1 00:00:02,089 --> 00:00:03,307 You're Angela Cassidy's son, right? 2 00:00:03,307 --> 00:00:05,092 Your mother's still out there. 3 00:00:05,092 --> 00:00:06,310 You sold secrets to the Russians, 4 00:00:06,310 --> 00:00:08,443 and then you just disappeared. 5 00:00:08,443 --> 00:00:10,053 I am not who you think I am. 6 00:00:10,053 --> 00:00:11,228 I need your help. 7 00:00:11,228 --> 00:00:13,056 [tense music] 8 00:00:13,056 --> 00:00:15,798 I'm ordering you to cease and desist 9 00:00:15,798 --> 00:00:18,279 in any more personal investigation. 10 00:00:20,150 --> 00:00:24,067 I am working for the CIA. I never stopped. 11 00:00:24,067 --> 00:00:27,070 You know the truth. We all do. 12 00:00:27,070 --> 00:00:29,507 Mom, don't disappear on me again. 13 00:00:29,507 --> 00:00:30,378 Let me help you. 14 00:00:30,378 --> 00:00:31,988 Scott, forget about me. 15 00:00:31,988 --> 00:00:33,859 I love you. 16 00:00:33,859 --> 00:00:40,779 ♪ 17 00:00:42,564 --> 00:00:44,044 You said you put her in your backpack. 18 00:00:44,044 --> 00:00:45,393 I did put her in my backpack, 19 00:00:45,393 --> 00:00:46,437 but Piggy has a mind of her own. 20 00:00:46,437 --> 00:00:48,178 Don't be such a baby, Mads. 21 00:00:48,178 --> 00:00:50,311 I'll be quick. I promise. 22 00:00:50,311 --> 00:00:52,052 We'll help you look. 23 00:00:52,052 --> 00:00:54,228 Let's go. Let's go. 24 00:01:00,234 --> 00:01:01,583 Come on. - Everyone has their price. 25 00:01:01,583 --> 00:01:02,714 Papa's home. 26 00:01:02,714 --> 00:01:04,020 Can we say hi? 27 00:01:04,020 --> 00:01:05,717 Hold on. 28 00:01:05,717 --> 00:01:08,111 10 million. 29 00:01:08,111 --> 00:01:09,678 20. 30 00:01:09,678 --> 00:01:12,072 You know your credentials are worth so much more. 31 00:01:12,072 --> 00:01:13,290 No, he's on a work call. 32 00:01:13,290 --> 00:01:16,119 Come on, guys. Let's go. 33 00:01:16,119 --> 00:01:18,121 We gotta hurry. 34 00:01:18,121 --> 00:01:22,343 ♪ 35 00:01:22,343 --> 00:01:24,693 Piggy, where are you? 36 00:01:26,782 --> 00:01:29,698 [faint gunshot] 37 00:01:29,698 --> 00:01:30,742 Stay here. 38 00:01:30,742 --> 00:01:32,179 I'll be right back. 39 00:01:36,531 --> 00:01:37,706 Take it. 40 00:01:37,706 --> 00:01:39,011 Whatever you want, I won't tell a soul. 41 00:01:39,011 --> 00:01:40,883 - I can't run that risk. - No. 42 00:01:40,883 --> 00:01:43,146 Please, please--my two boys. 43 00:01:43,146 --> 00:01:44,278 [gunshots] 44 00:01:44,278 --> 00:01:46,367 [gasping] 45 00:01:50,893 --> 00:01:52,851 - [grunts] - Ahh! 46 00:01:58,814 --> 00:02:00,729 [gunshots] 47 00:02:00,729 --> 00:02:01,817 What's going on? 48 00:02:01,817 --> 00:02:03,601 Come here. Come here. 49 00:02:03,601 --> 00:02:10,565 ♪ 50 00:02:17,354 --> 00:02:21,402 If you come out right now, I won't hurt the boys. 51 00:02:26,102 --> 00:02:27,930 [panting] Okay. 52 00:02:29,236 --> 00:02:30,846 [machinery whirring] 53 00:02:35,981 --> 00:02:37,200 [both screaming] 54 00:02:37,200 --> 00:02:38,854 [grunting] [pounding on door] 55 00:02:38,854 --> 00:02:40,856 Open it! 56 00:02:44,555 --> 00:02:47,689 [screaming, whimpering] 57 00:02:47,689 --> 00:02:54,478 ♪ 58 00:02:58,221 --> 00:03:00,745 - Morning. - Morning. 59 00:03:00,745 --> 00:03:03,095 We've got a visitor. 60 00:03:03,095 --> 00:03:05,402 Looks like he's having a rough day. 61 00:03:06,360 --> 00:03:07,622 Where's Scott? 62 00:03:07,622 --> 00:03:09,014 I called to give him a heads-up. 63 00:03:09,014 --> 00:03:11,016 Haven't heard back yet. 64 00:03:11,016 --> 00:03:12,235 Can I help you? 65 00:03:12,235 --> 00:03:13,323 We're screwed. 66 00:03:13,323 --> 00:03:14,846 We're 1,000% screwed. 67 00:03:14,846 --> 00:03:15,934 Okay, back up. 68 00:03:15,934 --> 00:03:18,328 - Who are you? - Adam Grayson, NSA. 69 00:03:18,328 --> 00:03:20,243 I'm here because my boss thinks we can 70 00:03:20,243 --> 00:03:21,592 put this genie back in the bottle, 71 00:03:21,592 --> 00:03:22,854 but I am telling you now, there is-- 72 00:03:22,854 --> 00:03:24,552 - Slow down. - There is no slowing down. 73 00:03:24,552 --> 00:03:26,380 Brian Lange, the bureau's NSA liaison, 74 00:03:26,380 --> 00:03:27,859 is being read in as we speak. 75 00:03:27,859 --> 00:03:30,340 This is a huge, and I mean absolutely massive, 76 00:03:30,340 --> 00:03:32,864 catastrophic disaster. - What happened? 77 00:03:32,864 --> 00:03:34,823 It's the biggest data breach the NSA has ever seen. 78 00:03:34,823 --> 00:03:41,786 ♪ 79 00:03:47,662 --> 00:03:49,881 Brian! 80 00:03:49,881 --> 00:03:51,231 Help! 81 00:03:51,231 --> 00:03:53,233 Brian! Help! 82 00:03:53,233 --> 00:03:56,236 [both grunting] 83 00:03:56,236 --> 00:04:02,764 ♪ 84 00:04:06,420 --> 00:04:08,073 Brian! 85 00:04:08,073 --> 00:04:09,466 Help! 86 00:04:16,038 --> 00:04:18,040 Stop, please! Stop! 87 00:04:18,040 --> 00:04:20,564 [groaning] 88 00:04:20,564 --> 00:04:22,958 Stop, no. Brian. Stop! 89 00:04:22,958 --> 00:04:23,959 Brian! 90 00:04:23,959 --> 00:04:26,396 No! 91 00:04:27,354 --> 00:04:30,487 [gasping] 92 00:04:34,274 --> 00:04:37,102 [phone buzzing] 93 00:04:37,102 --> 00:04:43,718 ♪ 94 00:04:46,677 --> 00:04:47,678 Lange. 95 00:04:49,506 --> 00:04:51,552 Call Dutton. I'm off till Tuesday. 96 00:04:54,032 --> 00:04:55,295 Okay. 97 00:05:02,693 --> 00:05:06,436 Do me a favor. Next time, start with that. 98 00:05:06,436 --> 00:05:08,395 I'll be there in an hour. 99 00:05:12,442 --> 00:05:15,315 Carl Lassen, the founder of Digital Wall, 100 00:05:15,315 --> 00:05:16,968 Europe's largest cybersecurity company. 101 00:05:16,968 --> 00:05:18,883 Lassen was shot dead in his home 102 00:05:18,883 --> 00:05:20,581 in Copenhagen yesterday afternoon. 103 00:05:20,581 --> 00:05:22,800 Now, Digital Wall has the most robust 104 00:05:22,800 --> 00:05:24,802 fiber-optic cable network in the world. 105 00:05:24,802 --> 00:05:27,022 So all of the internet traffic that passes between Russia, 106 00:05:27,022 --> 00:05:29,067 the Nordics, Western Europe, the U.S., 107 00:05:29,067 --> 00:05:30,634 it runs through these cables. 108 00:05:30,634 --> 00:05:32,897 So we believe someone killed Lassen to get to that data. 109 00:05:32,897 --> 00:05:35,291 I'm seeing Carl sold Digital Wall a year ago. 110 00:05:35,291 --> 00:05:37,467 Yeah, when Carl cashed out, he kept his board seats 111 00:05:37,467 --> 00:05:39,295 and security privileges. 112 00:05:39,295 --> 00:05:40,557 The killer stole his password, 113 00:05:40,557 --> 00:05:41,732 logged into Digital Wall's system. 114 00:05:41,732 --> 00:05:43,647 What exactly was stolen? 115 00:05:43,647 --> 00:05:45,475 Terabytes of top secret data. 116 00:05:45,475 --> 00:05:48,652 Military vulnerabilities, proprietary NSA weapons. 117 00:05:48,652 --> 00:05:51,612 Fortunately, we have a witness to the murder. 118 00:05:51,612 --> 00:05:54,310 Brie Martindale, American, Carl's au pair. 119 00:05:54,310 --> 00:05:55,790 Carl had a panic room in the house. 120 00:05:55,790 --> 00:05:57,705 Brie got in there just in time with Carl's two kids. 121 00:05:57,705 --> 00:06:00,142 Once the locks engaged, the cops are notified-- 122 00:06:00,142 --> 00:06:02,013 the killer boogied. - Where's Brie now? 123 00:06:02,013 --> 00:06:03,580 Under DDIS protection. 