A cybercriminal group called “Purgatory” is behind a recent wave of alarming AI-driven swatting calls to universities, with experts cautioning that authorities need to catch up to the pace of online threats.
From August 21 to August 25, over 10 universities in the U.S. found themselves in turmoil due to phony active shooter reports, prompting massive law enforcement responses and widespread panic among students.
The calls have been attributed to Purgatory, a group that employs AI technology to replicate sounds of gunfire and screams to deceive local authorities.
Purgatory is part of a wider network known as “The Com,” which is involved in various cybercrimes, including swatting and distributing harmful materials. An alert regarding this group emerged from the FBI in late July.
John Cohen, who leads the Internet Security Center’s hybrid threat program and has a background in Homeland Security, remarked on the allure of these hoaxes. “Sometimes, they just enjoy the thrill of it,” he noted.
It’s reported that swatting calls can earn as much as $95, significantly more than the previous $20. The group claims to have made around $100,000 from these pranks amidst a troubling trend.
The panic started on August 21 with reports from institutions like the University of Tennessee Chattanooga and Villanova University, leading to armed law enforcement responses that unsettled students during orientation events. Just a few days later, the University of South Carolina and UNC-Chapel Hill faced similar calls, with a total of six universities receiving swatting alerts on August 25 alone, including schools in Iowa, Kansas, and Maine.
“It’s meaningless.”
Matt Mills, the police chief at the University of Arkansas, recounted a specific incident where a swatting call regarding an active shooter at Mullins Library caused chaos on campus. Just before 12:30 PM, a caller claimed to be in the library with an armed individual, and there were sounds of gunshots in the background.
Authorities rushed to the scene while students and faculty locked themselves in classrooms. “We received over 300 calls after the incident, with 38 being emergency calls,” Mills explained. Following an extensive search, it was confirmed that the alert was a hoax.
Mills expressed frustration over the resources deployed, saying, “Thankfully no one was hurt, but it’s concerning how many agencies responded.” When asked what could provoke such behaviors, he admitted it was hard to fathom why someone would orchestrate a hoax like that.
How law enforcement can stop university swatting
Cohen highlighted the diverse range of actors involved in swatting, suggesting that it could be foreign terrorist organizations or criminal groups attempting to create disorder in the U.S. “It’s not just dissatisfied individuals in their homes; it’s also organized groups seeking to sow discord,” he noted.
While the origins of the calls at the ten universities remain unclear, experts have observed an increasing involvement of global crime organizations in Purgatory’s activities. The group employs virtual private networks and tools to mask their calls, complicating law enforcement’s response.
Cohen underscored that swatting is far from trivial; its implications can be quite dangerous. “When these calls come in, law enforcement responds as if it’s a real emergency, which can escalate rapidly,” he emphasized.
To combat these incidents, Cohen suggests that law enforcement must adapt their processes to identify possible hoaxes in real time. “Criminals are evolving their tactics at internet speed, while law enforcement is lagging behind,” he said.
Another proposed approach to tackle Purgatory is to proactively identify and prosecute its members. However, Cohen acknowledged that such measures require significant technical expertise.
Members of the group have been involved in prior incidents, with three individuals previously facing charges for swatting calls that targeted various institutions. One of them was once on the FBI’s most wanted list.
Following the series of swatting incidents, the University of Arkansas and others are still looking into the false reports. The FBI has also confirmed they are taking the situation seriously, stating there is a rise in such hoaxes across the nation.
When asked if the spree would continue, a leader known as “Gore” responded affirmatively, stating, “Yes, for two months.” The FBI has yet to provide a comment.
