CSI: Cyber (2015) s02e17 Episode Script
Flash Squad
1 Previously on CSI: Cyber I am trying to look professional before I go in front of the judge for my 5K1 hearing.
You given any thought to what you want to do after? You don't trust me.
I just don't trust your judgment.
It's like a parole island here.
NELSON: It's like, no matter what I do right, I can't shake what I did wrong.
Eight million.
I won't tell anybody.
Come on.
You know where it is.
I didn't steal it.
I'm gonna find out who did.
And when I do, I'm gonna put that bastard in prison.
Come on.
There's a spring in your step, you got a grin a mile wide.
You, sir, are smitten.
Who is she? Greer Latimore.
RUSSELL: I'm really feeling it.
She's a former Secret Service agent.
Dabble in private investigations.
Oh, boy.
love, give me diamonds love, give me diamonds love, give me diamonds love, give me diamonds I'm already in love with myself So in love with myself I'm already in love with myself love, give me diamonds Oh, no, that love , I won't do it Love, love, love, love, love (car door closes) Ready? Please don't.
I'm begging you.
Please don't WOMAN (echoing): You shot him! (panting) (train horn blows in distance) (panting) You're late.
I'm sorry about that.
You sure you're willing to risk going to jail for this? That's my problem, not yours.
It's all there.
Make sure nobody knows you got this from me.
(sighs) (phone buzzes) (siren wailing in distance) (horns honking) RAMIREZ: Where the hell have you been? Avery called the team together three hours ago.
Okay.
So where's everyone else? On their way to Los Angeles.
And we're working from here.
The app Freelane has been hacked.
Look at this.
Instead of directing L.
A.
users to their destination, it's sending them to remote locations.
A week ago, my I.
T.
department flagged a number of intrusions into the network.
The hacker's knowledge of the system led us to believe that it could be one of my employees.
Which is why they called my private investigation firm.
So rather than reach out to authorities, they decided to keep this investigation internal.
Exactly.
It's in the best interest of the company to avoid unnecessary panic.
Any loss of confidence, the price of your stock plunges.
Based on the fact that you called in the Cyber Division, can we assume that you've ruled out an inside job? Yes.
It appeared to be an outside intrusion that forced the algorithm that calculates the most efficient route to malfunction.
But why hack Freelane? MAN: Someone wanted to reroute drivers.
Five of our users, all in L.
A.
, were led to remote locations.
FEMALE ELECTRONIC VOICE: Approaching destination.
You've arrived at your destination.
LAPD reported that each driver was robbed at gunpoint by three young women wearing masks.
I found a connection between the Freelane app and the robberies.
They targeted Freelane users 'cause they blindly follow the app's navigation.
Most users don't even question the app when it reroutes 'em.
They just go where it leads.
This is why I'll never give up my Thomas Guide.
You can't hack a spiral-bound stack of papers.
Freelane I.
T.
just found another intrusion into the network, but LAPD has no recent reports of similar robberies.
KRUMITZ: Well, let's plug in, source the intrusions.
Let's do it.
Dude, who's that stone-cold hottie private investigator? Greer.
What?! That's Greer? D.
B.
's Gree Wow! Diebenkorn for the win.
RYAN: Mr.
Jennings, I recommend that you use your app's direct messaging feature to let your users know that they should avoid any unfamiliar routes.
No, I can't do that.
You can't or you won't? The benefit of Freelane is that it recommends unfamiliar routes because they're the least traveled and often the fastest.
But we wouldn't know that without our users.
You need the users in order for your app to work.
Yes.
It's crowd-sourced navigation.
Users provide real-time updates of traffic accidents, lane closures, stalled vehicles.
FEMALE ELECTRONIC VOICE: Caution! Vehicle on the shoulder ahead.
Has the vehicle moved? And then the user responses help our algorithm narrow down the options for the fastest route.
Mr.
Jennings, we recognize the value of your app, but you have a responsibility to let your users know there is a risk.
Avery, we just sourced all the intrusions onto the network.
Unfortunately, they all lead back to the same IP address in Syria.
Obviously a proxy.
And most likely using a command and control server to anonymize their IP address.
This is a dead end.
KRUMITZ: Guys, I just got an I.
D.
on the latest user to get rerouted.
It's Joel Matthews.
His cell phone stopped moving right in the middle of his route.
Been there for hours.
Could be an active crime scene.
(siren wailing, tires screech) (tires screech, siren stops) All right, we got a body! (over radio): Charlie 2-3.
I'm en route.
OFFICER: Come with me! Keep your eye on the rooftops.
(crossing signal bells dinging) (siren approaching) MUNDO: Two victims.
One male, one female.
RUSSELL: This guy was shot at close range.
MUNDO: He's dead.
KRUMITZ: There's a mask.
More than likely belongs to one of our suspects.
RYAN: I got a pulse! She's alive! Get the EMTs! OFFICER: Nobody around, right? FEMALE OFFICER: Nothing, Jack.
MUNDO: Requesting an EMT at the corner of Mateo and Sixth.
CSI Cyber 2x17 Flash Squad I know you've deceived me, now here's a surprise I know that you have, 'cause there's magic in my eyes I can see for miles and miles I can see for miles and miles I can see for miles and miles And miles Oh, yeah.
@elderman Hey, y'all, Flash Squad here.
Kisses.
I know you've been waiting for our latest video.
Wanted to show you some of the hot items we just picked up.
I know you're thinking you need cold, hard cash to get your hands on this high-end fashion.
But, really, all you need is this.
KRUMITZ: This is one of the videos the group posted.
They call themselves the Flash Squad.
I remember the good old days, when criminals would just stash their loot and lay low.
Now they make videos bragging about it, and social media turns 'em into online celebrities with thousands of followers.
RYAN: Keeping up with the Kardashians is expensive.
They just turned to crime to do it.
Where'd you get this video? I sent Raven a picture of the mirrored mask we recovered here at the crime scene.
She used an image search.
According to the police report, those luxury items the girls were flaunting were reported stolen two weeks ago.
So that confirms that the Flash Squad is responsible for the theft.
The question is: are they hackers? And Nelson sourced this video.
It was posted from the same Syrian IP that originated the Freelane hack.
Looks like what started as armed robbery just escalated to murder.
(overlapping, indistinct conversation and radio chatter) Well, this turned out great.
Never imagined our paths crossing professionally.
I know.
I was surprised by your call.
L.
A.
's a long way from DC.
You take a lot of West Coast investigations? I oversee all of our firm's L.
A.
clients.
I grew up here.
Didn't get home much during my time with the Secret Service.
This gives me a chance to see my family.
I'm dating a Valley Girl? (imitating Valley accent): Oh, my God.
No.
You're dating a Dena girl.
Pasadena.
MUNDO: No wallet or I.
D.
on the male Vic.
Probably stolen.
Vehicle registration confirms it's Joel Matthews.
34 years old.
Senior Executive at Palo Vista Children's Hospital, in Orange County.
No luck I.
D.
'ing his female companion? No.
No sign of a wallet or purse or cell.
Flash Squad must've stolen those as well.
The robbery fits the Flash Squad's M.
O.
but murder, I'm not so sure about that.
The female victim is still in surgery.
If she pulls through, she may be able to I.
D.
at least one of her attackers.
You see that? Looks like the victim's car was rear-ended.
LATIMORE: Fits with the previous reported thefts.
All of the victims were involved in a fender bender before they were robbed.
RUSSELL: Based on the location of the paint transfer, I'm guessing the killer was driving a black SUV.
I'll have the locals put out an APB.
Although a black SUV with a young female behind the wheel isn't exactly gonna stand out in Los Angeles.
Elijah, what are you thinking? What do you make of that? Not a train in sight.
So why is the crossing arm still down? That's a very good question.
I've got a malicious code that allowed our black hat to reroute Joel Matthews to the train tracks.
Whoa! Whoa, look at this.
Nelson.
Yeah.
Hmm? What's up? Uh, nothing.
RAMIREZ: Our hacker used the Freelane intrusion to gain access to Joel Matthews' entire phone.
