网络犯罪调查（2015）

CSI: Cyber S01E12

Part 4 Feb. 10, 2021, 5:22 p.m.

我们不能指望他们自己露马脚
So we can't bet on them making any mistakes.
这还不算
It gets worse.
比特币小偷也不是笨蛋
Our bitcoin thief was no bozo, either.
小偷♥电♥脑内存条提取的
We got the results from the degraded images
已经衰减的图像结果出来了
we recovered from the thief's computer RAM.
这是个僵尸网络
This is a botnet--
僵尸网络控制♥服♥务器
全国大量被恶意病毒侵染的个人电脑
a massive group of maliciously infected personal computers--
也就是肉鸡被连接成网络
or bots-- from all around the country harnessed together.
也就是说这是个利用大量电脑干坏事的网络
Basically, it's a network of computers used for evil.
但是电脑主人还毫不知情
But the people who own the computers have no idea
最近怎么样我看到这篇文章然后想起了你
自己是这个邪恶王国的一部分
that they're part of an evil empire.
在电脑被感染以后
After the computers are infected,
黑客就获得了网络上
the hacker has full control over
所有电脑的控制权
every single computer on the network.
大概有...
That's roughly...
两万台
20,000?
某些过分的人比如死掉的那个小偷
Unsavory characters, like our dead thief,
出租他们的僵尸网络发送垃圾邮件
rent out their botnets to send spam e-mails,
进行分布式拒绝服务攻击和大量的身份窃取
perform DDoS attacks, mass identity theft.
所有有赚头的非法行为
You know, all that good illegal stuff.
你能查出来在赏金猎人闯入那个汽车旅馆时
Can you tell if our thief connected to the botnet
犯人是否连接上了僵尸网络吗
before the bounty hunters broke down that motel room door?
什么
What?
怎么了
What?
怎么了克鲁米兹
What is it, Krumitz?
他给僵尸网络中的两台电脑
He sent two separate messages to two separate computers
各发了一条信息
somewhere in the botnet.
肯定是密钥
It must've been the passkeys.
就像是银行劫匪藏匿赃款
Like a bank robber hiding his stash
直到风头过去再找回赃款逃之夭夭
until the heat dies down and he can recover it and get away.
你是说在两万台电脑中的某两台中
Are you saying two random computers-- two in 20,000--
隐藏着密钥
are secretly storing the passkeys.
而且电脑主人毫不知情
And the owners don't know it.
这还不算糟
That's not the bad part.
内存条帮我们找到了僵尸网络
The RAM got us to the botnet.
但是衰减太严重
But it was far too degraded
我们无法得知哪两个人得到了密钥
to tell me which of these two people have them.
但是赏金猎人有小偷的硬盘
But the bounty hunters have the thief's hard drive.
这就说明他们知道哪两个人有密钥
And that means they know which two people have the passkeys.
他们就像是有了数字藏宝图
They have the digital treasure map.
所以这两个无辜的人
So, two innocent people
完全不知道将要发生什么
have no idea what's coming to them.
我们也没有办法警告他们
And we have no way of warning them.
嘿你在我家里干什么
Hey, what are you doing in my house?!
你拿到我们要的东西了吗
You get what we came for?
没错我拿到密钥了
Yeah, I got the passkey.
再拿到一个我们就能赚到五十万了
One more passkey and we're a half mil richer.
葛拉斯堡罗新泽西州
我是克鲁米兹
You got Krumitz.
先别挂克鲁米我帮你转到技术中心
Hold on, Krummy, let me transfer you to CTOC.
这是给你的尼尔森
This came for you, Nelson.
这是什么
What's this?
不知道
Don't know.
凭借我们现在有的证据
A judge won't typically hand out
法官通常是不会签发搜查令的
a warrant on the evidence we have.
内存信息衰减太严重
The RAM was too degraded.
但是我争取了一下拿到了包含了
But I pleaded my case and got us into the server farm
僵尸网络指令控制♥服♥务器的服务器群
housing the botnet's command and control server.
我把克鲁米兹连接到大屏幕了
I got Krumitz on the big screen.
告诉我你找到了那两个人
So, tell me we have names.
正在获取
Performing a live acquisition now.
我们马上就可以和赏金猎人
We are seconds away from having the same information
信息同步了
the bounty hunters do.
服务器上有小偷与僵尸网络
The server has a record of every interaction
