Tag Archives: ISIL

Islamic State releases first video of leader al-Baghdadi since June 2014; aimed at boosting morale of fighters, supporters worldwide – Global Analysis

Executive Summary

On April 29, Abu Bakr al-Baghdadi, leader of the Islamic State (IS), openly appeared in a video for the first time in almost five years.

The main objective of the video is to showcase to IS followers that al-Baghdadi is alive and still in command of the organization, and to rally his followers to increase their rate of activities.

Additional goals of the video include portraying al-Baghdadi as a combat leader and successor of Osama bin Laden and Abu Musab al-Zarqawi, as well as to bolster the image of the organization’s global operations.

Lastly, the video includes some insights into IS’s current organizational structure and into its affiliated groups around the world.

Forecast

There is likely to be an increase in the rate, scope, and scale of attacks by IS and by sympathizers of the group over the coming weeks and months, particularly during the upcoming holy month of Ramadan.

During this time frame, IS will put a greater emphasis on conducting high-profile attacks against soft targets, including in regions that so far did not witness an attack by the group.

Over the longer term, IS will invest in building up its local affiliates, particularly in Africa and Central Asia, to compensate for its recent losses in the Middle East and its current inability to fully rehabilitate itself there.

Current Situation

  • On April 29, al-Furqan Media Foundation, the main Islamic State (IS) propaganda branch responsible for the release of messages by the group’s senior leadership, released an 18-minute video of IS’s leader, Abu Bakr al-Baghdadi, who is openly seen for the first time since an IS video on June 2014 showed him giving a sermon at al-Nouri Mosque in Mosul, Iraq.
  • In the video, al-Baghdadi is addressing his followers through a long speech delivered to three companions whose faces have been blurred, and who are likely senior leaders in the organization.

 Al-Baghdadi and the three companions  seen in the video

Assessments & Forecast

Video aims to showcase al-Baghdadi is alive, well, and still heads the group, boost the morale of fighters and supporters

Throughout the first part of the video, al-Baghdadi names “martyrs” who have been killed during the Baghouz campaign in Syria, which concluded in March 2019 as IS lost its last pocket of control over an urban terrain and a population. Thus, the timing of the video is highly symbolic and meant to highlight to IS followers that the “Caliph” and “Amir al-Mu’minin” (“leader of the faithful”) is alive and well and still heads the group, despite its continues strategic losses in recent years. This is especially so as it comes after years of various rumors about al-Baghdadi being killed by different actors, and at times that he has been overthrown from the leadership of the group. It is important to note however, that despite seemingly being healthy, al-Baghdadi appears to be very weary, and the video cuts several times, likely to allow him to rest and to refer back to his notes. There are clear efforts made by IS to prove that the video is contemporary, including by al-Baghdadi referencing current events such as the ongoing political unrest in Algeria, the ongoing revolution in Sudan, and Benjamin Netanyahu’s victory in the Israeli elections.

However, the only time when the video does not show al-Baghdadi is when he speaks about the Sri Lanka Easter attack from April 21, as the video shows footage released by international media showing the aftermath of the attack, as well as by the IS-linked Amaq news agency showing the militants prior to the attack, with an audio recording by al-Baghdadi of different quality than that of the video. Thus, it is possible that the original video was made and edited prior to the Sri Lanka attacks, with IS later adding a reference to it, due to the event’s importance.

Overall, mentioning the loss of Baghouz and the Sri Lanka attack is meant to mobilize IS fighters, as well as the group’s supporters around the globe, to conduct attacks as part of the “Revenge for al-Sham (Syria)” Campaign, an ongoing effort that commenced after IS lost Baghouz, during which the group increased the rate, scope, and quality of their operations worldwide. While it remains unclear if this was intentional or not, the video was also released shortly before the holy month of Ramadan, which begins around May 6, a period of time that traditionally experiences an uptick in jihadist attacks, with the release of the video likely to serve as a further conducive factor for such attacks. Moreover, the references to Algeria and Sudan were emphasized by stating that “unfortunately Muslims did not wise up to the fact that they keep replacing one tyrant by another, and that the only way to deal with these tyrants is through Jihad for Allah”, thus trying to appeal to persistent widespread perceptions of marginalization among Muslims in order to increase the support base for IS.

