.
Her computer wasn't responsible
for the Freelane hack.
(phone beeps)
What's with the face?
Avery just texted me.
(scoffs)
She must have found out
about the lawsuit.
Nelson, you filed without
talking to Avery? Why?
Because in the case
of Brody Nelson against the USA,
Avery is the USA.
(computer beeping)
This is weird. Riley has
a second e-mail account.
She's been logging in and out
almost every day for
the past two months,
but it's empty.
You mean she's been
deleting her e-mails?
Hold on. I'll run
a recovery program.
That was fast.
Because there's nothing
to recover.
No messages were ever
sent or received.
Okay, so why would she set up
an e-mail account
that she signs into every day
but doesn't use?
This is why.
The draft folder.
There's one item.
Exactly. Call Krumitz.
Raven just got us
our first lead.
Could help us identify the rest
of the Flash Squad.
They communicated
through an e-mail account,
but never actually sent
any e-mails.
Riley and her
accomplices--
they shared log-in credentials
for the same e-mail account,
but they never sent e-mails
to each other.
They just wrote wrote drafts
and then saved them.
MUNDO:
Terrorists and cartels
have been communicating this way
for years, thinking it leaves
no digital trail.
Krumitz, do you think you can
recover previous versions
of these draft e-mails?
Yeah. On it.
(computer chirping)
We got nothing.
No names, nicknames, addresses,
anything in these drafts
that can get us an identity.
Hey, maybe we can predict
a pattern of behavior,
speculate on their next move,
based on these e-mails.
What are we looking for exactly?
A pattern of speech,
like a hierarchy.
Like this one, for instance.
She uses assertive
language,
she likes to call the shots.
“Take the SUV and pick me up
at 8:00.
I am finally gonna
be famous!”
Now she is the alpha.
All right, this one's quick
to agree, reiterates the order.
“Perfect. I'll bring my laptop,
reroute him from the car.”
“Hope GNE uses
a good photo of us.”
Well, she's a follower.
She will always be loyal
to the leader.
She is a beta.
Clearly, they are both
preoccupied with fame.
Okay, so this is beta.
Then I got a candidate
for omega.
“I'm up for whatever.
“Sorry it took me so long
to respond.
You guys always know
better than I do.”
She's the omega.
Subservient, apologetic,
self-deprecating.
Now... it's time
for us to play shrink.
♪ ♪
RUSSELL: Riley's e-mails to her friends
are very telling.
You know, I'm
starting to think
that Riley Van Lowe is our omega.
I agree.
She consistently uses
subservient language
in all her personal e-mails.
And look at this one
to one of her professors.
She seems to be struggling
with her tuition.
Her brother said that she always
had a hard time making friends,
so by joining the Flash Squad,
she was able to do both.
Right, grab a little quick cash
for tuition
and feel accepted
at the same time.
These girls pressured her
to join the Flash Squad. Why?
Well, Riley was
the hardware hacker, right?
They needed her to rig
the train hacking device.
All of these girls have
their own unique talents
they bring to the squad.
Know what? You're right.
The beta was the coder.
She rerouted from the car.
Alpha just seems like
she's getting rich off
the other two girls' hacking skills.
She's the muscle.
She takes charge,
she intimidates.
You know what? The omega.
The omegas shows fear, right?
They could become a liability.
I think this is the reason
why Riley Van Lowe got shot.
Grab the watches.
(crossing bell clanging)
That was not a smart move.
I'm begging you...
(Riley gasps)
(groaning)
You shot him!
What the hell
are you doing, Madison?!
Just get the watches, Riley!
Let's go!
We can't just leave him here.
We have to call the cops.
He could die.
Do not call the police!
Riley, do what she says.
This was never part of the plan!
You don't make the plan.
I make the plan, so
put the phone down!
(grunting)
Put the phone...
(Riley groans)
down!
(Riley panting, Sophia gasps)
Hey, what did you do?!
(crossing bell clanging)
Just grab the watches!
(Sophia gasps and pants)
(Sophia gasps)
Just got off the phone
with LAPD.
Riley Van Lowe is conscious.
First thing she did--
asked for a lawyer.
We're not gonna get
anything else from her.
KRUMITZ:
More bad news.
Just compared notes
with Raven and Nelson.
Looks like the Flash Squad used
the same Syrian IP address
to stay anonymous for
the Freelane hack, the videos
and the draft e-mails.
So these two girls have
shot a man in cold blood
and left nothing behind
but digital dead ends?
RYAN: No, no, no.
Wait, wait.
The Flash Squad
revealed their weakness
in these draft e-mails.
What is the one thing
that they care more about?
To be famous. GNE.
Exactly.
And that is how
we're gonna catch them.
Listen up, bitches.
We're the Flash Squad.
This is how we do.
MALE ANNOUNCER:
That's right, these
rainbowed-visor vixens
want your stuff.
But let's be real.
With legs like that,
all they had to do was ask.
RUSSELL:
Okay, so, we're gonna get
GNE to post our fake video
on their Web site,
and then to blast the
link out on ToggleFly.
The Flash Squad
wants to be famous.
The second that they see
their name in a headline,
they'll click on that link.
The moment they do,
the super cookie I embedded
into the Web page will send us
back their real IP address.
Right, but isn't
this a public site?
Aren't thousands of
other other people
gonna be seeing
the same page?
The way Flash Squad's trending,
more like hundreds of thousands.
But the beauty
of the super cookie is
that after it sends us
each visitor's IP,
it attaches itself
to their browser
and spies
on their Web traffic.
We'll be able to see every place
the users go
after they visit
the GNE site.
Hopefully,
based on the sites they visit,
we'll be able
to identify our targets.
If they take the bait.
RYAN:
These girls--
they won't be
able to help themselves.
SOPHIA:
This place is so vile.
How long do we
have to stay here?
(phone dings twice)
(chimes)
Oh, my God!
Maddie, we did it!
We're on GNE!
We did it!
(laughs)
KRUMITZ:
Okay, this thing's going viral.
200,000 views and climbing.
Nelson, Raven,
you seeing this?
NELSON: This is insane.
