An Enduring Threat: Europe’s Islamist Terror Networks Then and Now Emma Webb and Rupert Sutton

An Enduring Threat: Europe’s Islamist Terror Networks Then and Now

!

! Emma Webb and Rupert Sutton

www.henryjacksonsociety.org

Table of Contents

Executive Summary………………………………………………………………………….……… 2

Key Implications………………..……………………………………………………………………. 3

Introduction……………………………………………………………………………………………. 5

Methodology...………………………………………………………………………………...……… 6

1.! Profiles: - related Networks 1.1 Brussels: Attackers…………………………………………………………………………………... 8 1.2 Brussels: Accomplices…………………………………………………………………………….… 13 1.3 Paris: Attackers…………………………………………………………………………………….….. 18 1.4 Paris: Accomplices……………………………………………………………………………….….. 28 1.5 Zerkani Network………………………………………………………………………………….….. 34 1.6 Islamic State……………………………………………………………………………………….…… 42 1.7 Other……………………………………………………………………………………………….…….. 47

2.! Profiles: Al-Qaeda-inspired Networks 2.1 The Rotterdam Cell: US Embassy and Cultural Centre Plot…………….…….…….. 50 2.2 Rotterdam Cell: Accomplices……………………………………………………….…………... 57 2.3 The ‘Frankfurt Cell’: Strasbourg Market Plot…………………………………..……….…. 61 2.4 Frankfurt Cell: Accomplices………………………………………………………….……..…… 70 2.5 NATO Airbase Plot Network…………………………………………………………..……….. 74 2.6 NATO Airbase Plot Network: Accomplices…………………………..………….….……. 76 2.7 Network………………………………………………………………………….……… 78 2.8 Other……………………………………………………………………………………………….…….. 82

3.! Analysis………………………………………….……………………………..…………………… 91

4.! Conclusions and Implications………………………………………………………………. 106

Appendix A: Network Maps Brussels Attacks……………………………………………………………………………………………. 116 Paris Attacks…………………………………………………………………………………………………. 117 Zerkani Network…………………………………………………………………………………………… 118 New Network Connections…………………………………………………………………………….. 119 US Embassy & Cultural Centre Plot/Rotterdam Cell………………………………….…..…. 120 Strasbourg Plot/Frankfurt Cell……………………………………………………………………..…. 121 Abu Doha Network…………………………………………………………………………….…………. 122 Old Network Connections……………………………………………………………………….…….. 123 Network Connections……………………………………………………………………………………. 124

AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Executive Summary

•! This report is the first major comparison between the terrorist networks associated with al-Qaeda which targeted Europe in the early 2000s and the Islamic State (IS) networks which struck Europe between November 2015 and March 2016. It examines the proposition that the danger posed to Europe by IS networks represents a new kind of threat, comprehensively profiling those behind the Paris and Brussels attacks, including individuals connected to the attackers through recruitment, logistics provision, and operational direction. The report then compares this network to a similar European network linked to al-Qaeda which existed in the late and early 2000s. It identifies the similarities between the two networks, and highlights the implications for challenging such networks in future;

•! The biographical profiles included cover two networks of extremists separated by over ten years and associated with two different Islamist groups now violently at odds with one another. Despite this, they show there is a clear continuity between the Islamism-inspired terrorist activity in Europe during the late 1990s and early 2000s and the threat faced by the continent today. The report highlights a number of similarities appearing between the networks, with these parallels suggesting that lessons which could have been learned from the disruption of the older networks were not acted on sufficiently;

•! The most striking of these similarities is the direct connections between the two networks. Several terrorists profiled in the old network were later convicted of involvement in a network which recruited men to fight in , including , the leader of the team which carried out the Paris attacks, and , one of the suicide bombers who struck . In addition, a network connected to the al-Qaeda recruiter, , included a man who would go onto become an IS theatre commander for Europe and allegedly play a significant role in organising the Paris attacks;

•! A second similarity identified was the extent to which members of both networks had received training or combat experience from jihadist groups overseas. Many of the old network members involved in plots had gained such experience, and past Henry Jackson Society (HJS) research data has suggested individuals with such history have been disproportionately involved in the most serious Islamism-inspired terrorism plots. Despite this, the development of new recruitment networks which channelled individuals overseas to gain training and combat experience was not challenged swiftly enough in both and ;

•! Other biographical similarities, such as a history of petty crime and drug use among network members, both prior to radicalisation and to fund terrorist activity, was also be shown to be a common factor across both networks by the report.

! ! 2 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Key Implications

Given the likenesses between these two networks, it is likely any future European Islamist terrorist networks will share some of the same characteristics. If these networks are to be successfully challenged before they develop, government policy and law enforcement practice must take a number of implications into account. These include:

Understanding that future terrorist networks will be fuelled by recruitment networks which channel people overseas, and the necessity of disrupting these networks as early as possible; •! Recruitment networks which sought to send people to and Syria were not broken up by law enforcement agencies before dozens of individuals had travelled. Assessing how long to gather evidence prior to arresting those involved in terrorist activity has been one of the most difficult challenges facing the police and security services, but this report suggests that even when convictions are achieved, if the network has operated for too long there can still be devastating consequences. Dealing more effectively with recidivism and propagandising to ensure those convicted of offences are not able to recruit in future; •! Those who have been convicted of terrorism offences must be prevented from passing on their ideology, experience, and contacts to a younger generation, as in the cases highlighted in this report. Licence conditions can only go so far in this case, and as such, developing policies to deal with recidivism and better identify individuals associating with previously convicted terrorists must be considered a key policy task. Meanwhile, organisations which seek to promote material produced by imprisoned terrorist recruiters must also be challenged. Ensuring individuals returning from jihadist conflicts are dealt with as rigorously as the law allows, and developing policy to address gaps in legislation and law enforcement; •! Given the threat posed by individuals with combat training or experience, it is clear that approaches suggesting foreign fighters be allowed to return home when disillusioned or be subject to increased surveillance/deradicalisation programmes on return rather than arrest must be reassessed. However, this faces the difficulty that simply travelling to such conflict zones is not illegal. Ensuring as many individuals who can be proven to have fought with proscribed groups are prosecuted to the full extent of the law, expanding the list of proscribed organisations, and significantly prioritising the development of programmes to challenge returning/aspirant fighters will be vital if this issue is to be dealt with effectively. Improving efforts to challenge radicalisation in prisons and developing more effective policy to prevent offenders being drawn into terrorism; •! One of the most prominent biographical details identified as common to members of both networks was a history of petty crime. The extent crime featured in the backgrounds of network members suggests processes to recognise the risk of radicalisation to petty criminals have not been developed effectively enough, and that there has been a gross failure to take prison radicalisation seriously. It also highlights the importance of improving the processes for identifying the signs of increasing radicalism in offenders both prior to any imprisonment and following release.

! ! 3 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Understanding domestic security is tied to overseas conflicts and removing safe havens for terrorist groups through diplomatic and military action must be part of counter-terrorism policy; •! Many of the terrorist plots detailed in the biographical profiles of the old al-Qaeda-linked network had their germination in Afghanistan, while the safe haven available to IS in Syria gave senior members the ability to plan and train for the Paris attacks. Removing these safe havens can disrupt the ability of groups to plan and carry out complex attacks, and policy-makers must be prepared to use all diplomatic and military options on the table to do so, as well as to make the case that this action will be as important in challenging terrorist networks as the smaller-scale measures working to identify those at risk of radicalisation.