 

Al-Baghdadi affirms strategic shift of IS from state-like structure to primarily asymmetric warfare

In the video, al-Baghdadi glorified the resistance of the Baghouz defenders and highlighted that “no IS territory was ever lost without a fight”, also mentioning by name the lost of Sirte, IS’s de facto capital in Libya, in December 2016. Later, he praised the recent actions of the fighters in Libya, especially their raid on the town of al-Fuqaha and their conduct of a “war of attrition” in their attacks on enemy infrastructure and supply lines, as well as the attackers of the az-Zulfi police station in Saudi Arabia, hoping for more such attacks.

This provides further support for the longstanding assessment, supported by evidence from conflict zones, that with the demise of the “physical Caliphate” of IS in Syria and Iraq, the group has shifted its strategy toward asymmetric warfare. This means that, at least at the current stage, the group will not be attempting to regain territory and revive its government or country-like structure. Instead, it will be focusing primarily on conducting attacks varying from small-scale hit-and-run to large-scale raids, to maximize enemy casualties on the one hand, and minimize the militants’ exposure and thus potential casualties in their ranks on the other.

 

Al-Baghdadi seeking to portray himself as a combat leader, successor of Osama bin Laden and Abu Musab al-Zarqawi

Al-Baghdadi himself makes an effort to bolster the image of the organization now being active as a guerilla group. Namely, al-Baghdadi is seen with an assault rifle and combat gear as if to imply that he is now a combat leader and not just a political and spiritual leader. Notably, the type of rifle, an AKS-74U, is the exact same model traditionally seen with Osama bin Laden, founder of al-Qaeda, and Abu Musab al-Zarqawi, leader of the group that preceded IS, indicating that al-Baghdadi is also trying to draw a parallel between himself and the two revered jihadist leaders. Another important factor is that the room in which al-Baghdadi is sitting is covered entirely by white sheets. This is based on tradecraft adopted by Osama bin Laden and meant to protect operational security (OPSEC) and prevent giving out any clues that could be used to geolocate the area in which he is staying, thus fortifying that the group is now operating covertly and underground, as opposed to the recent past when it was operating more overtly and as a state-like and military-like entity.

Al-Baghdadi (left) Osama bin Laden (center) and al-Zarqawi (right) with the same firearm and a sheet covering their surroundings

Al-Baghdadi highlights role in countries other than Iraq and Syria to project image of global success and encourage bolstering activity there

Most of the regions referred to by name by al-Baghdadi in the video, aside for Baghouz, are areas outside of the “core territory” of IS in Syria and Iraq. This includes the aforementioned references to Sri Lanka, Libya, and Saudi Arabia, but also congratulating the “brothers from Burkina Faso and Mali for joining the Caliphate”, as well as welcoming the groups in Khorasan (Afghanistan-Pakistan-Iran) who joined the “Mujahideen”. This is meant to project a sense that, despite the loss of its core territory, IS is continuing to grow and is successful in other regions around the world.

This point is also highlighted by the fact that the only seemingly living person al-Baghdadi names throughout the video is Adnan Abu al-Walid al-Sahraoui, leader of the Islamic State in the Greater Sahara (ISGS), which has merged with the Islamic State’s West Africa Province (ISWAP) in recent months. In addition to the gesture showing great respect to al-Sahraoui and bolstering the image of Africa and its importance to IS, there are two other important factors. First, that al-Baghdadi is trying to dispel the persistent rumors that al-Sahraoui has been killed by stating “we ask Allah that he may protect…our brother Aba al-Walid al-Sahraoui”, implying that he is still aliveSecond, that it comes amid other persistent rumors that the leader of ISWAP, Abu Musab al-Barnawi, has been relieved from leadership of the group. Taken together with ISGS merging with and possibly coming under ISWAP, this may serve as an indication that al-Sahraoui is now the leader of ISWAP, though this still remains unclear.

Since al-Baghdadi realizes that it will be difficult to rebuild his forces in Syria and Iraq in the coming months and possibly years, he wants to bolster IS’s strength in other parts of the world, something that has been evident for months as the group has been calling on its supporters to make “Hijra” (religious immigration) to countries other than Iraq and Syria. To serve this purpose, al-Baghdadi has to emphasize the importance of these other countries in order to attract more supporters to go there, as they are often perceived as less desirable destinations for jihad.

