Islamic State Flash Report - 18 March 2026
Islamic State (IS) online supporters praised two recent U.S. attacks: the March 7 attempted bombing at an anti-Muslim rally near NYC's Gracie Mansion and the March 12 Old Dominion University shooting by former National Guard member Mohamed Bailor Jalloh that killed one ROTC instructor and wounded two students, underscoring persistent IS-inspired lone actor threats. In Africa, IS claimed 24 attacks between March 8-14, including 13 operations against Nigerian military camps under the "Inferno Of Camps" campaign and an assault on a Chinese-owned mine in DRC's Ituri Province, while European and global arrests targeted recruiters, plotters, and returnees linked to IS activities.
Significant Incidents and Articles of Interest
Security Concerns at IS Detention Prison – Baghdad, Iraq: On March 15, 2026, Iraq's Ministry of Justice issued warnings that ongoing drone and missile strikes targeting military positions near Baghdad International Airport pose a direct threat to Al-Karkh Central Prison, which houses over 5,000 IS detainees including senior leaders and foreign fighters transferred from Syria. Ministry spokesperson Ahmed Lueibi reported that areas surrounding Baghdad International Airport and Camp Victory military base experienced six separate strikes within 24 hours, with one overnight bombardment described as particularly intense, causing a large fire inside the military base. The prison, formerly the U.S. Army detention center Camp Cropper, holds IS detainees including Iraqi, Syrian, and European foreign fighters transferred from Kurdish custody in Syria following a February 2026 U.S.-facilitated transfer of 5,700 IS prisoners [11, 14].
Update on NYC Attempted Bombing Investigation; IS Supporters Provide Real-Time Critique Online – New York City, USA: Two suspects, Emir Balat and Ibrahim Kayumi, both in their late teens from Pennsylvania, threw two improvised explosive devices containing TATP, nuts, and bolts at a counterprotest near Gracie Mansion on March 7. Investigators discovered the pair had considered multiple soft targets, including shopping centers, had purchased explosive components from a Pennsylvania fireworks store days earlier, and maintained a storage unit containing explosive residue, notebooks detailing TATP synthesis, and target selection criteria. Online IS supporters on RocketChat and Telegram praised the act, shared media photos, and criticized the failure while suggesting firearms as alternatives. This incident reveals IS's influence on young radicals via online channels and the vulnerability of public demonstrations to low-tech attacks, potentially encouraging copycat attempts during heightened tensions [1, 12].
Shooting at Old Dominion University – Norfolk, Virginia, USA: Mohamed Bailor Jalloh, a 36-year-old former Virginia National Guard member and convicted IS supporter released early from an 11-year sentence in December 2024, opened fire on an ROTC classroom on March 12, killing instructor Lt. Col. Brandon Shah and wounding two students before being subdued and killed by ROTC members; he shouted "Allahu Akbar" and used an illegally purchased pistol. IS online channels on Telegram and RocketChat celebrated Jalloh as a martyr, posting photos and noting his prior conviction for attempting to aid IS, including travel to Nigeria for militant contacts. The event highlights deficiencies in post-release monitoring for terrorism convicts. The attack's execution during Ramadan and deliberate targeting of military personnel align with longstanding IS guidance for lone actor operations against security forces in Western countries [1, 10, 13].
Assault on Mining Sites – Ituri Province, Democratic Republic of the Congo: IS's Central Africa Province (ISCAP), via the Allied Democratic Forces (ADF), attacked MCC Resources Sarl and Kimia Mining Enterprise sites on March 11-12, killing scores of personnel, looting equipment, burning vehicles and buildings, and capturing weaponry; IS claimed 17 "Christian fighters" killed and 100 hostages taken in Ituri, with Amaq photos showing destruction at the Chinese-operated mine. The raids involved armed incursions from North Kivu, leading to the suspension of mining operations. This escalation underscores ISCAP's economic targeting to fund operations and disrupt foreign investments, posing risks to regional stability and highlighting cross-border mobility from Uganda and Rwanda [1, 4].
Arrest of Jihadist Recruiter – Melilla, Spain: On March 15, 2026, Spain's National Police detained a 40-year-old Spaniard in Melilla on suspicion of renewed jihadist recruitment activities. The suspect, previously convicted of similar crimes in 2018 and released in 2023, allegedly resumed recruiting young Muslim women, including minors, using social networks shortly after his release. The investigation, conducted jointly with Spain's Centro Nacional de Inteligencia (CNI), revealed the suspect operated according to an established pattern: identifying girls aged 18 or 19, and sometimes younger, online; inviting them to meet in person; and using psychological pressure and religious guidance to encourage support for radical ideas. Girls were shown videos featuring IS and Al-Qaeda members as well as footage of attacks to strengthen his influence. This highlights recidivism among former inmates and IS's focus on vulnerable youth for logistical and recruitment roles [2].
Story of Albanian IS Recruit and Child Trauma – Albania / Syria: Abdi, an 18-year-old Albanian sent to Syria at age 8 by radicalized parents, recounted witnessing his father's death fighting Kurds and Assad, massacres, and bombings during a decade under IS control; 144 Albanians joined IS in Syria, with 28 children treated for war trauma upon return, influenced by online propaganda and self-proclaimed imams in Albania, Kosovo, and North Macedonia. Prosecutor Vladimir Mara noted recruitment via social networks leading to radicalization and support for Middle East operations. The accounts reveal IS's exploitation of families for child soldiers and the long-term psychological impacts, emphasizing the need for regional counter-propaganda against imam-led networks [3].