NELSON: It's just BuzzFeed,
Kardashians, FriendAgenda
over and over again.
RAMIREZ: Everyone who's
watched this video
is going to the same sites.
How are we gonna
isolate the Flash Squad?
RYAN: Human behavior
is reliable
and disloyalty
is their greatest fear.
ANNOUNCER:
Can't get enough?
Good, 'cause we've got
more Flash Squad.
Ah! This is so awesome!
(both laugh)
ANNOUNCER: Check back
in the a.m. for an exclusive
tell-all interview
with the group's leader
after she's released
from police custody.
Riley woke up.
“Leader”?
She's going to tell
them everything.
They're calling her the leader?
(sighs)
Oh, my God.
RAMIREZ:
Guys, I don't know about this.
The IP addresses are coming in
so fast.
NELSON:
Right there!
Someone just searched for
“Riley Van Lowe plus leader.”
RYAN:
Th-That's it! That's them!
Besides us, the Flash Squad
are the only people
that know Riley's name.
They took the bait.
RAMIREZ:
Got the IP address.
Give me a second to recover
the physical
address associated
with the search.
Got it.
I'm sending the address
to you now.
It-it looks like a motel
off the 405 Freeway.
Clear!
AGENT: Clear!
AGENT 2: Yeah, nothing back here.
Okay,
so, the motel manager says
two girls paid cash.
He did not get
a good look at them.
They jumped in a car and
headed west a few minutes ago.
Didn't catch the make
or model either.
These girls are scared.
They're feeling out of control.
They know that we're
closing in on them.
They won't draw attention
to themselves.
Yeah, but we don't even have
a description.
RUSSELL: Whoa.
Wait a second here.
Now...
the girls don't know that,
though.
You know what?
You're right.
As far as they know,
Riley gave them up,
and every cop on every corner
could have their photo.
Which means
they'll do anything
they can
to avoid law enforcement.
Freelane.
It gives the location
of police officers--
they'll use the app
to try to escape.
Right. Instead of
chasing our targets,
we use the Freelane app
to report police sightings
and herd them right to us.
I'm rerouting the Freelane users
to the 5 Freeway.
We'll have a clear path
on the 405 South,
all the way to Mexico.
(laughs)
I can taste the tequila already.
(laughs):
Ooh.
Uh, okay, po-po ahead.
Turn left here.
(turn signal clicking)
Another cop.
Make a right.
(turn signal clicking)
Oh, my God.
They're everywhere.
Just head down that street.
(tires screeching)
(tires screeching,
engine revving)
Okay, good, good...
(chuckles)
(chuckles) Just make a right
up here.
There's
a freeway entrance.
(siren wailing)
I thought you said
it was clear!
What the hell is this?!
(tires screech)
Damn it, Sophia!
Okay, back up! Back up! Go!
(siren wailing)
(grunts)
(tires screeching)
OFFICER:
Out of the vehicle!
MUNDO: FBI! Hands in the air!
Get out of the car!
Step out of the vehicle!
KRUMITZ: Right now!
Do it right now!
Hands on the hood!
OFFICER 2:
Cover the car!
Just keep your
mouth shut, Sophia.
(handcuffs clicking)
RYAN: Well, I hope
the Flash Squad enjoys
their 15 minutes of fame.
RUSSELL: You guys are gonna look great
in orange jumpsuit couture!
(Ryan chuckles)
(phone chimes)
If you don't mind, I think
I'm gonna, uh, catch up
with you guys in DC,
soak up
a little more L.A. sunshine.
Oh, well, give my best to Greer.
(helicopter hovering,
officers shouting commands)
(siren wailing in distance)
(laughs)
You made it.
Wow.
Me?
Or the view?
The view.
All of it.
Come sit.
My father worked right there.
I loved that
building.
RUSSELL:
You're kidding me.
You know,
that-that building
is the best example of art deco
that's still left in L.A.
I love art deco.
I always have.
Have you ever seen
the Palais de Chaillot?
Paris. No.
I haven't been there.
It's on my bucket list.
I'm considering
taking a job there.
You should come.
Check it off your list.
How long you gonna be there?
Six to eight months.
Still up in the air.
Uh...
I wish I could do that.
I'm afraid my, um...
my Seahawks
would be hopeless without me
on game day.
And there's
no football in France.
What are you doing?
I'm asking you to dance.
But there's no music.
Sure there is.
What song are you dancing to?
“Macarena,” of course.
(chuckles) (laughs)
I'm not Joel Matthews.
He was much better
at this type of thing.
But I'm gonna give it a whirl,
because I thought Joel's friends
and family should know that
the event he spent so many hours
planning raised over $150,000
for the children's hospital
last night.
Joel was a great man
and a great friend. We're all
gonna miss him very much.
How cool is that? And all
these people are pledging
more donations on his
FriendAgenda memorial page.
Yeah. Good to see
not everyone out there's
a materialistic fame junky.
(chuckles)
One second.
Why didn't you come to me first?
And say what,
that I think I found evidence
of FBI misconduct?
I would have helped you.
Really, Avery? 'Cause I saw
how much you helped Raven.
Hey, that's out of line.
Raven's case was a completely
different circumstance.
Listen, I appreciate everything
that you've done--
bringing me here, believing
in me when no one else would.
But this,
we're talking about my life.
You need to know,
if you go down this path,
it could have
very real consequences.
Suing the FBI
without coming to me first
is not the way
to go about this.
Are you mad because
I didn't come to you
or because the FBI screwed up
and it reflects poorly on you?
Nelson, you're dangerously close
to insubordination.
I am mad!
I'm mad
because if you lose this,
they can revoke your plea deal.
You'll have a lot less freedom
behind bars.
Well, maybe that's-that's a risk
I'm willing to take.
(knocking on door)
The exact two people
I wanted to see.
You filed a lawsuit
against the FBI.
I wanted to know
if you're willing to drop it.
Right now.
(sighs)
What happened in my case...
(sighs)
wasn't right.
And what the FBI
did was wrong.
And it led
to my conviction.
So, no, sir... I'm not
willing to drop this.