 Video hints at current organizational structure to underscore global outreach

The video concludes by al-Baghdadi reviewing 12 notebooks with the names of IS affiliates. These are, by order, Wilayat Iraq, Wilayat al-Sham (Syria), Wilayat Khorasan (Afghanistan-Pakistan-Iran), Wilayat West Africa, Wilayat Sinai, Wilayat Libya, Wilayat Somalia, Wilayat Yemen, Wilayat Central Africa, Wilayat Caucasus, Tunisia, and Wilayat Turkey.

In IS’s terminology, “Wilaya” is a reference to a region in which a direct local affiliate purportedly has any of the following or a combination of them: territorial control, control over a population and at least a basic governmental structure. In this context, the fact that Tunisia did not have the Wilayat prefix (as has been the norm in IS claims thus far) is further indication that IS does not presume to have any of the above in the country, and that in their view Tunisia is currently strictly an area of attacks. Additionally, this is the first time an official reference was ever made to a “Wilayat Turkey”, whereas in IS attacks in the country, the last officially claimed one being the attack against a nightclub in Istanbul on New Years 2017, it was referred to only as “Turkey”. Despite the lack of overt IS offensive activity in Turkey, there is widespread logistical activity by the group in the country, with this gesture by al-Baghdadi denoting the strategic significance the country maintains in the group’s structure.

al-Baghdadi reviewing a notebook titled “Wilayat Turkey”

There are two other notebooks left at the feet of the companions, however their titles are not visible. At least three known IS affiliates: East Asia, Algeria, and (mainland) Egypt were missing from al-Baghdadi’s review. It is possible that any of the two, with East Asia being the highest likelihood given its overall success, are the two notebooks left by the companions, and that at least one of the two others are officially considered disbanded by the central leadership, most likely Algeria given its inactivity in recent years. That being said, it cannot be ruled out that the two other notebooks are of different regions that IS is trying to maintain a secret and therefore are not exposed.

Overall, the point of this staged scene is twofold. First, to underscore IS’s global operations and presence, and second, to project an image that the group still maintains a centralized command structure in which sub-organizations conduct operations in their regions but all report back and fall under the direct command of al-Baghdadi.

IS attack against Tazirbu police station on November 23 indicative of increase in militant group’s ranks, capabilities in Libya – Libya Analysis

Executive Summary

The modus operandi of the November 23 attack against the Tazirbu police station is very similar to the October 28-29 Islamic State (IS)-claimed attack against a police station in al-Fuqaha, Jufra District. The scale of these attacks, combined with the short time span within which they occurred make them highly noteworthy.

This shift in IS strategy from localized small-scale attacks across Libyan territory towards more focused large-scale attacks against towns in southern Libya, which witness lower security presence, indicates that the militant group has to some degree managed to reinforce its ranks as well as rebuild its capabilities over the past year.

Similar to the al-Fuqaha attack, IS militants kidnapped ten people, including government officials and security personnel from Tazirbu. IS’ increased focus on kidnappings can be attributed to its interest in using the abductees as bargaining chips for ransom. This would allow the group to replenish its revenues, purchase supplies and weaponry, and ramp up its operations in Libya.

We advised against all travel to the southern outlying areas of Libya at this time due to the general lack of governance and security protocols in this region, which makes it conducive for militant activity and attractive targets for attacks.

Current Situation

According to reports, suspected IS militants aboard ten armed vehicles launched an attack targeting a police station in Tazirbu, located in the Kufra District, during the night hours of November 23.
At least nine civilians and policemen were killed, and 15 were wounded as a result of the attack.
Reports further indicate that the militants kidnapped at least ten people, including the Mayor of Tazirbu and a member of the municipal council, and fled the scene.
The Libyan National Army (LNA) has diverted forces from other parts of Kufra District towards the town of Tazirbu to secure it.

Assessments & Forecast

The modus operandi, target, and location of the attack suggest that it was carried out by IS militants. The Sunni jihadist militant group recently conducted a very similar attack against the al-Fuqaha police station, located in the Jufra District, during the overnight hours of October 28-29. The scale of these two attacks, along with the short time span within which they occured make them highly noteworthy. In the time period between IS’ complete loss of territories in Libya in December 2016 and October 2018, the majority of the militant group’s attacks had been relatively small-scale as well as spread out over a long period of time and territory. The majority of these attacks utilized suicide vehicle-borne IEDs (SVBIEDs) against security checkpoints or small-scale raids against police stations. For instance, the July 24 raid against the al-Uqaylah police station killed two LNA soldiers and wounded three others, while the June 2 raid against the al-Qunan police station killed one civilian and wounded five others.

