Terrorism and new ideologies #2018

The global picture

The rapid collapse of IS-controlled territory in Iraq and Syria during 2017 drove down the overall number of terrorist attacks. However, an IS-inspired insurgency in southern Philippines intensified into a regional jihadist front, while the actions of the army in Myanmar turned the Rohingyas’ plight into a jihadist cause celebre. In addition, Islamist extremists associated with both IS and al-Qaida sustained a high operational tempo across the Sahel and Horn of Africa regions. Finally, IS continued to incite and inspire multiple high-profile attacks in Western countries, particularly in Australia, Finland, Spain, Sweden, the UK and the US. Ethno-nationalist and Marxist guerrilla movements continued to define the terrorism threat in several countries. In Colombia, a decline in activity by the leftist guerrilla Revolutionary Armed Forces of Colombia (FARC) was offset by a surge in National Liberation Army (ELN) attacks intended to gain leverage in peace talks. In Turkey, a heavy-handed counter-insurgency operation against Kurdish separatists substantially reduced the frequency and severity of attacks in western cities. In India, Marxist insurgents remained an active but localised threat. In Thailand, the long-running ethno-religious Malay insurgency continued, amid fruitless peace talks. Meanwhile, in Western Europe and North America, the scope and severity of right- and left-wing extremist attacks increased. Greek militant anarchists escalated and internationalised their anti-austerity campaign with a series of letter bomb attacks targeting banks, international institutions and politicians. In London, Paris and Charlottesville (US), right-wing extremists appropriated vehicle ramming as a tactic. Elsewhere in Europe, right-wing extremism tracked changes in irregular migration patterns. Control Risks recorded a sharp fall in arson attacks on refugee centres in Germany, while the number of anti-immigrant attacks increased in Italy.

Diversification of violent extremism

Islamist extremists, ethno-nationalist insurgents and leftist guerrillas will remain the main sources of terrorist violence in most countries in 2018. But the fringes of a wider range of ideological movements appear to be embracing extremist violence. These include lone individuals accessing extremist ideology online but acting outside organised groups. Right-wing extremist sentiment – focusing on anti-immigrant, anti-Semitic and ethno-supremacist themes – is increasingly overt in Europe and North America. This is reflected in the rising number of reported hate crimes, including vandalism and harassment, even in the absence of significant violent attacks. Left-wing extremists – chiefly in the guise of militant anarchist and anti-fascist groups – have also increasingly tolerated violence in reaction to government social, economic and security policies. For both right- and left-wing extremists, online propaganda and social media allow individuals to participate in political movements without formal organisational ties. As with homegrown Islamist extremists, this has made the threat environment less predictable. Lone actors are less likely to come to the attention of law enforcement than organised groups, and their attacks are more likely to reflect personal motivations than a group strategy. In another parallel with Islamist extremists, rising public concern about these networks is reflected in increased voluntary and regulatory efforts to clamp down on both left- and right-wing extremist forums and propaganda.

Shifts in targeting

The diversification of violent extremism also expands the geography and nature of potential targets. As Islamist extremist activity shifted towards less sophisticated homegrown extremists in Western countries, for example, it also shifted away from capital cities and other urban centres to smaller towns and local assets familiar to the attacker. Major cities are still targets, including for transnational terrorist groups, but they are no longer the main targets. This dynamic is likely to persist in 2018, as IS seeks to incite retaliation for the loss of its territorial ‘caliphate’.

Targeting by right- and left-wing extremists has traditionally followed different rules. Broadly, right-wing extremists target government buildings and personnel, Jewish and Islamic places of worship, ethnic and racial minorities, individuals and assets associated with immigration, and law-enforcement installations and personnel. By contrast, left-wing extremists target industrial, commercial and retail assets, financial institutions (especially ATMs – cash machines), government buildings and personnel, law-enforcement assets (particularly vehicles) and personnel, prisons and private security firms, and – of course – right-wing demonstrators. Left-wing attacks globally – excluding Marxist guerrilla movements – have been similarly concentrated against banks, and government buildings in Greece.

