1 00:04:53,560 --> 00:04:55,940 An accident has been reported at Chai Wan Nuclear Power Station. 2 00:06:50,080 --> 00:06:53,289 Hathaway. Cell search. Hands behind you. 3 00:07:12,840 --> 00:07:15,002 Open 16. 4 00:07:15,120 --> 00:07:16,485 Go, go, go! 5 00:07:21,520 --> 00:07:23,204 Search everything. 6 00:07:29,560 --> 00:07:30,800 - Get off that! - Hey! 7 00:07:31,480 --> 00:07:33,005 Take him down! 8 00:07:39,440 --> 00:07:40,726 One, two, three, up! 9 00:07:45,040 --> 00:07:46,883 Stay strong, carnal. 10 00:07:49,320 --> 00:07:52,180 This was found in your cell. 11 00:07:52,280 --> 00:07:55,300 You added $900 to all your pals' commissary accounts 12 00:07:55,400 --> 00:07:57,340 in your cell block. 13 00:07:57,440 --> 00:07:59,420 Is this the attack tool? 14 00:07:59,520 --> 00:08:00,885 With it, you open up a terminal 15 00:08:01,000 --> 00:08:03,180 and that gives you a command line? 16 00:08:03,280 --> 00:08:07,620 That how you broke into the network and plussed-up the balances? 17 00:08:07,720 --> 00:08:08,687 No. 18 00:08:08,800 --> 00:08:10,980 I used it to call Santa in the North Pole 19 00:08:11,080 --> 00:08:13,481 and told him to do Christmas early this year. 20 00:10:23,240 --> 00:10:25,242 What do we know about this guy? 21 00:10:26,360 --> 00:10:28,140 His grandfather was a military commander 22 00:10:28,240 --> 00:10:29,540 in Shanghai in the '20s, 23 00:10:29,640 --> 00:10:32,540 in the '30s against the Japanese through the Civil War. 24 00:10:32,640 --> 00:10:35,980 His father became China's Undersecretary for Trade to the UN. 25 00:10:36,080 --> 00:10:37,300 He came with to New York. 26 00:10:37,400 --> 00:10:39,500 Bronx High School of Science, MIT. 27 00:10:39,600 --> 00:10:41,780 His sister's a network engineer in the private sector. 28 00:10:41,880 --> 00:10:43,211 She grow up in New York, too? 29 00:10:43,840 --> 00:10:44,966 No. 30 00:10:45,080 --> 00:10:48,100 He's a rising star in PLA's Cyber Defense section. 31 00:10:48,200 --> 00:10:49,406 Liaise with them? 32 00:10:50,800 --> 00:10:54,122 It's inviting them into the henhouse, Carol. 33 00:10:54,240 --> 00:10:56,180 Stanley, we go head-to-head with the Chinese 34 00:10:56,280 --> 00:10:58,420 on their cyber intrusion every day of the week. 35 00:10:58,520 --> 00:11:02,764 Not a bad idea to be face-to-face working with them, for once. 36 00:11:06,720 --> 00:11:10,420 You monitor very closely what they do and do not have access to. 37 00:11:10,520 --> 00:11:11,567 Okay? 38 00:11:12,880 --> 00:11:15,008 Okay? Send the code. 39 00:11:25,640 --> 00:11:26,880 Okay. 40 00:12:23,960 --> 00:12:25,380 - Let's go somewhere we can talk. - Hey, hey... 41 00:12:35,640 --> 00:12:38,007 English might be better. Come on. 42 00:12:44,800 --> 00:12:47,420 - Tomorrow? I can't. It's impossible. - Why not? 43 00:12:47,520 --> 00:12:49,420 I've got an optical-overlay network 44 00:12:49,520 --> 00:12:52,980 that's got to be up in 17 days. 45 00:12:53,080 --> 00:12:55,260 They sent me some code tonight. 46 00:12:55,360 --> 00:12:58,728 The black hat who hit the Chai Wan reactor. 47 00:12:58,840 --> 00:13:01,366 When I looked at the code, it was... 48 00:13:02,000 --> 00:13:03,126 And? 49 00:13:04,560 --> 00:13:08,820 I have to have a network engineer with me I can trust. 50 00:13:08,920 --> 00:13:11,780 Really trust. 51 00:13:11,880 --> 00:13:13,041 Like, 100%. 52 00:13:27,360 --> 00:13:28,964 When do we leave? 53 00:15:17,960 --> 00:15:20,980 The meltdown in China and the run-up in soy yesterday 54 00:15:21,080 --> 00:15:24,500 was facilitated by the same RAT. 55 00:15:24,600 --> 00:15:26,940 How it got loaded in in the first place, we don't know. 56 00:15:27,040 --> 00:15:30,260 But, once inside, it de-cloaked and became what it really is. 57 00:15:30,360 --> 00:15:32,522 A remote access tool. 58 00:15:32,880 --> 00:15:33,940 A RAT. 59 00:15:34,040 --> 00:15:37,362 The RAT's job was to open a back door in our system and call home. 60 00:15:37,720 --> 00:15:42,203 The black hat then used his back door to inject a second part. 61 00:15:42,480 --> 00:15:44,289 Its payload. 62 00:15:44,560 --> 00:15:46,820 That is what rode up soy. 63 00:15:46,920 --> 00:15:48,780 Now that we're looking at the RAT and payload closely, 64 00:15:48,880 --> 00:15:49,980 we're thinking they were... 65 00:15:50,080 --> 00:15:53,004 Written by different authors. 66 00:15:55,840 --> 00:15:59,060 How we figured that out was through the coding in the RAT. 67 00:15:59,160 --> 00:16:02,460 Though several years old, it is lean, graceful. 68 00:16:02,560 --> 00:16:05,540 The payload's coding, on the other hand, feels frenetic, confused... 69 00:16:05,640 --> 00:16:08,041 Frenetic? Or overwritten? 70 00:16:11,000 --> 00:16:12,620 So, the question we're dealing with is... 71 00:16:12,720 --> 00:16:15,041 Is there somewhere we can talk? 72 00:16:16,160 --> 00:16:20,131 ...and if it is two, they may not be working in close proximity. 73 00:16:25,000 --> 00:16:27,620 Daniels is qualified in computer forensics. 74 00:16:27,720 --> 00:16:30,740 An intern could have written that report. 75 00:16:30,840 --> 00:16:33,300 Oh, really? And who do we need, if not Daniels? 76 00:16:33,400 --> 00:16:36,140 And "liaise" in "liaison group" implies mutuality. 77 00:16:36,240 --> 00:16:39,244 You don't like our boy, what ideas are you bringing to the dance? 78 00:16:39,480 --> 00:16:41,050 A man named Hathaway. 79 00:16:41,760 --> 00:16:42,860 He's a convicted hacker, 80 00:16:42,960 --> 00:16:46,123 serving 15 years in U.S.P. Canaan in Waymart, Pennsylvania. 81 00:16:46,440 --> 00:16:48,540 You telling me some hacker in prison 82 00:16:48,640 --> 00:16:50,740 is hitting our financial markets? 83 00:16:50,840 --> 00:16:53,020 No. But we want Hathaway on the team 84 00:16:53,120 --> 00:16:54,849 so he can help out the investigation. 85 00:17:03,120 --> 00:17:04,849 He hit four major banks, 86 00:17:04,960 --> 00:17:07,220 ran up $46 million in damages. 87 00:17:07,320 --> 00:17:09,084 And that's just what we know about. 88 00:17:09,600 --> 00:17:12,968 You want the DOJ to do anything other than laugh? 89 00:17:18,840 --> 00:17:21,446 Daniels said two authors wrote the virus. 90 00:17:21,880 --> 00:17:25,060 I don't know who wrote the second half, but the first half, the RAT, 91 00:17:25,160 --> 00:17:28,660 the remote access tool that Daniels called "lean and graceful"? 92 00:17:28,760 --> 00:17:31,340 One of the original authors is me. 93 00:17:31,440 --> 00:17:33,700 I co-wrote it, 94 00:17:33,800 --> 00:17:36,020 as a gag, years ago at MIT. 95 00:17:36,120 --> 00:17:39,660 And my roommate, the genius lead author? 96 00:17:39,760 --> 00:17:41,060 Nicholas Hathaway. 97 00:17:41,160 --> 00:17:42,321 That's right. 98 00:17:43,120 --> 00:17:46,980 The hacker found the RAT online and modified it. 99 00:17:47,080 --> 00:17:49,180 If we want to move around within this code 100 00:17:49,280 --> 00:17:50,980 looking for clues to the hacker's identity, 101 00:17:51,080 --> 00:17:53,162 we need its lead architect. 102 00:18:28,560 --> 00:18:31,700 The reactor in China, I heard about, 103 00:18:31,800 --> 00:18:34,121 but the spike in soy futures... 104 00:18:35,960 --> 00:18:39,420 All right, I didn't know any of this. We don't get a lot of new news in here. 105 00:18:39,520 --> 00:18:42,980 The US government would like your technical advice on this. 106 00:18:43,080 --> 00:18:46,620 In exchange for that, we're going to furlough you right out of here. 107 00:18:46,720 --> 00:18:49,220 You sign that on the last page, 108 00:18:49,320 --> 00:18:50,685 and we'll get you processed. 