There's digital dust in his credit card app, GPS, and his e-mail.
The moment Joel logged into Freelane, hackers were controlling his device.
(phone beeps) NELSON: And using his connection to the Freelane network, our thieves accessed his phone and searched every app.
That's why there's digital dust everywhere.
So it starts with the Flash Squad finding Freelane users to make purchases at high-end stores.
NELSON: They then use Freelane to direct their users to a secluded spot, then armed robbery.
Joel Matthews' bank account doesn't really paint a picture of a man who shops at high-end boutiques.
He's got less than two grand in his savings.
Hm.
That's because he wasn't shopping.
Based on what I'm seeing on his FriendAgenda page he was picking up a donation-- watches.
He runs a charity auction for a children's hospital.
Just wanted to say thanks to the 106 local businesses that have already opened up their hearts.
We still have 22 hours left until the silent auction.
It's not too late to donate.
Help me give some amazing kids another chance at life.
So unfair.
He seemed like such a good guy.
Okay.
Okay, Nelson.
What is up? I think I found proof in my stock exchange case that the FBI obtained evidence unlawfully.
What?! For the past few weeks I've been searching for the $8 million that went missing in my stock market hack.
And you found it? No.
No, no.
I mean, it's long gone.
But I did find that a crucial piece of evidence the FBI used against me was outside the scope of the federal warrant.
But you told me that your prosecutors had a strong case.
Yeah, but my lawyer said without this evidence the case is thin.
You hired a lawyer? I had to, okay? There's a chance that I can overturn my conviction.
But Nelson you did hack the stock exchange.
You know you were convicted because you were guilty.
No, what I know is the FBI confiscated evidence without a warrant.
Have you talked to Avery? No.
I still don't know if I'm gonna file this lawsuit against the FBI.
A lawsuit?! You could go to jail.
Why would you want to risk that over a technicality? 'Cause I want to have control over my own life again, Raven, that's why, okay? You know? I want to I want to hang out with my old friends.
Use a computer whenever, wherever I want.
Look, man, this is my chance.
And I know that it's risky, but I'm feeling really, really good about this.
Promise me you're not gonna get your hopes up too high.
Because Avery-- she's gonna do what's best for the Cyber Division not Brody Nelson.
RUSSELL: We're gonna be here a while, till LAPD gets answers from Caltrans.
Yeah, well, now that it's officially a criminal investigation, it's time for the P.
I.
to bow out.
No, you're right, you're right.
Would it be wrong for me to kiss you good-bye? Yes.
(no voice) Do we care? Yes.
(chuckles) Figure out why these things are still down? Not yet.
(crossing bell dinging) RUSSELL: What'd you just do? Nothing.
KRUMITZ: Hey, guys I think I'm doing that.
The phone is telling the gate to lower and then I put it in the Faraday Bag, it blocks the signal, arm lifts back up.
RYAN: So, the cell phone's communicating with the train crossing.
So when Joel Matthews' phone approached the train tracks, it somehow told the crossing arm to drop, trapping him.
Oh, yeah, look at this-- discoloration of the bolt.
MUNDO: Fresh tool marks.
Bolt's still loose.
RUSSELL: Oh, yeah.
I'm guessing this is the device that triggered the arm to drop.
Okay, we got a cellular antenna.
It's possible that it detected Joel's phone as they approached the crossing here.
According to the police report, the last two robberies took place at train crossings.
The first two at dead ends.
So the Flash Squad rerouted their victims, using that navigation app, then forced them to stop here, trapping them.
Ugh.
I hope this doesn't make us late.
(bang) What the hell? (crossing bell dinging) Hands where I can see them! Don't even think about moving.
Joel Just give us the watches and no one gets hurt.
Yeah, but clearly, something didn't go according to plans.
So maybe Joel fought back, there was a struggle Get the watches from the car! That was not a smart move.
No, please, don't.
Don't shoot.
No, no, I didn't see anything, I swear.
These girls are dangerous.
We have to get them off the street before they kill again.
(buzzing) Hey.
I thought I told you not to call me on my new phone.
What What do you mean she's still alive? No.
that's that's impossible.
You said they were both dead.
Oh Don't put this all on me.
You're an accomplice, Sophia, don't forget that.
Grab your stuff and get here now.
And don't call me on this phone.
MUNDO: Just got off the phone with the hospital.
Our female Vic is still unconscious, but she's no longer a Jane Doe.
Locals ran prints and got an I.
D.
She's a child care worker.
Riley Van Lowe, 20 years old.
She's got a brother in San Diego.
He's been informed, he's driving up.
So now what? Flash Squad usually posts a video of their latest robbery within an hour, but nothing yet.
Yeah, and I don't think they will.
Killing Joel was an accident and now they're scrambling.
Yeah.
MUNDO: Botched robbery wouldn't explain why they left that Frankenstein'd device on the train crossing arm.
KRUMITZ: Uh, actually, it's not just one device, it's two.
See this here? It's a microcell.
People put it in their homes to boost bad cell reception.
And that one over there-- that's an industrial radio.
The micro-controller, here in the middle, acts as a bridge, lets 'em talk to each other.
Can we trace these components back to the person who built it? There are no fingerprints, no biologicals, no forensic trace of any kind.
Whoever assembled this hardware-- they were very careful.
I've imaged each component.
Sending it back to Tear Down now.
Basically, our last hope is digital dust.
NELSON: All right, a million Web searches later, I think I've got this figured out.
Now, most rail lines have something called Positive Train Control.
It prevents accidents by putting train controls-- like brake systems, crossing guards-- online.
So if a conductor falls asleep, someone in an office 100 miles away could hit the brakes.
Which is smart, if the threat is a drowsy conductor.
However, if the threat is a sexy black hat thief It makes it easier for them to take control of the crossing arm.
This device was clearly homemade.
The motherboard is exposed, the soldering is raggedy, and all of the parts are from different manufacturers.
Yeah, and there's no manual to follow to help you put this kind of thing together, so you go to the one source that can tell you how to build anything: Internet.
Which means our targets went through the same process you did.
Anyone who searched for all these components is more than likely our target.
Yeah.
KRUMITZ: You are looking at the search history of the entire population of Los Angeles.
That's 20-plus million people.
However, I created filters based on search terms associated with the rogue device and Nelson's train research.
20 million becomes 105.
All right, that's still a long list, though.
We need to focus on what we know about the hackers.
All right, they're female, they're in their early 20s.
RUSSELL: So we eliminate all men and all females outside of the age range.
All right, down to 30.
We know they're obsessed with celebrity culture.
All right, so eliminate anyone who hasn't done a search on gossip or popular culture sites in the last 24 hours-- sites like TMZ or Gossip News Entertainment.
KRUMITZ: Okay.
Down to eight.
Yes! All right, what about the watches the girls stole from Joel? There's a chance they would've looked into their value before committing to the robbery, right? Narrowing down to anyone searching for Ball watches One result.
Boom, right there.
(phone buzzes) All right, Krumitz, match that IP address to a physical address.
Elijah, you're with SWAT.
Hello? SILVER: Deputy Director, I've just been informed that one of your black hats is bringing a lawsuit against the FBI.
What? I'm looking at the legal documents right now.
They just hit my desk.
Uh, sir, a-a few weeks ago, I testified at Raven Ramirez's 5K1 hearing.
My recommendation was that she spend more time with Cyber.
I guess she filed a suit.
But the lawsuit wasn't filed by Ms.
Ramirez.
It was filed by Brody Nelson.
I don't know what to say.
Sir I need some time to figure out what is going on.
Talk to Mr.
Nelson.
Then get back to me.
Avery, we've got an address.
AGENT: Hup! Let's go, hup! FBI! OFFICER: Clear! OFFICER 2: Don't move! Clear.
OFFICER: Freeze.
OFFICER: All clear.
MUNDO: It's clear! It's all clear.
Oh, wow.
I didn't even know you could find a couch that shade of pink.
AGENT: Yeah, there's nobody here.
Guys, what do you see in each one of these photos? That's Riley Van Lowe.