I'm seeing this through
to the end.
All right.
Effective immediately, the FBI
is dropping all charges
against Brody Nelson.
Your record
will be expunged.
You're a free man.
(gasps)
I know that
Cyber's Hacker-for-Hire program
is important to you.
It's more than important, sir.
It's always been
a trial program.
It wasn't to me, Marcus.
SILVER:
I understand that, Avery.
But this program
has gotten away from you.
I don't think
that's a fair characterization.
Nelson's lawsuit isn't...
Nelson's lawsuit
is just the latest example.
Do I really need
to remind you of Tobin
and the secret files
he stole on your watch?
Avery, after
considerable thought,
I'm terminating the program.
RYAN:
With all due respect, sir,
hackers like Nelson
are the only ones
who can keep up
with our enemies.
Look, I'm the first
to admit
that this program
has been less than perfect.
But the way
these kids think,
it's not something
you can teach in an academy.
Without them,
y-you're tying my hands.
You're making us
less safe.
Sir, without them,
you're making my job harder.
Then your job is harder, Avery.
What happened?
Director Silver
just ended
the Hacker-for-Hire program.
It's effective
immediately.
What about your case?
Case dropped.
Time served.
Raven, we are free.
We can go anywhere we want.
No, Nelson.
No, you're free
to go wherever you want.
There was a loophole
in your case,
not mine.
If the Hacker-for-Hire program
is really gone,
I'm going to jail.
I am trying to
look professional
before I go in front of the
judge for my 5K1 hearing.
You given any thought
to what you want to do after?
You don't trust me.
I just don't trust
your judgment.
It's like a parole island here.
NELSON: It's like,
no matter what I do right,
I can't shake what I did wrong.
Eight million.
I won't tell anybody. Come on.
You know where it is.
I didn't steal it.
I'm gonna find
out who did.
And when I do, I'm gonna put
that bastard in prison.
Come on. There's a spring
in your step,
you got a grin
a mile wide.
You, sir, are smitten.
Who is she?
Greer Latimore.
RUSSELL:
I'm really feeling it.
She's a former
Secret Service agent.
Dabble in
private investigations.
Oh, boy.
♪ ♪
♪ ... love, give me diamonds ♪
♪ ... love,
give me diamonds ♪
♪ ... love, give me diamonds ♪
♪ ... love,
give me diamonds ♪
♪ I'm already in love
with myself ♪
♪ So in love with myself ♪
♪ I'm already in love
with myself ♪
♪ ... love, give me diamonds ♪
♪ Oh, no, that love ...,
I won't do it ♪
♪ Love, love, love,
love, love... ♪
(car door closes)
Ready?
Please don't. I'm begging you.
Please don't...
WOMAN (echoing):
You shot him!
(panting)
(train horn blows in distance)
(panting)
You're late.
I'm sorry about that.
You sure you're willing to risk
going to jail for this?
That's my problem, not yours.
It's all there.
Make sure nobody knows
you got this from me.
(sighs)
(phone buzzes)
(siren wailing in distance)
(horns honking)
RAMIREZ: Where the hell
have you been?
Avery called the team together
three hours ago.
Okay. So where's everyone else?
On their way to Los Angeles.
And we're working from here.
The app Freelane
has been hacked.
Look at this.
Instead of directing L.A.
users to their destination,
it's sending them
to remote locations.
♪ ♪
A week ago, my I.T.
department flagged
a number of intrusions
into the network.
The hacker's knowledge of
the system led us to believe
that it could be one
of my employees.
Which is why they called
my private investigation firm.
So rather than reach out
to authorities,
they decided to keep
this investigation internal.
Exactly. It's in
the best interest
of the company to
avoid unnecessary panic.
Any loss of confidence, the
price of your stock plunges.
Based on the fact that you
called in the Cyber Division,
can we assume that
you've ruled out an inside job?
Yes. It appeared to be
an outside intrusion
that forced the algorithm
that calculates
the most efficient
route to malfunction.
But why hack Freelane?
MAN: Someone wanted
to reroute drivers.
Five of our users,
all in L.A.,
were led to
remote locations.
FEMALE ELECTRONIC VOICE:
Approaching destination.
You've arrived
at your destination.
LAPD reported
that each driver was robbed
at gunpoint by three young
women wearing masks.
I found a connection
between the Freelane app
and the robberies.
They targeted Freelane users
'cause they blindly follow
the app's navigation.
Most users don't even question
the app when it reroutes 'em.
They just go where it leads.
This is why I'll never give up
my Thomas Guide.
You can't hack
a spiral-bound stack of papers.
Freelane I.T.
just found
another intrusion
into the network,
but LAPD has no recent reports
of similar robberies.
KRUMITZ:
Well, let's plug in,
source the intrusions.
Let's do it.
Dude, who's
that stone-cold hottie
private investigator?
Greer.
What?!
That's Greer?
D.B.'s Gree...
Wow!
Diebenkorn for the win.
RYAN:
Mr. Jennings,
I recommend that you use
your app's direct messaging
feature to let
your users know
that they should avoid
any unfamiliar
routes.
No, I can't do that.
You can't or you won't?
The benefit of Freelane
is that it recommends
unfamiliar routes because
they're the least traveled
and often the fastest.
But we wouldn't know that
without our users.
You need the users in order
for your app to work.
Yes. It's crowd-sourced
navigation.
Users provide real-time updates
of traffic accidents,
lane closures,
stalled vehicles.
FEMALE ELECTRONIC VOICE:
Caution!
Vehicle on the shoulder ahead.
Has the vehicle moved?
And then the user responses
help our algorithm narrow down
the options
for the fastest route.
Mr. Jennings,
we recognize the value
of your app,
but you have a responsibility
to let your users know
there is a risk.
Avery, we just sourced all
the intrusions onto the network.
Unfortunately,
they all lead back
to the same IP address in Syria.
Obviously a proxy.
And most likely using a command
and control server
to anonymize their IP address.
This is a dead end.
KRUMITZ: Guys, I just got
an I.D. on the latest
user to get rerouted.
It's Joel Matthews.
