Global Security and Intel Brief
A Counterintelligence Approach to Controlling Cartel Corruption
Rey Guerra, the former sheriff of Starr County, Texas, pleaded guilty May 1 to a narcotics conspiracy charge in federal district court in McAllen, Texas. Guerra admitted to using information obtained in his official capacity to help a friend (a Mexican drug trafficker allegedly associated with Los Zetas) evade U.S. counternarcotics efforts. On at least one occasion, Guerra also attempted to learn the identity of a confidential informant who had provided authorities with information regarding cartel operations so he could pass it to his cartel contact.
In addition to providing intelligence to Los Zetas, Guerra also reportedly helped steer investigations away from people and facilities associated with Los Zetas. He also sought to block progress on investigations into arrested individuals associated with Los Zetas to protect other members associated with the organization. Guerra is scheduled for sentencing July 29; he faces 10 years to life imprisonment, fines of up to $4 million and five years of supervised release.
Guerra is just one of a growing number of officials on the U.S. side of the border who have been recruited as agents for Mexico’s powerful and sophisticated drug cartels. Indeed, when one examines the reach and scope of the Mexican cartels’ efforts to recruit agents inside the United States to provide intelligence and act on the cartels’ behalf, it becomes apparent that the cartels have demonstrated the ability to operate more like a foreign intelligence service than a traditional criminal organization.
Fluidity and Flexibility
For many years now, STRATFOR has followed developments along the U.S.-Mexican border and has studied the dynamics of the cross-border illicit flow of people, drugs, weapons and cash.
One of the most notable characteristics about this flow of contraband is its flexibility. When smugglers encounter an obstacle to the flow of their product, they find ways to avoid it. For example, as we’ve previously discussed in the case of the extensive border fence in the San Diego sector, drug traffickers and human smugglers diverted a good portion of their volume around the wall to the Tucson sector; they even created an extensive network of tunnels under the fence to keep their contraband (and profits) flowing.
Likewise, as maritime and air interdiction efforts between South America and Mexico have become more successful, Central America has become increasingly important to the flow of narcotics from South America to the United States. This reflects how the drug-trafficking organizations have adjusted their method of shipment and their trafficking routes to avoid interdiction efforts and maintain the northward flow of narcotics.
Over the past few years, a great deal of public and government attention has focused on the U.S.-Mexican border. In response to this attention, the federal and border state governments in the United States have erected more barriers, installed an array of cameras and sensors and increased the manpower committed to securing the border. While these efforts certainly have not hermetically sealed the border, they do appear to be having some impact — an impact magnified by the effectiveness of interdiction efforts elsewhere along the narcotics supply chain.
According to the most recent statistics from the Drug Enforcement Administration, from January 2007 through September 2008 the price per pure gram of cocaine increased 89.1 percent, or from $96.61 to $182.73, while the purity of cocaine seized on the street decreased 31.3 percent, dropping from 67 percent pure cocaine to 46 percent pure cocaine. Recent anecdotal reports from law enforcement sources indicate that cocaine prices have remained high, and that the purity of cocaine on the street has remained poor.
Overcoming Human Obstacles
In another interesting trend that has emerged over the past few years, as border security has tightened and as the flow of narcotics has been impeded, the number of U.S. border enforcement officers arrested on charges of corruption has increased notably. This increased corruption represents a logical outcome of the fluidity of the flow of contraband. As the obstacles posed by border enforcement have become more daunting, people have become the weak link in the enforcement system. In some ways, people are like tunnels under the border wall — i.e., channels employed by the traffickers to help their goods get to market.
From the Mexican cartels’ point of view, it is cheaper to pay an official several thousand dollars to allow a load of narcotics to pass by than it is to risk having the shipment seized. Such bribes are simply part of the cost of doing business — and in the big picture, even a low-level local agent can be an incredible bargain.
According to U.S. Customs and Border Protection (CBP), 21 CBP officers were arrested on corruption charges during the fiscal year that ended in September 2008, as opposed to only 4 in the preceding fiscal year. In the current fiscal year (since Oct. 1), 14 have been arrested. And the problem with corruption extends further than just customs or border patrol officers. In recent years, police officers, state troopers, county sheriffs, National Guard members, judges, prosecutors, deputy U.S. marshals and even the FBI special agent in charge of the El Paso office have been linked to Mexican drug-trafficking organizations. Significantly, the cases being prosecuted against these public officials of all stripes are just the tip of the iceberg. The underlying problem of corruption is much greater.
A major challenge to addressing the issue of border corruption is the large number of jurisdictions along the border, along with the reality that corruption occurs at the local, state and federal levels across those jurisdictions. Though this makes it very difficult to gather data relating to the total number of corruption investigations conducted, sources tell us that while corruption has always been a problem along the border, the problem has ballooned in recent years — and the number of corruption cases has increased dramatically.
In addition to the complexity brought about by the multiple jurisdictions, agencies and levels of government involved, there simply is not one single agency that can be tasked with taking care of the corruption problem. It is just too big and too wide. Even the FBI, which has national jurisdiction and a mandate to investigate public corruption cases, cannot step in and clean up all the corruption. The FBI already is being stretched thin with its other responsibilities, like counterterrorism, foreign counterintelligence, financial fraud and bank robbery. The FBI thus does not even have the capacity to investigate every allegation of corruption at the federal level, much less at the state and local levels. Limited resources require the agency to be very selective about the cases it decides to investigate. Given that there is no real central clearinghouse for corruption cases, most allegations of corruption are investigated by a wide array of internal affairs units and other agencies at the federal, state and local levels.
Any time there is such a mixture of agencies involved in the investigation of a specific type of crime, there is often bureaucratic friction, and there are almost always problems with information sharing. This means that pieces of information and investigative leads developed in the investigation of some of these cases are not shared with the appropriate agencies. To overcome this information sharing problem, the FBI has established six Border Corruption Task Forces designed to bring local, state and federal officers together to focus on corruption tied to the U.S.-Mexican border, but these task forces have not yet been able to solve the complex problem of coordination.
Sophisticated Spotting
Efforts to corrupt officials along the U.S.-Mexican border are very organized and very focused, something that is critical to understanding the public corruption issue along the border. Some of the Mexican cartels have a long history of successfully corrupting public officials on both sides of the border. Groups like the Beltran Leyva Organization (BLO) have successfully recruited scores of intelligence assets and agents of influence at the local, state and even federal levels of the Mexican government. They even have enjoyed significant success in recruiting agents in elite units such as the anti-organized crime unit (SIEDO) of the Office of the Mexican Attorney General (PGR). The BLO also has recruited Mexican employees working for the U.S. Embassy in Mexico City, and even allegedly owned Mexico’s former drug czar, Noe Ramirez Mandujano, who reportedly was receiving $450,000 a month from the organization.
In fact, the sophistication of these groups means they use methods more akin to the intelligence recruitment processes used by foreign intelligence services than those normally associated with a criminal organization. The cartels are known to conduct extensive surveillance and background checks on potential targets to determine how to best pitch to them. Like the spotting methods used by intelligence agencies, the surveillance conducted by the cartels on potential targets is designed to glean as many details about the target as possible, including where they live, what vehicles they drive, who their family members are, their financial needs and their peccadilloes.
Historically, many foreign intelligence services are known to use ethnicity in their favor, heavily targeting persons sharing an ethnic background found in the foreign country. Foreign services also are known to use relatives of the target living in the foreign country to their advantage. Mexican cartels use these same tools. They tend to target Hispanic officers and often use family members living in Mexico as recruiting levers. For example, Luis Francisco Alarid, who had been a CBP officer at the Otay Mesa, Calif., port of entry, was sentenced to 84 months in federal prison in February for his participation in a conspiracy to smuggle illegal aliens and marijuana into the United States. One of the people Alarid admitted to conspiring with was his uncle, who drove a van loaded with marijuana and illegal aliens through a border checkpoint manned by Alarid.
Like family spy rings (such as the Cold War spy ring run by John Walker), there also have been family border corruption rings. Raul Villarreal and his brother, Fidel, both former CBP agents in San Diego, were arraigned March 16 after fleeing the United States in 2006 after learning they were being investigated for corruption. The pair was captured in Mexico in October 2008 and extradited back to the United States.
‘Plata o Sexo’
When discussing human intelligence recruiting, it is not uncommon to refer to the old cold war acronym MICE (money, ideology, compromise and ego) to explain the approach used to recruit an agent. When discussing corruption in Mexico, people often repeat the phrase “plata o plomo,” Spanish for “money or lead” — meaning “take the money or we’ll kill you.” However, in most border corruption cases involving American officials, the threat of plomo is not as powerful as it is inside Mexico. Although some officials charged with corruption have claimed as a defense that they were intimidated into behaving corruptly, juries have rejected these arguments. This dynamic could change if the Mexican cartels begin to target officers in the United States for assassination as they have in Mexico.
With plomo an empty threat north of the border, plata has become the primary motivation for corruption along the Mexican border. In fact, good old greed — the M in MICE — has always been the most common motivation for Americans recruited by foreign intelligence services. The runner-up, which supplants plomo in the recruitment equation inside the United Sates, is “sexo,” aka “sex.” Sex, an age-old espionage recruitment tool that fits under the compromise section of MICE, has been seen in high-profile espionage cases, including the one involving the Marine security guards at the U.S Embassy in Moscow. Using sex to recruit an agent is often referred to as setting a “honey trap.” Sex can be used in two ways. First, it can be used as a simple payment for services rendered. Second, it can be used as a means to blackmail the agent. (The two techniques can be used in tandem.)
It is not at all uncommon for border officials to be offered sex in return for allowing illegal aliens or drugs to enter the country, or for drug-trafficking organizations to use attractive agents to seduce and then recruit officers. Several officials have been convicted in such cases. For example, in March 2007, CBP inspection officer Richard Elizalda, who had worked at the San Ysidro, Calif., port of entry, was sentenced to 57 months in prison for conspiring with his lover, alien smuggler Raquel Arin, to let the organization she worked for bring illegal aliens through his inspection lane. Elizalda also accepted cash for his efforts — much of which he allegedly spent on gifts for Arin — so in reality, Elizalda was a case of “plata y sexo” rather than an either-or deal.
Corruption Cases Handled Differently
When the U.S. government hires an employee who has family members living in a place like Beijing or Moscow, the background investigation for that employee is pursued with far more interest than if the employee has relatives in Ciudad Juarez or Tijuana. Mexico traditionally has not been seen as a foreign counterintelligence threat, even though it has long been recognized that many countries, like Russia, are very active in their efforts to target the United States from Mexico. Indeed, during the Cold War, the KGB’s largest rezidentura (the equivalent of a CIA station) was located in Mexico City.
Employees with connections to Mexico frequently have not been that well vetted, period. In one well-publicized incident, the Border Patrol hired an illegal immigrant who was later arrested for alien smuggling. In July 2006, U.S. Border Patrol agent Oscar Ortiz was sentenced to 60 months in prison after admitting to smuggling more than 100 illegal immigrants into the United States. After his arrest, investigators learned that Ortiz was an illegal immigrant himself who had used a counterfeit birth certificate when he was hired. Ironically, Ortiz also had been arrested for attempting to smuggle two illegal immigrants into the United States shortly before being hired by the Border Patrol. (He was never charged for that attempt.)
From an investigative perspective, corruption cases tend to be handled more as one-off cases, and they do not normally receive the same sort of extensive investigation into the suspect’s friends and associates that would be conducted in a foreign counterintelligence case. In other words, if a U.S. government employee is recruited by the Chinese or Russian intelligence service, the investigation receives far more energy — and the suspect’s circle of friends, relatives and associates receives far more scrutiny — than if he is recruited by a Mexican cartel.
In espionage cases, there is also an extensive damage assessment investigation conducted to ensure that all the information the suspect could have divulged is identified, along with the identities of any other people the suspect could have helped his handler recruit. Additionally, after-action reviews are conducted to determine how the suspect was recruited, how he was handled and how he could have been uncovered earlier. The results of these reviews are then used to help shape future counterintelligence investigative efforts. They are also used in the preparation of defensive counterintelligence briefings to educate other employees and help protect them from being recruited.
This differences in urgency and scope between the two types of investigations is driven by the perception that the damage to national security is greater if an official is recruited by a foreign intelligence agency than if he is recruited by a criminal organization. That assessment may need to be re-examined, given that the Mexican cartels are criminal organizations with the proven sophistication to recruit U.S. officials at all levels of government — and that this has allowed them to move whomever and whatever they wish into the United States.
The problem of public corruption is very widespread, and to approach corruption cases in a manner similar to foreign counterintelligence cases would require a large commitment of investigative, prosecutorial and defensive resources. But the threat posed by the Mexican cartels is different than that posed by traditional criminal organizations, meaning that countering it will require a nontraditional approach
Limits to Exporting the Saudis’ Counterjihadist Successes
By Kamran Bokhari
The Kingdom of Saudi Arabia historically has played a major role in the development of jihadism. Key pillars of the Saudi state — oil, Wahhabism (a conservative form of Sunni Islam) and the strength of tribal norms — were instrumental in facilitating the rise of Islamist extremism and terrorism around the world prior to 9/11. These same pillars allowed Riyadh to contain al Qaeda within Saudi Arabia in the wake of the insurgency that kicked off in the kingdom in 2003-2004. After this success on the home front, Riyadh is still using these pillars to play an international role in counterjihadist efforts — a role welcomed by the United States.
During a visit to the kingdom last week, U.S. Defense Secretary Robert Gates said the Saudi rehabilitation program for former militants impressed him, prompting him to consider sending Yemeni detainees at Guantanamo Bay to Saudi Arabia as part of Washington’s efforts to close down the detention center. The Saudis probably have done “as good, if not a better, job of that than almost anybody,” Gates said of the Saudi program. In separate comments, Gates called on Riyadh to assist Pakistan in the latter’s efforts to combat its rapidly expanding Taliban insurgency — and Saudi Arabia in fact has been playing a role in efforts to contain the Taliban insurgency in both Pakistan and Afghanistan for some time.
Clearly, Saudi Arabia is taking a lead role in anti-extremism, counterterrorism and deradicalization efforts. Understanding what the Saudis are doing and how it has permitted them to succeed in this regard will shed light on Riyadh’s domestic successes, and it will indicate what can be expected from its efforts abroad.
Saudi Domestic Counterjihadist Successes
The Saudis have had ample experience in dealing with religious extremists and militants since long before their struggle with al Qaeda in the Arabian Peninsula in the aftermath of 9/11. The kingdom’s founder, King Abdel-Aziz, faced a situation similar to that now faced by Pakistan before he defeated the Ikhwan in the 1920s. The Ikhwan (not to be confused with the Egyptian group Ikhwan al-Muslimeen, which is Arabic for “Muslim Brotherhood”) was a tribal religious militia of extremist Wahhabis. Whereas the Pakistanis have nurtured jihadist groups as tools of foreign policy in their dealings with India and Afghanistan, the Ikhwan helped Abdel-Aziz conquer most of present-day Saudi Arabia.
While Abdel-Aziz was not interested in conquering additional territories, the Ikhwan had larger regional ambitions. The group wanted to expand its jihad into places like Iraq, which the British then controlled. Just as Pakistan has found itself caught between its Islamist militant assets and the United States in the aftermath of 9/11, the nascent kingdom had to decide between the Ikhwan and its first Great Power ally, the United Kingdom. Exigencies forced Abdel-Aziz to choose the British, and he put down a subsequent Ikhwan rebellion.
Petrodollars
Notably, this all occurred before the discovery of oil and Saudi Arabia’s subsequent emergence as a petrodollar-rich monarchy (and for that matter, even before the state was known as the “Kingdom of Saudi Arabia”). While the Saudis did not have their present financial resources, they did have one very important tool they wielded successfully against the Ikhwan threat. That tool was religion, which had become a key part of the fabric of the Saudi state since its first incarnation in the mid-1700s. Religion mixed in with a culture based on strong elements of tribalism and familism provided for a strong social contract involving the Saudi royal family, the family of Muhammad bin Abdel-Wahhab (founder of the Wahhabi school of thought) and the masses.
This historic Saudi-Wahhabi alliance has long provided the state with religious legitimacy, which the royal family has used to put down religious dissent on a number of occasions since the Ikhwan uprising. Key among them were the 1979 incident in which a group of Wahhabi militants took over the Kaaba, the dissent within the religious establishment in the aftermath of the 1990-1991 Gulf War, and the 2003-2004 al Qaeda insurgency. The use of religion to consolidate national power has led to a significant blowback, as evident from the global emergence of violent Islamism. But unlike other states, Saudi Arabia has been able to mobilize the tribal, religious, security and commercial spheres of the country against Islamist rebels.
Religion and Tribalism
The secret to the Saudis’ success was turning the rebels’ strongest weapon, religion, back against them. This was possible because the state enjoyed a monopoly over religious discourse thanks to the vast religious establishment that Riyadh had cultivated over the years. Paradoxically, while this religious establishment has been the source of much radicalism in Saudi Arabia and worldwide, it also has served the Saudis well in terms of giving the state a powerful tool with which to quell dissent and preserve the regime.
The tribal nature of Saudi society, with its norms of obedience to those in authority, complemented the state’s religious tools. The Saudi ulema supported by the tribes have laid great emphasis on Quranic notions of obedience to rulers as long as the rulers do not clearly defy Islam. Another important tribal and religious concept is abhorrence of social chaos, which also helped the Saudis isolate the Islamist rebels from the rest of society by arguing that jihadist activity would lead to anarchy.
Tribal social structure imposes a hierarchy that forms a strong bulwark against rebellions by forcing conformity upon the tribes, clans and families. This limits the social space available for rebels to operate in. Tribes cooperate with the authorities in taking action against belligerents, and then they also take responsibility for the “good behavior” of repentant militants.
The power of the tribal norm is such that it is very unlikely that militants could influence enough tribes to mount a successful uprising. The Saudis have had some two-and-a-half centuries’ worth of experience at skillfully managing tribal politics. The rise and fall of the first (1744-1818) and second (1824-1891) Saudi states and the establishment of the modern kingdom in the early 1900s were to a great degree a function of the ruling al-Saud family’s ability to forge tribal alliances.
Prior to 9/11, one Saudi strategy for dealing with products of the Wahhabi establishment who exhibited levels of extremism deemed intolerable involved directing the radicals to fight in war zones like Afghanistan, Central Asia, the Balkans and the Caucasus. This maintained order and security while the rebels were away (and in many cases the radicals died in the fighting). Even after 9/11 — and particularly in the wake of the 2003 U.S. invasion of Iraq — the Saudis employed this approach to defuse domestic tensions and to try to contain increasing Iranian influence in Iraq and the rise of Tehran’s Iraqi Shiite allies.
But U.S.-Saudi tensions in the aftermath of 9/11 reached a point where Riyadh knew this was no longer an option. Consequently, under the guidance of King Abdullah, the kingdom embarked upon a strategy of permanently dealing with the issue through reforms at the governmental and societal levels, a process that is still very much a work in progress. The aim was to curb further extremism, as well as to address existing radicalism.
High oil prices, which lasted until July 2008, gave the country the financial wherewithal to invest in such a major anti-jihadist initiative. But without a powerful religious establishment at its side, the money alone would not have permitted the Saudis to succeed. This religious establishment has played a key role in the country’s rehabilitation program, which is designed to integrate militants who have surrendered or been captured back into society. While financial resources have played a critical role in efforts to bring previously radicalized youths back into the mainstream, the scholars have provided the theological gravitas to counter the jihadist ideology and wean the youths from jihadism.
As mentioned, the process is still in its infancy, and incidents of recidivism have occurred. For example, Said Ali al-Shihri emerged in Yemen as a key leader of the jihadist node on the Arabian Peninsula after undergoing the rehab program. Still, the Saudis’ ability to put a major dent in the capabilities of jihadists in the kingdom and to avoid major backlash to the reform process highlights Riyadh’s successful use of religion to curb extremism.
The jihadist threat within the kingdom remains, but a combination of unique circumstances enabled Saudi Arabia to make considerable progress on the home front. Fears still exist that because of the ultraconservative religious nature of the state, the monarchy might fall and be replaced by a radical regime — especially as the kingdom enters an extended period of transition. But for now, the Saudi situation is stable to the point where the Saudis can look beyond their borders and offer help to other jihadist trouble spots.
Replicating Saudi Counterjihadist Successes
Saudi Arabia’s counterjihadist successes and position as a religious and financial leader of the Islamic world have prompted the United States and countries like Yemen, Afghanistan and Pakistan to seek Riyadh’s help with jihadist problems.
Yemen
The first such place to do so is just south of the Saudi border. Yemen has become a jihadist hub where Saudi jihadists have regrouped along with their counterparts from Iraq, Somalia and elsewhere under new management. The country also faces other forms of unrest and insecurity that are weakening the state and raising fears of regional instability among Yemen’s wealthier Arab neighbors. For example, Yemen’s north-south divide is re-emerging, meaning that there are two competing nationalisms in the country. As a result, Sanaa and Riyadh have moved toward greater cooperation, especially on the issue of the jihadists; the Saudis can offer financial assistance and advice to the cash-strapped Yemenis regarding the Saudi rehabilitation program.
But unlike Saudi Arabia, where the Saudis have the upper hand in the relationship with the religious establishment, the Yemeni state is dependent upon its religious leaders and upon the Salafist-jihadists who dominate the country’s security establishment. Moreover, Yemen is not as religiously homogenous as Saudi Arabia. While in Saudi Arabia, the religious establishment was strong enough to claim the mantle of Wahhabism and isolate the jihadists as “deviants,” Yemen would have to develop an alternative religious discourse to successfully counter the theological challenge posed by the jihadists. Engendering a mainstream national religious identity takes a long time even for those states endowed with resources, which means there are serious limitations on how far Yemen can expect to succeed in anti-extremism and counterterrorism efforts.
Like Saudi Arabia, Yemeni society is also tribal, but it is much more fragmented than that of its richer, larger neighbor. Unlike Saudi Arabia, where the House of al-Saud sits at the top of the tribal hierarchy, Yemeni tribes are neither as strong nor as organized. Moreover, the Yemeni state is dependent upon the tribes for support — explaining why Saana’s bid to win tribal assistance in dealing with militants has not attained the desired results.
The huge differences in economic conditions, religious hierarchy and tribal structures between Saudi Arabia and Yemen accordingly will make it difficult for Riyadh to reproduce in its southern neighbor the successful results it has enjoyed at home.
Afghanistan and Pakistan
Saudi Arabia enjoys a disproportionate amount of influence over both Pakistan and Afghanistan. For example, Saudi intelligence chief Prince Muqrin has recently been involved in efforts to negotiate with the Afghan Taliban. Likewise, the Pakistani interior minister and the two most senior generals of the Pakistani military have made trips in recent months to the kingdom — most likely not just for monetary assistance, but also to benefit from the Saudi experience in dealing with the Taliban problem.
Ground realities in Afghanistan and Pakistan make these states much more difficult nuts to crack than even Yemen, which shares some basic social similarities with Saudi Arabia. The security situations in Afghanistan and Pakistan are in advanced stages of deterioration (though to different degrees). Both South Asian neighbors face full-blown insurgencies, making it difficult for the respective states to maintain their writ in the affected areas. This is quite different from anything Saudi Arabia has ever faced, and it also is different from Yemen, where the jihadists have not transformed themselves into a guerrilla movement.
On the religious front, Afghanistan and Pakistan lack religious establishments. Instead, they both have highly fragmented religious landscapes consisting of rival Islamist groups, competing Sunni sects and networks of madrassas. Even the two countries’ more mainstream ulema are divided into various groups. Unlike in Saudi Arabia and (to a lesser degree) Yemen, only a tiny minority adheres to Salafist/Wahhabi Islam in Southwest Asia. Even so, the Deobandis (the sect of the Taliban and other Islamist militant groups) are a growing movement, posing a challenge to the Shia and the majority Barelvis (a South Asian form of Sufi Islam).
On the social level, while tribes exist in both South Asian states, they are very weak compared to the Arab states in question. In Afghanistan, the tribal hierarchy is almost nonexistent in terms of being able to project power because of the rise of the mullahs and militia commanders. In Pakistan, the tribes are limited to Pashtun areas, and even there the mullahs and militiamen have significantly degraded the power of the tribal maliks.
These factors place significant limits on how much the Saudis can assist Islamabad or Kabul in their respective counterinsurgency efforts and anti-extremism drives.
For these reasons, the Saudis have focused on trying to broker talks between the Taliban and the Western-backed Karzai regime in Afghanistan. Even on this issue, Riyadh is not having much luck, because the Taliban elements it has been dealing with thus far have been former leaders of the movement, while current Taliban chief Mullah Muhammad Omar and his associates have rejected the idea of talks because they feel they have the upper hand in the insurgency and do not see the West as “staying the course” in their country.
Meanwhile, in Pakistan the Saudis have been focused on efforts to create a consensus among various stakeholders on how to deal with the militancy. Riyadh maintains strong ties with Pakistan, especially with the military establishment and right-of-center forces, particularly the Pakistan Muslim League-Nawaz of former Prime Minister Nawaz Sharif, as well as with several of the country’s Islamist political parties. As a result, the Saudis may be able to use their financial and energy clout to get the religiously and socially conservative forces in Pakistan to agree to support a major state initiative to contain the violence. But in sharp contrast to the way Riyadh took a focused approach to its own Islamist rebels, Islamabad lacks coherence.
Therefore, given the social fragmentation and complexities of the two South Asian states, the Saudis will not be able to help either Afghanistan or Pakistan much in terms of bringing down the violence those countries face. It can, however, assist in curbing religious extremism by undermining jihadists, given the ideological proximity of the Deobandis and the Wahhabis. But since the Saudis are still working on the ideological front through rehabilitation at home, it will be awhile before they can help others.
Saudi Arabia’s successes in rolling back religious radicalism at home are the result of the confluence of certain unique circumstances that simply do not exist in more troubling jihadist hot spots like Yemen, Afghanistan and Pakistan. The Saudi example thus offers few lessons for Sanaa, Kabul and Islamabad in dealing with their own situations. Ultimately, while the Saudis will be able to play an important role in providing financial assistance and some help in ideologically undermining Islamist extremism and radicalism, they will be able to do less on the physical battlefield.