124 00:06:03,580 --> 00:06:05,452 Supervisory Special Agent Brian Lange, 125 00:06:05,452 --> 00:06:06,931 the bureau's liaison to the NSA-- 126 00:06:06,931 --> 00:06:08,672 he's gonna meet us in Copenhagen. 127 00:06:08,672 --> 00:06:10,979 He's done tours in both cyber and foreign counterintel. 128 00:06:10,979 --> 00:06:12,502 Has anybody heard from Scott today? 129 00:06:12,502 --> 00:06:14,156 Not since yesterday. 130 00:06:14,156 --> 00:06:16,985 I mean, that is just odd-- him not showing up and no word? 131 00:06:16,985 --> 00:06:18,682 - Do we wait for him? - No, we can't. 132 00:06:18,682 --> 00:06:20,031 This case is too big. 133 00:06:20,031 --> 00:06:21,206 I'll keep trying to reach him. 134 00:06:21,206 --> 00:06:22,469 Okay. 135 00:06:24,035 --> 00:06:26,690 Agent Lange. 136 00:06:26,690 --> 00:06:28,344 You must be agent Vo. 137 00:06:28,344 --> 00:06:30,346 This is Special Agent Andre Raines, 138 00:06:30,346 --> 00:06:31,521 Megan Garretson from Europol. 139 00:06:31,521 --> 00:06:32,696 You're Brian Lange. 140 00:06:32,696 --> 00:06:34,219 You were ALAT in Scandinavia when 141 00:06:34,219 --> 00:06:36,352 that online abuse ring in Norway got busted, 142 00:06:36,352 --> 00:06:38,223 over 300 victims. 143 00:06:38,223 --> 00:06:39,529 My colleague sang your praises. 144 00:06:39,529 --> 00:06:42,271 Yeah, joint effort. 145 00:06:42,271 --> 00:06:43,664 Where is Agent Forrester? 146 00:06:43,664 --> 00:06:45,056 He's on his way. 147 00:06:45,056 --> 00:06:46,884 We'll get set up at the DDIS station. 148 00:06:46,884 --> 00:06:50,235 Great. Brian and I will cover here. 149 00:06:50,235 --> 00:06:52,063 If that's okay. 150 00:06:52,063 --> 00:06:53,064 After you. 151 00:07:00,071 --> 00:07:02,770 Agent Vo, this is Agent Lorens Faber, DDIS. 152 00:07:02,770 --> 00:07:05,033 Welcome to the Lassen residence, what we thought 153 00:07:05,033 --> 00:07:07,862 was the most secure home in all of Denmark. 154 00:07:07,862 --> 00:07:11,605 Electronic locks requiring both biometrics and pin codes, 155 00:07:11,605 --> 00:07:13,607 security cameras covering every square inch 156 00:07:13,607 --> 00:07:14,869 of the house. 157 00:07:14,869 --> 00:07:16,348 How'd the killer disable them? 158 00:07:16,348 --> 00:07:17,915 He didn't. 159 00:07:17,915 --> 00:07:19,700 If he had, the police would have been alerted instantly. 160 00:07:19,700 --> 00:07:21,745 He froze the cameras and looped the footage. 161 00:07:21,745 --> 00:07:23,965 Came and went without a trace. 162 00:07:30,841 --> 00:07:31,929 Brie? 163 00:07:31,929 --> 00:07:33,540 I'm Agent Vo. This is Agent Lange. 164 00:07:33,540 --> 00:07:34,889 We're with the FBI. 165 00:07:34,889 --> 00:07:36,281 Mads and Edvard-- where are they? 166 00:07:36,281 --> 00:07:38,545 Don't worry. The boys are with their mom. 167 00:07:38,545 --> 00:07:41,025 Can you tell us what you remember from yesterday? 168 00:07:41,025 --> 00:07:42,505 We weren't even supposed to be home. 169 00:07:42,505 --> 00:07:44,289 Me and the kids-- 170 00:07:44,289 --> 00:07:46,291 Carl asked me to get them out of the house in the morning. 171 00:07:46,291 --> 00:07:47,641 Did he say why? 172 00:07:47,641 --> 00:07:50,121 No, but he has been through a lot recently. 173 00:07:50,121 --> 00:07:51,645 I read in his file that he just got divorced. 174 00:07:51,645 --> 00:07:53,124 Is that what you're referring to? 175 00:07:53,124 --> 00:07:54,691 It started before that. 176 00:07:54,691 --> 00:07:56,954 After Carl sold his company, 177 00:07:56,954 --> 00:07:59,696 he started going out a lot, partying. 178 00:07:59,696 --> 00:08:01,524 What can you tell us about the ex-wife? 179 00:08:01,524 --> 00:08:02,786 Was the separation amicable? 180 00:08:02,786 --> 00:08:05,441 No. No, it wasn't amicable. 181 00:08:05,441 --> 00:08:09,271 And then after Susanne left, he really started slipping. 182 00:08:09,271 --> 00:08:11,491 I heard a woman's voice coming from his office 183 00:08:11,491 --> 00:08:13,841 at 2:00 in the morning, 184 00:08:13,841 --> 00:08:17,148 and nobody was allowed in there, not even me. 185 00:08:17,148 --> 00:08:19,411 All right, I will ask our SIA back in Budapest 186 00:08:19,411 --> 00:08:21,805 to try to pull that footage. 187 00:08:21,805 --> 00:08:23,415 We're gonna need a list of everybody 188 00:08:23,415 --> 00:08:25,896 who's been to the house recently, Carl's friends, 189 00:08:25,896 --> 00:08:27,550 your friends, everybody, okay? 190 00:08:27,550 --> 00:08:29,160 I wasn't allowed to have any guests. 191 00:08:29,160 --> 00:08:32,599 U.S. embassy liaisons here to discuss Brie's situation. 192 00:08:32,599 --> 00:08:33,817 Martin Russo. 193 00:08:33,817 --> 00:08:35,515 I'm the embassy's political attaché. 194 00:08:35,515 --> 00:08:37,517 [suspenseful music] 195 00:08:37,517 --> 00:08:39,519 Political attaché, huh? 196 00:08:39,519 --> 00:08:41,042 That's a good one. 197 00:08:45,350 --> 00:08:47,091 CIA. 198 00:08:47,091 --> 00:08:49,006 Grayson should have told me Langley was involved. 199 00:08:49,006 --> 00:08:50,878 He wasn't authorized to do so. 200 00:08:50,878 --> 00:08:52,575 Look, if we're not fully read in, we cannot do our job. 201 00:08:52,575 --> 00:08:54,142 Nobody's fully read in. 202 00:08:54,142 --> 00:08:56,231 Not even the highest echelons of the Danish PET 203 00:08:56,231 --> 00:08:58,015 knew Carl was our asset. 204 00:08:58,015 --> 00:09:00,627 If our allies found out about this secret arrangement-- 205 00:09:00,627 --> 00:09:02,063 Marty, why don't you just tell us 206 00:09:02,063 --> 00:09:04,761 what we're really walking into here? 207 00:09:04,761 --> 00:09:06,633 This morning, the German chancellor received 208 00:09:06,633 --> 00:09:08,504 a ransom demand of 5 million euros. 209 00:09:08,504 --> 00:09:11,028 Now, we have confirmed intel that a vulnerability 210 00:09:11,028 --> 00:09:13,553 in the MEGAL gas pipeline was part of the data 211 00:09:13,553 --> 00:09:15,642 Carl's killer intercepted. 212 00:09:15,642 --> 00:09:17,992 Germany refused to pay up. 213 00:09:17,992 --> 00:09:20,734 30 minutes later, this happened. 214 00:09:20,734 --> 00:09:24,738 ♪ 215 00:09:24,738 --> 00:09:27,218 It definitely wasn't a one-man show. 216 00:09:27,218 --> 00:09:29,394 Pulling off an attack like that takes resources. 217 00:09:29,394 --> 00:09:32,223 Have any state-sponsored groups claimed responsibility? 218 00:09:32,223 --> 00:09:33,485 Not yet. 219 00:09:33,485 --> 00:09:35,923 So we're all working the same case here. 220 00:09:35,923 --> 00:09:40,188 How about we all agree to play our cards face up? 221 00:09:40,188 --> 00:09:41,537 [scoffs] 222 00:09:41,537 --> 00:09:43,757 Cards face up? 223 00:09:43,757 --> 00:09:46,194 This coming from Brian Lange. 224 00:09:46,194 --> 00:09:48,588 That's rich. 225 00:09:48,588 --> 00:09:51,068 Carl's ex-wife is here. 226 00:09:51,068 --> 00:09:53,331 Well, how about this? Can you at least have Germany 227 00:09:53,331 --> 00:09:55,290 send over everything they've got so far? 228 00:09:55,290 --> 00:09:56,639 Because whoever killed Carl 229 00:09:56,639 --> 00:09:57,945 knows that they hit a gold mine. 230 00:09:59,468 --> 00:10:00,643 Great. 