Five years ago this month, a US-backed Kurdish and Arab militia ousted Islamic State group fighters from a village in eastern Syria, the group’s last sliver of territory.
Since then, the organisation that once staked out a self-proclaimed caliphate across Iraq and Syria has metastasised into a more traditional terrorist group — a clandestine network of cells from west Africa to southeast Asia engaged in guerrilla attacks, bombings and targeted assassinations.
None of the group’s affiliates have been as relentless as the Islamic State in Khorasan, which is the terror group’s Afghanistan affiliate, also active in Pakistan and Iran and has set its sights on attacking Europe and beyond. US officials say the group carried out the attack near Moscow on Friday, killing scores of people and wounding many others.
In January, Islamic State-Khorasan, or Isis-K, carried out twin bombings in Iran that killed scores and wounded hundreds of others at a Memorial service for Iran’s former top general, Qassem Soleimani, who was targeted in a US drone strike four years earlier.
“The threat from Isis,” Avril Haines, director of national intelligence, told a Senate panel this month, “remains a significant counterterrorism concern.” Most attacks “globally taken on by Isis have actually [been carried out] by parts of Isis that are outside of Afghanistan,” she said.
Gen Michael Kurilla, head of the US military’s central command, told a House of Representatives committee on Thursday that Isis-K “retains the capability and the will to attack US and western interests abroad in as little as six months with little to no warning”.
US counterterrorism specialists on Sunday dismissed Russia’s suggestion that Ukraine was behind Friday’s attack near Moscow. “The modus operandi was classic Isis,” said Bruce Hoffman, a terrorism scholar at the Council on Foreign Relations.
The assault was the third concert venue in the northern hemisphere that the Islamic State group has struck in the past decade, Hoffman said, after an attack on the Bataclan theatre in Paris in November 2015, as part of a broader operation that struck other targets in the city, and a suicide bombing at an Ariana Grande concert in Manchester Arena, England, in May 2017.
The Islamic State-Khorasan, founded in 2015 by disaffected members of the Pakistani Taliban, burst on to the international jihadi scene after the Taliban toppled the Afghan government in 2021. During the US military withdrawal from the country, Isis-K carried out a suicide bombing at the international airport in Kabul in August 2021 that killed 13 US service members and as many as 170 civilians.
Since then, the Taliban have been fighting Isis-K in Afghanistan. So far, the Taliban’s security services have prevented the group from seizing territory or recruiting large numbers of former Taliban fighters, according to US counterterrorism officials.
But the upward arc and scope of Isis-K’s attacks have increased in recent years, with cross-border strikes into Pakistan and a growing number of plots in Europe. Most of those European plots were thwarted, prompting western intelligence assessments that the group might have reached the lethal limits of its capabilities.
In July, Germany and the Netherlands co-ordinated arrests targeting seven Tajik, Turkmen and Kyrgyz individuals linked to an Isis-K network who were suspected of plotting attacks in Germany.
Three men were arrested in the German state of North Rhine-Westphalia over alleged plans to attack the Cologne Cathedral on New Year’s Eve. The raids were linked to three other arrests in Austria and one in Germany on December 24th. The four people were reportedly acting in support of Isis-K.
US and other western counterterrorism officials say these plots were organised by low-level, amateurish operatives who were detected and thwarted relatively quickly.
“Thus far, Isis-Khorasan has relied primarily on inexperienced operatives in Europe to try to advance attacks in its name,” Christine Abizaid, head of the US National Counterterrorism Center, told a House committee in November.
But there are worrisome signs that Isis-K is learning from its mistakes. In January, masked assailants attacked a Roman Catholic church in Istanbul, killing one person. Shortly afterwards, the Islamic State group, through its official Amaq News Agency, claimed responsibility. Turkish law enforcement forces detained 47 people, most of them central Asian nationals.
Since then, Turkish security forces have launched mass counteroperations against Islamic State group suspects in Turkey, Syria and Iraq. Several European investigations shed light on the global and interconnected nature of Islamic State group finances, according to a United Nations report in January, which identified Turkey as a logistical hub for Isis-K operations in Europe.
The Moscow and Iran attacks demonstrated more sophistication, counterterrorism officials said, suggesting a greater level of planning and an ability to tap into local extremist networks.
“Isis-K has been fixated on Russia for the past two years,” frequently criticising President Vladimir Putin in its propaganda, said Colin Clarke, a counterterrorism analyst at the Soufan Group, a security consulting firm based in New York. “Isis-K accuses the Kremlin of having Muslim blood in its hands, referencing Moscow’s interventions in Afghanistan, Chechnya and Syria.”
A significant portion of Isis-K’s members are of central Asian origin, and there is a large contingent of central Asians living and working in Russia. Some of these individuals may have become radicalised and been in position to serve in a logistical function, stockpiling weapons, Clarke said.
Daniel Byman, a counterterrorism specialist at Georgetown University, said that “Isis-K has gathered fighters from central Asia and the Caucasus under its wing, and they may be responsible for the Moscow attack, either directly or via their own networks.”
Russian and Iranian authorities apparently did not take seriously enough public and more detailed private US warnings of imminent Isis-K attack plotting, or were distracted by other security challenges.
“In early March, the US government shared information with Russia about a planned terrorist attack in Moscow,” Adrienne Watson, a spokeswoman for the National Security Council, said Saturday. “We also issued a public advisory to Americans in Russia on March 7th. Isis bears sole responsibility for this attack. There was no Ukrainian involvement whatsoever.”
Russian authorities on Saturday announced the arrest of several suspects in Friday’s attack. But US authorities said on Sunday they were still trying to assess whether the assailants were trained by Isis-K and deployed to the attack, or whether Isis-K guided or coached individuals who may not have any hands-on training or expertise.
Counterterrorism specialists voiced concern on Sunday that the attacks in Moscow and Iran might embolden Isis-K to redouble its efforts to strike in Europe, particularly in France, Belgium, Britain and other countries that have been hit on and off for the past decade.
The UN report, using a different name for Islamic State Khorasan, said “some individuals of North Caucasus and central Asian origin travelling from Afghanistan or Ukraine toward Europe represent an opportunity for Isil-K [Islamic State of Iraq and the Levant], which seeks to project violent attacks in the West.” The report concluded that there was evidence of “current and unfinished operational plots on European soil conducted by Isil-K.”
A senior western intelligence official identified three main drivers that could inspire Isis-K operatives to attack: the existence of dormant cells in Europe, images of the Israel-Hamas war in the Gaza Strip and support from Russian-speaking people living in Europe.
One big event this summer has many counterterrorism officials on edge.
“I worry about the Paris Olympics,” said Edmund Fitton-Brown, a former top UN counterterrorism official who is now a senior adviser to the Counter Extremism Project. “They would be a premium terrorist target.” — This article originally appeared in The New York Times
2024 The New York Times Company