The Conflict in Sri Lanka: A Cornered Tiger Is Still Deadly
Sri Lankan Prime Minister Ratnasiri Wickremanayake told parliament May 5 that he believes Liberation Tigers of Tamil Eelam leader Velupillai Prabhakaran is among the large group of Tiger militants trapped in a 4-square kilometer coastline area near Mullaitivu. The area around Mullaitivu has been the final focal point of a recent larger government military offensive aimed at restoring government control of northeast Sri Lanka and crushing the South Asian country’s separatist rebels, who have controlled large parts of the region for the past several years.
The Tigers’ battlefield losses have been compounded by the severe disruption to their formerly extensive financial network (primarily concentrated among the Tamil diaspora in Western Europe and Canada) after the European Union placed the group on its terror list in 2006. This led to tightened sanctions by Europe, the United States and Canada against the Tigers, as well as greater international cooperation in arresting Tiger smuggling rings. Some of the Tigers’ main financiers have since been arrested, and many of their assets have been frozen. It takes a lot of money and equipment to wage a conventional war, and those resources have become far harder for the Tigers to come by of late.
As STRATFOR has previously noted, if Sri Lankan troops manage to crush the remnants of the Tigers’ hard-pressed conventional military forces, the Tigers will have little choice but to give up on conventional warfare (at least for the time being). But the Tigers’ separatist struggle is more than 30 years old and has been marked by great brutality on both sides. Because of this, there is very little chance the Tigers will simply accept defeat and fade into history. Instead, now that the government has the military advantage, the Tigers can be expected to continue their war against the government by melting back into the populace and resorting to guerrilla tactics and terrorism.
In many ways, this will resemble events in Iraq and Afghanistan, where a militarily weaker force melted away in the face of a more powerful conventional military force. The Tigers, however, have a far more experienced and effective terrorist apparatus than either their Taliban or Iraqi counterparts. This struggle will therefore remain bloody in Sri Lanka (and perhaps even abroad).
Background
The Tigers are battling for the creation of an independent Tamil homeland for the country’s 10-15 percent Tamil minority, the dominant ethnicity in northern and eastern Sri Lanka. The Tigers are struggling against the majority Sinhalese Buddhist-controlled government, which has fought the Tigers in a bloody civil war that has lasted nearly three and a half decades. Over the decades, the Tigers have developed an extremely sophisticated paramilitary organization. This force consists of not only ground forces (complete with artillery and even some armor), but also a sea wing that engages in arms smuggling and naval attacks against the Sri Lankan Navy — to include suicide boat attacks — a small air wing, and an elite force of militants trained to conduct assassinations and terrorist attacks known as the Black Tigers.
The Black Tigers became famous for suicide bombings (one of which killed former Indian Prime Minister Rajiv Gandhi in 1991), and we are hard-pressed to think of another militant group that has assassinated as many VIPs, including several Cabinet ministers and numerous members of parliament, as have the Black Tigers. Last year alone, they killed a Sri Lankan member of parliament on Jan. 1, the minister for nation building on Jan. 8, and the highway minister on April 7. They also killed the Sri Lankan foreign minister in August 2005.
The Tigers’ fortunes have fluctuated over the years. Several times they have brought large swathes of northern and eastern Sri Lanka under their exclusive control, only to lose them to government offensives, such as an offensive launched in January 2001. As mentioned, international pressures on their finances and logistics in recent years, plus the loss of the strategically significant Elephant Pass in January — formerly a key logistics hub for their resupply efforts and an important base for their naval efforts — mean the Tigers are now in an uphill battle for survival. Compounding the Tigers’ woes, the government now is far better prepared, equipped and trained than it has been during previous military offensives. But despite being so hard-pressed and having taken such significant losses, there are no signs that the Tigers have lost the will to fight. They continue to hold out rather than surrender, and we have not seen news of desertions.
The Tigers’ material losses will be more difficult to overcome than their loss of personnel. They should be able to find new volunteers (or conscripts) among Sri Lanka’s Tamil population. Their ability to recruit should be aided by the Sri Lankan military’s policy of forcing Tamils into internment camps, something the Tigers also have leapt on as an international propaganda opportunity. Tiger militants are well-trained and are also subject to rigorous political indoctrination. With rare exception, the Tigers prefer to fight — or take their standard-issue cyanide capsules — and die rather than surrender.
This willingness for self-sacrifice is best seen in the Black Tigers, which were early adopters of suicide bombing attacks and have been among the most frequent users of the tactic. The Black Tigers also have employed more female suicide bombers than any other group. (They used a female suicide operative in the Rajiv Gandhi assassination.) The Black Tigers reportedly have a waiting list of militants seeking to enter the unit — suicide bombers reportedly are held in almost mythical esteem by their ordinary Tiger colleagues — and Prabhakaran reportedly handpicks each member.
Insurgency and Terror
As seen from Iraq, Afghanistan and any number of historical examples, it is very difficult to eradicate an insurgency that can blend in with a sympathetic local population. Doing so is even harder when the insurgents can exploit international borders to create a place of refuge. Although Sri Lanka is an island, it is located very close to the coast of India. It lies just a few miles from the Indian state of Tamil Nadu, an Indian state that, as its name implies, has a substantial ethnic Tamil population. Some Indian Tamils are sympathetic to the Tigers, and the Tigers have established a sizable presence in Tamil Nadu.
Sympathy in Tamil Nadu for the Tigers came into view May 5, 2009, when a large group of pro-Tiger Indian Tamil activists blocked a convoy of Indian army trucks in the city of Coimbatore because they believed the trucks were carrying supplies destined for the Sri Lankan military. The activists reportedly damaged and ransacked some of the trucks.
Support in Tamil Nadu means that the Tigers can — and do — exploit the international border to their advantage. The Tigers use India in much the same way that the Taliban and al Qaeda use Pakistan. The Tigers’ logistical and training infrastructure in India is especially important during times (like the present) when the Sri Lankan government is hammering them. The Tigers also have a long history of working with an array of other militant groups in India and the general region. This cooperation is not based on ideology, but rather on mutual benefit, such as bolstering the groups’ ability to smuggle weapons and other goods.
Another truism about insurgency is that it takes far fewer resources to sustain an insurgency than it does to fight a conventional war. The amount of ordnance expended in a single conventional battle can sustain months or even years of insurgent activity, especially if the insurgents can acquire ordnance from their enemy during their operations. Conducting terrorist attacks requires even fewer resources than insurgent attacks; terrorism is a cheap and time-tested means of hitting a militarily superior foe. When properly conducted, terrorist attacks are the ultimate exercise of asymmetrical warfare.
For a militant group to effectively wield terrorism as an asymmetrical weapon, however, it must gain mastery of a range of tactical skills that we refer to as terrorist tradecraft. These skills include, among other things, the ability to operate without being detected, the ability to collect intelligence on potential targets, the ability to procure munitions, the ability to recruit operatives, the ability to plan effective strikes and the ability to construct reliable improvised explosives devices (IEDs).
Through decades of trial and error, the Tigers have developed all of these skills, as evidenced by their large number of successful assassinations. In fact, they have a record of tactical success that would make any jihadist group green with envy. The Tigers excel at collecting intelligence, and their female operatives form a significant part of their intelligence apparatus, since they generally can travel more widely than males can and do not tend to arouse suspicions to the extent male operatives do. Female Tigers who are already willing to serve as suicide bombers not surprisingly have been willing to use seduction to obtain information critical to their cause.
The group has also long demonstrated the ability to operate in the Sri Lankan capital, Colombo, as well as in other non-Tamil majority areas. And it has conducted scores of attacks against military, financial and political targets and civilian soft targets in non-Tamil areas. The group conducted five suicide bombings in Colombo alone in 2008, and several attacks against soft targets like passenger buses and commuter trains. The group also has a cadre of very polished and experienced bombmakers who make reliable and effective IEDs.
Perhaps most spectacularly, the Tiger air wing launched a 9/11-inspired airborne suicide attack Feb. 20, in which their two remaining aircraft were loaded with explosives and sent out after dark on a suicide mission to attack Colombo. One of the planes was shot down, but the other plane reached the capital and struck the 12th floor of the 15-floor Inland Revenue Department, where it exploded — a scene captured by a Sri Lankan navy infrared camera and posted to YouTube.
It is thought that the Inland Revenue Department was not the intended target, but that the plane was hit by anti-aircraft fire and accidentally struck that building. According to Sri Lankan sources, the intended target may have been either the headquarters of the Sri Lankan air force, which is next to the building that was hit, or the president’s house or army headquarters, which also are close by. The decision to use the remaining Tiger aircraft in this type of suicide operation against the government in Colombo rather than risk losing them to advancing government troops is a prime example of the Tigers’ mind-set.
Mayhem in the Forecast
With the Tigers’ air wing now apparently gone, further 9/11-style suicide planes are unlikely. The Tigers, however, will almost certainly plan more terrorist strikes. Such attacks will be seen as retaliation against the Sri Lankan government. They also will be used to hurt the economy (and thus the government’s ability to finance its military efforts). And they will be used to force the government to divert troops from the northeast to provide security to other parts of the country, thus taking pressure off the Tamil heartland. The Tigers also have shown a limited cyberwarfare capability, which they can be expected to use to score propaganda points and wreak economic havoc when possible. In addition to assassinating VIPs and attacking passenger trains and buses, the Tigers have a long history of attacking villages and massacring Sinhalese Buddhist and Muslim civilians to foster a sense of terror.
We anticipate that small Tamil units will resume operations to massacre civilians, in particular Sinhalese Buddhist and Muslim civilians. The Tigers also probably will attack crowds of civilians and commercial centers. We also anticipate assassination attempts to be launched against military and political VIPs in Colombo, and against local/regional leaders and military and police commanders in the northeast. Attacks against passenger trains and buses also can be expected. STRATFOR sources in Sri Lanka advise that the Tigers are likely to strike at the Yal Devi Express, a train that runs from Colombo to Vavuniya and is of great symbolic value to Tamil-Sinhalese coexistence.
We believe there will be numerous attacks and ambushes targeting traffic on the A-9 road that leads from Colombo to Jaffna aimed at both military and commercial targets, blending terrorism and insurgency. Such attacks could involve ambushes and roadside IEDs, a tactic the Tigers have used with success in the past, such as with the roadside IED used in the January 2008 assassination of the minister of nation building.
Due to the long history of conflict in Sri Lanka (which has sometimes been fueled by external meddling), we do not share the assessment by some in the Sri Lankan government that the Tigers are all but dead. They may be severely damaged as a conventional military force — for a time at least — but the group’s cadre of dedicated, zealous militants will certainly spill a lot more blood in their quest for independence and vengeance against the Sri Lankan government.
A Chilling Effect on U.S. Counterterrorism
By Fred Burton and Scott Stewart
Over the past couple of weeks, we have been carefully watching the fallout from the Obama administration’s decision to release four classified memosfrom former President George W. Bush’s administration that authorized “enhanced interrogation techniques.” In a visit to CIA headquarters last week, President Barack Obama promised not to prosecute agency personnel who carried out such interrogations, since they were following lawful orders. Critics of the techniques, such as Sen. Patrick Leahy, D-Vt., have called for the formation of a “truth commission” to investigate the matter, and Rep. Jerrold Nadler, D-N.Y., has called on Attorney General Eric Holder to appoint a special prosecutor to launch a criminal inquiry into the matter.
Realistically, those most likely to face investigation and prosecution are those who wrote the memos, rather than the low-level field personnel who acted in good faith based upon the guidance the memos provided. Despite this fact and Obama’s reassurances, our contacts in the intelligence community report that the release of the memos has had a discernible “chilling effect” on those in the clandestine service who work on counterterrorism issues.
In some ways, the debate over the morality of such interrogation techniques — something we do not take a position on and will not be discussing here — has distracted many observers from examining the impact that the release of these memos is having on the ability of the U.S. government to fulfill its counterterrorism mission. And this impact has little to do with the ability to use torture to interrogate terrorist suspects.
Politics and moral arguments aside, the end effect of the memos’ release is that people who have put their lives on the line in U.S. counterterrorism efforts are now uncertain of whether they should be making that sacrifice. Many of these people are now questioning whether the administration that happens to be in power at any given time will recognize the fact that they were carrying out lawful orders under a previous administration. It is hard to retain officers and attract quality recruits in this kind of environment. It has become safer to work in programs other than counterterrorism.
The memos’ release will not have a catastrophic effect on U.S. counterterrorism efforts. Indeed, most of the information in the memos was leaked to the press years ago and has long been public knowledge. However, when the release of the memos is examined in a wider context, and combined with a few other dynamics, it appears that the U.S. counterterrorism community is quietly slipping back into an atmosphere of risk-aversion and malaise — an atmosphere not dissimilar to that described by the National Commission on Terrorist Attacks Upon the United States (also known as the 9/11 Commission) as a contributing factor to the intelligence failures that led to the 9/11 attacks.
Cycles Within Cycles
In March we wrote about the cycle of counterterrorism funding and discussed indications that the United States is entering a period of reduced counterterrorism funding. This decrease in funding not only will affect defensive counterterrorism initiatives like embassy security and countersurveillance programs, but also will impact offensive programs such as the number of CIA personnel dedicated to the counterterrorism role.
Beyond funding, however, there is another historical cycle of booms and busts that can be seen in the conduct of American clandestine intelligence activities. There are clearly discernible periods when clandestine activities are deemed very important and are widely employed. These periods are inevitably followed by a time of investigations, reductions in clandestine activities and a tightening of control and oversight over such activities.
After the widespread employment of clandestine activities in the Vietnam War era, the Church Committee was convened in 1975 to review (and ultimately restrict) such operations. Former President Ronald Reagan’s appointment of Bill Casey as director of the CIA ushered in a new era of growth as the United States became heavily engaged in clandestine activities in Afghanistan and Central America. Then, the revelation of the Iran-Contra affair in 1986 led to a period of hearings and controls.
There was a slight uptick in clandestine activities under the presidency of George H.W. Bush, but the fall of the Soviet Union led to another bust cycle for the intelligence community. By the mid-1990s, the number of CIA stations and bases was dramatically reduced (and virtually eliminated in much of Africa) for budgetary considerations. Then there was the case of Jennifer Harbury, a Harvard-educated lawyer who used little-known provisions in Texas common law to marry a dead Guatemalan guerrilla commander and gain legal standing as his widow. After it was uncovered that a CIA source was involved in the guerrilla commander’s execution, CIA stations in Latin America were gutted for political reasons. The Harbury case also led to the Torricelli Amendment, a law that made recruiting unsavory people, such as those with ties to death squads and terrorist groups, illegal without special approval. This bust cycle was well documented by both the Crowe Commission, which investigated the 1998 East Africa embassy bombings, and the 9/11 Commission.
After the 9/11 attacks, the pendulum swung radically to the permissive side and clandestine activity was rapidly and dramatically increased as the U.S. sought to close the intelligence gap and quickly develop intelligence on al Qaeda’s capability and plans. Developments over the past two years clearly indicate that the United States is once again entering an intelligence bust cycle, a period that will be marked by hearings, increased controls and a general decrease in clandestine activity.
Institutional Culture
It is also very important to realize that the counterterrorism community is just one small part of the larger intelligence community that is affected by this ebb and flow of covert activity. In fact, as noted above, the counterterrorism component of intelligence efforts has its own boom-and-bust cycle that is based on major attacks. Soon after a major attack, interest in counterterrorism spikes dramatically, but as time passes without a major attack, interest lags. Other than during the peak times of this cycle, counterterrorism is considered an ancillary program that is sometimes seen as an interesting side tour of duty, but more widely seen as being outside the mainstream career path — risky and not particularly career-enhancing. This assessment is reinforced by such events as the recent release of the memos.
At the CIA, being a counterterrorism specialist in the clandestine service means that you will most likely spend much of your life in places like Sanaa, Islamabad and Kabul instead of Vienna, Paris or London. This means that, in addition to hurting your chances for career advancement, your job also is quite dangerous, provides relatively poor living conditions for your family and offers the possibility of contracting serious diseases.
While being declared persona non grata and getting kicked out of a country as part of an intelligence spat is considered almost a badge of honor at the CIA, the threat of being arrested and indicted for participating in the rendition of a terrorist suspect from an allied country like Italy is not. Equally unappealing is being sued in civil court by a terrorist suspect or facing the possibility of prosecution after a change of government in the United States. Over the past few years, there has been a dramatic increase in the number of CIA case officers who are choosing to carry personal liability insurance because they do not trust the agency and the U.S. government to look out for their best interests.
Now, there are officers who are willing to endure hardship and who do not really care much about career advancement, but for those officers there is another hazard — frustration. Aggressive officers dedicated to the counterterrorism mission quickly learn that many of the people in the food chain above them are concerned about their careers, and these superiors often take measures to rein in their less-mainstream subordinates. Additionally, due to the restrictions brought about by laws and regulations like the Torricelli Amendment, case officers working counterterrorism are often tightly bound by myriad legal restrictions.
Unlike in television shows like “24,” it is not uncommon in the real world for a meeting called to plan a counterterrorism operation to feature more CIA lawyers than case officers or analysts. These staff lawyers are intricately involved in the operational decisions made at headquarters, and legal issues often trump operational considerations. The need to obtain legal approval often delays decisions long enough for a critical window of operational opportunity to be slammed shut. This restrictive legal environment goes back many years in the CIA and is not a new fixture brought in by the Obama administration. There was a sense of urgency that served to trump the lawyers to some extent after 9/11, but the lawyers never went away and have reasserted themselves firmly over the past several years.
Of course, the CIA is not the only agency with a culture that is less than supportive of the counterterrorism mission. Although the prevention of terrorist attacks in the United States is currently the FBI’s No. 1 priority on paper, the counterterrorism mission remains the bureau’s redheaded stepchild. The FBI is struggling to find agents willing to serve in the counterterrorism sections of field offices, resident agencies (smaller offices that report to a field office) and joint terrorism task forces.
While the CIA was very much built on the legacy of Wild Bill Donovan’s Office of Strategic Services, the FBI was founded by J. Edgar Hoover, a conservative and risk-averse administrator who served as FBI director from 1935-1972. Even today, Hoover’s influence is clearly evident in the FBI’s bureaucratic nature. FBI special agents are unable to do much at all, such as open an investigation, without a supervisor’s approval, and supervisors are reluctant to approve anything too adventurous because of the impact it might have on their chance for promotion. Unlike many other law enforcement agencies, such as the Drug Enforcement Administration or the Bureau of Alcohol, Tobacco, Firearms and Explosives, the FBI rarely uses its own special agents in an undercover capacity to penetrate criminal organizations. That practice is seen as being too risky; they prefer to use confidential informants rather than undercover operatives.
The FBI is also strongly tied to its roots in law enforcement and criminal investigation, and special agents who work major theft, public corruption or white-collar crime cases tend to receive more recognition — and advance more quickly — than their counterterrorism counterparts.
FBI special agents also see a considerable downside to working counterterrorism cases because of the potential for such cases to blow up in their faces if they make a mistake — such as in the New York field office’s highly publicized mishandling of the informant whom they had inserted into the group that later conducted the 1993 World Trade Center bombing. It is much safer, and far more rewarding from a career perspective, to work bank robberies or serve in the FBI’s Inspection Division.
After the 9/11 attacks — and the corresponding spike in the importance of counterterrorism operations — many of the resources of the CIA and FBI were focused on al Qaeda and terrorism, to the detriment of programs such as foreign counterintelligence. However, the more time that has passed since 9/11 without another major attack, the more the organizational culture of the U.S government has returned to normal. Once again, counterterrorism efforts are seen as being ancillary duties rather than the organizations’ driving mission. (The clash between organizational culture and the counterterrorism mission is by no means confined to the CIA and FBI. Fred’s book “Ghost: Confessions of a Counterterrorism Agent” provides a detailed examination of some of the bureaucratic and cultural challenges we faced while serving in the Counterterrorism Investigations Division of the State Department’s Diplomatic Security Service.)
Liaison Services
One of the least well known, and perhaps most important, sources of intelligence in the counterterrorism field is the information that is obtained as a result of close relationships with allied intelligence agencies — often referred to as information obtained through “liaison channels.”
Like FBI agents, most CIA officers are well-educated, middle-aged white guys. This means they are better suited to use the cover of an American businessmen or diplomat than to pretend to be a young Muslim trying to join al Qaeda or Hezbollah. Like their counterparts in the FBI, CIA officers have far more success using informants than they do working undercover inside terrorist groups.
Services like the Jordanian General Intelligence Department, the Saudi Mabahith or the Yemeni National Security Agency not only can recruit sources, but also are far more successful in using young Muslim officers to penetrate terrorist groups. In addition to their source networks and penetration operations, many of these liaison services are not at all squeamish about using extremely enhanced interrogation techniques — this is the reason many of the terrorism suspects who were the subject of rendition operations ended up in such locations. Obviously, whenever the CIA is dealing with a liaison service, the political interests and objectives of the service must be considered — as should the possibility that the liaison service is fabricating the intelligence in question for whatever reason. Still, in the end, the CIA historically has received a significant amount of important intelligence (perhaps even most of its intelligence) via liaison channels.
Another concern that arises from the call for a truth commission is the impact a commission investigation could have on the liaison services that have helped the United States in its counterterrorism efforts since 9/11. Countries that hosted CIA detention facilities or were involved in the rendition or interrogation of terrorist suspects may find themselves exposed publicly or even held up for some sort of sanction by the U.S. Congress. Such activities could have a real impact on the amount of cooperation and information the CIA receives from these intelligence services.
Conclusion
As we’ve previously noted, it was a lack of intelligence that helped fuel the fear that led the Bush administration to authorize enhanced interrogation techniques. Ironically, the current investigation into those techniques and other practices (such as renditions) may very well lead to significant gaps in terrorism-related intelligence from both internal and liaison sources — again, not primarily because of the prohibition of torture, but because of larger implications.
When these implications are combined with the long-standing institutional aversion of U.S. government agencies toward counterterrorism, and with the difficulty of finding and retaining good people willing to serve in counterterrorism roles, the U.S. counterterrorism community may soon be facing challenges even more daunting than those posed by its already difficult mission.
Disruption vs. Prosecution and the Manchester Plot
By Fred Burton and Scott Stewart
On April 8, British authorities mounted a series of raids in Merseyside, Manchester and Lancashire that resulted in the arrest of 12 men suspected of being involved in a plot to conduct attacks over the Easter holiday weekend. In a press conference the following day, Prime Minister Gordon Brown noted that the men arrested were allegedly involved in “a very big terrorist plot.” British authorities have alleged that those arrested sought to conduct suicide bombing attacks against a list of soft targets that included shopping centers, a train station and a nightclub.
The searches and arrests targeting the suspects purportedly involved in the plot, which was dubbed Operation Pathway, had to be accelerated after Bob Quick, the assistant commissioner of the Metropolitan Police in charge of terrorism investigations, inadvertently allowed reporters to see a classified document pertaining to the operation as he was entering 10 Downing Street to brief Brown and Home Secretary Jacqui Smith on April 8. An embarrassed Quick resigned April 9 over the gaffe.
In spite of the leak, the British authorities were successful in detaining all of the targeted suspects, though the authorities have reportedly not been able to recover explosive material or other bomb-making evidence they were seeking. British authorities arrested 12 suspects, 11 of whom were Pakistani citizens. Smith told British Parliament on April 20 that all 11 of the Pakistani nationals entered the United Kingdom on student visas. The youngest of the Pakistani suspects, who is reportedly still a teenager, was remanded to the custody of British immigration authorities to face deportation proceedings April 9. The rest of the 11 suspects were released by British authorities April 21, though ten reportedly were placed in the custody of immigration officials.
Many of the specific details of the plot have not yet come out, and due to the sensitive nature of the intelligence sources and methods involved in these types of investigations, more details may never be fully divulged now that there will be no criminal trial. However, when viewed in the historical and tactical context of other terror plots and attacks (in the United Kingdom and elsewhere), there are some very interesting conclusions that can be drawn from this series of events and the few facts that have been released to the public so far.
This case also highlights the tension that exists within the counterterrorism community between advocates of strategies to disrupt terrorist attacks and those who want to ensure that terror suspects can be convicted in a court of law.
Targets
Among of the most significant things that have come to light so far regarding the thwarted plot are the alleged targets. According to press reports, the British MI5 surveillance teams assigned to monitor the activities of the purported plotters observed some of them videotaping themselves outside of the Arndale and Trafford shopping centers in Manchester, as well as at St. Ann’s Square, which lies in the center of Manchester’s main shopping district. Other reports suggest that the plotters had also conducted surveillance of Manchester’s Piccadilly train station, an intercity train station that is one of the busiest in the United Kingdom outside London, and Manchester’s Birdcage nightclub.
These targets are significant for several reasons. First, they are all soft targets — that is, targets with very little security. As STRATFOR has pointed out for several years now, since counterterrorism efforts have been stepped up in the wake of the 9/11 attacks, and as the tactical capability of groups like al Qaeda has been degraded, jihadist operatives have had less success targeting hardened targets and have turned instead to striking soft targets.
While authorities have moved to protect high-value targets, there simply are far too many potential targets to protect them all. Governments are stretched thin just trying to protect important government buildings, bridges, dams, nuclear power plants, airports and mass-transit systems in their jurisdiction. The reality on the ground is that there are not nearly enough resources to protect them all, much less every potential location where people concentrate in large groups — like shopping centers and nightclubs. This means that some targets are unprotected and are therefore, by definition, soft.
The selection of soft targets in this case indicates that the alleged Manchester plotters did not possess the operational capability to strike more strategic, high-value targets. While attacks against soft targets can be tragic and quite bloody, they will not have the same effect as a successful attack on high-value targets such as Parliament, the London Stock Exchange or a nuclear power station.