! ! 4 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Introduction

On 13 November 2015, IS gunmen and suicide bombers descended on Paris, launching simultaneous attacks in multiple locations, outside the , in the 10th and 11th arrondissements, and at the concert hall, killing 130 and wounding hundreds.1 On 22 March 2016, what remained of the network behind the Paris attacks successfully launched another mass-casualty attack in Brussels, detonating suicide bombs in the international airport and the Maelbeek metro station, killing 32 and wounding many more.2

As more information became available on the network of attackers, accomplices, facilitators, financiers and planners behind the attacks in IS, the extent of the threat posed by such a large network became apparent. Belgian terrorism expert Pieter Van Ostaeyen stated that he believed the cell to be larger than previously thought, with “potentially (…) at least another 60 to 70 members”.3 In the wake of the attacks, it was suggested that the attackers were a “new type of jihadist: part terrorist, part gangster”,4 and that Europe faced a different threat to the one it had faced previously.

This report seeks to examine that proposition, profiling the members of the networks behind the Paris and Brussels attacks, as well as a number of individuals connected to the attackers through recruitment networks, logistics provision, and operational direction from Syria. It compares this network to a similar network linked to al-Qaeda which existed across Europe from the late 1990s to the early 2000s which included a number of cells planning mass-casualty attacks and a wider recruitment network. Following this comparison, it identifies the similarities and differences between the two groups and seeks to understand the reasons behind the greater success of the IS-linked networks which struck Europe during 2015 and 2016.

! ! 1 ‘Paris attacks: What happened on the night’, BBC News, 9 December 2015, available at: http://www.bbc.co.uk/news/world-europe-34818994, last visited: 9 August 2016. 2 ‘Brussels explosions: What we know about airport and metro attacks’, BBC News, available at: http://www.bbc.co.uk/news/world-europe-35869985, last visited: 9 August 2016. 3 ‘Brussels bombings: Two more charged with ‘terrorist ’’, BBC News, 12 April 2016, available at: http://www.bbc.co.uk/news/world-europe-36023432, last visited: 9 August 2016. 4 Faiola, A. and Souad Mekhennet, ‘The Islamic State creates a new type of jihadist: Part terrorist, part gangster’, , 20 December 2015, available at: https://www.washingtonpost.com/world/europe/the-islamic-state-creates-a-new-type-of-jihadist-part-terrorist-part-gangster/2015/12/20/1a3d65da-9bae- 11e5-aca6-1ae3be6f06d2_story.html, last visited: 9 August 2016. ! ! 5 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Methodology

This report examines the details of the pan-European networks behind the major Islamist terror attacks carried out by individuals associated with IS in comparison with similar plots attempted by al-Qaeda in the late 1990s and early 2000s, in order to assess the extent to which the new networks may be said to present a new threat as a result of differences in the structure of the networks and the relationships of its members.

To this end, the report profiles members of the network behind the November 2015 Paris attacks and the March 2015 Brussels attacks alongside those involved in the failed al-Qaeda-linked plots to attack the US Embassy and Cultural Centre in Paris, the Christmas market outside of Strasbourg Cathedral, and the Kleine Brogel NATO airbase in Belgium in 2000-2001.

The report is structured in three parts: •! Part One: Profiles of the individuals which make up the networks behind the Brussels-Paris attacks, including accomplices, associates and senior IS operatives linked to the plot or attackers;

•! Part Two: Profiles of the individuals which made up the networks behind the al-Qaeda-inspired plots of the early 2000s in Belgium, France and Germany, as well as any accomplices, associates, and financiers/recruiters;

•! Part Three: Analysis of the direct connections between the two networks, as well as the identification of any trends in similarities and differences which can be identified in the biographical data of network members.

Criteria for Inclusion •! To be profiled, individuals must have a direct and significant link to the plots or attacks examined, or to a member of the network. A significant link includes: o! Direct involvement in a successful attack as a bomber/gunman or involvement as a failed bomber;

o! A criminal conviction for involvement in an attack, planned attack or recruitment network, as well as the provision of logistical support for any planned attacks;

o! Criminal charges or reputable sources reporting allegations of the provision of logistical support;

o! A direct personal connection to an individual convicted for involvement with another significant network or attack when arrested in relation to Islamism-inspired terrorism;

o! An operational role relating to an attack profiled as a member of a proscribed terrorist group such as IS.

•! Due to the contemporary nature of the IS networks, not all included have been convicted as some cases are ongoing and others have been killed in attacks or fighting abroad. Where relevant, this is indicated in the profile, for example, by referring to their connection or involvement as “suspected”;

•! Those initially arrested in connection with a plot or attack but later cleared are excluded, except in instances where, although charges were initially dropped, individuals were later convicted in connection to the plot or attack;

! ! 6 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

•! The profiles are ordered by attack, beginning with the most recent. Within each attack, plot or network, profiles are ranked according to significance (e.g. main attackers precede minor operatives, accomplices, and other significant connections);

•! In cases where an individual took part in more than one plot or attack, they are categorised in the most recent, and their participation in other plots or attacks is indicated in their profile.

! ! 7 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

1.!Profiles: Brussels-Paris related networks

1.1 Brussels: Attackers

NAJIM LAACHRAOUI aka Soufiane/Soutane Kayal5

Role: Suicide bomber, Brussels airport; suspected of being the bomb and suicide-belt maker for Paris attacks; rented a house in Auvelais in October 2015 used by the Paris attackers.6

Bio: Born 18 May 19917 in , the 24-year-old8 was raised in ,9 Brussels, with five younger siblings. He attended a private Catholic school in the Schaerbeek neighbourhood of Brussels until he was 18, after which he studied engineering at the Université Libre de Bruxelles. He did not complete his degree, moving on to Université Catholique de Louvain where he stayed from 2010-11 and studied electro-mechanics.10 He is believed to have worked at the European Parliament as a cleaner between 2009 and 2010.11 Laachraoui travelled to Syria in 201312 and joined IS, working as a guard for the group and becoming involved in the torture of hostages, such as Alan Henning and David Haines, as well as carrying out mock executions.13

Foreign training/combat: Described as a “suspected ISIL commander” who travelled to Syria in 2013.14

Movements: Laachraoui was stopped at the Austria-Hungary border on 19 September 2015 with and Mohamed Belkaid; he gave authorities his alias ‘Soufiane Kayal’.15

Criminal history: No known criminal history.