231 00:10:00,643 --> 00:10:06,997 ♪ 232 00:10:06,997 --> 00:10:08,172 Brie! 233 00:10:09,434 --> 00:10:11,915 Oh! Oh. 234 00:10:11,915 --> 00:10:15,440 Hey, guys. It's okay. It's okay. 235 00:10:15,440 --> 00:10:16,833 She can leave now. 236 00:10:17,704 --> 00:10:20,315 [speaking Danish] 237 00:10:22,056 --> 00:10:23,753 I'll be looking at photo arrays 238 00:10:23,753 --> 00:10:24,798 if you have more questions. 239 00:10:24,798 --> 00:10:25,886 Thank you. 240 00:10:25,886 --> 00:10:28,323 Okay, go pack your bags now. 241 00:10:28,323 --> 00:10:30,455 Don't worry. You'll be leaving soon. 242 00:10:30,455 --> 00:10:31,805 Okay, go, go. 243 00:10:35,983 --> 00:10:38,159 Susanne, were you aware that your husband 244 00:10:38,159 --> 00:10:40,465 kept his security privileges at Digital Wall 245 00:10:40,465 --> 00:10:42,293 after he cashed out? 246 00:10:42,293 --> 00:10:45,296 Of course I knew, but whether he actually remained sober 247 00:10:45,296 --> 00:10:48,473 long enough to ever set foot back in the office, 248 00:10:48,473 --> 00:10:49,649 I haven't a clue. 249 00:10:49,649 --> 00:10:51,346 Ah, bad breakup, I take it? 250 00:10:53,827 --> 00:10:55,306 Beklager. 251 00:10:55,306 --> 00:10:57,352 That was the first word that Carl ever said to me. 252 00:10:57,352 --> 00:10:59,093 It means "I'm sorry." 253 00:10:59,093 --> 00:11:03,140 We were queuing for coffee, and he bumped into me by mistake. 254 00:11:03,140 --> 00:11:05,403 And Danes never apologize for something 255 00:11:05,403 --> 00:11:07,928 they do on accident, but-- 256 00:11:07,928 --> 00:11:11,279 but Carl said "beklager," because that was who he was. 257 00:11:11,279 --> 00:11:16,588 He was overly polite and, uh, and sheepish. 258 00:11:16,588 --> 00:11:18,155 And then he cashed out. 259 00:11:18,155 --> 00:11:19,983 And he thought that becoming a billionaire 260 00:11:19,983 --> 00:11:22,203 meant that he could loosen his tie. 261 00:11:22,203 --> 00:11:24,814 As for me, 262 00:11:24,814 --> 00:11:27,034 turns out I like sheepish. 263 00:11:30,211 --> 00:11:31,995 This was from two weeks ago. 264 00:11:31,995 --> 00:11:34,258 Do you recognize this woman in Carl's office? 265 00:11:34,258 --> 00:11:37,522 No, he probably met her at the club. 266 00:11:37,522 --> 00:11:38,480 What club? 267 00:11:40,569 --> 00:11:41,701 You don't know, do you? 268 00:11:43,920 --> 00:11:45,530 Swingers club. 269 00:11:45,530 --> 00:11:49,752 ♪ 270 00:11:49,752 --> 00:11:52,189 Our DOA spent his whole life on the straight and narrow. 271 00:11:52,189 --> 00:11:54,061 How does a guy like that end up at a club 272 00:11:54,061 --> 00:11:56,672 where check your inhibitions at the door is a requirement? 273 00:11:56,672 --> 00:11:58,848 I don't know, but it seems like a perfect place 274 00:11:58,848 --> 00:12:01,024 to entrap a square like him. 275 00:12:01,024 --> 00:12:04,071 Carl Lassen's autopsy just came in. 276 00:12:04,071 --> 00:12:06,421 This guy partied harder than a frat boy in Ibiza. 277 00:12:06,421 --> 00:12:08,858 The MDMA, that'll send your heart 278 00:12:08,858 --> 00:12:10,338 shooting out of your ribcage. 279 00:12:10,338 --> 00:12:12,035 And Lassen's phone, as requested. 280 00:12:13,558 --> 00:12:15,517 Security freaks don't just hang their dirty laundry 281 00:12:15,517 --> 00:12:17,737 out in the open. 282 00:12:20,261 --> 00:12:21,349 Hidden apps. 283 00:12:22,959 --> 00:12:25,570 And there we are-- the Velvet Room. 284 00:12:25,570 --> 00:12:28,051 Looks like a membership app to that private swingers club. 285 00:12:28,051 --> 00:12:29,531 Go in with our badges? 286 00:12:29,531 --> 00:12:32,621 No, that's a surefire way to get people to clam up. 287 00:12:32,621 --> 00:12:34,449 Undercover it is then. 288 00:12:36,059 --> 00:12:41,586 ♪ Sugar on my mind 289 00:12:41,586 --> 00:12:44,415 [indistinct chatter] 290 00:12:44,415 --> 00:12:47,462 That's the blonde from Carl's office. 291 00:12:49,986 --> 00:12:52,336 [speaking Danish] 292 00:12:52,336 --> 00:12:53,860 I'm Samantha. 293 00:12:53,860 --> 00:12:55,383 This is my partner Michael. 294 00:12:55,383 --> 00:12:57,907 Mm, out-of-towners? Intriguing. 295 00:12:57,907 --> 00:12:59,343 I'm Martine. 296 00:13:05,436 --> 00:13:08,483 So how did you hear about the Velvet Room? 297 00:13:08,483 --> 00:13:09,745 From friends. 298 00:13:09,745 --> 00:13:12,139 We're members of the Luxe Castle in London. 299 00:13:12,139 --> 00:13:15,359 In that case, let me show you around. 300 00:13:15,359 --> 00:13:18,972 What Michael's too tactful to admit is, 301 00:13:18,972 --> 00:13:21,409 we saw what happened to Carl Lassen on the telly. 302 00:13:21,409 --> 00:13:23,890 Michael worked with him a few years ago. 303 00:13:23,890 --> 00:13:25,979 He was a nice chap. 304 00:13:25,979 --> 00:13:28,633 Ah, so you're here out of morbid curiosity, then? 305 00:13:28,633 --> 00:13:32,028 Oh, is that such a bad thing? 306 00:13:32,028 --> 00:13:36,424 Carl was a bit of a mess, but he was magnanimous, 307 00:13:36,424 --> 00:13:38,165 if you know what I mean. 308 00:13:38,165 --> 00:13:40,341 I went to his house once. 309 00:13:40,341 --> 00:13:42,169 Gorgeous mansion. 310 00:13:42,169 --> 00:13:44,824 But enough about Carl. 311 00:13:44,824 --> 00:13:47,435 Life is for the living. 312 00:13:51,743 --> 00:13:53,484 Who is he? 313 00:13:57,358 --> 00:13:59,969 We don't kiss and tell at the Velvet Room. 314 00:13:59,969 --> 00:14:02,842 [tense music] 315 00:14:02,842 --> 00:14:05,322 Martinis first. 316 00:14:05,322 --> 00:14:08,195 Dessert later. 317 00:14:08,195 --> 00:14:11,198 Hey, what's the rush? 318 00:14:13,330 --> 00:14:15,419 Clean-cut, calloused knuckles, 319 00:14:15,419 --> 00:14:18,770 and I saw you check the side exits the second you walked in. 320 00:14:18,770 --> 00:14:20,120 I used to consult for the DDIS. 321 00:14:20,120 --> 00:14:22,209 I know a Fed when I see one. 322 00:14:22,209 --> 00:14:24,037 Then you should know walking away now just gives us 323 00:14:24,037 --> 00:14:26,561 more PC to come find you later. 324 00:14:29,390 --> 00:14:33,873 I'll give you this, but only because Carl was a friend. 325 00:14:33,873 --> 00:14:35,265 Look into his ex-wife. 326 00:14:35,265 --> 00:14:37,267 Carl screwed her over royally in the divorce. 327 00:14:37,267 --> 00:14:39,008 From what I heard, she's the one who left him. 328 00:14:39,008 --> 00:14:42,098 And he got his revenge, every kroner's worth. 329 00:14:42,098 --> 00:14:47,930 ♪ 330 00:14:47,930 --> 00:14:49,323 Germany sent over the ransomware message 331 00:14:49,323 --> 00:14:50,933 their chancellor received. 332 00:14:50,933 --> 00:14:53,022 Whoever's pulling the strings left us a breadcrumb, 333 00:14:53,022 --> 00:14:55,503 a signature hidden in the HTML code. 334 00:14:56,460 --> 00:15:00,377 Oh, man, the Army of Shadows. 335 00:15:00,377 --> 00:15:01,944 Who? 336 00:15:01,944 --> 00:15:03,337 They're a hacker group-- 337 00:15:03,337 --> 00:15:05,426 supposedly responsible for the two largest 338 00:15:05,426 --> 00:15:08,429 data breaches in history, each worth 200 mil. 339 00:15:08,429 --> 00:15:09,952 - State-sponsored? - Independent. 