II. Terror Arrests Involving WhatsApp
Numerous terrorist cases worldwide have been found, as Part I of this series highlighted, to have involved the use of WhatsApp in a variety of ways: Imprisoned Jamaican pro-ISIS sheikh Abdullah Al-Faisal – believed to have inspired terrorists ranging from shoe bomber Richard Reid and 9/11 plotter Zacarias Moussaoui to London bombers Muhammad Sidique Khan and Germaine Lindsay and Christmas Day bomber Umar Farouq Abdulmutullab[10] – used it for communicating with his followers.
It has been used by ISIS recruiters, including ISIS cyber terrorist Junnaid Hussain, who used it to recruit young UK Muslims to carry out attacks. Additionally, terrorist Khalid Masood used WhatsApp moments before carrying out his attack outside Houses of Parliament, London; a UK elementary school teacher was arrested and charged for distributing terrorist material via WhatsApp; in a case related to an ISIS training manual including step-by-step methods for recruiting via WhatsApp, a UK and an Australian teen were sent to prison for plotting an ANZAC Day terror attack; and Runa Khan of the UK was sentenced to prison for spreading ISIS ideology online.
UK terror suspect Taha Hussain used WhatsApp to send pro-ISIS and pro-jihad content; terror suspect Arafat Nagi, of Buffalo, NY, was found to have used WhatsApp to plan travel to ISIS territory; ISIS recruiter Mufid Elfgeeh, of Rochester, NY, was found to have communicated with other jihadis using WhatsApp; Heather Elizabeth Coffman, of Virginia, sentenced to prison for attempting to aid ISIS, had communicated with an ISIS facilitator via WhatsApp.
Also, Syria-based Belgian jihadi Abdelhamid Abaaoud, a major figure in the November 2015 Paris attacks, had instructed those he recruited for attacks across in Europe in using WhatsApp and other secure communications; Najim Laachroui, coordinator for November 2015 Paris attacks and a suicide bomber in the March 2016 Brussels attacks, used WhatsApp with his terror cell and with ISIS in Syria; Belgian police arrested terror suspects after infiltrating their communications on WhatsApp; Brazilian authorities arrested 10 members of pro-ISIS groups plotting attacks during the Olympics in Rio de Janeiro via WhatsApp; Israeli police arrested 18 members of a WhatsApp group spreading extremist ideology that had planned that month's stabbing attack outside the Old City of Jerusalem; Malaysian terror suspects were found to have discussed plans for jihad in extremist WhatsApp groups.
In Pakistan and India, Pakistani police arrested men and women recruiting for ISIS found to have been using WhatsApp and in possession of weapons, explosives, and ISIS literature; terror suspects arrested in Kerala State, India, allegedly planned attacks in the country and operated at least two WhatsApp groups with hundreds of members for recruitment to ISIS; and messages from jihadis before they are killed went viral in India, including via WhatsApp.
Since then, terror cases found to involve the use of WhatsApp (see below) in 2020 have included, in April, the arrest of two ISIS supporters in the UK for sending funds to jihadis abroad; in March, the arrest of a suspected handler for Lashkar-e-Taiba and of four members of The Resistance Front, an LeT-linked terrorist group; and in February, a former Uber driver from Luton, UK and a student who was shot dead after stabbing two people in south London.
In November 2019, Indian authorities arrested three suspected ISIS-inspired terrorists who had plotted mass attacks, and a suspect pleaded guilty plea in the Manchester, UK New Year's Eve 2018 stabbing. In October 2019, a father and son in Bali were arrested on suspicion of plotting terror attacks, and a British student was identified as the masked Al-Qaeda operative who delivered a militant speech in Syria in 2013; additionally, three suspects were arrested in India in India in connection with the assassination of a politician. Earlier that year, there was the July 2019 arrest of two Sydney, Australia men over their alleged connection to ISIS plans for a terrorist attack; the May 2019 circulation of photos of alleged ISIS members; Sri Lanka's shutdown of WhatsApp countrywide following the 2019 Easter Sunday 2019 bombings; Turkey's arrest in April 2019 of over 200 ISIS terrorists; the March 2019 arrest in Indonesia of a suspected terrorist; the September 2018 infiltration of a terrorist WhatsApp group in India and the subsequent arrest of a suspect in September 2018; and the January 2018 sentencing of a UK shop assistant in a terror plot.
