Tag Archives: jihadists

Killing of at least 137 civilians in Tahoua Region on March 21 highlights role of ethnicity, communal conflicts in ongoing insurgency – Niger Analysis

Executive Summary

  • The killing of at least 137 civilians, primarily Tuareg, in Tahoua Region marks the deadliest ever militant attack in Niger. It aligns with a recent trend of high-casualty attacks against civilians in Niger in 2021 and is a notable departure from the Islamic State in Greater Sahara’s (ISGS) usual modus operandi of only small-scale violence against the civilians in Niger.
  • This lends credence to sources indicating that the attacks were perpetrated by local militias affiliated with the ISGS, suggesting that the attack may not have been motivated by jihadist ideology or ordered by central command but rather was conducted independently by the militia in pursuit of personal or communal aims.
  • The precedent of hostilities between the Tuareg and the Fulani communities in the Tahoua Region suggests that a Fulani militia may have been responsible and portends a spate of reprisals and attacks over the coming weeks. This aligns with the broader Sahelian trend of ethnically motivated violence against civilians, with communal militias being a large contributor of insecurity across Mali, Burkina Faso, and Niger.
  • We advise against all travel to Niger’s Tillaberi and Tahoua regions in the west along the borders of Mali and Burkina Faso, with the exception of Niamey, due to the ongoing risk of militancy.

Intel Portal Demo - Try our intelligence package


Please be advised

  • Reports indicate that at least 137 civilians, primarily of Tuareg ethnicity, were killed by armed men on motorbikes who attacked Intazayene, Bakorat, and Wistane in Tillia Department in Niger’s Tahoua region on March 21.
  • Some sources indicate that the attack was perpetrated by militias affiliated with Islamic State in the Greater Sahara (ISGS), with one source stating that the militia responsible for the attack started associating with the ISGS In 2018.
  • Sources from March 23 indicate that Jamaat Nusrat al-Islam waal Muslimeen (JNIM) denied perpetrating the attacks and promised to take revenge on those responsible.

Location of armed attacks in Niger on March 21

Assessments & Forecast

  1. These coordinated raids, with 137 dead and the death toll still likely to rise, mark the deadliest attack on Nigerien soil since the beginning of the jihadist insurgency. It is particularly notable that the attack targeted civilians, primarily ethnic Tuareg, which aligns with the recent trend established by the January 2 attack that killed 100 civilians and the March 16 attack that killed 58, both in Tillaberi Region’s Ouallam Department. While violence against civilians perpetrated by the jihadists has always been prevalent in Niger, predominantly in the form of militant raids and assassinations of local leaders and government collaborators, this violence had largely been small-scale before 2021. The Islamic State in the Greater Sahara (ISGS) was likely oriented toward presenting the group as a viable alternative to state presence to local communities in western Niger. Thus, these recent attacks are a marked departure from the group’s usual modus operandi in Niger.
  2. This lends credence to reports suggesting that the attacks were conducted by local communal militias affiliated with the ISGS. There is an important distinction between ISGS and affiliated militias conducting the attack because it potentially implies that the attack was not ordered by the ISGS leadership, but was rather carried out by the militias autonomously. This highlights a broader theme of local militias affiliated with larger jihadist groups sometimes acting independently from the central command, with their actions motivated by personal and communal grievances and not jihadist ideology or strategy. This potentially explains some of the larger casualty attacks, and even some smaller-scale raids, against civilians that have not been claimed by the jihadist groups over the past years. The leadership of the jihadist groups may tacitly support the militias’ activities since they serve to intimidate the population, making them more susceptible to the jihadists’ overtures of protection. However, the jihadists likely want to maintain some plausible deniability as they recruit from numerous ethnic communities, some of which have long-standing disputes.
  3. Within this context, the latest attack targeting the Tuareg in Niger was likely rooted in communal and local conflicts, possibly over some resource dispute or as a reprisal for some action perpetrated by Tuareg militiamen. The assailants likely belonged to a militia that was ethnically Fulani and the attack was probably a manifestation of the cyclical violence between the Arab and Fulani militias in Tahoua Region, given the precedent of hostilities between the two communities, with multiple attacks and reprisals reported over the past years. The conflict between the two communities has been heightened since 2017 when the Arab Malian militias, sanctioned to operate in the country by the Nigerien government, were perceived to be indiscriminately targeting the Fulani under the guise of fighting militancy. To that point, the attack aligns with the broader Sahelian trend of high-casualty attacks against civilians being ethnically motivated, with communal militias being a large contributor to the ongoing violence and insecurity across Mali, Burkina Faso, and Niger. Militants exploit this dynamic by escalating communal hostilities and engendering perceptions of marginalization to exacerbate insecurity and facilitate recruitment and their entrenchment.
  4. The authorities’ hardline response exacerbates this tension, thereby benefiting the militants by further giving rise to sentiments of disenfranchisement. This was exemplified in Niger when the government authorized Malian ethnic militias to operate in the country in 2017-2018 to combat rising jihadism. These militias, which were largely composed of ethnic Tuareg and Daosahak, engaged in biased targeting, extrajudicial killings, and large-scale violence, primarily against the Fulani, leading to the creation of communal militias and accelerating the militarization of the border. While the government attempted to take a more conciliatory approach towards the border communities following this, the perception that the government-sanctioned the targeting of border communities, particularly the Fulani, had taken root, driving both the recently formed and existing militias to align with the ISGS. In fact, the militia allegedly responsible for the latest attack in Tahoua was reportedly formed in the early 2000s but started being associated by the ISGS in 2018, likely in the aftermath of the Malian militia’s activities.
  5. FORECAST: In line with the constant spate of attacks and retaliation that characterize these ethnic conflicts, the latest attack is liable to elicit a swift reprisal. Arab militias operating in the area are liable to pursue the militia responsible for the attack and may even target civilians, likely Fulanis. Even JNIM may get involved given leader Iyad ag Ghaly’s Tuareg heritage and as suggested by their denial of complicity and promise of revenge. This has the potential to devolve into clashes between JNIM and ISGS, as the latter is likely to take umbrage with JNIM operating within its strongholds. As such, insecurity is likely to persist in the Tchintabaraden Department along the Malian border over the coming weeks.
  6. FORECAST: The government is also likely to intensify operations in Tahoua Region to catch the perpetrators of the attack over the coming weeks. This is especially likely since newly elected President Mohamed Bazoum will likely want to demonstrate his ability to handle the ongoing insurgency. These operations may succeed in temporarily incapacitating the activities of the armed groups operating in the region, however, they are unlikely to be successful in curtailing the groups’ activities in the long-term. This aligns with the limitation of hard-line military response against the jihadists and other armed actors to adequately combat the insurgency since it fails to address the conditions that lead to radicalization and ethnic conflicts.