RUSSELL: The female victim.
RYAN: She wasn't a victim at all.
She didn't even know Joel Matthews.
She met him the night she went to rob him.
Riley Van Lowe is a member of the Flash Squad.
All right, cheap furniture, but the closet's full of high-end clothes, shoes, and handbags.
RUSSELL: Got a shoebox full of expensive-looking jewelry.
Oh, yeah, here we go-- it's the amethyst ring that we saw in the video.
I just found evidence on Ms.
Van Lowe's laptop proving that this device was used to shoot the Flash Squad videos, confirming that she was part of that robbery.
Standard soldering kit.
This has everything they would need to rig the device used to hack the train-crossing arm.
So Riley is the Flash Squad's hardware hacker.
This changes everything that happened that night.
What the hell?! Hands where I can see them! Don't even think about moving! Please.
Don't.
Which leaves one big unanswered question.
Yeah.
Why was Riley shot during the robbery? Well, maybe Joel Matthews got a gun away from one of the girls and shot her.
It's not possible.
There's no GSR trace on his hands.
MUNDO: Well, we know from the police report that Riley's gunshot wound was not self-inflicted.
Something happened that night that caused one of those girls to shoot her.
MUNDO: Unfortunately, we can't ask Riley.
Her condition is the same.
She's stable, but unconscious.
RUSSELL: Riley knows all the details of what happened at the train crossing.
She's of value to us.
But she's gonna be a huge threat to her friends.
If she wakes up.
MUNDO: Yeah, I'm gonna put two uniforms on her right now.
Make sure we have eyes on Ms.
Van Lowe at all times.
MAN: What do you mean I can't go in? What do you mean I can't go in?! Someone tell me what happened to my little sister! Uh, Mister, uh, Van Lowe I'm Deputy Director Avery Ryan.
We need to talk.
What if she wakes up? This is bad.
I mean bad bad.
What are we gonna do? I don't know.
I don't know.
Just shut up and let me think.
What if she rats us out? She wanted to call the cops back at the tracks.
If she does, that's your fault.
You're the one who wanted to bring her into the group.
You said we needed someone good with hardware.
I was just trying to help.
Well, you didn't help, Sophia.
You brought us a problem.
(sighs heavily) How much cash do you have on you? I don't know.
60 bucks, maybe.
We gotta get out of here.
We can sell some of the stuff we stole.
I don't think running is a good idea.
We should just turn ourselves in, explain this was just supposed to be fun, nobody was supposed to get hurt.
Are you crazy? This isn't high school.
We killed someone.
We got only one option.
We're getting the hell out of here together.
Say it.
Okay.
Okay.
We run.
MADISON: I know you've been waiting for our latest video, so here it is.
Wanted to show you some of the hot items we just picked up.
Uh, my sister was studying to be a clinical engineer.
She wanted to help people, not hurt them.
There's no way Riley's one of these girls.
We matched this amethyst birthstone ring to one that we found here in the apartment.
The ring was never on the list of items reported stolen.
My mom gave her that ring.
This makes no sense.
Do you recognize any of these girls as your sister's friends? Their voices maybe? No.
Riley had a hard time making friends.
She was always so focused on school.
We haven't spoken since she moved to L.
A.
two years ago.
I hated the guy she was dating.
She stopped taking my calls.
I was so excited to get a call about Riley.
Then I found out she's in the hospital, and now you're telling me she's a thief.
I just It's a lot to process.
Do you know who shot her? We're still trying to figure out what happened last night.
RAMIREZ: I have been through all of Riley Van Lowe's social media accounts and e-mails.
There's not a single mention of Flash Squad or anything that can help identify the other members of the crew.
I scanned Riley's hard drive.
Her computer wasn't responsible for the Freelane hack.
(phone beeps) What's with the face? Avery just texted me.
(scoffs) She must have found out about the lawsuit.
Nelson, you filed without talking to Avery? Why? Because in the case of Brody Nelson against the USA, Avery is the USA.
(computer beeping) This is weird.
Riley has a second e-mail account.
She's been logging in and out almost every day for the past two months, but it's empty.
You mean she's been deleting her e-mails? Hold on.
I'll run a recovery program.
That was fast.
Because there's nothing to recover.
No messages were ever sent or received.
Okay, so why would she set up an e-mail account that she signs into every day but doesn't use? This is why.
The draft folder.
There's one item.
Exactly.
Call Krumitz.
Raven just got us our first lead.
Could help us identify the rest of the Flash Squad.
They communicated through an e-mail account, but never actually sent any e-mails.
Riley and her accomplices-- they shared log-in credentials for the same e-mail account, but they never sent e-mails to each other.
They just wrote wrote drafts and then saved them.
MUNDO: Terrorists and cartels have been communicating this way for years, thinking it leaves no digital trail.
Krumitz, do you think you can recover previous versions of these draft e-mails? Yeah.
On it.
(computer chirping) We got nothing.
No names, nicknames, addresses, anything in these drafts that can get us an identity.
Hey, maybe we can predict a pattern of behavior, speculate on their next move, based on these e-mails.
What are we looking for exactly? A pattern of speech, like a hierarchy.
Like this one, for instance.
She uses assertive language, she likes to call the shots.
âTake the SUV and pick me up at 8:00.
I am finally gonna be famous!â Now she is the alpha.
All right, this one's quick to agree, reiterates the order.
âPerfect.
I'll bring my laptop, reroute him from the car.
â âHope GNE uses a good photo of us.
â Well, she's a follower.
She will always be loyal to the leader.
She is a beta.
Clearly, they are both preoccupied with fame.
Okay, so this is beta.
Then I got a candidate for omega.
âI'm up for whatever.
âSorry it took me so long to respond.
You guys always know better than I do.
â She's the omega.
Subservient, apologetic, self-deprecating.
Now it's time for us to play shrink.
RUSSELL: Riley's e-mails to her friends are very telling.
You know, I'm starting to think that Riley Van Lowe is our omega.
I agree.
She consistently uses subservient language in all her personal e-mails.
And look at this one to one of her professors.
She seems to be struggling with her tuition.
Her brother said that she always had a hard time making friends, so by joining the Flash Squad, she was able to do both.
Right, grab a little quick cash for tuition and feel accepted at the same time.
These girls pressured her to join the Flash Squad.
Why? Well, Riley was the hardware hacker, right? They needed her to rig the train hacking device.
All of these girls have their own unique talents they bring to the squad.
Know what? You're right.
The beta was the coder.
She rerouted from the car.
Alpha just seems like she's getting rich off the other two girls' hacking skills.
She's the muscle.
She takes charge, she intimidates.
You know what? The omega.
The omegas shows fear, right? They could become a liability.
I think this is the reason why Riley Van Lowe got shot.
Grab the watches.
(crossing bell clanging) That was not a smart move.
I'm begging you (Riley gasps) (groaning) You shot him! What the hell are you doing, Madison?! Just get the watches, Riley! Let's go! We can't just leave him here.
We have to call the cops.
He could die.
Do not call the police! Riley, do what she says.
This was never part of the plan! You don't make the plan.
I make the plan, so put the phone down! (grunting) Put the phone (Riley groans) down! (Riley panting, Sophia gasps) Maddie, what did you do?! (crossing bell clanging) Just grab the watches! (Sophia gasps and pants) (Sophia gasps) Just got off the phone with LAPD.
Riley Van Lowe is conscious.
First thing she did-- asked for a lawyer.
We're not gonna get anything else from her.
KRUMITZ: More bad news.
Just compared notes with Raven and Nelson.
Looks like the Flash Squad used the same Syrian IP address to stay anonymous for the Freelane hack, the videos and the draft e-mails.
So these two girls have shot a man in cold blood and left nothing behind but digital dead ends? RYAN: No, no, no.
Wait, wait.
The Flash Squad revealed their weakness in these draft e-mails.
What is the one thing that they care more about? To be famous.
GNE.
Exactly.
And that is how we're gonna catch them.
Listen up, bitches.
We're the Flash Squad.
This is how we do.