The following are the details of these cases:
India's National Investigation agency arrested Tania Parvin in Kolkata, on March 20, 2020, for alleged links with Lashkar e-Taiba (LeT) operatives based in Pakistan, and for trying to honey-trap Indian soldiers. According to reports, she was suspected of being a handler for the organization, and to have been associated with it for over two years. She was found to have been part of several WhatsApp groups. LeT is responsible for the 2008 Mumbai terror attack.[xi]
Tania Parvin
ISIS supporters Ayub Nurhussein, of London, and Said Mohammed, of Manchester, were sentenced to prison in April 2020 for sending thousands of pounds to jihadis last year, after failing to travel abroad to fight for ISIS themselves. Their contact in Iraq was an individual known as "Wassim" who is connected to "central figures" in ISIS. Nurhussein was charged with sharing graphic ISIS propaganda via WhatsApp.[xii]
Mohammed and Nurhussein
On March 23, 2020, four terrorists from "The Resistance Front," a new Pakistan-sponsored terror group in Kashmir, which is a front for the terror organization Lashkar-e-Taiba, were arrested and a huge quantity of arms was seized from them. They revealed during interrogation that they had been working under an individual known as "Khan Bilal" on WhatsApp.[xiii]
In February 2020, Mohiussunnath Chowdhury, 28, a former Uber driver from Luton, UK, was convicted of planning to attack tourist hotspots in London, including Madame Tussaud's, the Pride parade, and an open-top tour bus. Previously, in December 2018, he was acquitted in relation to his 2017 attack outside the Queen’s London residence, in which he brandished a three-foot-long sword and shouted "Allahu Akbar." Following his acquittal, he posted online praising martyrdom, prompting an undercover operation by counterterror officials with whom he shared his plans to use guns, knives, or a vehicle in an attack, as well as a graphic execution video via WhatsApp, leading to his conviction.[xiv]
Mohiussunnath Chowdhury
London college student Sudesh Amman, 20, who was shot dead after stabbing two people in south London on February 2, had been under MI5 surveillance since his release days before from prison after serving half of his sentence for possession of ISIS recruitment material and manuals. He had shared this material in a family WhatsApp group called "La Familia" that included his three younger brothers aged between 11 and 15. Photos shared in the group also showed his younger brothers in their bedroom with a black ISIS flag, posing with BB guns, and sitting around a table using the ISIS one-fingered salute. He had sent beheading videos to his girlfriend, saying she should kill her "kuffar" [unbeliever] parents and telling her "If you can't make a bomb because family, friends or spies are watching or suspecting you, take a knife, Molotov, sound bombs or a car at night and attack the tourists (crusaders), police and soldiers of taghut [tyrant], or Western embassies in every country you are in this planet."[xv]
Sudesh Amman
Indian authorities arrested three suspected ISIS-inspired terrorists who had plotted mass attacks in Assam and Delhi on November 25, 2019. Police said that the three, Ranjit Ali, Mukaddir Islam, and Luit Jamel Zaman, had maintained contact with "many suspicious people" and learned to make bombs from content posted on WhatsApp and other platforms.[xvi]
Assam Parliamentary Affairs Minister Chandra Mohan Patowary announces the arrests (Source: News18,com, November 28, 2019)
The following day, on November 26, 2019, Manchester, UK resident Mahdi Mohamud pleaded guilty to stabbing three people, including a police officer, at Manchester Victoria railway station on New Year's Eve 2018. He carried out the attack while shouting "Allahu Akbar" and "Long live the Caliphate." According to authorities, he had downloaded a guide on "the most lethal ways to strike with a knife" and accessed ISIS propaganda as well as speeches by Yemeni-American Al-Qaeda leader Anwar Al-Awlaki. Hours before the attack, he had created a "plan" document, then deleted WhatsApp and other encrypted apps shortly before leaving home to carry out the attack.[xvii]
Immediately after the knife attack. Independent.co.uk, January 1, 2019; Mahdi Mohamud, BBC.com, November 27, 2019.
