‘Everybody's shot up here': Suspected gunman in US firefighter ambush killings named
They did not know where the gunfire was coming from and made urgent calls for help on their radios: 'Everybody's shot up here ... send law enforcement now,' according to one dispatch.
The Washington Post on Monday published audio of the firefighters frantically radioing in that someone was shooting at them.
After the shooting, local law enforcement agencies had offered to go on every call that the fire department goes on, Way said.
'I don't know that we're ever going to be able to guarantee people's peace of mind, at least for a while after an incident like this,' he said. 'But we are taking every measure we can to ensure safety.'
Roley had set a fire using flint and the firefighters who rushed to the scene instead found themselves under fire. They took cover behind fire trucks.
'There was an interaction with the firefighters,' Norris said. 'It has something to do with his vehicle being parked where it was.'
Roley had ties to California and Arizona and was living in Idaho 'for the better part of 2024,' Norris said. 'But as far as when he got here, why he was here, why he chose this place – I don't know.'
Two helicopters converged on the area on Sunday, armed with snipers ready to take out the suspect if needed, while the FBI used his cellphone data to track him and the sheriff ordered residents to shelter in place.
They eventually found Roley dead in the mountains, his firearm beside him.
Roley lived with T.J. Franks jr for about six months in Sandpoint, Idaho, while working for a tree service, Franks said on Monday. Franks had cameras in his apartment that caught Roley throwing gang signs at them one day, which worried Franks to the point that he called police.
'I didn't know what to really think about it,' Franks said. 'I just called the cops and had them talk to him.'
The landlord also called Franks one morning because neighbours reported that Roley's vehicle had been left running for about 12 hours. Franks said Roley was asleep in his room and said he forgot about the vehicle.
Franks said Roley 'started acting a little weird' and at one point shaved his long hair off completely. 'We just kind of noticed him starting to decline or kind of go downhill,' he said.
Dale Roley, who lives about an hour away from Coeur d'Alene, told KXLY-TV that his grandson was an avid hiker who worked for a tree company and was interested in forestry.
Outpouring of support for the victims was swift in Coeur d'Alene, a city of 55,000 residents near the border with Washington.
Hours after the shooting, people gathered along Interstate 90 holding American flags to pay their respects as the two fallen firefighters' bodies were taken to the medical examiner's office in Spokane, Washington, about 50 kilometres from Coeur d'Alene.
Governor Brad Little ordered US and Idaho state flags to be lowered to half-staff to honour the firefighters until the day after their memorial service.
'All our public safety officers, especially our firefighters, bravely confront danger on a daily basis but we have never seen a heinous act of violence like this on our firefighters before,' he said in a statement.
'This is not Idaho. This indescribable loss is felt deeply by all those in the firefighting community and beyond.'
Though the shelter-in-place order was lifted, the sheriff's office cautioned residents to be prepared because the fire was still burning. The Idaho Department of Lands said it had burned more than 10 hectares.
Fire is always a concern for the region, said Bruce Deming, whose property abuts the trail system. When he noticed smoke on the ridge Sunday afternoon, he wondered why no firefighting helicopters were responding.
When a friend texted to tell him about the shooting, he realised why he wasn't seeing aircraft: 'Because they're concerned about being shot at,' he said.

Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles


West Australian
6 hours ago
- West Australian
Terrified world No.33 Yulia Putintseva halts play at Wimbledon over ‘crazy' fan: ‘Take him out'
World No.33 Yulia Putintseva asked the umpire to eject a spectator from her first-round match at Wimbledon over safety concerns, calling the attendee 'dangerous' and 'crazy'. Putintseva went on to lose 6-0 6-0 to American Amanda Anisimova in just 43 minutes and was visibly emotional while sitting down ahead of the final game. Trailing 0-3 in the first set on court 15, Putintseva reported the fan to the umpire at the change of ends. 'Can you take him out? I'm not going to continue playing until he leaves,' she was heard telling the umpire on the BBC broadcast. 'These people are dangerous, they're crazy.' After being asked by the umpire which fan it was, Putintseva gestured to the stand behind where she was serving and said it was a spectator wearing green. The umpire then said he would phone security before getting down from his chair to speak to two members of security staff who were courtside. 'Maybe he has a knife and he will attack after, I don't know,' Putintseva, who didn't speak to the media after the match, said. In a statement, the organisers said: 'Following a complaint about the behaviour of a spectator at the match on court 15, the chair umpire informed security and the matter was dealt with.' The incident comes after a man was ejected from the Dubai Tennis Championships after displaying 'fixated behavior' towards British player Emma Raducanu in February. The man followed Raducanu to at least four competitions earlier this year, and on noticing him in Dubai, the British star previously said she 'couldn't see the ball through tears' due to her distress. British media reported that the man had tried to obtain tickets to Wimbledon, but was flagged and blocked by the All England Club's security system. Raducanu praised Wimbledon for doing an 'amazing job' at preventing the man accused of stalking her from buying tickets to the tournament. 'Wimbledon and everyone did an amazing job. I got a notification, the police contacted me and told me everything was OK,' Raducanu told the BBC. 'I know that I am not the first athlete to go through this, and I probably won't be the last — not just as an athlete, but females in general.'