MALE ANNOUNCER: That's right, these rainbowed-visor vixens want your stuff.
But let's be real.
With legs like that, all they had to do was ask.
RUSSELL: Okay, so, we're gonna get GNE to post our fake video on their Web site, and then to blast the link out on ToggleFly.
The Flash Squad wants to be famous.
The second that they see their name in a headline, they'll click on that link.
The moment they do, the super cookie I embedded into the Web page will send us back their real IP address.
Right, but isn't this a public site? Aren't thousands of other other people gonna be seeing the same page? The way Flash Squad's trending, more like hundreds of thousands.
But the beauty of the super cookie is that after it sends us each visitor's IP, it attaches itself to their browser and spies on their Web traffic.
We'll be able to see every place the users go after they visit the GNE site.
Hopefully, based on the sites they visit, we'll be able to identify our targets.
If they take the bait.
RYAN: These girls-- they won't be able to help themselves.
SOPHIA: This place is so vile.
How long do we have to stay here? (phone dings twice) (chimes) Oh, my God! Maddie, we did it! We're on GNE! We did it! (laughs) KRUMITZ: Okay, this thing's going viral.
200,000 views and climbing.
Nelson, Raven, you seeing this? NELSON: This is insane.
NELSON: It's just BuzzFeed, Kardashians, FriendAgenda over and over again.
RAMIREZ: Everyone who's watched this video is going to the same sites.
How are we gonna isolate the Flash Squad? RYAN: Human behavior is reliable and disloyalty is their greatest fear.
ANNOUNCER: Can't get enough? Good, 'cause we've got more Flash Squad.
Ah! This is so awesome! (both laugh) ANNOUNCER: Check back in the a.
m.
for an exclusive tell-all interview with the group's leader after she's released from police custody.
Riley woke up.
âLeaderâ? She's going to tell them everything.
They're calling her the leader? (sighs) Oh, my God.
RAMIREZ: Guys, I don't know about this.
The IP addresses are coming in so fast.
NELSON: Right there! Someone just searched for âRiley Van Lowe plus leader.
â RYAN: Th-That's it! That's them! Besides us, the Flash Squad are the only people that know Riley's name.
They took the bait.
RAMIREZ: Got the IP address.
Give me a second to recover the physical address associated with the search.
Got it.
I'm sending the address to you now.
It-it looks like a motel off the 405 Freeway.
Clear! AGENT: Clear! AGENT 2: Yeah, nothing back here.
Okay, so, the motel manager says two girls paid cash.
He did not get a good look at them.
They jumped in a car and headed west a few minutes ago.
Didn't catch the make or model either.
These girls are scared.
They're feeling out of control.
They know that we're closing in on them.
They won't draw attention to themselves.
Yeah, but we don't even have a description.
RUSSELL: Whoa.
Wait a second here.
Now the girls don't know that, though.
You know what? You're right.
As far as they know, Riley gave them up, and every cop on every corner could have their photo.
Which means they'll do anything they can to avoid law enforcement.
Freelane.
It gives the location of police officers-- they'll use the app to try to escape.
Right.
Instead of chasing our targets, we use the Freelane app to report police sightings and herd them right to us.
I'm rerouting the Freelane users to the 5 Freeway.
We'll have a clear path on the 405 South, all the way to Mexico.
(laughs) I can taste the tequila already.
(laughs): Ooh.
Uh, okay, po-po ahead.
Turn left here.
(turn signal clicking) Another cop.
Make a right.
(turn signal clicking) Oh, my God.
They're everywhere.
Just head down that street.
(tires screeching) (tires screeching, engine revving) Okay, good, good (chuckles) (chuckles) Just make a right up here.
There's a freeway entrance.
(siren wailing) I thought you said it was clear! What the hell is this?! (tires screech) Damn it, Sophia! Okay, back up! Back up! Go! (siren wailing) (grunts) (tires screeching) OFFICER: Out of the vehicle! MUNDO: FBI! Hands in the air! Get out of the car! Step out of the vehicle! KRUMITZ: Right now! Do it right now! Hands on the hood! OFFICER 2: Cover the car! Just keep your mouth shut, Sophia.
(handcuffs clicking) RYAN: Well, I hope the Flash Squad enjoys their 15 minutes of fame.
RUSSELL: You guys are gonna look great in orange jumpsuit couture! (Ryan chuckles) (phone chimes) If you don't mind, I think I'm gonna, uh, catch up with you guys in DC, soak up a little more L.
A.
sunshine.
Oh, well, give my best to Greer.
(helicopter hovering, officers shouting commands) (siren wailing in distance) (laughs) You made it.
Wow.
Me? Or the view? The view.
All of it.
Come sit.
My father worked right there.
I loved that building.
RUSSELL: You're kidding me.
You know, that-that building is the best example of art deco that's still left in L.
A.
I love art deco.
I always have.
Have you ever seen the Palais de Chaillot? Paris.
No.
I haven't been there.
It's on my bucket list.
I'm considering taking a job there.
You should come.
Check it off your list.
How long you gonna be there? Six to eight months.
Still up in the air.
Uh I wish I could do that.
I'm afraid my, um my Seahawks would be hopeless without me on game day.
And there's no football in France.
What are you doing? I'm asking you to dance.
But there's no music.
Sure there is.
What song are you dancing to? âMacarena,â of course.
(chuckles) (laughs) I'm not Joel Matthews.
He was much better at this type of thing.
But I'm gonna give it a whirl, because I thought Joel's friends and family should know that the event he spent so many hours planning raised over $150,000 for the children's hospital last night.
Joel was a great man and a great friend.
We're all gonna miss him very much.
How cool is that? And all these people are pledging more donations on his FriendAgenda memorial page.
Yeah.
Good to see not everyone out there's a materialistic fame junky.
(chuckles) One second.
Why didn't you come to me first? And say what, that I think I found evidence of FBI misconduct? I would have helped you.
Really, Avery? 'Cause I saw how much you helped Raven.
Hey, that's out of line.
Raven's case was a completely different circumstance.
Listen, I appreciate everything that you've done-- bringing me here, believing in me when no one else would.
But this, we're talking about my life.
You need to know, if you go down this path, it could have very real consequences.
Suing the FBI without coming to me first is not the way to go about this.
Are you mad because I didn't come to you or because the FBI screwed up and it reflects poorly on you? Nelson, you're dangerously close to insubordination.
I am mad! I'm mad because if you lose this, they can revoke your plea deal.
You'll have a lot less freedom behind bars.
Well, maybe that's-that's a risk I'm willing to take.
(knocking on door) The exact two people I wanted to see.
You filed a lawsuit against the FBI.
I wanted to know if you're willing to drop it.
Right now.
(sighs) What happened in my case (sighs) wasn't right.
And what the FBI did was wrong.
And it led to my conviction.
So, no, sir I'm not willing to drop this.
I'm seeing this through to the end.
All right.
Effective immediately, the FBI is dropping all charges against Brody Nelson.
Your record will be expunged.
You're a free man.
(gasps) I know that Cyber's Hacker-for-Hire program is important to you.
It's more than important, sir.
It's always been a trial program.
It wasn't to me, Marcus.
SILVER: I understand that, Avery.
But this program has gotten away from you.
I don't think that's a fair characterization.
Nelson's lawsuit isn't Nelson's lawsuit is just the latest example.
Do I really need to remind you of Tobin and the secret files he stole on your watch? Avery, after considerable thought, I'm terminating the program.
RYAN: With all due respect, sir, hackers like Nelson are the only ones who can keep up with our enemies.
Look, I'm the first to admit that this program has been less than perfect.
But the way these kids think, it's not something you can teach in an academy.
Without them, y-you're tying my hands.
You're making us less safe.
Sir, without them, you're making my job harder.
Then your job is harder, Avery.
What happened? Director Silver just ended the Hacker-for-Hire program.
It's effective immediately.
What about your case? Case dropped.
Time served.
Raven, we are free.
We can go anywhere we want.
No, Nelson.
No, you're free to go wherever you want.
There was a loophole in your case, not mine.