His cell phone
stopped moving
right in the middle
of his route.
Been there for hours.
Could be an active
crime scene.
(siren wailing, tires screech)
(tires screech, siren stops)
All right, we got a body!
(over radio): Charlie 2-3. I'm en route.
OFFICER:
Come with me!
Keep your eye on the rooftops.
(crossing signal bells dinging)
(siren approaching)
MUNDO: Two victims.
One male, one female.
RUSSELL: This guy
was shot at close range.
MUNDO: He's dead.
KRUMITZ: There's a mask.
More than likely
belongs to one of our suspects.
RYAN:
I got a pulse! She's alive!
Get the EMTs!
OFFICER: Nobody around, right?
FEMALE OFFICER: Nothing, Jack.
MUNDO: Requesting an EMT at the corner
of Mateo and Sixth.
♪ CSI Cyber 2x17 ♪
Flash Squad
Original Air Date on March 9, 2016
♪ I know you've deceived me,
now here's a surprise ♪
♪ I know that you have, 'cause
there's magic in my eyes ♪
♪ I can see
for miles and miles ♪
♪ I can see for miles
and miles ♪
♪ I can see
for miles and miles ♪
♪ And miles... ♪
♪ Oh, yeah. ♪
Hey, y'all, Flash Squad here.
Kisses.
I know you've been waiting
for our latest video.
Wanted to show you some of
the hot items we just picked up.
I know you're thinking
you need cold, hard cash
to get your hands
on this high-end fashion.
But, really,
all you need is this.
KRUMITZ: This is one of the
videos the group posted.
They call themselves
the Flash Squad.
I remember the good old days,
when criminals would just stash
their loot and lay low.
Now they make videos
bragging about it,
and social media turns 'em
into online celebrities
with thousands
of followers.
RYAN: Keeping up with
the Kardashians is expensive.
They just turned
to crime to do it.
Where'd you get this video?
I sent Raven
a picture of the mirrored mask
we recovered here
at the crime scene.
She used an image search.
According to the police report,
those luxury items the girls
were flaunting were reported
stolen two weeks ago.
So that confirms that the
Flash Squad is responsible
for the theft.
The question is:
are they hackers?
And Nelson sourced this video.
It was posted
from the same Syrian IP
that originated
the Freelane hack.
Looks like what started
as armed robbery
just escalated to murder.
(overlapping, indistinct
conversation and radio chatter)
Well, this turned out great.
Never imagined our paths
crossing professionally.
I know. I was
surprised by your call.
L.A.'s a long way from DC.
You take a lot of West
Coast investigations?
I oversee all
of our firm's L.A. clients.
I grew up here.
Didn't get home much
during my time
with the Secret Service.
This gives me a chance
to see my family.
I'm dating a... Valley Girl?
(imitating Valley accent):
Oh, my God. No.
You're dating
a Dena girl.
Pasadena.
MUNDO: No wallet or I.D.
on the male Vic.
Probably stolen.
Vehicle registration confirms
it's Joel Matthews.
34 years old.
Senior Executive at Palo Vista
Children's Hospital,
in Orange County.
No luck I.D.'ing
his female companion?
No. No sign of a wallet
or purse or cell.
Flash Squad
must've stolen those as well.
The robbery fits
the Flash Squad's M.O. but murder,
I'm not so sure about that.
The female victim
is still in surgery.
If she pulls through,
she may be able to I.D.
at least one of her attackers.
You see that?
Looks like the victim's car
was rear-ended.
LATIMORE: Fits with
the previous reported thefts.
All of the victims were involved
in a fender bender
before they were robbed.
RUSSELL:
Based on the location
of the paint transfer,
I'm guessing the killer
was driving a black SUV.
I'll have the locals
put out an APB. Although...
a black SUV with a young female
behind the wheel
isn't exactly gonna stand out
in Los Angeles.
Elijah, what are
you thinking?
What do you make of that?
Not a train in sight.
So why is the crossing arm
still down?
That's a very good question.
I've got a malicious code
that allowed our black hat
to reroute Joel Matthews
to the train tracks.
Whoa! Whoa, look at this.
Nelson.
Yeah.
Hmm?
What's up?
Uh, nothing.
RAMIREZ: Our hacker used
the Freelane intrusion
to gain access
to Joel Matthews' entire phone.
There's digital dust
in his credit card app,
GPS, and his e-mail.
The moment Joel
logged into Freelane,
hackers were controlling
his device.
(phone beeps)
NELSON: And using his connection
to the Freelane network,
our thieves accessed his phone
and searched every app.
That's why there's
digital dust everywhere.
So it starts with the Flash
Squad finding Freelane users
to make purchases
at high-end stores.
NELSON: They then use Freelane
to direct their users
to a secluded spot, then...
armed robbery.
Joel Matthews' bank account
doesn't really paint a picture
of a man who shops
at high-end boutiques.
He's got less than two
grand in his savings.
Hm. That's because
he wasn't shopping.
Based on what I'm seeing
on his FriendAgenda page
he was picking up a donation--
watches.
He runs a charity auction
for a children's hospital.
Just wanted to say thanks to the
106 local businesses that have
already opened up their hearts.
We still have 22 hours left
until the silent auction.
It's not too late to donate.
Help me give
some amazing kids
another chance at life.
So unfair.
He seemed like such a good guy.
Okay. Okay, Nelson.
What is up?
I think I found proof
in my stock exchange case
that the FBI obtained
evidence unlawfully.
What?!
For the past few weeks I've been
searching for the $8 million
that went missing
in my stock market hack.
And you found it?
No. No, no.
I mean, it's long gone.
But I did find that a crucial
piece of evidence the FBI
used against me was outside the
scope of the federal warrant.
But you told me that your
prosecutors had a strong case.
Yeah, but my lawyer
said without this evidence...
the case is thin.
You hired a lawyer?
I had to, okay?
There's a chance that I can
overturn my conviction.
But Nelson...
you did hack the stock exchange.
You know you were convicted
because you were guilty.
No, what I know
is the FBI confiscated evidence
without a warrant.
Have you talked to Avery?
