Tag Archives: militancy

Recent Hizbul Ahrar militant activity highlights expanding nationwide sphere of operations – Pakistan Alert

Please be advised

On October 3, a police sub-inspector was killed in Ahsanabad area of Karachi by two unidentified assailants riding a motorcycle. The attackers reportedly opened indiscriminate fire, before fleeing the scene. Hizbul Ahrar (HuA), a splinter group from the Tehreek-e-Taliban Pakistan Jamaat-ul-Ahrar (TTP-JA), claimed the attack on social media. Authorities have yet to confirm the identity of the assailants, as well as the veracity of the claim.

On September 20, both the HuA and the TTP-Hafiz faction claimed a bomb blast against security forces in Spinwam, in North Waziristan, Khyber Pakhtunkhwa (KP) Province. The TTP and HuA both claimed an attack in Mastung on August 19, which was one of their earliest conflicting claims.

On June 2, the HuA claimed an attack against a paramilitary checkpost in Hub, Lasbela District of Balochistan, which lies at the border of Karachi, Sindh Province.

In May, the HuA claimed a suicide attack against a bus in Attock in Punjab Province, following which the Counter Terrorism Department (CDT) arrested five militant operatives on September 17 planning to carry an attack in Rawalpindi.

On January 12, the TTP claimed responsibility for the killing of a policeman in North Nazimabad area of Karachi.

Assessments & Forecast

The latest claim by the HuA is highly notable, given that it is the first such claim by the group in Karachi and in Sindh Province. The group has typically confined its operations to northern and western Pakistan, in provinces such as KP, Balochistan, and the former Federally Administered Tribal Areas (FATA), in which the outfit has increased its operations in recent weeks. The latest attack in Karachi, combined with the May attack and the arrest of five of its operatives in Punjab Province, is indicative of the group’s attempt to increase its sphere of operations and to push for a presence in major civilian centers such in Karachi and Rawalpindi.

Over the recent weeks, the HuA also appear to be increasingly challenging the factions of its former patron, TTP, by claiming attacks in TTP-held territories and by challenging the group’s claims. This was witnessed in the Spinwam attack on September 20, which occurred close to Data Khel, an area predominantly controlled by TTP factions. While Karachi has frequently witnessed attacks by TTP and its affiliates against law enforcement, the recent HuA attack of October 3 may be another indicator of the growing competition between the groups in a new sphere. It is also likely that HuA’s operations in Sindh and Punjab are aided by the defections of TTP-JA personnel to the new breakaway group.

The modus operandi used is notable given that HuA methods that primarily use suicide bombings or IED attack. Motorcycle-borne shooter attacks are more characteristic of Karachi-based militants and criminal elements, which may indicate potential cooperation between these elements and the HuA. Should HuA be adding newer modus operandi to their current tactics, there is a threat that such attacks may be replicated by its cells in other parts of the country. Additionally, while the group has previously stated that all attacks will focus on government targets over civilian, the indiscriminate nature of their plot execution increases the risk of collateral damage, as the attacks have taken place in civilian-populated areas. FORECAST: Over the coming months, the authorities are likely to conduct operations in Sindh Province and along the border areas with Balochistan, in attempt to dismantle potential HuA cells and prevent infiltrations from Balochistan and the Afghan border regions into Sindh.

Recommendations

We advise against all nonessential travel to Pakistan given the heightened threat of militant attacks, criminality, kidnappings and sectarian tensions throughout the country.

Throughout Pakistan, we advise [as part of our security consulting services] minimizing non-essential movement given the daily nationwide threat of militant attacks and violent criminality.

As a general precaution, maintain heightened vigilance in the vicinity of security detachments, government buildings, public areas, diplomatic installations, news stations, military bases, restaurants, high-value soft targets like schools, shopping centers, and religious centers including mosques as they remain potential targets for militant attacks.

Those operating or residing in Sindh Province are advised to maintain vigilance in light of the recent HuA plot and the potential for growing competition between militant groups in Karachi, which may result in an increase in plots over the near term.

Car Ramming Attack on Parliament Illustrates the Continuing Impact of Declining Islamic State’s Ideology on Disenchanted Migrants – London Alert

Please be advised

At 07:37 (local time) on August 14, an individual drove a vehicle at speed towards a security barrier outside Parliament, Westminster, London. Three people were lightly injured and security forces immediately arrested the individual without further violence. The area was closed to the public for several hours while security forces determined that the vehicle posed no further risk and no weapons were inside.

The Met Police stated later on August 14 that the incident was being considered a militant attack and that the suspect was refusing to cooperate with investigations.

Reports from the morning of August 15 state that the individual is 29-years-old, originally from Sudan, living in Birmingham. Footage from the area reportedly shows the vehicle used in the attack circling Parliament several times before the incident took place.

Security forces reportedly carried out raids on residences in the central UK cities of Birmingham and Nottingham as part of the investigation into a supposed militant attack in London on August 14.

Location of militant incident in London on August 14

Click here to see Map Legend 

Assessments

The suspect’s lack of resistance to being arrested and absence of weapons inside the car differentiate the incident from recent Islamist militant attacks. Therefore, while he may have been inspired by previous vehicular attacks, it remains unlikely that he had direct links with an Islamist group, such as Islamic State (IS). As with previous similar incidents, it is possible that the attacker was suffering from a psychological disorder, which played a role in motivating the attack.

With that, the raids in Birmingham and Nottingham may have been precautionary and do not necessarily indicate the assailants links to an established or well-coordinated militant cell. However, there is a possibility that the individual was part of a small locally radicalized cell of untrained individuals who subscribe to the ideology of IS.

Given the details released about the suspect, the incident reiterates the risk of incitement to commit attacks among migrant populations who perceive themselves to be disenfranchised. This risk is amplified among young males, who are generally far more susceptible to feelings of frustration over such sentiments and are also more likely to become self-radicalized. Furthermore, the incident underscores that, even with the decline of the Islamic State, the aftereffects of their ideology and modus operandi on the collective consciousness of the West, particularly among disenchanted migrants, continues to inspire attacks.

The incident also reflects the popularity of the vehicular method for those intending to carry out indiscriminate attacks, regardless of ideology. The popularity of the method stems from the ease with which attacks can be carried out and the difficulty for security forces to be warned before the incident

Despite the unlikelihood of the suspect being directly linked to an organized group, militant organizations, like IS, may attempt to claim responsibility or connection to the incident in order to increase perceptions of their threat in the UK and Europe in general.

Recommendations

Travel to London may continue while maintaining vigilance for possible militant related activity.

Alert authorities immediately to any suspicious behavior or items.

IS claims killing of Western nationals in July 29 armed attack in Khatlon Province; likely involvement of sympathizers – Tajikistan Alert

Please be advised

The Islamic State (IS) claimed a car ramming and stabbing attack that resulted in the deaths of four Western tourists in Danghara District, approximately 90 km south of Dushanbe. Meanwhile, Islamic State (IS)-linked Amaq News Agency reported on July 30, that “soldiers of the caliphate” conducted the attack in response to calls to target citizens of coalition countries.