109 00:18:53,720 --> 00:18:56,580 You'll wear an ankle bracelet and be accompanied by a US Marshal. 110 00:18:56,680 --> 00:18:59,340 Your computer access will be restricted. 111 00:18:59,440 --> 00:19:03,286 If you wanna study the whole document, you can go right ahead. 112 00:19:04,000 --> 00:19:06,446 I can come back in a month or two. 113 00:19:11,600 --> 00:19:13,090 No, I'm done. 114 00:19:16,280 --> 00:19:17,460 You didn't sign it. 115 00:19:17,560 --> 00:19:19,140 - Yeah. Why would I sign it? - Why? 116 00:19:19,240 --> 00:19:21,460 Because of the generosity of the Assistant US Attorney 117 00:19:21,560 --> 00:19:22,940 in granting you a furlough. 118 00:19:23,040 --> 00:19:25,060 Both you and the Assistant US Attorney 119 00:19:25,160 --> 00:19:26,820 can stick that document up your ass. 120 00:19:26,920 --> 00:19:28,046 I'm sorry? 121 00:19:28,360 --> 00:19:29,940 Why are you sorry? 122 00:19:30,040 --> 00:19:32,611 I insulted you. What are you sorry for? I'm not sorry. 123 00:19:32,720 --> 00:19:34,660 - Don't think you're gonna... - Hey. 124 00:19:34,760 --> 00:19:36,580 You wanna raise me up out of here, 125 00:19:36,680 --> 00:19:38,700 solve your trade exchange dilemma, 126 00:19:38,800 --> 00:19:41,340 and I get a furlough for a couple of weeks? You kidding me? 127 00:19:41,440 --> 00:19:43,500 You have any idea how much progress you're gonna make 128 00:19:43,600 --> 00:19:45,762 on a strike this complex without someone like me? 129 00:19:46,480 --> 00:19:47,580 Zero. 130 00:19:47,680 --> 00:19:49,100 This isn't a negotiation. 131 00:19:49,200 --> 00:19:50,326 I just made it one. 132 00:19:50,560 --> 00:19:53,020 You want me? You pass this upstairs. 133 00:19:53,120 --> 00:19:55,900 If my assistance results in the identification 134 00:19:56,000 --> 00:19:58,685 and the apprehension of the guy you're after, 135 00:19:58,800 --> 00:20:01,007 I want you to commute my sentence. 136 00:20:01,320 --> 00:20:04,324 If I come up empty, you toss my ass back in the can. 137 00:20:04,720 --> 00:20:06,449 Those are the terms. 138 00:20:07,160 --> 00:20:08,580 Guard. 139 00:20:08,680 --> 00:20:10,284 Interview's over. 140 00:20:19,040 --> 00:20:22,089 Barrett, how badly do you need this guy? 141 00:20:49,240 --> 00:20:50,660 It's so good to see you, bro. 142 00:20:50,760 --> 00:20:52,649 Not half as much as it is for me to see you. 143 00:21:03,680 --> 00:21:05,569 Let's get out of here. 144 00:21:38,520 --> 00:21:43,380 So, you planned to reunite with your friend from the moment you landed? 145 00:21:43,480 --> 00:21:45,244 It entered my mind. 146 00:22:19,840 --> 00:22:21,080 You okay? 147 00:22:24,280 --> 00:22:25,805 Yeah, I'm fine. 148 00:22:33,800 --> 00:22:37,460 Okay. Please keep them out of sight, if you can help it. 149 00:22:37,560 --> 00:22:40,404 See? He ripped off and repurposed our code. 150 00:22:45,840 --> 00:22:47,700 - What the hell is this? - What? 151 00:22:47,800 --> 00:22:51,020 The agreement was an approval and a presence for his computer access. 152 00:22:51,120 --> 00:22:53,180 - I approved it. - A DOJ approval. 153 00:22:53,280 --> 00:22:56,260 - Now you're changing the goalposts? - Hola, chica. You came to me. 154 00:22:56,360 --> 00:22:58,920 How am I supposed to do my work? On an abacus or something? 155 00:22:59,480 --> 00:23:01,020 "Chica"? Am I Hispanic? 156 00:23:01,120 --> 00:23:02,860 What the hell's going on? 157 00:23:02,960 --> 00:23:04,660 I advocated getting you over here. 158 00:23:04,760 --> 00:23:07,420 I pulled every string to get your convicted felon sprung, Mr. Chen. 159 00:23:07,520 --> 00:23:09,260 "Captain" Chen. And I didn't ask. 160 00:23:09,360 --> 00:23:12,646 I offered partnership, an equivalent, or we would do it on our own. 161 00:23:12,960 --> 00:23:14,900 Well, I'll be happy to bust him back to Canaan 162 00:23:15,000 --> 00:23:17,300 and put your ass on the first plane back to China. 163 00:23:17,400 --> 00:23:18,890 He apologizes. 164 00:23:19,000 --> 00:23:22,004 My brother misunderstood our arrangement, Special Agent. 165 00:23:39,680 --> 00:23:41,091 Look around. 166 00:23:42,640 --> 00:23:45,681 I have to run the morning backup. 167 00:23:48,680 --> 00:23:52,340 Your network is sitting behind deep packet inspection, 168 00:23:52,440 --> 00:23:54,420 intrusion protection. 169 00:23:54,520 --> 00:23:56,204 It's extensively firewalled. 170 00:23:56,400 --> 00:23:58,100 Exactly. 171 00:23:58,200 --> 00:24:01,980 So somebody had to physically enter this room and plug the virus in. 172 00:24:02,080 --> 00:24:04,420 We reviewed keycard scans and surveillance tapes. 173 00:24:04,520 --> 00:24:05,980 There was no unauthorized entry. 174 00:24:06,080 --> 00:24:08,220 Now, we're thinking about a routing weakness. 175 00:24:08,320 --> 00:24:09,780 That's too complicated. He wouldn't have done that. 176 00:24:09,880 --> 00:24:12,300 Yeah. Well, what you're proposing didn't happen. 177 00:24:12,400 --> 00:24:15,820 There's only one person who's authorized to access these terminals. 178 00:24:15,920 --> 00:24:16,900 Me. 179 00:24:17,000 --> 00:24:19,367 And my password is my thumbprint. 180 00:24:22,720 --> 00:24:23,767 May I? 181 00:24:27,520 --> 00:24:28,521 Sure. 182 00:24:31,040 --> 00:24:33,281 Can I have some approval now? 183 00:24:56,240 --> 00:24:58,260 All right. This is the code for our RAT. 184 00:24:58,360 --> 00:25:01,700 See, it's compact. It's slick. Under a meg. You would never have picked up on it. 185 00:25:01,800 --> 00:25:05,420 - Ever leave that USB drive on your desk? - I suppose so. 186 00:25:05,520 --> 00:25:08,580 Who works here who doesn't like you? Recently hired? Fired? 187 00:25:08,680 --> 00:25:09,727 No. 188 00:25:11,000 --> 00:25:12,081 Who? 189 00:25:12,520 --> 00:25:13,860 Lozano. 190 00:25:13,960 --> 00:25:15,860 His mother passed away. He left two weeks ago. 191 00:25:15,960 --> 00:25:18,361 John Lozano. He was only on the job for a month. 192 00:25:18,480 --> 00:25:19,925 - He have access to your office? - Yes. 193 00:25:20,440 --> 00:25:21,930 I'll pull his employment records. 194 00:25:22,120 --> 00:25:23,770 Everything will come up phony. 195 00:25:24,360 --> 00:25:27,011 Except this. You got his photo ID? 196 00:25:28,600 --> 00:25:30,220 Yeah. 197 00:25:30,320 --> 00:25:33,780 This section of his code right here is a mess. 198 00:25:33,880 --> 00:25:38,966 There's 25 lines, he's left text. It looks incomplete. 199 00:25:39,120 --> 00:25:40,780 Are they notes to himself? 200 00:25:40,880 --> 00:25:42,405 Dead-end ideas? 201 00:25:43,040 --> 00:25:44,540 Maybe he's still writing. 202 00:25:44,640 --> 00:25:45,641 Yeah, that's good. 203 00:25:48,480 --> 00:25:50,244 So if you've got the ability to move a commodity 204 00:25:50,360 --> 00:25:51,860 any way you want, what do you do? 205 00:25:51,960 --> 00:25:54,940 I play it out long and low-key. I do not do one big spike. 206 00:25:55,040 --> 00:25:57,566 Instead, I'd play it out month after month. Less risk of detection. 