340 00:15:09,952 --> 00:15:12,215 No home base, no known members, 341 00:15:12,215 --> 00:15:14,565 nobody even knows what country they're operating out of. 342 00:15:14,565 --> 00:15:16,263 What makes this group so unique is that they have 343 00:15:16,263 --> 00:15:18,526 operatives who specialize in social engineering, 344 00:15:18,526 --> 00:15:20,571 exploiting people rather than software. 345 00:15:20,571 --> 00:15:22,008 Maybe someone had a bone to pick with Carl 346 00:15:22,008 --> 00:15:23,835 and sold him out? 347 00:15:23,835 --> 00:15:26,490 Any word from that woman he was seeing at the Velvet Room? 348 00:15:26,490 --> 00:15:28,318 Ran Martine through Europol's DBs. 349 00:15:28,318 --> 00:15:29,885 Everything came back clean. 350 00:15:29,885 --> 00:15:32,409 Now, Carl and Susanne's divorce was more interesting. 351 00:15:32,409 --> 00:15:34,629 Intel came from Harald Bonnichsen, 352 00:15:34,629 --> 00:15:35,935 also in cybersecurity-- 353 00:15:35,935 --> 00:15:38,067 consulted for DDIS back in the day. 354 00:15:38,067 --> 00:15:39,721 What he said about Carl's ex-wife was spot on. 355 00:15:39,721 --> 00:15:41,244 Yeah, Susanne didn't receive a cent 356 00:15:41,244 --> 00:15:43,029 from Digital Wall's sale, 357 00:15:43,029 --> 00:15:45,031 and she wasn't shy about calling Carl out. 358 00:15:45,031 --> 00:15:47,337 This text was from six months ago. 359 00:15:47,337 --> 00:15:49,296 "Go to hell, you cheap bastard." 360 00:15:49,296 --> 00:15:52,081 Some, uh, increasingly vulgar insults followed. 361 00:15:52,081 --> 00:15:54,649 Okay, so Carl screws Susanne over, 362 00:15:54,649 --> 00:15:56,607 and now she wants her half of the cash out. 363 00:15:56,607 --> 00:15:59,697 So then she sells the intel on Carl to this hacker group. 364 00:15:59,697 --> 00:16:01,699 And not only does she get a massive payday, 365 00:16:01,699 --> 00:16:05,573 but with Carl gone, the assets actually pass back to her 366 00:16:05,573 --> 00:16:06,530 through the kids. 367 00:16:08,489 --> 00:16:10,230 Maybe. 368 00:16:10,230 --> 00:16:11,405 [cell phone dings] 369 00:16:14,669 --> 00:16:17,063 Excuse me. 370 00:16:17,063 --> 00:16:18,803 The Hub just received an encrypted message 371 00:16:18,803 --> 00:16:20,240 from the Army of Shadows. 372 00:16:20,240 --> 00:16:21,981 It's an intake form from a Russian prison. 373 00:16:21,981 --> 00:16:23,939 I just sent it to you. 374 00:16:23,939 --> 00:16:25,636 - Scott's mom. - Yeah. 375 00:16:25,636 --> 00:16:27,987 Vanessa Kincaide is one of her known aliases. 376 00:16:27,987 --> 00:16:29,945 The hackers want us to drop the case 377 00:16:29,945 --> 00:16:32,034 against them in exchange for her location. 378 00:16:32,034 --> 00:16:33,296 If Scott finds out, 379 00:16:33,296 --> 00:16:34,994 he would move heaven and Earth to find her. 380 00:16:34,994 --> 00:16:38,301 Cam, they also sent this message directly to Scott. 381 00:16:38,301 --> 00:16:39,955 And still no word? 382 00:16:39,955 --> 00:16:41,957 Nothing. He's gone dark. 383 00:16:41,957 --> 00:16:45,613 ♪ 384 00:16:49,834 --> 00:16:50,966 It's been 24 hours since any of us heard from Scott. 385 00:16:50,966 --> 00:16:53,795 Do we loop in HQ or-- - Not yet. 386 00:16:53,795 --> 00:16:57,146 I need you to get a copy of that file unredacted. 387 00:16:57,146 --> 00:16:59,409 [suspenseful music] 388 00:16:59,409 --> 00:17:01,759 See what you can fish out of the NSA discreetly. 389 00:17:01,759 --> 00:17:02,760 I'll try. 390 00:17:02,760 --> 00:17:03,805 Thank you. 391 00:17:06,503 --> 00:17:07,939 Everything good? 392 00:17:07,939 --> 00:17:10,507 Yeah, yeah, just getting more dirt on the ex. 393 00:17:10,507 --> 00:17:11,987 Are you ready? 394 00:17:13,728 --> 00:17:15,425 I don't know if anybody's ever told you this, 395 00:17:15,425 --> 00:17:18,472 but, uh, you have a terrible poker face. 396 00:17:18,472 --> 00:17:25,870 ♪ 397 00:17:26,784 --> 00:17:28,699 Yeah, I should probably loop you in on this. 398 00:17:38,579 --> 00:17:40,668 Well, my Russian isn't as sharp as it used to be, 399 00:17:40,668 --> 00:17:42,017 but nowhere on this document 400 00:17:42,017 --> 00:17:43,540 does it say the word "prisoner." 401 00:17:43,540 --> 00:17:45,847 Miss Vanessa Kincaide could be an employee. 402 00:17:45,847 --> 00:17:48,502 You know damn well that she's not. 403 00:17:48,502 --> 00:17:50,721 Kincaide is an alias for Angela Cassidy, 404 00:17:50,721 --> 00:17:54,464 a CIA agent who reported to you. 405 00:17:54,464 --> 00:17:56,162 And now you don't seem to give a rat's ass 406 00:17:56,162 --> 00:17:57,554 that she's been captured? 407 00:17:57,554 --> 00:17:59,817 I'm focused on the current mission. 408 00:17:59,817 --> 00:18:03,908 Yes or no, does the CIA know where Angela Cassidy is? 409 00:18:03,908 --> 00:18:07,042 Intelligence ops are compartmentalized by design. 410 00:18:07,042 --> 00:18:08,783 Don't give me that boilerplate BS, Marty. 411 00:18:08,783 --> 00:18:11,655 There's a living, breathing human being chained up 412 00:18:11,655 --> 00:18:14,049 in one of those compartments. 413 00:18:14,049 --> 00:18:16,182 And now you don't seem to give a rat's ass 414 00:18:16,182 --> 00:18:17,531 that she's been captured. 415 00:18:17,531 --> 00:18:21,056 Look at you, Brian, caring. 416 00:18:21,056 --> 00:18:23,102 I thought after what happened in Azerbaijan 417 00:18:23,102 --> 00:18:25,843 you'd traded that emotion in for a new pair of skis. 418 00:18:27,106 --> 00:18:29,369 [grunting] 419 00:18:29,369 --> 00:18:30,805 Get in! 420 00:18:30,805 --> 00:18:32,807 No! 421 00:18:34,113 --> 00:18:38,465 Do you know where she is or not? 422 00:18:38,465 --> 00:18:41,163 Cassidy is one person. 423 00:18:41,163 --> 00:18:44,471 Four civilians died when that pipeline exploded. 424 00:18:44,471 --> 00:18:46,864 And believe me, it's only a matter of time 425 00:18:46,864 --> 00:18:48,170 until they stick a gun to our ribs. 426 00:18:48,170 --> 00:18:49,128 Okay. 427 00:18:51,739 --> 00:18:53,654 Is your head in the game or not? 428 00:18:53,654 --> 00:18:56,439 Because I'm giving Langley an update in five minutes. 429 00:18:56,439 --> 00:18:59,399 What do you want me to tell them? 430 00:18:59,399 --> 00:19:00,704 Don't worry about me. 431 00:19:00,704 --> 00:19:05,666 ♪ 432 00:19:05,666 --> 00:19:07,668 Selling Digital Wall should have made you 433 00:19:07,668 --> 00:19:10,627 a multibillionaire, but instead you settled 434 00:19:10,627 --> 00:19:12,542 for a fraction of what you were owed. 435 00:19:12,542 --> 00:19:15,589 Before we got married, Carl made me sign a form 436 00:19:15,589 --> 00:19:19,810 excluding Digital Wall from our joint assets 437 00:19:19,810 --> 00:19:22,726 to protect me from future liabilities 438 00:19:22,726 --> 00:19:25,033 in case the company ever went under. 439 00:19:25,033 --> 00:19:27,383 Maybe I shouldn't have signed that document. 