Known to the authorities: Laachraoui was known to the authorities through his link with the radical preacher Khalid Zerkani. He was one of those indicted in absentia in an investigation into the network,

! ! 5 Boyle, C., ‘What we know so far about the fugitive Paris terror suspects’, Times, 21 March 2016, available at: http://www.latimes.com/world/europe/la-fg-france-fugitive-20160321-story.html; Samuel, H., ‘Paris attacks accomplice whose DNA found on suicide vests identified’, The Telegraph, 21 March 2016, available at: http://www.telegraph.co.uk/news/worldnews/europe/france/12200210/Paris-attacks-accomplice-whose- DNA-found-on-suicide-vests-Najim-Laachraoui.html both last visited: 9 August 2016. 6 ‘Najim Laachraoui, 24, Bomb Maker for Paris and Brussels Attacks’, International New York Times, 25 March 2016, available at: http://www.nytimes.com/2016/03/26/world/europe/najim-laachraoui-24-bomb-maker-for-paris-and-brussels-attacks.html?_r=0, last visited: 9 August 2016. 7 Bacchi, U., ‘Manhunt for last Isis Paris attacks fugitives: Who are Najim Laachraoui and ?’, International Business Times, 21 March 2016, available at: http://www.ibtimes.co.uk/manhunt-last-isis-paris-attacks-fugitives-who-are-najim-laachraoui-mohamed-abrini-1550800, last visited: 9 August 2016. 8 Austin, H., and Lisa McNally,, ‘Najim Laachraoui: What We Know About Suspected Bomb-Maker’, NBC News, 23 March 2016, available at: http://www.nbcnews.com/storyline/brussels-attacks/najim-laachraoui-what-we-know-about-suspected-bomb-maker-n543996, last visited: 9 August 2016. 9 Taylor, A., ‘Who is Najim Laachraoui, suspected ISIL bomb-maker wanted in connection with Brussels and Paris attacks?’, , 23 March 2016, available at: http://news.nationalpost.com/news/world/who-is-najim-laachraoui-suspected-isil-bomb-maker-wanted-in-connection-with-brussels-and-paris-attacks, last visited: 9 August 2016. 10 Blaise, L. and Aurelien Breeden, ‘Najim Laachraoui, 24, Bomb Maker for Paris and Brussels Attacks’, International New York Times, 25 March 2016 [conflicting sources vis name of institution]. 11 ‘Brussels bomber ‘had cleaning job’ at European Parliament’, Times of Israel, April 2016, available at: http://www.timesofisrael.com/brussels-bomber-had- cleaning-job-at-european-parliament/, last visited: 9 August 2016. 12 Holehouse, M., ‘El-Bakraoui brothers: Who are the suicide bombers Khalid and Brahim behind the Brussels attacks?’ Daily Telegraph, 25 March 2016, available at: http://www.telegraph.co.uk/news/worldnews/europe/belgium/12201940/Brussels-attack-suspects-unmasked-the-El-Bakraoui-brothers.html, last visited: 9 August 2016. 13 Hunter, M., ‘Brussels airport bomber tortured British ISIS prisoners before they were beheaded… and regularly taunted them that it would be their ‘death tomorrow’’, Online, 13 May 2016, available at: http://www.dailymail.co.uk/news/article-3589183/Brussels-airport-bomber-tortured-British-ISIS- prisoners-beheaded-regularly-taunted-death-tomorrow.html, last visited: 9 August 2016. 14 Holehouse, M., ‘El-Bakraoui brothers: Who are the suicide bombers Khalid and Brahim behind the Brussels attacks?’ Daily Telegraph, 25 March 2016. 15 ‘How are the Brussels attackers linked to Paris?’ France 24, 21 April 2016, available at: http://graphics.france24.com/brussels-attacks-suspects-paris-terrorists- airport-metro/, last visited: 9 August 2016.

! ! 8 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW with the ruling pending when he carried out his attack.16 As a result of this indictment he was subject to an international arrest warrant prior to the Brussels attacks.17

Known networks and associates:

-! Brussels attacks (March 2016): Ibrahim el-Bakraoui, Khalid el-Bakraoui [both brothers died in suicide attacks on the airport and metro, respectively],18 Mohammed Abrini [Abrini is suspected to be the third man involved in the attack on the Brussels airport].19

-! Paris attacks (November 2015): Laachraoui rented a house in Auvelais in which some of the Paris attackers are thought to have met before the attacks;20 Laachraoui’s DNA was found on “a piece of cloth” left at the Bataclan and on “an explosive device” discovered at the Stade de France,21 leading to suggestions he may have produced bombs for both attacks;22 Salah Abdeslam [Laachraoui was stopped in September 2015 at the Hungary-Austria border in a car driven by Abdeslam;23 Laachraoui’s DNA was also found in a house in Schaerbeek24 where police also found a fingerprint belonging to Abdeslam];25 Abdelhamid Abaaoud [Laachraoui allegedly became associated with Abaaoud in Syria];26 Ahmad al-Mohammed, M al-Mahmod [it is suggested that Mohammed and Mahmod may have stayed at the house rented by ‘Kayal Soufiane’, a variation on Laachraoui’s alias, in Auvelais;27 Laachraoui’s DNA was also found at the Auvelais house].28

-! Zerkani network: Khalid Zerkani [Laachraoui was due to go on trial in absentia in May 2016 in connection with his relationship with the radical preacher].29

-! Other: Mohamed Belkaid [Laachraoui was allegedly seen in a car with Belkaid in September 2015 at a Hungary-Austrian police checkpoint];30 Mohammed Bakkali [Bakkali, a resident of the house in Auvelais rented by Laachraoui, was arrested in relation to the attacks];31 Amr al-Absi [Laachraoui was part of al-Absi’s group in Syria before he returned to Europe to carry out ! ! 16 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016, available at: http://www.france24.com/en/20160325-khalid- zerkani-brussels-jihadist-preacher-kriket-molenbeek, last visited: 9 August 2016. 17 ‘Najim Laachraoui: The ‘Isis bomb-maker’ involved in the Brussels attacks whose DNA was all over Paris atrocity’, Independent, 23 March 2016, available at: http://www.independent.co.uk/news/world/europe/najim-laachraoui-the-isis-bomb-maker-involved-in-brussels-attacks-whose-dna-was-all-over-paris-a6947761.html, last visited: 9 August 2016. 18 ‘Brussels explosions: What we know about airport and metro attacks’, BBC News, 9 April 2016. 19 ‘Paris attacks: Mohamed Abrini to be extradited to France’, BBC News, 9 June 2016, available at: http://www.bbc.co.uk/news/world-europe-36492309, last visited: 9 August 2016. 20 Whitehead, T., ‘Brussels explosions: Is mystery airport attacker the wanted Paris bomb maker?’, MSN, 23 March 2016, available at: http://www.msn.com/en- in/news/world/brussels-explosions-is-mystery-airport-attacker-the-wanted-paris-bomb-maker/ar-BBqNENC, last visited: 9 August 2016. 21 ‘Brussels attacks: Suspect’s DNA at Paris attack sites’, BBC News, 25 March 2016, available at: http://www.bbc.co.uk/news/world-europe-35899353, last visited: 9 August 2016. 22 Cendrowicz, L., ‘Najim Laachraoui: Belgian police launch manhunt for suspect who could have made suicide belts for Paris attacks’, Independent, 21 March 2016, available at: http://www.independent.co.uk/news/world/europe/najim-laachraoui-belgian-police-to-launch-manhunt-for-suspect-who-could-have-made-suicide- belts-for-a6944656.html, last visited: 9 August 2016. 23 Blaise, L. and Aurelien Breeden, ‘Najim Laachraoui, 24, Bomb Maker for Paris and Brussels Attacks’, International New York Times, 25 March 2016. 24 Cendrowicz, L., ‘Najim Laachraoui: Belgian police launch manhunt for suspect who could have made suicide belts for Paris attacks’, Independent, 21 March 2016. 25 ‘Paris attacks hideouts found in Belgium’, BBC News, 13 January 2016, available at: http://www.bbc.co.uk/news/world-europe-35300144, last visited: 9 August 2016. 26 ‘How Islamic State Infiltrated Europe’, , 1 April 2016, available at: http://graphics.wsj.com/brussels-terror-network/?mod=e2fb, last visited: 9 August 2016. 27 ‘Paris attacks hideouts found in Belgium’, BBC News, 13 January 2016. 28 Cendrowicz, L., ‘Najim Laachraoui: Belgian police launch manhunt for suspect who could have made suicide belts for Paris attacks’, Independent, 21 March 2016. 29 Blaise, L. and Aurelien Breeden, ‘Najim Laachraoui, 24, Bomb Maker for Paris and Brussels Attacks’, International New York Times, 25 March 2016; ‘Belgian court sentences jihadist recruiter to 15 years in prison’, France 24, 14 April 2016, available at: http://www.france24.com/en/20160414-belgium-appeals-court- sentences-khalid-zerkani-15-years-prison, last visited: 9 August 2016. 30 Blaise, L. and Aurelien Breeden, ‘Najim Laachraoui, 24, Bomb Maker for Paris and Brussels Attacks’, International New York Times, 25 March 2016 31 James, J., ‘Paris Attack Suspect Arrested in Morocco’, HNGN, 19 January 2016, available at: http://www.hngn.com/articles/171031/20160119/paris-attack- suspect-arrested-morocco.htm, last visited: 9 August 2016.