It is also very interesting that the plotters were purportedly looking to hit soft targets in Manchester and not soft targets in London. London, as the capital and a city that has been the center of several plots and attacks, is generally on a higher alert than the rest of the country and therefore would likely be seen as more difficult to target. Additionally, many of the suspects lived in the Manchester area, and as we have previously discussed, grassroots operatives, who are not as well-trained as their transnational brethren, tend to “think globally and act locally,” meaning that they tend to plan their attacks in familiar places where they are comfortable operating, rather than in strange and potentially more hostile environment.
In addition to targeting locations like shopping centers and the train station, where there were expected to be large crowds over the holiday weekend, the alleged plotters also apparently looked at the Birdcage nightclub, an establishment that is famous for its “flamboyant and spectacular” shows featuring female impersonators. This is a location the alleged plotters likely considered a symbol of Western decadence (like establishments that serve alcohol in Muslim countries).
Flawed Tradecraft
As noted above, the alleged plotters had been under surveillance by MI5. This indicates that their operational security had been compromised, either via human or technical means. Furthermore, the suspects did not appear to possess any surveillance detection capability — or even much situational awareness — as they went out into Manchester to conduct pre-operational surveillance of potential targets while under government surveillance themselves. Furthermore, the suspects’ surveillance techniques appear to have been very rudimentary in that they lacked both cover for action and cover for status while conducting their surveillance operations.
This aspect of the investigation reinforces two very important points that STRATFOR has been making for some time now. First, most militant groups do not provide very good surveillance training and as a result, poor surveillance tradecraft has long proven to be an Achilles’ heel for militants. Second, because of this weakness, countersurveillance operations can be very effective at catching militant operatives when they are most vulnerable — during the surveillance phase of the terrorist attack cycle.
Media reports indicated that during Operation Pathway, British authorities intercepted a series of Internet exchanges between the suspects suggesting a terror strike was imminent. Furthermore, among the locations raided April 8 was the Cyber Net Cafe in Cheetham Hill, an establishment where British authorities observed the suspects using computers to communicate. Not only is this electronic surveillance significant in that it allowed the authorities to surmise the approximate timing of the attack, but perhaps just as important, this ability to monitor the suspects’ communications will allow the authorities to identify other militants in the United Kingdom and beyond.
Indeed, in several previous cases related to the United Kingdom, such as the investigations involvingthe U.S. arrest of Mohammed Junaid Babar and the U.K. arrest of Younis Tsouli, authorities were able to use communications from militant suspects to identify and roll up militant cells in other countries. Therefore, we will not be at all surprised to hear at some point in the future that British authorities were able use the communications of the recently arrested suspects to tip off authorities in the United States, Canada, other European countries or elsewhere about the militant activities of people the suspects were in contact with.
Links to Pakistan
And speaking of elsewhere, as noted above, 11 of the arrested suspects were Pakistani nationals who entered the U.K. on student visas. At this point it is not exactly clear if the British believe the 11 suspects were radical militants specifically sent to the United Kingdom to conduct attacks or if they arrived without malicious intent and were then radicalized in the Petri dish of Islamist extremism that so rapidly replicates inside the British Muslim community — what we have come to refer to asLondonistan.
Many British lawmakers and media reports have made a huge issue out of the fact that 11 of the alleged plotters entered the United Kingdom on student visas, but even if the suspects were radicals who used student visas as a way to enter the United Kingdom, this is by no means a new tactic as some are reporting. STRATFOR has long discussed the use of student visas, bogus political asylum claims and other forms of immigration fraud that have commonly been used by militants. In fact, there have been numerous prior examples of jihadist operatives using student visas, such as the following:
- While Sept. 11 hijackers Mohamed Atta and Marwan al-Shehhi initially entered the United States on tourist visas, they were approved for M-1 student visas shortly before carrying out their attacks.
- Youssef Samir Megahed, who was arrested in possession of an improvised explosive device (IED) in August 2007 and later sentenced to a 15-year prison sentence, was a Kuwaiti engineering student who entered the United States on a student visa.
- Mohammed Aatique, a convicted member of the “Virginia Jihad Network” who was sentenced to 10 years in prison for conspiracy and weapons violations, also entered the United States from Pakistan as an engineering student.
In some ways, connections between the alleged plotters and militant groups in Pakistan such as al Qaeda or the Tehrik-i-Taliban Pakistan (TTP) would be more analytically significant than if they turn out to be grassroots operatives. The operational security, skills and terrorist tradecraft exhibited by the plotters are about what one would expect to see in a grassroots militant organization. This level of sophistication is, however, far less than one would expect from a transnational organization. Therefore, if this was an al Qaeda operation, it shows how far the group has fallen in the past eight years. If it was the TTP, it means that our previous estimate of their operational ability outside of Pakistan was fairly accurate.
Lack of Evidence
To date, the British authorities have not been able to find the explosive material and IED components they were expecting to find. This might mean that the materials may still be hidden somewhere and could be used in a future attack. It is also quite possible, and perhaps more likely, that this lack of evidence is an indication that the plot was not quite as far along as the British authorities believed. Perhaps the references the suspects allegedly made to launching the attack on a bank holiday pertained to a holiday later in the year.
While the plot as described by the British authorities would not have been a significant, strategic threat to the United Kingdom, it could have been quite deadly and could very well have surpassed theJuly 7, 2005, attacks in terms of final body count. Because of this potential destruction, it is quite possible that the British government decided to err on the side of disruption rather than on the side of prosecution. This is something we have seen in the investigation of several other plots in recent years in the United Kingdom and elsewhere, perhaps most notably in the August 2006 Heathrow plot, in which a cell of operatives was preparing to bomb a series of trans-Atlantic airline flights using liquid explosives.
It is much more difficult to obtain a conviction for a conspiracy to commit an act of terrorism than it is to obtain a conviction for an attack that was successfully conducted. Once the attack is executed, there is no longer much room to wrangle in court over things such as intent or capability. Governments also frequently know things via intelligence they cannot prove to the standards required for a conviction in a court of law.
This was seen in the Heathrow case, where only three of the eight suspects were convicted of the main charges during that trial, which ended in September 2008. (The other five suspects had pled guilty to lesser charges.) During that case there was reportedly some tension between the U.S. and British authorities over when to wrap up the Heathrow plotters — some of the British apparently wanted to wait a while longer to secure more damning evidence, while the Americans were reportedly more interested in ensuring that the plot was disrupted than they were in obtaining convictions. It is likely the same dynamic was at play during the investigation of the Manchester case.
Although Quick’s disclosure did hasten the launch of Operation Pathway by a few hours, it did not significantly alter the timing of the investigation — the British authorities were preparing to execute an array of searches and arrests. From an ethical standpoint (and, not insignificantly in this day and age, a political aspect) it is deemed better by many to disrupt a plot early and risk the terror suspects being acquitted than it is to accidentally allow them to conduct an attack while waiting to gather the evidence required for an ironclad court case. Disruption can have an impact on the success of prosecutions, but in the eyes of a growing number of policymakers, that impact is offset by the lives it saves.
When the Mexican Drug Trade Hits the Border
By Fred Burton and Ben West
For several years now, STRATFOR has been closely monitoring the growing violence in Mexico and its links to the drug trade. In December, our cartel report assessed the situation in Mexico, and two weeks ago we looked closely at the networks that control the flow of drugs through Central America. This week, we turn our attention to the border to see the dynamics at work there and how U.S. gangs are involved in the action.
The nature of narcotics trafficking changes as shipments near the border. As in any supply chain, shipments become smaller as they reach the retail level, requiring more people to be involved in the operation. While Mexican cartels do have representatives in cities across the United States to oversee networks there, local gangs get involved in the actual distribution of the narcotics.
While there are still many gaps in the understanding of how U.S. gangs interface with Mexican cartels to move drugs around the United States and finally sell them on the retail market, we do know some of the details of gang involvement.
Trafficking vs. Distribution
Though the drug trade as a whole is highly complex, the underlying concept is as simple as getting narcotics from South America to the consuming markets — chief among them the United States, which is the world’s largest drug market. Traffickers use Central America and Mexico as a pipeline to move their goods north. The objective of the Latin American smuggler is to get as much tonnage as possible from Colombia, Peru and Bolivia to the lucrative American market and avoid interdictions by authorities along the way.
However, as narcotic shipments near the U.S.-Mexican border, wholesale trafficking turns into the more micro process of retail distribution. In southern Mexico, drug traffickers move product north in bulk, but as shipments cross the U.S. border, wholesale shipments are broken down into smaller parcels in order to hedge against interdiction and prepare the product for the end user. One way to think about the difference in tactics between trafficking drugs in Central America and Mexico and distributing drugs in the United States is to imagine a company like UPS or FedEx. Shipping air cargo from, say, New York to Los Angeles requires different resources than delivering packages to individual homes in southern California. Several tons of freight from the New York area can be quickly flown to the Los Angeles area. But as the cargo gets closer to its final destination, it is broken up into smaller loads that are shipped via tractor trailer to distribution centers around the region, and finally divided further into discrete packages carried in parcel trucks to individual homes.
As products move through the supply chain, they require more specific handling and detailed knowledge of an area, which requires more manpower. The same, more or less, can be said for drug shipments. This can be seen in interdiction reports. When narcotics are intercepted traversing South America into Mexico, they can be measured in tons; as they cross the border into the United States, seizures are reported in kilograms; and by the time products are picked up on the streets of U.S. cities, the narcotics have been divided into packages measured in grams. To reflect this difference, we will refer to the movement of drugs south of the border as trafficking and the movement of drugs north of the border as distributing.
As narcotics approach the border, law enforcement scrutiny and the risk of interdiction also increase, so drug traffickers have to be creative when it comes to moving their products. The constant game of cat-and-mouse makes drug trafficking a very dynamic business, with tactics and specific routes constantly changing to take advantage of any angle that presents itself.
The only certainties are that drugs and people will move from south to north, and that money and weapons will move from north to south. But the specific nature and corridors of those movements are constantly in flux as traffickers innovate in their attempts to stay ahead of the police in a very Darwinian environment. The traffickers employ all forms of movement imaginable, including:
- Tunneling under border fences into safe houses on the U.S. side.
- Traversing the desert on foot with 50-pound packs of narcotics. (Dirt bikes, ATVs and pack mules are also used.)
- Driving across the border by fording the Rio Grande, using ramps to get over fences, cutting through fences or driving through open areas.
- Using densely vegetated portions of the riverbank as dead drops.
- Floating narcotics across isolated stretches of the river.
- Flying small aircraft near the ground to avoid radar.
- Concealing narcotics in private vehicles, personal possessions and in or on the bodies of persons who are crossing legally at ports of entry.
- Bribing border officials in order to pass through checkpoints.
- Hiding narcotics on cross-border trains.
- Hiding narcotics in tractor trailers carrying otherwise legitimate loads.
- Using boats along the Gulf coast.
- Using human “mules” to smuggle narcotics aboard commercial aircraft in their luggage or bodies.
- Shipping narcotics via mail or parcel service.
These methods are not mutually exclusive, and organizations may use any combination at the same time. New ways to move the product are constantly emerging.
Once the narcotics are moved into the United States, drug distributors use networks of safe houses, which are sometimes operated by people with direct connections to the Mexican cartels, sometimes by local or regional gang members, and sometimes by individual entrepreneurs. North of the border, distributors still must maneuver around checkpoints, either by avoiding them or by bribing the officials who work there. While these checkpoints certainly result in seizures, they can only slow or reroute the flow of drugs. Hub cities like Atlanta service a large region of smaller drug dealers who act as individual couriers in delivering small amounts of narcotics to their customers.
It is a numbers game for drug traffickers and distributors alike, since it is inevitable that smugglers and shipments will be intercepted by law enforcement somewhere along the supply chain. Those whose loads are interdicted more often struggle to keep prices low and stay competitive. On the other hand, paying heavy corruption fees or taking extra precautions to ensure that more of your product makes it through also raises the cost of moving the product. Successful traffickers and distributors must be able to strike a balance between protecting their shipments and accepting losses. This requires a high degree of pragmatism and rationality.
Local Gangs
While the Mexican cartels do have people in the United States, they do not have enough people so positioned to handle the increased workload of distributing narcotics at the retail level. A wide range of skill sets is required. Some of the tactics involved in moving shipments across the border require skilled workers, such as pilots, while U.S. gang members along the border serve as middlemen and retail distributors. Other aspects of the operation call for people with expertise in manipulating corrupt officials and recruiting human intelligence sources, while a large part of the process simply involves saturating the system with massive numbers of expendable, low-skilled smugglers who are desperate for the money.
The U.S. gangs are crucial in filling the cartel gap north of the border. Members of these border gangs typically are young men who are willing to break the law, looking for quick cash and already plugged in to a network of similar young men, which enables them to recruit others to meet the manpower demand. They are also typically tied to Mexico through family connections, dual citizenship and the simple geographic fact that they live so close to the border. However, the U.S. gangs do not constitute formal extensions of the Mexican drug-trafficking organizations. Border gangs developed on their own, have their own histories, traditions, structures and turf, and they remain independent. They are also involved in more than just drug trafficking and distribution, including property crime, racketeering and kidnapping. Their involvement in narcotics is similar to that of a contractor who can provide certain services, such as labor and protection, while drugs move across gang territory, but drug money is not usually their sole source of income.
These gangs come in many shapes and sizes. Motorcycle gangs like the Mongols and Bandidos have chapters all along the southwestern U.S. border and, while not known to actually carry narcotics across the border into the United States, they are frequently involved in distributing smaller loads to various markets across the country to supplement their income from other illegal activities.
Street gangs are present in virtually every U.S. city and town of significant size along the border and are obvious pools of labor for distributing narcotics once they hit the United States. The largest of these street gangs are MS-13 and the Mexican Mafia. MS-13 has an estimated 30,000 to 50,000 members worldwide, about 25 percent of whom are in the United States. MS-13 is unique among U.S. gangs in that it is involved in trafficking narcotics through Central America and Mexico as well as in distributing narcotics in the United States. The Mexican Mafia works with allied gangs in the American Southwest to control large swaths of territory along both sides of the U.S.-Mexican border. These gangs are organized to interact directly with traffickers in Mexico and oversee transborder shipments as well as distribution inside the United States.
Prison gangs such as the Barrio Azteca and the Texas Syndicate reach far beyond the prison fence. Membership in a prison gang typically means that, at one point, the member was in prison, where he joined the gang. But there is a wide network of ex-prisoner gang members on the outside involved in criminal activities, including drug smuggling, which is one of the most accessible ways for a gang member to make money when he is released from prison.
Operating underneath the big gang players are hundreds of smaller city gangs in neighborhoods all along the border. These gangs are typically involved in property theft, drug dealing, turf battles and other forms of street crime that can be handled by local police. However, even these gangs can become involved in cross-border smuggling; for example, the Wonderboys in San Luis, Ariz., are known to smuggle marijuana, methamphetamine and cocaine across the border.
Gangs like the Wonderboys also target illegal immigrants coming across the border and steal any valuable personal items or cash they may have on them. The targeting of illegal immigrants coming into the United States is common all across the border, with many gangs specializing in kidnapping newly arrived immigrants and demanding ransoms from their families. These gangs are responsible for the record level of kidnapping reported in places like Phoenix, where 368 abductions were reported in 2008. Afraid to notify law enforcement out of a fear of being deported, many families of abducted immigrants somehow come up with the money to secure their family member’s release.
Drug distribution is by far the most lucrative illicit business along the border, and the competition for money leads to a very pragmatic interface between the U.S. border gangs and the drug cartels in Mexico. Handoffs from Mexican traffickers to U.S. distributors are made based upon reliability and price. While territorial rivalries between drug traffickers have led to thousands of deaths in Mexico, these Mexican rivalries do not appear to be spilling over into the U.S. border gangs, who are engaged in their own rivalries, feuds and acts of violence. Nor do the more gruesome aspects of violence in Mexico, such as torture and beheadings, although there are indications that grenades that were once part of cartel arsenals are finding their way to U.S. gangs. In dealing with the Mexican cartels, U.S. gangs — and cartels in turn — exhibit no small amount of business pragmatism. U.S. gangs can serve more than one cartel, which appears to be fine with the cartels, who really have no choice in the matter. They need these retail distribution services north of the border in order to make a profit.
Likewise, U.S. gangs are in the drug business to make money, not to enhance the power of any particular cartel in Mexico. As such, U.S. gangs do not want to limit their business opportunities by aligning themselves to any one cartel. Smaller city gangs that control less territory are more limited geographically in terms of which cartels they can work with. The Wonderboys in Arizona, for example, must deal exclusively with the Sinaloa cartel because the cartel’s turf south of the border encompasses the gang’s relative sliver of turf to the north. However, larger gangs like the Mexican Mafia control much broader swaths of territory and can deal with more than one cartel.
The expanse of geography controlled by the handful of cartels in Mexico simply does not match up with the territory controlled by the many gangs on the U.S. side. Stricter law enforcement is one reason U.S. border gangs have not consolidated to gain control over more turf. While corruption is a growing problem along the U.S. side of the border, it still has not risen to the level that it has in northern Mexico. Another reason for the asymmetry is the different nature of drug movements north of the border. As discussed earlier, moving narcotics in the United States has everything to do with distributing retail quantities of drugs to consumers spread over a broad geographic area, a model that requires more feet on the ground than the trafficking that takes place in Mexico.
Assassins’ Gate
Because the drug distribution network in the United States is so large, it is impossible for any one criminal organization to control all of it. U.S. gangs fill the role of middleman to move drugs around, and they are entrusted with large shipments of narcotics worth millions of dollars. Obviously, the cartels need a way to keep these gangs honest.
One effective way is to have an enforcement arm in place. This is where U.S.-based assassins come in. More tightly connected to the cartels than the gangs are, these assassins are not usually members of a gang. In fact, the cartels prefer that their assassins not be in a gang so that their loyalties will be to the cartels, and so they will be less likely to have criminal records or attract law enforcement attention because of everyday gang activity.
Cartels invest quite a bit in training these hit men to operate in the United States. Often they are trained in Mexico, then sent back across to serve as a kind of “sleeper cell” until they are tapped to take out a delinquent U.S. drug dealer. The frequency and ease with which Americans travel to and from Mexico covers any suspicion that might be raised.
The Gaps
The U.S.-Mexican border is a dynamic place, with competition over drug routes and the quest for cash destabilizing northern Mexico and straining local and state law enforcement on the U.S. side. Putting pressure on the people who are active in the border drug trade has so far only inspired others to innovate and adapt to the challenging environment by becoming more innovative and pragmatic.
And there is still so much we do not know. The exact nature of the relationship between Mexican cartels and U.S. gangs is very murky, and it appears to be handled on such an individual basis that making generalizations is difficult. Another intelligence gap is how deeply involved the cartels are in the U.S. distribution network. As mentioned earlier, the network expands as it becomes more retail in nature, but the profit margins also expand, making it an attractive target for cartel takeover. Finally, while we know that gangs are instrumental in distributing narcotics in the United States, it is unclear how much of the cross-border smuggling they control. Is this vital, risky endeavor completely controlled by cartels and gatekeeper organizations based in Mexico, or do U.S. gangs on the distribution side have more say? STRATFOR will continue to monitor these issues as Mexico’s dynamic cartels continue to evolve.

Implications of the Manawan Attack
By Fred Burton and Scott Stewart
On March 31, Baitullah Mehsud, commander of the Tehrik-i-Taliban Pakistan (TTP), called The Associated Press and Reuters to claim responsibility for the March 29 attack against a Pakistani police academy in Manawan, which is near the eastern Pakistani city of Lahore and the Indian border. The attack had been previously claimed by a little-known group, Fedayeen al-Islam (FI), which also took responsibility for the bombing of the Marriott Hotel in Islamabad in September 2008. Mehsud has also released an Urdu-language audio message claiming responsibility for the Manawan attack as well as a failed March 23 attack on the headquarters of the Police Special Branch in Islamabad. Mehsud, who authorities claim was behind the March 3 attack on the Sri Lankan cricket team in Lahore, also warned that there would be additional attacks all across the country in retaliation for U.S. drone strikes in the Federally Administered Tribal Area. He even threatened to launch attacks in Washington, D.C.
It is not clear at this point if the two claims of responsibility for the Manawan attack are indeed contradictory. If FI is an independent group, it is possible that it was working with Mehsud in the assault on the police academy. However, it is also quite possible that FI is either part of the larger TTP (which is an umbrella group with many factions) or perhaps just a nom de guerre used by the TTP to claim certain attacks. When a reporter asked about the FI claim, Mehsud refused to comment. Two things can be ascertained from this: that Mehsud’s organization has the ability to conduct these attacks, and that a major jihadist figure like Mehsud has no real need to claim the attacks of others to bolster his reputation. In fact, lying about such a thing would hurt his well-established reputation.
It is a good bet, therefore, that the TTP was in fact involved in the Manawan attack. The odds are even greater when one considers the intelligence reports from a few days prior to the attack: that Mehsud had dispatched a group of 22 operatives from his base in South Waziristan, through the town of Mianwali in southwestern Punjab, to conduct attacks in Lahore and Rawalpindi. Pakistani authorities were actively searching for those operatives when the attack occurred in Manawan.
While STRATFOR has already published a political assessment of the Manawan attack, we believe it might also be interesting to look at the incident from a protective intelligence standpoint and examine the tactical aspects of the operation in more detail.
Sequence of Events
The attack on the police academy in Manawan happened at approximately 7:20 a.m. on March 29 as more than 800 unarmed police cadets were on the parade field for their regularly scheduled morning training. Witness reports suggest that there were 10 attackers who scaled the back wall of the academy and began to attack the cadets. Part of the attack team reportedly was dressed in police uniforms, while the rest reportedly wore shalwar kameez (traditional Pakistani dress). Several members of the team also wore suicide belts, and at least some of them carried large duffle bags (similar to those carried by the assailants in the November 2008 Mumbai attacks and the March 3 attack on the Sri Lankan cricket team in Lahore). The gunmen reportedly engaged the cadets with hand grenades and fire from assault rifles. As the gunmen raked the parade ground, many of the cadets reportedly fled the compound or barricaded themselves in various rooms inside the facility. Because the bulk of the people at the academy were cadets and not trained police, they were not issued firearms.
The armed guards at the academy were able to offer some resistance, but the attack team was able to make its way across the parade ground and into the barracks, where the attackers established defensive positions, apparently with the hope of initiating a prolonged hostage situation. Reports are conflicting as to how many hostages they were actually able to seize and control inside the barracks.
The Pakistani police and military responded aggressively to the attack. Within about 30 minutes, officers from the Elite Force — a highly trained branch of the Punjab Police responsible for counterterrorism — reportedly had surrounded the barracks building. By 9 a.m., paramilitary Pakistan Rangers and Pakistani army troops began to arrive. Many of the wounded cadets were evacuated from the parade ground using armored personnel carriers (APCs) to protect them from the attackers’ fire. The attackers apparently attempted to use grenades to attack the APCs, but were met with heavy suppressive fire from the security forces. Pakistani forces also apparently used tear gas against the attackers, as well as APCs and helicopter gunships. Eventually, the Elite Force went room to room to clear the barracks building of attackers. By 4 p.m., the siege had ended, with six of the attackers captured and four killed. (Three of the four reportedly killed themselves using suicide belts.) Despite initial reports of high casualties, it now appears that only eight police officers or cadets were killed in the attack, with more than 90 others wounded.
While armed assaults against paramilitary forces, convoys and other targets are common along the border with Afghanistan, this attack was only the second such attack in Lahore. Terrorist attacks in Pakistan have more commonly been committed by suicide bombers, and it appears that Mehsud’s group may have embraced a change in tactics, perhaps influenced by the success of Mumbai. (However, as we will discuss below, this latest attack, like the attack on the cricket team, was far from a spectacular success.)
Analysis
First, it must be recognized that jihadist attacks on police recruits are not uncommon. We have seen attacks on police training and recruiting centers in Iraq and Afghanistan, among other countries, and we have also seen them before in Pakistan. On July 15, 2007, a suicide bomber attacked a police recruitment center in Dera Ismail Khan, killing 26 people and wounding 35. The victims were at the center to take medical and written tests for entering the police force.
A training center like the one in Manawan provides an unusually large concentration of targets. The more than 800 cadets at the academy were a far larger group of police than is normally found in the police stations scattered throughout the country. The training center was also a far softer target than a traditional police station, where all the officers are armed. From media reports, it appears that there were only seven armed guards on duty at the academy at the time of the attack. The instructors allegedly were armed only with lathis (long canes commonly used by police in India and Pakistan). The academy’s rigid training schedule also provided a highly predictable target, as the attackers knew the cadets would be on the parade field from 7-8 a.m. every day.
With so many potential targets on the parade field and in the barracks, and with so many attackers, it is amazing that there were only eight people killed in this attack (one-fourth the death toll of the April 2007 Virginia Tech shooting). This is an indication that the Manawan attackers were not nearly as well trained in marksmanship as the assault team that conducted the November Mumbai attacks, in which 10 gunmen killed 173 people. The 10 heavily armed Manawan assailants did not even succeed in killing one victim each in a situation akin to shooting fish in a barrel.
From a military standpoint, such a formation of massed people in the open would have been far more effectively targeted using mortars and crew-served machine guns, so it can also be argued that the attack was poorly planned and the attackers improperly equipped to inflict maximum casualties. Even so, it is quite amazing to us that attackers armed with assault rifles and grenades did not kill one victim apiece.
Of course, one thing that helped contain the carnage was the response of Pakistani security personnel and their efforts to evacuate the wounded under fire. While not exactly practicing what are known in the United States as “active shooter procedures”, the Elite Force officers did quickly engage the attackers and pin them down until more firepower could be brought to bear. The Elite Force also did a fairly efficient job of clearing the barracks of attackers. The Pakistani response ensured that the incident did not drag on like the Mumbai attacks did. The Elite Force went in hard and fast, and seemingly with little regard for the hostages being held, yet their decisive action proved to be very effective, and the result was that a minimum number of hostages were killed.
