Untraceable

This has been America News Radio from Washington.

Now back to your local ANR station for news on the hour.

Good evening. You're listening to 108.9 FM, KMZR, Portland. This...

Evening, ma'am.

You, too.

- Good evening. - Good evening.

- Careful. Careful, it's hot. - Thank you.

- Busy night for the bad guys? - Even busier night for us.

Okay.

Let's see what you got for me.

Oh, hey, because you're dying to know...

I'm almost positive my first date last night is eligible for the hall of fame.

She was amazing. She looked exactly like her photo.

You'll never see her again.

- How do you know? - Because you look nothing like yours.

Nice one.

- Here's that guy I was telling you about. - Oh, yeah?

He changes his name every day. It's taken me a week to isolate him.

Listen to this.

Yeah, he offers free downloads of pirated music.

I'm running this in a fake virtual machine.

Watch what happens when I accept his offer.

Now, he's stealing my financial data...

and all my passwords.

Which I happened to have gathered in a file called "passwords."

Nice touch.

I threw in a backdoor Trojan so we can see what he's doing with it.

He's run up a quarter-million dollars in fraud the past three weeks.

- Well, what's he into? - High-end tech and low-end porn.

God. You sure it's a guy? If it's a woman, she could be my soul mate.

Send it over to me.

There you go.

My dummy Capital One card. Hope he goes for it.

Okay, I see it.

I'm surprised he has the patience for auctions.

- Oh, you've got him now. - Okay, there's his IP address.

Let's get his physical one.

Portland Police sent this over. They weren't sure what to do with it.

Thank you.

- It is a woman. - ER nurse, lives alone.

No priors, no history of online purchases.

It's not her. Gotta be a neighbor...

somebody close by, someone who could access her wireless router.

Sharon Dobbs lives here.

All right. Here we go, here's somebody.

Sam Barrows. He's a computer programmer for the school district.

He's lived there six weeks. He's a renter.

He's registered for three handguns and two assault rifles.

That's your guy.

Jennifer Marsh, FBI Cyber Crimes up in Portland.

We need you to knock down a door for us.

Oh, I gotta get reassigned.

What's the matter?

It's just a sickness. It's just too much.

I got this retired high school principal...

offering to come over to where I'm babysitting.

He's got so many chats, he can't keep his names straight.

He keeps calling me Jill instead of Molly.

I'm only interested in what his cellmates are gonna call him.

I'm taking a break. Do you want?

- Thank you. - You're welcome.

All right.

I see feet! Get your hands up! Get your hands up!

On your stomach! On your stomach!

On flawless, cut Natalie K diamonds.

Huge savings on one-karat diamonds. Presented by the LaRog Brothers.

- What the hell is this? - I don't know. I'm running it down now.

It is streaming live.

Just when you thought you've seen it all.

Oh, look, a message from our sponsor.

"Ha-ha. Only serious."

Jennifer Marsh, Cyber Crimes.

Carter Thompson here. I'm at the Barrow residence.

The suspect's in custody. Hard drive's intact.

- Plenty of contraband. - Good work. Hey, let me guess.

It's not just Barrow. His son's involved. He's got a son?

What makes you say that?

Well, high-tech toys and porn...

and then out of the blue, he buys a gold wristwatch.

How come? And then it hit me.

01-10-57. Sunday's his father's birthday.

Sweet dreams, Marsh.

Good morning.

We'll return to America News Radio after the local news and weather.

It's the 7:00 hour.

This is KMZR, 108.9 FM, Portland.

The hurricane system that has poured 3 inches of rain on western Portland...

in the past 24 hours has finally let up.

Though there is no sign of an easing of the near-freezing temperatures...

OnStar operator Tina. Good morning, Ms. Marsh. How can I assist you?

Yes, Tina.

I'd like to get home sometime before Easter.

I'm in a traffic jam here.

Okay, let's see.

You're in the middle of a gaper's block.

You should be past the accident in about 100 yards.

- Okay, I see it now. Thank you. - You're welcome.

Come on, keep it moving.

- Shit, you scared me. - Watch your mouth, young lady.

Hey, that's what I said to you when you were a kid.

I know, Mom. That's what makes it so darn funny.