If the Hacker-for-Hire program is really gone, I'm going to jail.
@elderman
You given any thought to what you want to do after? You don't trust me.
I just don't trust your judgment.
It's like a parole island here.
NELSON: It's like, no matter what I do right, I can't shake what I did wrong.
Eight million.
I won't tell anybody.
Come on.
You know where it is.
I didn't steal it.
I'm gonna find out who did.
And when I do, I'm gonna put that bastard in prison.
Come on.
There's a spring in your step, you got a grin a mile wide.
You, sir, are smitten.
Who is she? Greer Latimore.
RUSSELL: I'm really feeling it.
She's a former Secret Service agent.
Dabble in private investigations.
Oh, boy.
love, give me diamonds love, give me diamonds love, give me diamonds love, give me diamonds I'm already in love with myself So in love with myself I'm already in love with myself love, give me diamonds Oh, no, that love , I won't do it Love, love, love, love, love (car door closes) Ready? Please don't.
I'm begging you.
Please don't WOMAN (echoing): You shot him! (panting) (train horn blows in distance) (panting) You're late.
I'm sorry about that.
You sure you're willing to risk going to jail for this? That's my problem, not yours.
It's all there.
Make sure nobody knows you got this from me.
(sighs) (phone buzzes) (siren wailing in distance) (horns honking) RAMIREZ: Where the hell have you been? Avery called the team together three hours ago.
Okay.
So where's everyone else? On their way to Los Angeles.
And we're working from here.
The app Freelane has been hacked.
Look at this.
Instead of directing L.
A.
users to their destination, it's sending them to remote locations.
A week ago, my I.
T.
department flagged a number of intrusions into the network.
The hacker's knowledge of the system led us to believe that it could be one of my employees.
Which is why they called my private investigation firm.
So rather than reach out to authorities, they decided to keep this investigation internal.
Exactly.
It's in the best interest of the company to avoid unnecessary panic.
Any loss of confidence, the price of your stock plunges.
Based on the fact that you called in the Cyber Division, can we assume that you've ruled out an inside job? Yes.
It appeared to be an outside intrusion that forced the algorithm that calculates the most efficient route to malfunction.
But why hack Freelane? MAN: Someone wanted to reroute drivers.
Five of our users, all in L.
A.
, were led to remote locations.
FEMALE ELECTRONIC VOICE: Approaching destination.
You've arrived at your destination.
LAPD reported that each driver was robbed at gunpoint by three young women wearing masks.
I found a connection between the Freelane app and the robberies.
They targeted Freelane users 'cause they blindly follow the app's navigation.
Most users don't even question the app when it reroutes 'em.
They just go where it leads.
This is why I'll never give up my Thomas Guide.
You can't hack a spiral-bound stack of papers.
Freelane I.
T.
just found another intrusion into the network, but LAPD has no recent reports of similar robberies.
KRUMITZ: Well, let's plug in, source the intrusions.
Let's do it.
Dude, who's that stone-cold hottie private investigator? Greer.
What?! That's Greer? D.
B.
's Gree Wow! Diebenkorn for the win.
RYAN: Mr.
Jennings, I recommend that you use your app's direct messaging feature to let your users know that they should avoid any unfamiliar routes.
No, I can't do that.
You can't or you won't? The benefit of Freelane is that it recommends unfamiliar routes because they're the least traveled and often the fastest.
But we wouldn't know that without our users.
You need the users in order for your app to work.
Yes.
It's crowd-sourced navigation.
Users provide real-time updates of traffic accidents, lane closures, stalled vehicles.
FEMALE ELECTRONIC VOICE: Caution! Vehicle on the shoulder ahead.
Has the vehicle moved? And then the user responses help our algorithm narrow down the options for the fastest route.
Mr.
Jennings, we recognize the value of your app, but you have a responsibility to let your users know there is a risk.
Avery, we just sourced all the intrusions onto the network.
Unfortunately, they all lead back to the same IP address in Syria.
Obviously a proxy.
And most likely using a command and control server to anonymize their IP address.
This is a dead end.
KRUMITZ: Guys, I just got an I.
D.
on the latest user to get rerouted.
It's Joel Matthews.
His cell phone stopped moving right in the middle of his route.
Been there for hours.
Could be an active crime scene.
(siren wailing, tires screech) (tires screech, siren stops) All right, we got a body! (over radio): Charlie 2-3.
I'm en route.
OFFICER: Come with me! Keep your eye on the rooftops.
(crossing signal bells dinging) (siren approaching) MUNDO: Two victims.
One male, one female.
RUSSELL: This guy was shot at close range.
MUNDO: He's dead.
KRUMITZ: There's a mask.
More than likely belongs to one of our suspects.
RYAN: I got a pulse! She's alive! Get the EMTs! OFFICER: Nobody around, right? FEMALE OFFICER: Nothing, Jack.
MUNDO: Requesting an EMT at the corner of Mateo and Sixth.
CSI Cyber 2x17 Flash Squad I know you've deceived me, now here's a surprise I know that you have, 'cause there's magic in my eyes I can see for miles and miles I can see for miles and miles I can see for miles and miles And miles Oh, yeah.
@elderman Hey, y'all, Flash Squad here.
Kisses.
I know you've been waiting for our latest video.
Wanted to show you some of the hot items we just picked up.
I know you're thinking you need cold, hard cash to get your hands on this high-end fashion.
But, really, all you need is this.
KRUMITZ: This is one of the videos the group posted.
They call themselves the Flash Squad.
I remember the good old days, when criminals would just stash their loot and lay low.
Now they make videos bragging about it, and social media turns 'em into online celebrities with thousands of followers.
RYAN: Keeping up with the Kardashians is expensive.
They just turned to crime to do it.
Where'd you get this video? I sent Raven a picture of the mirrored mask we recovered here at the crime scene.
She used an image search.
According to the police report, those luxury items the girls were flaunting were reported stolen two weeks ago.
So that confirms that the Flash Squad is responsible for the theft.
The question is: are they hackers? And Nelson sourced this video.
It was posted from the same Syrian IP that originated the Freelane hack.
Looks like what started as armed robbery just escalated to murder.
(overlapping, indistinct conversation and radio chatter) Well, this turned out great.
Never imagined our paths crossing professionally.
I know.
I was surprised by your call.
L.
A.
's a long way from DC.
You take a lot of West Coast investigations? I oversee all of our firm's L.
A.
clients.
I grew up here.
Didn't get home much during my time with the Secret Service.
This gives me a chance to see my family.
I'm dating a Valley Girl? (imitating Valley accent): Oh, my God.
No.
You're dating a Dena girl.
Pasadena.
MUNDO: No wallet or I.
D.
on the male Vic.
Probably stolen.
Vehicle registration confirms it's Joel Matthews.
34 years old.
Senior Executive at Palo Vista Children's Hospital, in Orange County.
No luck I.
D.
'ing his female companion? No.
No sign of a wallet or purse or cell.
Flash Squad must've stolen those as well.
The robbery fits the Flash Squad's M.
O.
but murder, I'm not so sure about that.
The female victim is still in surgery.
If she pulls through, she may be able to I.
D.
at least one of her attackers.
You see that? Looks like the victim's car was rear-ended.
LATIMORE: Fits with the previous reported thefts.
All of the victims were involved in a fender bender before they were robbed.
RUSSELL: Based on the location of the paint transfer, I'm guessing the killer was driving a black SUV.
I'll have the locals put out an APB.
Although a black SUV with a young female behind the wheel isn't exactly gonna stand out in Los Angeles.
Elijah, what are you thinking? What do you make of that? Not a train in sight.
So why is the crossing arm still down? That's a very good question.
I've got a malicious code that allowed our black hat to reroute Joel Matthews to the train tracks.
Whoa! Whoa, look at this.
Nelson.
Yeah.
Hmm? What's up? Uh, nothing.
RAMIREZ: Our hacker used the Freelane intrusion to gain access to Joel Matthews' entire phone.
There's digital dust in his credit card app, GPS, and his e-mail.
