ISIS Social Media Ops Are Declining

The war against the Islamic State seems to have hit a turning point, both on the battlefield and on social media. A new report from West Point’s Combating Terrorism Center (CTC) shows that official ISIL propaganda on social media is dwindling.

The CTC analyzed more than 9,000 ISIL messages with images and videos shared online in an 18-month period beginning January 2015. It found a steady decline in the production of visual media messages since August 2015, when the terror group pushed out 700 such posts in a single month. By contrast, ISIL released only 200 posts with images a year later in August.

The report attributed a marked reduction in certain propaganda themes to struggles within the group. More than half of the messages coded for the report were images or clips depicting daily life in the caliphate, often as organized and peaceful, presumably to further its goal of luring sympathizers to Iraq and Syria. For instance, it has shared photos of ice cream factories or infrastructure projects.

By contrast, the CTC found that the number of media releases focused on ISIL’s governance, for instance, images of ISIL soldiers distributing food and money, fixing roads, or issuing punishments for civilian crimes—dropped over the 18-month period, while the frequency of military-themed messages remained steady. Daniel Milton, the center’s director and author of the report, read this as a sign that ISIL was “struggling to maintain the outward appearance of a functioning state.”

ISIL’s most attention-grabbing images and videos, those that featured gruesome beheadings or executions and include an actual dead body in the frame, have been surprisingly rare. Fewer than 10% of the messages fell under this category, according to the report. The volume of these posts remained steady, but the characters within them changed. In 2014, most broadcasted executions were of anti-ISIL fighters, including prisoners. In January 2016, the number of “spies” caught in ISIL territory and killed in media releases began to outpace that of enemy soldiers.

Either way, ISIL has kept its messengers relatable. “They may be Iraqi and Syrian locals speaking in Arabic or recently arrived foreigners from abroad,” Milton explained. “Regardless of the individual, it seems that the group has decided that its message will be better received if those conveying it look more like the intended target audience.” This approach has lent its campaign “an aura of inclusiveness and breadth” lacking in propaganda from Al-Qaeda, ISIL’s predecessor. That group’s online media typically featured long-winded speeches by terrorist leaders.

The decrease in the volume of messages may be a sign that ISIL has less to brag about, according to Milton and other ISIL experts. There may also be less time for propaganda when ISIL is under physical attack.

Pushback by social media companies has contributed to the decline. This summer, Twitter announced it had suspended 360,000 terror-inciting accounts between mid-2015 and August 2016. Daily suspensions were up 80%, mostly thanks to new proprietary spam-fighting tools, the company said.

Both Twitter and Facebook say they have proactively blocked accounts connected to Islamic State terrorists, rather than wait for other users to report them. Last year, in response to such efforts, ISIL moved some of its propaganda to platforms like Whatsapp and Telegram, which offer more protection from outside surveillance.

When Telegram announced last September it had created private channels that would allow followers to broadcast to groups of followers, ISIL quickly set up shop on the app, the researchers note. Telegram reportedly became the communication tool of choice for organizers of the Paris attacks in November 2015.

J.M. Berger, a fellow with George Washington University’s Program on Extremism who focuses on social media, noted a significant decline in the group’s tweeting activity, partially due to Twitter’s efforts to suspend accounts.

Google is also in this fight. It’s think tank Jigsaw began testing a “redirecting method” that inserts anti-propaganda ads in Google search results for 1,700 keywords related to the Islamic State. The impact of that program remains unclear (paywall).
Even if its propaganda has declined, ISIL’s message is sure to live on, Milton said, especially in the minds of impressionable children: “The psychological effects of the group’s control over what people read, watched, and heard will likely outlast its physical control of the territory.”

DefenseOne:

 

« Decrypting the Dark Web
US Has A Strategy To Defend Against Another Massive IoT Attack »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

Openminded (OPMD)

Openminded (OPMD)

Openminded is a French security and network services company.

Cyberwrite

Cyberwrite

Cyberwrite was founded to provide underwriters around the world a unique and innovative Cyber Underwriting platform.

Bolton Labs

Bolton Labs

Bolton Labs is a leading provider cybersecurity services, tools, and analysis for MSPs and organizations who want to scale their security offerings.

Wizlynx Group

Wizlynx Group

Wizlynx services cover the entire risk management lifecycle from security assessments and compliance to the implementation of security solutions and provision of Managed Security Services.

CICRA

CICRA

CICRA is Sri Lanka's pioneering cyber security training and consultancy provider.

Idaptive

Idaptive

Idaptive delivers Next-Gen Access through a zero trust approach. Idaptive secures access everywhere with single sign-on, adaptive MFA, EMM and analytics.

Marvell Technology Group

Marvell Technology Group

Marvell is a semiconductor company providing solutions for storage, processing, networking, security and connectivity.

BrandProtections.Online

BrandProtections.Online

BrandProtections.online offer end-to-end customer support solutions to help protect against threats which may affect your brand online.

GLESEC

GLESEC

GLESEC offer a complete range of Cyber Security services from Operations & Intelligence Services to Auditing & Compliance and Simulation and Training.

Servian

Servian

Servian is one of Australia's leading IT consultancies, with expertise in cloud, data, machine learning, DevOps and cybersecurity.

InferSight

InferSight

InferSight can help you design an architecture that takes into account security, performance, availability, functionality, resiliency and future capacity to avoid technological lock in and limitations

GitProtect.io

GitProtect.io

​GitProtect is a fully manageable, professional GitHub and Bitbucket backup and recovery software that protects repositories and metadata from any event of failure.

Campus cyber

Campus cyber

A project initiated by the President of the Republic, the Cyber Campus is the totem site of cybersecurity that brings together the main national and international players in the field.

GoPro Consultants

GoPro Consultants

GoPro Consultants is an IT Consultancy and IT Managed services provider Globally with immeasurable expertise of IT professionals in Hardware/Support & Consultancy and Project Planning.

AddSecure

AddSecure

AddSecure is a leading European provider of secure IoT connectivity and end-to-end solutions.

Gogolook

Gogolook

Gogolook is a leading TrustTech company. With "Build for Trust" as its core value, it aims to create an AI- and data-driven global anti-fraud network as well as Risk Management as a Service.