Over the past year, IS was likely operating in groups of 10-12 fighters in the country. This allowed its militants to avoid attracting security forces’ attention and move relatively undetected across a larger swathe of territory. The lack of sufficient personnel and weaponry may have compelled IS to operate in this manner, which, in turn, had an impact upon their ability to launch larger-scale attacks. The recent attacks in al-Fuqaha and Tazirbu may indicate that IS has managed to bolster its ranks, partly through militants fleeing the group’s territorial losses in Syria and Iraq and partly through new recruits who now consider Libya as a more attractive arena. This has allowed IS to concentrate its forces towards launching larger-scale attacks against entire towns, rather than just security checkpoints or isolated government infrastructure, for example, in Tripoli in May and September as well as in Misrata in October 2017.

While, on the one hand, this indicates that IS has managed to rebuild its capabilities in Libya to some degree since its loss of territories to Misrata forces in December 2016, the location of the recent attacks suggest that these capabilities are still limited. Although al-Fuqaha and Tazirbu are both located within LNA-held territories, the towns witness relatively lower security presence as compared to areas located further north in the Sirte Basin and the Oil Crescent. The security forces of southern towns are largely comprised of local militias, who maintain small armed fighting units that are neither well-equipped nor well-trained. Therefore, it is possible that IS decided to focus its efforts in southern Libya, as this would increase the militant group’s chances of success.

As witnessed in the attack on the al-Fuqaha police station, the focus on conducting kidnapping of government officials and security forces stands out in the recent incident. Unconfirmed reports from November 10 indicated that IS is seeking to negotiate the release of four out of the ten hostages abducted in the attack on al-Fuqaha. If confirmed, this would suggest that through such kidnappings-for-ransom, the Sunni jihadist militant group is aiming to replenish its revenues, which, in turn, would allow it to purchase supplies and weaponry to ramp up its operations in Libya. This would also explain the recent kidnapping of the Mayor of Tazirbu, who by the prerogative of his position within society would demand a higher ransom. Aside from the ransom, such an abduction allows IS to project the Libyan authorities as incapable of securing its own civilians, thereby allowing the group to showcase its relatively higher capabilities.
FORECAST: IS will claim responsibility for the attack over the coming hours, as its scale will allow the militant group to significantly raise its profile in Libya. Meanwhile, the LNA will divert forces towards Tazirbu in order to secure the town over the coming hours and days. It will increase security protocols in Kufra District, which may include increased security checkpoints along main roads. The LNA may also tighten security along Libya’s southern borders with Sudan and Chad, as the porosity of these borders allows militant organizations to engage in the cross-border movement of fighters, supplies, and weaponry. While this may facilitate LNA forces in gathering vital intelligence and intercepting IS convoys, it will also provide the militant group with additional targets for attacks. On a more strategic level, the UN-backed Government of National Accord (GNA) may utilize this attack to highlight the LNA’s inability to secure its held territories and attempt to leverage this in its political negotiations with the latter.

Recommendations

It is advised to defer all travel to Tripoli and Benghazi at this time due to ongoing violence, threats against foreigners, and the risk of a broad deterioration of security conditions. We advise at this time that those remaining in Tripoli and Benghazi should initiate contingency and emergency evacuation plans due to deterioration in the security situation. Contact us at [email protected] or +44 20-3540-0434 for itinerary and contingency support plans.

For those remaining in Tripoli, we advise to avoid nonessential travel to the outskirts of the city, particularly the Janzour and Tajoura neighborhoods, as well as to the Mitiga and Tripoli International Airports, given that these are focal points of ground clashes in the city.

Avoid the immediate vicinity of government buildings, police stations, media outlet offices, and political party and militia headquarters, given that these locales have been targeted by militia groups in the past and recently by militants, and thus remain at increased risk for violence and unrest.

We advised against all travel to the southern outlying areas of Libya at this time due to the general lack of governance and security protocols in this region, which makes it conducive for militant activity and attractive targets for attacks.

Westerners, particularly US citizens, operating in Libya are advised to maintain a low profile and exercise heightened vigilance in light of prevailing anti-Western sentiment and increasing attacks against foreigners.

Nationwide, take precautions to mitigate the risk of being targeted for kidnapping. Refrain from traveling in luxury vehicles and maintain a generally low profile. Routinely alter travel routes and refrain from divulging sensitive itinerary information to strangers.