Perth Now
6 hours ago
- Perth Now
Terrified world No.33 halts play over ‘crazy' fan: ‘Take him out'
World No.33 Yulia Putintseva asked the umpire to eject a spectator from her first-round match at Wimbledon over safety concerns, calling the attendee 'dangerous' and 'crazy'. Putintseva went on to lose 6-0 6-0 to American Amanda Anisimova in just 43 minutes and was visibly emotional while sitting down ahead of the final game. Trailing 0-3 in the first set on court 15, Putintseva reported the fan to the umpire at the change of ends. 'Can you take him out? I'm not going to continue playing until he leaves,' she was heard telling the umpire on the BBC broadcast. 'These people are dangerous, they're crazy.' After being asked by the umpire which fan it was, Putintseva gestured to the stand behind where she was serving and said it was a spectator wearing green. The umpire then said he would phone security before getting down from his chair to speak to two members of security staff who were courtside. 'Maybe he has a knife and he will attack after, I don't know,' Putintseva, who didn't speak to the media after the match, said. In a statement, the organisers said: 'Following a complaint about the behaviour of a spectator at the match on court 15, the chair umpire informed security and the matter was dealt with.' The incident comes after a man was ejected from the Dubai Tennis Championships after displaying 'fixated behavior' towards British player Emma Raducanu in February. The man followed Raducanu to at least four competitions earlier this year, and on noticing him in Dubai, the British star previously said she 'couldn't see the ball through tears' due to her distress. British media reported that the man had tried to obtain tickets to Wimbledon, but was flagged and blocked by the All England Club's security system. Raducanu praised Wimbledon for doing an 'amazing job' at preventing the man accused of stalking her from buying tickets to the tournament. 'Wimbledon and everyone did an amazing job. I got a notification, the police contacted me and told me everything was OK,' Raducanu told the BBC. 'I know that I am not the first athlete to go through this, and I probably won't be the last — not just as an athlete, but females in general.'

ABC News
6 hours ago
- ABC News
What we know about Scattered Spider, the hacker group targeting airlines
Alarm bells were being sounded that Scattered Spider, a notoriously aggressive and prolific hacking group, had a new favourite target — the airline sector. The FBI and tech companies Google and Palo Alto Networks put out alerts over the weekend. They warned of multiple incidents in the airline and travel industry that resembled the group's operations. Now it is believed Australia might have fallen victim to the cybercriminals. Qantas has announced that 6 million customer accounts had been exposed in a "significant" cyber attack. The airline would not confirm if it was the target of Scattered Spider, but experts said the attack appeared to have its signature moves. Scattered Spider, or UNC3944, is a loose-knit but aggressive hacking group. The "scattered" gang of affiliates goes by various names and aliases, such as Octo Tempest, Star Fraud, Scatter Swine and Muddled Libra. The members are believed to be mainly young native English speakers from the US and the UK. Some have reportedly been as young as 16 years old. Since emerging in 2022, together the gangs have been accused of breaking into and stealing data from some of the world's largest companies. They are alleged to be behind more than 100 targeted attacks across industries including telecommunications, finance, retail and gaming. The group goes from sector to sector, often targeting sectors that face significant customer pressure. And they aim for the big fish. In 2023, hackers tied to Scattered Spider broke into gaming companies MGM Resorts and Caesars Entertainment, partially paralysing casinos and knocking slot machines out of commission. The $US14 billion ($21 billion) gaming giant MGM Resorts operates over 30 hotels and casinos around the world, including in Macau and Las Vegas. The group has also caused mayhem across the UK, hitting some of the largest retail brands, including Harrods, Co-Op and Marks & Spencer (M&S). A recent cyber attack on M&S disrupted the company's online business over weeks. It has resulted in about 300 million pounds ($600 million) in lost operating profit. Scattered Spider is known to use tactics such as social engineering, where hackers trick people into letting them into systems. They essentially target human vulnerabilities. The chief executive of M&S confirmed that "threat actors" had gained access to the retailer's systems via one of its