! ! 9 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

attacks];32 Mohammed Emwazi [Laachraoui allegedly worked with the IS executioner from Britain in Syria].33

KHALID EL-BAKRAOUI aka Ibrahim Maaroufi34

Role: suicide bomber; suspected of playing a role in the logistics of the Paris attacks,35 including providing ammunition.36 He rented apartments used by the Paris attackers in Charleroi, Belgium using the alias ‘Ibrahim Maaroufi’,37 and other apartments in the Forest and Schaerbeek areas of Brussels.38

Bio: Khalid el-Bakraoui, 27 years old,39 grew up with his brother Ibrahim in Laeken, Brussels, their father a butcher who had emigrated from Morocco.40 Both Bakraoui brothers are alleged to have been plotting another attack in which radioactive material would be scattered over a populated area; in particular, they have been linked to the surveillance of a senior Belgian nuclear authority. It is believed the plot involved the kidnapping of a nuclear expert to make a ‘dirty bomb’. The passes of 11 nuclear workers were consequently revoked.41

Foreign training/combat: Unknown.

Movements: Unknown.

Criminal history: In 2009, el-Bakraoui was involved in four car-jackings and a bank robbery, kidnapping a bank employee in October 2009 and forcing her to deactivate alarm systems before stealing €41,000 euros. He was convicted of criminal conspiracy, armed robbery and possession of stolen goods and sentenced to five years in September 2011, being freed on parole in 2013 or 2014.42

Known to the authorities: Just months after his brother, Ibrahim, was stopped at the Turkish border with Syria, an arrest warrant for Khalid was issued by Interpol because he had violated his parole conditions.43 Khalid was also allegedly put on the US counter-terrorism watch list soon after the Paris attacks on 13 November 201544 and Interpol issued a red notice for him in December 2015.45 New York police also issued an alert for both brothers on 16 March 2016 which was passed on to the Dutch authorities.46

! ! 32 Spencer, R., ‘Four jihadists, one prison: all released by Assad and all now dead’, The Telegraph, 11 May 2016, available at: http://s.telegraph.co.uk/graphics/projects/isis--syria-assad-islamic/index.html, last accessed 9 August 2016. 33 Hunter, M., ‘Brussels airport bomber tortured British ISIS prisoners before they were beheaded… and regularly taunted them that it would be their ‘death tomorrow’’, Daily Mail Online, 13 May 2016. 34 ‘Ibrahim and Khalid el-Bakraoui: From Bank Robbers to Brussels Bombers’, International New York Times, 24 March 2016, available at: http://www.nytimes.com/2016/03/25/world/europe/expanding-portraits-of-brussels-bombers-ibrahim-and-khalid-el-bakraoui.html?_r=0, last visited: 9 August 2016. 35 ‘Suicide bombers in Brussels had known links to Paris attacks’, Guardian, 23 March 2016, available at: http://www.theguardian.com/world/2016/mar/23/belgium- awkward-questions-bombers-links-to-paris-terror-cell, last visited: 9 August 2016. 36 Tomlinson, S., ‘Revealed: Bomber brothers were gangland criminals and wanted by Interpol – but were STILL able to provide ammunition for Paris attacks and rent flat for Brussels mastermind’, Daily Mail Online, 23 March 2016, available at: http://www.dailymail.co.uk/news/article-3506131/Bomber-brothers-gangland- criminals-jailed-wielding-Kalashnikovs-able-provide-ammunition-Paris-attacks-rent-flat-ISIS-Brussels-mastermind.html, last visited: 9 August 2016. 37 ‘Ibrahim and Khalid el-Bakraoui: From Bank Robbers to Brussels Bombers’, International New York Times, 24 March 2016. 38 Chrisafis, A, and Jon Henley, ‘Brussels suicide bombers identified as police hunt suspect caught on CCTV’, Guardian, 23 March 2016, available at: https://www.theguardian.com/world/2016/mar/23/brussels-suicide-bombers-named-el-barkaoui-brothers; and ‘Brussels attacks: Have blunders hampered Belgian investigation?’, BBC News, 15 April 2016, available at: http://www.bbc.co.uk/news/world-europe-35918282. Both last visited: 9 August 2016. 39 Holehouse, M., ‘El-Bakraoui brothers: Who are the suicide bombers Khalid and Brahim behind the Brussels attacks?’ Daily Telegraph, 25 March 2016. 40 ‘Ibrahim and Khalid el-Bakraoui: From Bank Robbers to Brussels Bombers’, International New York Times, 24 March 2016. 41 Holehouse, M., ‘All Belgian residents issued with iodine tablets to protect against radiation’, The Telegraph, 28 April 2016, available at: http://www.telegraph.co.uk/news/2016/04/28/all-belgian-residents-issued-with-iodine-tablets-to-protect-agai/, last visited: 9 August 2016. 42 ‘Ibrahim and Khalid el-Bakraoui: From Bank Robbers to Brussels Bombers’, International New York Times, 24 March 2016. 43 ibid. 44 Graham, C. et al., ‘Sources say Ibrahim el-Bakraoui was on US counterterrorism watch list before Paris attacks- live’, Daily Telegraph, 26 March 2016, available at: http://www.telegraph.co.uk/news/worldnews/europe/belgium/12204399/Brussels-terror-attacks-metro-airport-suspects-live.html, last visited: 9 August 2016. 45 ‘Brussels attacks: Have blunders hampered Belgian investigation?’ BBC News, 15 April 2016. 46 ibid.

