Who is ‘Purgatory’? The group behind the spate of active shooter hoaxes

(NewsNation) — A loosely affiliated cybercriminal group called “Purgatory” is responsible for a recent wave of fake active shooter threats targeting universities across the United States, according to a new intelligence report from the Center for Internet Security.

University swatting hoaxes began Aug 21, 20 campuses affected

The swatting incidents began Aug. 21 at the University of Tennessee at Chattanooga and Villanova University, where students were gathered for a start-of-school Mass that turned to chaos before authorities realized it was a hoax.

Since then, at least 20 similar false threats have struck campuses across the country including:

  • University of South Carolina
  • University of Colorado Boulder
  • Iowa State
  • Kansas State University
  • University of New Hampshire
  • Northern Arizona University
  • University of Kentucky
  • West Virginia University
  • University of Arkansas
  • Louisiana State University-Alexandria
  • Texas Tech University
  • University of Pittsburgh
  • Princeton University
  • University of Georgia (as recently as Friday evening)

John Cohen, executive director of the program for countering hybrid threats at the Center for Internet Security and former acting undersecretary for intelligence at the Department of Homeland Security, said analysts determined most incidents were conducted by a single group based on tactics and technology used.

Active shooter hoaxes mar return to US college campuses
A spate of hoax calls about active shooters on U.S. college campuses is causing anxiety among students as the school year begins. The calls have prompted universities, identified in this map, to issue campuswide texts to “run, hide, fight.” (NewsNation)

Group called ‘Purgatory’ behind campus swatting hoaxes: Report

“Purgatory is a loosely affiliated group of individuals who engage in swatting, targeting schools, targeting other locations across the U.S.,” Cohen said. “Our analysts at the Center for Internet Security assessed that most of these events were being conducted by a single group, and that group was, in fact, Purgatory.” 

The group has claimed responsibility for the attacks and often livestreams the calls to attract new members and additional business from foreign intelligence services, criminal organizations and terrorist groups.

“The direct reference to the library, we found that to be common across a big chunk of these calls. And secondly, the simulated gunfire in the background, that was something else we saw that was present in a number of calls. The callers used a specific commercial voiceover internet capability,” Cohen said.

The FBI confirmed it is investigating the hoax threats but declined to comment specifically on Purgatory when asked. In a statement, the bureau said it takes “potential hoax threats very seriously because it puts innocent people at risk.”

Most calls were made to university libraries

These cybercriminal groups have become highly sophisticated, using internet-based technologies and commercial services to hide their locations and identities, Cohen said. 

They can make calls appear local while operating from overseas, and use artificial intelligence to make threats sound realistic with background noises and sound effects.

Jennifer Doebler, a former FBI agent, said the bureau will likely “treat swatting investigations similarly to crimes against children online,” attempting to “introduce undercover agents to online networks to track and identify perpetrators.”

The groups typically operate on platforms such as Discord and Telegram, which make it easy to disguise identities.

“So Purgatory falls under the umbrella of an organization called the calm. The calm is an organization made up of cybercrime actors. They engage in many different types of criminal activity, including financial crimes, crimes against children, sextortion, as well as swatting,” Doebler said.

Cybercriminals use AI, tech to hide overseas to realistic calls

The perpetrators are typically young people in their teens and 20s, Cohen said. 

They “relish in the fact that they’re able to elicit a large-scale police response” and “enjoy the fact that people are scared.”

However, swatting is “highly dangerous,” not benign, Cohen warned.

Law enforcement responds believing they’re facing a real active shooter situation, creating risks for first responders and people at target locations while diverting resources from actual crimes.

Cohen noted that between swatting calls by this group, an actual mass shooting occurred at a school in Minneapolis.

“Any delay can mean people die,” Cohen said, explaining that doubts regarding emergency response because authorities must determine if calls are legitimate could prove fatal during actual emergencies.