No. I still don't know
if I'm gonna file this
lawsuit against the FBI.
A lawsuit?!
You could go to jail.
Why would you want to risk that
over a technicality?
'Cause I want to have control
over my own life again, Raven,
that's why, okay?
You know? I want to...
I want to hang out
with my old friends.
Use a computer whenever,
wherever I want.
Look, man, this is my chance.
And I know
that it's risky, but...
I'm feeling really,
really good about this.
Promise me you're not gonna
get your hopes up too high.
Because Avery--
she's gonna do
what's best
for the Cyber Division...
not Brody Nelson.
RUSSELL: We're gonna be here
a while, till LAPD
gets answers
from Caltrans.
Yeah, well, now
that it's officially
a criminal investigation,
it's time for
the P.I. to bow out.
No, you're right, you're right.
Would it be wrong
for me to kiss you good-bye?
Yes.
(no voice)
Do we care?
Yes.
(chuckles)
Figure out why these
things are still down?
Not yet.
(crossing bell dinging)
RUSSELL:
What'd you just do?
Nothing.
KRUMITZ:
Hey, guys...
I think I'm doing that.
The phone is telling the gate
to lower and then I put it
in the Faraday Bag,
it blocks the signal,
arm lifts
back up.
RYAN: So, the cell
phone's communicating
with the train
crossing.
So when Joel Matthews' phone
approached the train tracks,
it somehow told
the crossing arm to drop,
trapping him.
Oh, yeah,
look at this--
discoloration of the bolt.
MUNDO: Fresh tool marks.
Bolt's still loose.
RUSSELL:
Oh, yeah.
I'm guessing this...
is the device
that triggered the arm to drop.
Okay, we got a cellular antenna.
It's possible that it detected
Joel's phone as they
approached the crossing here.
According to the
police report,
the last two robberies took
place at train crossings.
The first two at dead ends.
So the Flash Squad
rerouted their victims,
using that navigation app,
then forced them to
stop here, trapping them.
Ugh. I hope this
doesn't make us late.
(bang)
What the hell?
(crossing bell dinging)
Hands where I can see them!
Don't even think
about moving.
Joel...
Just give us the watches
and no one gets hurt.
Yeah, but clearly, something
didn't go according to plans.
So maybe Joel fought back,
there was a struggle...
Get the watches from the car!
That was not
a smart move.
No, please, don't.
Don't shoot.
No, no, I didn't see
anything, I swear.
These girls are dangerous.
We have to get them
off the street
before they kill again.
(buzzing)
Hey. I thought I told you
not to call me on my new phone.
What... What do you mean
she's still alive?
No. that's... that's impossible.
You said they were both dead.
Oh...
Don't put this all on me.
You're an accomplice, Sophia,
don't forget that.
Grab your stuff
and get here now.
And don't call me on this phone.
MUNDO: Just got off the phone
with the hospital.
Our female Vic is still
unconscious, but
she's no longer a Jane Doe.
Locals ran prints
and got an I.D.
She's a child care worker.
Riley Van Lowe, 20 years old.
She's got a brother
in San Diego.
He's been informed,
he's driving up.
So now what?
Flash Squad
usually posts a video
of their latest
robbery within an hour,
but nothing yet.
Yeah, and I don't think they will.
Killing Joel was an accident
and now they're scrambling.
Yeah.
MUNDO: Botched robbery wouldn't
explain why they left that
Frankenstein'd device
on the train crossing arm.
KRUMITZ:
Uh, actually, it's not
just one device, it's two.
See this here?
It's a microcell.
People put it in their homes
to boost bad cell reception.
And that one over there--
that's an industrial radio.
The micro-controller,
here in the middle,
acts as a bridge, lets
'em talk to each other.
Can we trace these components
back to the person who built it?
There are no fingerprints,
no biologicals,
no forensic trace of any kind.
Whoever assembled
this hardware--
they were very careful.
I've imaged each component.
Sending it back
to Tear Down now.
Basically, our last hope
is digital dust.
NELSON:
All right, a million
Web searches later, I think
I've got this figured out.
Now, most rail lines
have something called
Positive Train Control.
It prevents accidents by putting
train controls--
like brake systems,
crossing guards-- online.
So if a conductor falls asleep,
someone in an office 100 miles
away could hit the brakes.
Which is smart, if the threat
is a drowsy conductor.
However, if the threat
is a sexy black hat thief...
It makes it easier for them
to take control
of the crossing arm.
This device
was clearly homemade.
The motherboard is exposed,
the soldering is raggedy,
and all of the parts are from
different manufacturers.
Yeah, and there's
no manual
to follow to help you put
this kind of thing together,
so... you go to the one source
that can tell you
how to build anything:
Internet.
Which means our targets
went through
the same process you did.
Anyone who searched
for all these components
is more than likely our target.
Yeah.
KRUMITZ: You are looking
at the search history
of the entire population
of Los Angeles.
That's 20-plus million people.
However, I created filters
based on search terms
associated with
the rogue device and Nelson's
train research.
20 million becomes 105.
All right, that's still
a long list, though.
We need to focus on what we know
about the hackers.
All right, they're female,
they're in their early 20s.
RUSSELL:
So we eliminate all men
and all females outside
of the age range.
All right, down to 30.
We know they're obsessed
with celebrity culture.
All right, so eliminate
anyone who hasn't
done a search on gossip
or popular culture sites
in the last 24 hours--
sites like TMZ
or Gossip News Entertainment.
KRUMITZ: Okay.
Down to eight.
Yes!
All right, what about
the watches the girls
stole from Joel?
There's a chance they would've
looked into their value
before committing
to the robbery, right?
Narrowing down
to anyone searching
for Ball watches...
One result. Boom, right there.
(phone buzzes)
All right, Krumitz,
match that IP address
to a physical address.
Elijah, you're with SWAT.
Hello?
SILVER: Deputy Director,
I've just been informed
that one of your black hats
is bringing a lawsuit
against the FBI.
What?
I'm looking at
the legal documents right now.
They just hit my desk.
Uh, sir, a-a few weeks ago,
I testified at Raven Ramirez's
5K1 hearing.
