Terrorism Analysis

From the Bin Laden Letters: Mapping OBL’s Reach into Yemen

Following our initial analysis of the Osama bin Laden letters released by Combating Terrorism Center (CTC) at West Point, we’ll more closely examine interesting moments from the letters and size them up against what was publicly reported as happening in the world in order to gain a deeper perspective on what was known or unknown at the time.

Isolating and analyzing references to those in Yemen with relations to Osama bin Laden (OBL), as identified in the Combating Terrorism Center (CTC) letters, we find a few key al-Qaeda individuals associated with the country in the correspondence of OBL.

Bin Laden Yemen Social Network

Bin Laden's Yemen connections from letters - Click for full size

Highlighted are several of the prominent actors, and below, we’ll examine the social network for several of those figures:

  1. Anwar al-Awlaki (senior AQAP spokesman and recruiter, killed September 2011)
  2. Saeed al-Shihri (deputy leader of AQAP, killed in February 2011)
  3. Nasir al-Wuhayshi (senior AQAP leader and OBL’s former secretary)

From “Closed Source” to Open Source

To do so, we’ll switch from the isolated instance of Recorded Future used for analysis of the letters (our separate repository to examine just the OBL documents) to the full Recorded Future index of events culled from more than 70,000 public sources. There we can look at relations for each of these three individuals during the same timeframe covered by the corpus of letters – 2006 to 2011. Here’s the big picture:

AQAP Social Network

AQAP Social Network from Public Sources - Click for Full Size

Connectors

In addition to OBL himself, there are several individuals that actually tie into all three of those highlighted above. One of the most prominent is Qasim al-Raymi, a high ranking member of the AQAP leadership and a prison escapee alongside al-Wuhayshi in 2006.

One item to to note in the network graph of al-Raymi’s connections shown below is the absence of a direct connection to Bin Laden.

Qasim al Raymi Network

Qasim al Raymi AQAP Network

The second name to link up with al-Wuhayshi, al-Shihri, and al-Awlaki is Yemeni journalist Abdul Elah Haidar Shaea, who was sentenced in early 2011 to five years for serving as a media advisor to AQAP. Court proceedings alleged that Shaea had high profile meetings with each of those AQAP head figures cited above as well as Qasim al-Raymi.

Haidar Shaea AQAP Network

Haidar Shaea AQAP Connections - Click for full size

The Haidar Shaea event is particularly interesting when adding context by way of the letters featured in the CTC release, paricularly  document 00000016 dated October 2010 to Nasir al-Wuhayshi that outlines the stance and value on image through the media: “We need to understand that a huge part of the battle is the media, and the cable channels today play a stronger role than the Hja‟in poets during the ignorant era.”

Text from letter to Abu Basir

Scanning the full network and the subsequent relations connected to Qasim al-Raymi there is a single Western name: Adam Gadahn.

Adam Gadahn Connection

Gadahn is an American born media spokesman for Al-Qaeda that shows close connections to each of the three highlighted OBL ties in Yemen. He is also presumed to be the author of one of the letters released by CTC, and in producing and appearing in a number of a propaganda videos during the last decade is tightly knit into this social network of AQAP.

Adam Gadahn AQAP Network

Adam Gadahn AQAP Connections - Click for Live View

Edges

Isolated edges in the broad network above also describe segmentation of responsibilities and unique relationships. Recently in the news AQAP bomb-maker Ibrahim Hassan al-Asiri was linked to al-Awlaki, but not others, through their respective roles in setting in motion the attempted bombing of a flight to Detroit in December 2009; al-Asiri was, in fact, initially believed to be killed in attacks on al-Awlaki in May and September 2011. However, recent events show that al-Asiri is very much active in orchestrating strikes against the United States.

Awlaki and Asiri Connection

Anwar al-Awlaki and Ibrahim al Asiri Relation

One other standout name, in a network full of men, is Haylah al Qassir. She is connected to Saeed al-Shihri by way of a video released after her arrest calling for the kidnapping of Saudi officials as retribution. Al-Qassir was reportedly a main conduit of funding and recruiting for AQAP.

Haylah al Qassir AQAP Connections - Click for Full Size

Conclusion

This analysis provides an overview of the individuals in Yemen that were closely tied to Osama bin Laden during the period of his correspondence from Abbottabad, and then shifts to leverage the expanse of media coverage and discussion on AQAP to identify individuals tightly woven into that network that remain influential in AQAP today.

