Grassroots Militants After the Boston Bombings

Stratfor 2013-04-20

Information continues to emerge on the identity of the two Chechen men who are the primary suspects in the Boston Marathon bombings. Though we emphasize that the bombers' motives have not yet been established and their connection, if any, to a larger group is unknown, their actions are consistent with the broader trend of militant actors shifting to lone wolf-type behavior in contrast to the more centralized militancy seen in years before 9/11. No group has exemplified this shift more than al Qaeda.

Stratfor has repeatedly written about the devolution of al Qaeda from what could be termed "al Qaeda the group" -- a distinct group of individuals with a clear political aim -- to "al Qaeda the movement," a wider network of groups and individuals who have thrown in with al Qaeda's "Jihad against the Jews and Crusaders." The shift, we noted, lends greater geographic and operational reach to the entity or brand name of al Qaeda, but -- as a movement -- also renders it shallower in a sense: The new al Qaeda will lack the operational depth and expertise exhibited by the core group and its well-trained leadership.

In practical terms, this shift has many implications -- one of which will become more evident in an area intelligence professionals refer to as "tradecraft." That's the set of skills needed to conduct clandestine activities in a hostile environment without discovery. Through the years, the jihadists on the whole have exhibited sloppy tradecraft, and we expect that trend will intensify with al Qaeda's further devolution. This should not be taken, in any way, to imply that the ability of the jihadists to cause death and destruction will dwindle or that they can be dismissed as harmless goofs by those with an appreciation of "the craft" -- quite the opposite. It does, however, represent a potential advantage for intelligence and security forces seeking to pre-empt attacks by an amorphous and shadowy enemy.

Intrinsic to this discussion is the shift in the way al Qaeda is making propaganda and tactical guidance available to sympathizers around the world. For decades, militant groups and lone wolves have relied on army field manuals and other printed resources, like the well-known "Anarchist's Cookbook," as sources of technical data. Al Qaeda printed what is known as its "encyclopedia of jihad" -- titled "Military Studies in the Jihad Against the Tyrants" -- in the late 1980s or early 1990s, and of course provided other forms of practical training in physical camps in Afghanistan and Sudan.

Obviously, the Internet has dramatically increased the amount of technical data available to aspiring practitioners of terrorism. There are now thousands of websites that contain how-to information on topics that range from preparing improvised explosive mixtures and timing devices to formulating biological toxins such as ricin. Though in many ways jihadists spurn the corruption and sinfulness they perceive in the modern world, they have been quick to adopt new technologies and adapt them to their cause. This is not as surprising as it might seem when you consider that, by and large, the professional cadre of al Qaeda and its sister organizations, such as Indonesia's Jemaah Islamiyah, are educated men -- many of them with backgrounds in engineering, medicine and other scientific fields that are friendly to innovation and technology. Most notably, Yemen-based al Qaeda in the Arabian Peninsula has published numerous editions of an online magazine called "Inspire" which has specifically urged would-be jihadists to conduct lone wolf attacks and even instructed them on how to build simple explosive devices of the type seen in the Boston attacks.

Frustrated by their inability to conduct spectacular follow-on attacks in the West, the al Qaeda core has embraced this shift toward grassroots action, recognizing simple attacks by grassroots operatives as an effective way to bypass increased security measures.

Technical Education vs. Tradecraft
While some basic skills and concepts -- we will call this "technical information" -- can be learned in a classroom or over the Internet, taking that information and applying it to a real-world situation, particularly in a hostile environment, can be exceedingly difficult. The application often requires subtle and complex skills that are difficult to master simply by reading about them: The behaviors of polished tradecraft are not intuitive, and in fact frequently run counter to human nature. That is why intelligence and security professionals require in-depth training and many hours of practical experience in the field.

Put another way, this is the difference between a brain surgeon who learned everything he knows about his craft from visiting websites, and one who graduated from a prestigious medical school, served internships under the guidance of established surgeons and had successfully completed similar operations. Certainly, not all terrorist operations are as intricate and complex as brain surgery. But they are complicated, and in either case, one minor slip can lead to catastrophic failure.

The technical skills of terrorism (bomb-making, targeting, deployment) are important, but tradecraft -- those subtle skills needed to maintain secrecy and operations in a hostile environment -- is crucial to both the individual jihadist and his network. The craft is equally crucial to intelligence officers, who must be able to operate in similarly hostile environments without detection and to spy on others, while appearing to outside observers to be doing nothing out of the ordinary. For instance, the skills required to run a surveillance detection route without tipping off anyone following that you are trying to flush them out do not come easily. Intelligence agencies spend hundreds of hours on the streets, teaching their officers these skills and critiquing them heavily in real-world practicums.