207 00:25:57,880 --> 00:26:01,930 Yeah, right. But our guy jacks soy 250% in a day. 208 00:26:02,080 --> 00:26:04,651 It's flashy. He knows he's gonna bring down heat. 209 00:26:05,680 --> 00:26:07,580 Maybe he needs cash. 210 00:26:07,680 --> 00:26:08,980 Fast. 211 00:26:09,080 --> 00:26:11,765 He's got the money from the soy run-up. 212 00:26:14,920 --> 00:26:18,242 And he's busy writing code for what's next. 213 00:26:25,160 --> 00:26:27,845 I think the real hit is still to come. 214 00:26:33,320 --> 00:26:34,341 We have Lozano's photo. 215 00:26:38,320 --> 00:26:39,940 What's on his neck? 216 00:26:40,040 --> 00:26:41,883 Kid had tattoos. 217 00:26:42,160 --> 00:26:44,003 You have any routine surveillance tapes? 218 00:26:49,200 --> 00:26:50,201 Right there. 219 00:26:58,280 --> 00:26:59,850 Face of stone. 220 00:27:02,720 --> 00:27:04,324 - Pollack. - It's me. 221 00:27:04,560 --> 00:27:06,927 Can you have someone jump on the NCIC database? 222 00:27:07,360 --> 00:27:10,967 Search for Latino males under 30 with priors in, 223 00:27:11,840 --> 00:27:14,047 I don't know, anything like carding, identity theft, 224 00:27:14,200 --> 00:27:17,090 who were in West Texas prison gangs. 225 00:27:17,400 --> 00:27:20,449 Our cowboy has a tattoo on his shoulder. He's with Los Zapotecas. 226 00:27:22,240 --> 00:27:23,500 I'm sending you something right now. 227 00:27:25,440 --> 00:27:28,284 That's him in the bottom left. 228 00:27:30,480 --> 00:27:33,700 Alonzo Reyes. Did two years in Huntsville for carding. 229 00:27:33,800 --> 00:27:37,300 Paroled. Moved back to LA. I'll have LA pick him up. 230 00:27:37,400 --> 00:27:40,260 He's gonna monitor his home grid. I did. 231 00:27:40,360 --> 00:27:44,081 We got a better shot getting a first look at him ourselves. 232 00:27:45,480 --> 00:27:46,766 Isn't that why you brought me here? 233 00:27:48,040 --> 00:27:49,041 Okay? 234 00:27:49,360 --> 00:27:50,646 Yeah. Go ahead. 235 00:27:51,920 --> 00:27:53,820 That means you and me are on the money. 236 00:27:53,920 --> 00:27:56,100 Unless you think you can do that on your own, too. 237 00:27:56,200 --> 00:27:57,201 I do okay. 238 00:27:57,320 --> 00:27:58,300 You do? 239 00:27:58,400 --> 00:28:01,404 Let's see how you handle the financial sector. 240 00:28:02,200 --> 00:28:03,770 Thanks, Stanley. 241 00:28:20,280 --> 00:28:21,420 My eye's on you. 242 00:28:21,520 --> 00:28:22,820 Where do you think I'm going? 243 00:28:22,920 --> 00:28:26,208 This guy is one step away from my "get out of jail free" card. 244 00:28:42,680 --> 00:28:43,806 So... 245 00:28:45,320 --> 00:28:46,620 How can I help? 246 00:28:46,720 --> 00:28:48,060 We want to see your trading records 247 00:28:48,160 --> 00:28:51,801 of your traders who took large profits from the soy run-up. 248 00:28:56,560 --> 00:28:58,380 You're requesting I turn over records 249 00:28:58,480 --> 00:29:00,180 to the FBI and a foreign power 250 00:29:00,280 --> 00:29:03,329 on thousands of private brokers and traders? 251 00:29:05,960 --> 00:29:07,980 Afraid I can't possibly accommodate you. 252 00:29:08,080 --> 00:29:09,923 You're gonna protect the person who manipulated your market? 253 00:29:10,080 --> 00:29:13,020 No. You're casting your net way too wide, Mr. Chen. 254 00:29:13,120 --> 00:29:15,740 You want to see my data, you come up with something a little more tangible. 255 00:29:15,840 --> 00:29:19,180 Something more in the way of probable cause than your hunch. 256 00:29:19,280 --> 00:29:21,169 Gary. May I call you Gary? 257 00:29:23,480 --> 00:29:25,244 How's this for tangible? 258 00:29:25,720 --> 00:29:28,140 In the next 15 seconds I call Laura Greer 259 00:29:28,240 --> 00:29:30,004 at the Commodities Trading Commission. 260 00:29:30,120 --> 00:29:31,660 And I say, "Laura, how you doing? 261 00:29:31,760 --> 00:29:35,380 "I'd like to launch an official investigation on one Gary Baker." 262 00:29:35,480 --> 00:29:36,580 So the headline, 263 00:29:36,680 --> 00:29:41,780 "M-Tech Official Investigated for Aiding and Abetting Cyber Criminals" 264 00:29:41,880 --> 00:29:44,060 leaks to CNN in the next 90 265 00:29:44,160 --> 00:29:46,180 so it makes the three o'clock news cycle, 266 00:29:46,280 --> 00:29:48,340 as well as the nightly news. 267 00:29:48,440 --> 00:29:50,204 That'd be good, too. 268 00:29:53,280 --> 00:29:55,044 Am I being tangible? 269 00:29:56,960 --> 00:29:58,041 Gary? 270 00:30:04,000 --> 00:30:08,403 Look around here. But I stay here with you. No take nothing. 271 00:30:39,840 --> 00:30:41,001 Hey, mi carnal? 272 00:30:43,480 --> 00:30:45,289 What happened to you? 273 00:31:17,360 --> 00:31:21,570 He has WRT hardware and an onion router. 274 00:31:22,160 --> 00:31:28,486 He can route encrypted data and stay anonymous with no IP address. 275 00:31:31,120 --> 00:31:33,521 Yeah, somebody must have told him how to set it up. 276 00:31:46,080 --> 00:31:47,366 She probably called 911. 277 00:32:03,040 --> 00:32:04,451 Who's the woman? 278 00:32:04,720 --> 00:32:06,740 It's the manager. Mrs. Novo. 279 00:32:06,840 --> 00:32:08,490 Here, let me see it. 280 00:32:17,680 --> 00:32:19,205 Here. Try it now. 281 00:32:23,720 --> 00:32:26,007 Barrett, this is Jessup. 282 00:32:28,600 --> 00:32:30,980 Thanks, Jessup. 283 00:32:31,080 --> 00:32:33,060 Well, we better make following the money pay off, 284 00:32:33,160 --> 00:32:35,083 Reyes isn't. He's dead. 285 00:32:37,120 --> 00:32:38,565 Oh, great. 286 00:32:41,040 --> 00:32:42,260 Wait a minute. 287 00:32:42,360 --> 00:32:45,500 We've been looking for buyers of soy. Switch to sellers. 288 00:32:45,600 --> 00:32:47,887 Only our player would know exactly when to get out. 289 00:32:55,920 --> 00:32:59,481 Reyes got an email about a drop tonight. 290 00:33:00,440 --> 00:33:03,020 With no Reyes, we gotta find a new link to our main player. 291 00:33:03,120 --> 00:33:04,690 I'm gonna see who shows. 292 00:33:05,600 --> 00:33:07,540 You tell Jessup? 293 00:33:07,640 --> 00:33:09,688 No. They'll spot him 10 blocks away. 294 00:33:10,560 --> 00:33:13,211 You get into not enough for one day? 295 00:33:14,840 --> 00:33:16,220 Look, I play it my way, it works. 296 00:33:16,320 --> 00:33:18,607 It don't, at least I own it. 297 00:33:23,000 --> 00:33:24,411 I go, too. 298 00:33:55,440 --> 00:33:58,284 You look not so different from the pictures. 299 00:33:58,960 --> 00:34:00,644 What pictures? 300 00:34:01,800 --> 00:34:04,531 That my brother sent me before. 301 00:34:58,520 --> 00:35:01,683 Why you're in prison? 302 00:35:16,680 --> 00:35:18,921 I was in a bar, I met some girl, 303 00:35:19,040 --> 00:35:20,660 and some guy got in my face about her. 304 00:35:20,760 --> 00:35:22,620 He started a fight and when it's over, 305 00:35:22,720 --> 00:35:24,484 he's in the hospital and I'm arrested. 306 00:35:24,600 --> 00:35:28,620 I wound up sentenced to 18 months at MCI-Norfolk. 307 00:35:28,720 --> 00:35:30,882 I traded academia for gladiator academy. 308 00:35:34,920 --> 00:35:36,740 Then what? 309 00:35:36,840 --> 00:35:37,940 Then I got out. 310 00:35:38,040 --> 00:35:39,020 I'm 22, 311 00:35:39,120 --> 00:35:41,460 and not a lot going on in Silicon Valley 312 00:35:41,560 --> 00:35:43,660 for an ex-con with no degree. So. 313 00:35:43,760 --> 00:35:44,900 Carding? 314 00:35:45,000 --> 00:35:47,780 Yeah, that and I was in wholesaling internationally. 315 00:35:47,880 --> 00:35:52,248 I had an eight-year run, then the Feeb caught up with me. And I got 13 years. 316 00:35:53,960 --> 00:35:55,610 You have regrets? 317 00:35:56,680 --> 00:35:57,820 Regrets? No. 318 00:35:57,920 --> 00:35:59,780 The banks got hit for the losses, not people. 