The moment Joel logged into Freelane, hackers were controlling his device.
(phone beeps) NELSON: And using his connection to the Freelane network, our thieves accessed his phone and searched every app.
That's why there's digital dust everywhere.
So it starts with the Flash Squad finding Freelane users to make purchases at high-end stores.
NELSON: They then use Freelane to direct their users to a secluded spot, then armed robbery.
Joel Matthews' bank account doesn't really paint a picture of a man who shops at high-end boutiques.
He's got less than two grand in his savings.
Hm.
That's because he wasn't shopping.
Based on what I'm seeing on his FriendAgenda page he was picking up a donation-- watches.
He runs a charity auction for a children's hospital.
Just wanted to say thanks to the 106 local businesses that have already opened up their hearts.
We still have 22 hours left until the silent auction.
It's not too late to donate.
Help me give some amazing kids another chance at life.
So unfair.
He seemed like such a good guy.
Okay.
Okay, Nelson.
What is up? I think I found proof in my stock exchange case that the FBI obtained evidence unlawfully.
What?! For the past few weeks I've been searching for the $8 million that went missing in my stock market hack.
And you found it? No.
No, no.
I mean, it's long gone.
But I did find that a crucial piece of evidence the FBI used against me was outside the scope of the federal warrant.
But you told me that your prosecutors had a strong case.
Yeah, but my lawyer said without this evidence the case is thin.
You hired a lawyer? I had to, okay? There's a chance that I can overturn my conviction.
But Nelson you did hack the stock exchange.
You know you were convicted because you were guilty.
No, what I know is the FBI confiscated evidence without a warrant.
Have you talked to Avery? No.
I still don't know if I'm gonna file this lawsuit against the FBI.
A lawsuit?! You could go to jail.
Why would you want to risk that over a technicality? 'Cause I want to have control over my own life again, Raven, that's why, okay? You know? I want to I want to hang out with my old friends.
Use a computer whenever, wherever I want.
Look, man, this is my chance.
And I know that it's risky, but I'm feeling really, really good about this.
Promise me you're not gonna get your hopes up too high.
Because Avery-- she's gonna do what's best for the Cyber Division not Brody Nelson.
RUSSELL: We're gonna be here a while, till LAPD gets answers from Caltrans.
Yeah, well, now that it's officially a criminal investigation, it's time for the P.
I.
to bow out.
No, you're right, you're right.
Would it be wrong for me to kiss you good-bye? Yes.
(no voice) Do we care? Yes.
(chuckles) Figure out why these things are still down? Not yet.
(crossing bell dinging) RUSSELL: What'd you just do? Nothing.
KRUMITZ: Hey, guys I think I'm doing that.
The phone is telling the gate to lower and then I put it in the Faraday Bag, it blocks the signal, arm lifts back up.
RYAN: So, the cell phone's communicating with the train crossing.
So when Joel Matthews' phone approached the train tracks, it somehow told the crossing arm to drop, trapping him.
Oh, yeah, look at this-- discoloration of the bolt.
MUNDO: Fresh tool marks.
Bolt's still loose.
RUSSELL: Oh, yeah.
I'm guessing this is the device that triggered the arm to drop.
Okay, we got a cellular antenna.
It's possible that it detected Joel's phone as they approached the crossing here.
According to the police report, the last two robberies took place at train crossings.
The first two at dead ends.
So the Flash Squad rerouted their victims, using that navigation app, then forced them to stop here, trapping them.
Ugh.
I hope this doesn't make us late.
(bang) What the hell? (crossing bell dinging) Hands where I can see them! Don't even think about moving.
Joel Just give us the watches and no one gets hurt.
Yeah, but clearly, something didn't go according to plans.
So maybe Joel fought back, there was a struggle Get the watches from the car! That was not a smart move.
No, please, don't.
Don't shoot.
No, no, I didn't see anything, I swear.
These girls are dangerous.
We have to get them off the street before they kill again.
(buzzing) Hey.
I thought I told you not to call me on my new phone.
What What do you mean she's still alive? No.
that's that's impossible.
You said they were both dead.
Oh Don't put this all on me.
You're an accomplice, Sophia, don't forget that.
Grab your stuff and get here now.
And don't call me on this phone.
MUNDO: Just got off the phone with the hospital.
Our female Vic is still unconscious, but she's no longer a Jane Doe.
Locals ran prints and got an I.
D.
She's a child care worker.
Riley Van Lowe, 20 years old.
She's got a brother in San Diego.
He's been informed, he's driving up.
So now what? Flash Squad usually posts a video of their latest robbery within an hour, but nothing yet.
Yeah, and I don't think they will.
Killing Joel was an accident and now they're scrambling.
Yeah.
MUNDO: Botched robbery wouldn't explain why they left that Frankenstein'd device on the train crossing arm.
KRUMITZ: Uh, actually, it's not just one device, it's two.
See this here? It's a microcell.
People put it in their homes to boost bad cell reception.
And that one over there-- that's an industrial radio.
The micro-controller, here in the middle, acts as a bridge, lets 'em talk to each other.
Can we trace these components back to the person who built it? There are no fingerprints, no biologicals, no forensic trace of any kind.
Whoever assembled this hardware-- they were very careful.
I've imaged each component.
Sending it back to Tear Down now.
Basically, our last hope is digital dust.
NELSON: All right, a million Web searches later, I think I've got this figured out.
Now, most rail lines have something called Positive Train Control.
It prevents accidents by putting train controls-- like brake systems, crossing guards-- online.
So if a conductor falls asleep, someone in an office 100 miles away could hit the brakes.
Which is smart, if the threat is a drowsy conductor.
However, if the threat is a sexy black hat thief It makes it easier for them to take control of the crossing arm.
This device was clearly homemade.
The motherboard is exposed, the soldering is raggedy, and all of the parts are from different manufacturers.
Yeah, and there's no manual to follow to help you put this kind of thing together, so you go to the one source that can tell you how to build anything: Internet.
Which means our targets went through the same process you did.
Anyone who searched for all these components is more than likely our target.
Yeah.
KRUMITZ: You are looking at the search history of the entire population of Los Angeles.
That's 20-plus million people.
However, I created filters based on search terms associated with the rogue device and Nelson's train research.
20 million becomes 105.
All right, that's still a long list, though.
We need to focus on what we know about the hackers.
All right, they're female, they're in their early 20s.
RUSSELL: So we eliminate all men and all females outside of the age range.
All right, down to 30.
We know they're obsessed with celebrity culture.
All right, so eliminate anyone who hasn't done a search on gossip or popular culture sites in the last 24 hours-- sites like TMZ or Gossip News Entertainment.
KRUMITZ: Okay.
Down to eight.
Yes! All right, what about the watches the girls stole from Joel? There's a chance they would've looked into their value before committing to the robbery, right? Narrowing down to anyone searching for Ball watches One result.
Boom, right there.
(phone buzzes) All right, Krumitz, match that IP address to a physical address.
Elijah, you're with SWAT.
Hello? SILVER: Deputy Director, I've just been informed that one of your black hats is bringing a lawsuit against the FBI.
What? I'm looking at the legal documents right now.
They just hit my desk.
Uh, sir, a-a few weeks ago, I testified at Raven Ramirez's 5K1 hearing.
My recommendation was that she spend more time with Cyber.
I guess she filed a suit.
But the lawsuit wasn't filed by Ms.
Ramirez.
It was filed by Brody Nelson.
I don't know what to say.
Sir I need some time to figure out what is going on.
Talk to Mr.
Nelson.
Then get back to me.
Avery, we've got an address.
AGENT: Hup! Let's go, hup! FBI! OFFICER: Clear! OFFICER 2: Don't move! Clear.
OFFICER: Freeze.
OFFICER: All clear.
MUNDO: It's clear! It's all clear.
Oh, wow.
I didn't even know you could find a couch that shade of pink.
AGENT: Yeah, there's nobody here.
Guys, what do you see in each one of these photos? That's Riley Van Lowe.
RUSSELL: The female victim.
RYAN: She wasn't a victim at all.