IS claims killing of Western nationals in July 29 armed attack in Khatlon Province; likely involvement of sympathizers - Tajikistan Alert | MAX Security


IS claims killing of Western nationals in July 29 armed attack in Khatlon Province; likely involvement of sympathizers - Tajikistan Alert | MAX Security
Click here to see Map Legend 

Assessments

While over 1,000 Tajik citizens are believed to have traveled to Syria and Iraq to join IS, the July 31 claim appears to be the first such acknowledgment by the group of an attack within Tajik boundaries and is therefore notable. The extent to which the operation was guided by the IS leadership in Syria and Iraq remains unclear at this juncture.

At present, it appears more likely that the attack was conducted by radicalized individuals that were inspired by IS rather than trained operatives of the group itself. This is indicated by the reference to targeting Coalition citizens in the Amaq report issued on July 30, which derives from a landmark statement by IS spokesperson Abu Muhammad al-Adnani in 2014, that called for sympathizers to perpetrate low-intensity attacks against individuals in nations comprising the military coalition against the IS.

The IS-linked media’s reference to “soldiers of the caliphate” further suggests that the perpetrators were likely self-radicalized, considering the use of such phrasing in previous attacks by individuals influenced by IS ideologies but possessing no evident links to IS functionaries. This is also consistent with the lack of sophistication of the attack, as well as the reported numbers of extremist sympathizers in the country leading from long-standing anti-Islamist government policies.

Recommendations

Travel to Tajikistan may continue at this time while adhering to standard security protocols given the latent threat of militancy, crime, and unrest.

Those operating or residing in Dushanbe are advised to maintain heightened vigilance due to the risk of crime and militancy while avoiding unsecured travel to the country’s rural districts such as Danghara.

We advise against nonessential travel to outlying areas in Tajikistan near the country’s borders with Afghanistan, given the threat of militant activity and criminality, including drug smuggling.reat of radicalization in Central Asia, read our in-depth report.

Islamic State-linked media reports shooting attack in Nizhny Novgorod on May 6; first 2018 Islamist militant attack in World Cup host city – Russia Analysis

Please be advised

On May 6, the Islamic State (IS)-linked media group, al-Amaq, claimed that a shooting attack which took place in Nizhny Novgorod, western Russia, was committed by a ‘soldier’ of the Sunni-jihadist group. According to a statement from Russia’s Federal Security Service (FSB) on May 4, an assailant opened fire on police officers during an identity check and barricaded himself inside an apartment in the city. The statement indicated that the perpetrator was later neutralized by security forces.

From 14 June to 15 July 2018, Russia will host the FIFA World Cup in a number of cities, including in Nizhny Novgorod. In the run-up to the tournament, Russian security forces have carried out a large number of raids and arrests, looking to neutralize militant cells made up of both Central Asian migrants, mostly based in major cities, and North Caucasian militants, mostly from the Republics of Chechnya, Dagestan, and Ingushetia.

Since the beginning of 2018, at least 38 militant counter militancy raids have been recorded in Russia, the majority focusing on reportedly IS-linked militants. At least five of the raids occurred in or near World Cup cities, including Moscow, Nizhny Novgorod, and Rostov-on-Don.

On April 17, three suspected IS-linked militants were arrested near Rostov-on-Don by FSB agents. A number of reports suggested the possibility that the militants were embedded in the city to wait until the start of the World Cup and carry out an attack during the tournament.

Islamic State-linked media reports shooting attack in Nizhny Novgorod on May 6; first 2018 Islamist militant attack in World Cup host city - Russia Analysis | MAX Security
Islamic State-linked media reports shooting attack in Nizhny Novgorod on May 6; first 2018 Islamist militant attack in World Cup host city | MAX Security

Click here to see Map Legend

Assessments

The claim from IS and the reports from the FSB indicate the first case of a successful attack occurring in a World Cup host city in 2018. The most recent Islamist militant attack in one of the host cities was in St. Petersburg in mid-2017. The incident underscores previous assessments that militants, from both Caucasian and Central Asian origins, are looking to focus their operations on the World Cup, so as to maximize exposure during the tournament. In addition, the developments come following the publication IS’ official newsletter, Al-Naba, on May 4 which called on its supporters to conduct attacks across Russia, underscoring the group’s continued interest in projecting its militant capabilities in the country. This assessment gains further credence considering IS’ repeated threats to the World Cup.

While there is no indication as to the origin of the militant at the time of writing, there are three main possibilities, all of which have been previously recorded in Russia. In the event that the attacker was a lone-wolf Central Asian migrant, who was locally radicalized within Russia through online and on ground Islamist networks, the incident highlights that lone-wolves in major cities are heeding to IS’ demands to carry out attacks on World Cup cities, demonstrating the threat in any city with a significant Central Asian diaspora community. In the event that the militant had links to Caucasian militant cells, it highlights attempts by the Caucasian Emirate pro-IS group to embed radicals within major cities, prior to the tournament, who will then carry out attacks. This is likely designed to occur before security in the North Caucasus becomes overwhelming around the time of the World Cup. The third option is that the militant may have had connections with both Central Asian militant networks and Caucasian cells, which would constitute a significant threat as such an assailant would be able to utilize the covert nature of the loosely linked Central Asian networks and the expertise of the well established Caucasian groups.

Going forward, a significant increase in counter-militancy operations in major cities and the North Caucasus will occur in the run-up to the World Cup. Furthermore, the potential for both minor and major attacks in all host cities remains before and during the tournament, likely looking to specifically target stadiums and locales with international attention, so as to maximize exposure.

Recommendations

Travel to Russia may continue while maintaining vigilant given the elevated risk of militancy and crime, particularly in major cities and World Cup host cities. (Click for our special report on threats to the 2018 World Cup).

Remain cognizant of any suspicious individuals or items that look out of place. Immediately alert authorities if identified.

Avoid all nonessential travel to the North Caucasus region, given the high risk of militancy and kidnapping.

Boko Haram’s abduction, subsequent release of 104 schoolgirls in Dapchi likely to increase group’s notoriety, legitimacy among locals – Nigeria Analysis

Executive Summary

Militants attacked a government school in Dapchi village, Burasari Local Government Area (LGA) in Yobe State and abducted 110 students and two other children on February 19.

Following extensive negotiations with the Nigerian government that resulted in the safe return of 104 of the schoolgirls and the other two children after one month in captivity, Boko Haram has been able to once again garner international attention and portray themselves as a viable threat in Nigeria’s northeastern region despite extensive counterinsurgency operations.

In light of the upcoming general elections in 2019, the girls’ safe return has been projected by President Muhammadu Buhari’s administration as a triumph, which seems to have paved the way for the government’s appeasement stance toward the insurgency.

However, the incident has highlighted the administration’s propaganda of exaggerated success against the militant group and is poised to create backlash in the form of domestic and international criticism for Buhari’s policies concerning the insurgency.

We continue to advise against all travel to the northeastern Nigerian states of Adamawa, Borno, and Yobe, given the ongoing Boko Haram insurgency and extreme insecurity in the region.

Current Situation

Militants attacked a government school in Dapchi village, Burasari Local Government Area (LGA) in Yobe State and abducted 110 students and two other children on February 19.

President Muhammadu Buhari issued a statement on February 24 expressing his concern about the abduction, claiming that the situation was a “national disaster”. On the same day, the opposition People’s Democratic Party (PDP) issued a counterstatement blaming Buhari for issuing exaggerated statistics suggesting that Boko Haram had been completely decimated, a situation that they claim put unsuspecting citizens in danger.