319 00:35:59,880 --> 00:36:01,500 I didn't burn people. I don't burn people. 320 00:36:01,600 --> 00:36:02,660 No. 321 00:36:02,760 --> 00:36:04,940 I mean, banks are chiseling everybody all the time, anyway. 322 00:36:05,040 --> 00:36:06,300 I don't feel sorry for banks, no. 323 00:36:06,400 --> 00:36:09,643 I mean, I'm sorry for what happened to you. 324 00:36:09,760 --> 00:36:13,460 Don't be. I'm not fishing for sympathy, here. 325 00:36:13,560 --> 00:36:16,928 I did the crime, I'm doing the time. Time isn't doing me. 326 00:36:17,920 --> 00:36:19,300 What's that mean? 327 00:36:19,400 --> 00:36:21,780 I do my own time, not the institution's. 328 00:36:21,880 --> 00:36:25,460 See, to hold on to who you are in there, you dedicate yourself to your program. 329 00:36:25,560 --> 00:36:28,450 You work out on your body and your mind. 330 00:36:38,400 --> 00:36:40,004 Open your eyes. 331 00:36:41,480 --> 00:36:42,820 What'd you say? 332 00:36:42,920 --> 00:36:45,969 You talk like you are still in prison. 333 00:36:46,600 --> 00:36:48,060 But you're not in prison. 334 00:36:48,160 --> 00:36:50,340 Get your thinking to where you are, not where you've been. 335 00:36:50,440 --> 00:36:52,363 What do you know about where I've been? 336 00:36:52,480 --> 00:36:53,420 No. Nothing. 337 00:36:53,520 --> 00:36:54,540 - No, nothing. - But... 338 00:36:54,640 --> 00:36:57,180 Okay, tell me, what is it I'm supposed to start seeing so fast? 339 00:36:57,280 --> 00:36:58,247 Where you are. 340 00:36:58,360 --> 00:37:00,089 What, Koreatown? 341 00:37:01,280 --> 00:37:03,362 This restaurant, this table? What? 342 00:37:04,680 --> 00:37:07,860 You'll be in the rapid stream of decision-making. 343 00:37:07,960 --> 00:37:10,180 Having to make intuitive choices. 344 00:37:10,280 --> 00:37:13,940 The people against you are high-speed, world-class dangers. 345 00:37:14,040 --> 00:37:16,900 To be genius coder to outsmart, out-think 346 00:37:17,000 --> 00:37:19,082 like my brother always said you could, 347 00:37:19,600 --> 00:37:22,080 you have to think about it clear. 348 00:37:24,000 --> 00:37:25,940 Not easy, I know. 349 00:37:26,040 --> 00:37:28,771 There's no transition time. 350 00:37:31,200 --> 00:37:34,251 But I believe you are a very strong man. Very smart man. 351 00:37:41,680 --> 00:37:42,681 Here, Chen. 352 00:37:43,360 --> 00:37:45,860 Three trades. Three different accounts. Large volumes. 353 00:37:45,960 --> 00:37:47,460 They all sell within minutes of each other. 354 00:37:47,560 --> 00:37:50,460 Just at the soft close, at 13:13 and 13:14. 355 00:37:50,560 --> 00:37:52,164 Timed perfectly when to dump. 356 00:37:54,080 --> 00:37:55,060 What's that? 357 00:37:55,160 --> 00:37:58,801 Bank accounts. Foreign. Same place, all three. 358 00:37:58,920 --> 00:38:00,126 Where? 359 00:38:01,520 --> 00:38:03,010 Hong Kong. 360 00:38:06,360 --> 00:38:07,740 You want your bill? 361 00:38:07,840 --> 00:38:10,580 You not order more, you give up table. 362 00:38:10,680 --> 00:38:13,206 You're really hurting for space? 363 00:38:17,600 --> 00:38:19,762 Maybe our guy is no-show. 364 00:38:45,400 --> 00:38:46,970 What is it? 365 00:40:59,720 --> 00:41:00,700 Let's go. 366 00:41:00,800 --> 00:41:02,040 What's happening? 367 00:41:04,920 --> 00:41:06,410 Who are you? 368 00:41:07,560 --> 00:41:09,740 Why are you here? 369 00:41:09,840 --> 00:41:10,841 Who are you? 370 00:41:34,120 --> 00:41:35,121 Watch out! 371 00:41:55,600 --> 00:41:58,001 Hey, hey! Hey! 372 00:42:09,440 --> 00:42:12,091 And Reyes probably was killed. 373 00:42:12,640 --> 00:42:14,540 The email on his computer was bait. 374 00:42:14,640 --> 00:42:17,700 Whoever this is wanted to see if we were on Reyes' trail. 375 00:42:17,800 --> 00:42:19,165 We're burned. 376 00:42:19,320 --> 00:42:21,084 Could you track it to our guy's location? 377 00:42:21,600 --> 00:42:25,140 No, the video feed went through a proxy server in the Ukraine. 378 00:42:25,240 --> 00:42:27,561 Who knows where it bounces to off that? 379 00:42:27,720 --> 00:42:30,963 Yeah, and our players are foreign, too. 380 00:42:31,120 --> 00:42:32,340 What about the money? 381 00:42:32,440 --> 00:42:34,420 Three accounts, all in the same place. 382 00:42:34,520 --> 00:42:36,060 They took $74 million. 383 00:42:36,160 --> 00:42:38,288 We're going to follow the money. 384 00:42:38,440 --> 00:42:39,740 Where? 385 00:42:39,840 --> 00:42:41,649 Put my sister on. 386 00:42:59,360 --> 00:43:02,045 We're flying to China in the morning. 387 00:44:55,000 --> 00:44:57,980 My dad was a steel worker. Single father. 388 00:44:58,080 --> 00:44:59,940 He raised us on his own. 389 00:45:00,040 --> 00:45:02,281 Came to visit, twice. 390 00:45:02,440 --> 00:45:04,124 Then he got sick. 391 00:45:04,800 --> 00:45:06,802 I used to replay memories 392 00:45:07,480 --> 00:45:10,609 so I could stay oriented for when I got out. 393 00:46:27,480 --> 00:46:28,780 Captain Chen? 394 00:46:28,880 --> 00:46:31,060 Paul Wang, CNCERT. 395 00:46:31,160 --> 00:46:32,180 In here. 396 00:46:32,280 --> 00:46:33,850 What's the status? 397 00:46:34,680 --> 00:46:37,700 We're trying to restore coolant by pumping in sea water. 398 00:46:37,800 --> 00:46:39,404 I got more injured. 399 00:46:43,360 --> 00:46:44,486 Since it happened, 400 00:46:44,960 --> 00:46:46,500 was there any demand for money? 401 00:46:46,600 --> 00:46:47,601 No. 402 00:46:48,360 --> 00:46:49,540 Then it's not about extortion. 403 00:46:49,640 --> 00:46:53,100 Is he political? A terrorist attack? Any declaration? 404 00:46:53,200 --> 00:46:54,884 No claim. No statement. 405 00:46:55,080 --> 00:46:56,730 What does this guy want? 406 00:46:59,400 --> 00:47:00,660 What did the malware attack? 407 00:47:00,760 --> 00:47:03,460 Programmable Launch Controllers. PLCs. 408 00:47:03,560 --> 00:47:05,580 They tell the pumps to turn on, turn off, 409 00:47:05,680 --> 00:47:06,820 to cool the reactor. 410 00:47:06,920 --> 00:47:09,340 Any idea where the attack originated? 411 00:47:09,440 --> 00:47:11,408 I was tracking the malware when the core went. 412 00:47:12,760 --> 00:47:14,100 We had to evacuate. 413 00:47:14,200 --> 00:47:15,860 But if a machine failed, 414 00:47:15,960 --> 00:47:18,580 it should have saved the memory to a diagnostic file. 415 00:47:18,680 --> 00:47:21,500 Yeah, that's right. And in that memory dump may be your traces of code. 416 00:47:21,600 --> 00:47:23,540 Maybe even this guy's real IP address. 417 00:47:23,640 --> 00:47:25,980 But those servers are in the control room. Everything is still hot. 418 00:47:26,080 --> 00:47:27,491 We're fighting a meltdown. 419 00:48:20,640 --> 00:48:21,641 Chen Lien. 420 00:48:22,120 --> 00:48:24,600 Inspector Alex Trang, Hong Kong Police. 421 00:48:25,840 --> 00:48:28,340 Hathaway, US Marshal Mark Jessup. 422 00:48:28,440 --> 00:48:29,601 Hello. 423 00:48:32,880 --> 00:48:34,325 So, is this them? 424 00:48:35,120 --> 00:48:36,060 These the guys? 425 00:48:36,160 --> 00:48:37,380 Yeah. 426 00:48:37,480 --> 00:48:39,005 We got anything? 427 00:48:40,760 --> 00:48:41,966 Here they are. 428 00:48:42,920 --> 00:48:45,605 Johnny Li, Yan Lin, Samuel Wu. 429 00:48:46,080 --> 00:48:48,060 Li just got out of prison two months ago. 430 00:48:48,160 --> 00:48:50,300 Yan and his mother are both junkies. 