! ! 10 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Network and associates:

-! Brussels attacks (March 2016): Ibrahim el-Bakraoui [brother and fellow attacker], Najim Laachraoui [fellow attacker];47 Mohamed Abrini [Abrini visited the Charleroi safe house48 rented by Khalid el-Bakraoui;49 Youssef El Ajmi [Childhood friend who provided el-Bakraoui with messages on flight times from Zaventem airport and visited him at a house in , Brussels].50

-! Paris attacks (November 2015): Abdelhamid Abaaoud, Brahim Abdeslam, Salah Abdeslam, Bilal Hadfi [finger prints of Abaaoud and Hadfi found at a safe house in Charleroi visited by both Abdeslam brothers51 and which was rented by Khalid el-Bakraoui;52 Hadfi’s DNA was also found in an apartment in Schaerbeek53 which was rented by Khalid el-Bakraoui, while Salah Abdeslam hid there after the Paris attacks;54 Mohamed Belkaid [Khalid el-Bakraoui rented an apartment in the Forest area of Brussels in which Belkaid was killed and Abdeslam’s DNA was discovered – he is believed to have fled during the police raid]55

-! Other: Soufiane Ayari [Escaped from the Forest flat during a police raid on 15 March 2016,56 where his fake Belgian ID in the name Amine Choukri was discovered];57 Mohamed Belkaid [Killed during the police raid on the Forest flat].58

IBRAHIM EL-BAKRAOUI

Role: Brussels airport suicide bomber; suspected of playing a role in the logistics of the Paris attacks,59 including providing ammunition.60

Bio: Ibrahim el-Bakraoui, 29 years old,61 grew up with his brother Khalid; They grew up in Laeken, Brussels, their father a butcher who had emigrated from Morocco.62 Both Bakraoui brothers are alleged to have been plotting another attack in which radioactive material would be scattered over a populated area; in particular, they have been linked to the surveillance of a senior Belgian nuclear authority. It is

! ! 47 Sandhu, S., ‘Brussels attacks: Who were the attackers and what happened? Everything we know so far’, Independent, 23 March 2016, available at: http://www.independent.co.uk/news/world/europe/brussels-attacks-what-happened-everything-we-know-on-wednesday-a6947346.html, last visited: 9 August 2016. 48 ‘Belgian police identify three safe houses used by Paris suspects’, The Express Tribune, 13 January 2016, available at: http://tribune.com.pk/story/1026817/belgian-police-identify-three-safe-houses-used-by-paris-suspects/; and ‘Brussels attacks: Have blunders hampered Belgian investigation?’ BBC News, 15 April 2016. Both last visited: 9 August 2016. 49 ‘Brussels attacks: Have blunders hampered Belgian investigation?’, BBC News, 15 April 2016. 50 ‘Attentats a Bruxelles: la detention de Youssef El Ajmi prolongee’, La Libre, 8 July 2016, available at: http://www.lalibre.be/actu/belgique/attentats-a-bruxelles-la- detention-de-youssef-el-ajmi-prolongee-577fa65b3570ec4c4382c64b, last visited: 9 August 2016. 51 ‘Belgian police identify three safe houses used by Paris suspects’, The Express Tribune, 13 January 2016; and ‘Brussels attacks: Have blunders hampered Belgian investigation?’ BBC News, 15 April 2016, last visited: 9 August 2016. 52 ‘Brussels attacks: Have blunders hampered Belgian investigation?’, BBC News, 15 April 2016. 53 Kroet, C., ‘Belgian police identify third Paris attack safe house’, , 13 January 2016, available at: http://www.politico.eu/article/belgian-police-identify-third- paris-attack-safe-house-terrorism-brussels-charleroi-france-abaaoud/, last visited: 9 August 2016. 54 ibid.; and Henley, J. and Angelique Chrisafis, ‘Brussels bomber's DNA confirms his link to Paris attacks, say prosecutors’, Guardian, 25 March 2016, available at: https://www.theguardian.com/world/2016/mar/25/police-arrest-men-brussels-paris-terror-attacks. Both last visited: 9 August 2016. 55 Chrisafis, A., ‘Two suspects still on run after Brussels anti-terror raid that killed one’, Guardian, 16 March 2016, available at: https://www.theguardian.com/world/2016/mar/16/paris-attacks-suspect-algerian-in-belgium-prosecutor; and Chrisafis, A. and Jon Henley, ‘Brussels suicide bombers identified as police hunt suspect caught on CCTV’, Guardian, 23 March 2016; and Allen, P., and Sophie Evans, ‘World's ‘most wanted ISIS terrorist’ made astonishing escape from Brussels police raid that killed Paris attacks suspect’, Mirror, 18 March 2016, http://www.mirror.co.uk/news/world-news/worlds-most- wanted-isis-terrorist-7583915. All last visited: 9 August 2016. 56 Verberght, M. et al., ‘Salah Abdeslam, Paris Attacks Suspect, Captured in Belgian Raid’, The Wall Street Journal, 18 March 2016, available at: http://www.wsj.com/articles/salah-abdeslam-paris-attack-suspect-captured-in-belgian-raid-1458323779, last visited: 9 August 2016. 57 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016, available at: http://www.bbc.co.uk/news/world-europe-35848555, last visited: 9 August 2016. 58 Verberght, M. et al., ‘Salah Abdeslam, Paris Attacks Suspect, Captured in Belgian Raid’, The Wall Street Journal, 18 March 2016. 59 Henley, J. and Kareem Shaheen, ‘Suicide bombers in Brussels had known links to Paris attacks’, Guardian, 23 March 2016. 60 Tomlinson, S., ‘Revealed: Bomber brothers were gangland criminals and wanted by Interpol – but were STILL able to provide ammunition for Paris attacks and rent flat for Brussels mastermind’, Daily Mail Online, 23 March 2016. 61 ‘Brussels suicide bombers identified as police hunt suspect caught on CCTV’, Guardian, 23 March 2016. 62 ‘Ibrahim and Khalid el-Bakraoui: From Bank Robbers to Brussels Bombers’, International New York Times, 24 March 2016.

! ! 11 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW believed the plot involved the kidnapping of a nuclear expert to make a ‘dirty bomb’. The passes of 11 nuclear workers were consequently revoked.63 Ibrahim left an audio-note to his mother on a computer discarded in a bin in Schaerbeek claiming that he preferred to be a suicide bomber than be sent to jail.64

Foreign training/combat: Bakraoui travelled to Antalya, Turkey, in June 2015, and was subsequently detained by Turkish authorities in Gaziantep after he was identified as “a potential foreign fighter” intending to travel to Syria.65 It is unclear if he was able to make contact with militants.