In doing so, we’re able to identify key people to track going forward:

  • Nasir al-Wuhayshi
  • Qasim al-Raymi
  • Abdul Elah Haidar Shaea
  • Adam Gadahn
  • Ibrahim Hassan al-Asiri
  • Haylah al Qassir

 

Undoubtedly, we’re only scratching the surface, and there’s so much more to untangle even just from the relations above. We’ll continue to share analysis on related issues in an attempt to connect the dots between the correspondence released by CTC and the vast public record we have on Al-Qaeda, but if you have questions or want to do a more comprehensive examination of these relationships, contact Recorded Future.


Signs of Hezbollah Going Global

Warnings of Hezbollah  striking against United States interests have appeared sporadically over the last several years, but recent events around the globe seem to warrant real attention in considering the Iranian-sponsored group’s efforts to hit US and Israeli partners abroad and at home.

Using Recorded Future to look at the last four months related to attacks associated with Hezbollah, we find:

Click for interactive view

The timeline gives us a quick idea of when reported attacks really bubbled up, but even more interesting is to line up connections to Hezbollah for this initial timeframe compared to those with months prior. First, we’ll view a network of entities (locations, organizations, and people) associated with Hezbollah from December 2011 through March 2012:

Hezbollah Network - December 2011-March 2012

We find some of the very much expected locations – Israel, Iran, Lebanon, Syria, – but we also see targets from India to Thailand to Azerbaijan to French interests that were either confirmed or alleged to be targets of Hezbollah attacks that are drawing attention to the group’s expanding scope of influence.

Next, we’ll shift the timeframe to describe connections from June 2011 to November 2011.

Click for live view with time slider

The reference to China in the network above comes from a write up by the Heritage Foundation blog the Foundry that suggests China is actually in the same market as Hezbollah for acquiring Club-K cruise missiles. And we’ve reported before on the now well known activity of Hezbollah in Latin America, primarily associations with drug cartels in Mexico.

So, the shift in recent months really does appear notable in the sense that these targets are quite different than previous targets more closely located to the group’s home base in Lebanon. It’s not the first time that connections have appeared in some of the locations, say for Thailand, which back in 2009 picked up weapons in Bangkok being transported to Hezbollah and Hamas from North Korea, but to actually carry out attacks there changes the game.

Keep an eye on where events related to Hezbollah are happening around the globe (view requires a Google Earth plug-in) using Recorded Future and set up an alert to make sure you’re monitoring activity as it happens.


Iron Triangle of Terror: Iran, Hezbollah, and Los Zetas?

What would the ultimate border security nightmare look like? Might it involve drug cartels, rogue special forces soldiers, or transnational terrorists? How about all three? This scenario sounds like something out of a Hollywood movie. The problem is that for the United States this nightmare may have come true.Zetas OSINT

On December 15th it was revealed in an indictment that Hezbollah has a substantial drug connection to the Mexican drug cartel Los Zetas. The Lebanese druglord Ayman Joumaa was indicted in absentia for, “conspiring to smuggle over 90,000 tons of cocaine into America and laundering over $250 million for the cartels”. The druglord has close ties to Hezbollah and functioned as a middle man between the terrorist organization and the cartels.  In terms of raw numbers, the amount of cocaine that he tried to smuggle was equivalent to a cargo of 2,250 eighteen wheelers. The sheer volume of this transaction is cause for concern, but the fact that Hezbollah and Los Zetas are working together is far worse.

 

So why is this new development so significant to US border security? We must first consider the history and background of these groups. Hezbollah is one of the world’s largest terrorist groups and is based in southern Lebanon. The Shiite organization receives funding from Iran and engaged in a proxy war with Israel in 2005. It is responsible for some of the worst terrorist attacks of the last two decades, including the 1983 Beirut bombing that killed 241 Americans. Hezbollah may be the most influential organization preventing stability in the Middle East.

 

Los Zetas are the cartel equivalent of Hezbollah in Latin America. The Zetas are described as, “ highly trained, highly motivated commandos formerly with the Mexican military…[that] represent law enforcement’s worst nightmare come true”. The Zetas began as a group of paramilitary soldiers that were turned by the Gulf cartel. After falling out with the cartel, the Zetas formed their own. They are considered to be the “most dangerous drug cartel” and the second most powerful in Mexico. The organization has participated in a number of hideous acts including the 2011 Tamaulipas massacrethat killed some 200 civilians. Los Zetas is considered to be one of the best trained and violent groups in Latin America.