On March 12, Borno State authorities announced the closure of all boarding schools in 25 out of the 27 state’s LGAs due to the threat of Boko Haram militants conducting additional abductions. This came in wake of President Buhari’s decision to engage in negotiations for the release of the schoolgirls.

During the early morning hours of March 21, 106 abductees, including 104 schoolgirls and the two additional children, were dropped off in the middle of Dapchi by their captors, who also warned the locals against sending the girls to Western-style schools. While five of the remaining abductees reportedly died due to exhaustion, one Christian girl remains in the militants’ custody. The Nigerian government characterized the release as “unconditional”, though some sources citing locals indicate that authorities did free several militants who joined the kidnappers, while other sources suggest that the Nigerian government had paid a ransom to secure the girls’ release.

On March 23, while receiving the released girls in Abuja, President Buhari announced that his government was ready to grant amnesty to Boko Haram members who were ready to accept unconditional surrender.

Meanwhile, on April 1, at least 29 people were killed, including six militants, in a multi-pronged Boko Haram attack on Akikaranti, Bille Shuwa, and Bale-Galtimari communes surrounding Borno State capital, Maiduguri, coinciding with the Christian Easter holiday.

Boko Haram’s abduction, subsequent release of 104 schoolgirls in Dapchi likely to increase group’s notoriety, legitimacy among locals - Nigeria Analysis | MAX Security

Assessments & Forecast

Assessments: Following extensive counterinsurgency operations targeting Boko Haram strongholds, group attempts to reassert presence, garner international, domestic attention

Despite subsequent large-scale security operations targeting well-documented militant strongholds such as the Sambisa Forest and Lake Chad shores in Nigeria’s northeastern region, the militants successfully launched the well-planned abduction of the Dapchi girls. Indeed, this incident resembles Boko Haram’s April 2014 attack on a school in Chibok, Borno State, when 276 girls were kidnapped. The Chibok attack resulted in an extensive international outcry,  triggered by a domestic campaign started by the families of the Chibok girls. The #BringBackOurGirls movement put the Boko Haram conflict in the international spotlight, particularly when the former US First Lady Michelle Obama endorsed the campaign. In this context, the Dapchi attack was likely motivated by the prospect of achieving similar notoriety. Additionally, the attack came in response to security forces’ triumphant claims of the near-destruction of the militant group’s presence in the region. Through the Dapchi attack, the militants debunked such claims and reasserted their continued operational capabilities across the country’s northeast.

The Dapchi abductions rendered a successful outcome for the militants. While the federal government characterized the negotiations and the subsequent release of the hostages as completely “unconditional”, it contradicted local reports of the authorities’ release of several militants. Such conflicting reports align with previous allegations against authorities for releasing militants and paying ransom for militants, with the latest incident being the February 10 release of three lecturers from the University of Maiduguri, along with ten police officers abducted by Boko Haram last year. Under these circumstances, the suspected hefty ransom payment will likely be utilized by the militants to enhance and develop their operational capabilities in the region, which may have been hampered, to some extent, by the counterinsurgency operations.

Indeed, the government’s repeated payment of ransoms without any resistance is poised to encourage the militant group to carry out similar large-scale kidnappings. Such a concern was further emphasized by the Borno State authorities’ decision to shut down boarding schools across 25 of the 27 LGAs. Furthermore, the release of militants as part of the ransom payment reintroduces experienced and well-trained fighters to the ranks of the militant group, increasing their operational capabilities. This is further highlighted in the latest Boko Haram multi-pronged attack on April 1 that was reportedly coordinated by Shuaibu Moni, a top Boko Haram commander who was released by the government to facilitate the return of 82 Chibok girls in May 2017. Moni had previously appeared in a Boko Haram video on March 7 taunting the Nigerian security forces and threatening to launch additional attacks.

The theatrical grandeur of the return of the abductees as the militants drove into the center of Dapchi hailed as heroes by the local population for safely bringing back their girls was likely a symbolic attempt by the group to embolden its authority in the region. This sheds light on the militant group’s propaganda aimed towards gaining the locals’ trust and consolidate their influence in their areas of operation. As the militants shook hands with the locals and warned them against the return of the girls to schools for Western education, they compelled the latter to adhere to the militant group’s Islamist ideologies. Through the dramatic aspects of the event, the militants effectively portrayed themselves as legitimate actors in the region, with more control than the federal government in Abuja. Given the communities’ grievances against Abuja, as they continue to feel disregarded and neglected by the government, such an image of Boko Haram is poised to render the locals more susceptible to getting recruited by the militant group. Amidst the ongoing insurgency, these circumstances increase the possibility of better cooperation between the local communities and the militants, with the former providing shelter and engaging in economic transactions with the militants for their own survival.

Assessments: With 2019 elections nearing, Buhari makes strategic shift toward developing appeasement stance to overcome Boko Haram insurgency

Since President Buhari came into office in 2015, negotiations with Boko Haram in their kidnap-for-ransom schemes have become a recurring phenomenon, which includes the 2016 release of 21 Chibok girls and another 82 released in May 2017. Such a stance toward the militant group likely stems from large-scale international and domestic attention that these incidents received. Buhari has attempted to make good on his electoral promise of combating Boko Haram in contrast to the perceived failure of former President Goodluck Jonathan’s administration to effectively defeat the militant group. However, Buhari’s administration has also projected a stronger government resistance to the insurgency, which has led to a distorted perception of success over Boko Haram militancy in Nigeria. Continued militant attacks have highlighted the government’s propaganda in displaying exaggerated data regarding the success of counterinsurgency operations and falsely claiming the defeat of the militant group. This may, to a certain extent, reduce Buhari’s international and domestic credibility.

With Nigeria’s presidential elections slated to take place in 2019, such an approach by Buhari for the safe release of abductees is poised to become his legacy. To further add to his administration’s successes against the insurgency, following the Dapchi events, Buhari appears to have embarked towards an appeasement stance with the latest amnesty deal. It is likely that through these propositions Buhari seeks to strategically portray to the international community his efforts for a peaceful resolution in parallel to the continuation of counterinsurgency operations. Under these circumstances, it is likely that Buhari will attempt to negotiate with the militant group to reduce attacks in exchange for reduced military actions in the northeastern region.

However, the administration’s conciliatory attitude towards the militants may be perceived by some as weak, with negative implications particularly by security forces, which may have a  detrimental impact on the fighting morale of the soldiers who are endangering their lives in battle. FORECAST: As such, any attempts by Buhari to negotiate with the militants to reduce attacks in light of the upcoming elections, as well as the latest amnesty deal, may add to Nigeria’s security agencies’ frustration concerning the ongoing nine-year long insurgency and weaken their determination to actively combat it. Additionally, Buhari’s administration is poised to receive substantial criticism from opposition political parties for their weakened stance towards the insurgency and their propaganda of exaggerating military successes, as evidenced by the opposition People’s Democratic Party’s (PDP) statement denouncing the Dapchi deal.