Movements: Detained by Turkish authorities in Gaziantep, Turkey (June 2015);66 Turkey to , entered via Schiphol airport (15 July 2015).67

Criminal history: In January 2010, Ibrahim opened fire on police officers while a lookout during a robbery in Brussels.68 In August 2010, he was sentenced to nine years for attempted murder and was released on parole by October 2014.69 [Another source claims he was sentenced to nine years in October 2010].70

Known to the authorities: Turkish authorities claim to have notified the Belgian authorities after arresting Ibrahim in June 2015, and it is reported Belgian authorities stated they had previously released him on the grounds there was insufficient evidence of terrorist links.71 However, Dutch and Belgian authorities deny these claims.72 Ibrahim was also on the US counter-terrorism watch list prior to the Paris attacks73 and New York police issued an alert for both brothers on 16 March 2016.74

Networks and associates:

-! Brussels attacks (March 2016): Khalid el-Bakraoui [brother], Najim Laachraoui [fellow attacker];75 Mohamed Abrini [Khalid el-Bakraoui profile for details].

-! Paris attacks (November 2015): Abdelhamid Abaaoud, Brahim Abdeslam, Salah Abdeslam, Bilal Hadfi [Sources suggest Ibrahim was involved in renting properties in Charleroi and Schaerbeek alongside his brother.76 See Khalid el-Bakraoui profile for details]. -! Other: Abu Sulayman al-Faransi [Ibrahim el-Bakraoui’s computer contained evidence of contact with al-Faransi and it is believed the Brussels attack plans were ‘submitted’ by Ibrahim to al- Faransi].77

! ! 63 Holehouse, M., ‘All Belgian residents issued with iodine tablets to protect against radiation’, The Telegraph, 28 April 2016. 64 Samuel, H. and Robert Mendick, ‘Brussels attacks: Airport bomber's suicide note to his mother’ The Telegraph, 23 March 2016, http://www.telegraph.co.uk/news/2016/03/24/brussels-attacks-airport-bombers-suicide-note-to-his-mother/, last visited: 9 August 2016. 65 Henley, J. and Kareem Shaheen, ‘Suicide bombers in Brussels had known links to Paris attacks’, Guardian, 23 March 2016. 66 ‘Ibrahim and Khalid el-Bakraoui: from Bank Robbers to Brussels Bombers’, International New York Times, 24 March 2016. 67 ‘Brussels attacks: Have blunders hampered Belgian investigation?’, BBC News, 15 April 2016. 68 ‘Ibrahim and Khalid el-Bakraoui: From Bank Robbers to Brussels Bombers’, International New York Times, 24 March 2016. 69 ibid. 70 ‘Brussels attacks: Airport bomber’s suicide note to his mother’, Daily Telegraph, 23 March 2016. 71 Henley, J. and Kareem Shaheen, ‘Suicide bombers in Brussels had known links to Paris attacks’, Guardian, 23 March 2016. 72 ‘Brussels attacks: Have blunders hampered Belgian investigation?’, BBC News, 15 April 2016. 73 ‘Sources say was on US counterterrorism watch list before Paris attacks- live’, Daily Telegraph, March 2016. 74 ‘Brussels attacks: Have blunders hampered Belgian investigation?’, BBC News, 15 April 2016. 75 ‘Brussels explosions: What we know about airport and metro attacks’, BBC News, 9 April 2016. 76 Henley, J. and Angelique Chrisafis, ‘Brussels bomber's DNA confirms his link to Paris attacks, say prosecutors’, Guardian, 25 March 2016. 77 Gartenstein-Ross, D., and Nathaniel Barr, ‘Recent Attacks Illuminate Islamic State’s Europe Attack Network’, The Jamestown Foundation, 27 April 2016, available at: http://www.jamestown.org/programs/tm/single/?tx_ttnews[tt_news]=45362&cHash=89f8c723f2eb291f6effb6d9ba332c8b#.VytMZY-cHVI, last visited: 9 August 2016.

! ! 12 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

1.2 Brussels: Accomplices

MOHAMED ABRINI

Role: Failed suicide bomber;78 logistics;79 Abrini is also believed to have driven with Abdeslam to Paris before the Paris attacks.80

Bio: 30 years old, of Moroccan origin, Abrini lived in the same area as the Abdeslam brothers and Abdelhamid Abaaoud81 and was a close childhood friend of Salah Abdeslam. Before Abrini became involved with extremists, he is believed to have begun training as a welder aged 18 before giving it up82 and is believed to have worked in a bakery. His younger brother was killed in Syria in 201483 and Abrini is believed to have travelled to Syria in April 2015 after flying to Istanbul following his release from prison after being convicted for a number of robberies.84 He is then believed to have travelled to the UK, meeting with Islamists in , London, and Manchester in July 2015.85 He was caught on CCTV with Salah Abdeslam on 11 November 2015, two days before the Paris attacks, at a petrol station in Ressons, north of Paris.86Arrested on 8 April 2016,87 in the neighbourhood of Brussels.88 Abrini evaded capture for five months following the Paris attacks before heading to Brussels Zaventem airport with Najim Laachraoui and Ibrahim el-Bakraoui. He abandoned his plans to carry out a suicide attack and fled into Brussels, and was arrested in Anderlecht on 8 April.89 On 9 June, a Belgian judge approved his extradition to France.90

Foreign training/combat: Believed to have fought in Syria and undergone training before returning to Belgium.91

Movements: Turkey/Syria (April 2015); Paris (November 2015); 92 Birmingham/London/Manchester (June 2015)93

! ! 78 ‘Isis Brussels attacks suspect Mohamed Abrini botched suicide bombing as he ‘wouldn’t hurt a fly’, IBT, 14 April 2016, available at: http://www.ibtimes.co.uk/isis- brussels-attacks-suspect-mohamed-abrini-botched-suicide-bombing-he-wouldnt-hurt-fly-1554814, last visited: 9 August 2016. 79 ‘Brussels suspect: Check-in area for Tel Aviv flight was targeted’, Times of Israel, 14 April 2016, available at: http://www.timesofisrael.com/brussels-suspect-check- in-area-for-tel-aviv-flight-was-targeted/, last visited: 9 August 2016. 80 ‘Mohammed Abrini: ‘Man in the hat’ planned terror attacks in UK’, Express, 10 April 2016, available at: http://www.express.co.uk/news/uk/659781/Mohammed- Abrini-arrested-Belgium-Brussels-bombing-man-in-the-hat-planned-UK-attack, last visited: 9 August 2016. 81 ‘Factbox: The hunt for the Paris attackers’, , 24 December 2015, available at: http://uk.reuters.com/article/uk-france-shooting-identities-factbox- idUKKBN0U70SA20151224, last visited: 9 August 2016. 82 ‘Paris attacks suspect Salah Abdeslam ‘had planned to target Brussels’, Guardian, 20 March 2016, available at: http://www.theguardian.com/world/2016/mar/20/paris-attacks-manhunt-two-suspects-still-at-large, last visited: 9 August 2016. 83 ‘Is Europe still at threat from Paris-Brussels terror ‘supercell’?’, France 24, 11 April 2016, available at: http://www.france24.com/en/20160411-europe-still-threat- paris-brussels-terror-supercell, last visited: 9 August 2016. 84 Kroet, C., ‘Police monitored Brussels terror suspect’s home months before bombings: media report’, Politico, 2 June 2016, available at: http://www.politico.eu/article/police-monitored-brussels-terror-suspect-mohamed-abrini-home-months-before-brussels-attacks-bombings-media-report/ 85 ‘Mohammed Abrini: ‘Man in the hat’ planned terror attacks in UK’, Express, 10 April 2016. 86 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015. 87 ‘Paris attacks: Key suspect Abrini arrested in Brussels’, BBC News, 9 April 2016, available at: http://www.bbc.co.uk/news/world-europe-36000407, last visited: 9 August 2016. 88 ‘Brussels suspect: Check-in area for Tel Aviv flight was targeted’, The Times of Israel, 14 April 2016. 89 ‘Isis Brussels attacks suspect Mohamed Abrini botched suicide bombing as he ‘wouldn’t hurt a fly’, IBT, 14 April 2016 90 ‘Paris attacks: Belgian judge approves extradition of terror suspects Mohamed Abrini and Mohamed Bakkali to France’, The Independent, 9 June 2016, available at: http://www.independent.co.uk/news/world/europe/paris-attacks-mohamed-abrini-mohamed-bakkali-judge-approves-extradition-terror-charges-a7073491.html, last visited: 9 August 2016. 91 Newton, J. et al., ‘Terror suspect seen driving with Salah Abdeslam two days before Paris massacre had previously visited Syria, Belgian authorities reveal’, Daily Mail Online, 26 November 2015, available at: http://www.dailymail.co.uk/news/article-3334828/Terror-suspect-seen-driving-Salah-Abdeslam-two-days-Paris-massacre-previously-visited-Syria-Belgian-authorities- reveal.html, last visited: 9 August 2016. 92 ‘Mohammed Abrini: ‘Man in the hat’ planned terror attacks in UK’, Express, 10 April 2016. 93 Wellman, A. and Jeanette Oldham, ‘Revealed: UK city which 'Paris and Brussels attacker staked out before massacres', Mirror, 26 March 2016, available at: http://www.mirror.co.uk/news/uk-news/revealed-uk-city-paris-brussels-7633263?ICID=FB_mirror_main, last visited: 9 August 2016.