 

What is the regional significance of Hezbollah working with the drug cartels? Let’s consider Hezbollah’s cell activity in Latin America and examine its relationship with the cartels.

Hezbollah’s influence in the region dates back several years. Click here to see the interactive timeline.
Hezbollah has been involved in the drug trade in Latin America since the mid-1980s. The group is primarily located in the tri-border area Brazil, Argentina, and Paraguay. Its primary functions are to launder money and receive profits from the drug trade. Hezbollah had an, “estimated 460 operatives in the TBA by mid-2000” and this number has probably increased dramatically. Profits from criminal activity in the region are estimated to be in the millions of dollars. Over the past 25 years, Hezbollah has carefully trained its top operatives to form cells and set up shop in North and South America.
If Hezbollah were a drug cartel or a separatist movement, it would not be as much of a threat to the United States. However, Hezbollah is a very connected organization that has killed hundreds of Americans and fought a war with Israel. The most important fact about Hezbollah is that it is a  state sponsored terrorist organization, “Hezbollah clearly acts as a proxy for Iran—specifically, the Iranian Revolutionary Guards Corps Qods Force—globally and in Latin America. Thus, Hezbollah’s escalating presence in the Western Hemisphere can be understood only in the context of its patron Iran’s pursuit of its strategic objectives”. The fact that Iran is a state sponsor of Hezbollah means that the organization has the finances and the expertise to commit substantial acts of terrorism.
In July, members of Congress were briefed on the growing influence of Hezbollah in the region. One report indicated that the threat to the US border is already here, “operatives were already infiltrating the southern border with Mexico as well as Canada. In July 2010, the first improvised explosive device exploded in the U.S.-Mexico border town of Ciudad Juarez”. This problem seems to have been severely overlooked by the mainstream media. It is quite surprising because Assistant Secretary of State Roger Noriega even made a statement saying that, ” I believe there will be an attack on U.S. personnel, installations or interests in the Americas as soon as Hizbullah operatives believe that they are capable of such an operation without implicating their Iranian sponsors in the crime”. It is highly significant that a former top US official has come out and said that an attack by Hezbollah is likely.
However, it appears that the salience of the issue has grown over the past few months:

The issue has increased in momentum over the past few months

US websites dedicated to border issues and even one of the Republican presidential candidates mentioned the “significant and imminent threat of the Iran-Latin America nexus”. Others have indicated that Hezbollah functions as a sort of insurance policy for Iran in those regions. The state can fund the terrorist group and still exercise plausible deniability in the event of a major attack. Iran perceives its support of Hezbollah as a way to pressure the United States within its strategic sphere of influence in the Americas.

Some sources have said that the strengthening relationship between Iran and Venezuela has increased Hezbollah’s influence in the region. Both leaders are staunchly anti-American, and it is reasonable to think that they would pursue activities that would undermine US interests. Roger Noreiga, the same official that warned of an attack by Hezbollah, indicates that Venezuela, “has allowed Iran to mine uranium” and that Venezuela’s Margarita Island has eclipsed the infamous TBA as the principal safe haven and center of Hezbollah operations in the Americas”. This is particularly disturbing as Iran is suspected of pursuing a nuclear weapon while simultaneously funding Hezbollah close to the US border. Therefore, there major concerns that if Iran obtains a nuclear weapon it might share the weapon with Hezbollah.

There are two major Hezbollah networks operating in the Americas under the direction of the Iranian Quds Force. The first is the Nassereddine network, operated by a former Lebanese citizen that became a Venezuelan and is now the second-ranking diplomatic official to Syria. He currently resides on Margarita Island and runs money laundering operations for the group. The other network is purportedly run by Hojjat al-Eslam Mohsen Rabbani, a culutral attaché from Iran who is involved in various recruitment activities and frequently travels under false papers in Latin America. The two networks together make up the majority of Hezbollah’s activity in the Americas.