FORECAST: Buhari’s latest amnesty deal offered to Boko Haram is quite similar to an opportunity offered by former President Jonathan in 2013, which Boko Haram’s leader Abubakar Shekau outright declined. As such, it seems unlikely that Boko Haram will accept the latest deal, particularly given that the government does not seem to have any substantial negotiating leverage. Furthermore, the latest April 1 multi-pronged Boko Haram attack continues to highlight that the group remains capable of executing sophisticated large scale attacks in their traditional sphere of influence. Given the group’s resilience in remaining a viable threat in Nigeria’s northeastern region despite the large-scale counter-militancy measures, a persistence of the conciliatory approach by the government is liable to be detrimental to their interests.

Recommendations

Travel to Lagos, Abuja and Port Harcourt may continue while maintaining heightened vigilance and following heightened security protocols regarding criminal and militant activity.

We continue to advise against all travel to the northeastern Nigerian states of Adamawa, Borno, and Yobe, given the ongoing Boko Haram insurgency and extreme insecurity in the region.

We advise to avoid all travel to areas of Nigeria, Niger, Cameroon, and Chad within the Lake Chad Region given the high risk of militancy.

New military campaign in North Sinai likely linked to upcoming March 2018 presidential elections – Egypt Analysis

Current Situation

On February 9, the Egyptian Armed Forces (EAAF) Spokesperson announced the commencement of a large-scale “comprehensive” military operation to “eliminate all terrorist elements” across the country, called “Operation Sinai 2018”, with special emphasis placed on the Sinai Peninsula, Nile Delta, and Western Desert. The Spokesperson also announced an increase of the country’s alert level due to the operations.

As part of the of the campaign, the Egyptian Air Force (EAF) intensified the frequency of its airstrikes targeting militant hideouts throughout North Sinai Governorate, especially in the Rafah-al-Arish-Sheikh Zuweid triangle and Central Sinai District. The Egyptian Navy increased its activity along Sinai’s coastal region, while heightened security protocols were recorded at ports and border crossings. Security forces also increased presence in the vicinity of vital infrastructure and installations. Reports from February 9 indicate that civilian Suez Canal crossings from mainland Egypt to the Sinai, including by vessel and through tunnels, have been closed to civilian traffic due to the military campaign.

On March 8, the EAAF Spokesperson stated that Operation Sinai 2018 had yielded the deaths of 105 Islamic State (IS)-affiliated Wilayat Sinai fighters and the arrests of hundreds of the group’s militants, and that 16 soldiers had also been killed since the beginning of the campaign. The Spokesperson also announced that the EAAF destroyed 1,907 hideouts and weapon storehouses.

Assessments & Forecast

The Egyptian government has achieved partial success in containing militancy threats over the past year, with a reduction in the overall number of attacks. However, the persistence, albeit reduced frequency, of attacks in North Sinai Governorate and mainland Egypt likely motivated this recent operation, demonstrating efforts to mitigate threats from multiple groups, particularly the IS-affiliate Wilayat Sinai. The large-scale attack at a mosque in North Sinai’s Bir al-Abd on November 24, 2017, which killed over 300 people, also likely triggered the operation, and it took a period of months to prepare and mobilize for the current operation.

However, considering the timing of its commencement and execution, the primary motivation for the military campaign is likely political and connected to the upcoming March 2018 presidential elections, in which President Abdel Fatah al-Sisi is the leading candidate. President al-Sisi likely initiated the operations in order to boost his status among the Egyptian populace and project an image of power, stability, and intensified efforts to tackle the threat of militancy. Al-Sisi also likely timed the operation to deflect domestic and international criticism away from the election’s perceived lack of legitimacy and toward the issue of counter-terrorism, following the withdrawal or arrest of most of his electoral opponents over the past several weeks. To a lesser but still significant degree, the operation was also likely launched to draw attention away from Egypt’s poor economic conditions and towards a different public issue, namely militancy, and measures taken by authorities to tackle it.

The operations also follow international media reports about Israeli airstrikes against Wilayat Sinai in North Sinai in recent years. The Egyptian government likely intends to use the operations to demonstrate their sovereignty over North Sinai Governorate and their ability to mitigate militant threats with their own forces. This is particularly likely in light of the heightened criticism regarding al-Sisi’s close cooperation with Israeli authorities vis-a-vis the threat of militancy stemming from Wilayat Sinai elements.

Strategically, the nationwide campaign aims largely at isolating Wilayat Sinai militants in North Sinai Governorate. The reported closure of Suez Canal crossings to the movement of civilians, as well as the intensified activity by the Egyptian Navy along the Sinai coastal region, are meant to prevent reinforcements and smugglers from aiding Wilayat Sinai militants, thus putting further pressure on the Sunni jihadist militant group in North Sinai Governorate. The heightened security measures in the vicinity of vital infrastructure and installations likely were put in place to prevent reprisal attacks by militants, which in turn, would embarrass the Egyptian authorities.

FORECAST: The EAAF will likely continue implementing a strategy aimed at further isolating Wilayat Sinai militants in their aforementioned strongholds of Central Sinai Distinct and the Rafah-al-Arish-Sheikh Zuweid triangle. By carrying out simultaneous assaults on these two areas, the EAAF likely seeks to fix militants in their positions, preventing them from reinforcing the two respective areas or conducting attacks to the rear of security forces. The intensified aerial bombardments are meant to hamper militant movements, which in turn, may impede their ability to regroup or conduct attacks in order to force the deployment of Egyptian troops away from the frontlines. Furthermore, tighter inspection is liable to be enforced between Egypt and Gaza at the Rafah border crossings.

Israel permitted Egypt to deploy a large amount of forces into Sinai, as according to the 1979 Egypt-Israel Peace Treaty, Israeli permission is required for such a move. This highlights the increased coordination between the two countries, as they both perceived Wilayat Sinai as a strategic threat. In order to complicate and discourage the security coordination between the two countries, Wilayat Sinai may target southern Israel with rocket fire over the coming days and weeks. While in the short-term, the number of Wilayat Sinai attacks may decrease, given precedent of previous operations by the EAAF in North Sinai Governorate, over the coming months the Sunni jihadist militant group will likely renew its elevated activity in the region. The group will likely lower its profile in order to facilitate this, which would enable it to regroup and carry out multiple attacks against Egyptian security forces.

Recommendations

Travel to Cairo and Alexandria may continue while adhering to all security precautions regarding militancy and civil unrest. Consult with us for itinerary-based travel recommendations.

Avoid all travel to the North Sinai Governorate and border areas with Libya, Sudan, and Israel due to the persistent risk for militant attacks, kidnappings, and general lawlessness.

We further advise to avoid nonessential travel to the Southern Sinai Peninsula, while maintaining heightened vigilance in the Suez Canal Zone, the Upper Nile area, and the Nile Delta region due to an increased risk of unrest and the heightened risk of militant attacks. Before traveling to Sharm al-Sheikh, confirm that flight operations are continuing and have not been impacted by recent militant threats.

As a general security precaution, remain vigilant in areas surrounding and avoid the immediate vicinity of government installations, police stations, and religious centers, particularly churches, as these locations remain under elevated threat of militant attacks. When traveling in central squares, or in areas with persistent police deployments, avoid the immediate vicinity of security forces, particularly fixed traffic booths, as such personnel and facilities have increasingly come under attack by militant elements.

