Islamic State Flash Report - 3 April 2026
Islamic State (IS) affiliates demonstrated sustained operational capacity across multiple theaters, with notable incidents including the killing of at least 43 civilians by Allied Democratic Forces (ADF) militants in eastern Democratic Republic of Congo and the confirmation of senior ISWAP commander Abu Yahya Al-Muhajir's death in Nigeria. Western security concerns intensified following terrorism-related arrests in the United States, Poland, and Morocco, while IS Sahel Province (ISSP) emerged as an increasingly transnational threat with documented external operations planning. Meanwhile, sophisticated operational security guidance circulated within IS supporter networks, signaling evolving digital evasion tactics as the group adapts to sustained counterterrorism pressure. Additionally, the group's Al-Naba newsletter incited attacks on Jewish communities globally during Passover.
Significant Incidents and Articles of Interest
ADF Mass-Casualty Attacks and Kidnappings – Ituri & North Kivu Provinces, DRC IS-affiliated Allied Democratic Forces (ADF) rebels conducted multiple deadly attacks against civilians in eastern Congo. On April 1, fighters killed at least 43 people and burned houses in Bafwakoa village, North Kivu province. Over the weekend of March 29-30, the group also kidnapped at least 150 people, mostly farmers, across several villages in the Mambasa territory of Ituri province. The attacks are considered reprisals against the local population and are intended to sabotage regional peace efforts. These incidents highlight the ADF's sustained ability to terrorize civilians across provincial lines despite ongoing joint military operations by Congolese and Ugandan forces [6, 11].
ISWAP Commander Killed and Attacks Foiled – Borno State, Nigeria Islamic State West Africa Province (ISWAP) confirmed the death of senior Shura Council member Abu Yahya Al-Muhajir following a failed attack on Malam Fatori on March 18, which resulted in at least 84 militant casualties. Separately, on March 29, Nigerian Army troops from Operation Hadin Kai thwarted another ISWAP attack on Damboa using artillery and mortar fire. In subsequent days, security forces arrested at least 16 suspected ISWAP and Boko Haram collaborators and logistics suppliers in Borno State. The combination of leadership loss, failed attacks, and disruption of support networks represents a significant operational setback for ISWAP in its core territory [2, 8, 9].
Sentencing of IS-Inspired Plotters – Denver, USA & Tarnobrzeg, Poland Courts in the U.S. and Poland handed down prison sentences to two young men radicalized online. On April 2, 20-year-old Humzah Mashkoor was sentenced in Denver to three years for attempting to provide material support to IS by planning to travel to Afghanistan. On April 1, an 18-year-old identified as Remigiusz Ż was sentenced in Poland to 2.5 years for planning an IS-inspired school attack and inciting racial and religious hatred online. Both cases highlight the continued threat of online radicalization driving homegrown terrorism plots and foreign fighter travel among Western youth [1, 4].
IS Editorial Exploitation of Regional Tensions – Al-Naba Newsletter Issue 541: In the latest editorial in Al-Naba Issue 541, IS continues to leverage regional sectarian tensions while positioning itself as the authentic defender of Sunni Muslims against what it characterizes as Shia oppression. The editorial focuses extensively on alleged executions of Sunni prisoners in Iraqi Shia-controlled facilities, drawing parallels between Israeli actions against Palestinians and Iranian-backed forces' treatment of Sunni detainees. The editorial specifically criticizes the closure of Al-Aqsa Mosque and uses this as a rallying cry for supporters to target Jewish diaspora communities globally, while simultaneously condemning Iranian-backed "resistance" groups for their perceived failures in defending Palestinian interests. The publication signals IS's continued efforts to exploit sectarian grievances and present itself as the sole legitimate Islamic authority capable of defending Muslim interests [3].