As with Islamist extremism, lone actors potentially confound this traditional distribution of attacks. Two incidents in the US in 2017 are instructive. In June, a left-wing extremist travelled 865 miles (1,400km) to Washington, DC, to plan and conduct a shooting attack against members of the US Congress (federal legislature). In August, a right-wing extremist travelled 545 miles (875km) to Charlottesville (Virginia) to participate in a rally, where he conducted a lethal vehicle-ramming attack against counter-demonstrators in the city centre. (Unlike the left-wing shooting attack, it remains unclear whether the right-wing vehicle-ramming attack was opportunistic or planned.) In both cases, the long-distance travel to the attack location and unconventional targets suggest that lone actors at the extremist fringes of both right- and left-wing movements are expanding the range of potential attack scenarios.

Expansion of tactics

Recent ideological extremist attacks also indicate an increasingly diverse portfolio of tactics, techniques and procedures. This has been extensively documented among Islamist extremists, who have adopted low-tech, low-cost tactics such as knife assaults and vehicle-ramming. Such attacks are more frequently executed successfully than those involving more complex tactics, even if the impacts are more localised and often smaller scale. As a result, they increased to nearly half of known plots and attacks in Western countries in 2017. For both right- and left-wing extremists, arson (including both Molotov cocktails and timed incendiary devices) has been a dominant tactic over the last five years. Beyond arson, and in line with their differential target sets, right-wing extremists have tended to favour violent assaults and firearm attacks, while left-wing extremists emphasise sabotage and vandalism. However, left-wing extremists have indicated renewed interest in improvised explosive device (IED) attacks Right-wing extremists, meanwhile, indicate persistent interest in explosive attacks, even if these tend to exceed their limited capabilities. This could change in the future. The Charlottesville attack, as well as two earlier vehicle-ramming attacks targeting Muslim worshippers in Paris and London, highlight the diffusion of violent methods from Islamist extremists to right-wing actors. The attack in London’s Finsbury Park, for example, was apparently styled specifically as retaliation for an Islamist extremist vehicle-ramming attack on London Bridge two weeks earlier. The heightened profile of vehicle-ramming attacks is likely to be contributing to their use by non-Islamist extremists. More generally, vehicle ramming as a tactic is likely to be generally attractive to violent extremists of any stripe for the same reasons it appeals to Islamist extremists: the minimal training, experience and planning required.

The corporate response

  Going into 2018, preventing mass-casualty attacks and active shooter incidents at facilities globally continues to be a top priority for Control Risks’ clients. The shift towards low-tech attacks against public spaces has stretched traditional concepts of duty of care and operational disruption. In addition, the overlap between workplace violence incidents and threats involving radicalised employee insiders creates a more complex threat environment for companies and their employees. There is no one-size-fits-all recommended intervention approach. However, ensuring that an organisation’s managers and security professionals have all available information pertaining to the threat posed by a potentially violent insider is critical. This reinforces the need for a multi-disciplinary approach to insider threat assessment and management from a corporate perspective – the hallmark of a mature and effective insider threat programme. Complex underlying issues pertaining to perceived harassment, as well as rights to privacy and religious expression in the workplace, require close collaboration between leadership from security, legal, human resources and information technology. A well trained and closely coordinated threat management team with representation from across these business functions enables an organisation to maximise its potential to initially identify emerging situations of concern, evaluate the totality of circumstances and devise a tailored threat-mitigation plan. Well-developed mitigation plans will enable the organisation to better detect any behaviours that could indicate escalation towards a potential attack. Observations take on even greater relevance in the workplace, when supervisors are proactively engaged to be vigilant at earlier stages in the assessment process. Unlike casual and occasional observation by acquaintances, well-developed insider threat programmes create systematic and routine opportunities for recognition and reporting of pre-attack planning or preparation-related behaviours that might not otherwise be detected. Such behaviours could include contextually inappropriate acquisition of weapons or escalation in target practising, preparation of a will or final message using an online platform, deletion or masking of certain social media content, or unusual travel or financial activity. They may provide a key behavioural indicator that an individual of concern may be progressing toward an attack. From: https://www.controlrisks.com/riskmap-2018/articles/terrorism-and-new-ideologies [amazonjs asin=”B078HGW29T” locale=”IT” title=”Sicurezza, Terrorismo e Società 6/2017″]