Now back to the cartels. Why is the link between Hezbollah and Los Zetas so important? The main concern is that if Hezbollah and Los Zetas are cooperating on drugs (which they are to the tune of hundreds of millions), then why would they not cooperate on weapons? Hezbollah and other extremists may be willing to export their knowledge of IEDs to the cartels. The relationship between Hezbollah and Los Zetas appears to have already expanded beyond drugs. In October 2011, the US authorities revealed that there was an attempt made by Iran to assassinate the Saudi ambassador on US soil.

It looks like Los Zetas was intricately involved with Iran in this and other related plots, “The alleged plot also included plans to pay the cartel, Los Zetas, to bomb the Israeli Embassy in Washington and the Saudi and Israeli Embassies in Argentina, according to a law enforcement official…The plotters also discussed a side deal between the Quds Force, part of Iran’s Islamic Revolutionary Guards Corps, and Los Zetas to funnel tons of opium from the Middle East to Mexico”. Other information that we have found would corroborate the existence of a relationship between Hezbollah and Los Zetas.

 

Is the relationship between Hezbollah and Los Zetas merely hearsay?

 

There are also some analysts that think that the entire relationship should be played down and that Hezbollah’s influence is overplayed. James Bowsworth of the Christian Science Monitor downplays the relationship saying,

“The case is notable for having all the key words that people get excited about: Hezbollah! Terrorist-financing! Cocaine! Zetas! Venezuela! And all of that appears to be true. At the same time, in spite of all the red flag key words, the details within these articles and the indictment show how the US government can deal with the issue of Hezbollah in the hemisphere without panic and over-reaction”
He also quotes one US official that stated the exact opposite of what other sources said, “”It’s not like there’s a sit-down between the leaders of Hezbollah and the Zetas. Nor is this about Presidents Hugo Chavez of Venezuela and Mahmoud Ahmadinejad of Iran plotting together. It should not be portrayed as such”. This is interesting in light of the fact that there are extensive Hezbollah networks in the Americas and that Los Zetas may have been complicit with Iran in plotting to bomb the United States. A blog post called “Debunking the Iran Terror Plot” may provide a counterpoint to the theory that Hezbollah and Los Zetas are coordinating. The report takes an in-depth look at the FBI report and finds that there are many holes within the indictment. The author in that piece concluded that the plot did not match Iranian interests and that Los Zetas was likely not involved.

 

Conclusion

 

Are Hezbollah and Los Zetas actively coordinating to undermine US interests in the Americas? There is good reason to believe that the groups are coordinating on narcotics activities. Both stand to gain substantially from money laundering and drug trafficking. The December 15th indictment appears to clearly establish these links and the report has not been questioned as much as the FBI report on the Iranian plot.The data on drug activity between Hezbollah and Los Zetas is more convincing than the plotting charges.

 

The Iranian plot may have been true and if so it is particularly disturbing for US security. If these two groups are indeed plotting together then an attack at the border may be an imminent threat. Despite this there are no conclusive links to show an iron triangle between Iran, Hezbollah, and Los Zetas. The three may be casually linked to one another in plotting terrorist attacks, but at present this coordination does not seem to be widespread.
Continue this research with your own Recorded Future account. It’s free to sign up.

Try It For Free

Now anyone can sign up for a free trial of Recorded Future Premium. You’ll get full use of premium research tools that allow you to analyze past trends and better understand the potential future of almost anything! No credit card and no commitment required. We’d love to hear your feedback.

Be sure to test out our newest tool, the Network view. Click the image below for an interactive view of  Mexican drug lord Joaquin “El Chapo” Guzman’s network.

Link Analysis Recorded Future


Pattern of Life Analysis: Rezwan Ferdaus

We learned yesterday that the FBI has long been tracking an individual named Rezwan Ferdaus accused of plotting attacks on the Pentagon and Capitol. He was arrested yesterday, and since the news went public, a wealth of information has emerged about his activities over the last two years.

Rezwan Ferdaus Timeline Pattern of Life

Rezwan Ferdaus over the last two years - Click for interactive view

Much more will likely emerge on his background and connections, but for now, we can synthesize news just from the last two years to quickly get a view of how the alleged plans for attack developed. Stay tuned as we’ll update this over the next week to see how information expands.


Who Fills the Al-Qaeda Leadership Void?

As one recent NPR headline read, “Bin Laden Is Dead; Al-Qaida Isn’t“. So, as we learn more and more about the last years of Osama bin Laden’s life holed up in Abbottabad, the increasingly more relevant security question is: who grabs the dangling reins of Al-Qaeda?