There were some significant differences from the situation in Mumbai. First, there was only one crime scene to deal with, and the Pakistani authorities could focus all their attention and resources there. Second, the barracks building was far smaller and simpler than the hotels occupied in the Mumbai attacks. Third, Manawan is far smaller and more isolated than Mumbai, and it is easier to pin the attackers down in a city of that size than in a larger, more densely populated city such as Mumbai. Finally, there were no foreign citizens involved in the hostage situation, so the Pakistani authorities did not have to worry about international sensibilities or killing a foreign citizen with friendly fire. They were able to act aggressively and not worry about distractions — or the media circus that Mumbai became.
The Future
Perhaps the most important thing to watch going forward will be the response of the Pakistani people to these attacks. In his claim of responsibility, Mehsud said the Manawan attack was in direct response to the expanding U.S. unmanned aerial vehicle (UAV) campaign in Pakistan. Mehsud threatened that there would be more militant attacks in Pakistan and the United States if the UAV attacks did not stop. Clearly, Mehsud is feeling the heat from these attacks, and although he claims he is ready to be martyred, his bravado is belied by the fact that he is taking such extraordinary measures to try to halt the UAV campaign. He obviously fears the UAV strikes, not only for what they can do to him, but for what they can do to degrade his organization.
When the Elite Force completed the clearing of the barracks, several officers came out on the roof of the building, shouted “God is great” and fired celebratory shots into the air (something that is anathema to Western police and military forces). Many of the people gathered outside the academy joined in the shouting and loudly cheered the Elite Force. This sentiment was widely echoed in the Pakistani media.
Although the Manawan attack was intended to demoralize Pakistani security forces, it may have just the opposite effect. The bravery and dedication exhibited by the Pakistani police and soldiers who responded to the attack may instead serve to steel their will and instill professional pride. Mehsud’s recent threats, along with the militant attacks, may also work to alienate him from people who had been supportive of — or at least ambivalent toward — him and the jihadists.
Up until 2003, the Saudi public, and many in the government, pretty much turned a blind eye to the actions of jihadists in Saudi Arabia as long as the jihadists were concentrating their attacks on targets outside the kingdom. But when the jihadists declared war on the Saudi royal family and began to conduct attacks against targets inside the kingdom that resulted in the deaths of ordinary Saudis, the tide of public opinion turned against them and the Saudi government reacted aggressively, smashing the jihadists. Similarly, it was the brutality of al Qaeda in Iraq that helped turn many Iraqi Sunnis against the jihadists there. Indeed, an insurgency cannot survive long without the support of the people. In the case of Pakistan, that also goes for the support of Inter-Services Intelligence and the army. The TTP, al Qaeda and their Kashmiri militant allies simply cannot sustain themselves without at least the tacit support of Pakistan’s intelligence apparatus and army. If these two powerful establishments ever turn against them, the groups will be in serious peril.
Pakistan has long been able to control the TTP and al Qaeda more than it has. The country has simply lacked the will, for a host of reasons. It will be interesting to watch and see if Mehsud’s campaign serves to give the Pakistani people, and the authorities, the will they need to finally take more serious steps to tackle the jihadist problem. Having long battled deep currents of jihadist thought within the country, the Pakistani government continues to face serious challenges. But if the tide of public support begins to turn against the jihadists, those challenges will become far more manageable.

Central America: An Emerging Role in the Drug Trade
By Stephen Meiners
As part of STRATFOR’s coverage of the security situation in Mexico, we have observed some significant developments in the drug trade in the Western Hemisphere over the past year. While the United States remains the top destination for South American-produced cocaine, and Mexico continues to serve as the primary transshipment route, the path between Mexico and South America is clearly changing.
These changes have been most pronounced in Central America, where Mexican drug-trafficking organizations have begun to rely increasingly on land-based smuggling routes as several countries in the region have stepped up monitoring and interdiction of airborne and maritime shipments transiting from South America to Mexico.
The results of these changes have been extraordinary. According to a December 2008 report from the U.S. National Drug Intelligence Center, less than 1 percent of the estimated 600 to 700 tons of cocaine that departed South America for the United States in 2007 transited Central America. The rest, for the most part, passed through the Caribbean Sea or Pacific Ocean en route to Mexico. Since then, land-based shipment of cocaine through Central America appears to have ballooned. Earlier this month, U.S. Ambassador to Guatemala Stephen McFarland estimated in an interview with a Guatemalan newspaper that cocaine now passes through that country at a rate of approximately 300 to 400 tons per year.
Notwithstanding the difficulty associated with estimating drug flows, it is clear that Central America has evolved into a significant transshipment route for drugs, and that the changes have taken place rapidly. These developments warrant a closer look at the mechanics of the drug trade in the region, the actors involved, and the implications for Central American governments — for whom drug-trafficking organizations represent a much more daunting threat than they do for Mexico.
Some Background
While the drug trade in the Western Hemisphere is multifaceted, it fundamentally revolves around the trafficking of South American-produced cocaine to the United States, the world’s largest market for the drug. Drug shipment routes between Peru and Colombia — where the vast majority of cocaine is cultivated and produced — and the United States historically have been flexible, evolving in response to interdiction efforts or changing markets. For example, Colombian drug traffickers used to control the bulk of the cocaine trade by managing shipping routes along the Caribbean smuggling corridor directly to the United States. By the 1990s, however, as the United States and other countries began to focus surveillance and interdiction efforts along this corridor, the flow of U.S.-bound drugs was forced into Mexico, which remains the main transshipment route for the overwhelming majority of cocaine entering the United States.
A similar situation has been occurring over the last two years in Central America. From the 1990s until as recently as 2007, traffickers in Mexico received multiton shipments of cocaine from South America. There was ample evidence of this, including occasional discoveries of bulk cocaine on everything from small propeller aircraft and Gulfstream jets to self-propelled semisubmersible vessels, fishing trawlers and cargo ships. These smuggling platforms had sufficient range and capacity to bypass Central America and ship bulk drugs directly to Mexico.
By early 2008, however, a series of developments in several Central American countries suggested that drug-trafficking organizations — Mexican cartels in particular — were increasingly trying to establish new land-based smuggling routes through Central America for cocaine shipments from South America to Mexico and eventual delivery to the United States. While small quantities of drugs had certainly transited the region in the past, the routes used presented an assortment of risks. A combination of poorly maintained highways, frequent border crossings, volatile security conditions and unpredictable local criminal organizations apparently presented such great logistical challenges that traffickers opted to send the majority of their shipments through well-established maritime and airborne platforms.
In response to this relatively unchecked international smuggling, several countries in the region began taking steps to increase the monitoring and interdiction of such shipments. The Colombian government, for one, stepped up monitoring of aircraft operating in its airspace. The Mexican government installed updated radar systems and reduced the number of airports authorized to receive flights originating in Central and South America. The Colombian government estimates that the aerial trafficking of cocaine from Colombia has decreased by as much as 90 percent since 2003.
Maritime trafficking also appears to have suffered over the past few years, most likely due to greater cooperation and information-sharing between Mexico and the United States. The United States has an immense capability to collect maritime technical intelligence, and an increasing degree of awareness regarding drug trafficking at sea. Two examples of this progress include the Mexican navy’s July 2008 capture — acting on intelligence provided by the United States — of a self-propelled semisubmersible vessel loaded with more than five tons of cocaine, and the U.S. Coast Guard’s February 2009 interdiction of a Mexico-flagged fishing boat loaded with some seven tons of cocaine about 700 miles off Mexico’s Pacific coast. Presumably as a result of successes such as these, the Mexican navy reported in 2008 that maritime trafficking had decreased by an estimated 60 percent over the last two years.
While it is impossible to independently corroborate the Mexican and Colombian governments’ estimates on the degree to which air- and seaborne drug trafficking has decreased over the last few years, developments in Central America over the past year certainly support their assessments. In particular, STRATFOR has observed that in order to make up for losses in maritime and aerial trafficking, land-based smuggling routes are increasingly being used — not by Colombian cocaine producers or even Central American drug gangs, but by the now much more powerful Mexican drug-trafficking organizations.
Mechanics of Central American Drug Trafficking
It is important to clarify that what we are defining as land-based trafficking is not limited to overland smuggling. The methods associated with land-based trafficking can be divided into three categories: overland smuggling, littoral maritime trafficking and short-range aerial trafficking.
The most straightforward of these is simple overland smuggling. As a series of investigations in Panama, Costa Rica and Nicaragua demonstrated last year, overland smuggling operations use a wide variety of approaches. In one case, authorities pieced together a portion of a route being used by Mexico’s Sinaloa cartel in which small quantities of drugs entered Costa Rica from Panama via the international point of entry on the Pan-American Highway. The cocaine was often held for several days in a storage facility before being loaded onto another vehicle to be driven across the country on major highways. Upon approaching the Nicaraguan border, however, the traffickers opted to avoid the official port of entry and instead transferred the shipments into Nicaragua on foot or on horseback along a remote part of the border. Once across, the shipments were taken to the shores of the large inland Lake Nicaragua, where they were transferred onto boats to be taken north, at which point they would be loaded onto vehicles to be driven toward the Honduran border. In one case in Nicaragua, authorities uncovered another Sinaloa-linked route that passed through Managua and is believed to have followed the Pan-American Highway through Honduras and into El Salvador.
The second method associated with land-based trafficking involves littoral maritime operations. Whereas long-range maritime trafficking involves large cargo ships and self-propelled semisubmersible vessels capable of delivering multiton shipments of drugs from South America to Mexico without having to refuel, littoral trafficking tends to involve so-called “go-fast boats” that are used to carry smaller quantities of drugs at higher speeds over shorter distances. This method is useful to traffickers who might want to avoid, for whatever reason, a certain stretch of highway or perhaps even an entire country. According to Nicaraguan military officials, several go-fast boats are suspected of operating off the country’s coasts and of sailing outside Nicaraguan territorial waters in order to avoid authorities. While it is possible to make the entire trip from South America to Mexico using only this method — and making frequent refueling stops — it is believed that littoral trafficking is often combined with an overland network.
The third method associated with land-based drug smuggling involves short-range aerial operations. In these cases, clandestine planes make stops in Central America before either transferring their cargo to a land vehicle or making another short flight toward Mexico. Over the past year, several small planes loaded with drugs or cash have crashed or been seized in Honduras, Mexico and other countries in the region. In addition, authorities in Guatemala have uncovered several clandestine airstrips allegedly managed by the Mexican drug-trafficking organization Los Zetas. These examples suggest that even as overall aerial trafficking appears to have decreased dramatically, the practice continues in Central America. Indeed, there is little reason to expect that it would not continue, considering that many countries in the region lack the resources to adequately monitor their airspace.
While each of these three methods involves a different approach to drug smuggling, the methods share two important similarities. For one, the vehicles involved — be they speedboats, small aircraft or private vehicles — have limited cargo capacities, which means land-based trafficking generally involves cocaine shipments in quantities no greater than a few hundred pounds. While smaller quantities in more frequent shipments mean more handling, they also mean that less product is lost if a shipment is seized. More importantly, each of these land-based methods requires that a drug-trafficking organization maintain a presence inside Central America.
Actors Involved
There are a variety of drug-trafficking organizations operating inside Central America. In addition to some of the notorious local gangs — such as Calle 18 and MS-13 — there is also a healthy presence of foreign criminal organizations. Colombian drug traffickers, for example, historically have been no strangers to the region. However, as STRATFOR has observed over the past year, it is the more powerful Mexico-based drug-trafficking organizations that appear to be overwhelmingly responsible for the recent upticks in land-based narcotics smuggling in Central America.
Based on reports of arrests and drug seizures in the region over the past year, it is clear that no single Mexican cartel maintains a monopoly on land-based drug trafficking in Central America. Los Zetas, for example, are extremely active in several parts of Guatemala, where they engage in overland and short-range aerial trafficking. The Sinaloa cartel, which STRATFOR believes is the most capable Mexican trafficker of cocaine, has been detected operating a fairly extensive overland smuggling route from Panama to El Salvador. Some intelligence gaps remain regarding, for example, the precise route Sinaloa follows from El Salvador to Mexico or the route Los Zetas use between South America and Guatemala. It is certainly possible that these two Mexican cartels do not rely exclusively on any single route or method in the region. But the logistical challenges associated with establishing even one route across Central America make it likely that existing routes are maintained even after they have been detected — and are defended if necessary.
The operators of the Mexican cartel-managed routes also do not match a single profile. At times, Mexican cartel members themselves have been found to be operating in Central America. More common is the involvement of locals in various phases of smuggling operations. Nicaraguan and Salvadoran nationals, for example, have been arrested in northwestern Nicaragua for operating a Sinaloa-linked overland and littoral route into El Salvador. Authorities in Costa Rica have arrested Costa Rican nationals for their involvement in overland routes through that country. In that case, a related investigation in Panama led to the arrest of several Mexican nationals who reportedly had recently arrived in the area to more closely monitor the operation of their route.
One exception is Guatemala, where Mexican drug traffickers appear to operate much more extensively than in any other Central American country; this may be due, at least in part, to the relationship between Los Zetas and the Guatemalan Kaibiles. Beyond the apparently more-established Zeta smuggling operations there, several recent drug seizures — including an enormous 1,800-acre poppy plantation attributed to the Sinaloa cartel — make it clear that other Mexican drug-trafficking organizations are currently active inside Guatemala. Sinaloa was first suspected of increasing its presence in Guatemala in early 2008, when rumors surfaced that the cartel was attempting to recruit local criminal organizations to support its own drug-trafficking operations there. The ongoing Zeta-Sinaloa rivalry at that time triggered a series of deadly firefights in Guatemala, prompting fears that the bloody turf battles that had led to record levels of organized crime-related violence inside Mexico would extend into Central America.
Security Implications in Central America
Despite these concerns and the growing presence of Mexican traffickers in the region, there apparently have been no significant spikes in drug-related violence in Central America outside of Guatemala. Several factors may explain this relative lack of violence.
First, most governments in Central America have yet to launch large-scale counternarcotics campaigns. The seizures and arrests that have been reported so far have generally been the result of regular police work, as opposed to broad changes in policies or a significant commitment of resources to address the problem. More significantly, though, the quantities of drugs seized probably amount to just a drop in the bucket compared to the quantity of drugs that moves through the region on a regular basis. Because seizures have remained low, Mexican drug traffickers have yet to launch any significant reprisal attacks against government officials in any country outside Guatemala. In that country, even the president has received death threats and had his office bugged, allegedly by drug traffickers.
The second factor, which is related to the first, is that drug traffickers operating in Central America likely rely more heavily on bribes than on intimidation to secure the transit of drug shipments. This assessment follows from the region’s reputation for official corruption (especially in countries like Nicaragua, Honduras, Panama and Guatemala) and the economic disadvantage that many of these countries face compared to the Mexican cartels. For example, the gross domestic product of Honduras is $12 billion, while the estimated share of the drug trade controlled by the Mexican cartels is estimated to be $20 billion.
Finally, Mexican cartels currently have their hands full at home. Although Central America has undeniably become more strategically important for the flow of drugs from South America, the cartels in Mexico have simultaneously been engaged in a two-front war at home against the Mexican government and against rival criminal organizations. As long as this war continues at its present level, Mexican drug traffickers may be reluctant to divert significant resources too far from their home turf, which remains crucial in delivering drug shipments to the United States.
Looking Ahead
That said, there is no guarantee that Central America will continue to escape the wrath of Mexican drug traffickers. On the contrary, there is reason for concern that the region will increasingly become a battleground in the Mexican cartel war.
For one thing, the Merida Initiative, a U.S. anti-drug aid program that will put some $300 million into Mexico and about $100 million into Central America over the next year, could be perceived as a meaningful threat to drug-trafficking operations. If Central American governments choose to step up counternarcotics operations, either at the request of the United States or in order to qualify for more Merida money, they risk disrupting existing smuggling operations to the extent that cartels begin to retaliate.
Also, even though Mexican cartels may be reluctant to divert major resources from the more important war at home, it is important to recognize that a large-scale reassignment of cartel operatives or resources from Mexico to Central America might not be necessary to have a significant impact on the security situation in any given Central American country. Given the rampant corruption and relatively poor protective security programs in place for political leaders in the region, very few cartel operatives or resources would actually be needed if a Mexican drug-trafficking organization chose to, for example, conduct an assassination campaign against high-ranking government officials.
Governments are not the only potential threat to drug traffickers in Central America. The increases in land-based drug trafficking in the region could trigger intensified competition over trafficking routes. Such turf battles could occur either among the Mexican cartels or between the Mexicans and local criminal organizations, which might try to muscle their way into the lucrative smuggling routes or attempt to grab a larger percentage of the profits.
If the example of Mexico is any guide, the drug-related violence that could be unleashed in Central America would easily overwhelm the capabilities of the region’s governments. Last year, STRATFOR considered the possibility of Mexico becoming a failed state. But Mexico is a far stronger and richer country than its fragile southern neighbors, who simply do not have the resources to deal with the cartels on their own.

Counterterrorism Funding: Old Fears and Cyclical Lulls
By Fred Burton and Scott Stewart
Two years ago, we wrote an article discussing the historical pattern of the boom and bust in counterterrorism spending. In that article we discussed the phenomenon whereby a successful terrorist attack creates a profound shock that is quite often followed by an extended lull. We noted how this dynamic tends to create a pendulum effect in public perception and how public opinion is ultimately translated into public policy that produces security and counterterrorism funding.
In other words, the shock of a successful terrorist attack creates a crisis environment in which the public demands action from the government and Washington responds by earmarking vast amounts of funds to address the problem. Then the lull sets in, and some of the programs created during the crisis are scrapped entirely or are killed by a series of budget cuts as the public’s perception of the threat changes and its demands for government action focus elsewhere. The lull eventually is shattered by another attack — and another infusion of money goes to address the now-neglected problem.
On March 13, The Washington Post carried a story entitled “Hardened U.S. Embassies Symbolic of Old Fears, Critics Say.” The story discussed the new generation of U.S. Embassy buildings, which are often referred to as “Inman buildings” by State Department insiders. This name refers to buildings constructed in accordance with the physical security standards set by the Secretary of State’s Advisory Panel on Overseas Security, a panel chaired by former Deputy CIA Director Adm. Bobby Inman following the 1983 attacks against the U.S. embassies in Beirut and Kuwait City. The 1985 Inman report, which established these security requirements and contributed to one of the historical security spending booms, was also responsible for beefing up the State Department’s Office of Security and transforming it into the Diplomatic Security Service (DSS).
It has been 11 years since a U.S. Embassy has been reduced to a smoking hole in the ground, and the public’s perception of the threat appears to be changing once again. In The Washington Post article, Stephen Schlesinger, an adjunct fellow at the Century Foundation, faults the new Inman building that serves as the U.S. Mission to the United Nations in New York for being unattractive and uninviting. Schlesinger is quoted as saying: “Rather than being an approachable, beckoning embassy — emphasizing America’s desire to open up to the rest of the globe and convey our historically optimistic and progressive values — it sits across from the U.N. headquarters like a dark, forbidding fortress, saying, ‘Go away.’” When opinion leaders begin to express such sentiments in The Washington Post, it is an indication that we are now in the lull period of the counterterrorism cycle.
Tensions Over Security
There has always been a tension between security and diplomacy in the U.S. State Department. There are some diplomats who consider security to be antithetical to diplomacy and, like Mr. Schlesinger, believe that U.S. diplomatic facilities need to be open and accessible rather than secure. These foreign service officers (FSOs) also believe that regional security officers are too risk averse and that they place too many restrictions on diplomats to allow them to practice effective diplomacy. (Regional security officer — RSO — is the title given to a DSS special agent in charge of security at an embassy.) To quote one FSO, DSS special agents are “cop-like morons.” People who carry guns instead of demarches and who go out and arrest people for passport and visa fraud are simply not considered “diplomatic.” There is also the thorny issue that in their counterintelligence role, DSS agents are often forced to confront FSOs over personal behavior (such as sexual proclivities or even crimes) that could be considered grounds for blackmail by a hostile intelligence service.
On the other side of the coin, DSS agents feel the animosity emanating from those in the foreign service establishment who are hostile to security and who oppose the DSS efforts to improve security at diplomatic missions overseas. DSS agents refer to these FSOs as “black dragons” — a phrase commonly uttered in conjunction with a curse. DSS agents see themselves as the ones left holding the bag when an FSO disregards security guidelines, does something reckless, and is robbed, raped or murdered. It is most often the RSO and his staff who are responsible for going out and picking up the pieces when something turns bad. It is also the RSO who is called before a U.S. government accountability review board when an embassy is attacked and destroyed. In the eyes of a DSS special agent, then, a strong, well-protected building conveys a far better representation of American values and strength than does a smoldering hole in the ground, where an “accessible” embassy once stood. In the mind of a DSS agent, dead diplomats can conduct no diplomacy.
This internal tension has also played a role in the funding boom and bust for diplomatic security overseas. Indeed, DSS agents are convinced that the black dragons consistently attempt to cut security budgets during the lull periods. When career foreign service officers like Sheldon Krys and Anthony Quainton were appointed to serve as assistant secretaries for diplomatic security — and presided over large cuts in budgets and manpower — many DSS agents were convinced that Krys and Quainton had been placed in that position specifically to sabotage the agency.
DSS agents were suspicious of Quainton, in particular, because of his history. In February 1992, while Quainton was serving as the U.S. ambassador to Peru, the ambassador’s residence in Lima was attacked by Shining Path guerrillas who detonated a large vehicular-borne improvised explosive device in the street next to it. A team sent by the DSS counterterrorism investigations division to investigate the attack concluded in its report that Quainton’s refusal to follow the RSO’s recommendation to alter his schedule was partially responsible for the attack. The report angered Quainton, who became the assistant secretary for diplomatic security seven months later. Shortly after assuming his post, Quainton proclaimed to his staff that “terrorism is dead” and ordered the abolishment of the DSS counterterrorism investigations division.
Using a little bureaucratic sleight of hand, then-DSS Director Clark Dittmer renamed the office the Protective Intelligence Investigations Division (PII) and allowed it to maintain its staff and function. Although Quainton had declared terrorism dead, special agents assigned to the PII office would be involved in the investigation of the first known al Qaeda attacks against U.S. interests in Aden and Sanaa,Yemen, in December 1992. They also played a significant role in the investigation of the World Trade Center bombing in February 1993, the investigation of the 1993 New York Landmarks Plot and many subsequent terrorism cases.
Boom-and-Bust Funding
One of the problems created by the feast-or-famine cycle of security funding is that during the boom times, when there is a sudden (and often huge) influx of cash, agencies sometimes have difficulty spending all the money allotted to them in a logical and productive manner. Congress, acting on strong public opinion, often will give an agency even more than it initially requested for a particular program — and then expect an immediate solution to the problem. Rather than risk losing these funds, the agencies scramble to find ways to spend them. Then, quite often, by the time the agency is able to get its act together and develop a system effectively to use the funds, the lull has set in and funding is cut. These cuts frequently are accompanied by criticism of how the agency spent the initial glut of funding.
Whether or not it was a conscious effort on the part of people like Quainton, funding for diplomatic security programs was greatly reduced during the lull period of the 1990s. In addition to a reduction in the funding provided to build new embassies or bring existing buildings up to Inman standards, RSOs were forced to make repeated cuts in budgets for items such as local guard forces, residential security and the maintenance of security equipment such as closed-circuit TV cameras and vehicular barriers.
These budget cuts were identified as a contributing factor in the 1998 bombings of the U.S. Embassies in Nairobi and Dar es Salaam. The final report of the Crowe Commission, which was established to investigate the attacks, notes that its accountability review board members “were especially disturbed by the collective failure of the U.S. government over the past decade to provide adequate resources to reduce the vulnerability of U.S. diplomatic missions to terrorist attacks in most countries around the world.”
The U.S. Embassy in Nairobi was known to be vulnerable. Following the August 1997 raid on the Nairobi residence of Wadih el-Hage, U.S. officials learned that el-Hage and his confederates had conducted extensive pre-operational surveillance against the U.S. Embassy in Nairobi, indicating that they planned to attack the facility. The U.S. ambassador in Nairobi, citing the embassy’s vulnerability to car bomb attacks, asked the state department in December 1997 to authorize a relocation of the embassy to a safer place. In its January 1998 denial of the request, the state department said that, in spite of the threat and vulnerability, the post’s “medium” terrorism threat level did not warrant the expenditure.
Old Fears
The 1998 East Africa embassy bombings highlighted the consequences of the security budget cuts that came during the lull years. Clearly, terrorism was not dead then, nor is it dead today, in spite of the implications in the March 13 Washington Post article. Indeed, the current threat of attacks directed against U.S. diplomatic facilities is very real. Since January 2008, we have seen attacks against U.S. diplomatic facilities in Sanaa, Yemen; Istanbul, Turkey; Kabul, Afghanistan; Belgrade, Serbia; and Monterrey, Mexico (as well as attacks against American diplomats in Pakistan, Sudan and Lebanon). Since 2001, there have also been serious attacks against U.S. diplomatic facilities in Jeddah, Saudi Arabia; Karachi, Pakistan; Damascus, Syria; Athens, Greece; and Baghdad, Iraq.
Even if one believes, as we do, that al Qaeda’s abilities have been severely degraded since 9/11, it must be recognized that the group and its regional franchises still retain the ability to conduct tactical strikes. In fact, due to the increased level of security at U.S. diplomatic missions, most of the attacks conducted by jihadists have been directed against softer targets such as hotels or the embassies of other foreign countries. Indeed, attacks that were intended to be substantial strikes against U.S. diplomatic facilities in places like Sanaa, Jeddah and Istanbul have been thwarted by the security measures in place at those facilities. Even in Damascus, where the embassy was an older facility that did not meet Inman standards, adequate security measures (aided by poor planning and execution on the part of the attackers) helped thwart a potentially disastrous attack.