My recommendation was that
she spend more time with Cyber.
I guess she filed a suit.
But the lawsuit
wasn't filed by Ms. Ramirez.
It was filed by Brody Nelson.
I don't know what to say.
Sir... I need some time
to figure out what is going on.
Talk to Mr. Nelson.
Then get back to me.
Avery, we've got an address.
AGENT:
Hup! Let's go, hup!
FBI!
OFFICER: Clear!
OFFICER 2: Don't move!
Clear.
OFFICER:
Freeze.
OFFICER:
All clear.
MUNDO:
It's clear!
It's all clear.
Oh, wow.
I didn't even know you could
find a couch that shade of pink.
AGENT:
Yeah, there's nobody here.
Guys, what do you see
in each one of these photos?
That's Riley Van Lowe.
RUSSELL:
The female victim.
RYAN:
She wasn't a victim at all.
She didn't even know
Joel Matthews.
She met him is the night
she went to rob him.
Riley Van Lowe
is a member of the Flash Squad.
All right, cheap furniture,
but the closet's full
of high-end clothes,
shoes, and handbags.
RUSSELL:
Got a shoebox
full of expensive-looking
jewelry.
Oh, yeah,
here we go--
it's the amethyst ring
that we saw in the video.
I just found evidence
on Ms. Van Lowe's laptop
proving that
this device was used
to shoot the Flash Squad
videos, confirming that
she was part of that robbery.
Standard soldering kit.
This has everything
they would need
to rig the device
used to hack
the train-crossing arm.
So Riley is the Flash Squad's
hardware hacker.
This changes everything
that happened that night.
What the hell?!
Hands where I
can see them!
Don't even think about moving!
Please.
Don't.
Which leaves one big
unanswered question.
Yeah. Why was Riley shot
during the robbery?
Well, maybe Joel Matthews
got a gun away from one
of the girls and shot her.
It's not possible. There's no
GSR trace on his hands.
MUNDO: Well, we know from
the police report that Riley's
gunshot wound was not
self-inflicted.
Something happened that night
that caused one of those girls
to shoot her.
MUNDO: Unfortunately,
we can't ask Riley.
Her condition is the same.
She's stable, but unconscious.
RUSSELL: Riley knows
all the details
of what happened
at the train crossing.
She's of value to us.
But she's gonna be
a huge threat to her friends.
If she wakes up.
MUNDO:
Yeah, I'm gonna put
two uniforms on her right now.
Make sure we have eyes
on Ms. Van Lowe at all times.
MAN:
What do you mean I can't go in?
What do you mean I can't go in?!
Someone tell me what happened
to my little sister!
Uh, Mister, uh, Van Lowe...
I'm FBI Deputy Director
Avery Ryan.
We need to talk.
What if she wakes up?
This is bad.
I mean bad bad.
What are we gonna do?
I don't know.
I don't know.
Just shut up and let me think.
What if she rats us out?
She wanted to call the cops
back at the tracks.
If she does, that's your fault.
You're the one who wanted
to bring her into the group.
You said
we needed someone good
with hardware.
I was just trying to help.
Well, you didn't help, Sophia.
You brought us a problem.
(sighs heavily)
How much cash
do you have on you?
I don't know.
60 bucks, maybe.
We gotta get out of here.
We can sell some
of the stuff we stole.
I don't think
running is a good idea.
We should just
turn ourselves in,
explain this was just
supposed to be fun,
nobody was supposed to get hurt.
Are you crazy?
This isn't high school.
We killed someone.
We got only one option.
We're getting
the hell out of here
together.
Say it.
Okay.
Okay. We run.
MADISON:
I know you've been waiting
for our latest video,
so here it is.
Wanted to show you some of
the hot items we just picked up.
Uh, my sister was studying
to be a clinical engineer.
She wanted to help people,
not hurt them.
There's no way
Riley's one of these girls.
We matched
this amethyst birthstone ring
to one that we found here
in the apartment.
The ring was never
on the list of items
reported stolen.
My mom gave her that ring.
This makes no sense.
Do you recognize any of these
girls as your sister's friends?
Their voices maybe?
No. Riley had a hard time
making friends.
She was always
so focused on school.
We haven't spoken since
she moved to L.A. two years ago.
I hated the guy she was dating.
She stopped taking my calls.
I was so excited
to get a call about Riley.
Then I found out
she's in the hospital,
and now you're telling me
she's a thief.
I just...
It's a lot to process.
Do you know who shot her?
We're still trying to figure out
what happened last night.
RAMIREZ:
I have been through
all of Riley Van Lowe's social
media accounts and e-mails.
There's not a single mention
of Flash Squad or anything
that can help identify
the other members of the crew.
I scanned Riley's hard drive.
Her computer wasn't responsible
for the Freelane hack.
(phone beeps)
What's with the face?
Avery just texted me.
(scoffs)
She must have found out
about the lawsuit.
Nelson, you filed without
talking to Avery? Why?
Because in the case
of Brody Nelson against the USA,
Avery is the USA.
(computer beeping)
This is weird. Riley has
a second e-mail account.
She's been logging in and out
almost every day for
the past two months,
but it's empty.
You mean she's been
deleting her e-mails?
Hold on. I'll run
a recovery program.
That was fast.
Because there's nothing
to recover.
No messages were ever
sent or received.
Okay, so why would she set up
an e-mail account
that she signs into every day
but doesn't use?
This is why.
The draft folder.
There's one item.
Exactly. Call Krumitz.
Raven just got us
our first lead.
Could help us identify the rest
of the Flash Squad.
They communicated
through an e-mail account,
but never actually sent
any e-mails.
Riley and her
accomplices--
they shared log-in credentials
for the same e-mail account,
but they never sent e-mails
to each other.
They just wrote wrote drafts
and then saved them.
MUNDO:
Terrorists and cartels
have been communicating this way
for years, thinking it leaves
no digital trail.
Krumitz, do you think you can
recover previous versions
of these draft e-mails?
Yeah. On it.
(computer chirping)
We got nothing.
No names, nicknames, addresses,
anything in these drafts
that can get us an identity.
