Now on Demand Ransomware Resilience & Recovery Summit - All Sessions Available
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

EU, US Police Cripple Islamic State Media Mouthpieces

European and US police forces have struck at the heart of Islamic State’s propaganda machine, seizing servers and “punching a hole” in its ability to spread its radical jihadist message online.

European and US police forces have struck at the heart of Islamic State’s propaganda machine, seizing servers and “punching a hole” in its ability to spread its radical jihadist message online.

The transatlantic takedown was spread over eight countries and was coordinated by the EU’s police agency in “a major operation over a two-year period”, the head of Europol, Rob Wainwright, told AFP on Friday.

Wednesday and Thursday’s operation was the latest in a campaign targeting in particular the Amaq news agency used by IS to broadcast claims of attacks and spread its message of jihad.

“With this takedown action, targeting major IS-branded media outlets like Amaq, but also al-Bayan radio, Halumu and Nasher news, IS’s capability to broadcast and publicise terrorist material has been compromised,” Europol said in a statement.

The “simultaneous multinational takedown” was coordinated by Europol from its headquarters in The Hague, and led by the Belgian federal prosecutor.

“Dozens and dozens” of police fanned out in their countries, seizing servers in the Netherlands, Canada and the United States as well as in Bulgaria, France and Romania.

‘Technically challenging’

The goal was “to destabilise this apparatus by seizing and dismantling servers used to diffuse IS propaganda and to identify and arrest its administrators,” the Belgian prosecutor said in a statement.

Advertisement. Scroll to continue reading.

“With this groundbreaking operation we have punched a big hole in the capability of IS to spread propaganda online and radicalise young people in Europe,” Wainwright said.

Britain’s Counter Terrorism Internet Referral Unit was also involved in identifying “top-level domain registrars abused by IS”, and the Bulgarian interior ministry confirmed “access was blocked to four servers, used for disseminating information” by Amaq in its country.

“It was so technically challenging that we were only really able to do it because of our experience in major cybercrime takedowns,” Wainwright told AFP.

“We basically ran the cyber playbook against IS,” he said, adding police forces around the world had spent years gathering intelligence to locate the servers being used by the jihadists.

‘Squeezed’ in battle and online 

While a US-led international coalition has been combatting IS on the battlefields of Iraq and Syria taking back territory it had seized in 2014, nations have also warned that a multi-pronged effort was needed, including choking off funding and its online access.

“They’ve been squeezed on the battlefield, and now they’ve been really badly squeezed, badly hit, on the online platform as well,” said Wainwright.

IS used Amaq to claim “every major attack since 2015 in Europe”, he said, including the deadly assaults in Paris, Brussels, Barcelona and Berlin.

“The technical infrastructure which allows it to put these terrible propaganda videos and messages out has been knocked offline,” Wainwright told AFP, speaking on his last day as Europol chief.

But Europol’s investigation is still ongoing, and arrests could follow.

At its height, the IS media portfolio included smartphone apps for children, websites, and a glossy magazine, full of post-apocalyptic prophesies and articles declaring the “caliphate” was the only legitimate and viable home for Muslims.

But as IS’s structure has crumbled, its media empire has waned too. Al-Bayan radio, which once broadcast on frequency mode and offered a wide range of statements, news and talks in several languages, had long moved online and reduced its activities.

On Friday, however, Nasher news — the main Telegram account on which Amaq statements are posted in the region — remained active, claiming jihadist fighters had damaged three Syrian army vehicles in fighting in southern Damascus.

“We are realistic in recognising that there still might be a retained possibility of re-establishing the network,” Wainwright said, highlighting that this week’s action was the third in a series of such takedowns.

“But we’re getting stronger every time, and narrowing the space for them to re-create their online presence.”

Related: U.K. Launched Major Cyberattack on Islamic State, Says Spy Chief

Related: Islamic State Retreats Online to ‘Virtual Caliphate’

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

MSSP Dataprise has appointed Nima Khamooshi as Vice President of Cybersecurity.

Backup and recovery firm Keepit has hired Kim Larsen as CISO.

Professional services company Slalom has appointed Christopher Burger as its first CISO.

More People On The Move

Expert Insights

Related Content

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Cybercrime

As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.

Cybercrime

Luxury retailer Neiman Marcus Group informed some customers last week that their online accounts had been breached by hackers.

Cyberwarfare

WASHINGTON - Cyberattacks are the most serious threat facing the United States, even more so than terrorism, according to American defense experts. Almost half...

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.

Cyberwarfare

Russian espionage group Nomadic Octopus infiltrated a Tajikistani telecoms provider to spy on 18 entities, including government officials and public service infrastructures.