431 00:48:50,400 --> 00:48:51,845 Wu runs a chop shop. 432 00:48:52,360 --> 00:48:54,010 Hardly commodities speculators. 433 00:48:55,240 --> 00:48:57,242 They're fronts? Proxies? 434 00:49:04,080 --> 00:49:05,260 So how do they communicate? 435 00:49:05,360 --> 00:49:07,020 How do they connect up to our actor? 436 00:49:07,120 --> 00:49:08,140 They don't. 437 00:49:08,240 --> 00:49:10,020 Phones, the Internet. 438 00:49:10,120 --> 00:49:12,180 And we've been on them all day and all night. 439 00:49:12,280 --> 00:49:13,281 Nothing. 440 00:49:14,520 --> 00:49:16,660 If you were our player, right now, 441 00:49:16,760 --> 00:49:18,100 what would be your next move? 442 00:49:18,200 --> 00:49:19,860 I'd make my trail go cold. 443 00:49:19,960 --> 00:49:21,405 - How? - I'd cash out. 444 00:49:21,520 --> 00:49:22,900 Cash money doesn't leave a trail. 445 00:49:23,000 --> 00:49:25,140 Pick it up. Walk it anywhere you want. 446 00:49:25,240 --> 00:49:27,020 But the money hasn't moved yet. 447 00:49:27,120 --> 00:49:29,327 There's no activity in the accounts. 448 00:49:33,040 --> 00:49:34,540 Yeah, this is all too clean. 449 00:49:34,640 --> 00:49:36,420 I mean, there's got to be somebody between them, 450 00:49:36,520 --> 00:49:38,820 talking to them, instructing them, telling them what to do. 451 00:49:38,920 --> 00:49:41,140 There has to be someone in contact. 452 00:49:41,240 --> 00:49:43,260 It wouldn't be the main player. Too much exposure. 453 00:49:43,360 --> 00:49:44,361 A middle man? 454 00:49:47,200 --> 00:49:49,140 They didn't all fall by here by accident either. 455 00:49:49,240 --> 00:49:50,460 Where? 456 00:49:50,560 --> 00:49:51,686 Can I see this? 457 00:50:03,120 --> 00:50:05,248 Right there. Where's this? 458 00:50:06,920 --> 00:50:08,285 Yau Ma Tei. 459 00:50:22,760 --> 00:50:23,966 Great. 460 00:50:50,160 --> 00:50:51,180 OCTB. 461 00:50:51,280 --> 00:50:54,020 - We're running a surveillance. - On whom? 462 00:50:54,120 --> 00:50:56,487 Some Lebanese guy on our trafficker watch list. 463 00:50:57,320 --> 00:50:58,481 Why'd you let him in? 464 00:50:59,200 --> 00:51:01,220 Well, they want to see if he's talking to anybody homegrown. 465 00:51:01,320 --> 00:51:02,651 Why here? 466 00:51:03,480 --> 00:51:05,801 Every morning he comes here to meet someone. 467 00:51:07,640 --> 00:51:09,210 Run him down. 468 00:51:17,160 --> 00:51:18,844 Elias Kassar. 469 00:51:19,320 --> 00:51:21,020 Fought with the Christian Phalangists 470 00:51:21,120 --> 00:51:23,009 in the Civil War, then disappeared. 471 00:51:23,240 --> 00:51:27,529 Popped up in the '90s with the paramilitaries in Colombia. 472 00:51:27,680 --> 00:51:30,365 Renting a house month-to-month in Shek O. 473 00:51:30,560 --> 00:51:31,686 Who's he meet? 474 00:51:32,400 --> 00:51:33,740 No one. 475 00:51:33,840 --> 00:51:35,171 No one ever shows. 476 00:51:36,000 --> 00:51:37,570 He texts. 477 00:52:33,600 --> 00:52:35,443 Is your phone an Android? 478 00:52:37,720 --> 00:52:39,563 Can I see it? 479 00:53:16,960 --> 00:53:18,325 Trang. 480 00:53:46,520 --> 00:53:48,140 Bluetooth transmitter. 481 00:53:48,240 --> 00:53:50,402 Short range. We would never pick it up. 482 00:53:52,800 --> 00:53:54,802 See, they don't come to meet him. They come to meet this. 483 00:53:56,200 --> 00:53:57,260 Kassar texts, 484 00:53:57,360 --> 00:53:58,940 Wu, Yan and Li walk by. 485 00:53:59,040 --> 00:54:00,849 The receivers in their pockets pick it up. 486 00:54:01,000 --> 00:54:02,525 They read it, delete it. 487 00:54:02,680 --> 00:54:04,460 Kassar never meets them, never sees them. 488 00:54:04,560 --> 00:54:06,881 No emails. No phones. No nothing. 489 00:54:07,240 --> 00:54:08,241 Slick. 490 00:54:08,680 --> 00:54:09,820 Can you crack it? 491 00:54:09,920 --> 00:54:11,060 In about a month. 492 00:54:11,160 --> 00:54:12,900 See, it's locked in GPG encryption. 493 00:54:13,000 --> 00:54:15,241 So, at least a 512-bit key. 494 00:54:15,720 --> 00:54:18,180 We pick him up, lean all over him. 495 00:54:18,280 --> 00:54:20,700 Or we let him ride and tail him to the main player. 496 00:54:20,800 --> 00:54:24,521 You don't have a choice. I mean, this guy's history. He ain't gonna roll. 497 00:54:27,200 --> 00:54:29,202 I think we let him ride. 498 00:54:35,520 --> 00:54:36,780 Yeah. 499 00:54:36,880 --> 00:54:38,769 Sunrise is in two hours. 500 00:55:04,160 --> 00:55:06,003 When this is over, 501 00:55:07,400 --> 00:55:08,447 what will you do? 502 00:55:11,920 --> 00:55:15,561 I don't know. Fix TVs, garage door openers. 503 00:55:16,760 --> 00:55:20,060 Are you still gonna like me if I'm fixing garage door openers? 504 00:55:23,240 --> 00:55:25,083 I don't know. Maybe. 505 00:57:01,840 --> 00:57:03,285 They're moving the money. 506 00:57:08,760 --> 00:57:10,808 All three accounts. 507 00:57:20,120 --> 00:57:22,361 Wire transfers to a Macau casino. 508 00:57:23,040 --> 00:57:24,220 They're cashing out. 509 00:57:24,320 --> 00:57:25,740 - Surveillance? - Nobody's moved. 510 00:57:25,840 --> 00:57:26,860 Kassar? 511 00:57:26,960 --> 00:57:28,200 We can't reach Yan's team in Shek O. 512 00:57:28,560 --> 00:57:31,140 We're going to Shek O. We're going to Shek O to pick up Kassar. 513 00:57:31,240 --> 00:57:33,700 Launch STU. Meet at the heliport. 514 00:57:33,800 --> 00:57:35,609 I'm going to pick up the mules. 515 00:58:30,080 --> 00:58:31,764 Let's talk about this. 516 00:58:34,280 --> 00:58:35,340 I'm not blind. 517 00:58:35,440 --> 00:58:37,180 I know the two of you are together. 518 00:58:37,280 --> 00:58:39,760 But look at it through my eyes and what do you see? 519 00:58:42,160 --> 00:58:45,300 "Hathaway. Been in prison. Damaged goods. 520 00:58:45,400 --> 00:58:47,243 "Not much to offer my sister, 521 00:58:47,760 --> 00:58:51,048 "and his future's not exactly guaranteed," is what I'd see. 522 00:58:52,120 --> 00:58:53,610 What else? 523 00:58:54,440 --> 00:58:56,841 "She deserves better," I'd think, if I was Chen. 524 00:58:59,120 --> 00:59:01,487 I've rarely seen her happier. 525 00:59:02,440 --> 00:59:04,124 But what if this fails? 526 00:59:04,840 --> 00:59:07,844 Nine more years in prison. What kind of life is that for her? 527 00:59:20,160 --> 00:59:21,321 Chen, it's Barrett. 528 00:59:21,640 --> 00:59:22,580 I hear you. 529 00:59:22,680 --> 00:59:24,967 The mules. We've got Li and Yan. 530 00:59:25,520 --> 00:59:28,410 And listen, we can't reach surveillance in Shek O. 531 01:01:07,600 --> 01:01:08,647 Come on. This way. 532 01:04:18,080 --> 01:04:19,241 Trang! 533 01:04:30,600 --> 01:04:32,443 Hold on, man! Hold on! 534 01:04:46,800 --> 01:04:48,131 Stay down! 535 01:07:00,920 --> 01:07:01,921 Go! Go! 536 01:07:03,760 --> 01:07:04,966 Come on. 537 01:07:08,280 --> 01:07:10,442 Elias! Elias, you coming? 538 01:07:12,760 --> 01:07:14,569 Come on! Come on! 539 01:07:16,200 --> 01:07:18,521 Don't wait! Drive the barge out of here! 540 01:07:53,480 --> 01:07:54,660 - Wai. - It's Paul Wang. 541 01:07:54,760 --> 01:07:56,900 We were able to restore the water above the fuel rods 542 01:07:57,000 --> 01:07:58,300 and stabilize the reactor. 543 01:07:58,400 --> 01:07:59,980 It's still hot, but we can get in. 544 01:08:03,000 --> 01:08:04,365 Nick! Mark! 545 01:08:28,640 --> 01:08:30,768 I still don't get it. What's he after? 