Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

12/30/2007
09:00 AM
50%
50%

The Prank That Could Kill You

'Swatting' is becoming increasingly popular - with potentially dangerous consequences

I was recently pulled onto a TV news spot to talk about "swatting," a new type of prank that I hadn't heard of until recently. I’m sure our kids are becoming aware of this – but since it could result in someone getting hurt or killed and possibly landing a child who pulls this prank in prison for five to 20 years, it's probably something we should discuss with them. I’m not aware of this discussion getting underway at any company, school, or shopping mall yet, but I figure it's only a matter of time.

What is swatting?

Swatting is the practice of penetrating the Caller ID service – which is evidently not particularly secure – and then calling in a request for a SWAT response to a remote location, while making the call appear as if it's coming from that location. In short, someone calls in a terrorist attack, an armed robbery, kidnapping, hostage situation, or other false report that would require a high-level armed response by law enforcement.

Law enforcement responds to what it believes is a real call, and the victim suddenly faces armed police officers with no sense of humor and on hair triggers, thinking they are walking into a potential firefight. This is not a bright idea. Death may ensue.

Think of the homeowner awakened by what he thinks is a break-in, and then grabbing the family gun. This would be even more dangerous at a school or company, where the arriving officers could, for example, mistake a fleeing student for the non-existent attacker, or an armed plain-clothed security guard for a terrorist.

The pranksters

Calling this a prank, given its danger, is understating the risk involved, to say the least. The folks behind this hoax could be kids or adults anywhere. There have been reports of rings of people doing this to folks they don’t like. In some cases, it almost feels like a sort of protection racket, like a "message" to a victim who had refused to provide sexual favors, for instance. I wonder how many young women have been threatened this way and not reported it.

This seems to be a natural fit for disgruntled employees or people who feel they have been mistreated by a company or official, and it's likely this brand of hoax will escalate. Reports of swatting (which was nonexistent at the beginning of this year) now seem to be coming about once a month.

The penalties

The penalties are severe, as they should be. Calling in an armed response puts people's lives at risk, which makes this a felony with multiple-year penalties. If a death results from this prank, life imprisonment is a very real possibility, depending on the circumstances.

This kind of hoax – much like the prank a few weeks ago that resulted in the suicide of a young woman who thought she’d been dumped by a fake boyfriend – can ruin lives. It is very serious.

What should you do?

First, make your kids aware of it, and, of course, impose penalties should something happen. This is serious – it's not something kids should experiment with. And beware that new, young employees often don't always think through consequences, either, so you may want to include a discussion on swatting in your new employee briefing. I can’t tell you the number of times I’ve seen a young employee fired for doing something that seemed an obvious no-no to everyone except for him.

If your security team isn’t aware of swatting, it should be. And have a plan of action in place in case it happens to you. Make sure folks know whom to call, which could help prevent an unnecessary armed-response at your facility. When an employee showing signs of violence is fired, be prepared for swatting as you would for any other potential fallout from that situation. It may be a good time to check and make sure you have a process to help mitigate problems with a violent terminated employee, such as the necessary site safety.

In the end, awareness about swatting can help. Your employees should be made part of site security solutions, too, because their own safety and that of the organization could have more to do with how they cope with such a situation then how management or on-site security responds.

— Rob Enderle is President and Founder of Enderle Group . Special to Dark Reading.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
For Cybersecurity to Be Proactive, Terrains Must Be Mapped
Craig Harber, Chief Technology Officer at Fidelis Cybersecurity,  10/8/2019
A Realistic Threat Model for the Masses
Lysa Myers, Security Researcher, ESET,  10/9/2019
USB Drive Security Still Lags
Dark Reading Staff 10/9/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
2019 Online Malware and Threats
2019 Online Malware and Threats
As cyberattacks become more frequent and more sophisticated, enterprise security teams are under unprecedented pressure to respond. Is your organization ready?
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-17537
PUBLISHED: 2019-10-13
Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/deletefile?id=1&name=../ substring.
CVE-2019-17538
PUBLISHED: 2019-10-13
Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring.
CVE-2019-17535
PUBLISHED: 2019-10-13
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647.
CVE-2019-17536
PUBLISHED: 2019-10-13
Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/media_upload and fm/move.
CVE-2019-17533
PUBLISHED: 2019-10-13
Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdup_vprintf when uninitialized memory is accessed.