Poor tradecraft, as history shows, has long been the Achilles' heel of the jihadists and frequently has helped to pre-empt plots. In fact, it could be argued that poor tradecraft has caused the jihadists as much, if not more, grief than have penetrations by the intelligence services that hunt them. This is a weakness that is difficult to overcome with technology: Online training manuals and other instructional materials discuss the importance of surveillance work and even go so far as to tell jihadists what kinds of information to gather, but the texts do not teach how to gather the information without being detected. It is this omission -- this dearth of street skills or tradecraft -- that has produced vulnerabilities in the jihadists' attack cycle.

From 'Dumb and Dumber' to 'Kramer' and 'Ronald McDonald'
The history of the past decade is replete with examples of busted jihadist operations that were triggered by failures in tradecraft.

In September 1992, for example, Ahmed Ajaj attempted to enter the United States on a poorly altered Swedish passport and carrying a suitcase full of bomb-making instructions and other training manuals and videos. Both errors are mistakes that could be expected from a novice. Ajaj, as it happens, was en route from Osama bin Laden's Khaldan training camp alongside Abdel Basit (otherwise known as Ramzi Yousef). Basit also was stopped by an immigration inspector, but requested political asylum and -- as he was not carrying a suitcase full of bomb-making manuals -- he was later released pending a hearing on his asylum claim. (Had he remained in custody, the 1993 World Trade Center bombing would not have been carried out.)

In another case of tradecraft error, Ahmed Ressam -- the would-be millennium bomber -- fell victim to "burn syndrome" while attempting to enter the United States from Canada in December 1999. Ressam completely lost his composure when a U.S. Customs inspector, who was running a routine check of the ferry in which he was traveling, approached him. The Customs inspector had no idea that Ressam was an Islamist militant or that he was in operational mode -- in fact, when he panicked, she assumed he was smuggling drugs rather than explosives.

"Burn syndrome" is a powerful psychological phenomenon that affects everyone conducting a covert activity: It is the irrational fear that a person observing you knows exactly what you are up to. This fear often causes people to make unnatural, frequently unconscious, movements -- making them appear more rather than less suspicious. Thus, learning to fight "burn syndrome" is one of the key elements of tradecraft, and it is impossible to master simply by reading about it.

It is interesting to note that, despite the many tradecraft errors made in the past, the jihadists do not seem to have learned from their mistakes. It seems reasonable to assume that they have studied the report from the 9/11 commission, detailing the errors committed by al Qaeda's hand-picked best of the best prior to hijacking the four aircraft. Those errors -- ranging from Mohammed Atta's citation for driving without a valid license and subsequent failure to appear at a court hearing, to the fact that two operatives (Nawaf al-Hazmi and Khalid al-Midhar) who were known to the CIA as al Qaeda associates actually traveled to the United States under their own names -- were all significant, and any one of them could have been enough to bring down the grand operation. Al-Hazmi and al-Midhar, in fact, were publicly characterized as "Dumb and Dumber" by a flight instructor who said they were "clueless" would-be pilots.

The commission's report on the failure of U.S. intelligence to seize upon and interpret such clues, and others, certainly paints as vivid a picture of the problems plaguing the United States as it does those plaguing al Qaeda. Of the two, al Qaeda's problems conceivably might be easier to address.

Nevertheless, it appears that the jihadists have not done so. It is not clear whether they lack the expertise to make corrections, or the loss of physical training facilities has hurt them considerably. Either way, they continue to make mistakes in tradecraft that have led to the unraveling of numerous jihadist plots since Sept. 11.

It can be easy, on this basis alone, for intelligence agents and security forces to dismiss the threat posed by aspiring jihadists -- and, in fact, many have. Due to the errors in tradecraft (or, occasionally, personal quirks), jihadists frequently are characterized as bumbling fools of some sort or another:

·         Richard Reid, most widely recognized as the "shoe bomber," has been dubbed the "Kramer of al Qaeda" by some in the U.S. government -- a reference to the quirky and clumsy character of "Seinfeld" fame.

·         Haroun Fazul, a key organizer of the 1998 East Africa embassy bombings, reportedly was referred to as "the black Ronald McDonald" by the wife of Osama bin Laden's personal assistant, Wadih el-Hage. April el-Hage said she had always viewed Fazul as "kind of goofy" and found it difficult to believe, as a result, that he could be a terrorist.