Turkey’s military campaign aims to secure interests in northern Syria, mitigate Kurdish militant threat – Turkey & Syria Analysis

Current Situation

Turkish military officials confirmed that operation “Olive Branch” targeting Syria’s northwestern Afrin Province officially began on January 20. The objective is to eliminate the presence of both People’s Protection Units (YPG) and Islamic State (IS).

According to Turkey’s Prime Minister Binali Yildirim, Turkish ground forces entered Syria’s Afrin District from Kilis’ Gulbaba region on January 20 at 11:05 (local time). The prime minister also stated that the “four-phase operation” will aim to create a buffer zone 30 km south of the Turkish border.

Turkish forces targeted YPG positions with artillery fire throughout Afrin Province on January 20-21, including along the Turkish-Syrian border.

Turkish-backed Free Syrian Army (FSA) rebels were deployed along Syria’s border with Hatay Province and south of Syria’s Azaz.

YPG forces responded to the aerial bombardments with artillery fire striking Turkish forces in and around the Turkish border town of Kilis.

Russia reportedly withdrew its stationed forces from Syrian’s Afrin To Tel Ajar on January 20, in light of the Turkish operation. Russian authorities called for “reconciliation of warring sides.”

On January 20, the US “encouraged all parties to avoid escalation” and to “focus on the most important task of defeating IS.”

Turkish President Recep Tayyip Erdogan stated on January 20 that Syria’s Manbij, located just west of the Euphrates River, will be the “next destination for a Turkish combat operation” following Afrin.

Assessments & Forecast

The operations highlight Turkey’s continued efforts to safeguard its interests in northern Syria. The campaign in Afrin comes amidst persistent concerns by the Turkish government regarding the Kurdistan Workers’ Party (PKK) activity along the border with Syria. The Turkish government has repeatedly accused the YPG of cooperating with the PKK, and by launching the offensive in Afrin District, Turkish authorities seek to stem the YPG’s assistance to the PKK. Additional motivation for the operation may include Turkey’s efforts to assert its political influence, as well as that of the elements it supports in Syria, ahead of future negotiations between the various parties in the Syrian conflict.

President Erdogan’s hardline stance regarding the elimination of YPG elements in Syria is linked to his political ambitions regarding the upcoming 2019 election. In the past, Erdogan’s calls for the eradication of PKK militants and all affiliated elements courted ultra-nationalist voters and expanded his base significantly, helping ensure victories such as the April 2017 referendum. A recent endorsement by the Nationalist Movement Party (MHP)’s chair and a continuing aggressive foreign policy regarding Turkish-Syrian border security will consolidate his base and secure him the presidency. The military operation in Syria’s Afrin will likely cause obstacles for oppositions parties in uniting, mainly the Republican People’s Party (CHP), due to likely labeling of it being weak on militancy. This labeling will likely be triggered by CHP leader Kemal Kilicdaroglu’s recent call for diplomacy as opposed to a military operation into Afrin, as ultra-nationalists will perceive the statement as willing to negotiate with militant elements.

US-Turkish relations are likely to further diminish as a result of the operation, given vocal US opposition against intervention in Afrin. Turkish authorities already expressed much discontent regarding the US’ persistent support of the Syrian Democratic Forces (SDF), a group comprised of mostly YPG fighters in northern Syria. The US will likely continue providing the SDF with both weapons and training in order to not only fight IS, but to counter the influence of Syrian President Bashar al-Assad and the Iranian government. While the Turkish government has voiced its disapproval of Assad in the past, its objective to eliminate Kurdish influence in the region will be the priority, and US intervention will likely only embolden Turkish forces to engage in military operations against the YPG in northern Syria.

While Moscow provides a degree of support for the Kurdish militia, the Turkish operations are unlikely to significantly impact relations between the two countries. This is because the operations in Afrin District are not likely to jeopardize Russia’s strategic interests in Syria, namely the coastal provinces of Tartus and Latakia. Instead, the campaign may serve Moscow’s interests by weakening the US’s most important on-ground ally, decreasing Washington’s influence in Syria. The possible consolidation of a foothold by Turkish-aligned elements may also allow Moscow to better negotiate and enforce agreements across the country.

FORECAST: Given precedent of the previous Euphrates Shield operations, Turkish-backed rebels will initiate the ground offensive from multiple fronts, such as the Azaz and Deir Semaan areas, as well as from within Turkish territory, including Hatay and Kilis provinces. By doing so, the Turkish-backed rebels will compel the YPG to fight on multiple fronts, overstretching their forces. In the initial stages of the offensive, rebels will seek to attain and cut off the Rajo Road, as well as routes 62 and 217, all serving as important supply lines leading to the city of Afrin. Turkish forces will concurrently mainly conduct aerial bombardments and heavy artillery fire against YPG positions. Once areas are cleared of the YPG, Turkish army personnel themselves are likely to enter captured territories and establish administrative control. In response to the operation, as underlined by the YPG’s artillery fire at Turkish forces in the Kilis area, the Kurdish group will likely retaliate with rocket and mortar over the coming days.

Turkey’s military campaign aims to secure interests in northern Syria, mitigate Kurdish militant threat - Turkey & Syria Analysis | MAX Security

Click here to see Map Legend

The Turkish operations in Afrin District are liable to benefit the rebels’ rivals, namely the Islamic State (IS) and the Syrian government, on nearby fronts. Over the past several weeks, both IS and pro-government forces were able to capture multiple areas from rebel forces in southeastern Idlib, northern Hama, and southern Aleppo provinces. In light of the likely deployments of rebel fighters to northwestern Aleppo Province, at the expense of the Aleppo-Idlib-Hama triangle, their adversaries are liable to take advantage of their more dwindled presence in the region to seize additional territories. This is highlighted by the reported capture of Idlib Province’s Abu Dhuhur Military Airbase on January 20 by pro-government forces. As a result, both IS and the Syrian government are likely to intensify their operations in southeastern Idlib, northern Hama, and southern Aleppo provinces over the coming days and weeks.

Recommendations

Recommendations: Turkey

Travel to Istanbul and Ankara may continue, although travelers are advised to maintain heightened vigilance in central areas due to the threat of militancy, as well as regular anti-government protests and occasional incidents of unrest in these locales.   Contact us at [email protected] or +44 20-3540-0434 for itinerary and contingency support options.

Avoid nonessential travel to the immediate vicinities of government buildings, police stations, political party offices, popular public places and shopping centers, as well as Western institutions and places frequented by Westerners, and places of worship due to the threat of militancy.

Avoid nonessential travel to Turkey’s southern and eastern provinces, while also avoiding all travel to border areas with Syria and Iraq, given the increased risk of militancy and spillover violence.

Those conducting essential travel to Turkey’s southern and eastern provinces are advised to defer all travel to areas witnessing curfews due to the elevated risk of violence in these locales.

Recommendations: Syria

We advise against all travel to Damascus and Aleppo, given the general threat of indiscriminate aerial bombardment and artillery shelling from government forces as well as attacks by various militant groups. Attacks by rebel forces may include the use of rocket-propelled grenades, suicide bombings, and mortar attacks.

Those remaining in Damascus should ensure that contingency and emergency evacuation plans are updated due to the potential for a further deterioration in the security situation. Additionally, those remaining in Damascus are advised to avoid all travel to outlying areas of the city given the persistent threat of militancy.