546 01:08:32,520 --> 01:08:33,521 And why this? 547 01:08:42,200 --> 01:08:43,660 Hey, what'd she say? 548 01:08:43,760 --> 01:08:45,091 Move fast. 549 01:10:12,200 --> 01:10:13,770 Wang! 550 01:10:13,960 --> 01:10:15,121 - Wang! - Hey! 551 01:10:16,680 --> 01:10:18,728 Take him! Both of you, get out of here! 552 01:10:29,160 --> 01:10:30,491 Hathaway... 553 01:12:04,360 --> 01:12:05,620 We were right. 554 01:12:05,720 --> 01:12:09,220 In the memory dump are the fragments of the malware. 555 01:12:09,320 --> 01:12:11,020 But it's corrupted. 556 01:12:11,120 --> 01:12:14,841 Maybe his IP address, but it's too full of holes. 557 01:12:26,400 --> 01:12:29,660 You know, when the Feeb team busted me in '07 and hit my door, 558 01:12:29,760 --> 01:12:31,660 I was flushing files. 559 01:12:31,760 --> 01:12:32,980 But when I came to trial, 560 01:12:33,080 --> 01:12:36,880 they retrieved all this data that should have been irretrievable. 561 01:12:48,600 --> 01:12:52,140 Black Widow. It's NSA software. 562 01:12:52,240 --> 01:12:56,140 Examines fragments and reconstructs originals 563 01:12:56,240 --> 01:12:58,561 within a couple of hours of supercomputing. 564 01:12:59,360 --> 01:13:02,807 Big cases like yours, they loan it to us. 565 01:13:11,520 --> 01:13:14,380 Rich, I need access to Black Widow. 566 01:13:14,480 --> 01:13:17,700 Sharing classified tech with the Chinese? Are you kidding? 567 01:13:17,800 --> 01:13:19,460 That's not even getting into Hathaway using it. 568 01:13:19,560 --> 01:13:22,140 We've committed to full cooperation, Rich. 569 01:13:22,240 --> 01:13:24,380 Yeah, well, you're Justice. We're NSA. 570 01:13:24,480 --> 01:13:27,484 If I wanted to, I can't. And I don't want to. 571 01:13:29,240 --> 01:13:31,004 An unequivocal "No." 572 01:13:36,720 --> 01:13:40,260 Okay, so how's it work? You give NSA the data, they run it, what? 573 01:13:40,360 --> 01:13:43,460 No, they have a remote login. We run it. 574 01:13:43,560 --> 01:13:44,980 You're not thinking. 575 01:13:45,080 --> 01:13:47,340 Come on. They got the keys to the kingdom. 576 01:13:47,440 --> 01:13:48,740 Our guy's address, maybe. 577 01:13:48,840 --> 01:13:51,940 Whatever he's cooking up next is right in there. 578 01:13:52,040 --> 01:13:53,963 Only, we can't read it. 579 01:13:54,560 --> 01:13:55,846 Let's go. 580 01:14:02,720 --> 01:14:06,580 My old correspondence with Donahue is here. 581 01:14:06,680 --> 01:14:08,940 But there's no way that login is still active. 582 01:14:09,040 --> 01:14:10,883 I'm not gonna use that login. 583 01:14:12,000 --> 01:14:14,380 Okay, Donahue, the NSA contact you were just talking with. 584 01:14:14,480 --> 01:14:17,220 If NSA discovers the intrusion... 585 01:14:17,320 --> 01:14:18,780 You sure you want to do this? 586 01:14:18,880 --> 01:14:20,962 FBI can't explain after the fact? 587 01:14:21,920 --> 01:14:23,604 You locate this guy, you're okay. 588 01:14:23,720 --> 01:14:26,326 You get discovered, you're dead meat. 589 01:14:27,200 --> 01:14:29,202 You know that, don't you? 590 01:14:45,960 --> 01:14:47,420 The NSA guy you were talking to, 591 01:14:47,520 --> 01:14:49,363 what's his supervisor's name? 592 01:14:52,200 --> 01:14:53,645 Ben Hitchens. 593 01:14:55,400 --> 01:14:57,420 Maybe it's better if the two of you and you 594 01:14:57,520 --> 01:14:59,966 aren't around for the next part so you can deny being here. 595 01:15:38,040 --> 01:15:40,201 - How do you feel about this? - Not good. 596 01:15:41,280 --> 01:15:44,340 It's worse for the guy in there. 597 01:15:44,440 --> 01:15:46,340 I'm surprised you went along. 598 01:15:46,440 --> 01:15:48,761 Washington didn't see Chai Wan. 599 01:16:27,360 --> 01:16:29,761 You asked him to change his password? 600 01:16:43,560 --> 01:16:44,800 When he downloaded the PDF... 601 01:16:47,120 --> 01:16:49,600 what he downloaded was the keylogger. 602 01:17:12,000 --> 01:17:13,206 Got it. 603 01:17:28,840 --> 01:17:30,330 Now, we wait. 604 01:18:01,160 --> 01:18:02,446 We're in. 605 01:18:07,280 --> 01:18:10,568 You can call me "chica" any time you want. 606 01:18:17,480 --> 01:18:21,780 This is our actor's home IP address. His home server. 607 01:18:21,880 --> 01:18:25,260 He's not in Mumbai, not in Minneapolis, not in Riga. 608 01:18:25,360 --> 01:18:26,700 He is in Jakarta. 609 01:18:26,800 --> 01:18:27,900 Can you crack the site? 610 01:18:28,000 --> 01:18:29,020 No. 611 01:18:29,120 --> 01:18:32,180 Intrarmour's a hosting company like a hotel or a Swiss bank, 612 01:18:32,280 --> 01:18:35,700 exclusively for black hat hackers, so it's bulletproof. 613 01:18:35,800 --> 01:18:38,460 His server's in there, but we can't crack the site. 614 01:18:38,560 --> 01:18:40,244 All right. So, the move is strictly low tech. 615 01:18:40,360 --> 01:18:41,361 As in... 616 01:18:41,960 --> 01:18:43,900 Go to Jakarta, burglarize the place, 617 01:18:44,000 --> 01:18:45,780 get our hands on his server. 618 01:18:45,880 --> 01:18:48,780 We don't have visas or badges that work in Indonesia. 619 01:18:48,880 --> 01:18:50,540 Can't FBI get us documented? 620 01:18:50,640 --> 01:18:53,380 After the NSA turndown, I'd stay away from D.C. 621 01:18:53,480 --> 01:18:55,380 Then I'll work my side of the house for entry. 622 01:18:55,480 --> 01:18:58,290 That'll take a face-to-face with my bosses. 623 01:18:59,200 --> 01:19:01,089 - All right. - All right. 624 01:19:15,920 --> 01:19:17,220 You getting anywhere? 625 01:19:17,320 --> 01:19:19,687 No. Not into the servers. 626 01:19:21,560 --> 01:19:24,860 But I got into Intrarmour's accounting. 627 01:19:24,960 --> 01:19:26,020 Look at this. 628 01:19:26,120 --> 01:19:28,691 Charges to our boy's account. Okay, so? 629 01:19:28,800 --> 01:19:32,420 Look at this. $14, $17. 630 01:19:32,520 --> 01:19:34,522 Now, $16,400. 631 01:19:35,720 --> 01:19:39,220 Five times. Paid to SatelliteShot. 632 01:19:39,320 --> 01:19:41,540 SatelliteShot rents satellite time. 633 01:19:41,640 --> 01:19:43,244 - What kind of shot? - This kind. 634 01:19:45,880 --> 01:19:47,100 Hi-res scan. 635 01:19:47,200 --> 01:19:48,780 Of the coast of Malaysia. 636 01:19:48,880 --> 01:19:49,881 What's there? 637 01:19:50,000 --> 01:19:51,460 Nothing much. 638 01:19:51,560 --> 01:19:53,369 Why'd he scan there? 639 01:21:49,400 --> 01:21:50,401 Shit! 640 01:22:00,360 --> 01:22:01,441 This is Barrett. 641 01:22:01,560 --> 01:22:04,564 What the hell did you let go on there, Carol? 642 01:22:05,680 --> 01:22:06,620 Pollack? 643 01:22:06,720 --> 01:22:09,860 - Do you know what your guy did? - What are you talking about? 644 01:22:09,960 --> 01:22:13,900 Cut the crap. I'm talking about calls I got from the goddamn NSA and Defense. 645 01:22:14,000 --> 01:22:16,740 Our guy blew a reactor at Chai Wan. 646 01:22:16,840 --> 01:22:17,841 Don't you watch CNN? 647 01:22:18,040 --> 01:22:19,610 That's not the point. 648 01:22:19,880 --> 01:22:20,927 That's not the point. 649 01:22:21,040 --> 01:22:23,140 That's exactly the point. 650 01:22:23,240 --> 01:22:26,420 The guy we're working will drop the big hammer and not think twice about it. 651 01:22:26,520 --> 01:22:28,921 Come on, come on, come on. Don't evoke 9/11 on me. 652 01:22:29,720 --> 01:22:32,200 You didn't lose anyone there, Stanley. 653 01:22:33,160 --> 01:22:35,900 Look, I'm under orders. Now, so are you. 654 01:22:36,000 --> 01:22:38,401 Bring him in, Carol. Bring him in. 655 01:22:44,680 --> 01:22:46,250 What's going on? 656 01:22:48,840 --> 01:22:50,251 Damn it! Hathaway's gone. 657 01:22:50,400 --> 01:22:51,970 Hey. This says he's here. 658 01:22:52,440 --> 01:22:53,740 He cut his bracelet? 