Hey, maybe we can predict
a pattern of behavior,
speculate on their next move,
based on these e-mails.
What are we looking for exactly?
A pattern of speech,
like a hierarchy.
Like this one, for instance.
She uses assertive
language,
she likes to call the shots.
“Take the SUV and pick me up
at 8:00.
I am finally gonna
be famous!”
Now she is the alpha.
All right, this one's quick
to agree, reiterates the order.
“Perfect. I'll bring my laptop,
reroute him from the car.”
“Hope GNE uses
a good photo of us.”
Well, she's a follower.
She will always be loyal
to the leader.
She is a beta.
Clearly, they are both
preoccupied with fame.
Okay, so this is beta.
Then I got a candidate
for omega.
“I'm up for whatever.
“Sorry it took me so long
to respond.
You guys always know
better than I do.”
She's the omega.
Subservient, apologetic,
self-deprecating.
Now... it's time
for us to play shrink.
♪ ♪
RUSSELL: Riley's e-mails to her friends
are very telling.
You know, I'm
starting to think
that Riley Van Lowe is our omega.
I agree.
She consistently uses
subservient language
in all her personal e-mails.
And look at this one
to one of her professors.
She seems to be struggling
with her tuition.
Her brother said that she always
had a hard time making friends,
so by joining the Flash Squad,
she was able to do both.
Right, grab a little quick cash
for tuition
and feel accepted
at the same time.
These girls pressured her
to join the Flash Squad. Why?
Well, Riley was
the hardware hacker, right?
They needed her to rig
the train hacking device.
All of these girls have
their own unique talents
they bring to the squad.
Know what? You're right.
The beta was the coder.
She rerouted from the car.
Alpha just seems like
she's getting rich off
the other two girls' hacking skills.
She's the muscle.
She takes charge,
she intimidates.
You know what? The omega.
The omegas shows fear, right?
They could become a liability.
I think this is the reason
why Riley Van Lowe got shot.
Grab the watches.
(crossing bell clanging)
That was not a smart move.
I'm begging you...
(Riley gasps)
(groaning)
You shot him!
What the hell
are you doing, Madison?!
Just get the watches, Riley!
Let's go!
We can't just leave him here.
We have to call the cops.
He could die.
Do not call the police!
Riley, do what she says.
This was never part of the plan!
You don't make the plan.
I make the plan, so
put the phone down!
(grunting)
Put the phone...
(Riley groans)
down!
(Riley panting, Sophia gasps)
Hey, what did you do?!
(crossing bell clanging)
Just grab the watches!
(Sophia gasps and pants)
(Sophia gasps)
Just got off the phone
with LAPD.
Riley Van Lowe is conscious.
First thing she did--
asked for a lawyer.
We're not gonna get
anything else from her.
KRUMITZ:
More bad news.
Just compared notes
with Raven and Nelson.
Looks like the Flash Squad used
the same Syrian IP address
to stay anonymous for
the Freelane hack, the videos
and the draft e-mails.
So these two girls have
shot a man in cold blood
and left nothing behind
but digital dead ends?
RYAN: No, no, no.
Wait, wait.
The Flash Squad
revealed their weakness
in these draft e-mails.
What is the one thing
that they care more about?
To be famous. GNE.
Exactly.
And that is how
we're gonna catch them.
Listen up, bitches.
We're the Flash Squad.
This is how we do.
MALE ANNOUNCER:
That's right, these
rainbowed-visor vixens
want your stuff.
But let's be real.
With legs like that,
all they had to do was ask.
RUSSELL:
Okay, so, we're gonna get
GNE to post our fake video
on their Web site,
and then to blast the
link out on ToggleFly.
The Flash Squad
wants to be famous.
The second that they see
their name in a headline,
they'll click on that link.
The moment they do,
the super cookie I embedded
into the Web page will send us
back their real IP address.
Right, but isn't
this a public site?
Aren't thousands of
other other people
gonna be seeing
the same page?
The way Flash Squad's trending,
more like hundreds of thousands.
But the beauty
of the super cookie is
that after it sends us
each visitor's IP,
it attaches itself
to their browser
and spies
on their Web traffic.
We'll be able to see every place
the users go
after they visit
the GNE site.
Hopefully,
based on the sites they visit,
we'll be able
to identify our targets.
If they take the bait.
RYAN:
These girls--
they won't be
able to help themselves.
SOPHIA:
This place is so vile.
How long do we
have to stay here?
(phone dings twice)
(chimes)
Oh, my God!
Maddie, we did it!
We're on GNE!
We did it!
(laughs)
KRUMITZ:
Okay, this thing's going viral.
200,000 views and climbing.
Nelson, Raven,
you seeing this?
NELSON: This is insane.
NELSON: It's just BuzzFeed,
Kardashians, FriendAgenda
over and over again.
RAMIREZ: Everyone who's
watched this video
is going to the same sites.
How are we gonna
isolate the Flash Squad?
RYAN: Human behavior
is reliable
and disloyalty
is their greatest fear.
ANNOUNCER:
Can't get enough?
Good, 'cause we've got
more Flash Squad.
Ah! This is so awesome!
(both laugh)
ANNOUNCER: Check back
in the a.m. for an exclusive
tell-all interview
with the group's leader
after she's released
from police custody.
Riley woke up.
“Leader”?
She's going to tell
them everything.
They're calling her the leader?
(sighs)
Oh, my God.
RAMIREZ:
Guys, I don't know about this.
The IP addresses are coming in
so fast.
NELSON:
Right there!
Someone just searched for
“Riley Van Lowe plus leader.”
RYAN:
Th-That's it! That's them!
Besides us, the Flash Squad
are the only people
that know Riley's name.
They took the bait.
RAMIREZ:
Got the IP address.
Give me a second to recover
the physical
address associated
with the search.
Got it.
I'm sending the address
to you now.
It-it looks like a motel
off the 405 Freeway.
Clear!
AGENT: Clear!
AGENT 2: Yeah, nothing back here.
Okay,
so, the motel manager says
two girls paid cash.
He did not get
a good look at them.