Those continuing to operate or reside in Aleppo are advised to minimize movement in the city and its surroundings, given the frequency and broad nature of fighting in the city.

Avoid all travel to outlying areas and cities including Homs, Hama, and Idlib due to persistent fighting and heightened risk of kidnapping targeting foreigners, particularly in combat zones and rebel-held areas.

How Egypt’s new militant group will impact the threat landscape – Egypt Analysis

Current Situation

On November 3, a previously unknown militant group, Jamaat Ansar al-Islam, claimed responsibility for an October 20 attack in western Egypt’s Bahariya Oasis, in which reports state at least 55 security forces personnel were killed during a raid operation targeting a militant base.

In its claim of responsibility, the group introduces itself to the Egyptian public, denouncing Egyptian leadership for its treatment of the populace. The group states that the October 20 attack, which it describes in specific detail, marks the commencement of its “jihad” against government and military authorities in Egypt and proclaims itself to be a group that has exercised a “divine patience.”

The organization memorializes one of its leaders, Emad al-Din Ahmed, a former military officer who became a jihadist, who was killed during a counter-militancy operation on October 31, which included ground raids and airstrikes in a mountainous area near al-Wahat Road, west of Fayoum. Ahmed is reported to have been a deputy of Hesham al-Ashmawy, an al-Qaeda member reportedly operating in the eastern Libya city of Derna, who along with Ahmed had been forced from the Egyptian military’s ranks for professing alleged extremist Islamic beliefs.

The group stated that it freed security forces’ personnel who were kidnapped during the Bahariya Oasis attack, after lecturing them on the principles of Islam, and explaining that Egypt’s leadership is an enemy of the faith. Previous reports had stated that a police officer who had been kidnapped during the October 20 incident was freed during the October 31 operation.

The group appeals to the Egyptian public, asking the country’s citizens to provide Jamaat Ansar al-Islam with various types of support, urging them to join the group’s ranks, as well as sponsor the group financially.

How Egypt's new militant group will impact the threat landscape - Egypt Analysis | MAX Security

Assessments & Forecast

While Jamaat Ansar al-Islam is a previously unknown group, the claim of responsibility for the attack is likely credible. Although the Islamic State (IS) maintains a significant presence in the Western Desert where the attack occurred, the organization did not claim the attack, even mentioning it in its monthly literature without taking credit for it. Jamaat Ansar al-Islam is widely reported as linked to al-Qaeda, and several indications support such an affiliation. Following the Bahariya Oasis incident, numerous al-Qaeda online profiles on jihadist channels publicized and praised the attack, while Ahmed’s reported association with the al-Qaeda-loyal Ashmawy would lend credence to the al-Qaeda affiliation. The claim of responsibility’s graphics and wording also resemble those of other al-Qaeda affiliates. Jamaat Ansar al-Islam’s announcement corresponds to al-Qaeda’s overall strategy of encouraging its affiliates to pursue local-specific goals, in this case to damage Egyptian leadership for its alleged mistreatment of Egypt’s population, as well as its perceived status as an enemy of Islam. IS, in contrast, targets these same interests, but rather for the purpose of destabilizing the state in order to advance the spread of an Islamic caliphate.

The emergence of an al-Qaeda affiliate in Egypt is highly notable in its own right, as the Sunni jihadist group has not maintained an active presence in the country in recent years. This group’s self-introduction comes amidst IS’s sustained territorial losses yielded in Syria and Iraq, where it only maintains control of a few swaths of land. Jamaat Ansar al-Islam likely chose to reveal its existence at this particular time to present itself an attractive alternative for IS fighters fleeing Syria and Iraq, as IS is increasingly seen as on the decline. The significant length of time that passed before Jamaat Ansar al-Islam claimed responsibility for the attack and unveiled itself as a group is likely due to communications difficulties with al-Qaeda’s central organization, particularly given the group’s presence in Egypt’s remote Western Desert, and that it is a new organization likely in the initial stages of establishing these contacts and communications capabilities. However, this could have been intentional, as the group may have waited to announce its existence to maintain a low profile and avoid drawing authorities’ attention and thus allow its militants to regroup.

As seen in the group’s eulogizing of one of its commanders who had been an officer in the Egyptian military, Ahmed most likely maintained connections with members of the military sympathetic to Islamist militancy, who given the success of the October 20 attack, likely informed the militants that the raid was to take place in advance. This would bolster our previous assessment that the militants likely had prior intelligence of the security operation’s launching from informants within the security forces. Furthermore, while the size of the group’s personnel has not been established as of yet, it displayed high capabilities during the Bahariya Oasis attack, which were likely enhanced by former military officers such as Ahmed. This was witnessed in the group’s strategically entrenched positions during the ambush, which included directing RPG and heavy gunfire from higher ground at both the front and rear of the security convoy, which significantly immobilized its personnel, as well as in the detonation of IEDs that followed. This complex multi-pronged attack, including the use of explosives, displayed high sophistication in both method and technical expertise, and the group’s remaining members likely retain these capabilities and knowledge.

Given Jamaat Ansar al-Islam’s likely affiliation with al-Qaeda, as well as its operations in Egypt’s Western Desert, the group most likely maintains ties with the Mujahideen Shura Council of Derna (MSCD), which is based across the border in Derna. The MSCD militia coalition’s largest faction, the Abu Salim Martyrs Brigade, is aligned with al-Qaeda. Jamaat al-Islam is likely to cooperate with the MSCD towards damaging shared enemies including Egyptian leadership, as well as Cairo’s Libyan ally, the Libyan National Army (LNA), whose dominion extends over much of eastern Libya. Such cooperation will likely include the exchange of weaponry and supplies across the border, as well as personnel on some occasions.

FORECAST: The group’s claim of responsibility will likely prompt a competition amongst militant groups operating in Egypt for manpower, prestige, and legitimacy. In response to Jamaat Ansar al-Islam’s announcement, IS and disenfranchised Muslim Brotherhood militant groups are now likely further motivated to conduct attacks in order to continue to convince Egyptians to join and support them rather than defect to this new organization, raising the potential for attacks in mainland Egypt at this this time. In terms of recruitment and manpower, Jamaat Ansar al-Islam’s call for jihadist-style militancy against Egyptian authorities would appeal to those in line with IS’s doctrine, while the specific local aims of the group to attack Egypt’s leadership for its alleged maltreatment of Egyptians would attract those of the Muslim Brotherhood ideology, including more radical elements part of groups such as the Hasam Movement and Liwaa al-Thawra. Al-Qaeda has also attempted in the past to establish such relationships with disenfranchised Muslim Brotherhood militants. Furthermore, Jamaat Ansar al-Islam likely utilized a recent downtick in activity by both IS and disenfranchised Muslim Brotherhood groups in mainland Egypt in recent weeks to portray itself as strong relative to these other organizations in an attempt to gain support.