IS Activity and Tactics
IS Sahel Province (ISSP) – Transnational Operations Expansion
ISSP has evolved from a regional insurgency into a hub for external operations, with Morocco dismantling a 12-member ISSP terrorist cell in February 2025 that functioned as an external operations wing. [7] The group is leveraging existing smuggling routes between the Sahel and North Africa, with Moroccan authorities identifying ISSP as one of the two most common intended destinations for recruits. Spanish services arrested approximately 90 suspected jihadists in the first eight months of 2025, some planning travel to Mali before shifting to domestic attack planning. This represents an evolution in ISSP's operational model, mirroring IS-Khorasan Province's (ISKPs) trajectory as a dual-use hub for both foreign fighter recruitment and external operations projection.Digital Infrastructure Hardening – "Operation Ghost Protocol": A sophisticated operational security manual titled "Operation Ghost Protocol: The 2026 Telegram Hardening Manual" appeared in a pro-IS Rocket.Chat channel with over 12,000 members on February 11, 2026. [10] The guide promotes infrastructure-level evasion techniques including routing traffic through anonymizing networks, altering Telegram's web interface access, and reducing reliance on SIM-linked phone numbers. This represents a conceptual shift from platform selection to platform circumvention, with supporters encouraged to rebuild communication pathways rather than simply choosing encrypted apps.
Incitement Against Jewish Diaspora Targets: In Al-Naba 541, IS explicitly calling for attacks against Jewish targets (i.e. synagogues, community centers, Jewish Passover celebrations, and Jewish communities as a whole). The directive specifically names synagogues in America, Europe, Russia, India, and elsewhere as legitimate targets, framing the attacks as retribution for the closure of the Al-Aqsa Mosque and in support of prisoners. It further provides a tactical model for followers, urging them to emulate the "heroes of Sydney" during the "Feast of Hanukkah" and to "renew" Jewish mourning during the "Feast of Passover." This call to action is a clear attempt to inspire lone actor or small cell attacks against soft targets in Western and other non-Muslim majority countries by providing a specific target set, religious justification, and a previously celebrated attack as a tactical template [3-original source].
ISWAP/Boko Haram – Sustained Operations in Nigeria: Nigerian forces arrested two suspected ISWAP/Boko Haram collaborators in Pulka, Borno State, who were allegedly attempting to transport a woman to terrorist hideouts. [2] Troops also foiled multiple ISWAP attacks, including attempts on Damboa and Mussa, while arresting 14 suspected terrorist logistics suppliers in Gamboru Market and Maiduguri. [8] These incidents demonstrate ISWAP's continued reliance on local support networks for logistics and operations despite sustained military pressure.
U.S. Military Escalation – Somalia Operations: The United States conducted 49 airstrikes in Somalia during the first three months of 2026, targeting both Al-Shabaab and IS fighters in northeastern Somalia's Al-Miskaad Mountains. [5] This represents a significant operational tempo that could surpass 2025's record of 125 strikes, following expanded authorities granted to AFRICOM commanders. The concentration of strikes against IS positions in Puntland indicates ongoing efforts to prevent the group from establishing territorial sanctuaries.
Indicators to Watch
Elevated Threat to Jewish Targets During Passover: The explicit anti-Semitic incitement in Al-Naba Issue 541, combined with specific references to targeting Jewish communities during religious observances and glorification of the Bondi Beach attack during Hanukkah, necessitates heightened security around synagogues, Jewish schools, and community centers.
Increased External Operations Planning: The emergence of ISSP external operations cells in Morocco and Spain, combined with multiple arrests of individuals planning domestic attacks after failed travel attempts, suggests a shift toward directed and inspired attacks in Europe.
ADF Escalation in Eastern DRC: The group's ability to conduct mass casualty attacks and large-scale kidnappings despite joint military operations suggests either improved capabilities or exploitation of security gaps.
Cross-Regional Coordination: Evidence of guidance and support flowing between IS provinces, particularly from West Africa to the Sahel, indicates increasing operational integration across African affiliates.
Online Radicalization Persistence: Continued arrests of young individuals in Western countries planning IS-inspired attacks demonstrate the enduring appeal of IS propaganda despite territorial losses.