440 00:19:27,383 --> 00:19:31,474 But you could have contested that document, but you didn't. 441 00:19:31,474 --> 00:19:34,782 Well, Carl is the-- 442 00:19:34,782 --> 00:19:37,219 Carl was the father of my children, 443 00:19:37,219 --> 00:19:42,920 and you're implying that I had him killed to what? 444 00:19:42,920 --> 00:19:45,662 To add a few extra zeroes to my bank statement? 445 00:19:45,662 --> 00:19:48,752 I have seen it happen before numerous times. 446 00:19:48,752 --> 00:19:50,493 Say I fought harder, 447 00:19:50,493 --> 00:19:52,452 I dragged the divorce on for longer. 448 00:19:52,452 --> 00:19:55,803 Look what that money did to Carl. 449 00:19:55,803 --> 00:19:58,284 That money destroyed him. 450 00:19:58,284 --> 00:20:02,157 [melancholy music] 451 00:20:02,157 --> 00:20:04,246 I'd like to talk to the boys now, if that's okay. 452 00:20:04,246 --> 00:20:06,335 The last thing they need is some stranger 453 00:20:06,335 --> 00:20:08,294 peppering them with questions. 454 00:20:08,294 --> 00:20:10,121 Their father just died. 455 00:20:10,121 --> 00:20:12,254 That is right, and I think they'd wanna help 456 00:20:12,254 --> 00:20:14,430 find out who killed him. 457 00:20:14,430 --> 00:20:19,653 ♪ 458 00:20:19,653 --> 00:20:23,874 Edvard, Mads, my name is Cameron. 459 00:20:23,874 --> 00:20:26,094 And I just wanted to say that I am very sorry 460 00:20:26,094 --> 00:20:27,487 about what happened to your dad. 461 00:20:27,487 --> 00:20:28,662 It is not fair. 462 00:20:33,319 --> 00:20:36,887 I can't imagine what you guys must be feeling. 463 00:20:39,238 --> 00:20:41,805 Is it okay if I ask you some questions? 464 00:20:44,068 --> 00:20:47,420 I heard your dad made a lot of new friends recently. 465 00:20:47,420 --> 00:20:49,813 Did you ever meet any of them? 466 00:20:49,813 --> 00:20:53,382 Nobody ever came to the house. 467 00:20:53,382 --> 00:20:55,863 That's not true. 468 00:20:55,863 --> 00:20:58,300 I saw Aksel this one time. 469 00:20:58,300 --> 00:21:00,084 He was visiting Brie. 470 00:21:00,084 --> 00:21:01,216 Who's Aksel? 471 00:21:01,216 --> 00:21:03,262 Brie's special friend. 472 00:21:03,262 --> 00:21:06,482 [suspenseful music] 473 00:21:06,482 --> 00:21:09,746 Security systems been messed with a handful of times. 474 00:21:09,746 --> 00:21:11,357 And whoever did it used the same technique 475 00:21:11,357 --> 00:21:12,923 as Carl's killer. 476 00:21:12,923 --> 00:21:14,490 Any clips of the secret boyfriend approaching 477 00:21:14,490 --> 00:21:15,883 the house from the driveway? - No. 478 00:21:15,883 --> 00:21:17,319 Aksel and Brie must have carefully 479 00:21:17,319 --> 00:21:18,973 planned his every visit. 480 00:21:18,973 --> 00:21:22,193 There's no way he parked on the property--too risky. 481 00:21:22,193 --> 00:21:23,934 How about the closest main street? 482 00:21:23,934 --> 00:21:25,066 A couple neighbors surrendered 483 00:21:25,066 --> 00:21:26,676 door cam footage to the DDIS. 484 00:21:26,676 --> 00:21:27,808 Crosscheck that against any instances 485 00:21:27,808 --> 00:21:29,810 when the cameras went down. - Mm-hmm. 486 00:21:29,810 --> 00:21:32,334 Fort Meade needed that visual on Aksel yesterday. 487 00:21:32,334 --> 00:21:33,335 What's our ETA? 488 00:21:33,335 --> 00:21:35,250 We're working on it. 489 00:21:35,250 --> 00:21:36,730 I'm sorry. 490 00:21:36,730 --> 00:21:38,122 Deputy director just chewed me out, 491 00:21:38,122 --> 00:21:39,863 said I should have flagged that Carl system's 492 00:21:39,863 --> 00:21:41,430 been compromised before. 493 00:21:41,430 --> 00:21:43,824 Amanda, got that visual for you. 494 00:21:46,217 --> 00:21:48,307 Same guy every time. 495 00:21:48,307 --> 00:21:49,569 It's gotta be Aksel. 496 00:21:49,569 --> 00:21:52,615 Thank you, Kyle. Send this to Cameron. 497 00:21:55,401 --> 00:21:57,359 Hey. 498 00:21:57,359 --> 00:21:58,578 How'd it go? 499 00:21:58,578 --> 00:22:01,320 Oh, not great, actually. 500 00:22:03,539 --> 00:22:06,281 Listen, has Forrester ever disappeared like this before? 501 00:22:06,281 --> 00:22:07,891 No. 502 00:22:07,891 --> 00:22:08,979 Alcohol problems? 503 00:22:08,979 --> 00:22:11,460 Is he promiscuous? - No. 504 00:22:11,460 --> 00:22:13,636 Scott wouldn't just up and leave 505 00:22:13,636 --> 00:22:15,377 without a damn good reason. 506 00:22:17,727 --> 00:22:19,599 I'm sorry, if any of us went MIA, 507 00:22:19,599 --> 00:22:22,079 he would do everything to find us. 508 00:22:22,079 --> 00:22:25,953 Yeah, well, he might be looking for you as a civilian, 509 00:22:25,953 --> 00:22:28,042 because career-wise, he's got one foot 510 00:22:28,042 --> 00:22:30,349 on the banana peel and the other on a roller skate. 511 00:22:31,872 --> 00:22:33,134 I should let Andre and Megan know. 512 00:22:33,134 --> 00:22:34,527 Don't. 513 00:22:34,527 --> 00:22:36,137 They need to stay on point. 514 00:22:40,533 --> 00:22:42,752 [tense music] 515 00:22:42,752 --> 00:22:44,363 You recognize him? 516 00:22:44,363 --> 00:22:46,016 You lied to us. 517 00:22:46,016 --> 00:22:49,019 You've been messing with Carl's security system for months. 518 00:22:49,019 --> 00:22:51,152 I--I was afraid to say. 519 00:22:51,152 --> 00:22:53,023 Look, I knew how it would look. 520 00:22:54,373 --> 00:22:57,288 Lying to us about Aksel is a federal offense. 521 00:22:57,288 --> 00:22:59,595 Now, we're not required to press charges, 522 00:22:59,595 --> 00:23:01,989 but we will if you continue to cover up for him. 523 00:23:01,989 --> 00:23:04,034 No, there's nothing to cover up, okay? 524 00:23:04,034 --> 00:23:06,210 Carl was out every night bringing back god knows who 525 00:23:06,210 --> 00:23:08,169 from that club and damn near OD'ing 526 00:23:08,169 --> 00:23:09,997 while his kids were asleep down the hall. 527 00:23:09,997 --> 00:23:12,173 And he's got the nerve to tell me I can't have guests? 528 00:23:12,173 --> 00:23:14,088 So you disabled Carl's security system? 529 00:23:14,088 --> 00:23:16,351 - Yes. - Tell us about Aksel. 530 00:23:16,351 --> 00:23:18,658 He's 28, grew up here. 531 00:23:18,658 --> 00:23:20,181 He's a graphic designer. 532 00:23:20,181 --> 00:23:22,923 And in no way is he involved in any of this. 533 00:23:22,923 --> 00:23:24,707 Did he ever ask you to show him how 534 00:23:24,707 --> 00:23:26,100 to access the security system? 535 00:23:30,757 --> 00:23:33,150 Aksel's full name, where he lives, 536 00:23:33,150 --> 00:23:35,414 what kind of car he drives, everything. 537 00:23:35,414 --> 00:23:42,421 ♪ 538 00:23:43,770 --> 00:23:46,947 Aksel Blom, FBI, open up. 539 00:23:50,864 --> 00:23:53,432 [metal clanging] 540 00:23:55,259 --> 00:23:57,914 Hey, FBI--hey! 541 00:23:57,914 --> 00:24:05,095 ♪ 542 00:24:11,537 --> 00:24:13,930 [workers shouting] 543 00:24:13,930 --> 00:24:15,105 [tires screech] [car horn honks] 544 00:24:17,412 --> 00:24:18,674 [car horn blaring] 545 00:24:18,674 --> 00:24:19,719 Hey! 546 00:24:19,719 --> 00:24:26,943 ♪ 547 00:24:43,569 --> 00:24:45,527 Are you good? 548 00:24:45,527 --> 00:24:46,702 Yeah. 549 00:24:46,702 --> 00:24:49,183 Aksel was gearing up to do a runner. 550 00:24:52,360 --> 00:24:54,101 Data might be hosed. 