·         The FBI had previously investigated the jihadist cell that Abdel Basit linked up with in Brooklyn to conduct the 1993 World Trade Center bombing. The investigation was closed down after the FBI decided the operatives were a bunch of hotheaded "wannabes" who posed no real threat. It was only when operative Mohammed Salameh stumbled into the Ryder rental office looking for the refund of the deposit on the truck used in the bombing that a light went off. Once Salameh was identified, the FBI knew his circle of associates from the earlier investigation and was able to quickly round up the rest of the cell.

·         British authorities investigated Mohammed Siddique Khan, believed to be the ringleader of the July 7 London bombing cell, in 2004 in connection with foiled terrorist plots in the U.K. The MI5 investigation, however, reportedly was terminated after authorities decided he did not pose a direct threat to national security. Thus, the July 7 cell was able to pull off a successful strike, despite notably sloppy security practices surrounding the operation.

·         Faisal Shahzad, a naturalized U.S. citizen of Pakistani descent, attempted to set off a large vehicle-borne improvised explosive device in Times Square on May 1, 2010, but the device failed to detonate due to faulty design.

·         Naser Jason Abdo, a U.S. Army private, planned to attack a restaurant near Fort Hood in Killeen, Texas, but was arrested in July 2011 after an alert employee at a gun store where Abdo allegedly bought materials to make improvised explosive devices noted the man's odd demeanor and called the police. Abdo intended to construct a pressure cooker-type explosive device based on the instructions found in Inspire magazine.


However "goofy," "harmless" or technically inept the operatives might have been, the fact that authorities or associates dismissed the potential threat on that basis had deadly or near-deadly consequences in every case. "Kramer," for example, was able to smuggle a powerful explosive device onto an aircraft after the post-Sept. 11 increase in airline security. Every "black Ronald McDonald" is a cautionary tale to intelligence agencies, for which it is tempting to narrowly focus on the most commonly held concept of what a terrorist operative should look like. Authorities who are looking for the wrong threat -- the fictional "super terrorist" or mythical "masterminds" -- run the chance of missing the real and immediate dangers.

Intensifying Need for Craft
The failures, then -- whether of craft or analysis -- apply to both sides in the jihadist war. Poor craft has compromised more terrorist operations than have been successfully executed by al Qaeda, while technical mistakes have caused others to fail. But authorities in the West have made their own share of deadly mistakes, such as releasing Abdel Basit from custody or underestimating the threat posed by people like Mohamed Salameh and Mohamed Siddique Khan. The old saying that "it is better to be lucky than it is to be good" certainly holds true for the jihadists -- who, after all, only have to be lucky once to achieve significant results.

The decentralization of al Qaeda, and its lack of concrete training camps like those it previously used in Afghanistan, will lead to further declines in tradecraft abilities. We believe this to be the case despite the practical combat training available to jihadists in places like Iraq, Afghanistan and Chechnya, for a variety of reasons.

For one thing, combat experience does not necessarily translate into good tradecraft and street skills. Many of the busted operatives discussed above had combat experience in Afghanistan or Bosnia -- and most of them received "advanced" training at al Qaeda camps in Afghanistan -- but they still made significant tradecraft errors.

Second, the skills that can be learned in insurgency situations have limited value when transferred to other settings. Just as fighting an insurgency is different from fighting a pitched battle or conventional war, it also different from conducting clandestine operations in a hostile environment, far from your base of support. The technical skills required to operate a rocket-propelled grenade or mortar system in hit-and-run attacks in Afghanistan or to function as a sniper in Ar Ramadi are very different from the skills needed to plan and execute a terrorist attack in New York or London.

Amid the chaos in combat zones like Afghanistan and Iraq, there are networks of local contacts that help to funnel militant jihadists and resources into the battle. The network provides arms, targeting guidance, intelligence and security functions for the militants. Thus, the individual militants do not need to learn or develop the skills to operate like a traditional "sleeper agent."

The network that provides men and money to fight in places like Iraq and Afghanistan traditionally has extended into the United States, Europe, Saudi Arabia and elsewhere. Obviously, since Sept. 11, tremendous efforts have been made to disrupt that network in the West -- with nearly daily reports emanating from Spain, Italy, France and other countries, pointing to arrests of people suspected of coordinating the flow of jihadists to Iraq.

We believe that the disruption of this network has been a major factor in preventing al Qaeda from completing a follow-on strike on U.S. soil, and that ongoing counterterrorism operations will continue to make it difficult for professional terrorist operatives to operate in the West. By that same measure, these efforts will force al Qaeda and like-minded groups to focus on radicalizing and equipping grassroots operatives living in the West.

Courtesy : Stratfor (www.stratfor.com)