Online Library

The dark web and terrorism have become closely intertwined, presenting new challenges to existing security frameworks globally. This brief examines the role of the dark web in enabling terrorist activities, from communication and recruitment to radicalisation and propaganda dissemination. It reviews current literature to highlight the ecosystem of the dark web and its ramifications on national security. The analysis describes the strategies adopted by terrorists in cyberspace, from exploiting mainstream social media platforms to leveraging encrypted channels and clandestine marketplaces. It also highlights the challenges confronting law enforcement and regulatory bodies in monitoring and combating terrorist activities on the dark web, underlining the need for global collaboration. It outlines recommendations for policymakers and security stakeholders to fortify cyber counterterrorism efforts while examining the specific challenges to India.

This briefing outlines research uncovering thousands of users viewing extremist content in Arabic language across mainstream social platforms including Facebook and YouTube. The findings emerged as world leaders, policymakers, and technology companies gathered in Jordan earlier this month to discuss counter-terrorism and extremism as part of the Aqaba Process and the convening of the Global Internet Forum for Countering Terrorism (GIFCT).

Researchers identified:

• More than 77 pieces of Arabic content promoting influential Islamist extremists from al-Qaeda, the Islamic State of Iraq and Syria (ISIS) as well as affiliates for both organizations, and precursors to both groups on both YouTube and Facebook;
• More than 275,000 users have watched the videos on both Facebook and YouTube;
• The research finds evidence of Islamist extremist supporters sharing content between sites, spreading the content further than their primary YouTube Channels and/or Facebook pages and groups. Approximately 138 individual users have shared links from the YouTube to their networks on Facebook.

Islamic State of Iraq and Syria (ISIL) supporters fanned out large amounts of Arabic content across Twitter all through the week in the wake of the news surrounding the death of Abu Bakr al Baghdadi. Many accounts were exhibiting strong and multiple signals of automated behavior1, spawning every hour, on the hour, and Institute for Strategic Dialogue (ISD) researchers monitored and tracked these accounts, and their tactics for the past week following the news. Twitter, and accounts specifically designed to report ISIL activity, were limiting some of the effects of what researchers were calling the ‘Baghdadi Net.’ However, it was clear the accounts were able to generate again, sometimes seconds within a takedown period, and spread video, and audio, as well as new ISIL-news content. Many accounts used western avatars, linked to real people, as well as hashtags that were trending across the Middle East and North Africa, including those being used in the Iraq and Lebanon protests. Latching on to trending topics is a well-documented tactic by ISIL and other groups to increase impressions and overall reach of content. As of Friday, the accounts were tweeting out audio content produced by al Furqan media heralding the ascension of the new ISIL leader Abu Ibrahim al Hashimi al Qurashi.

The author seeks to highlight just how central this unofficial Islamic State ecosystem is to audiences inspired by the group and how the interplay between this ecosystem and youth requires reframing the challenge rather than doubling down on the same playbooks. This article will first present the connection between these young peoples’ use of social media and their attacks. The author will then seek to create the tie-in between the real-world threats posed by these youth-led plots and the unofficial digital ecosystem of the Islamic State, going beyond and expanding the author’s previous work into the ecosystem. 16 This tie-in will be followed by an analysis of the unofficial Islamic State ecosystem, expanding on what the author has already published about it, and will do so by diving into the outlets and tactics central to the ecosystem, and will conclude with recommendations for digital counterterrorism practitioners and researchers. The article will build on a broader report by the author on the Islamic State’s online activities that was published by the Institute for Strategic Dialogue (ISD) on February 12, 2025.

This new investigation from the Institute for Strategic Dialogue (ISD) delves into the inner workings of a pro-ISIS account network on Facebook, providing a case study of the resilient network dynamics, technological loopholes, and cross-platform activity that allowed a web of accounts to survive and flourish for over three months on a platform which purports to be a hostile environment for terrorist actors.

This joint report by the Institute for Strategic Dialogue (ISD) and the Combating Terrorism Center (CTC) at West Point offers a preliminary survey and analysis of one of the largest known online repositories of Islamic State materials in order to increase understanding of how violent extremist groups and their supporters manage, preserve, and protect information relevant to their cause. Seemingly managed by sympathizers of the Islamic State, the large cache of digital files, here nicknamed the “Cloud Caliphate,” provides researchers, policymakers, and counterterrorism practitioners additional insights into how and why groups and their adherents maintain archives of such material.
The core analysis breaks into seven different parts. After reviewing the likely origins of the repository, the first section describes its composition, and the second discusses evidence concerning cyber support from other online actors. Sections three through six explore specific folders within the archive, which pertain to matters concerning the Islamic State’s organizational predecessors and a range of notable leaders, ideologues, and scholars. Section seven of the report highlights a real-world case involving the use of the “Cloud Caliphate” archive by an Islamic State supporter. The report concludes with a reflective discussion that notes potential policy considerations for those tasked with confronting the Islamic State’s exploitation of information and communications technologies.