She didn't even know Joel Matthews.
She met him the night she went to rob him.
Riley Van Lowe is a member of the Flash Squad.
All right, cheap furniture, but the closet's full of high-end clothes, shoes, and handbags.
RUSSELL: Got a shoebox full of expensive-looking jewelry.
Oh, yeah, here we go-- it's the amethyst ring that we saw in the video.
I just found evidence on Ms.
Van Lowe's laptop proving that this device was used to shoot the Flash Squad videos, confirming that she was part of that robbery.
Standard soldering kit.
This has everything they would need to rig the device used to hack the train-crossing arm.
So Riley is the Flash Squad's hardware hacker.
This changes everything that happened that night.
What the hell?! Hands where I can see them! Don't even think about moving! Please.
Don't.
Which leaves one big unanswered question.
Yeah.
Why was Riley shot during the robbery? Well, maybe Joel Matthews got a gun away from one of the girls and shot her.
It's not possible.
There's no GSR trace on his hands.
MUNDO: Well, we know from the police report that Riley's gunshot wound was not self-inflicted.
Something happened that night that caused one of those girls to shoot her.
MUNDO: Unfortunately, we can't ask Riley.
Her condition is the same.
She's stable, but unconscious.
RUSSELL: Riley knows all the details of what happened at the train crossing.
She's of value to us.
But she's gonna be a huge threat to her friends.
If she wakes up.
MUNDO: Yeah, I'm gonna put two uniforms on her right now.
Make sure we have eyes on Ms.
Van Lowe at all times.
MAN: What do you mean I can't go in? What do you mean I can't go in?! Someone tell me what happened to my little sister! Uh, Mister, uh, Van Lowe I'm Deputy Director Avery Ryan.
We need to talk.
What if she wakes up? This is bad.
I mean bad bad.
What are we gonna do? I don't know.
I don't know.
Just shut up and let me think.
What if she rats us out? She wanted to call the cops back at the tracks.
If she does, that's your fault.
You're the one who wanted to bring her into the group.
You said we needed someone good with hardware.
I was just trying to help.
Well, you didn't help, Sophia.
You brought us a problem.
(sighs heavily) How much cash do you have on you? I don't know.
60 bucks, maybe.
We gotta get out of here.
We can sell some of the stuff we stole.
I don't think running is a good idea.
We should just turn ourselves in, explain this was just supposed to be fun, nobody was supposed to get hurt.
Are you crazy? This isn't high school.
We killed someone.
We got only one option.
We're getting the hell out of here together.
Say it.
Okay.
Okay.
We run.
MADISON: I know you've been waiting for our latest video, so here it is.
Wanted to show you some of the hot items we just picked up.
Uh, my sister was studying to be a clinical engineer.
She wanted to help people, not hurt them.
There's no way Riley's one of these girls.
We matched this amethyst birthstone ring to one that we found here in the apartment.
The ring was never on the list of items reported stolen.
My mom gave her that ring.
This makes no sense.
Do you recognize any of these girls as your sister's friends? Their voices maybe? No.
Riley had a hard time making friends.
She was always so focused on school.
We haven't spoken since she moved to L.
A.
two years ago.
I hated the guy she was dating.
She stopped taking my calls.
I was so excited to get a call about Riley.
Then I found out she's in the hospital, and now you're telling me she's a thief.
I just It's a lot to process.
Do you know who shot her? We're still trying to figure out what happened last night.
RAMIREZ: I have been through all of Riley Van Lowe's social media accounts and e-mails.
There's not a single mention of Flash Squad or anything that can help identify the other members of the crew.
I scanned Riley's hard drive.
Her computer wasn't responsible for the Freelane hack.
(phone beeps) What's with the face? Avery just texted me.
(scoffs) She must have found out about the lawsuit.
Nelson, you filed without talking to Avery? Why? Because in the case of Brody Nelson against the USA, Avery is the USA.
(computer beeping) This is weird.
Riley has a second e-mail account.
She's been logging in and out almost every day for the past two months, but it's empty.
You mean she's been deleting her e-mails? Hold on.
I'll run a recovery program.
That was fast.
Because there's nothing to recover.
No messages were ever sent or received.
Okay, so why would she set up an e-mail account that she signs into every day but doesn't use? This is why.
The draft folder.
There's one item.
Exactly.
Call Krumitz.
Raven just got us our first lead.
Could help us identify the rest of the Flash Squad.
They communicated through an e-mail account, but never actually sent any e-mails.
Riley and her accomplices-- they shared log-in credentials for the same e-mail account, but they never sent e-mails to each other.
They just wrote wrote drafts and then saved them.
MUNDO: Terrorists and cartels have been communicating this way for years, thinking it leaves no digital trail.
Krumitz, do you think you can recover previous versions of these draft e-mails? Yeah.
On it.
(computer chirping) We got nothing.
No names, nicknames, addresses, anything in these drafts that can get us an identity.
Hey, maybe we can predict a pattern of behavior, speculate on their next move, based on these e-mails.
What are we looking for exactly? A pattern of speech, like a hierarchy.
Like this one, for instance.
She uses assertive language, she likes to call the shots.
âTake the SUV and pick me up at 8:00.
I am finally gonna be famous!â Now she is the alpha.
All right, this one's quick to agree, reiterates the order.
âPerfect.
I'll bring my laptop, reroute him from the car.
â âHope GNE uses a good photo of us.
â Well, she's a follower.
She will always be loyal to the leader.
She is a beta.
Clearly, they are both preoccupied with fame.
Okay, so this is beta.
Then I got a candidate for omega.
âI'm up for whatever.
âSorry it took me so long to respond.
You guys always know better than I do.
â She's the omega.
Subservient, apologetic, self-deprecating.
Now it's time for us to play shrink.
RUSSELL: Riley's e-mails to her friends are very telling.
You know, I'm starting to think that Riley Van Lowe is our omega.
I agree.
She consistently uses subservient language in all her personal e-mails.
And look at this one to one of her professors.
She seems to be struggling with her tuition.
Her brother said that she always had a hard time making friends, so by joining the Flash Squad, she was able to do both.
Right, grab a little quick cash for tuition and feel accepted at the same time.
These girls pressured her to join the Flash Squad.
Why? Well, Riley was the hardware hacker, right? They needed her to rig the train hacking device.
All of these girls have their own unique talents they bring to the squad.
Know what? You're right.
The beta was the coder.
She rerouted from the car.
Alpha just seems like she's getting rich off the other two girls' hacking skills.
She's the muscle.
She takes charge, she intimidates.
You know what? The omega.
The omegas shows fear, right? They could become a liability.
I think this is the reason why Riley Van Lowe got shot.
Grab the watches.
(crossing bell clanging) That was not a smart move.
I'm begging you (Riley gasps) (groaning) You shot him! What the hell are you doing, Madison?! Just get the watches, Riley! Let's go! We can't just leave him here.
We have to call the cops.
He could die.
Do not call the police! Riley, do what she says.
This was never part of the plan! You don't make the plan.
I make the plan, so put the phone down! (grunting) Put the phone (Riley groans) down! (Riley panting, Sophia gasps) Maddie, what did you do?! (crossing bell clanging) Just grab the watches! (Sophia gasps and pants) (Sophia gasps) Just got off the phone with LAPD.
Riley Van Lowe is conscious.
First thing she did-- asked for a lawyer.
We're not gonna get anything else from her.
KRUMITZ: More bad news.
Just compared notes with Raven and Nelson.
Looks like the Flash Squad used the same Syrian IP address to stay anonymous for the Freelane hack, the videos and the draft e-mails.
So these two girls have shot a man in cold blood and left nothing behind but digital dead ends? RYAN: No, no, no.
Wait, wait.
The Flash Squad revealed their weakness in these draft e-mails.
What is the one thing that they care more about? To be famous.
GNE.
Exactly.
And that is how we're gonna catch them.
Listen up, bitches.
We're the Flash Squad.
This is how we do.
MALE ANNOUNCER: That's right, these rainbowed-visor vixens want your stuff.