However, in spite of the phrase “war on terrorism,” terrorism is a tactic and not an entity. One cannot kill or destroy a tactic. Historically, terrorism has been used by a wide array of actors ranging from neo-Nazis to anarchists and from Maoists to jihadists. Even when the Cold War ended and many of the state-sponsored terrorist groups lost their funding, the tactic of terrorism endured. Even if the core al Qaeda leaders were killed or captured tomorrow and the jihadist threat were neutralized next week, terrorism would not go away. As we have previously pointed out, ideologies are far harder to kill than individuals. There will always be actors with various ideologies who will embrace terrorism as a tactic to strike a stronger enemy, and as the sole global superpower, the U.S. and its diplomatic missions will be targeted for terrorist attacks for the foreseeable future — or at least the next 100 years.
During this time, the booms and busts of counterterrorism and security spending will continue in response to successful attacks and in the lulls between spectacular terrorist strikes like 9/11. During the lulls in this cycle, it will be easy for complacency to slip in — especially when there are competing financial needs. But terrorism is not going to go away any time soon, and when emotion is removed from the cycle, a logical and compelling argument emerges for consistently supplying enough money to protect U.S. embassies and other essential facilities.

Pakistan: A Bogus Threat and the Bigger Picture
By Scott Stewart and Kamran Bokhari
On March 5, the Saudi Embassy in Islamabad reportedly received threatening e-mails warning of attacks on Saudi interests in Pakistan. According to English-language Pakistani newspaper The Nation, the e-mails purportedly were sent by al Qaeda and threatened attacks on targets such as the Saudi Embassy and Saudi airline facilities in Pakistan.
When we heard the reports of this threat, our initial reaction was to dismiss it. While al Qaeda has sometimes made vague threats before executing an attack, it does not provide a list of precise targets in advance. Prior to the June 2008 bombing of the Danish Embassy in Islamabad, al Qaeda leaders repeatedly threatened to attack European (and Danish) targets in retaliation for a series of cartoons published in Denmark in 2005 that satirized the Prophet Mohammed. When the issue was reignited in early 2008 with the release of a film critical of Islam called “Fitna,” by Dutch parliamentarian Geert Wilders, Osama bin Laden himself issued a statement in March 2008 in which he threatened strikes against European targets in retaliation. However, in all of these threats, al Qaeda never specified that it was going to strike the Danish Embassy in Islamabad. In addition to being out of character for al Qaeda, it is foolish to issue such a specific threat if one really wants to strike a target.
While we were able to discount the most recent e-mail threat reportedly sent to the Saudi Embassy in Islamabad, it generated a robust discussion among our analytical staff about Saudi counterterrorism and anti-jihadist activities in Pakistan and Afghanistan, the large number of threatening statements senior al Qaeda members have made against the Saudis and the very real possibility of an attack against Saudi interests in Pakistan.
Threats Against the Saudis
Beginning with some of bin Laden’s early public writings, such as his August 1996 “Declaration of War against the Americans Occupying the Land of the Two Holy Places,” al Qaeda leaders have spoken harshly against the Saudi royal family. Bin Laden and others have accused the Saudis of collaboration with the “Zionist-Crusaders alliance” that bin Laden claimed was using military force to impose “iniquity and injustice” on the people of Islam.
However, the verbal threats directed against the Saudi royal family have escalated in recent years in the wake of a string of attacks launched inside Saudi Arabia by the Saudi al Qaeda franchise in 2003 and 2004, and as the Saudi government has conducted an aggressive campaign to crush the Saudi franchise and combat the wider phenomenon of jihadism.
In fact, it is rare to see any statement from a senior al Qaeda leader that does not condemn the Saudi government specifically or in more general terms. In a July 28, 2008, video message, al Qaeda ideologue Abu Yahya al-Libi called on Muslims to act quickly and decisively to kill the Saudi king, reminding them that “killing this reckless tyrant, who has declared himself the chief imam of atheism, will be one of the greatest qurubat” (an act of devotion bringing man closer to God). In a May 2008 message, al-Libi also had urged Saudi clerics to lead uprisings against the Saudi monarchy similar to the July 2007 uprisings at the Red Mosque in Islamabad. Al-Libi never mentioned Saudi King Abdullah by name in that message, preferring to call him the “lunatic apostate” because of the king’s call for a dialogue among Islam, Christianity and Judaism. Commenting on this interfaith dialogue in the July 2008 message, al-Libi also said, “By God, if you don’t resist heroically against this wanton tyrant … the day will come when church bells will ring in the heart of the Arabian Peninsula.”
In March 2008, al Qaeda No. 2 Ayman al-Zawahiri said the Saudi monarchy was part of a “satanic alliance” formed by the United States and Israel to blockade the Hamas-controlled Gaza Strip. In a January 2009 message, al-Zawahiri said: “Oh lions of Islam everywhere, the leaders of Muslim countries are the guards of the American-Zionist interests. They are the ones who have given up Palestine and recognized Israel … Abdallah Bin Abd-al-Aziz has invented the interfaith dialogue and met Peres in New York, paving the way for the complete recognition of Israel.” Al-Zawahiri continued, “Thwart the efforts of those traitors by striking the interests of the enemies of Islam.” In a February 2009 audio statement, al-Zawahiri declared, “The Muslim nation must, with all its energy and skills, move to remove these corrupt, corrupting and traitorous rulers.”
After a January 2009 video by jihadists in Yemen announcing the formation of al Qaeda in the Arabian Peninsula, al-Zawahiri proclaimed in a February statement that the new organization “is the awakening, which aims to liberate the Arabian Peninsula from the Crusader invaders and their treacherous agents. It is escalating and flourishing, with God’s help and guidance, despite all the campaigns of repression, misleading, and deception, and despite all the obstacles, difficulties and hindrances.”
Focus on the Saudis
All these threats raise an obvious question: Why is al Qaeda so fixated on the Saudis? One obvious reason is that, since the launching of a disastrous offensive by the Saudi al Qaeda node, the Saudi government — which previously had turned a blind eye to many of al Qaeda’s activities — has launched a full-court press against the organization. Al-Zawahiri acknowledged this in a December 2005 message entitled “Impediments to Jihad,” in which he said the Saudi franchise in the kingdom had been defeated by collaborators. The Saudi offensive against al Qaeda also played a significant part in the Anbar Awakening in Iraq. Saudi cajoling (and money) helped persuade Iraqi tribal leaders to cooperate with the coalition forces.
One way the Saudis have really hurt al Qaeda is by damaging its ability to raise funds. For example, in March 2008, the top Saudi cleric, Grand Mufti Sheikh Abdul-Aziz bin Abdullah al-Sheikh, cautioned Saudis against giving money to charities or organizations that finance “evil groups” who are known for harming Islam and its followers — a clear reference to al Qaeda and other jihadist organizations. We have repeatedly seen appeals for more funds for the jihad, and in a Jan. 14, 2009, message by bin Laden, he noted that the jihadists were under financial “distress” and that it was the duty of the Muslim ummah to support the jihadists “with all their soul and money.”
Perhaps one of the greatest threats the Saudis pose to al Qaeda is the threat to its ideological base. As STRATFOR has long argued, there are two different battlespaces in the war against jihadism — the physical and the ideological. For an ideological organization such as al Qaeda that preaches persecution and martyrdom, losses on the physical battlefield are expected and glorified. The biggest threat to the jihadists, therefore, is not a Hellfire missile being dropped on their heads, but an ideological broadside that undercuts their legitimacy and ideological appeal.
Many Saudi clerics have condemned jihadism as a “deviance from Islam.” Even prominent Saudi clerics who have criticized the Saudi government, such as Salman al-Awdah, have sent open letters to bin Laden condemning violence against innocents and claiming that al Qaeda was hurting Muslim charities through its purported ties to them.
The sting of the ideological attacks is being felt. In a May 2008 speech, al-Libi addressed the ideological assault when he said, “and because they knew that the key to their success in this plan of theirs is to turn the people away from jihad and mujahidin and to eliminate them militarily and intellectually.” Al-Libi recognized that without new recruits and funding, the jihad will wither on the vine.
In addition to financial and ideological threats against the organization, the Saudi assault has also gone after al Qaeda where it lives — in Pakistan.
Deep Connections
Saudi Arabia has long had a strong relationship with Pakistan, based on shared perspectives toward regional and international matters. A key common sphere of influence for the two sides over the past four decades has been Afghanistan. This close Saudi-Pakistani relationship was well-illustrated by the pairing up of Saudi petrodollar wealth with Pakistani logistics (along with U.S. weapons and intelligence) to support the Islamist uprising that followed the Soviet invasion of Afghanistan.
After the Soviet military withdrawal from Afghanistan, the Saudis and the Pakistanis continued to cooperate. Even though the world at large refused to accept the Taliban regime after it took power in 1996, Saudi Arabia, Pakistan and the United Arab Emirates recognized the Taliban as the legitimate rulers of Afghanistan. (These three were the only countries to do so.) However, while enjoying support from Riyadh and Islamabad, the Taliban also established relations with the transnational jihadist forces led by al Qaeda.
The Saudi and Pakistani relationship with the Taliban was shattered by the events of 9/11. In spite of aggressive negotiations with the Taliban, neither the Saudis nor the Pakistanis could convince Mullah Omar to surrender bin Laden and the al Qaeda leadership to the Americans. Because of this, the two countries were forced to end their overt relationship with the Taliban as the Americans invaded Afghanistan, though they obviously have maintained some contact with members of the Taliban leadership.
The U.S. response to 9/11 placed the Saudis and the Pakistanis into a very difficult position, where they were forced to fight jihadists on one hand and try to maintain control and influence over them on the other. As previously discussed, the Saudis possessed the resources to effectively clamp down on the al Qaeda franchise in the kingdom, but Pakistan, which is weaker both financially and politically — and which has become the center of the jihadist universe on the physical battlefield — has been hit much harder by the U.S.-jihadist war.
This situation, along with the ground reality in Afghanistan, has forced the United States to begin working on a political strategy to bring closure to the U.S.-jihadist war that involves negotiating with the Taliban if they part ways with al Qaeda and the transnational jihadists.
Hence the recent visit by Taliban officials to Saudi Arabia and the trips made by Riyadh’s intelligence chief, Prince Muqrin bin Abdel-Aziz, to Pakistan and Afghanistan. The Saudi monarch, King Abdullah, is also rumored to be personally involved behind the scenes in efforts to pressure Taliban leaders to break free from al Qaeda. But as in the past, the Saudis need help from their allies in Islamabad and Rawalpindi, and here is where they are running into problems. A weak and threatened Pakistani state means that before working with the Pakistanis on the Afghan Taliban, Riyadh has to help Pakistan combat its own Taliban problem, which the Saudis currently are attempting. The Saudis obviously have much to offer the Pakistanis, in terms of both cash and experience. They also have the religious cachet that other Pakistan allies, such as the Americans and the British, lack, giving them the ability to broach ideological subjects. However, as is the case with the Afghan Taliban, the Saudis will have to get the Pakistani Taliban to part ways with al Qaeda and are working hard to drive a wedge between Pakistani militants and their foreign guests.
These efforts to divide the Taliban from the global jihadists are happening not only during the plush, Saudi-sponsored trips for Taliban members to conduct Hajj and Umrah in the kingdom. Following a strategy similar to what they did in Iraq, the Saudis and their agents are meeting with Taliban commanders on the ground in Pakistan and Afghanistan to twist arms and offer cash. They also are coordinating very closely with the Pakistani and Afghan authorities who are leading the campaign against the jihadists. For example, Rehman Malik, the Pakistani adviser to the prime minister on the interior (Pakistan’s de facto terrorism czar), traveled to Saudi Arabia in January at the invitation of Saudi Interior Minister Prince Naif bin Abdul-Aziz to discuss improving counterterrorism cooperation between the two countries. Many of the 85 most-wanted militants on the list recently released by the Saudi government are believed to be in Pakistan, and the Saudis are working with Malik and the Pakistanis to arrest those militants and return them to Saudi Arabia.
A Clear and Present Danger
Bin Laden, al-Zawahiri, et al., are well aware of these Saudi moves, which they see as a threat to their very existence. When asked in a November 2008 interview what he thought of the Saudi efforts to mediate between Afghan President Hamid Karzai and the Taliban, al-Zawahiri responded that the Saudi efforts pointed out “the historical role of saboteur played by the House of Saud in ruining the causes of the Muslim ummah, and how they represent the agents whom the Crusader West uses to disperse the ummah’s energy.”
The al Qaeda leadership has nowhere to go if circumstances become untenable for them in Pakistan and Afghanistan. Caught between U.S., Pakistani and Saudi forces, the last thing al Qaeda wants is to lose local support from the Taliban. In other words, Pakistan is their final battleground, and any threat to their continued haven in Pakistan poses a clear and present danger to the organization — especially if the Saudis can play a pivotal role in persuading the Taliban in Afghanistan also to turn against them.
Leveraging its successes against the al Qaeda franchises in Saudi Arabia and Iraq, Riyadh also is working closely with governments to combat the jihadists in places like Yemen as well as Pakistan and Afghanistan. It is, in effect, a global Saudi campaign against jihadism, and we believe al Qaeda has no choice but to attempt to derail the Saudi effort in Pakistan and Afghanistan. There is not much al Qaeda can do to counter Saudi financial tools, but the militant group is in a position to hit back hard on the ideological front in order to counter any Saudi attempt to moderate and rehabilitate jihadists. As noted above, we have seen al Qaeda launch a sustained stream of ideological attacks in an attempt to undercut the Islamic credentials of the Saudi monarch and the Saudi clerical establishment.
Another avenue that al Qaeda can take to interfere with the Saudi charm offensive is to strike Saudi targets — not only to punish the Saudis, but also to try to drive a wedge between the Saudis and the Pakistanis. Al Qaeda’s military capabilities have been greatly degraded since 2001, and with the remnant of its Saudi franchise fleeing to Yemen, it likely has very little ability to make a meaningful strike inside the kingdom. However, the one place where the al Qaeda core has shown the ability to strike in recent years is Pakistan. Mustafa Abu al-Yazid, the group’s operational commander in Afghanistan and Pakistan, has claimed responsibility for the bombing of the Danish Embassy in Islamabad and for the assassination of former Pakistani Prime Minister Benazir Bhutto, and we have no reason to doubt his claims.
Also, an attack against a diplomatic mission in Pakistan that represents a regime considered an enemy of the jihadists is not unprecedented. In addition to the Danish Embassy bombing and several attacks against U.S. diplomatic facilities and personnel in Pakistan, al Qaeda also bombed the Egyptian Embassy in Islamabad in November 1995. According to al-Zawahiri, the Egyptian Embassy was targeted because it “was not only running a campaign for chasing Arabs in Pakistan but also spying on the Arab Mujahedeen.”
Based on the totality of these circumstances — Saudi activities against al Qaeda in South Asia and elsewhere, the al Qaeda perception of the Saudis as a threat and al Qaeda’s operational ability in Pakistan — we believe there is a very real threat that Saudi interests in Pakistan might be attacked in the near future.

Security Implications of the Global Financial Crisis
By Fred Burton and Scott Stewart
As anyone with a stock portfolio knows, it is a rough time for the markets. With many portfolios down 50 percent or more, this large loss of equity and wealth has been very difficult on individuals and corporations. The problems, of course, have not been confined to the stock markets. With property values plunging and variable-rate mortgages ballooning, many homeowners are also caught in a bad situation — the number of homeowners behind in their mortgage payments has been increasing and the number of foreclosures has grown. Unemployment is also an issue. According to the Bureau of Labor Statistics, in January 2009 there were 2,227 mass layoff actions in the United States involving 237,902 workers.
Significantly, the financial crisis is not just restricted to the United States — it is a global event that is also having a severe impact on economies in Europe, Asia and the developing world. Things are tough all over, and this financial strain will create some large security problems for corporations and governments.
Threats to the Bottom Line
During times of financial hardship, companies often have to make cuts like the aforementioned layoffs. When companies plan cuts, they often focus on eliminating those corporate functions that do not appear to be contributing to the company’s profitability. And one of the first functions cut during tough times often is corporate security. A security department typically has a pretty substantial budget (it costs a lot for all those guards, access-control devices, cameras and alarms), and security is usually viewed as detracting from, rather than contributing to, the company’s bottom line. The “fat” security budget is seen as an easy place to quickly reduce costs in an effort to balance the profit-and-loss statement.
This view of security is due to a number of factors. First, it must be recognized that there are certainly some security programs that are indeed bloated and ill-conceived that have consumed far too many corporate resources for the results they produce. Furthermore, there is a long tradition of corporate security directors who are not good communicators and who do not take the effort to educate upper management about ways their programs contribute to corporate goals. However, even when a security director has an effective program and is a good communicator, it can be very difficult to quantify the losses that the corporation did not suffer due to the presence of effective security measures. The lack of losses and incidents due to a robust security program can be interpreted by some to mean that there is no threat to guard against. Indeed, effective security can make it appear that there is no need for security, a paradox we have also seen in the historical pattern of U.S. government security funding — a pattern that has resulted in a number of disastrous attacks against U.S. embassies.
In times of economic hardship, the relentless focus on operating expenses and even corporate cutbacks can lead to definite security challenges. As we discussed last November, one of these problems is workplace violence, but during times when people are hurting financially, issues such as employee theft, fraud and product theft by non-employees must also be carefully monitored.
However, while the theft of a tractor-trailer full of computers or flat screen televisions can quickly get someone’s attention, there is a far more subtle, and no less dangerous, threat lurking just under the surface. That threat is espionage — both corporate and state-sponsored.
The Human-Intelligence Process
Espionage is always a problem corporations must face. Competitors, criminals and even foreign governments often seek ways to gather proprietary information from companies, sometimes to boost their own operational capacities (e.g., to apply critical or emerging technologies to their weapons programs) and sometimes to sell on the open market.
Once a company has been identified as having the information sought, the first thing the human-intelligence practitioner will do is look for weak links in the targeted company’s operations. If the required information is readily available, there is no need to undertake a time-intensive and costly operation to retrieve it. Indeed, it is shocking to see the amount of sensitive and critical information that is openly available on the Internet and in research libraries, or that is freely given out at technical conferences.
When open source collection efforts fail, more invasive measures must be employed. Sometimes the required information can be obtained via technical surveillance. A faulty information technology system, for example, can expose the company’s secrets via remote electronic intrusion conducted from a continent away. Other times, information can be obtained by eavesdropping on telephone calls made by corporate leaders or by using other technical surveillance measures.
However, technical surveillance has its limitations, and sometimes critical information must be obtained through human intelligence, which means obtaining the required data from an employee working within the targeted company. Due to human nature, human-intelligence practitioners use the same time-tested principles in the recruitment of corporate sources that they use when recruiting sources in the government sector. (The risks associated with obtaining unclassified proprietary information from private companies are often far less than those associated with obtaining classified information from government agencies or national research laboratories.)
The first step in the human-intelligence process is called spotting. This is when the human-intelligence practitioner attempts to identify those workers who have access to the required information. Then the practitioner conducts a thorough examination of the backgrounds and situations of the employees who have that access in an effort to determine which employee is most vulnerable to exploitation. Employees who are in dire need of extra cash to maintain extravagant lifestyles or to support drinking, drug or gambling habits, or those who are hiding extramarital affairs or other secrets that can be used for blackmail, make prime candidates. A background check might also reveal that a certain worker is angry with his or her employer over issues of salary or placement in the company. There also are employees who disagree ideologically with the product their company makes or the process the company uses to produce it. Finally, there are the employees whose egos are so big that they might be willing to risk committing industrial espionage just to prove they can get away with it. Robert Hanssen, an ex-FBI special agent accused of selling secrets to Russia, was motivated by the belief that he was above the system and could commit espionage without being caught.
Of the four major motivations for committing espionage — money, ideology, compromise and ego (known to security officials as MICE) — money has proven to be the No. 1 motivation, though two or more motivations can be used to turn an employee. More often than not, simple bribery is sufficient to obtain the desired information, especially if the employee is living beyond his or her means for one reason or another. Outside agents looking to turn an employee can also use blackmail (“compromise” in the MICE acronym). Demanding proprietary information in exchange for not exposing a personal secret, for instance, is a cost-effective approach that also allows the agent to return again and again to the same source. This method is a bit riskier, however, since it can cause more resentment than other means and make the source more likely to rebel. However, sexual entrapment and blackmail is still widely used as a recruitment tactic, one that has been used with great success in recent years by the Chinese government against targets such as Japanese and Taiwanese government officials, FBI special agents — and foreign businessmen.
Emphasizing the ‘M’
Once the practitioner has identified the weakest link, decided on the approach to take and made a specific plan on how to proceed, the next step in the human-intelligence process is to actually approach the employee and “pitch” him or her. This step is often a gradual effort to establish a relationship of trust between the practitioner and the employee, and contact can begin gradually with requests for small, seemingly harmless bits of information such as internal phone numbers. In this approach, known as the “little hook,” the employee is offered “gifts” in exchange for these favors. The requests gradually become greater in scope until the targeted information is obtained. Other times, the pitch is far more blatant and the human-intelligence practitioner does not take the time to establish a relationship or gradually recruit the target. Instead the practitioner makes a flat-out cash offer for the required goods or shows the target the evidence that will be used for blackmail.
In the current economic environment, with many 401(k) plans now more like 201(k)s, stock options severely underwater and homeowners facing foreclosure, cold hard cash — the M in MICE — is an even more attractive approach. In fact, with employees seeing their investment accounts decline dramatically, and perhaps even facing the possibility of home foreclosure, it is not at all unreasonable to anticipate that companies and foreigners will face a windfall of walk-in sources who will volunteer to sell critical information — and in such a buyer’s market, information can often be bought at fire-sale prices. Employees attempting to sell proprietary information are somewhat common; one of the most publicized examples of this in recent years was the disgruntled Coca-Cola Co. employee who was arrested in July 2006 after attempting to sell Coke’s recipe to rival soft drink company Pepsi.
Mass layoffs also complicate the equation, especially when some of the employees being laid off have access to critical information. If measures are not taken to ensure that the information is protected, the information could easily find itself in the hands of competing companies or even foreign intelligence services.
Not Just a Corporate Concern
The current financial crisis — and vulnerability to espionage — is not just confined to the private sector. There are many federal government employees in the United States who have watched their investments in the stock-based funds of the government’s Thrift Savings Plan wither on the vine over the past two years, and judging from the performance of foreign stock exchanges, the investments of employees in other governments have followed suit. Additionally, government employees tend to live in places with very expensive real estate, like Washington, London, Paris and Tokyo. This means that a foreign intelligence officer armed only with a briefcase full of dollars, euros or yen can make a killing. With many corporate security departments being cut to the bone, many internal security services focused on the counterterrorism mission and many law enforcement agencies chasing white-collar criminals, it is a good time to be in the intelligence business.
One day we will look back on this time through a counterintelligence lens and see that, although it was a time of bear stock markets, it was a tremendous bull market for practitioners of human intelligence.

The Long Arm of the Lawless
By Fred Burton and Scott Stewart
Last week we discussed the impact that crime, and specifically kidnapping, has been having on Mexican citizens and foreigners visiting or living in Mexico. We pointed out that there is almost no area of Mexico immune from the crime and violence. As if on cue, on the night of Feb. 21 a group of heavily armed men threw two grenades at a police building in Zihuatanejo, Guerrero state, wounding at least five people. Zihuatanejo is a normally quiet beach resort just north of Acapulco; the attack has caused the town’s entire police force to go on strike. (Police strikes, or threats of strikes, are not uncommon in Mexico.)
Mexican police have regularly been targeted by drug cartels, with police officials even having been forced to seek safety in the United States, but such incidents have occurred most frequently in areas of high cartel activity like Veracruz state or Palomas. The Zihuatanejo incident is proof of the pervasiveness of violence in Mexico, and demonstrates the impact that such violence quickly can have on an area generally considered safe.
Significantly, the impact of violent Mexican criminals stretches far beyond Mexico itself. In recent weeks, Mexican criminals have been involved in killings in Argentina, Peru and Guatemala, and Mexican criminals have been arrested as far away as Italy and Spain. Their impact — and the extreme violence they embrace — is therefore not limited to Mexico or even just to Latin America. For some years now, STRATFOR has discussed the threat that Mexican cartel violence could spread to the United States, and we have chronicled the spread of such violence to the U.S.-Mexican border and beyond.
Traditionally, Mexican drug-trafficking organizations had focused largely on the transfer of narcotics through Mexico. Once the South American cartels encountered serious problems bringing narcotics directly into the United States, they began to focus more on transporting the narcotics to Mexico. From that point, the Mexican cartels transported them north and then handed them off to U.S. street gangs and other organizations, which handled much of the narcotics distribution inside the United States. In recent years, however, these Mexican groups have grown in power and have begun to take greater control of the entire narcotics-trafficking supply chain.
With greater control comes greater profitability as the percentages demanded by middlemen are cut out. The Mexican cartels have worked to have a greater presence in Central and South America, and now import from South America into Mexico an increasing percentage of the products they sell. They are also diversifying their routes and have gone global; they now even traffic their wares to Europe. At the same time, Mexican drug-trafficking organizations also have increased their distribution operations inside the United States to expand their profits even further. As these Mexican organizations continue to spread beyond the border areas, their profits and power will extend even further — and they will bring their culture of violence to new areas.
Burned in Phoenix
The spillover of violence from Mexico began some time ago in border towns like Laredo and El Paso in Texas, where merchants and wealthy families face extortion and kidnapping threats from Mexican gangs, and where drug dealers who refuse to pay “taxes” to Mexican cartel bosses are gunned down. But now, the threat posed by Mexican criminals is beginning to spread north from the U.S.-Mexican border. One location that has felt this expanding threat most acutely is Phoenix, some 185 miles north of the border. Some sensational cases have highlighted the increased threat in Phoenix, such as a June 2008 armed assault in which a group of heavily armed cartel gunmen dressed like a Phoenix Police Department tactical team fired more than 100 rounds into a residence during the targeted killing of a Jamaican drug dealer who had double-crossed a Mexican cartel. We have also observed cartel-related violence in places like Dallas and Austin, Texas. But Phoenix has been the hardest hit.