contractors using social engineering techniques. The group typically exploits an organisation's IT helpdesk, using publicly available information to pose as a staff member. David Tuffley, a cybersecurity expert from Griffith University, said the tactics could be "pretty aggressive". The impersonations could take place through phishing attacks, which is often fake emails or text messages, or the hackers may even make phone calls directly to the help desk. Daswin De Silva, a professor of AI and analytics and director of AI strategy at La Trobe University, said the tactics were "really manipulative". "Help desks want to resolve issues as quickly as possible," Professor De Silva told the ABC. "With a large organisation that has outsourced some of their business functions, they tend to be removed from the day-to-day operations of the main business. "When there is a disconnect like this … the security can be compromised." Another tactic the group is known to use is called multi-factor authentication (MFA) bombing or MFA fatigue. It involves attackers repeatedly sending MFA requests, such as notifications to a user's device, in an attempt to overwhelm them and trick them into approving a login. This could enable them to gain access to the data warehousing platform, or manipulate password resets. Qantas has released a statement saying that it detected unusual activity on Monday, on a third-party platform used by a contact centre. The airline said 6 million customers had service records in the platform, and it believed the proportion of stolen data would be "significant". An initial review confirmed the data included some customers' names, email addresses, phone numbers, birth dates and frequent flyer numbers, the airline said. "Importantly, credit card details, personal financial information and passport details are not held in this system," the statement read. "No frequent flyer accounts were compromised nor have passwords, PIN numbers or login details been accessed." The breach comes as the FBI has sent out a notification saying it has recently observed Scattered Spider "expanding its targeting to include the airline sector". "They target large corporations and their third-party IT providers, which means anyone in the airline ecosystem, including trusted vendors and contractors, could be at risk," the FBI said in a statement posted on X. "The FBI is actively working with aviation and industry partners to address this activity and assist victims." Alaska Air Group-owned Hawaiian Airlines and Canada's WestJet have both recently reported being struck by unspecified cyber incidents. Qantas said it had notified the Australian Cyber Security Centre and the Office of the Australian Information Commissioner. A spokesperson for CyberCX told ABC News the incident had all the hallmarks of an attack from the Scattered Spider hacker group. Professor Tuffley said he "wouldn't be too surprised" if the group was behind the attack. "Qantas are actually pretty good as far as cybersecurity goes, but obviously their call centre in the Philippines or wherever it was wasn't quite so good," he said. Previous breaches on major Australian companies including Medibank and Optus have highlighted how cyber attacks can see people's data used as a bargaining threat to make companies pay a ransom. Another concern for Qantas customers is that their personal data could be onsold and then used to conduct fraud. Professor Tuffley said that often, data from large-scale breaches would be combined to assemble enough information to impersonate someone. Criminals could then carry out scams such as SIM swapping or financial fraud. "They could contact a telco and say 'Hi, this is Dave, I lost my phone and I want to get a new SIM installed,'" he said. "The telco will go through all sorts of security vetting, but if they've got enough information about you, then they can succeed at that." Professor De Silva said often after a major breach, there would be a secondary round of attacks based on the data that was stolen. That could involve using the data to ask for password resets or security check-ups. "The attack was first detected on Monday, but customers and the public were informed on Wednesday. This delay translates to more than 48 hours for subsequent targeted/personalised attacks towards individual customers," Professor De Silva said. "The Australian government and relevant authorities must do better in managing the communications, impact and loss following cyber attacks." Qantas customers are being advised to stay vigilant and check accounts and transactions regularly, including frequent flyer accounts. As a general piece of advice, experts say individuals should never reuse passwords on any system or service.