551 00:24:54,101 --> 00:24:56,277 Clothes in the wardrobe still had tags in, 552 00:24:56,277 --> 00:24:59,367 knives not a single nick. 553 00:24:59,367 --> 00:25:01,151 Aksel probably didn't even really live there. 554 00:25:01,151 --> 00:25:02,457 What about personal effects? 555 00:25:02,457 --> 00:25:06,983 Uh, just this on the fridge. 556 00:25:06,983 --> 00:25:09,333 [suspenseful music] 557 00:25:09,333 --> 00:25:11,205 The only reason this guy had an apartment 558 00:25:11,205 --> 00:25:14,208 was to sell to Brie that he had a life. 559 00:25:14,208 --> 00:25:16,253 If he was hooked up with the Army of Shadows, 560 00:25:16,253 --> 00:25:17,690 he could be a sock puppet. 561 00:25:17,690 --> 00:25:19,300 - A what? - Sock puppet. 562 00:25:19,300 --> 00:25:21,607 It's a term hackers use to describe a persona 563 00:25:21,607 --> 00:25:24,435 that only exists online. 564 00:25:24,435 --> 00:25:25,741 This was in the waste bin. 565 00:25:25,741 --> 00:25:27,438 Thanks, Freya. 566 00:25:27,438 --> 00:25:29,789 Okay, the motherboard is still in decent condition. 567 00:25:29,789 --> 00:25:32,313 Let's see what we can pull. 568 00:25:32,313 --> 00:25:33,706 Aksel's banking details 569 00:25:33,706 --> 00:25:35,621 tied to the apartment rental were made up. 570 00:25:35,621 --> 00:25:36,796 Claire spoke with the landlord, 571 00:25:36,796 --> 00:25:38,537 and Aksel always paid in cash. 572 00:25:38,537 --> 00:25:40,495 Whoever this guy was, his prints weren't on any 573 00:25:40,495 --> 00:25:42,453 of the DDIS or Europol systems. 574 00:25:42,453 --> 00:25:43,846 How about dental records? 575 00:25:43,846 --> 00:25:45,544 Faber is still trying to get a match for what 576 00:25:45,544 --> 00:25:46,806 was left of his jaw, but that could take 577 00:25:46,806 --> 00:25:48,590 a week, maybe longer. I'll check again. 578 00:25:48,590 --> 00:25:50,070 Do you think Aksel killed Carl? 579 00:25:50,070 --> 00:25:51,506 Brie saw the killer's face. 580 00:25:51,506 --> 00:25:53,029 She would have ID'ed him from the jump. 581 00:25:53,029 --> 00:25:54,857 Well, not if they were working together. 582 00:25:54,857 --> 00:25:56,816 No, she told us how to find him. 583 00:25:56,816 --> 00:25:58,295 I don't think she's involved. 584 00:25:58,295 --> 00:26:00,646 These hackers knew exactly how extensive Carl's 585 00:26:00,646 --> 00:26:02,778 security protocols would be, and they zeroed in 586 00:26:02,778 --> 00:26:05,085 on his one vulnerability, Brie. 587 00:26:05,085 --> 00:26:06,477 That was Russo. 588 00:26:06,477 --> 00:26:09,611 The DOD just got hit with a ransom demand, 500 mil. 589 00:26:09,611 --> 00:26:11,352 Have Grayson confirm the intel. 590 00:26:11,352 --> 00:26:13,528 Russo already did. Al Udeid Air Base. 591 00:26:13,528 --> 00:26:15,704 The hackers are threatening to leak a zero-day 592 00:26:15,704 --> 00:26:17,445 that'll shut down its AMDR receptors. 593 00:26:17,445 --> 00:26:19,708 Now, if that happens, all it'll take is one enemy 594 00:26:19,708 --> 00:26:21,971 deploying one precision strike missile, 595 00:26:21,971 --> 00:26:24,757 and 8,000 troops get pancaked in seconds. 596 00:26:24,757 --> 00:26:27,150 - How much time have we got? - One hour. 597 00:26:29,718 --> 00:26:30,719 One second. 598 00:26:32,591 --> 00:26:34,767 Your colleague here recovered Aksel Blom's phone. 599 00:26:34,767 --> 00:26:37,247 We have proof that he was paid to kill Lassen 600 00:26:37,247 --> 00:26:38,858 along with clear instructions to keep the au pair 601 00:26:38,858 --> 00:26:40,207 out of the equation. 602 00:26:40,207 --> 00:26:41,861 Your American is exonerated. 603 00:26:41,861 --> 00:26:43,514 She's free to go. 604 00:26:43,514 --> 00:26:44,994 You think something's off. 605 00:26:44,994 --> 00:26:46,866 All of Aksel's hard drives have been drilled through 606 00:26:46,866 --> 00:26:49,303 with the precision of a robot doing brain surgery. 607 00:26:49,303 --> 00:26:51,131 This phone is the only thing 608 00:26:51,131 --> 00:26:52,654 that wasn't blitzed beyond repair. 609 00:26:52,654 --> 00:26:54,395 Well, you caught him in the middle of his exit plans. 610 00:26:54,395 --> 00:26:56,179 It's possible he wasn't finished destroying the phone. 611 00:26:56,179 --> 00:26:58,094 So why'd he put it in the trash? 612 00:26:58,094 --> 00:27:00,227 Look, we're being led down a path here. 613 00:27:00,227 --> 00:27:02,229 Brie is a loose end. 614 00:27:02,229 --> 00:27:03,622 They want us to let her go so they can 615 00:27:03,622 --> 00:27:05,493 get rid of the only person who can ID the killer. 616 00:27:05,493 --> 00:27:07,582 Offer Miss Martindale any protection you like, 617 00:27:07,582 --> 00:27:10,933 but the DDIS has no reason to detain her any longer. 618 00:27:10,933 --> 00:27:12,587 Wait a second, Agent Faber. 619 00:27:14,807 --> 00:27:18,071 What if we give Carl's killer exactly what he wants? 620 00:27:18,071 --> 00:27:25,295 ♪ 621 00:27:26,601 --> 00:27:28,690 Look, we know you never meant for anything bad 622 00:27:28,690 --> 00:27:30,431 to happen to Carl. 623 00:27:30,431 --> 00:27:32,738 And the DDIS is ready to take you home. 624 00:27:32,738 --> 00:27:35,175 Okay. 625 00:27:35,175 --> 00:27:37,220 But we really need your help. 626 00:27:37,220 --> 00:27:38,700 Did you find Aksel? 627 00:27:40,484 --> 00:27:42,748 He didn't make it. 628 00:27:42,748 --> 00:27:45,794 What? 629 00:27:45,794 --> 00:27:48,057 [scoffs] 630 00:27:48,057 --> 00:27:50,146 W-what happened? 631 00:27:50,146 --> 00:27:51,713 It was an accident. 632 00:27:51,713 --> 00:27:53,410 But, Brie, you should know that Aksel 633 00:27:53,410 --> 00:27:56,239 wasn't who he said he was. 634 00:27:56,239 --> 00:27:58,720 Well, then who was he then? 635 00:27:58,720 --> 00:28:03,464 We don't know, and we may never find out. 636 00:28:03,464 --> 00:28:05,727 I am sorry, but you got played. 637 00:28:05,727 --> 00:28:08,730 [somber music] 638 00:28:08,730 --> 00:28:15,694 ♪ 639 00:28:17,434 --> 00:28:21,395 Whatever you need, I'm in. 640 00:28:22,396 --> 00:28:24,485 Thank you. 641 00:28:26,052 --> 00:28:29,403 Well, I hope you have a safe flight home, Brie. 642 00:28:29,403 --> 00:28:31,361 On behalf of the DDIS, I'd like 643 00:28:31,361 --> 00:28:33,712 to apologize for any confusion regarding 644 00:28:33,712 --> 00:28:35,757 your American's involvement in Lassen's murder. 645 00:28:35,757 --> 00:28:38,847 Well, the FBI appreciates your cooperation. 646 00:28:38,847 --> 00:28:41,850 Take Miss Martindale to the Lufthavnens Plads Hotel. 647 00:28:44,244 --> 00:28:45,375 [engine turns over] 648 00:28:48,552 --> 00:28:50,685 Your team's in position at the hotel? 649 00:28:50,685 --> 00:28:52,078 I've got a tactical team inside 650 00:28:52,078 --> 00:28:53,775 and snipers at the ready. 651 00:28:53,775 --> 00:28:55,821 She'll be safe. 652 00:28:55,821 --> 00:28:59,302 [tense music] 653 00:28:59,302 --> 00:29:00,260 Ready? 654 00:29:00,260 --> 00:29:02,305 Yep. 655 00:29:02,305 --> 00:29:09,486 ♪ 656 00:29:44,565 --> 00:29:45,784 We've got company. 657 00:29:45,784 --> 00:29:49,135 [engines revving] 658 00:29:49,135 --> 00:29:50,353 Cam. They're not waiting. 