Narcotics smuggling and drug-related assassinations are not the only thing the Mexican criminals have brought to Phoenix. Other criminal gangs have been heavily involved in human smuggling, arms smuggling, money laundering and other crimes. Due to the confluence of these Mexican criminal gangs, Phoenix has now become the kidnapping-for-ransom capital of the United States. According to a Phoenix Police Department source, the department received 368 kidnapping reports last year. As we discussed last week, kidnapping is a highly underreported crime in places such as Mexico, making it very difficult to measure accurately. Based upon experience with kidnapping statistics in other parts of the world — specifically Latin America — it would not be unreasonable to assume that there were at least as many unreported kidnappings in Phoenix as there are reported kidnappings.
At present, the kidnapping environment in the United States is very different from that of Mexico, Guatemala or Colombia. In those countries, kidnapping runs rampant and has become a well-developed industry with a substantial established infrastructure. Police corruption and incompetence ensures that kidnappers are rarely caught or successfully prosecuted.
A variety of motives can lie behind kidnappings. In the United States, crime statistics demonstrate that motives such as sexual exploitation, custody disputes and short-term kidnapping for robbery have far surpassed the number of reported kidnappings conducted for ransom. In places like Mexico, kidnapping for ransom is much more common.
The FBI handles kidnapping investigations in the United States. It has developed highly sophisticated teams of agents and resources to devote to investigating this type of crime. Local police departments are also far more proficient and professional in the United States than in Mexico. Because of the advanced capabilities of law enforcement in the United States, the overwhelming majority of criminals involved in kidnapping-for-ransom cases reported to police — between 95 percent and 98 percent — are caught and convicted. There are also stiff federal penalties for kidnapping. Because of this, kidnapping for ransom has become a relatively rare crime in the United States.
Most kidnapping for ransom that does happen in the United States occurs within immigrant communities. In these cases, the perpetrators and victims belong to the same immigrant group (e.g., Chinese Triad gangs kidnapping the families of Chinese businesspeople, or Haitian criminals kidnapping Haitian immigrants) — which is what is happening in Phoenix. The vast majority of the 368 known kidnapping victims in Phoenix are Mexican and Central American immigrants who are being victimized by Mexican or Mexican-American criminals.
The problem in Phoenix involves two main types of kidnapping. One is the abduction of drug dealers or their children, the other is the abduction of illegal aliens.
Drug-related kidnappings often are not strict kidnappings for ransom per se. Instead, they are intended to force the drug dealer to repay a debt to the drug trafficking organization that ordered the kidnapping.
Nondrug-related kidnappings are very different from traditional kidnappings in Mexico or the United States, in which a high-value target is abducted and held for a large ransom. Instead, some of the gangs operating in Phoenix are basing their business model on volume, and are willing to hold a large number of victims for a much smaller individual pay out. Reports have emerged of kidnapping gangs in Phoenix carjacking entire vans full of illegal immigrants away from the coyote smuggling them into the United States. The kidnappers then transport the illegal immigrants to a safe house, where they are held captive in squalid conditions — and often tortured or sexually assaulted with a family member listening in on the phone — to coerce the victims’ family members in the United States or Mexico to pay the ransom for their release. There are also reports of the gangs picking up vehicles full of victims at day labor sites and then transporting them to the kidnapping safe house rather than to the purported work site.
Drug-related kidnappings are less frequent than the nondrug-related abduction of illegal immigrants, but in both types of abductions, the victims are not likely to seek police assistance due to their immigration status or their involvement in illegal activity. This strongly suggests the kidnapping problem greatly exceeds the number of cases reported to police.
Implications for the United States
The kidnapping gangs in Phoenix that target illegal immigrants have found their chosen crime to be lucrative and relatively risk-free. If the flow of illegal immigrants had continued at high levels, there is very little doubt the kidnappers’ operations would have continued as they have for the past few years. The current economic downturn, however, means the flow of illegal immigrants has begun to slow — and by some accounts has even begun to reverse. (Reports suggest many Mexicans are returning home after being unable to find jobs in the United States.)
This reduction in the pool of targets means that we might be fast approaching a point where these groups, which have become accustomed to kidnapping as a source of easy money — and their primary source of income — might be forced to change their method of operating to make a living. While some might pursue other types of criminal activity, some might well decide to diversify their pool of victims. Watching for this shift in targeting is of critical importance. Were some of these gangs to begin targeting U.S. citizens rather than just criminals or illegal immigrants, a tremendous panic would ensue, along with demands to catch the perpetrators.
Such a shift would bring a huge amount of law enforcement pressure onto the kidnapping gangs, to include the FBI. While the FBI is fairly hard-pressed for resources given its heavy counterterrorism, foreign counterintelligence and white-collar crime caseload, it almost certainly would be able to reassign the resources needed to respond to such kidnappings in the face of publicity and a public outcry. Such a law enforcement effort could neutralize these gangs fairly quickly, but probably not quickly enough to prevent any victims from being abducted or harmed.
Since criminal groups are not comprised of fools alone, at least some of these groups will realize that targeting soccer moms will bring an avalanche of law enforcement attention upon them. Therefore, it is very likely that if kidnapping targets become harder to find in Phoenix — or if the law enforcement environment becomes too hostile due to the growing realization of this problem — then the groups may shift geography rather than targeting criteria. In such a scenario, professional kidnapping gangs from Phoenix might migrate to other locations with large communities of Latin American illegal immigrants to victimize. Some of these locations could be relatively close to the Mexican border like Dallas, Houston, San Antonio, San Diego or Los Angeles, though they could also include locations farther inland like Chicago, Atlanta, New York, or even the communities around meat and poultry packing plants in the Midwest and mid-Atlantic states. Such a migration of ethnic criminals would not be unprecedented: Chinese Triad groups from New York for some time have traveled elsewhere on the East Coast, like Atlanta, to engage in extortion and kidnapping against Chinese businessmen there.
The issue of Mexican drug-traffic organizations kidnapping in the United States merits careful attention, especially since criminal gangs in other areas of the country could start imitating the tactics of the Phoenix gangs.

Mexico: The Third War
By Fred Burton and Scott Stewart
Mexico has pretty much always been a rough-and-tumble place. In recent years, however, the security environment has deteriorated rapidly, and parts of the country have become incredibly violent. It is now common to see military weaponry such as fragmentation grenades and assault rifles used almost daily in attacks.
In fact, just last week we noted two separate strings of grenade attacks directed against police in Durango and Michoacan states. In the Michoacan incident, police in Uruapan and Lazaro Cardenas were targeted by three grenade attacks during a 12-hour period. Then on Feb. 17, a major firefight occurred just across the border from the United States in Reynosa, when Mexican authorities attempted to apprehend several armed men seen riding in a vehicle. The men fled to a nearby residence and engaged the pursuing police with gunfire, hand grenades and rocket-propelled grenades (RPGs). After the incident, in which five cartel gunmen were killed and several gunmen, cops, soldiers and civilians were wounded, authorities recovered a 60 mm mortar, five RPG rounds and two fragmentation grenades.
Make no mistake, considering the military weapons now being used in Mexico and the number of deaths involved, the country is in the middle of a war. In fact, there are actually three concurrent wars being waged in Mexico involving the Mexican drug cartels. The first is the battle being waged among the various Mexican drug cartels seeking control over lucrative smuggling corridors, called plazas. One such battleground is Ciudad Juarez, which provides access to the Interstate 10, Interstate 20 and Interstate 25 corridors inside the United States. The second battle is being fought between the various cartels and the Mexican government forces who are seeking to interrupt smuggling operations, curb violence and bring the cartel members to justice.
Then there is a third war being waged in Mexico, though because of its nature it is a bit more subdued. It does not get the same degree of international media attention generated by the running gun battles and grenade and RPG attacks. However, it is no less real, and in many ways it is more dangerous to innocent civilians (as well as foreign tourists and business travelers) than the pitched battles between the cartels and the Mexican government. This third war is the war being waged on the Mexican population by criminals who may or may not be involved with the cartels. Unlike the other battles, where cartel members or government forces are the primary targets and civilians are only killed as collateral damage, on this battlefront, civilians are squarely in the crosshairs.
The Criminal Front
There are many different shapes and sizes of criminal gangs in Mexico. While many of them are in some way related to the drug cartels, others have various types of connections to law enforcement — indeed, some criminal groups are composed of active and retired cops. These various types of criminal gangs target civilians in a number of ways, including, robbery, burglary, carjacking, extortion, fraud and counterfeiting. But of all the crimes committed by these gangs, perhaps the one that creates the most widespread psychological and emotional damage is kidnapping, which also is one of the most underreported crimes. There is no accurate figure for the number of kidnappings that occur in Mexico each year. All of the data regarding kidnapping is based on partial crime statistics and anecdotal accounts and, in the end, can produce only best-guess estimates. Despite this lack of hard data, however, there is little doubt — based even on the low end of these estimates — that Mexico has become the kidnapping capital of the world.
One of the difficult things about studying kidnapping in Mexico is that the crime not only is widespread, affecting almost every corner of the country, but also is executed by a wide range of actors who possess varying levels of professionalism — and very different motives. At one end of the spectrum are the high-end kidnapping gangs that abduct high-net-worth individuals and demand ransoms in the millions of dollars. Such groups employ teams of operatives who carry out specialized tasks such as collecting intelligence, conducting surveillance, snatching the target, negotiating with the victim’s family and establishing and guarding the safe houses.
At the other end of the spectrum are gangs that roam the streets and randomly kidnap targets of opportunity. These gangs are generally less professional than the high-end gangs and often will hold a victim for only a short time. In many instances, these groups hold the victim just long enough to use the victim’s ATM card to drain his or her checking account, or to receive a small ransom of perhaps several hundred or a few thousand dollars from the family. This type of opportunistic kidnapping is often referred to as an “express kidnapping”. Sometimes express kidnapping victims are held in the trunk of a car for the duration of their ordeal, which can sometimes last for days if the victim has a large amount in a checking account and a small daily ATM withdrawal limit. Other times, if an express kidnapping gang discovers it has grabbed a high-value target by accident, the gang will hold the victim longer and demand a much higher ransom. Occasionally, these express kidnapping groups will even “sell” a high-value victim to a more professional kidnapping gang.
Between these extremes there is a wide range of groups that fall somewhere in the middle. These are the groups that might target a bank vice president or branch manager rather than the bank’s CEO, or that might kidnap the owner of a restaurant or other small business rather than a wealthy industrialist. The presence of such a broad spectrum of kidnapping groups ensures that almost no segment of the population is immune from the kidnapping threat. In recent years, the sheer magnitude of the threat in Mexico and the fear it generates has led to a crime called virtual kidnapping. In a virtual kidnapping, the victim is not really kidnapped. Instead, the criminals seek to convince a target’s family that a kidnapping has occurred, and then use threats and psychological pressure to force the family to pay a quick ransom. Although virtual kidnapping has been around for several years, unwitting families continue to fall for the scam, which is a source of easy money. Some virtual kidnappings have even been conducted by criminals using telephones inside prisons.
As noted above, the motives for kidnapping vary. Many of the kidnappings that occur in Mexico are not conducted for ransom. Often the drug cartels will kidnap members of rival gangs or government officials in order to torture and execute them. This torture is conducted to extract information, intimidate rivals and, apparently in some cases, just to have a little fun. The bodies of such victims are frequently found beheaded or otherwise mutilated. Other times, cartel gunmen will kidnap drug dealers who are tardy in payments or who refuse to pay the “tax” required to operate in the cartel’s area of control.
Of course, cartel gunmen do not kidnap only their rivals or cops. As the cartel wars have heated up, and as drug revenues have dropped due to interference from rival cartels or the government, many cartels have resorted to kidnapping for ransom to supplement their cash flow. Perhaps the most widely known group that is engaging in this is the Arellano Felix Organization (AFO), also known as the Tijuana Cartel. The AFO has been reduced to a shadow of its former self, its smuggling operations dramatically impacted by the efforts of the U.S. and Mexican governments, as well as by attacks from other cartels and from an internal power struggle. Because of a steep decrease in smuggling revenues, the group has turned to kidnapping and extortion in order to raise the funds necessary to keep itself alive and to return to prominence as a smuggling organization.
In the Line of Fire
There is very little chance the Mexican government will be able to establish integrity in its law enforcement agencies, or bring law and order to large portions of the country, any time soon. Official corruption and ineptitude are endemic in Mexico, which means that Mexican citizens and visiting foreigners will have to face the threat of kidnapping for the foreseeable future. We believe that for civilians and visiting foreigners, the threat of kidnapping exceeds the threat of being hit by a stray bullet from a cartel firefight. Indeed, things are deteriorating so badly that even professional kidnapping negotiators, once seen as the key to a guaranteed payout, are now being kidnapped themselves. In an even more incredible twist of irony, anti-kidnapping authorities are being abducted and executed.
This environment — and the concerns it has sparked — has provided huge financial opportunities for the private security industry in Mexico. Armored car sales have gone through the roof, as have the number of uniformed guards and executive protection personnel. In fact, the demand for personnel is so acute that security companies are scrambling to find candidates. Such a scramble presents a host of obvious problems, ranging from lack of qualifications to insufficient vetting. In addition to old-fashioned security services, new security-technology companies are also cashing in on the environment of fear, but even high-tech tracking devices can have significant drawbacks and shortcomings.
For many people, armored cars and armed bodyguards can provide a false sense of security, and technology can become a deadly crutch that promotes complacency and actually increases vulnerability. Physical security measures are not enough. The presence of armed bodyguards — or armed guards combined with armored vehicles — does not provide absolute security. This is especially true in Mexico, where large teams of gunmen regularly conduct crimes using military ordnance. Frankly, there are very few executive protection details in the world that have the training and armament to withstand an assault by dozens of attackers armed with assault rifles and RPGs. Private security guards are frequently overwhelmed by Mexican criminals and either killed or forced to flee for their own safety. As we noted in May 2008 after the assassination of Edgar Millan Gomez, acting head of the Mexican Federal Police and the highest-ranking federal cop in Mexico, physical security measures must be supplemented by situational awareness, countersurveillance and protective intelligence.
Criminals look for and exploit vulnerabilities. Their chances for success increase greatly if they are allowed to conduct surveillance at will and are given the opportunity to thoroughly assess the protective security program. We have seen several cases in Mexico in which the criminals even chose to attack despite security measures. In such cases, criminals attack with adequate resources to overcome existing security. For example, if there are protective agents, the attackers will plan to neutralize them first. If there is an armored vehicle, they will find ways to defeat the armor or grab the target when he or she is outside the vehicle. Because of this, criminals must not be allowed to conduct surveillance at will.
Like many crimes, kidnapping is a process. There are certain steps that must be taken to conduct a kidnapping and certain times during the process when those executing it are vulnerable to detection. While these steps may be condensed and accomplished quite quickly in an ad hoc express kidnapping, they are nonetheless followed. In fact, because of the particular steps involved in conducting a kidnapping, the process is not unlike that followed to execute a terrorist attack. The common steps are target selection, planning, deployment, attack, escape and exploitation.
Like the perpetrators of a terrorist attack, those conducting a kidnapping are most vulnerable to detection when they are conducting surveillance — before they are ready to deploy and conduct their attack. As we’ve noted several times in past analyses, one of the secrets of countersurveillance is that most criminals are not very good at conducting surveillance. The primary reason they succeed is that no one is looking for them.
Of course, kidnappers are also very obvious once they launch their attack, pull their weapons and perhaps even begin to shoot. By this time, however, it might very well be too late to escape their attack. They will have selected their attack site and employed the forces they believe they need to complete the operation. While the kidnappers could botch their operation and the target could escape unscathed, it is simply not practical to pin one’s hopes on that possibility. It is clearly better to spot the kidnappers early and avoid their trap before it is sprung and the guns come out.
We have seen many instances of people in Mexico with armed security being kidnapped, and we believe we will likely see more cases of this in the coming months. This trend is due not only to the presence of highly armed and aggressive criminals and the low quality of some security personnel, but also to people placing their trust solely in reactive physical security. Ignoring the very real value of critical, proactive measures such as situational awareness, countersurveillance and protective intelligence can be a fatal mistake.

Retribution for Mughniyah: A Dish Served Cold?
By Fred Burton and Scott Stewart
Feb. 12 will mark the one-year anniversary of the assassination of Imad Mughniyah, one of Hezbollah’s top military commanders. The anniversary certainly will be met with rejoicing in Tel Aviv and Washington — in addition to all the Israelis he killed, Mughniyah also had a significant amount of American blood on his hands. But the date will be met with anger and renewed cries for revenge from Hezbollah’s militants, many of whom were recruited, trained or inspired by Mughniyah.
Because of Hezbollah’s history of conducting retaliatory attacks after the assassination of its leaders, and the frequent and very vocal calls for retribution for the Mughniyah assassination, many observers (including STRATFOR) have been waiting for Hezbollah to exact its revenge. While the attack has not yet happened, threats continue. For example, in a Jan. 29 news conference, Hezbollah General Secretary Sheikh Hassan Nasrallah left no doubt about the group’s intention. “The Israelis live in fear of our revenge,” he said. “The decision to respond to the killing is still on. We decide the time and the place.”
Initially, given the force of the anger and outcry over the assassination, we anticipated that the strike would come soon after the 30-day mourning period for Mughniyah had passed. Clearly, that did not happen. Now a year has passed since the killing, but the anger and outcry have not died down. Indeed, as reflected by Nasrallah’s recent statement, the leadership of Hezbollah remains under a considerable amount of internal pressure to retaliate. Because any retaliation would likely be tempered by concerns over provoking a full-on Israeli attack against Hezbollah infrastructure (similar to the attack in the summer of 2006), any Hezbollah strike would be conducted in a manner that could provide some degree of plausible deniability.
It is important to remember that Hezbollah retains a considerable capacity to conduct terrorist attacks abroad should it choose to do so. In fact, we believe that, due to its high degree of training, vast experience and close ties to the Iranian government, Hezbollah retains a more proficient and dangerous terrorism capability than al Qaeda.
Repeated calls for revenge and Hezbollah’s capabilities have combined to ensure that the Israeli government maintains a high state of awareness. Even though a year has passed, Israelis, too, are waiting for the other shoe to drop. On Feb. 1, Elkana Harnof of the Counterterrorism Bureau in the Israeli Prime Minister’s Office told The Jerusalem Post that, “Based on our information, we believe the organization is planning one large revenge attack close to the anniversary of [Mughniyah’s] death.” Harnof added, “All we can say publicly is that [Hezbollah] has gone to enormous effort to prepare various kinds of terror attacks, and the big one is likely going to take place soon.” Like STRATFOR, the Israelis also believe that the attack will be directed against Israeli or Jewish targets outside of Israel.
Busy Bodies
There are a number of indications that Hezbollah has not been idle in the year since Mughniyah’s death. First, there has been a good deal of preoperational activity by Hezbollah militants in several countries, including the United States. This activity has included surveillance and other intelligence-gathering for targeting purposes. At one point last fall, the activity was so intense inside the United States that law enforcement officials believed a strike was imminent — but it never came. Additionally, there are credible reports that Hezbollah plots to strike Israeli targets in Azerbaijan and the Netherlands have been thwarted. (Although, from information we have received, it does not appear that either of these plots was at an advanced stage of the attack cycle.)
We have no reason to doubt the reports of Hezbollah preoperational activity. It is simply what they do and what they are. Even though the group has not conducted a successful attack overseas since 1994, it does maintain a robust network of operatives who stay busily engaged in operational activities. While many of these operatives are involved primarily in financial and logistical activities, we believe it is worth noting that Hezbollah has never conducted or attempted an attack in a country where it did not have such a support network in place. They use these networks to assist their militant activities in a number of ways, but perhaps the most significant way is in the conduct of preoperational surveillance.
Hezbollah, a creature of the Iranian Islamic Revolution, also has a long history of receiving aid from Iranian embassies in its overseas operations, including its terrorist strikes. Almost inevitably, Hezbollah’s overseas attack plans are found to have murky links of some sort to the Iranian embassy in the country where the attack was to occur, and to the Iranian Ministry of Intelligence and Security or Islamic Revolutionary Guard Corps (IRGC) officers stationed there.
Hezbollah utilizes an “off the shelf” method of planning its terrorist attacks. This is very similar to the way major national military commands operate, where they make contingency war plans against potential adversaries in advance and then work to keep those plans updated. This style of sophisticated, advance planning provides Hezbollah’s senior decision makers with a wide array of tactical options, and allows them to assess a number of attack plans in various parts of the world and quickly select and update a particular attack plan when they make the decision to launch it. When they do decide to pull the trigger, they can strike hard and fast.
This type of planning requires a great deal of intelligence-gathering, not only to produce the initial plans but also to keep them updated. Because it requires a lot of collection activity, this effort likely accounts for much of the operational activity that has been observed over the past year in the United States and elsewhere. These ongoing surveillance operations are not just useful for planning purposes, but they are also good for sowing confusion, creating distractions and causing complacency. If Hezbollah operatives have been seen periodically conducting surveillance around a facility and no attack has followed that activity, over time it becomes very easy for security personnel to write off all such activity as harmless — even when it might not be this time.
Not Crying Wolf
There are some who argue that the lack of an attack by Hezbollah since the Mughniyah assassination, combined with the fact that the group has not used its terrorist capability to conduct an attack for many years, signifies that Hezbollah has abandoned its terrorist ways and instead focused on developing its conventional warfare capability.
We do not buy this argument. First, it ignores the existence and purpose of Hezbollah’s Unit 1800, which, among other things, recruits Palestinians for anti-Israeli terror operations inside Israel and the occupied territories. Second, if Hezbollah had abandoned its terrorist arm, there would be no need for the preoperational planning activity noted previously, and in our opinion, reports of such surveillance activity are too frequent and too widespread to be discounted as false sightings. Granted, such activities do cause jitters and have some effectiveness as a psychological warfare tool, but we do not believe that those limited benefits justify the time and effort being put into Hezbollah’s intelligence-collection program. There is also that pesky problem of explaining the thwarted attack plots in Azerbaijan and the Netherlands. Because of this, we do not believe that the U.S. and Israeli governments (among others) are crying wolf when they provide warnings of pending Hezbollah attacks.
We continue to believe that if there is an attack by Hezbollah, it will likely come in a country where there is an existing Hezbollah support apparatus and an Iranian embassy. (Although, in a confined geographic area, operations could be supported in a third country that lacked one or both of those elements.) We also believe that such an attack is more likely in a country where there is ready access to weapons or explosives, and where there are poor law enforcement and intelligence capabilities. We wrote an analysis discussing this in some detail during the 2006 conflict between Israel and Hezbollah. In that piece, we provided a matrix of the places we believed were most likely to be the site of a Hezbollah attack against Israeli targets, and one of the important criteria we considered was the presence of both an Iranian embassy and a local Hezbollah support network. When we discuss these two elements, it is important to note that in past attacks, the attackers were brought in from the outside in order to provide plausible deniability — but they did receive important support and guidance from the network and embassy.
Since we wrote that analysis in July 2006, there has been a significant increase in Iranian influence in parts of Latin America, including Venezuela, Nicaragua and Bolivia, and Hezbollah has not been far behind. In addition to claims by the U.S. Treasury Department that Venezuelan nationals and organizations are supporting Hezbollah financially, there have been persistent rumors of Hezbollah militants and IRGC officers conducting training at camps in the Venezuelan jungles.
These reports are especially noteworthy when combined with a recent rise in anti-Semitism in Venezuela and an outright hostility toward Jews demonstrated by pro-Chavez militia groups. A pro-Chavez militia is believed to have been involved in the vandalism of the main synagogue in Caracas on the night of Jan. 30-31, 2009. We are among many who don’t buy the government’s official explanation that the vandalism was motivated by robbery. To us, the fact that the intruders remained in the building for several hours, made the effort to scrawl anti-Israeli graffiti inside the building and stole databases containing personal information on congregational members seems very unusual for a simple burglary. Our suspicion is magnified by the extensive anti-Semitic statements made on the Web sites of some of the pro-Chavez militia leaders. All of this raises serious concerns that the Venezuelan government could turn a blind eye to Hezbollah efforts to conduct an attack on Israeli or Jewish interests in that country.
There are many who believe that the anti-Semitic attitudes of the Argentine government in the early 1990s helped embolden Mughniyah and his followers to attack Israeli and Jewish targets there. The anti-Semitic environment in Venezuela today is even more overt and hostile than it was in Argentina.
In keeping with Hezbollah’s history, if an attack is launched, we anticipate that it will have to be fairly spectacular, given the fact that Mughniyah was very important to Hezbollah and its Iranian sponsors — although the attack must not be so spectacular as to cause a full-on Israeli attack in Lebanon. Hezbollah can weather a few airstrikes, but it does not want to provoke an extended conflict — especially as Hezbollah’s political leadership is extremely focused on doing well in the upcoming elections in Lebanon.
Given Hezbollah’s proclivity toward using a hidden hand, we suspect the attack will be conducted by a stealthy and ambiguous cell or cells that will likely have no direct connection to the organization. For example, in July 1994, the group used Palestinian operatives to conduct attacks against the Israeli Embassy and a Jewish nongovernmental organization office in London. Also, as we have seen in prior attacks, if a hardened target such as an Israeli embassy or VIP is not vulnerable, a secondary soft target might be selected. The July 1994 bombing of the Argentine Israelite Mutual Association in Buenos Aires is a prime example of this type of attack. It should serve as a warning to Jewish community centers and other non-Israeli government targets everywhere that even non-Israeli Jewish targets are considered fair game.

Obama and the Treatment of Terrorist Suspects
By Fred Burton and Ben West
U.S. President Barack Obama signed an executive order Feb. 1 approving the continued use of renditions by the CIA. The order seems to go against Obama’s campaign promises to improve the image of the United States abroad, as renditions under the Bush administration had drawn criticism worldwide, especially from members of the European Union. The executive order does not necessarily mean that renditions and other tactics for dealing with terrorist suspects will proceed unchanged, however.
Obama came into office promising changes in the way the United States combats terrorism. One of these changes was a new emphasis on legal processes and a shift away from controversial methods of treating terrorist suspects, like rendition, harsh interrogation techniques and secret prisons. The Obama administration can and will roll back some of these tactics, as demonstrated by the president’s Jan. 22 order to close the detention center at Guantanamo Bay. But some will continue.