A father and son were arrested in Bali in October 2019 on suspicion of plotting terror attacks after pledging allegiance to ISIS. The two men are alleged to have had arrows, bayonets, and an airsoft gun to use in the foiled attack. Both were members in the extremist WhatsApp group "Menanti Al Mahdi"; in the group, the father had shared instructions on building bombs and automatic weapons.[8]
Some of the materials found in the home used by the terror suspects
Authorities identified British student Mohammed Yamin using voice recognition technology, in October 2019, as the masked Al-Qaeda operative who delivered a militant speech in Syria in 2013. According to news reports, when he went to Syria he communicated with family members via WhatsApp, telling them he was doing charitable work in the area. Yamin has since returned to the UK.[19]
Mohammed Yamin.
Three suspects were arrested in Uttar Pradesh, India shortly following the October 2019 murder of Indian politician and nationalist Kamlesh Tiwari. However, the Al-Hind Brigade claimed responsibility for the murder, in a WhatsApp message that stated: "Kamlesh Tiwari was a nuisance and whosoever points fingers towards Islam and Muslims, will meet same end. Al-Hind Brigade takes responsibility. Get ready to see more. The war has begun." Previously, in 2017, two ISIS operatives had revealed their plans to kill Tiwari after they were arrested in 2017.[20]
Kamlesh Tiwari
Two Sydney, Australia men were arrested in July 2019 over their alleged connection to plans for a terrorist attack. Authorities said the two, Isaak el Matari and Radwan Dakkak, were ISIS members and were planning attacks. Dakkak was described by police as "prominent in the global online extremist community." El Matari, had been under police surveillance since returning to Sydney from Lebanon in July 2018. Authorities said they would "allege in court that the man was in early-stage preparations and was someone who had expressed intentions to carry out a terrorist attack in Australia." The two men were reported to have made threats about central Sydney locations on WhatsApp.[21]
Isaak el Matari (source: smh.com.au, July 3, 2019)
A photo of three men alleged to be members of ISIS was circulated in May 2019 via WhatsApp, with the claim that they were in the Malaysian state of Sarawak. The post, which went viral, warned the public that they were believed to be either in Sibu or in Bintulu. However, police said that the three suspects had already been arrested and had never been in Sarawak.[22]
The post that was circulated on WhatsApp
Following the massive coordinated Easter Sunday 2019 bombings across Sri Lanka that killed over 300 people and wounded some 500, the Sri Lankan government shut down WhatsApp and other messaging services. Although these attacks had no known links to social media, Sri Lanka has a history of violence incited on these platforms. In the wake of the attack, the U.S. State Department said that terrorist groups "continue plotting possible attacks in Sri Lanka" and could attack "with little or no warning," and escalated its travel advisory level for the country.[23]
At the site of a car bombing in Colombo
Also in April 2019, Turkish media reported that Turkish authorities had captured 238 ISIS terrorists in November 2018 – among them four relatives of ISIS leader Abu Bakr Al-Baghdadi. According to the reports, a YPG/PKK terrorist said that his group and ISIS are allied, and that WhatsApp had been used for encrypted communications.[24]
The Indonesian counterterrorism squad Densus 88 arrested suspected terrorist Riky Gustadi, aka Abu Riky, 26, in March 2019, and seized weapons, in Riau province in Indonesia. The arrest was in connection with a terrorist plot against Indonesian President Joko Widodo set for that month. Abu Riky is believed to have issued an order on WhatsApp to members of a WhatsApp group to carry out the plot. He is also believed to have helped fund a member of a terrorist group; the funds were channeled to the ISIS-linked Jamaah Ansharut Daulah terror group.[25]
It was reported in January 2019 that Indian intelligence agencies had successfully gained access to the WhatsApp account of a Pakistani terrorist by sending him a message with an official-looking heading containing spyware that he opened. He was tracked down from his IP coordinates to a location in southern Jammu and Kashmir, and arrested, in September 2018. Authorities said that this was the first time that Indian experts had managed to circumvent the platform's security settings.[26]
Iftikhar Ali, 19, a Sainsbury's shop assistant from Totteridge, High Wycombe, Bucks, UK, was sentenced in January 2018 to three years and six months in prison. He had been found guilty in December 2017 on 12 counts of transmission of a terrorism publication and an additional count of possession of a document likely to be useful to a person committing or preparing an act of terrorism. Authorities said that between September and October 2015, he had sent several WhatsApp messages glorifying acts of terrorism.[27]
Iftikhar Ali