Currently, there is no specific federal law that swatting violates, requiring prosecutors to use charges such as wire fraud and providing false information to law enforcement to build cases. 

Many perpetrators also operate outside the United States, requiring international cooperation for arrests.

Related articles

Headlines for September 29, 2025

Israel Kills at Least 50 Palestinians over the Past...

‘You were wrong, Mr. President!’ CNN warns Trump his big push has become ‘political loser’



President Donald Trump has continued to lean into his use of the military to crack down on crime in Democrat-run cities — once a politically-strong issue for him — but new data reviewed by CNN Monday shows Americans’ are quickly souring on the moves.

Trump’s latest pledge to deploy federal troops to the city of Portland, Oregon comes after his federal takeover of Washington, D.C., which itself came after Trump deployed the National Guard to Los Angeles, California. New polling, however, shows that the continued use of the military may now be doing more harm than good for Trump’s favorability.

“If Donald Trump thinks that potentially sending in the National Guard into cities like Portland is a winning political issue, the polling says you are wrong Mr. President!” said CNN’s Harry Enten.

According to the new polling data shared by Enten, Trump’s use of federal troops is now well underwater, with 58% of voters opposed. Among independent voters, that opposition rises to 64%.

“We've heard this song before, and what happened the last time that Trump sent National Guard [members] into a national city?” Enten continued.

“Well, look at the change in Trump's net approval: overall, it dropped four points! How about immigration? It dropped by seven points! We have a history of Trump sending the National Guard into a western city and what happened was there were clear political ramifications for the president of the United States, and they were not good ramifications.”

The souring of American voters on Trump’s antics also extended to Immigration Customs and Enforcement, the nation’s chief immigration agency. Enten shared data that showed net approval of ICE during Trump’s first term was at 0 points, but now, has reached a net negative 14.

“Down it goes because of their actions during the second Trump term. In fact, the Pew Research Center polled 16 different agencies; ICE's net popularity rating was 15th out of 16th, it was close to being the least popular of them all,” Enten said.

“Bottom line is the president may think this is a politically winning issue for him, but the numbers tell a very different story. It's, in fact, a political loser.”

‘There’s a literal civil war’: GOP candidate pushes Trump to use Insurrection Act



Don Brown, a North Carolina Republican candidate for the U.S. Senate, argued that President Donald Trump should use the Insurrection Act to fight what he said was "literal civil war on the streets."

During a Monday interview on Real America's Voice, host Jake Novak asked Brown about Trump's decision to deploy National Guard troops in Portland.

"I just feel like we're in a civil war here in America," Novak said. "I wish, I mean, I'm not trying to be hysterical here, but I don't know what else to call it. It's becoming kinetic. People are dying, literally. I wonder if you're as alarmed as I am?"

"You've nailed it on the head," Brown agreed. "There is a literal civil war on the streets."

The candidate argued that Trump had a duty to "ensure domestic tranquility."

"The President of the United States has the authority to send in the National Guard to these cities where domestic tranquility and rampant crime have taken over, with or without the request from the local authorities," he said. "You look into the Insurrection Act. And when Americans' constitutional rights and liberties are being threatened, the president can go ahead and send in troops."

"The president has the authority to do it. And these local leaders who are soft on crime and pro-crime and just want to kiss up to antifa and all these communist left-wing groups that are intent on unraveling civil society, they're not relevant," he added. "So I'm going to encourage the president to do what he needs to do."

A lawsuit filed by Oregon and the city of Portland asserted that Trump did not have the authority to deploy National Guard troops in response to "small" protests near an Immigration and Customs Enforcement facility.

"There is no insurrection or threat to public safety that necessitates military intervention in Portland or any other city in our state," Oregon Gov. Tina Kotek (D) said in a statement.

Marjorie Taylor Greene SHOCKS Trump with ULTIMATE BETRAYAL

MeidasTouch host Ben Meiselas reports on Marjorie...