Renditions and the Legal Process
Renditions are a powerful tool for counterterrorism operations. They involve agents moving into a foreign country to execute a warrant. Once the fugitive is located, agents track, seize and transport him out of the country for interrogations, or to stand trial, as in the cases of Lebanese hijacker Fawaz Younis, CIA shooter Mir Amal Kanzi, 1993 World Trade Center bombers Abdel Basit (aka Ramzi Yousef) and Mahmud Abouhalima, and even Ilich Ramirez Sanchez (aka Carlos the Jackal).
Some of the individuals targeted for renditions have warrants out for their arrest, but are taking refuge in countries that either lack the law enforcement capability to capture them or cannot arrest and extradite them for political reasons. By contrast, the renditions where there is no indictment or warrant and where the suspect is transported to a secret prison for interrogation and detention without a public trial are far more controversial. Renditions of either kind virtually always occur with the knowledge of the host country, and usually with the host government’s express consent. (Few countries wish to shelter suspected terrorist masterminds.)
Renditions thus involve legal questions as much as they do diplomatic questions. Before renditions can be carried out, the Washington bureaucracy kicks into full swing. The U.S. State Department must consider the diplomatic ramifications. The ambassador in the host country must consider his or her position and judge the response of his or her contacts in the host country government. The U.S. Justice Department must also sign on. Finally, the agency in charge of actually nabbing the suspect must be willing to work within any restrictions imposed by any one of the many individuals who must approve the operation.
Even when the government ultimately deems a rendition operation legal, numerous factors can still stymie the effort (not least of which is that by the time all the necessary approvals have been obtained, the window of opportunity to nab the suspect might have closed). So while Obama’s executive order in theory permits renditions, it is only one part of the whole process; the appropriate members of Obama’s administration must also be on board.
Many members of the Obama administration also served in the Clinton administration, which was widely seen as considering all legal ramifications of potential renditions before taking any action. As a former deputy attorney general in the Clinton administration, new Attorney General Eric Holder enjoyed a reputation for deliberating on renditions to the point of inaction — effectively vetoing such operations.
While an appearance of greater attention to the law might come as a relief to many, actors in the field do not have the luxury of endless deliberation and total consensus — they have a narrow window of opportunity in which to act on perishable intelligence. Assuming that Obama’s administration acts with deliberation and pursues consensus building (as he himself has emphasized, and has demonstrated in the bipartisan nature of his Cabinet selections), the legality of renditions might become moot if they are not agreed upon in a timely manner. There is a fine line to walk between efficiency and legality in this field, with extremes on either side being detrimental to national security.
By their very nature, renditions are ad hoc and rarely fit into a nice, clean process, something that explains their controversial nature. They frequently occur in countries allied to the United States, meaning the practice falls outside the scope of war. And renditions resulting in suspects’ standing trial are far less controversial than those involving secret prisons, harsh interrogation tactics and reliance on third countries to carry out interrogations — tactics disfavored by the Obama administration.
Alternatives to Rendition
Apprehending suspects in foreign countries does not always involve controversial tactics. U.S. counterterrorism officials also use tactics abroad that are not forbidden under U.S. law, though they might be illegal if used within the United States (and could well be illegal in the country where U.S. agents employ them). In general, such tactics remain constant as administrations change. These tactics include surveillance of foreign targets, ruse operations and economic incentives and punishments to encourage cooperation in counterterrorism efforts.
Ruse operations, a less controversial way to apprehend fugitives than renditions, involve deception, obviating the need to jump through the bureaucratic hoops required for renditions. Ruse operations involve luring suspects to a location where U.S. agents can apprehend them legally. This involves persuading targets to venture into international waters, for example, or even to travel to the United States, where U.S. agents lie in wait.
While such tactics avoid the legal complexities surrounding renditions, they are extremely difficult to carry out. Suspects worth chasing around the world typically are not overly gullible, and know where it is safe to travel. So while there is no reason to believe that ruse operations will cease anytime soon, successful ones are few and far between.
Sometimes killing a terrorist target is both more efficient and less legally complex than renditions or ruse operations. Tactical strikes, such as the unmanned aerial vehicle-launched missile strikes against suspected al Qaeda targets in Pakistan, both remove a suspected terrorist target and avoid drawn-out legal processes. Like its predecessor, the Obama administration apparently sees striking at al Qaeda targets along the Pakistani-Afghan border as acceptable within the scope of the ongoing war in Afghanistan, despite Pakistani protests. The latest such U.S. strike came Jan. 23, just three days after Obama took office. Given the administration’s presumed hesitation based on legal reservations and an unwillingness to expand warfare beyond the Afghan theater, this tactic is unlikely to pop up in other areas of the world without a serious threat escalation.
Secret Prisons and Interrogation Issues
Obama on Jan. 22 also ordered the CIA to close its secret prisons around the world that hold detainees without adhering to U.S. legal standards. Because fewer than 100 detainees were held in these prisons, however, this is a minor point.
A different executive order also issued Jan. 22 applied the interrogation guidelines outlined in the U.S. military field handbook and the Geneva Conventions to the CIA. Obama and Holder also have made it clear that the new administration views waterboarding as torture and thus illegal, settling the debate on the matter.
Still, it is only a matter of time before new techniques used by interrogators in the field will face questions of legality and morality. No national leader can micromanage at the field level. Even though the Justice Department and senior White House officials in the Bush administration signed secret findings authorizing the CIA to conduct waterboarding in specific cases, tactical, field-level topics do not stick around at the level of national policy for very long.
With secret prisons on the way out, more restrictions on how agents act in the field and an expected decline in renditions, a greater U.S. reliance on third countries to carry out rendition operations is possible. During the Clinton and Bush administrations, countries like Egypt and Jordan were known to cooperate with U.S. agencies in detaining and interrogating prisoners.
Critics claimed that relying on third countries exploited a loophole that allowed the United States to see that unsavory acts were committed without directly carrying them out. Obama’s emphasis on using diplomacy to improve the U.S. image in the world suggests that his administration will turn to other countries for counterterrorism assistance instead of operating unilaterally. Obama already has asked for other countries to help out more in Afghanistan (specifically European countries). Obama might also tap third countries like Portugal, Switzerland or Germany to take in detainees leaving Guantanamo who are not sent back to home countries like Yemen and Saudi Arabia after the facility’s closure. Working with these countries to ensure safe delivery of the detainees out of U.S. custody will remove a lightning rod for criticism of the United States in the Muslim world.
Delegating counterterrorism responsibilities to other countries allows the United States to avoid the legal complexities inherent in renditions, secret prisons and harsh interrogation. But ultimately, increased reliance on other countries with different interests can enhance the overall complexity of missions. It is also important to remember that the United States possesses one of the most capable counterterrorism forces in the world, and that other countries simply cannot carry out the same missions that the United States does. This is not to say that pursuing U.S. interests abroad does not call for diplomacy (which is one of the administration’s main tools to fight terror), but that seeking international approval and establishing legal cover does reduce efficiency and restrain U.S. capabilities. Finding the balance between fighting terror efficiently and remaining within legal boundaries will be a key challenge for the Obama administration.

Al Qaeda in the Arabian Peninsula: Desperation or New Life?
By Fred Burton and Scott Stewart
The media wing of one of al Qaeda’s Yemeni franchises, al Qaeda in Yemen, released a statement on online jihadist forums Jan. 20 from the group’s leader Nasir al-Wuhayshi, announcing the formation of a single al Qaeda group for the Arabian Peninsula under his command. According to al-Wuhayshi, the new group, al Qaeda in the Arabian Peninsula, would consist of his former group (al Qaeda in Yemen) as well as members of the now-defunct Saudi al Qaeda franchise.
The press release noted that the Saudi militants have pledged allegiance to al-Wuhayshi, an indication that the reorganization was not a merger of equals. This is understandable, given that the jihadists in Yemen have been active recently while their Saudi counterparts have not conducted a meaningful attack in years. The announcement also related that a Saudi national (and former Guantanamo detainee) identified as Abu-Sayyaf al-Shihri has been appointed as al-Wuhayshi’s deputy. In some ways, this is similar to the way Ayman al-Zawahiri and his faction of Egyptian Islamic Jihad swore allegiance to Osama bin Laden and were integrated in to al Qaeda prime.
While not specifically mentioned, the announcement of a single al Qaeda entity for the entire Arabian Peninsula and the unanimous support by jihadist militants on the Arabian Peninsula for al-Wuhayshi suggests the new organization will incorporate elements of the other al Qaeda franchise in Yemen, the Yemen Soldiers Brigade.
The announcement also provided links to downloadable versions of the latest issue of the group’s online magazine, Sada al-Malahim, (Arabic for “The Echo of Battle”). The Web page links provided to download the magazine also featured trailers advertising the pending release of a new video from the group, now referred to by its new name, al Qaeda in the Arabian Peninsula.
The translated name of this new organization sounds very similar to the old Saudi al Qaeda franchise, the al Qaeda Organization in the Arabian Peninsula (in Arabic, “Tandheem al Qaeda fi Jazeerat al-Arabiyah”). But the new group’s new Arabic name, Tanzim Qa’idat al-Jihad fi Jazirat al-Arab, is slightly different. The addition of “al-Jihad” seems to have been influenced by the Iraqi al Qaeda franchise, Tanzim Qaidat al-Jihad fi Bilad al-Rafidayn. The flag of the Islamic State of Iraq also appears in the Jan. 24 video, further illustrating the deep ties between the newly announced organization and al Qaeda in Iraq. Indeed, a number of Yemeni militants traveled to Iraq to fight, and these returning al Qaeda veterans have played a large part in the increased sophistication of militant attacks in Yemen over the past year.
Four days after the Jan. 20 announcement, links for a 19-minute video from the new group titled “We Start from Here and We Will Meet at al-Aqsa” began to appear in jihadist corners of cyberspace. Al-Aqsa refers to the al-Aqsa Mosque on what Jews know as Temple Mount and Muslims refer to as Al Haram Al Sharif. The video threatens Muslim leaders in the region (whom it refers to as criminal tyrants), including Yemeni President Ali Abdullah Saleh, the Saudi royal family, and Egyptian President Hosni Mubarak. It also threatens so-called “crusader forces” supporting the regional Muslim leaders, and promises to carry the jihad from the Arabian Peninsula to Israel so as to liberate Muslim holy sites and brethren in Gaza.
An interview with al-Wuhayshi aired Jan. 27 on Al Jazeera echoed these sentiments. During the interview, al-Wuhayshi noted that the “crusades” against “Palestine, Iraq, Afghanistan and Somalia” have been launched from bases in the Arabian Peninsula, and that because of this, “all crusader interests” in the peninsula “should be struck.”
A Different Take on Events
Most of the analysis in Western media regarding the preceding developments has focused on how two former detainees at the U.S. facility in Guantanamo Bay, Cuba, appear in the Jan. 24 video — one of whom was al-Shihri — and that both were graduates of Saudi Arabia’s ideological rehabilitation program, a government deprogramming course for jihadists. In addition to al-Shihri who, according to the video was Guantanamo detainee 372, the video also contains a statement from Abu-al-Harith Muhammad al-Awfi. Al-Awfi, who was identified as a field commander in the video, was allegedly former Guantanamo detainee 333. Prisoner lists from Guantanamo obtained by STRATFOR appear to confirm that al-Shihri was in fact Guantanamo detainee No. 372. We did not find al-Awfi’s name on the list, however, another name appears as detainee No. 333. Given the proclivity of jihadists to use fraudulent identities, it is entirely possible that al-Awfi is an alias, or that he was held at Guantanamo under an assumed name. At any rate, we doubt al-Awfi would fabricate this claim and then broadcast it in such a public manner.
The media focus on the Guantanamo aspect is understandable in the wake of U.S. President Barack Obama’s Jan. 22 executive order to close the Guantanamo Bay detention facility and all the complexities surrounding that decision. Clearly, some men released from Guantanamo, and even those graduated from the Saudi government’s rehabilitation program, can and have returned to the jihadist fold. Ideology is hard to extinguish, especially an ideology that teaches adherents that there is a war against Islam and that the “true believers” will be persecuted for their beliefs. Al Qaeda has even taken this one step further and has worked to prepare its members not only to face death, but also to endure imprisonment and harsh interrogation. A substantial number of al Qaeda cadres, such as al-Zawahiri and Abu Yahya al-Libi, have endured both, and have been instrumental in helping members withstand captivity and interrogation.
This physical and ideological preparation means that efforts to induce captured militants to abandon their ideology can wind up reinforcing that ideology when those efforts appear to prove important tenets of the ideology, such as that adherents will be persecuted and that the Muslim rulers are aligned with the West. It is also important to realize that radical Islamist extremists, ultraconservatives and traditionalists tend to have a far better grasp of Islamic religious texts than their moderate, liberal and modernist counterparts. Hence, they have an edge over them on the ideological battlefield. Those opposing radicals and extremists have a long way to go before they can produce a coherent legitimate, authoritative and authentic alternative Islamic discourse.
In any event, in practical terms there is no system of “re-education” that is 100 percent effective in eradicating an ideology in humans except execution. There will always be people who will figure out how to game the system and regurgitate whatever is necessary to placate their jailers so as to win release. Because of this, it is not surprising to see people like al-Shihri and al-Awfi released only to re-emerge in their former molds.
Another remarkable feature of the Jan. 27 video is that it showcased four different leaders of the regional group, something rarely seen. In addition to al-Wuhayshi, al-Shihri and al-Awfi, the video also included a statement from Qasim al-Rami, who is suspected of having been involved with the operational planning of the suicide attack on a group of Spanish tourists in Marib, Yemen, in July 2007.
In our estimation, however, perhaps the most remarkable feature about these recent statements from al Qaeda in the Arabian Peninsula is not the appearance of these two former Guantanamo detainees in the video, or the appearance of four distinct leaders of the group in a single video, but rather what the statements tell us about the state of the al Qaeda franchises in Saudi Arabia and Yemen.
Signposts
That the remnants of the Saudi al Qaeda franchise have been forced to flee their country and join up with the Yemeni group demonstrates that the Saudi government’s campaign to eradicate the jihadist organization has been very successful. The Saudi franchise was very active in 2003 and 2004, but has not attempted a significant attack since the February 2006 attack against the oil facility in Abqaiq. In spite of the large number of Saudi fighters who have traveled to militant training camps, and to fight in places such as Iraq, the Saudi franchise has had significant problems organizing operational cells inside the kingdom. Additionally, since the death of Abdel Aziz al-Muqrin, the Saudi franchise has struggled to find a charismatic and savvy leader. (The Saudis have killed several leaders who succeeded al-Muqrin.) In a militant organization conducting an insurgency or terrorist operations, leadership is critical not only to the operational success of the group but also to its ability to recruit new members, raise funding and acquire resources such as weapons.
Like the Saudi node, the fortunes of other al Qaeda regional franchises have risen or fallen based upon ability of the franchise’s leadership. For example, in August 2006 al Qaeda announced with great fanfare that the Egyptian militant group Gamaah al-Islamiyah (GAI) had joined forces with al Qaeda. Likewise, in November 2007 al Qaeda announced that the Libyan Islamic Fighting Group (LIFG) had formally joined the al Qaeda network. But neither of these groups really ever got off the ground. While a large portion of the responsibility for the groups’ lack of success may be due to the oppressive natures of the Egyptian and Libyan governments and the aggressive efforts those governments undertook to control the new al Qaeda franchises, we believe the lack of success also stems from poor leadership. (There are certainly other significant factors contributing to the failure of al Qaeda nodes in various places, such as the alienation of the local population.)
Conversely, we believe that an important reason for the resurgence of the al Qaeda franchise in Yemen has been the leadership of al-Wuhayshi. As we have noted in the past, Yemen is a much easier environment for militants to operate in than either Egypt or Libya. There are many Salafists employed in the Yemeni security and intelligence apparatus who at the very least are sympathetic to the jihadist cause. These men are holdovers from the Yemeni civil war, when Saleh formed an alliance with Salafists and recruited jihadists to fight Marxist forces in South Yemen. This alliance continues today, with Saleh deriving significant political support from radical Islamists. Many of the state’s key institutions (including the military) employ Salafists, making any major crackdown on militant Islamists in the country politically difficult. This sentiment among the security forces also helps explain the many jihadists who have escaped from Yemeni prisons — such as al-Wuhayshi.
Yemen has also long been at the crossroads of a number of jihadist theaters, including Afghanistan/Pakistan, Iraq, Saudi Arabia, the Levant, Egypt and Somalia. Yemen also is a country with a thriving arms market, a desert warrior tradition and a tribal culture that often bridles against government authority and that makes it difficult for the government to assert control over large swaths of the country. Yemeni tribesmen also tend to be religiously conservative and susceptible to the influence of jihadist theology.
In spite of this favorable environment, the Yemeni al Qaeda franchise has largely floundered since 9/11. Much of this is due to U.S. and Yemeni efforts to decapitate the group, such as the strike by a U.S. unmanned aerial vehicle on then-leader of al Qaeda in Yemen, Abu Ali al-Harithi, in late 2002 and the subsequent arrest of his replacement, Mohammed Hamdi al-Ahdal, in late 2003. The combination of these operations in such a short period helped cripple al Qaeda in Yemen’s operational capability.
As STRATFOR noted in spring 2008, however, al Qaeda militants in Yemen have become more active and more effective under the leadership of al-Wuhayshi, an ethnic Yemeni who spent time in Afghanistan as a lieutenant under bin Laden. After his time with bin Laden, Iranian authorities arrested al-Wuhayshi, later returning him to Yemen in 2003 via an Iranian-Yemeni extradition deal. He subsequently escaped from a high-security prison outside the Yemeni capital, Sanaa, in February 2006 along with Jamal al-Badawi (the leader of the cell that carried out the suicide bombing of the USS Cole).
Al-Wuhayshi’s established ties with al Qaeda prime and bin Laden in particular not only provide him legitimacy in the eyes of other jihadists, in more practical terms, they may have provided him the opportunity to learn the tradecraft necessary to successfully lead a militant group and conduct operations. His close ties to influential veterans of al Qaeda in Yemen like al-Badawi also may have helped him infuse new energy into the struggle in Yemen in 2008.
While the group had been on a rising trajectory in 2008, things had been eerily quiet in Yemen since the Sept. 17, 2008, attack against the U.S. Embassy in Sanaa and the resulting campaign against the group. The recent flurry of statements has broken the quiet, followed by a Warden Message on Jan. 26 warning of a possible threat against the compound of the U.S. Embassy in Yemen and a firefight at a security checkpoint near the embassy hours later.
At this point, it appears the shooting incident may not be related to the threat warning and may instead have been the result of jumpy nerves. Reports suggest the police may have fired at a speeding car before the occupants, who were armed tribesmen, fired back. Although there have been efforts to crack down on the carrying of weapons in Sanaa, virtually every Yemeni male owns an AK-variant assault rifle of some sort; like the ceremonial jambiya dagger, such a rifle is considered a must-have accessory in most parts of the country. Not surprisingly, incidents involving gunfire are not uncommon in Yemen.
Either way, we will continue to keep a close eye on Yemen and al-Qaeda in the Arabian Peninsula. As we have seen in the past, press statements are not necessarily indicative of future jihadist performance. It will be important to watch developments in Yemen for signs that will help determine whether this recent merger and announcement is a sign of desperation by a declining group, or whether the addition of fresh blood from Saudi Arabia will help breathe new life into al-Wuhayshi’s operations and provide his group the means to make good on its threats.

A Killing in Vienna and the Chechen Connection
By Fred Burton and Ben West
As Umar Israilov, a 27-year-old Chechen political refugee living in Vienna, Austria, returned home on foot after grocery shopping Jan. 13, he spotted two men standing outside his apartment building — one of whom had a gun. Upon spotting the men, Israilov dropped his groceries and fled down Leopoldauer Street in the Floridsdorf neighborhood of Vienna, dodging cars and pedestrians. But the gunman managed to wound Israilov, halting his flight. The two men then approached him in a side alley, where the armed man shot Israilov twice in the head, killing him.
One man has been detained in connection with the killing, which a STRATFOR source alleges was carried out by organized criminal assets in Vienna at the behest of Chechen President Ramzan Kadyrov and with Kremlin approval. Israilov was an outspoken critic of Kadyrov and Russian Prime Minister Vladimir Putin. Because of this, Israilov had frequently expressed concerns for his safety and that of his family.
Before seeking asylum in Austria, Israilov fought during the Second Chechen War against Russian forces, which captured him in 2003. Afterward, he served as one of Kadyrov’s bodyguards, a position that gave him a front-row seat to the activities of Kadyrov, who at that time led the militia of his father, then-Chechen President Akhmed Kadyrov. (Ramzan Kadyrov became Chechen president in 2007, three years after his father’s assassination.) Israilov and the younger Kadyrov had a falling-out in 2004, after which Israilov said his former boss tortured him using electric charges.
Israilov fled to the West shortly thereafter, first seeking asylum in Poland and later obtaining asylum in Austria. Once in Europe, he often spoke out against Ramzan Kadyrov, filing complaints about his alleged torture with the European Court of Human Rights in Strasbourg, France, and talking to reporters from The New York Times about his experiences. While allegations that Kadyrov and his associates committed torture were not new, Israilov’s former position in Kadyrov’s circle set him apart as a dissident — and marked him as a security risk to his former employers due to his firsthand knowledge of how Kadyrov operates. Israilov reportedly told police in Vienna that he felt threatened and asked for extra security.
Austria has long been a popular place for political asylum-seekers who are facing threats due to their political views; providing adequate protection for all of these dissidents is impossible. Israilov further endangered himself by maintaining a relatively high profile due to his court filings and conversations with journalists. (He might have sought publicity in a bid to support himself and his family financially.)
Chechnya, Russia and the Israilov Killing
According to Israilov’s father, in June 2008 a Chechen visited the younger Israilov, showing him a hit list of 300 Chechens who oppose Kadyrov. Ramzan Kadyrov is well-known for not tolerating detractors, allegedly having ordered the deaths of dissenters before. While spokesmen for Kadyrov have distanced the Chechen president from the Israilov killing, saying the latter did not pose a significant threat to Chechnya, Israilov’s killing could well have been intended as an example to other Chechen dissidents who felt safe abroad. While Chechen dissidents routinely die or disappear under murky circumstances in their country, this is the first time a vocal Chechen dissident has been slain abroad. The brazen nature of Israilov’s killing in particular suggests an effort to highlight the vulnerability of exiled Chechen dissidents.
According to STRATFOR sources, agents were not sent from Chechnya to carry out this operation. After getting permission from Moscow for the Israilov killing — Russia keeps a tight grip on Chechnya, so Moscow would interpret a unilateral assassination abroad as subversive — Kadyrov allegedly mobilized organized criminals in Austria to carry out the deed. While it is not clear exactly which organized criminal faction carried out the killing, the man detained in connection with the killing was a Chechen who has lived in Austria for several years under the name Otto Kaltenbrunner. While he has not been charged with anything, the getaway car was registered in his name — suggesting the involvement of Chechen organized crime, which has a strong presence in Russia and Europe as well as in the Caucasus.
As major fighting in the Second Chechen War wound down from 2005 to 2007, many of the militants who had fought the Russians disbanded and fled the country. These soldiers, highly trained and accustomed to using violence to get their way, had limited options beyond putting their skills to use with the various Chechen organized criminal factions that thrived in postwar Chechnya. Chechen gangs are prized for their high level of training and brutality, abilities that have proved very valuable to criminal groups in Russia, the Caucasus and Europe.
The high degree of professionalism in the Israilov killing tends to support the existence of a Chechen organized criminal angle. This professionalism includes the audacity of Israilov’s killers, who attacked in broad daylight on a busy street. It also includes their ability to kill Israilov (himself a militant trained under Kadyrov) without any significant struggle or collateral damage. Moreover, at least a low level of surveillance must have been carried out on Israilov’s residence to confirm that he lived there and to establish his schedule so the attackers could wait for him.
The Chechen leadership has a relationship with Chechen organized crime because of the military and security service background of many Chechen criminals, and because Kadyrov led these militias during the Russo-Chechen wars of the 1990s. Such a relationship could be called on in commissioning a killing in Vienna.
Using hired guns from Austria would allow any foreign entity that ordered the killing to distance itself from the crime. Even if Austrian police managed to track down and initiate a prosecution of those who carried out the killing, arranging the extraditions of suspects from Russia would be virtually impossible without Moscow’s cooperation. Russia has not cooperated with British authorities investigating the killing of Alexander Litvinenko in 2006, for example, and the investigation has turned into a political skirmish in an already-tense relationship between the two countries. Attempting to pursue the Israilov case with Russia probably would bring a similar outcome for Austria: inconclusive findings and weakened relations with a Russia that is asserting itself much more than it did in 2006.
Suspicions of Moscow’s involvement in the assassinations of Russian dissidents by various means have become common in the past three years. Russian organized criminal groups, as well as the Russian domestic security and intelligence service, the FSB, are the most likely culprits behind the increase in high-profile assassinations of Russian dissidents over the last few years. Many of the assassinations have been connected to the issue of Chechnya and alleged human rights abuses there.
The Chechen wars are a sensitive issue for both Russians and Chechens. Those who stir up tales of past offenses by either side are seen as undermining the stability in Chechnya that has come about because of the ongoing alliance between Putin and Kadyrov. The suspicious deaths of individuals (followed by their date of death) who fall into this category include:
- Paul Klebnikov, July 2004. The editor of Forbes’ Russian edition, Klebnikov was shot dead in Moscow as he was heading into a subway station. The driver of a stolen car that pulled out of a parking lot and drove toward Klebnikov fired four shots before fleeing the scene.
- Anna Politkovskaya, October 2006. A prominent journalist and critic of the Kremlin, Politkovskaya was in the process of publishing a series condemning the government’s policy in Chechnya. She was shot in the head in her apartment building.
- Alexander Litvinenko, November 2006. Litvinenko was a former KGB agent who had defected to the United Kingdom and published books on the internal workings of Putin’s FSB networks, and he was critical of the new Russian state. He was poisoned with radioactive polonium-210.