But let's be real.
With legs like that, all they had to do was ask.
RUSSELL: Okay, so, we're gonna get GNE to post our fake video on their Web site, and then to blast the link out on ToggleFly.
The Flash Squad wants to be famous.
The second that they see their name in a headline, they'll click on that link.
The moment they do, the super cookie I embedded into the Web page will send us back their real IP address.
Right, but isn't this a public site? Aren't thousands of other other people gonna be seeing the same page? The way Flash Squad's trending, more like hundreds of thousands.
But the beauty of the super cookie is that after it sends us each visitor's IP, it attaches itself to their browser and spies on their Web traffic.
We'll be able to see every place the users go after they visit the GNE site.
Hopefully, based on the sites they visit, we'll be able to identify our targets.
If they take the bait.
RYAN: These girls-- they won't be able to help themselves.
SOPHIA: This place is so vile.
How long do we have to stay here? (phone dings twice) (chimes) Oh, my God! Maddie, we did it! We're on GNE! We did it! (laughs) KRUMITZ: Okay, this thing's going viral.
200,000 views and climbing.
Nelson, Raven, you seeing this? NELSON: This is insane.
NELSON: It's just BuzzFeed, Kardashians, FriendAgenda over and over again.
RAMIREZ: Everyone who's watched this video is going to the same sites.
How are we gonna isolate the Flash Squad? RYAN: Human behavior is reliable and disloyalty is their greatest fear.
ANNOUNCER: Can't get enough? Good, 'cause we've got more Flash Squad.
Ah! This is so awesome! (both laugh) ANNOUNCER: Check back in the a.
m.
for an exclusive tell-all interview with the group's leader after she's released from police custody.
Riley woke up.
âLeaderâ? She's going to tell them everything.
They're calling her the leader? (sighs) Oh, my God.
RAMIREZ: Guys, I don't know about this.
The IP addresses are coming in so fast.
NELSON: Right there! Someone just searched for âRiley Van Lowe plus leader.
â RYAN: Th-That's it! That's them! Besides us, the Flash Squad are the only people that know Riley's name.
They took the bait.
RAMIREZ: Got the IP address.
Give me a second to recover the physical address associated with the search.
Got it.
I'm sending the address to you now.
It-it looks like a motel off the 405 Freeway.
Clear! AGENT: Clear! AGENT 2: Yeah, nothing back here.
Okay, so, the motel manager says two girls paid cash.
He did not get a good look at them.
They jumped in a car and headed west a few minutes ago.
Didn't catch the make or model either.
These girls are scared.
They're feeling out of control.
They know that we're closing in on them.
They won't draw attention to themselves.
Yeah, but we don't even have a description.
RUSSELL: Whoa.
Wait a second here.
Now the girls don't know that, though.
You know what? You're right.
As far as they know, Riley gave them up, and every cop on every corner could have their photo.
Which means they'll do anything they can to avoid law enforcement.
Freelane.
It gives the location of police officers-- they'll use the app to try to escape.
Right.
Instead of chasing our targets, we use the Freelane app to report police sightings and herd them right to us.
I'm rerouting the Freelane users to the 5 Freeway.
We'll have a clear path on the 405 South, all the way to Mexico.
(laughs) I can taste the tequila already.
(laughs): Ooh.
Uh, okay, po-po ahead.
Turn left here.
(turn signal clicking) Another cop.
Make a right.
(turn signal clicking) Oh, my God.
They're everywhere.
Just head down that street.
(tires screeching) (tires screeching, engine revving) Okay, good, good (chuckles) (chuckles) Just make a right up here.
There's a freeway entrance.
(siren wailing) I thought you said it was clear! What the hell is this?! (tires screech) Damn it, Sophia! Okay, back up! Back up! Go! (siren wailing) (grunts) (tires screeching) OFFICER: Out of the vehicle! MUNDO: FBI! Hands in the air! Get out of the car! Step out of the vehicle! KRUMITZ: Right now! Do it right now! Hands on the hood! OFFICER 2: Cover the car! Just keep your mouth shut, Sophia.
(handcuffs clicking) RYAN: Well, I hope the Flash Squad enjoys their 15 minutes of fame.
RUSSELL: You guys are gonna look great in orange jumpsuit couture! (Ryan chuckles) (phone chimes) If you don't mind, I think I'm gonna, uh, catch up with you guys in DC, soak up a little more L.
A.
sunshine.
Oh, well, give my best to Greer.
(helicopter hovering, officers shouting commands) (siren wailing in distance) (laughs) You made it.
Wow.
Me? Or the view? The view.
All of it.
Come sit.
My father worked right there.
I loved that building.
RUSSELL: You're kidding me.
You know, that-that building is the best example of art deco that's still left in L.
A.
I love art deco.
I always have.
Have you ever seen the Palais de Chaillot? Paris.
No.
I haven't been there.
It's on my bucket list.
I'm considering taking a job there.
You should come.
Check it off your list.
How long you gonna be there? Six to eight months.
Still up in the air.
Uh I wish I could do that.
I'm afraid my, um my Seahawks would be hopeless without me on game day.
And there's no football in France.
What are you doing? I'm asking you to dance.
But there's no music.
Sure there is.
What song are you dancing to? âMacarena,â of course.
(chuckles) (laughs) I'm not Joel Matthews.
He was much better at this type of thing.
But I'm gonna give it a whirl, because I thought Joel's friends and family should know that the event he spent so many hours planning raised over $150,000 for the children's hospital last night.
Joel was a great man and a great friend.
We're all gonna miss him very much.
How cool is that? And all these people are pledging more donations on his FriendAgenda memorial page.
Yeah.
Good to see not everyone out there's a materialistic fame junky.
(chuckles) One second.
Why didn't you come to me first? And say what, that I think I found evidence of FBI misconduct? I would have helped you.
Really, Avery? 'Cause I saw how much you helped Raven.
Hey, that's out of line.
Raven's case was a completely different circumstance.
Listen, I appreciate everything that you've done-- bringing me here, believing in me when no one else would.
But this, we're talking about my life.
You need to know, if you go down this path, it could have very real consequences.
Suing the FBI without coming to me first is not the way to go about this.
Are you mad because I didn't come to you or because the FBI screwed up and it reflects poorly on you? Nelson, you're dangerously close to insubordination.
I am mad! I'm mad because if you lose this, they can revoke your plea deal.
You'll have a lot less freedom behind bars.
Well, maybe that's-that's a risk I'm willing to take.
(knocking on door) The exact two people I wanted to see.
You filed a lawsuit against the FBI.
I wanted to know if you're willing to drop it.
Right now.
(sighs) What happened in my case (sighs) wasn't right.
And what the FBI did was wrong.
And it led to my conviction.
So, no, sir I'm not willing to drop this.
I'm seeing this through to the end.
All right.
Effective immediately, the FBI is dropping all charges against Brody Nelson.
Your record will be expunged.
You're a free man.
(gasps) I know that Cyber's Hacker-for-Hire program is important to you.
It's more than important, sir.
It's always been a trial program.
It wasn't to me, Marcus.
SILVER: I understand that, Avery.
But this program has gotten away from you.
I don't think that's a fair characterization.
Nelson's lawsuit isn't Nelson's lawsuit is just the latest example.
Do I really need to remind you of Tobin and the secret files he stole on your watch? Avery, after considerable thought, I'm terminating the program.
RYAN: With all due respect, sir, hackers like Nelson are the only ones who can keep up with our enemies.
Look, I'm the first to admit that this program has been less than perfect.
But the way these kids think, it's not something you can teach in an academy.
Without them, y-you're tying my hands.
You're making us less safe.
Sir, without them, you're making my job harder.
Then your job is harder, Avery.
What happened? Director Silver just ended the Hacker-for-Hire program.
It's effective immediately.
What about your case? Case dropped.
Time served.
Raven, we are free.
We can go anywhere we want.
No, Nelson.
No, you're free to go wherever you want.
There was a loophole in your case, not mine.
If the Hacker-for-Hire program is really gone, I'm going to jail.
@elderman