In the absence of any announcement from the organization thus far, we can quickly do some open source analysis on a few of the more prominent public figures that may be the next front man for Al-Qaeda.

Ayman al-Zawahiri

It’s widely figured that Ayman al-Zawahiri, Bin Laden’s longtime second in command, will lead Al-Qaeda tactically. However, as you can see below, recent analyses of the organization’s command structure suggest a growing rift around al-Zawahiri to the degree that conspiracy theories have emerged that he was responsible for giving away Bin Laden’s position to the United States.

Al-Qaeda Divided over al-Zawahari

Mentions of Zawahiri over the last seven days.

When considering al-Zawahiri’s as the leader of Al-Qaeda, it might be valuable to look at his publicly recorded and discussed activity over the last 12 months. What we find are some significant spikes during recent months.

The first is stated support for Islamic rule in Egypt after Mubarak’s departure as president.  The second, and perhaps more interesting, is a call for military backing of Libyan rebels attempting to overthrow Muammar Ghaddafi as the prospect of a civil war in Libya presents the possibility of a power vacuum for Al-Qaeda to fill.

 

Ayman al-Zawahiri Bin Laden Successor Timeline

Last 12 Month Timeline for Ayman al-Zawahiri

Saif al-Adel

Egyptian-born Saif al-Adel is the pseudonym of a long time confidant to Bin Laden. Al-Adel was believed to have been detained in Iran for almost a decade before being recognized as present in North Waziristan sometime in or before October 2010.

There was even speculation made around the time of his recognition back in the field that al-Adel would “be the new face of al-Qaida in 2011.”

Location of Saif Al-Adel al-Qaida During Last 12 Months
Saif Al-Adel Over – Last 12 Months (click for view)

 

It’s seems clear that Saif al-Adel has been rooted in Pakistan for some time now and appears once again embedded in the political structure of Al-Qaeda.

Abu Yahya al-Libi

The first individual outside of the Afghanistan/Pakistan space is Abu Yahya al-Libi, a Libyan that in the last few months released a video calling for “religious war” in Libya. His messaging in recent months has been both one of criticism against Western influences in Libya, but also one supportive of anti-Gaddafi forces.

 

Abu Yahya al-Libi Activity Libya

Recent Coverage of Abu Yahya al-Libi - Click for details

Though al-Libi is primarily a regional figure, he does seem to offer the best access to one of the most volatile regions on the globe right now,which Al-Qaeda would no doubt consider beneficial as a foothold.

Anwar al-Awlaki

Finally, there’s US-born Anwar al-Awlaki, who we’ve reported on in the past and is a leading figure in Al-Qaeda’s Yemen presence.

Anwar al-Awlaki Yemen Successor to Bin Laden

Recent Events for Anwar al-Awlaki - Click for Details

Clearly, given the above overview of al-Awlaki’s recent months, he is perceived as a high value target for the US as drone strikes were launched in an effort to kill al-Awlaki just days after the assault on Bin Laden’s compound in Abbottabad.

What’s the other bump in momentum around late March and early April? The cluster is a series of events and reports related to al-Awlaki urging on the Arab Spring protests against long standing dictatorships in the Middle East claiming that the revolutions were “good for the Muslims, good for the mujahideen and bad for the imperialists of the west and their henchmen in the Muslim world.”

Conclusions

The answer to the question titling this post is not clear, and that may be an indicator in its own way. As Al-Qaeda spread under Bin Laden, its regional factions have become very distinct entities. The public announcement of an individual as the organizational head still seems likely, but the reality may be that multiple players will rise to prominence regionally as an alternative to establishing a “new Bin Laden.” The aforementioned split around al-Zawahiri makes a divided leadership seem an even greater possibility.

One theme that does consistent is the desire from each of these individuals to leverage unrest in the Middle East and North Africa to create a security vacuum in which Al-Qaeda can assume a lasting presence. We previously discussed the failure so far for Al-Qaeda to leverage instability caused by pro-democracy protests, but it seems these prospective leaders have not given up on the potential for an advantage to be taken.

Want to follow the news on these figures? See a live visual of the most recent news for the Al-Qaeda leaders, and set up a Futures email alert (“Create future”) to stay on top of the coverage.


  • Copyright © 1996-2010 Analysis Intelligence. All rights reserved.
    iDream theme by Templates Next | Powered by WordPress