! ! 13 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Criminal history: Abrini has a long history of petty crime, including theft and drug possession and had been jailed on this account on previous occasions.94

Known to the authorities: Reports suggest Abrini may have been monitored by Belgian police in July 2015 over concerns related to Syria. Before his arrest after the Brussels attacks, Abrini, who had been a suspect since the Paris attacks in November 2015, had been described as one of Europe’s “most wanted” men.95

Networks and associates:

-! Brussels attacks (March 2016): Najim Laachraoui [see above]; Khalid el-Bakraoui, Ibrahim el- Bakraoui, [fellow attackers; DNA found in the apartment used by the Brussels attackers].96

-! Paris attacks (November 2015): Brahim Abdeslam, Salah Abdeslam [Believed to have rented an apartment with Salah Abdeslam in Paris which was used by the attackers;97 Caught on CCTV with Salah Abdeslam on 11 November 2015;98 Abrini was also a regular at a bar run by Salah and Brahim Abdeslam until it was shut down for its connections to drug dealing];99 Other unspecified attackers [Abrini’s DNA and fingerprints were found in a car used by the Paris attackers].100

OSAMA KRAYEM aka Naim al Ahmed/Al-Hamed101

Role: Charged in relation to the Brussels attack on the Metro; had planned to detonate a suicide bomb but backed out.102 Believed to have bought the bags used to hide the bombs,103 Krayem carried a bag of explosives to the metro station.104 He also stands accused of plotting another attack on Paris.105

Bio: 23-year-old Swedish citizen and member of IS.106 Krayem grew up in the Seved neighbourhood of Malmo, Sweden. Sources claim he is the “son of Syrian exiles” from Rosengard, Malmo, which has a “reputation for crime and ethnic segregation”.107 A friend of Krayem described the latter “living it up” in the Seved neighbourhood.108 It is believed he was radicalised in 2015 and that before leaving for Syria early that year he tried to recruit others from his mosque.109 He accompanied Khalid el-Bakraoui to

! ! 94 ‘Brussels suspect: Check-in area for Tel Aviv flight was targeted’, The Times of Israel, 14 April 2016. 95 ‘Paris terror suspect Mohamed Abrini arrested in Belgium’, CNN, 9 April 2016, available at: http://edition.cnn.com/2016/04/08/europe/brussels-attack-arrests/, last visited: 9 August 2016. 96‘Mohammed Abrini: ‘Man in the hat’ planned terror attacks in UK’, Express, 10 April 2016. 97 ‘Brussels suspect: Check-in area for Tel Aviv flight was targeted’, The Times of Israel, 14 April 2016. 98 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015. 99 Bartunek, R. and Alastair Macdonald, ‘Belgians seize key suspects in Paris, Brussels attacks’, Reuters, 9 April 2016, available at: http://www.reuters.com/article/us- france-shooting-abrini-arrest-idUSKCN0X51QK, last visited: 9 August 2016. 100‘Mohammed Abrini: ‘Man in the hat’ planned terror attacks in UK’, Express, 10 April 2016. 101 ‘How are the Brussels attackers linked to Paris?’ France 24, 21 April 2016. 102 ‘Krayem involved in Paris attacks’, New Europe, 20 April 2016, available at: https://neurope.eu/article/krayem-involved-paris-attacks/, last visited: 9 August 2016. 103 ‘How are the Brussels attackers linked to Paris?’, France 24, 21 April 2016, 104 Kroet, C, ‘Osama Krayem ‘carried explosives in Brussels metro’ – report’, Politico, 15 April 2016, available at: http://www.politico.eu/article/osama-krayem- carried-explosives-in-brussels-metro-report/, last visited: 9 August 2016. 105 Watkinson, W., ‘Brussels attack: Who is Osama Krayem the jihadi from Malmo arrested with 'Man in the Hat'?’, International Business Times, 10 April 2016, available at: http://www.ibtimes.co.uk/brussels-attack-who-osama-krayem-jihadi-malmo-arrested-man-hat-1554105, last visited: 9 August 2016. 106 ‘How are the Brussels attackers linked to Paris?’, France 24, 21 April 2016; and Dearden, L., ‘Osama Krayem: Swedish jihadist linked to Brussels bombings charged with 'terrorist murder' over Paris attacks’, Independent, 20 April 2016, available at: http://www.independent.co.uk/news/world/europe/osama-krayem- swedish-jihadist-linked-to-brussels-bombings-charged-with-terrorist-murder-in-paris-a6993236.html, last visited: 9 August 2016. 107 ‘Krayem involved in Paris attacks’, New Europe, 20 April 2016; Watkinson, W., ‘Brussels attack: Who is Osama Krayem the jihadi from Malmo arrested with ‘Man in the Hat’?’, International Business Times, 10 April 2016; ‘Osama Krayem, a Swedish radical linked to Brussels attacks’, Daily Mail Online, 9 April 2016, available at: http://www.dailymail.co.uk/wires/afp/article-3531796/Osama-Krayem-Swedish-radical-linked-Brussels-attacks.html, last visited: 9 August 2016. 108 ‘Osama Krayem, a Swedish radical linked to Brussels attacks’, Daily Mail Online, 9 April 2016. 109 Watkinson, W., ‘Brussels attack: Who is Osama Krayem the jihadi from Malmo arrested with 'Man in the Hat'?’, International Business Times, 10 April 2016.