659 01:22:53,840 --> 01:22:56,380 He can't. It signals an alarm. This says it's working. 660 01:22:56,480 --> 01:22:57,561 Check your settings. 661 01:23:07,680 --> 01:23:09,489 He reset it to once every 24 hours. 662 01:23:09,920 --> 01:23:11,980 We haven't been tracking him since LA. 663 01:23:12,080 --> 01:23:14,286 - They're at Cheung Hau Street. - Shit. 664 01:23:20,840 --> 01:23:21,921 Hey. 665 01:23:32,400 --> 01:23:33,731 They're coming for you. 666 01:23:35,440 --> 01:23:37,300 They're coming for you because of Black Widow. 667 01:23:37,400 --> 01:23:38,860 That was fast. 668 01:23:38,960 --> 01:23:42,043 They want me to turn you over to the Americans. 669 01:23:45,800 --> 01:23:47,500 So, turn me in and walk away. 670 01:23:47,600 --> 01:23:49,700 And then, Barrett and Jessup will back me up. 671 01:23:49,800 --> 01:23:51,060 NSA won't care. 672 01:23:51,160 --> 01:23:54,448 They think because of you, now we have Black Widow. 673 01:23:56,640 --> 01:23:58,529 You have to run. 674 01:23:59,360 --> 01:24:00,805 What? You're gonna refuse an order? 675 01:24:01,120 --> 01:24:02,485 You escaped. 676 01:24:02,840 --> 01:24:04,700 We reconnect in Jakarta. 677 01:24:04,800 --> 01:24:06,700 Look, your bosses can add two and two. 678 01:24:06,800 --> 01:24:08,131 I'm not turning you in. 679 01:24:11,120 --> 01:24:13,122 Do I go with you or Nick? 680 01:24:14,240 --> 01:24:15,207 Neither. 681 01:24:15,320 --> 01:24:17,260 - What? - This doesn't involve you. 682 01:24:17,360 --> 01:24:19,700 Who made that choice? 683 01:24:19,800 --> 01:24:20,847 He's right. 684 01:24:24,640 --> 01:24:29,009 Look, I'm not sure there's any light at the end of this tunnel anymore. 685 01:24:33,040 --> 01:24:34,540 What did you do, Chen Dawai? 686 01:24:34,640 --> 01:24:36,722 Remind him he owes you? 687 01:24:36,840 --> 01:24:38,968 To get him to leave me behind? 688 01:24:39,800 --> 01:24:41,564 You're not going down that road. 689 01:24:41,680 --> 01:24:43,842 I decide what's for me! 690 01:24:45,320 --> 01:24:46,940 Yeah, well, I decide what's for me. 691 01:24:47,040 --> 01:24:48,929 I'm going. You're not. 692 01:24:53,320 --> 01:24:55,607 Right now, we need our data. 693 01:25:02,920 --> 01:25:04,340 Here. You take the car. 694 01:25:04,440 --> 01:25:07,100 You may have to move faster. 695 01:25:07,200 --> 01:25:09,885 I'll bring the hard drive to Quarry Bay. 696 01:25:15,560 --> 01:25:17,449 He's in Kowloon. Right here. 697 01:25:18,720 --> 01:25:21,246 You're gonna take him into custody? 698 01:25:22,720 --> 01:25:23,980 I follow orders. 699 01:25:24,080 --> 01:25:25,300 Which orders? 700 01:25:25,400 --> 01:25:28,051 Stop the bad guys, or arrest Hathaway? 701 01:25:30,600 --> 01:25:32,180 I'm gonna ask you a personal question. 702 01:25:32,280 --> 01:25:35,284 Don't answer if you don't want to. 703 01:25:35,400 --> 01:25:37,289 Who did you lose in 9/11? 704 01:25:37,400 --> 01:25:38,970 My husband. 705 01:26:17,440 --> 01:26:19,500 You got to get rid of that thing. 706 01:26:19,600 --> 01:26:21,602 We got a couple of hours. 707 01:26:34,960 --> 01:26:35,961 Hold it. Hold it. 708 01:26:37,160 --> 01:26:39,128 He's on the move again. He's in Hong Kong. 709 01:26:39,280 --> 01:26:40,220 Quarry Bay. 710 01:26:40,320 --> 01:26:42,971 - Where? - He's headed toward Quarry Bay. 711 01:27:11,160 --> 01:27:13,481 I thought you were going separately. 712 01:27:13,640 --> 01:27:15,100 Nick's taking a small plane. 713 01:27:15,200 --> 01:27:16,700 I'm flying commercial. 714 01:27:16,800 --> 01:27:18,404 Sister, go home. 715 01:27:24,320 --> 01:27:25,810 You did this. 716 01:27:36,160 --> 01:27:37,685 All right, let's go. 717 01:27:38,760 --> 01:27:41,420 Lien! 718 01:27:41,520 --> 01:27:43,020 Hold up! Stop. 719 01:27:43,120 --> 01:27:44,060 - What? - Hold up. Hold up! 720 01:27:44,160 --> 01:27:45,161 - What? - Stop. 721 01:27:45,280 --> 01:27:46,340 - What? - Listen! 722 01:27:46,440 --> 01:27:48,204 I'm a fugitive now! 723 01:27:49,720 --> 01:27:52,326 They'll issue the warrant within hours! 724 01:27:56,200 --> 01:27:57,326 Hey. 725 01:28:00,200 --> 01:28:02,601 Would I take you where I'm going? 726 01:28:22,760 --> 01:28:24,762 Don't blame your brother. 727 01:29:09,760 --> 01:29:11,250 No! 728 01:29:26,520 --> 01:29:28,010 Go, go, go! 729 01:29:54,640 --> 01:29:55,880 Barrett! 730 01:31:36,320 --> 01:31:37,820 Lien, can they get to the next stop 731 01:31:37,920 --> 01:31:39,300 before the train? 732 01:31:39,400 --> 01:31:41,060 Listen, we gotta grieve later, okay? 733 01:31:41,160 --> 01:31:42,140 We have to survive. 734 01:31:42,240 --> 01:31:45,323 Can they get to the next stop before the train? 735 01:31:47,400 --> 01:31:49,289 No, they can't. 736 01:31:50,240 --> 01:31:51,651 Okay, okay. 737 01:31:57,600 --> 01:31:59,204 We're both going after them! 738 01:32:00,280 --> 01:32:01,930 We're both going. 739 01:32:02,440 --> 01:32:03,851 Yes, we are. 740 01:32:05,600 --> 01:32:06,761 We are. 741 01:33:11,120 --> 01:33:12,724 Perak, Malaysia. 742 01:36:18,040 --> 01:36:20,168 Coordinates are right here. 743 01:36:26,040 --> 01:36:28,805 Here. Right here. Looked at this. 744 01:36:31,120 --> 01:36:33,580 He's got $74 million in cash, he's writing code. 745 01:36:33,680 --> 01:36:34,920 What for? 746 01:36:36,480 --> 01:36:37,527 What's here? 747 01:36:39,200 --> 01:36:43,000 You got Dean Palm Oil, Pera Limited Mining. 748 01:36:43,880 --> 01:36:45,962 Agriculture... Jesus. 749 01:37:32,560 --> 01:37:36,042 Hey, this pump, it's a Stasik pump. 750 01:37:46,480 --> 01:37:49,140 They use the same model 751 01:37:49,240 --> 01:37:50,890 Stasik water pumps as Chai Wan reactor. 752 01:37:52,440 --> 01:37:55,205 The same brand. Are they controlled by the same PLCs? 753 01:37:55,680 --> 01:37:56,660 Yes. 754 01:37:56,760 --> 01:37:58,125 What are they mining over there? 755 01:37:58,640 --> 01:37:59,880 Pera Limited. 756 01:38:00,680 --> 01:38:02,660 - Mining tin. - Tin? 757 01:38:02,760 --> 01:38:04,444 Malaysia is one of the biggest exporters. 758 01:38:04,920 --> 01:38:08,891 And there's four other tin mining operations in the next valley. 759 01:38:13,680 --> 01:38:15,860 This is a riverbed. 760 01:38:15,960 --> 01:38:18,486 They divert water with Stasik pumps. 761 01:38:20,440 --> 01:38:22,647 You know why Chai Wan reactor? 762 01:38:24,640 --> 01:38:26,540 We've been looking through the looking glass the wrong way. 763 01:38:26,640 --> 01:38:29,060 He didn't target the reactor to knock out the reactor. 764 01:38:29,160 --> 01:38:31,288 He targeted it to knock out the pumps. 765 01:38:31,840 --> 01:38:34,081 He was rehearsing. It was a rehearsal. 766 01:38:34,440 --> 01:38:36,602 Chai Wan was a rehearsal. 767 01:38:36,720 --> 01:38:39,340 He's going to shut down these pumps and flood the tin mine, 768 01:38:39,440 --> 01:38:41,060 and the valleys, and the villages, 769 01:38:41,160 --> 01:38:43,060 village people, village dogs. 770 01:38:43,160 --> 01:38:46,846 Create a shortage in tin. Tin prices will rise and shoot up. 771 01:38:47,520 --> 01:38:51,206 His $74 million from Chicago was to buy options on tin ore. 772 01:38:55,160 --> 01:38:58,846 That's what you're doing. Isn't it, you son of a bitch? 773 01:43:49,400 --> 01:43:50,606 All right, look at this. 774 01:43:50,880 --> 01:43:53,645 A third version of his virus, running more PLCs. 775 01:43:55,720 --> 01:43:57,245 Fifty-three... 