Recommendations

  1. We advise against all travel to Niger’s Tillaberi and Tahoua regions in the west along the borders of Mali and Burkina Faso, with the exception of Niamey, due to the ongoing risk of militancy.
  2. Avoid all travel to the border region between Mali, Niger, and Burkina Faso, given the extreme risks of militancy, ethnic conflict, and violent crime.
  3. Travel to Niamey can continue while adhering to stringent security precautions regarding crime.

Recent spate of coordinated IS-linked attacks, new modus operandi in Surabaya exhibits increased operational capabilities of local cells – Indonesia Analysis

Executive Summary

IS-linked suicide attacks in Surabaya likely stem from active attempts by the JAD to offset leadership setbacks and mobilize sympathizers.

The coordinated nature of the attacks and use of an unprecedented modus operandi indicate increased operational capabilities of local jihadist cells.

Increased visibility of consecutive IS-linked incidents in Java within the same week may spur additional attacks by cells or lone-wolves in urban centers and elsewhere, including Jakarta and Bali.

Those operating or residing across Indonesia are advised to maintain heightened vigilance in the vicinity of government buildings, transportation hubs, iconic public areas, military bases, restaurants, high-value soft targets, shopping centers, and religious centers including mosques and churches, as they remain potential targets for militant attacks.

Indonesia Analysis: Recent spate of coordinated IS-linked attacks, new modus operandi in Surabaya exhibits increased operational capabilities of local cells | MAX Security

Friction Points | MAX Security

Current Situation

On May 14, a family of five individuals, arriving on two motorcycles, detonated their explosives outside the police headquarters in Surabaya, East Java. The attack was claimed by Islamic State (IS)-linked Amaq News Agency. On the same day, six militants part of Jamaah Ansharut Daulah (JAD), a local outfit affiliated to IS, were arrested in Surabaya and nearby Sidoarjo Regency. Two other suspects were killed in the raid, including the second-in-command of the Surabaya cell of the JAD.

A family of six, including three minors, carried out a series of coordinated suicide attacks involving the use of vehicles, at three churches in Surabaya on May 13. Both IS Central and Amaq News Agency claimed the attack. The adult male in the family was later identified as the leader of the JAD Surabaya cell. An explosion was also recorded in Sidoarjo Regency south of the city on the same day. A man, suspected to be a militant, his wife, and their son were found dead at the scene, while two other minors were rescued from the apartment alive.

A riot situation in a military detention center in Depok, which lies 16 km south of the capital city of Jakarta in western Java, was resolved on May 10 after high-risk militant detainees seized firearms from prison guards and killed five security personnel on May 8. IS Central claimed the prison attacks on May 8, while an IS-affiliated media agency released pictures from inside the facility on May 9. The founder of the JAD, Aman Abdurrahman, is incarcerated in the same prison. Two suspected militants of the JAD’s Bandung cell were killed on May 10 while traveling from Bandung to a detention facility in Depok, with the intent to aid rioting prisoners.

Between April 9 and 30, pro-IS social media groups released a host of propagandist material appearing to target Western institutions and practices.