FORECAST: In response, Egyptian authorities will prosecute further security raids and direct Egyptian Air Force (EAF) airstrikes targeting the group in Egypt’s Western Desert, aimed in part at preventing Jamaat Ansar al-Islam from strengthening itself through any cooperation with the MSCD and smugglers across the border in Libya. Towards this end, Cairo will likely heighten coordination with the LNA, and in some instances, as seen on May 26 and on a few occasions afterwards, will likely order EAF airstrikes against the MSCD in Derna. Furthermore, Egyptian authorities will seek to identify and arrest militant informers likely maintained by the new group within the military and security services. However, given the challenges inherent in policing the extensive Western Desert and its expansive international borders, Jamaat Ansar al-Islam will likely continue to operate there and will attempt to perpetrate further attacks. Furthermore, it remains possible that the group maintains personnel in other areas of Egypt, including in more heavily-populated areas in its interior cities, which would also be targeted by security forces.

Recommendations

Travel to Cairo and Alexandria may continue while adhering to all security precautions regarding militancy and civil unrest. Consult with us for itinerary-based travel recommendations.

Avoid all travel to the North Sinai Governorate and border areas with Libya, Sudan, and Israel due to the persistent risk for militant attacks, kidnappings, and general lawlessness.

In Cairo, maintain heightened vigilance and continue to allot extra time for travel due to possible delays emanating from increased security deployments, checkpoints, and closures throughout the capital.

As a general security precaution, remain vigilant in areas surrounding and avoid the immediate vicinity of government installations, police stations, and religious centers, particularly churches, as these locations remain under elevated threat of militant attacks. When traveling in central squares, or in areas with persistent police deployments, avoid the immediate vicinity of security forces, particularly fixed traffic booths, as such personnel and facilities have increasingly come under attack by militant elements.

 

 

Read more reports in our security blog

What does the July 24 Lahore suicide bombing say about the TTP militant group’s changing influence in the city – Pakistan Analysis

Current Situation

The Lahore suicide bombing attack reportedly occurred at 17:30 (local time) along Ferozepur Road, in the vicinity of the Arfa Karim Tower and one kilometer away from the Punjab Province Chief Minister’s house, where he was holding a meeting at the time. At least 26 people were killed and 53 others injured, including police officers and civilians.What does the July 24 Lahore suicide bombing say about the TTP militant group's changing influence in the city - Pakistan Analysis | MAX Security

Click here to see Map Legend 

The city administration declared an emergency in hospitals and appealed for blood donations. Unconfirmed reports indicate that the motorcycle that the attacker used to arrive at the scene was registered to a resident of the Faisal Town area of the city. Approximately one hour after the incident, Tehreek-e-Taliban Pakistan’s central spokesman Mohammad Khurrassani claimed responsibility for the bombing through an email, declaring it a suicide attack.

The attack targeted a group of police officers that were deployed to clear street vendors from the area, which has since been cordoned off by a heavy contingent of security forces and the section of the road sealed. The road serves as the main link between Lahore and Kasur and is a busy thoroughfare, with Lahore’s Metro Bus also passing through.

Earlier on July 24, at least 24 people killed and 42 injured in a suicide car bomb attack in Kabul that was quickly claimed by the Taliban. Meanwhile, on April 5 four security personnel and two civilians were killed in a TTP-claimed suicide attack against census workers and their military escort along Bedian Road, while its splinter group, Jamaatul Ahrar (TTP-JA), claimed a suicide attack outside the Punjab Assembly on February 13 that resulted in the death of 13 people. On July 10, the US State Department and UK Foreign and Commonwealth Office (FCO) both issued advisory warnings of a heightened threat of militant attacks in Lahore has been targeted in a series of blasts over the past year.


What does the July 24 Lahore suicide bombing say about the TTP militant group's changing influence in the city - Pakistan Analysis | MAX SecurityAssessments & Forecast

Attack highlights TTP influence in Punjab, possible increased cooperation with Afghanistan Taliban

While groups like the Islamic State continue to operate in more peripheral areas of the country, especially in tribal areas bordering Afghanistan, the TTP and its offshoot TTP-JA remain the only militant groups that have demonstrated the consistent capability to carry out large-scale attacks in Lahore, likely due to the strong influence the group is believed to possess in Islamist schools throughout Punjab, especially in the province’s southern regions. This is evidenced by the fact that the perpetrator of the attack was likely a Lahore native, given that the motorcycle was registered to a local.

Furthermore, the group almost exclusively targets security forces and tends to issue claims of responsibility within hours of attacks, consistent with the victims of today’s attack and the rapid claim of responsibility. In this context, the claim is most likely credible and further highlights the group’s position as the dominant militant group in the Punjab Province.

The TTP is loosely allied with Afghanistan’s Taliban insurgents but focuses primarily on targeting Pakistani government officials. Both groups maintain a modus operandi which seeks to carry out successive attacks in a relatively short time span. The fact that the Lahore attack immediately followed the large-scale bombing in Kabul seems to suggest a degree of coordination and thus increasing cooperation between the two groups. The FCO and US State Department Warnings, issued just two weeks before today’s bombing, suggest that the threat of attack was, in fact, imminent and underscores security forces’ inability to hamper such movements, despite credible intelligence revealed by Western foreign ministries that suggested it would likely take place.

Attack highlights consistent vulnerabilities in security apparatus, likely to compel uptick in anti-militancy raids, protests in coming days

FORECAST: Given reports of a significant shortage of available blood in the hospitals that the victims were sent to, casualties are likely to significantly inflate in the coming hours and days. This is liable to fuel criticism by opposition groups and locals, which may allege that emergency response authorities are not adequately adapting to the growing threat of attacks in the city. Protests are liable to take place throughout the city over the coming days, both in solidarity with the victims and in condemnation of the government’s inability to thwart and adequately respond to the attack, similar to the protests that took place in the day following the February 13 attack.

Security and emergency personnel are already reportedly on the scene, but the extent of damage and cause are yet to be ascertained, meaning that a significantly bolstered security force is liable to remain in the area throughout the evening and into July 25. Keeping in mind the reports of road closures in the vicinity, many local businesses and major roads are likely to remain closed and severe traffic congestion is liable to be reported throughout the area as well as in the adjacent city of Kasur.

FORECAST: Following the recent attack on April 5, security authorities carried out a large-scale, anti-militant operation at the Punjab Housing Society in the city, just 10 days later, on April 15. Given this past precedent and in a likely attempt by the government to project an offensive posture following the most recent blast, an uptick in anti-militant raids in the city targeting Madrasas allegedly sympathetic to TTP is likely to occur. Attacks may also center on Faisal Town, where the owner of the motorcycle used in the attack is believed to reside.

Recommendations

We advise against all nonessential travel to Pakistan given the heightened threat of militant attacks, criminality, kidnappings and sectarian tensions throughout the country. Those operating or residing in Lahore are advised to avoid nonessential travel to the Afra Karim Tower and its environs given the recent attack and reported heavy security deployments. Further, those operating throughout the city are advised to maintain heightened vigilance for the remainder of July 24 given the latent potential for copycat or repeat attacks. If transiting through the city as well as the adjacent, we advise to allot for significant disruption to traffic and business continuity, especially in the vicinity of Ferozepur Road.