Trial for Yazidi Genocide – Paris, France: The first French trial for IS's genocide against Yazidis opened on March 16 against Sabri Essid, a French national accused in absentia of joining IS in 2014, buying enslaved Yazidi women, and forcing sexual slavery, plus crimes against humanity; he appeared in a 2015 propaganda video forcing his stepson to execute a hostage. Three Yazidi women testified, linking to the 2014 Sinjar massacres where thousands were killed or abducted. This proceeding, part of 11 European cases, affirms judicial accountability for IS atrocities and may deter returnees while providing closure for victims [5].
Arrest of IS Online Module Member – Moradabad, India: On March 17, 2026, the Uttar Pradesh Anti-Terrorism Squad (ATS) arrested Harish Ali, 19, a Bachelor of Dental Surgery (BDS) student from Mankamau village in Saharanpur district, for alleged links to an IS online module. Ali, who was residing in Moradabad for his medical studies, allegedly engaged in anti-national activities, incited individuals, and formed groups on encrypted platforms to recruit and motivate participants for terrorist operations. ATS officials stated Ali had created several IS-backed groups on Instagram, Session, and Discord, through which he disseminated extremist propaganda originating from IS media outlets, including magazines, ideological material, and propaganda publications. Ali established his own propaganda outlet titled "Al-Ittihad Media Foundation." He allegedly communicated with IS handlers in Pakistan and other foreign countries, working to expand IS's network within India with the stated objective of establishing a Caliphate governed by Sharia law through waging Jihad [7].
IS-Inspired Knife Attack Plot – Aargau Canton, Switzerland: An 18-year-old Swiss national was charged on March 12 for planning a knife attack on random victims in IS's name since early 2025, including ordering a knife, researching religious justifications, disseminating propaganda videos, and providing financial support to IS; arrested in June 2025 and released in December. The case, transferred to the Federal Criminal Court, coincides with the arrests of two IS-linked individuals in Geneva and Vaud. It illustrates IS's success in radicalizing youth via online content for low-barrier lone actor plots, amid rising European alerts [8].
Conviction of IS Returnee – Paris, France: Océane Granger, 31, was sentenced to five years on March 11 for joining IS in 2015 with companion Amirouche Belounis (tried in absentia for 30 years), traveling via fake Belgian papers, living in Raqqa until 2019, and supporting the caliphate as a mother; their children died in a bombardment, and she returned in 2022. Linked to the Buttes-Chaumont network, she admitted ideological adherence. The trial, first of 22 for French "revenantes," stresses rehabilitation needs for returnees while acknowledging her remorse, amid concerns over family radicalization [9].
Antisemitic IS Plot Arrest – Northern France: On March 14, 2026, French anti-terror prosecutors announced the detention of two brothers, Moroccan-Italian nationals aged 20 and 22, suspected of plotting a "lethal and antisemitic" attack. The brothers were detained the previous week in northern France after officers discovered a loaded semi-automatic weapon, hydrochloric acid, and an IS flag in their vehicle. The family arrived in France in 2017 after several years in Italy. Prosecutors stated that after concluding they could not wage jihad in Syria or Palestinian territories, the brothers developed a "terrorist plan in France, for which they aspired to martyrdom" in recent weeks. Analysis of seized digital devices and statements from relatives revealed "radicalization of the two brothers over the past two years, as well as a marked intensification of their jihadist commitment in the days preceding their arrest" [15].
IS Activity and Tactics
Recidivism and Post-Release Monitoring: Two separate incidents underscore the challenge of managing individuals previously convicted of terrorism-related offenses. The Old Dominion University shooter had been granted early release from an 11-year sentence for attempting to provide material support to IS. Similarly, a man arrested in Melilla, Spain, for recruiting young women had been convicted of similar crimes in 2018 and resumed his activities after being released from prison in 2023. These cases raise critical questions about the effectiveness of rehabilitation programs and post-release supervision for extremist offenders [1, 2, 12].
Lone Actor Inspiration and Enablement: The attacks in Virginia and New York demonstrate the persistent threat of lone actors inspired by IS ideology. Pro-IS online communities quickly celebrated these incidents, which serves to encourage future attackers. The Old Dominion University shooter was a former IS supporter whose actions mirrored an attack he had previously expressed admiration for, indicating long-term ideological commitment. The New York plotters' ability to acquire materials for IEDs, albeit crude ones, highlights the challenge of detecting and disrupting such low-level planning [1, 10, 12, 13].
Reference Data for Source 1 - Counter Extremism Project Email (dated 16 March 2026): Extremist Content Online: Online ISIS Supporters Praise Attempted New York Attack and Old Dominion Shooting; Under-18 White Supremacist Youth Clubs Spread to Canada
Indicators to Watch
Shifts in IS propaganda themes that capitalize on recent attacks in the West to inspire lone actors, with a focus on encouraging assaults against military, law enforcement, or civilian targets.
Evolution of radicalization pathways among individuals with no prior criminal history or obvious extremist connections who radicalize rapidly through online consumption of IS propaganda
Threats to the security and integrity of detention facilities holding high-value IS detainees in Iraq and Syria, stemming from either external attacks, internal unrest, or security force degradation.
Changes in the operational tempo, geographic scope, or strategic targeting priorities of key IS affiliates, particularly in Africa and Asia.
The threat of recidivism among individuals previously convicted of terrorism-related offenses, and any indications of their reintegration into extremist networks or operational planning post-release.