On March 14, IS-linked media sources confirmed the death of Bahrumsyah, a top-ranked militant and recruiter hailing from Indonesia, in a mismanaged suicide attack in Syria on March 13. Meanwhile, on February 13, Abdurrahman was indicted for his role in the 2016 attacks in Jakarta. Zainal Anshori, head of the JAD, was sentenced to seven years in prison on February 12, over his plans to smuggle weapons from the southern Philippines.

Assessments & Forecast

Attacks likely planned ahead of time, tied to leadership setbacks incurred by JAD

We assess that the plots in Surabaya on May 13-14 were informed by a combination of factors. The time period between February and May has seen the indictment of JAD’s founder, the sentencing of its senior-most leader, as well as the death of an influential recruiter in Syria who was known to leverage his contacts within the IS leadership to recruit sympathizers and remotely organize plots through the JAD in Indonesia. Collectively, the developments represent a host of challenges to the senior leadership of the outfit, potentially impacting the morale of its cadre and ability to newly recruit radical elements. Thus, the attacks were likely driven by a desire to signal to authorities the negligible effect of leadership setbacks on the operational capabilities of local cells, to publicly undermine recent counter militancy efforts, and to boost the morale of existing sympathizers.

The attacks also appear to have been organized well ahead of time, a fact that is illustrated by the surge of pro-IS messaging in the month of April. The timing of the attacks, only days prior to Ramadan, further hints at this possibility. There is an observable, general uptick in jihadist plots across the world during this time period over perceptions that the heightened religiosity of Ramadan would offer greater spiritual rewards for those engaging in jihad against non-believers. The difficulty in assembling high-grade triacetone triperoxide (TATP) explosives, which were believed to have been used in the Surabaya church bombings, as well as the time needed to activate JAD sleeper cells without attracting scrutiny suggests the low likelihood of the attacks being organized in an ad-hoc manner.

In terms of planning, it is likely that the attacks were devised with assistance from Indonesian functionaries in Syria. The current incarceration of top JAD leaders within the country and precedent of previous high-profile plots being organized by Indonesian militants fighting in Syria suggests that this may have been the case. The May 13 claim by IS Central, only the second attribution of the kind in three years of IS-linked attacks in Indonesia, is a potential sign of increased overseas involvement in the attacks, as is the comparative high-degree of coordination per local context.

Change in modus operandi, coordinated nature of plots indicates increase in operational capabilities

The most notable feature of all three attacks in and around Surabaya is the unprecedented modus operandi of using cells consisting of whole families, including women and children. While relatives of militants have been known to detonate explosives to avoid being captured during security operations in Syria, and in Bangladesh, this marks the first use of family units to conduct offensive attacks.

This tactical shift, the relative success of which may signal an emerging trend, is likely connected to active efforts to increase the scale and tempo of militant attacks in the country. More specifically, using multiple suicide bombers serves to increase the effect of the planned explosion, while employing members of a family unit helps to avoid the cells from being identified as potential threats and makes security forces more reticent to engage in hostilities. The fact that the JAD sleeper cells remained undetected until after the attacks despite the strict vigilance of counter-militancy units points to the discretion offered by using a family-based suicide squad.

Attacks by local cells, low-intensity plots by sympathizers possible over increased activity, visibility

FORECAST: The developments in Depok, when taken alongside the Surabaya attacks, signal a period of significant activity for local jihadists, compounded by increased visibility aided in view of the IS Central claim for both the church bombings and the prison riot. The ongoing month of Ramadan allows individuals or groups to sustain this exposure by conducting attacks, highlighting the continued risk of militancy across the nation, and especially on Java, where there is a noted presence of JAD cells.

The recent attacks have generated a significant amount of momentum and media coverage for the JAD and other jihadist sympathizers in the country. The perceived successes of recent efforts will embolden militant handlers to maintain a pace of operations in Java for as long as their manpower can sustain. While there have been no reported instances of encounters in the capital as of this report, it is highly likely that militants observed traveling to Depok had been using Jakarta as a transport hub. The ability for such elements to reach the capital in the face of significant police deployments underscores the heightened potential for attacks in Jakarta over the coming days. Whereas the JAD traditionally targeted government installations in the past, the church bombings may indicate that civilian targets have also become desirable. In addition to Jakarta, the tourist hotspot of Bali would also be a high-priority target for the group in this scenario.

Islamic State linked news agency claims May 13,2018 attack | MAX Security

Recommendations

Travel to Jakarta may continue at this time while maintaining heightened vigilance throughout the city given the risk of militancy.

Those operating or residing across Indonesia are advised to maintain heightened vigilance in the vicinity of government buildings, transportation hubs, iconic public areas, military bases, restaurants, high-value soft targets, shopping centers, and religious centers including mosques and churches, as they remain potential targets for militant attacks.

Remain cognizant of your surroundings, including any suspicious behavior of individuals, which may include a person wearing winter clothing during warm weather and/or seemingly wandering around, as well as items that look out of place, such as bags or containers.

Immediately alert authorities of any suspicious behavior or items.

Ensure that places of stay are properly secured, alter travel routes, and avoid disclosing sensitive itinerary information to unknown individuals.