659 00:29:50,353 --> 00:29:51,572 They're hitting us now. 660 00:29:53,226 --> 00:29:56,055 [gunfire] 661 00:29:56,055 --> 00:30:03,018 ♪ 662 00:30:06,239 --> 00:30:07,414 [gasps] 663 00:30:52,154 --> 00:30:55,114 [crowd screaming] 664 00:30:55,114 --> 00:31:02,338 ♪ 665 00:31:08,736 --> 00:31:10,085 ID'ed the mercenary 666 00:31:10,085 --> 00:31:12,653 who attacked Smitty and Andre-- Afrim Kurti. 667 00:31:12,653 --> 00:31:14,089 Any connection to the Army of Shadows? 668 00:31:14,089 --> 00:31:15,961 As far as I can tell, he's a for-hire gunman 669 00:31:15,961 --> 00:31:17,266 on the dark web. 670 00:31:17,266 --> 00:31:18,877 Charges 100,000 euro a head. 671 00:31:18,877 --> 00:31:20,356 I found the crypto transaction between Kurti 672 00:31:20,356 --> 00:31:21,749 and whoever hired him. 673 00:31:21,749 --> 00:31:23,664 I got the account number, but that wallet never 674 00:31:23,664 --> 00:31:24,926 traded on the usual platforms. 675 00:31:24,926 --> 00:31:26,493 There's no way of tracking the owner. 676 00:31:26,493 --> 00:31:27,842 Pull up a blockchain explorer. 677 00:31:27,842 --> 00:31:29,496 Grab all the transactions for that account. 678 00:31:29,496 --> 00:31:32,934 Okay, one sec. 679 00:31:32,934 --> 00:31:34,109 Got it. 680 00:31:34,109 --> 00:31:35,632 Do a search for any duplicates. 681 00:31:35,632 --> 00:31:37,852 - That filter doesn't exist. - Scoot over. 682 00:31:37,852 --> 00:31:40,333 Repeat transactions are just ways to wash cash. 683 00:31:40,333 --> 00:31:43,336 So once we pull the IP info for whatever's left... 684 00:31:43,336 --> 00:31:45,120 [suspenseful music] 685 00:31:45,120 --> 00:31:46,252 The killer's local. 686 00:31:46,252 --> 00:31:47,993 Grab all the tenants at this address 687 00:31:47,993 --> 00:31:51,126 and crosscheck the list with Carl's emails and texts. 688 00:31:53,607 --> 00:31:54,695 SikkerTech Security. 689 00:31:54,695 --> 00:31:56,131 It's owned by Harald Bonnichsen. 690 00:31:56,131 --> 00:31:58,003 Andre and Smitty already met him at the Velvet Room. 691 00:31:58,003 --> 00:31:59,352 He emailed Carl asking him to invest. 692 00:31:59,352 --> 00:32:01,354 The deal fell through at the last minute. 693 00:32:01,354 --> 00:32:02,790 Send this to Cameron. 694 00:32:04,531 --> 00:32:07,621 [speaking Danish] 695 00:32:10,363 --> 00:32:11,755 Sorry to interrupt. 696 00:32:11,755 --> 00:32:12,713 You're probably gonna wanna hear this 697 00:32:12,713 --> 00:32:15,107 in private, Harald. 698 00:32:18,371 --> 00:32:20,982 [speaking Danish] 699 00:32:27,597 --> 00:32:30,731 You are under arrest for conspiracy to commit murder. 700 00:32:30,731 --> 00:32:31,993 [laughs] What? 701 00:32:31,993 --> 00:32:33,255 You had Carl Lassen killed, 702 00:32:33,255 --> 00:32:35,518 and then you tried to silence the witness. 703 00:32:35,518 --> 00:32:37,564 Carl was a friend, a mentor. 704 00:32:37,564 --> 00:32:39,305 Sure. But you envied him. 705 00:32:39,305 --> 00:32:40,349 I mean, it makes sense. 706 00:32:40,349 --> 00:32:41,872 You both had the same skill set. 707 00:32:41,872 --> 00:32:44,397 I think maybe even yours were a little sharper, right? 708 00:32:44,397 --> 00:32:48,183 I mean, considering that you were once a black hat hacker. 709 00:32:48,183 --> 00:32:49,924 How did you come across that information? 710 00:32:49,924 --> 00:32:52,579 The DDIS unsealed your file. 711 00:32:52,579 --> 00:32:53,928 We know you weaseled your way 712 00:32:53,928 --> 00:32:56,104 into a consulting deal to get out of jail time. 713 00:32:56,104 --> 00:32:58,585 We traced your crypto payment to the hit men 714 00:32:58,585 --> 00:33:00,195 that you hired to kill Brie. 715 00:33:00,195 --> 00:33:02,371 The transaction's IP address just happened 716 00:33:02,371 --> 00:33:03,938 to match SikkerTech's. 717 00:33:03,938 --> 00:33:06,027 You really think I'd be so daft 718 00:33:06,027 --> 00:33:09,944 to pay a hit man out of my own office and not use a VPN? 719 00:33:09,944 --> 00:33:13,078 Dollar signs make people sloppy sometimes, 720 00:33:13,078 --> 00:33:15,732 even someone in the Army of Shadows. 721 00:33:17,647 --> 00:33:19,998 I'm being framed. 722 00:33:19,998 --> 00:33:22,304 The Army is selling you the story you wanna hear. 723 00:33:23,697 --> 00:33:25,133 Then tell us the truth. 724 00:33:26,395 --> 00:33:28,876 Carl thought money would make him happy. 725 00:33:28,876 --> 00:33:31,096 But instead, it made him obsolete. 726 00:33:31,096 --> 00:33:33,837 The man would show up at the Velvet Room 727 00:33:33,837 --> 00:33:35,578 drunk out of his mind, blabbering about 728 00:33:35,578 --> 00:33:39,104 his top secret security privileges. 729 00:33:39,104 --> 00:33:41,367 He was practically begging to be hacked. 730 00:33:43,282 --> 00:33:46,154 So I sold intel on Carl, 731 00:33:46,154 --> 00:33:48,896 who he was, what his habits were, 732 00:33:48,896 --> 00:33:50,811 how to get to the people that mattered to him 733 00:33:50,811 --> 00:33:53,683 to exploit his security privileges. 734 00:33:53,683 --> 00:33:55,859 But I did not kill him. 735 00:33:55,859 --> 00:33:58,471 So who did? 736 00:33:58,471 --> 00:34:02,083 Philip Baranza, a former member of UNC1151, 737 00:34:02,083 --> 00:34:04,607 a Belarusian state-sponsored hacker group. 738 00:34:04,607 --> 00:34:08,220 Harald is claiming that Baranza started the Army of Shadows. 739 00:34:08,220 --> 00:34:11,701 So Baranza activates one of his operatives, Aksel, 740 00:34:11,701 --> 00:34:13,834 to seduce Brie into giving him access 741 00:34:13,834 --> 00:34:15,183 to Carl's security system. 742 00:34:15,183 --> 00:34:17,359 Now, according to Harald, Baranza is operating 743 00:34:17,359 --> 00:34:19,405 out of a vacant building in Knippelsbro. 744 00:34:19,405 --> 00:34:20,841 What's our timeline? 745 00:34:20,841 --> 00:34:23,191 Baranza's ransomware to the DOD goes live in 15. 746 00:34:23,191 --> 00:34:24,758 So let's move. 747 00:34:24,758 --> 00:34:31,895 ♪ 748 00:34:33,201 --> 00:34:34,376 Pull the trigger if you need to, 749 00:34:34,376 --> 00:34:37,118 but remember, we need this guy alive. 750 00:35:05,190 --> 00:35:06,713 FBI! Hands where I can see them! 751 00:35:06,713 --> 00:35:13,937 ♪ 752 00:35:43,141 --> 00:35:45,969 I have something you want. 753 00:35:45,969 --> 00:35:47,754 Scott Forrester. 754 00:35:47,754 --> 00:35:49,712 [grunts] 755 00:35:49,712 --> 00:35:55,718 ♪ 756 00:35:55,718 --> 00:35:57,111 Where are we at? 757 00:35:57,111 --> 00:35:58,460 We secured all of Baranza's devices. 758 00:35:58,460 --> 00:36:00,332 The data breach is 100% contained, 759 00:36:00,332 --> 00:36:03,204 and the ransomware request to the DOD has been shut down. 760 00:36:03,204 --> 00:36:05,206 I'd say we all earned our paycheck today, didn't we? 761 00:36:05,206 --> 00:36:07,600 Do I turned Baranza over to Russo? 762 00:36:07,600 --> 00:36:11,212 [pensive music] 763 00:36:11,212 --> 00:36:12,344 Not yet. 764 00:36:19,394 --> 00:36:20,700 That's him. 765 00:36:20,700 --> 00:36:23,093 I'll never forget those eyes, 766 00:36:23,093 --> 00:36:25,966 the way he stared back at me after he shot Carl. 767 00:36:28,011 --> 00:36:29,274 Thank you, Brie. 768 00:36:29,274 --> 00:36:30,971 The DDIS will take you straight to the airport. 