- Ivan Safronov, March 2007. Safronov was a journalist who criticized the state of the Russian military and was accused of leaking military affairs to foreign parties. He allegedly committed suicide by jumping from the fifth floor of his apartment building, though some reports say a person behind him forced him out of the building.
- Oleg Zhukovsky, December 2007. Zhukovsky was an executive of the VTB bank, which at the time of his death was being taken over by the state so the Kremlin could handpick its senior officers to oversee many strategic state accounts. Zhukovsky allegedly performed the feat of committing suicide by being tied to a chair and thrown into his swimming pool, where he drowned.
- Arkady Patarkatsishvili, February 2008. A wealthy Georgian-Russian businessman, Patarkatsishvili was extensively involved in Georgian politics. Patarkatsishvili died in the United Kingdom of coronary complications that resembled a heart attack. His family and many in Georgia have accused the FSB of involvement, however, saying the FSB has many untraceable poisons at its disposal.
- Leonid Rozhetskin, March 2008. Rozhetskin was an international financier and lawyer who held stakes in strategic companies, like mobile phone giant MegaFon. He disappeared while in Latvia after losing Kremlin backing by selling his assets to multiple parties, including some government ministers who are former FSB agents.
- Ruslan Yamadayev, September 2008. Yamadayev was a Chechen military leader and former member of the State Duma. He was shot in his Mercedes as it was stopped at a red light near the Kremlin in Moscow.
- Stanislav Markelov, January 2009. A prominent Russian lawyer who had prosecuted an army colonel convicted of murdering a Chechen woman, Markelov was shot dead along with a journalist in broad daylight on a Moscow street near the Kremlin. He was also involved in the case of Anna Politkovskaya.
Vienna, City of International Intrigue
Vienna has long been a key battleground for international disputes between competing countries’ security and intelligence operatives. No stranger to international intrigue and attacks, the Austrian capital has had a reputation for assassination plots, intelligence gathering and foreign operatives conducting missions against dissidents who thought they were safe living in a Western city in an otherwise peaceful country.
In one example of this tradition, Iranian agents linked to Iran’s Ministry of Intelligence and Security shot and killed three members of a Kurdish delegation conducting negotiations with the Iranian leadership in 1989. Similarly, many cases of espionage between the United States and the Soviet Union unfolded in Vienna, including the cases of Marine Sgt. Clayton Lonetree and Felix Block, who passed information to the Soviets when he was second-in-command at the U.S. Embassy in Vienna. The Israilov case is thus probably only the latest in a long tradition of foreign intrigue.
Austria’s central location between the former Warsaw Pact countries of Czechoslovakia and Hungary and NATO countries of Italy and West Germany, along with Vienna’s official neutrality, made Austria a natural Cold War battleground. The Soviet Union, the United Kingdom and the United States all focused intelligence-gathering capabilities there. And as Cold War battle lines are redrawn with Russia’s resurgence, the significance of places like Vienna re-emerges. Considering that these activities only began to slacken less than 20 years ago, old intelligence networks could be put into operation again with relative ease.
The blurring of the line between Russian intelligence agents and organized crime that occurred during the 1990s means that Russia still has a considerable network around the world, though now, elements of this network also are engaged in criminal activities. This network must be considered when looking at cases like that of Israilov.
Significantly, Austria is home to the largest Chechen refugee population in Europe. An estimated 20,000 Chechens — not all of them legal residents — live in the Central European country; many of them fled the bloody Chechen wars with Russia. In general, ethnic organized criminal outfits flourish among immigrants or refugee populations because they can offer illegal immigrants services that they cannot get from the state. They also flourish there because they can use the immigrant community to operate with more secrecy. This is because many immigrant communities live apart from the indigenous population, often in separate neighborhoods, speak a different language and generally stick together in opposition to their host country’s police services. Additionally, family bonds (intensified when around strangers) strengthen ties within immigrant communities, allowing for the kind of secrecy that lets organized crime thrive.
The establishment of a strong Chechen presence in Austria, along with a pre-existing Russian presence, means that Chechnya and Russia have a long reach in the country. Considering the organized crime-FSB nexus, the increase in politically motivated murders of Russian dissidents and how Moscow most likely was pleased with Israilov’s demise, Russian assets in Vienna could well have been involved in the murder. While Russia is broadly suspected of killing dissidents abroad in recent years, Chechnya is not known to have carried out attacks in the European Union before — meaning the Israilov killing will send chills down the spines of exiled Chechen dissidents.
Editor’s Note: An earlier version of this analysis, which was emailed to customers, incorrectly stated that Paul Klebnikov was killed in July 2008.

Mitigating Mumbai
By Fred Burton and Scott Stewart
On Jan. 8, the U.S. Senate Committee on Homeland Security and Governmental Affairs heard testimony from a number of experts about the lessons learned from the Nov. 26 Mumbai attack. According to Sen. Susan Collins (R-Maine), the Mumbai attack deserves attention because it raises important questions about the plans of U.S. authorities to prevent, prepare for and respond to similar attacks directed against targets in the United States.
As we’ve previously pointed out, the tactics employed in the Mumbai attack were not new or remarkable, although the attackers did incorporate some tactical innovations due to their use of modern technology. As shown by a long string of historic terror attacks, armed assaults can be quite effective. There are a number of factors, however, that would reduce the effectiveness of a similar attack inside the United States or many Western European countries.
Armed Assaults
Armed assaults employing small arms and grenades have long been a staple of modern terrorism. Such assaults have been employed in many famous terrorist attacks conducted by a wide array of actors, such as the Black September operation against the Israeli athletes at the 1972 Munich Olympics; the December 1975 seizure of the Organization of the Petroleum Exporting Countries headquarters in Vienna, Austria, led by Carlos the Jackal; the December 1985 simultaneous attacks against the airports in Rome and Vienna by the Abu Nidal Organization; and even the December 2001 attack against the Indian Parliament building in New Delhi led by Kashmiri militants.
In a particularly brutal armed assault, a large group of Chechen militants stormed a school in Beslan, North Ossetia in September 2004, taking more than 1,000 hostages and booby-trapping the school with scores of anti-personnel mines and improvised explosive devices. The attack, standoff and eventual storming of the school by Russian authorities after a three-day siege resulted in the deaths of more than 320 people, half of them children.
In some instances — such as the December 1996 seizure of the Japanese ambassador’s residence in Lima, Peru, by the Tupac Amaru Revolutionary Movement — the objective of the armed assault was to take and intentionally hold hostages for a long period of time. In other instances, such as the May 1972 assault on Lod Airport by members of the Japanese Red Army, the armed assault was a suicide attack designed simply to kill as many victims as possible before the assailants themselves were killed or incapacitated. Even though Mumbai became a protracted operation, its planning and execution indicate it was intended as the second sort of attack — the attackers were ordered to inflict maximum damage and to not be taken alive.
When viewed as a part of this historic trend, perhaps the most revolutionary aspect of the Mumbai attacks was the assailants’ use of modern technology to assist them with planning the attack and with their command, control and communications during the execution of their operation. Technology not only assisted the Mumbai attackers in conducting their preoperational surveillance, it also enabled them to use satellite imagery of Mumbai and GPS receivers to reach their assigned landing spots by water and move to their assigned attack sites. (Mumbai was not the first instance of militants using boats to reach their targets; several Palestinian groups have used boats in attacks against Israeli coastal towns, while other groups — such as the Abu Sayyaf group in the Philippines and the Liberation Tigers of Tamil Eelam in Sri Lanka — have long used watercraft to transport teams for armed assault missions.)
Modern technology also allowed the tactical commanders and even individual team members to use satellite and cell phones to place calls to their strategic commanders in Pakistan, as demonstrated by some of the chilling audio captured by the Indian government. In transcripts of some of the conversations released by the Indian government, an unidentified commander reportedly exhorted the exhausted militants at the Nariman House to continue fighting. In another conversation, an off-site commander allegedly ordered the militants holed up in the Oberoi Hotel to kill their non-Muslim captives. From the transcripts, it is also apparent that the commanders were watching news coverage of the siege and then passing information to the attackers on the ground.
In the past, when a facility was seized, police tactics often called for the power and phone lines to be cut off to limit attackers’ ability to communicate with the outside world. Such measures have proven ineffective in the era of cell phones and portable satellite communications.
Mitigating Armed Assaults
STRATFOR has long held that the United States and Europe are vulnerable to armed attacks against soft targets. In an open society, it is impossible to protect everything. Moreover, conducting attacks against soft targets such as hotels or malls can be done with ease, and can prove quite effective at creating carnage.
In fact, as we’ve previously pointed out, Cho Seung Hui killed more people with handguns in his attack at Virginia Tech than Jemaah Islamiyah was able to kill in Jakarta, Indonesia, in the August 2003 bombing of the Marriott Hotel and the September 2004 bombing of the Australian Embassy combined. Clearly, armed assaults pose a threat.
That said, while militants can use this same modus operandi and technology to attack targets in the United States or Europe, several factors would help mitigate the impact of such armed assaults.
First, reviewing the long history of armed assaults in modern terrorism shows that the tactic has forced many countries to develop specialized and highly trained forces to combat it. For example, it was the failed rescue attempt of the Israeli athletes in Munich that motivated the German government to create the elite Grenzschutzgruppe 9 (GSG 9), which would become one of the best counterterrorism forces in the world. The activities of the Provisional Irish Republican Army likewise helped shape the British Special Air Service into its role as an elite counterterrorism force.
While some developing countries, such as Singapore, have managed to develop highly trained and extremely competent counterterrorism units and effectively use such units, India is not one of them. In spite of the long history of terrorist activity directed against India, Indian security and counterterrorism assets are simply too poorly funded and organized to comprehensively address the militant threats the country faces. Even the elite National Security Guards (NSG), also known as the Black Cats, provided a sluggish response to the Mumbai attack.
When we view the entire spectrum of counterterrorism capabilities, however, the greatest gap in capability between Indian and European or Indian and American forces is not the gap between elite counterterrorism forces, but the gap at the individual street cop level. This is significant because street cops are a critical line of defense against terrorists. The importance of street cops pertains not only to preventing attacks by collecting critical intelligence, noticing surveillance or other preoperational planning activity and questioning or arresting suspects, it also applies to the tactical response to armed attackers.
Among the most troubling aspects of the Mumbai attack were accounts by journalists of Indian police shooting at the attackers and missing them. Some journalists have said this failure can be explained by the fact that many Indian police officers are armed with antiquated revolvers and Lee-Enfield rifles. But the Lee-Enfield is an accurate and reliable battle rifle that shoots a powerful cartridge, the .303 British. Like the .30-06 Springfield and the .308 Winchester, the .303 British is a man stopper and is deadly out to long ranges. The kinetic energy produced by such cartridges will penetrate body armor up to the heavy Type III level, and the amount of kinetic energy they impart will often even cause considerable shock trauma damage to people wearing heavy body armor.
The .303 British is a formidable round that has killed a lot of people and big game over the past century. Afghan sharpshooters used the Lee-Enfield with great success against the Soviets, and Taliban are still using it against coalition forces in Afghanistan. There is also nothing wrong with a .38 revolver in capable hands. The problem, then, lies in the hands — more specifically, in the training — of the officers so armed. If a police officer does not have the marksmanship to kill (or even hit) a suspect at 20 or 30 meters with aimed fire from a battle rifle, there is little chance he can control the automatic fire from an assault rifle or submachine gun effectively. In the end, the attackers outclassed the Indian police with their marksmanship far more than they outclassed them with their armaments.
By and large, U.S. and European police officers are better-trained marksmen than their Indian counterparts. U.S. and European officers also must regularly go to the shooting range for marksmanship requalification to maintain those skills. This means that in a Mumbai-type scenario in the United States or Europe, the gunmen would not have been allowed the freedom of movement they were in Mumbai, where they were able to walk past police officers firing at them without being hit.
The overall tactical ability of the average street cop is important. While most large police departments in the United States have very skilled tactical units, such as the New York Police Department’s Emergency Services Unit, these units may take time to respond to an incident in progress. In the case of a Mumbai-style attack, where there are multiple teams with multiple attackers operating in different areas of the city, such units might not be able to tackle multiple sites simultaneously. This means that like in Mumbai, street cops probably not only will have the first contact with the attackers, but also might be called on to be the primary force to stop them.
In the United States, local police would be aided during such a confrontation by the widespread adoption of “active shooter” training programs. Following a series of attacks including the highly publicized 1999 Columbine school shooting, it became apparent that the standard police tactic of surrounding an attacker and waiting for the SWAT team to go in and engage the shooter was not effective when the attacker was actively shooting people. As police officers waited outside for backup, additional victims were being killed. To remedy this, many police departments have instituted active shooter programs.
While the details of active shooter tactical programs may vary somewhat from department to department, the main idea behind them is that the active shooter must be engaged and neutralized as quickly as possible, not allowed to continue on a killing spree unopposed. Depending on the location and situation, this engagement sometimes is accomplished by a single officer or pair of officers with shoulder weapons. Other times, it is accomplished by a group of four or more officers trained to quickly organize and rapidly react as a team to locations where the assailant is firing.
Active shooter programs have proven effective in limiting the damage done by shooters in several cases, including the March 2005 shooting at a high school in Red Lake, Minn. Today, many police departments not only have a policy of confronting active shooters, they also have provided their officers with training courses teaching them how to do so effectively. Such training could make a world of difference in a Mumbai-type attack, where there may not be sufficient time or resources for a specialized tactical team to respond.
In the United States, armed off-duty cops and civilians also can make a difference in armed attacks. In February 2007, for example, a heavily armed gunman who had killed five victims in the Trolley Square Mall in Salt Lake City was confronted by an off-duty police officer, who cornered the shooter and kept him pinned down until other officers could arrive and kill the shooter. This off-duty officer’s actions plainly saved many lives that evening.
One other factor where European and American law enforcement officers have an edge over their Indian counterparts is in command, control and communications. Certainly, an armed assault is very chaotic no matter where it happens, but law enforcement agencies in the United States have a lot of experience in dealing with communications during complex situations. One such example is the February 1997 shootout in North Hollywood, where two heavily armed suspects wearing body armor engaged officers from the Los Angeles Police Department in a lengthy shootout. Following that incident, in which the responding officers’ handguns and shotguns proved incapable of penetrating the suspects’ heavy body armor, many police departments began to arm at least some of their units with AR-15s and other high-powered rifles. Ironically, the LAPD officers almost certainly would have welcomed a couple of old battle rifles like the Lee-Enfield in the gunfight that day.
Hindsight is another huge advantage European and American law enforcement officers now enjoy. Police and security agencies commonly examine serious terrorist attacks for tactical details that can then be used to plan and conduct training exercises designed to counteract the tactics employed. As evidenced by the Jan. 8 testimony of NYPD Commissioner Ray Kelly before the Senate Committee on Homeland Security and Governmental Affairs, Mumbai has gotten the attention of police agencies around the world. The NYPD and others already are studying ways to rapidly deny attackers the communications ability they enjoyed in Mumbai during future attacks. The preoperational surveillance conducted by the Mumbai attackers is also being closely scrutinized to assist in countersurveillance operations elsewhere.
A seen by the Fort Dix plot and actual armed attacks against targets, such as the July 2002 assault on the El Al ticket counter at Los Angeles International Airport and the July 2006 attack against the Jewish Federation of Greater Seattle, the threat of armed terrorist assaults against soft targets in the United States is quite real. However, the U.S. law enforcement environment is quite different from that in India — and that difference will help mitigate the effects of a Mumbai-like attack.

Jihadism in 2009: The Trends Continue
By Fred Burton and Scott Stewart
For the past several years, we have published an annual forecast for al Qaeda and the jihadist movement. Since the January 2006 forecast, we have focused heavily on the devolution of jihadism from a phenomenon focused primarily on al Qaeda the group to one based primarily on al Qaeda the movement. Last year, we argued that al Qaeda was struggling to remain relevant and that al Qaeda prime had been marginalized in the physical battlefield. This marginalization of al Qaeda prime had caused that group to forfeit its position at the vanguard of the physical jihad, though it remained deeply involved in the leadership of the ideological battle.
As a quick reminder, STRATFOR views what most people refer to as “al Qaeda” as a global jihadist network rather than a monolithic entity. This network consists of three distinct entities. The first is a core vanguard, which we frequently refer to as al Qaeda prime, comprising Osama bin Laden and his trusted associates. The second is composed of al Qaeda franchise groupsthe grassroots jihadist movement inspired by al Qaeda prime and the franchise groups. such as al Qaeda in Iraq, and the third comprises
As indicated by the title of this forecast, we believe that the trends we have discussed in previous years will continue, and that al Qaeda prime has become marginalized on the physical battlefield to the extent that we have not even mentioned their name in the title. The regional jihadist franchises and grassroots operatives pose a much more significant threat in terms of security concerns, though it is important to note that those concerns will remain tactical and not rise to the level of a strategic threat. In our view, the sort of strategic challenge that al Qaeda prime posed with the 9/11 attacks simply cannot be replicated without a major change in geopolitical alignments — a change we do not anticipate in 2009.
2008 in Review
Before diving into our forecast for the coming year, let’s take a quick look back at what we said would happen in 2008 and see what we got right and what we did not.
What we got right:
- Al Qaeda core focused on the ideological battle. Another year has passed without a physical attack by the al Qaeda core. As we noted last October, al Qaeda spent a tremendous amount of effort in 2008 fighting the ideological battle. The core leadership still appears to be very intent on countering the thoughts presented in a book written in 2007 by Sayyed Imam al-Sharif, also known as Dr. Fadl, an imprisoned Egyptian radical and a founder (with Ayman al-Zawahiri) of Egyptian Islamic Jihad. Al-Sharif’s book is seen as such a threat because he provides theological arguments that counter many of the core teachings used by al Qaeda to justify jihadism. On Dec. 13, an 85-page treatise by one of al Qaeda’s leading religious authorities, Abu-Yahya al-Libi, was released to jihadist Web sites in the latest of al Qaeda’s many efforts to counter Dr. Fadl’s arguments.
- Pakistan will be important as a potential flashpoint. Eight days after we wrote this, former Pakistani Prime Minister Benazir Bhutto was assassinated. Since then, Pakistan has become the focal point on the physical battlefield.
- The November 2007 addition of the Libyan Islamic Fighting Group (LIFG) to the global jihadist network will not pose a serious threat to the Libyan regime. The Libyans have deftly used a combination of carrots and sticks to divide and control the LIFG.
- Jihadists will kill more people with explosives and firearms than with chemical, biological or radiological weapons. We saw no jihadist attacks using WMD in 2008.
- The Algerian jihadist franchise, al Qaeda in the Islamic Maghreb (AQIM), will be hard-pressed in 2008, but not eliminated. AQIM succeeded in launching a large number of attacks in the first eight months of 2008, killing as many people as it did in all of 2007. But since then, the Algerian government has been making progress, and the jihadist group has only conducted two attacks since August 2008. The Algerians also are working closely with neighboring countries to combat AQIM, and the group is definitely feeling the heat. On Dec. 23, 2008, the Algerian government reportedly rejected a truce offered by AQIM leader Yahia Djouadi. Djouadi offered that al Qaeda would cease attacks on foreigners operating in oil fields in Algeria and Mauritania if the Algerian security service would cease targeting al Qaeda members in the Sahel region. The group is still alive, and government pressure appears to have affected its operational ability in recent months, but it did take a bit longer than we anticipated for the pressure to make a difference.
- Syria will use Fatah al-Islam as a destabilizing force in Lebanon. We had intelligence last year suggesting that the Syrians were going to press the use of their jihadist proxies in Lebanon — specifically Fatah al-Islam. We saw a bit of this type of activity in late May, but not as much as anticipated. By November, Syria actually decided to cut ties with Fatah al-Islam.
- Jihadist operatives outside war zones will focus on soft targets. Major terrorist strikes in Islamabad and New Delhi were conducted against hotels, soft targets STRATFOR has focused on as vulnerable for many years now. Other attacks in India focused on markets and other public places. While most of the attacks against hard targets came in war zones like Iraq and Afghanistan, there were a few attacks against hard targets in places like Pakistan, Yemen and Turkey. Granted, the Sanaa and Istanbul attacks were unsuccessful, but they were attacks against hard targets nonetheless.
- The jihadist franchises in Yemen resurged, and the al-Shabab in Somalia found success. While we quickly picked up on these trends in April and May respectively (and beat most others to the punch with some very good analysis on these topics), we clearly did not predict them in December 2007. We knew that the influx of fighters from Iraq was going to impact countries in the region, but we didn’t specifically focus on Yemen and Somalia.
What we got mostly right:
What we missed:
The Year Ahead
We anticipate that we will see the United States continue its campaign of decapitation strikes against al Qaeda leadership. While this campaign has not managed to get bin Laden or al-Zawahiri, it has proved quite successful at causing the al Qaeda apex leadership to lie low and become marginalized from the physical jihad. The campaign also has killed a long list of key al Qaeda operational commanders and trainers. As noted above, we believe the core leadership is very concerned about the ideological battle being waged against it — the only real way the theology of jihadism can be defeated — and will continue to focus their efforts on that battlespace.
As long as the ideology of jihadism survives (it has been around since the late 1980s), the jihadists’ war against the world will continue. It will continue to oscillate between periods of high and low intensity. In the coming year, we believe the bulk of physical attacks will continue to be conducted by regional jihadist franchise groups, and to a lesser extent by grassroots jihadists.
With the lack of regional franchises in North America, we do not see a strategic threat to the United States. However, as seen by the recent convictions in the Fort Dix plot trial, or even in the late October case where a U.S. citizen apparently committed a suicide bombing on behalf of al-Shabab in Somalia, the threat of simple attacks against soft targets in the United States remains. We were again surprised that no jihadist attacks occurred in the United States in 2008. Given the vulnerabilities that exist in an open society and the ease of attack, we cannot rule out an attack in 2009.
In Europe, where AQIM and other jihadist franchises have a greater presence and infrastructure, there is a greater threat that these franchises will commit sophisticated attacks. It must be recognized, though, that they will have a far harder time acquiring weapons and explosives to conduct such attacks in the United Kingdom or France than they would in Algeria or Pakistan. Because of this, we anticipate that they will continue to focus on soft targets in Europe. Due to differences between the Muslim communities in the United States and Europe, the grassroots operatives have been more active in Europe than they are in the United States. The May 22, 2008, attempted bombing at the Giraffe Cafe by a Muslim convert in Exeter serves as a good reminder of this.
Jihadist Franchises
After failing last year to predict the resurgence of the jihadist franchises in Yemen and Somalia, we will be keeping a sharp eye on both for 2009. Somalia continues to be a basket case of a country, and the instability there is providing an opportunity for al-Shabab to flourish. There is currently an attempt under way to bring stability to Somalia, but we anticipate that it will not succeed, due to the militant factionalism in the country. The only thing working against al-Shabab and their jihadist brethren is that the Somalian jihadists appear to be as fractious as the rest of the country; al-Shabab is itself a splinter of the Supreme Islamic Courts Council (SICC), which ruled Somalia briefly before the Ethiopian invasion in 2006. There are currently as many as four different jihadist factions fighting one another for control over various areas of Somalia — in addition to fighting foreign troops and the interim government.
In Yemen, things have been eerily quiet since the Sept. 17 attack against the U.S. Embassy in Sanaa and the government campaign to go after the group behind that attack. Six gunmen were killed in the attack itself, and the Yemenis have arrested numerous others whom they claim were involved in planning the attack. The Yemenis also killed or captured several significant jihadists prior to the September attack. But given the large number of Yemenis involved in the fighting in Iraq, the number of Saudi militants who have traveled to Yemen due to pressure at home, and the Salafist-jihadist influence within Yemen’s security and intelligence apparatus, it will be possible for the two jihadist franchises in Yemen to recover if the Yemenis give them breathing space.
Meanwhile, though Iraq is far calmer than it was a few years back, a resurgence in jihadist activity is possible. One of the keys to calming down the many jihadist groups in Iraq was the formation of the Awakening Councils, which are made up of many Sunni former Baathist (and some jihadist) militants placed on the U.S. payroll. With the changes in Iraq, responsibility for these Awakening Councils has been passed to the Iraqi government. If the Shiite-dominated government decides not to pay the councils, many of the militants-turned-security officers might return to their old ways — especially if the pay from jihadist groups is right. Intelligence reports indicate that Baghdad plans to pay only a fraction of the approximately 100,000 men currently serving in the Awakening Councils. The Iraqi central government apparently plans to offer the bulk of them civilian jobs or job training, but we are skeptical that this will work.
Elsewhere, Pakistan is once again the critical location for the jihadists. Not only is Pakistan the home of the al Qaeda core leadership as its pursues its ideological war, it also is home to a number of jihadist groups, from the Afghan Taliban and the Tehrik-i-Taliban Pakistan in the northwest to Lashkar-e-Taiba and Jaish-e-Mohammed in the northeast, among several others. The coming year might prove to be pivotal in global efforts against the jihadists in Pakistan. Pakistan already is a country in crisis, and in some ways it is hard to imagine it getting much worse. But if Pakistan continues to destabilize, it could very well turn into a failed country (albeit a failed country with a nuclear arsenal). Before Pakistan becomes a failed state, there are a number of precursor stages it probably will pass through. The most immediate stage would entail the fall of most of the North-West Frontier Province to the jihadists, something that could happen this year.
This type of anarchy in Pakistan could give the jihadists an opportunity to exert control in a way similar to what they have done in places like Afghanistan and Somalia (and already in the Pakistani badlands along the Afghan border.) If, on the other hand, Pakistan is somehow able to hold on, re-establish control over its territory and its rogue intelligence agency and begin to cooperate with the United States and other countries fighting the jihadists, such a development could deal a terrible blow to the aspirations of the jihadists on both the physical and ideological battlefields. Given the number of plots linked to Pakistan in recent years, including the Nov. 26 Mumbai attack and almost every significant plot since 9/11, all eyes will be watching Pakistan carefully.


Stratfor has THE best map software.
shackledtoakorpse
April 6, 2009