所有互动的记录
the thieves made with the botnet.
如果我们不在目标拿到密钥之前抓住他们
If we don't catch our targets before they get those passkeys,
克里斯托斯家的存款就要永远消失了
the Christos' savings will be gone forever.
他们一分钱都不会放过
Every cent they have.
时间就是金钱而且我们已经落后了
Every minute counts, and we're behind already.
有点不太对
Something's wrong here.
等一下
Uh, hold on.
怎么了丹尼尔
What is it, Daniel?
连接断开了
He's been disconnected.
克鲁米兹你必须搞定那个服务器
I need a win off that server, Krumitz.
驱动器已经崩溃了
The drive's completely corrupted.
看上去是人为的
From the look of it, someone did this deliberately.
赏金猎人在隐藏他们的行踪该死
The bounty hunters are covering their tracks. Damn it.
删除的东西可以恢复
Deleted is recoverable,
但是驱动器被重写了所有东西都没了
but the drive is being overwritten; everything is gone.
我一直在监控史蒂芬·克里斯托斯的邮箱
I've been monitoring Stephen Christos' e-mail activity.
赏金猎人又发了一封新邮件
Bounty hunters just sent a new message.
因为某些无法预料的事故
Due to unforeseen complications,
他们提价了
they're upping their price.
无法预料的事故
Unforeseen complications.
他们现在就是这么称呼谋杀的吗
That what they're calling murder these days?
他们犯了一个错误
They made a mistake.
他们发出邮件的那台电脑
The computer they sent this e-mail from
有家长控制系统设计成隐形模式
had a parental control program designed to go unnoticed.
赏金猎人不可能知道有这样的系统
Bounty hunters would have no way of knowing it was there.
家长控制是为了家长可以
Parental controls are installed
在网络上监督他们的孩子而安装的
so parents can monitor their children on the Internet.
标记了所有发出和收到的信息
It tags everything coming in and going out.
西蒙如果有家长控制系统
Simon, if there's parental controls,
就说明那里有儿童
it means there's children there.
我明白
Yeah, I hear you.
太好了家长控制系统出来了
Yes! Parental controls came through.
拿到了赏金猎人所在地址
Just got a physical address on the bounty hunters.
我去通知当局
Okay, I'll notify the local authorities
让他们小心潜入那里
to move on the location cautiously.
然后给你安排一架飞机
Meanwhile, let's get you on a plane.
俄克拉荷马城俄克拉荷马州
一般来说我们不会这么早回家的
Normally I don't get home from work this early.
我只是很庆幸我儿子不在家
I'm just glad my son wasn't home.
爱德华·盖恩斯被发现被堵住嘴绑在浴缸里
Edward Gaines, found in a bathtub bound and gagged.
受到了外伤和脑震荡
He suffered a laceration and a concussion.
要是头上这一下没有让他昏过去
If the blow to the head hadn't knocked him out,
接下来可能就要挨枪子儿了
a bullet would've been next.
瑞雯正在调取交通监控录像
Raven's pulling traffic cam footage
根据爱德华的描述来找对应的脸
looking for faces based on Edward's description.
我们的目标找到他们要的东西了吗
Did our targets get what they came for?
是的
Yep.
史蒂芬收到的那封邮件
The e-mail that Stephen Christos got
就是从这台电脑发出的
was sent from this computer.
赏金猎人们现在拥有了第一密钥
The bounty hunters now have the first passkey.
他们离目标已经不远了
Well, they're halfway to their goal,
而我们还卡在起跑线上
and we're stuck at the starting line.
所以我们的方案是什么
So what's our play?
你还记得我把托宾带进来时费了多大心吗
Do you remember how I fought so hard to bring in Tobin?
网络犯罪组需要一个
The cyber division needed someone
能够像黑客一样对待案件的人
who could work the cases like a hacker,
从案件的内部着手
work the cases from the inside.
我们要使用同样的策略
We're gonna use that same tactic.
我们要从这个案子的内部开始
We're gonna work this case from the inside.
证据释放
想你亲爱的妈妈
爸爸妈妈
Mom and Pop.
神秘的箱子
The mystery box?
嗯
Yeah, uh,
他们把我的设备都还给我了
they gave me all my devices back.
-你被逮捕时的那些 -是的
- From your arrest? - Yep.
看看观察期结束了
Look at you, probie no more.