Who’s Behind the AI-Enhanced Swatting Spree Targeting U.S. Universities?

AI-Enhanced Swatting Attacks Target Multiple US Campuses

A cybercriminal group known as “Purgatory” is responsible for a series of malicious AI-powered swatting calls across U.S. colleges, prompting urgent calls for law enforcement to adapt to rapidly advancing technologies. Between August 21 and August 25, at least ten universities faced false active-shooter threats, causing campus lockdowns and widespread panic among students and staff.

Authorities traced these hoaxes back to Purgatory, a cybercrime collective that leverages AI to mimic sounds of gunfire and screaming, making false calls appear authentic. They often operate via platforms like Telegram and Discord, emerging from a broader network called “The Com,” involved in swatting, sextortion, and other illicit activities.

These calls are sometimes made for financial gain—hoaxers pocket around $95 per false emergency—or to boost the group’s notoriety. A leader claims Purgatory has earned around $100,000 from recent incidents. The calls often originate from VPNs and Google Voice numbers to mask location.

Examples include false reports at the University of Tennessee Chattanooga and Villanova University, triggering armed responses and dangerous chaos. Similar incidents occurred at the University of South Carolina, UNC-Chapel Hill, Iowa State, Kansas State, the University of Maine, and Arkansas—all within a few days.

Law enforcement officials express frustration over resource exhaustion, with Fayetteville’s police chief describing responders deploying from multiple agencies. The response to the Arkansas hoax, for example, involved over 300 calls over a few hours, only to find it was a false report. Such hoaxes are costly, dangerous, and divert essential resources from real emergencies.

Law Enforcement and Future Strategies

Experts highlight that organized crime and foreign entities often commission these attacks to destabilize institutions or sow discord, with AI enhancing the realism of fake threats. The use of VPNs and fake phone numbers complicates traceback efforts.

To prevent these dangerous hoaxes, authorities advocate for real-time detection tools capable of identifying suspicious calls and adapting investigative approaches to keep pace with evolving tactics. Arresting members of groups like Purgatory is complicated but remains a long-term goal, given the need for advanced technical capabilities.

Members of Purgatory, including Evan Strauss and Owen Jarboe, have been indicted for swatting crimes targeting various locations, with some appearing on and subsequently leaving the FBI’s Most Wanted list. Ongoing investigations aim to address and curb this growing threat to public safety.