Oh, somebody's crabby.

Sorry. Long night.

Mom!

- Look at the outfit I'm making. - I can see that.

- You're stealing my job. - You were late.

I know. I'm sorry about that, sweetie.

Catch any bad guys?

One. Just one.

Okay, I'm coming.

Slowpoke. The slowest poke I've ever seen, ever.

I'm coming.

- How are things with you and Maddy? - Better.

Mrs. Tischler's gonna give us a second chance.

- A second chance at what? - Being friends.

Oh, of course. I think that's great.

She can come to my party now. Make sure to send her mom an Evite.

- You got it. - Maybe Grandma should do it.

- I'll do it. - Are you sure?

When I say I'll do it, I'll do it, okay? I promise.

- I love you. - I love you, too, babe.

I bet you'd like me to do this some other time!

Hey, friendly.

All right, Jennifer. Let's see this tortured kitty of yours.

Torture's over, sir.

- Yeah, I should say so. - Poor Lulu.

That was the cat's name.

The owner, Scotty Hillman, 26, from West Linn...

says she was snatched a few days ago from his lawn during a yard sale.

He recognized her fancy collar.

West Linn. So this site...

which could have originated anywhere from Oslo to Istanbul...

Is local. Yes, sir.

The odds of that are pretty steep.

About a million to one, if it were a coincidence, which it's not.

The only way we found out about this is because it was tipped...

to the county sheriff's office and the police within minutes of it going up.

Both tips came from a pay phone in the central city...

so whoever is behind the site is local and wants attention.

- Shut him down. - I just did.

- There you go. - I'll type the address in again.

It's been doing that all night.

The site's IP changes constantly. Each new address is an exploited server...

that's running a mirror of the site.

The site's Russian name server uses a low TTL...

so your computer constantly queries the name server's record.

That's how it gives you a new address consistently.

There are thousands of exploited servers on the Internet...

so he won't run out of victims soon.

He's accessing these machines so quickly...

he's got to be running his own botnet.

We are blackholing these IPs...

but every time we shut one down, a new mirror pops up.

I don't understand a single word you just said.

What does Russia have to do with this?

The domain registrar and name servers are all in Russia.

We have no jurisdiction there.

Jennifer...

it's a cat. - Yeah.

Considering the state of the world, aren't there more important things...

to be concerned about, like something under our jurisdiction?

Back to work, gentlemen.

Things are about to get warmer when one of the hottest hockey rivalries...

Are you the guy? You got the extra ticket for the hockey game?

Grandma! Grandma! Grandma!

- Did you get it? - Yes, I did!

Oh, my God, I'm so proud of you!

And the boy I fought was so tall too.

- Careful, I'm all wet. - So am I.

We celebrated. We had an ice cream.

Hello.

Mom?

- Honey... Mom, please! - Okay, okay.

Come on, baby. Let's get you out of these clothes.

I've been monitoring the site all week. Nothing but a still of the dead kitten.

Last night around 11, the site went down, I'd hoped forever.

Anyway, a few minutes ago, this.

It's the same basement still streaming live.

The top is the number of active viewers and some chemical-dosage flow.

He's carved the name of the website into the guy's chest.

He's threatening to drain him.

Threatening to drain what, his blood? How's he gonna do that?

Those letters aren't any deeper than paper cuts.

Not the cuts, it's the bleeding.

We think that box regulates the fluid going into the victim.

Those cables are probably connected to our guy's computer.

Look, his nose is starting to bleed and he's bruising.

We think those bags have some anticoagulant in them.

I've got a list of them right here. The most common is heparin.

If you get the dose right, you save a life. Wrong, you've got a hemophiliac.

So the more people who visit the site, the more the drug is released...

and the faster he bleeds.

- That's what we believe. - Well, isn't that wonderful?

Well, if that counter is accurate, the public would seem to agree.

They're tuning in at an alarming rate.

The victim's name is Herbert Miller, 54.

Lives in Sellwood, works for Burnside Executive Charter.

Friday night, got back from a shuttle to Mount Hood, called his wife...

says that he gets an e-mail from a friend of a friend...

offering center-ice seats to the Winter Hawks game.