776 01:43:58,360 --> 01:44:00,203 Fifty-three PLCs. 777 01:44:01,160 --> 01:44:03,766 Five different tin mines. 778 01:44:03,880 --> 01:44:07,043 For which he's going to flood five river valleys. 779 01:44:10,760 --> 01:44:12,524 Here's the money from Chicago. 780 01:44:12,920 --> 01:44:16,140 $73.6 million in cash, 781 01:44:16,240 --> 01:44:17,860 deposited into a local bank. 782 01:44:17,960 --> 01:44:20,122 Bank Sentra Agatis. 783 01:45:09,800 --> 01:45:11,404 To this address. 784 01:45:43,960 --> 01:45:45,100 - Hi. - Hello. 785 01:45:45,200 --> 01:45:46,940 Excuse me, I'm sorry. Can you speak English? 786 01:45:47,040 --> 01:45:48,420 - A little. - Okay. 787 01:45:48,520 --> 01:45:50,204 I'm here to have a meeting with 788 01:45:50,320 --> 01:45:53,130 Mr. Jumhari in five minutes. 789 01:45:53,920 --> 01:45:55,809 Go to the reception on the third floor. 790 01:45:56,920 --> 01:45:58,700 Yeah, I know, but 791 01:45:58,800 --> 01:46:01,770 can you help me? My presentation got stained. 792 01:46:02,960 --> 01:46:06,420 Any chance, can you print me a new copy, please? 793 01:46:06,520 --> 01:46:08,090 Not supposed to, but... 794 01:47:25,200 --> 01:47:26,620 So? 795 01:47:26,720 --> 01:47:28,051 Home run. 796 01:48:54,920 --> 01:48:57,020 You got my message. 797 01:48:57,120 --> 01:49:00,540 Why are you here? You tell me, what do you want? 798 01:49:00,640 --> 01:49:03,380 I am not gonna talk to a fucking bagman. 799 01:49:03,480 --> 01:49:06,540 Here's the terms. Phones only. No face-to-face. 800 01:49:06,640 --> 01:49:08,020 You got that? Good. 801 01:49:08,120 --> 01:49:10,964 Next, your boss on the line with me in 15. 802 01:49:14,640 --> 01:49:15,926 That's not possible. 803 01:49:16,840 --> 01:49:18,620 I have $74 million of his money. 804 01:49:18,720 --> 01:49:20,324 You make it possible. 805 01:49:47,840 --> 01:49:48,966 Yeah. 806 01:49:50,280 --> 01:49:52,460 Your note said that you know me, but I don't know you. 807 01:49:52,560 --> 01:49:55,100 But that's not really true, is it, Hathaway? 808 01:49:55,200 --> 01:49:58,060 Yeah? I know you. 809 01:49:58,160 --> 01:49:59,400 You do? 810 01:50:00,040 --> 01:50:02,540 Well, that makes one of us. 811 01:50:02,640 --> 01:50:05,206 Sometimes I wake up in the morning and I don't even know who I am. 812 01:50:05,520 --> 01:50:07,966 Where I am. In what country. 813 01:50:10,040 --> 01:50:12,580 And you know me? 814 01:50:12,680 --> 01:50:13,780 I know you, 815 01:50:13,880 --> 01:50:15,180 and you're about money 816 01:50:15,280 --> 01:50:17,940 because it's your scoreboard in the virtual world. 817 01:50:18,040 --> 01:50:19,530 You found me. 818 01:50:20,680 --> 01:50:21,761 What do you want? 819 01:50:23,200 --> 01:50:24,884 I want to be Casper the Ghost. 820 01:50:25,360 --> 01:50:28,220 Don't you have a job, working yourself out of prison? 821 01:50:28,320 --> 01:50:29,924 It was kind of a bad fit. 822 01:50:30,280 --> 01:50:32,180 You're looking for employment? 823 01:50:32,280 --> 01:50:33,780 What do I want employment for? 824 01:50:33,880 --> 01:50:36,140 Oh, you want a piece? 825 01:50:36,240 --> 01:50:39,340 To put yourself back into the game? 826 01:50:39,440 --> 01:50:40,740 You were never in the game. 827 01:50:40,840 --> 01:50:42,340 You're a glorified carder. 828 01:50:42,440 --> 01:50:43,780 A carder whose time is expired. 829 01:50:43,880 --> 01:50:46,140 Check your expiration date. Your shelf life is over. 830 01:50:46,240 --> 01:50:48,940 A glorified carder holding your $74 million. 831 01:50:49,040 --> 01:50:52,020 Okay, last time. What do you want? 832 01:50:52,120 --> 01:50:54,851 I want 20% of the Malaysian tin ore hit. 833 01:50:59,720 --> 01:51:01,180 For releasing my money? 834 01:51:01,280 --> 01:51:02,740 No, for renting you my code. 835 01:51:02,840 --> 01:51:05,740 It's my action that gave that code you wrote meaning. 836 01:51:05,840 --> 01:51:08,241 What's it mean without a bankroll? 837 01:51:13,080 --> 01:51:14,140 You want to be my partner? 838 01:51:14,240 --> 01:51:17,820 It's 20%. You call it whatever you want. 839 01:51:17,920 --> 01:51:19,126 I meet my partners. 840 01:51:23,640 --> 01:51:24,740 Well, I don't. 841 01:51:24,840 --> 01:51:27,081 And like I told your bagman, I don't want to meet. 842 01:51:27,200 --> 01:51:29,931 I don't give a fuck about what you want. 843 01:51:30,960 --> 01:51:34,601 It's what I want when I make a deal, face-to-face. 844 01:51:36,000 --> 01:51:40,900 Because I can put together another bankroll. Target another target. 845 01:51:41,000 --> 01:51:43,048 And if I stop thinking about you, 846 01:51:44,200 --> 01:51:46,168 if I stop thinking about anything, 847 01:51:47,400 --> 01:51:51,121 it disappears. It vanishes. It ceases to exist. 848 01:51:55,520 --> 01:51:57,409 But you... 849 01:51:57,520 --> 01:51:59,500 You, I want to meet. 850 01:51:59,600 --> 01:52:02,206 Or you can piss off and die, Ghostman. 851 01:52:09,760 --> 01:52:10,886 All right, you and Kassar. 852 01:52:11,160 --> 01:52:13,540 I'll call you and tell you where. 853 01:52:13,640 --> 01:52:14,880 Sure. 854 01:52:24,520 --> 01:52:26,090 Okay. We're on. 855 01:52:47,160 --> 01:52:48,844 Emergency! Please. 856 01:53:48,320 --> 01:53:51,722 It's all about if I can get close enough fast enough. 857 01:54:33,800 --> 01:54:36,644 Hey, I told you. You and Kassar, alone. 858 01:54:40,120 --> 01:54:41,724 Five men, two floors below. 859 01:54:43,280 --> 01:54:45,328 The team two floors below. 860 01:54:46,640 --> 01:54:48,420 And two gunmen with them. 861 01:54:48,520 --> 01:54:50,568 And the two guys with you? 862 01:54:51,760 --> 01:54:54,491 Lose them. I'm changing the location. 863 01:54:55,320 --> 01:55:00,380 You and Kassar, Papua Square. Walk west. Meet me in two hours. 864 01:55:00,480 --> 01:55:03,260 It'll be packed. How am I supposed to find you? 865 01:55:03,360 --> 01:55:05,169 I find you. 866 01:58:00,640 --> 01:58:01,980 Step back. Hands up. 867 01:58:02,080 --> 01:58:03,844 Hands up, hands up. 868 01:58:05,040 --> 01:58:06,769 Hands up. Turn around. 869 01:58:07,440 --> 01:58:08,851 Turn around! 870 01:58:22,320 --> 01:58:25,005 No one's ever gotten this close before. 871 01:59:24,200 --> 01:59:26,780 20% is too much, Hathaway. 872 01:59:26,880 --> 01:59:28,484 You talking points? 873 01:59:29,120 --> 01:59:31,964 Well, people die on this planet every day. 874 01:59:32,600 --> 01:59:35,300 What do you want me to do? Grieve? Because I knew him? 875 01:59:35,400 --> 01:59:37,660 He's not here anymore. 876 01:59:37,760 --> 01:59:39,020 Where's my money? 877 01:59:39,120 --> 01:59:40,770 Not about money. 878 01:59:43,760 --> 01:59:48,180 Not about zeroes or ones or code. 879 01:59:48,280 --> 01:59:49,460 And what's that tell you? 880 01:59:49,560 --> 01:59:51,005 Get out of the way! 881 01:59:51,120 --> 01:59:52,660 I'm a gamer. 882 01:59:52,760 --> 01:59:55,180 I hire people to do sub-symbolic stuff. 883 01:59:55,280 --> 01:59:57,700 You killed my friends. I do my own. 884 01:59:57,800 --> 01:59:59,006 And do I care? 885 02:02:13,080 --> 02:02:14,127 The Betadine. 886 02:02:15,560 --> 02:02:16,721 Here. 887 02:02:32,400 --> 02:02:34,209 - I got it. - Okay. 888 02:02:37,320 --> 02:02:38,924 - This one? - Yeah. 889 02:02:40,080 --> 02:02:41,445 That's good. It's good. 890 02:02:42,280 --> 02:02:43,520 Okay.