They jumped in a car and
headed west a few minutes ago.
Didn't catch the make
or model either.
These girls are scared.
They're feeling out of control.
They know that we're
closing in on them.
They won't draw attention
to themselves.
Yeah, but we don't even have
a description.
RUSSELL: Whoa.
Wait a second here.
Now...
the girls don't know that,
though.
You know what?
You're right.
As far as they know,
Riley gave them up,
and every cop on every corner
could have their photo.
Which means
they'll do anything
they can
to avoid law enforcement.
Freelane.
It gives the location
of police officers--
they'll use the app
to try to escape.
Right. Instead of
chasing our targets,
we use the Freelane app
to report police sightings
and herd them right to us.
I'm rerouting the Freelane users
to the 5 Freeway.
We'll have a clear path
on the 405 South,
all the way to Mexico.
(laughs)
I can taste the tequila already.
(laughs):
Ooh.
Uh, okay, po-po ahead.
Turn left here.
(turn signal clicking)
Another cop.
Make a right.
(turn signal clicking)
Oh, my God.
They're everywhere.
Just head down that street.
(tires screeching)
(tires screeching,
engine revving)
Okay, good, good...
(chuckles)
(chuckles) Just make a right
up here.
There's
a freeway entrance.
(siren wailing)
I thought you said
it was clear!
What the hell is this?!
(tires screech)
Damn it, Sophia!
Okay, back up! Back up! Go!
(siren wailing)
(grunts)
(tires screeching)
OFFICER:
Out of the vehicle!
MUNDO: FBI! Hands in the air!
Get out of the car!
Step out of the vehicle!
KRUMITZ: Right now!
Do it right now!
Hands on the hood!
OFFICER 2:
Cover the car!
Just keep your
mouth shut, Sophia.
(handcuffs clicking)
RYAN: Well, I hope
the Flash Squad enjoys
their 15 minutes of fame.
RUSSELL: You guys are gonna look great
in orange jumpsuit couture!
(Ryan chuckles)
(phone chimes)
If you don't mind, I think
I'm gonna, uh, catch up
with you guys in DC,
soak up
a little more L.A. sunshine.
Oh, well, give my best to Greer.
(helicopter hovering,
officers shouting commands)
(siren wailing in distance)
(laughs)
You made it.
Wow.
Me?
Or the view?
The view.
All of it.
Come sit.
My father worked right there.
I loved that
building.
RUSSELL:
You're kidding me.
You know,
that-that building
is the best example of art deco
that's still left in L.A.
I love art deco.
I always have.
Have you ever seen
the Palais de Chaillot?
Paris. No.
I haven't been there.
It's on my bucket list.
I'm considering
taking a job there.
You should come.
Check it off your list.
How long you gonna be there?
Six to eight months.
Still up in the air.
Uh...
I wish I could do that.
I'm afraid my, um...
my Seahawks
would be hopeless without me
on game day.
And there's
no football in France.
What are you doing?
I'm asking you to dance.
But there's no music.
Sure there is.
What song are you dancing to?
“Macarena,” of course.
(chuckles) (laughs)
I'm not Joel Matthews.
He was much better
at this type of thing.
But I'm gonna give it a whirl,
because I thought Joel's friends
and family should know that
the event he spent so many hours
planning raised over $150,000
for the children's hospital
last night.
Joel was a great man
and a great friend. We're all
gonna miss him very much.
How cool is that? And all
these people are pledging
more donations on his
FriendAgenda memorial page.
Yeah. Good to see
not everyone out there's
a materialistic fame junky.
(chuckles)
One second.
Why didn't you come to me first?
And say what,
that I think I found evidence
of FBI misconduct?
I would have helped you.
Really, Avery? 'Cause I saw
how much you helped Raven.
Hey, that's out of line.
Raven's case was a completely
different circumstance.
Listen, I appreciate everything
that you've done--
bringing me here, believing
in me when no one else would.
But this,
we're talking about my life.
You need to know,
if you go down this path,
it could have
very real consequences.
Suing the FBI
without coming to me first
is not the way
to go about this.
Are you mad because
I didn't come to you
or because the FBI screwed up
and it reflects poorly on you?
Nelson, you're dangerously close
to insubordination.
I am mad!
I'm mad
because if you lose this,
they can revoke your plea deal.
You'll have a lot less freedom
behind bars.
Well, maybe that's-that's a risk
I'm willing to take.
(knocking on door)
The exact two people
I wanted to see.
You filed a lawsuit
against the FBI.
I wanted to know
if you're willing to drop it.
Right now.
(sighs)
What happened in my case...
(sighs)
wasn't right.
And what the FBI
did was wrong.
And it led
to my conviction.
So, no, sir... I'm not
willing to drop this.
I'm seeing this through
to the end.
All right.
Effective immediately, the FBI
is dropping all charges
against Brody Nelson.
Your record
will be expunged.
You're a free man.
(gasps)
I know that
Cyber's Hacker-for-Hire program
is important to you.
It's more than important, sir.
It's always been
a trial program.
It wasn't to me, Marcus.
SILVER:
I understand that, Avery.
But this program
has gotten away from you.
I don't think
that's a fair characterization.
Nelson's lawsuit isn't...
Nelson's lawsuit
is just the latest example.
Do I really need
to remind you of Tobin
and the secret files
he stole on your watch?
Avery, after
considerable thought,
I'm terminating the program.
RYAN:
With all due respect, sir,
hackers like Nelson
are the only ones
who can keep up
with our enemies.
Look, I'm the first
to admit
that this program
has been less than perfect.
But the way
these kids think,
it's not something
you can teach in an academy.
Without them,
y-you're tying my hands.
You're making us
less safe.
Sir, without them,
you're making my job harder.
Then your job is harder, Avery.
What happened?
Director Silver
just ended
the Hacker-for-Hire program.
It's effective
immediately.
What about your case?
Case dropped.
Time served.
Raven, we are free.
We can go anywhere we want.
No, Nelson.
No, you're free
to go wherever you want.
There was a loophole
in your case,
not mine.
If the Hacker-for-Hire program
is really gone,
I'm going to jail.