769 00:36:30,971 --> 00:36:34,235 Your parents are waiting for you back in Baltimore. 770 00:36:34,235 --> 00:36:37,195 It seems you're one man short. 771 00:36:37,195 --> 00:36:41,503 I know where the Agent Forrester is 772 00:36:41,503 --> 00:36:45,203 along with his mother, Angela Cassidy. 773 00:36:45,203 --> 00:36:49,032 You can still save them, but you have to act now. 774 00:36:49,032 --> 00:36:52,035 [tense music] 775 00:36:52,035 --> 00:36:54,560 ♪ 776 00:36:54,560 --> 00:36:56,257 Cameron, get resituated. 777 00:36:56,257 --> 00:36:58,259 I'll take care of this guy. 778 00:37:01,306 --> 00:37:02,655 Trust me. 779 00:37:02,655 --> 00:37:09,575 ♪ 780 00:37:14,406 --> 00:37:17,974 Well, you certainly got our attention, Mr. Baranza, 781 00:37:17,974 --> 00:37:20,455 I'm all ears. 782 00:37:20,455 --> 00:37:23,066 I can tell you where he's headed. 783 00:37:23,066 --> 00:37:25,678 There is an encrypted file on my laptop. 784 00:37:25,678 --> 00:37:27,419 Even the most skilled tech 785 00:37:27,419 --> 00:37:30,117 will take roughly ten hours to decrypt it. 786 00:37:30,117 --> 00:37:33,816 That file will self-destruct, and I am the only person 787 00:37:33,816 --> 00:37:37,124 with the decryption keys, which I will gladly hand over, 788 00:37:37,124 --> 00:37:39,561 but I want full immunity. 789 00:37:42,912 --> 00:37:45,480 You've got five minutes. 790 00:37:45,480 --> 00:37:52,444 ♪ 791 00:37:57,231 --> 00:37:59,320 How much time do we have? 792 00:37:59,320 --> 00:38:01,627 Three minutes. 793 00:38:01,627 --> 00:38:05,370 Okay, we're looking at three layers of solid 256 encryption. 794 00:38:05,370 --> 00:38:07,197 I want every single station cycling through at least 795 00:38:07,197 --> 00:38:09,809 a hundred keys a second. 796 00:38:09,809 --> 00:38:12,464 I feel like I haven't been perfectly clear as to where 797 00:38:12,464 --> 00:38:13,813 exactly it is you're headed. 798 00:38:13,813 --> 00:38:18,339 So allow me to paint the picture. 799 00:38:18,339 --> 00:38:21,342 No visitors. None. 800 00:38:21,342 --> 00:38:25,259 23 hours a day in solitary. 801 00:38:25,259 --> 00:38:27,435 [tense music] 802 00:38:27,435 --> 00:38:31,134 Being alone doesn't scare me, 803 00:38:31,134 --> 00:38:33,354 but time-- 804 00:38:33,354 --> 00:38:35,356 time is invaluable. 805 00:38:37,837 --> 00:38:40,448 Got a match for the first layer. 806 00:38:40,448 --> 00:38:42,058 Second one just cleared. 807 00:38:42,058 --> 00:38:43,364 Kyle, how close are we? 808 00:38:43,364 --> 00:38:44,713 Almost there. 809 00:38:48,674 --> 00:38:50,806 Uncuff me. 810 00:38:50,806 --> 00:38:52,765 Leave the door unlocked. 811 00:38:54,244 --> 00:38:56,856 Nobody has to know how I got out. 812 00:38:56,856 --> 00:39:00,816 But you should do it now 813 00:39:00,816 --> 00:39:04,211 because that file will self-destruct 814 00:39:04,211 --> 00:39:06,213 in one minute, 815 00:39:06,213 --> 00:39:10,173 along with Angela Cassidy's location. 816 00:39:10,173 --> 00:39:14,221 Come on, come on, come on, come on, come on, come on. 817 00:39:14,221 --> 00:39:16,919 What happened? Where's the file? 818 00:39:21,097 --> 00:39:22,882 Does anybody have a copy? 819 00:39:22,882 --> 00:39:25,711 It looks like all instances self-deleted. 820 00:39:25,711 --> 00:39:27,103 It's gotta be here somewhere. 821 00:39:27,103 --> 00:39:34,284 ♪ 822 00:39:36,548 --> 00:39:40,247 [phone ringing] 823 00:39:40,247 --> 00:39:42,902 Where are we at with the file? 824 00:39:42,902 --> 00:39:44,991 It's gone. 825 00:39:44,991 --> 00:39:46,122 I'm sorry, Cam. 826 00:39:46,122 --> 00:39:48,429 We tried every trick. 827 00:39:48,429 --> 00:39:55,567 ♪ 828 00:39:57,525 --> 00:40:00,441 I need to bring you both in on something. 829 00:40:07,100 --> 00:40:08,449 It's regarding Scott. 830 00:40:08,449 --> 00:40:15,630 ♪ 831 00:40:17,850 --> 00:40:20,200 I know Baranza intercepted those prison documents 832 00:40:20,200 --> 00:40:23,769 in the data breach, and I know the NSA has access to them. 833 00:40:23,769 --> 00:40:25,640 I need you to tell me where Angela Cassidy is being held. 834 00:40:25,640 --> 00:40:26,772 Look, working for the NSA is like being 835 00:40:26,772 --> 00:40:30,471 a tiny piece of a giant Jigsaw puzzle. 836 00:40:30,471 --> 00:40:35,128 You have no idea what the larger picture is, just-- 837 00:40:35,128 --> 00:40:36,608 you have a specific role. 838 00:40:36,608 --> 00:40:39,001 The company's loyalty can turn on a dime. 839 00:40:39,001 --> 00:40:40,786 One minute, they're protecting you. 840 00:40:40,786 --> 00:40:42,048 The next, they're scrubbing you from their files 841 00:40:42,048 --> 00:40:44,485 like they did to Cassidy. 842 00:40:44,485 --> 00:40:45,834 It's not my orders. 843 00:40:52,275 --> 00:40:54,974 The secret booze drawer-- that's been restocked, yes? 844 00:40:54,974 --> 00:40:57,237 Sure has. 845 00:40:57,237 --> 00:40:59,892 Great working with you all. 846 00:40:59,892 --> 00:41:02,634 Amanda. 847 00:41:02,634 --> 00:41:04,026 It's been a pleasure. 848 00:41:06,202 --> 00:41:13,079 ♪ 849 00:41:15,560 --> 00:41:17,518 We can explore backchannels, 850 00:41:17,518 --> 00:41:19,085 try to get ahold of the original document. 851 00:41:19,085 --> 00:41:21,000 No, if Russia gets wind that we are asking around, 852 00:41:21,000 --> 00:41:22,828 they will make sure that Cassidy 853 00:41:22,828 --> 00:41:25,004 is never seen again, for good, and Scott along with her. 854 00:41:25,004 --> 00:41:27,267 I just got off a call with my friend in Operational Tech. 855 00:41:27,267 --> 00:41:29,835 I had him comb through Forrester's phone remotely. 856 00:41:29,835 --> 00:41:32,011 The encrypted message that Scott received 857 00:41:32,011 --> 00:41:34,579 regarding Vanessa Kincaide, he opened it, accessed it. 858 00:41:34,579 --> 00:41:35,841 He's gonna find his mom. 859 00:41:35,841 --> 00:41:37,451 The Kremlin's got over 100 penitentiaries, 860 00:41:37,451 --> 00:41:39,279 and those are just the ones we know about. 861 00:41:39,279 --> 00:41:41,020 Where do we even start? 862 00:41:41,020 --> 00:41:42,369 [laptop dings] 863 00:41:42,369 --> 00:41:43,979 Tate, I got an update. 864 00:41:43,979 --> 00:41:46,068 Grayson gave me two pieces of information, 865 00:41:46,068 --> 00:41:48,418 Dagny Andersen and Oslo. 866 00:41:50,072 --> 00:41:52,379 The Norwegian Minister of Foreign Affairs? 867 00:41:52,379 --> 00:41:53,859 How's she involved in this? 868 00:41:53,859 --> 00:41:56,688 Andersen has been trying to secure the release 869 00:41:56,688 --> 00:41:59,473 of two Norwegian journalists who were imprisoned 870 00:41:59,473 --> 00:42:02,563 six months ago by the Kremlin. 871 00:42:02,563 --> 00:42:08,395 ♪ 872 00:42:08,395 --> 00:42:10,571 We're at your mercy right now, Brian. 873 00:42:10,571 --> 00:42:12,660 So you can either help us find Scott and his mom 874 00:42:12,660 --> 00:42:15,010 or you can deep-six this whole thing. 875 00:42:15,010 --> 00:42:21,756 ♪ 876 00:42:35,857 --> 00:42:38,817 [tense music] 877 00:42:38,817 --> 00:42:45,954 ♪ 878 00:42:55,094 --> 00:42:56,922 [wolf howls]