 

How recent deep south attacks are suggestive of militants’ fresh political agenda – Thailand attacks analysis

Current Situation: Thailand Attacks

On April 19, security forces and non-governmental installations were targeted in 13 locations spread between Narathiwat, Pattani, and Songklha in a series of simultaneous attacks that began at approximately 19:00 (local time). In Narathiwat, grenades were thrown at a checkpoint in Yi-ngo, a patrol in Si Sakhon, in a residential area of Waeng, and at a special forces unit in Rangae; shooting attacks were launched against a military base in Tak Bai and a defense volunteers’ group in Sungai Padi; and a bomb reportedly went off in Rueso. In Pattani, grenade attacks were recorded against police stations in Kapho and Sarong, as well as against a checkpoint in Mayo. Finally, in Songkhla, a grenade was thrown at a police station in Chana, two bombs went off near a base in Saba Yoi, and another volunteer group was ambushed in Thapha. As of the time of writing, two individuals have been reported dead as a result of the attacks, while another three were injured.

Previously, during the overnight hours between April 6 and 7, a wave of attacks targeted 19 districts across Narathiwat, Pattani, Songklha and Yala, which included IEDs, attacks on power transformers, incidents of arson and small arms fire. This also includes three locations targeted on April 19, namely Yi-ngo, Si Sakhont, Waeng, and Sungai Padi. Officials also recovered several explosive devices used in the attacks that had not detonated, and some of the targeted electricity pylons were reportedly still functioning after the attacks. This followed the ratifying of a new army-backed constitution by the King on April 6.

Between August 11-12, 2016, a series of coordinated IED attacks in popular tourist areas in Hua Hin, Phuket, Surat Thani, and Takua Pa killed 4 and injured 36. While the group does not traditionally claim attacks, the Malay separatist group Barisan Revolusi Nasional (BRN) has been implicated in the August 2016 attacks. A BRN spokesman claimed in an interview published on April 10 that they only operate in the restive southern states, although “in certain situations and certain contexts it is not impossible for BRN to act outside the designated area”.

The BRN is part of Mara Patani, an umbrella group traditionally comprising representatives of five liberation groups, including the BRN, Patani Islamic Liberation Front (BIPP), Patani Islamic Mujahideen Movement (GMIP) and two factions of Patani United Liberation Organization (Pulo-DSPP and Pulo-MKP).

On February 22, an unaffiliated separatist group struck a deal with the Thai government over establishing “safe zones” in the southern provinces, although on April 10 the BRN formally released a statement that they rejected any ongoing negotiations or deals. In the interim period, at least two unclaimed attacks against security forces occurred on March 30 and April 3 in Pattani and Narathiwat.

How recent deep south attacks are suggestive of militants’ fresh political agenda - Thailand attacks analysis | MAX SecurityClick here to see Map Legend 

Assessments & Forecast

Wave of attacks likely carried out by BRN in attempt to increase political standing, bargaining position in event of future peace deals

The recent spate of attacks, on April 19 and in the weeks prior, has taken place amidst a significant political change in the country. As Thailand appears to be in a notable stage of political flux since the 2014 coup, which brought in the military government who have been in power since, it is likely that the Thai insurgent groups, specifically the BRN, are attempting to carry out the attacks to solidify their stance in any future polity. As this political flux carries with it two elements of both the new constitution and the upcoming peace talks, so too can be understood the two roles that the recent attacks play.

Firstly, Thailand’s new constitution stands as arguably one of the most significant legal changes to the country’s makeup since the establishment of the constitutional monarchy in 1932, given its implementation of a military-controlled senate and provisions downgrading the scope of the executive branch. Around this change, the Malay insurgents are likely looking to express their symbolic disapproval to the military’s consolidation of power in the country, but also to attempt to make sure that they are still perceived as relevant in both the eyes of the government and the eyes of the public. As the Thai government moves forward in remodeling the country’s governing institutions in its own image, the BRN is eager to remind the junta that neither the insurgent’s organization nor cause should be brushed aside in this new wave of governance.

Secondly, as the BRN have expressed opposition to the aforementioned peace talks, it is probable that they wish to carry out acts of militancy to display their relevance to the region, in order to cast a shadow on any advancements in negotiations. This assessment is underscored by the fact that all of the attacks took place in the restive Deep South, while previous high-profile attacks aimed at capturing attention during politically sensitive periods have also been carried out in more northern areas, indicating a particular focus on projecting power in the south. It remains unknown, however, whether they seek to totally derail the peace talks by undermining their purpose, demonstrating that any kind of peace deal without the BRN would be redundant, or if they are hoping to gain leverage with the anticipation of future participation.

Recent increase in scope of militancy throughout April suggests personnel changes in BRN, including possible new leadership

The uptick in activity from the BRN, while not unheard of for the group, does appear to suggest not only a change in tactics but also an increase in the scope of their capabilities, particularly regarding their ability to carry out numerous attacks, in various locations over a short span of time. One possible explanation is that this is the result of a major recruitment drive by the group, who are able to take advantage of the large number of poor and young men in the regions, which still constitute some of the lowest areas of economic development in the country. Such an assessment is supported by comments from the Thai Defense Minister, who also blamed the unrest on April 6-7 on a ‘new generation’ of fighters working with the group. We assess that the group has brought a number of new recruits into their ranks, likely in line with their new strategy of increasing visibility, as mentioned previously. Further supporting this assessment is the lack of militant capability abilities and weapons expertise within the group, leading to such a low casualty account, despite so many different instances of militant attack.

Additionally, media speculation has emerged across the country that a new militant hardliner by the name of Abdullah Wan Mat Noor has been named the new chairperson of the BRN’s leadership council, known as Dewan Pimpinan Parti (DPP). Although these claims have been denied by the BRN’s public relations representatives, who have a historical tendency for extreme secrecy and misinformation, a change at the top of the group’s leadership would account for the change in tactics, as well as indicate further incidents to continue in kind.

Finally, it may be possible that these recent events, as well as the possible recruitment which would have been necessary to facilitate them, may come from a push by the BRN to consolidate members of other Mara Patani factions, in an attempt to bring together the militant groups. This would further account for the geographical scope of the operations.

Further violent incidents, spates of attacks likely going forward, increasing potential of strong military reaction

FORECAST: With all this in mind, we assess that further attacks will take place in the coming weeks, and while the majority are likely to occur in the country’s south for reasons already mentioned, the possibility of militant acts occurring in more northern areas cannot be ruled out, especially if the political situation or insurgent violence becomes dramatically exacerbated.

Moreover, as the government pushes to project stability in this time of political change, a counter-insurgency push remains likely, which will then, in turn, likely catalyze the unrest. Nonetheless, we assess that given the capabilities of the Malay insurgents, the chance of a sophisticated high-impact attack in any area of Thailand in the immediate future is questionable. Further, the risk of militant attack in Bangkok remains unchanged as of the time of writing, despite the uptick in southern violence.


How recent deep south attacks are suggestive of militants’ fresh political agenda - Thailand attacks analysis | MAX Security

Recommendations

Travel to Bangkok may continue while adhering to standard security precautions regarding the latent risk of crime and militant attacks. Maintain vigilance throughout Bangkok and nationwide, given the threat of attacks relating to the country’s political situation and general militancy. We advise against nonessential travel to the provinces of Pattani, Yala, Narathiwat, and Songkhla at the border with Malaysia, due to a persistent threat of militancy and ongoing counterinsurgency operations. Avoid the immediate vicinity of any protest and political gatherings due to the potential for unrest and violence to be recorded during these events. Avoid discussing the current political situation in Thailand in public. Be advised that criticizing the military and the monarchy is illegal and may lead to arrests.

 

Read more reports like this in our Security blog