! ! 14 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Maelbeek metro station, and has claimed he was due to target Petillon metro station before losing his nerve.110 After fleeing the scene, he was arrested on 8 April 2016111 alongside Mohamed Abrini.112

Foreign training/combat: Krayem is believed to have fought for IS in Deir Ezzor, Syria.113

Movements: Krayem travelled with a fake Syrian passport under the name Naim al-Ahmed/al-Hamed on 20 September 2015 from Syria to Europe via the Greek island of Leros on a migrant boat.114 He was picked up by Salah Abdeslam115 and travelled to Belgium via Ulm, Germany.116

Criminal history: Krayam was known to be a petty criminal and drug taker, though it is unclear if he was ever convicted of any offences.117

Known to the authorities: Unknown.

Networks and associates:

-! Brussels attacks (March 2016): Khalid el-Bakraoui [Krayam was filmed on CCTV in metro station118 talking to el-Bakraoui just before he detonated his suicide bomb];119 unspecified attackers [His DNA and fingerprints were found in the Brussels apartments used by the airport bombers, 120 and he was captured on CCTV purchasing the bags used in the airport bombing].121

-! Paris attacks (November 2015): Salah Abdeslam [Krayem was in a car with Abdeslam stopped in Ulm, Germany in October 2015];122 unspecified attackers [his fingerprints and DNA are reported as having been found on “several hideouts” used by the Paris attackers prior to the attacks;123 his DNA was also found in the car used during the Paris attacks].124

-! Other: Soufiane Ayari [Krayem was in a car with Ayari stopped in Ulm, Germany in October 2015. Ayari used false ID with the name Amine Choukri].125

! ! 110 ‘Three months on and still much of the Brussels plot remains a mystery’, The Independent, 18 June 2016, available at: http://www.independent.co.uk/news/world/europe/brussels-terror-plot-remains-a-mystery-three-months-on-a7089381.html, last visited: 9 August 2016. 111 ‘How are the Brussels attackers linked to Paris?’, France 24, 21 April 2016. 112 ‘Osama Krayem, a Swedish radical linked to Brussels attacks’, Daily Mail Online, 9 April 2016. 113 ‘Osama Krayem: Swedish jihadist linked to Brussels bombings charged with ‘terrorist murder’ over Paris attacks’, Independent, 20 April 2016; and Watkinson, W., ‘Brussels attack: Who is Osama Krayem the jihadi from Malmo arrested with 'Man in the Hat'?’, International Business Times, 10 April 2016. 114 ‘How are the Brussels attackers linked to Paris?’ France 24, 21 April 2016; and Watkinson, W., ‘Brussels attack: Who is Osama Krayem the jihadi from Malmo arrested with 'Man in the Hat'?’, International Business Times, 10 April 2016. 115 ibid. 116 ‘How are the Brussels attackers linked to Paris?’ France 24, 21 April 2016. 117 Watkinson, W., ‘Brussels attack: Who is Osama Krayem the jihadi from Malmo arrested with 'Man in the Hat'?’, International Business Times, 10 April 2016. 118 ‘Krayem involved in Paris attacks’, New Europe, 20 April 2016. 119 ‘Osama Krayem, a Swedish radical linked to Brussels attacks’, Daily Mail Online, 9 April 2016. 120 ‘Mohammed Abrini: ‘Man in the hat’ planned terror attacks in UK’, Express, 10 April 2016. 121 Watkinson, W., ‘Brussels attack: Who is Osama Krayem the jihadi from Malmo arrested with 'Man in the Hat'?’, International Business Times, 10 April 2016. 122 ‘How are the Brussels attackers linked to Paris?’ France 24, 21 April 2016. 123 ‘Krayem involved in Paris attacks’, New Europe, 20 April 2016; and ‘Swedish Brussels bombing suspect also seen involved in Paris attacks: paper’, Reuters, 19 April 2016, available at: http://www.reuters.com/article/us-belgium-blast-krayem-idUSKCN0XG2QW, last visited: 9 August 2016. 124 ‘Mohammed Abrini: ‘Man in the hat’ planned terror attacks in UK’, Express, 10 April 2016. 125 ‘How are the Brussels attackers linked to Paris?’ France 24, 21 April 2016.

! ! 15 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

SOUFIANE AYARI aka Amine Choukri126 aka Monir Ahmed Alaaj127

Role: Believed to have been planning a shooting attack with Salah Abdeslam and Mohamed Belkaid to accompany the Brussels attacks.128

Bio: Little is known about Ayari, who was arrested in Molenbeek on 18 March 2016 alongside Salah Abdeslam, but it is claimed he has connections with extremists in Germany.129 Using false names and identity papers he was able to evade detection as he crossed Europe from Syria. He gave the name Monir Ahmed Alaaj when stopped alongside Abdeslam in Ulm in October 2015.130 Ayari was with Abdeslam when he escaped from a flat in Forest raided by the police on 15 March131 and gave another false name, Amine Choukri, when the two were arrested.132

Foreign training/combat: Ayari is believed to have travelled into Europe from Syria, though details of his activity in Syria are unspecified.133

Movements: Believed to have travelled into Europe from Syria via . He was stopped in October 2015 with Salah Abdeslam and Osama Krayem in Ulm, Germany.134

Criminal history: Unknown.

Known to the authorities: Unknown.

Networks and associates:

-! Brussels attacks (March 2016): Osama Krayem [Stopped in October 2015 with Osama Krayem in Ulm, Germany].135

-! Paris attacks (November 2015): Salah Abdeslam [Stopped alongside Abdeslam in Ulm, Germany, in October 2015.136 Ayari was with Abdeslam when he escaped from a flat in Forest raided by the police on 15 March137 and arrested alongside Abdeslam].138

-! Other: Abid Aberkan [Described as the “landlord” of Salah Abdeslam and Ayari];139 Mohammed Belkaid [Ayari escaped from the apartment in Forest during the police raid in which Belkaid was killed.140 Ayari, Belkaid and Abdeslam are believed to have been planning a shooting attack to accompany the Brussels attacks].141

! ! 126 ‘La galaxie djihadistes: Sofiane Ayari, alias “Amine Choukri”’, Le Parisien, available at: http://atelier.leparisien.fr/galaxie-djihadiste/profil/sofiane-ayari-2C-alias- lamine-choukrir/P131, last visited: 9 August 2016. 127 ‘How are the Brussels attackers linked to Paris?’ France 24, 21 April 2016. 128 ‘Suspects linked to the Paris, Brussels attacks’, Reuters, 8 April 2016. 129 Whitehead, T. and Colin Freeman, ‘Brussels explosions: The Isil terror cell that spread across Europe’, The Telegraph, 22 March 2016, available at: http://www.telegraph.co.uk/news/worldnews/europe/belgium/12201703/brussels-explosions-isil-terror-cell-spreads-across-Europe.html, last visited: 9 August 2016; ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 130 ibid. 131 Verberght, M. et al., ‘Salah Abdeslam, Paris Attacks Suspect, Captured in Belgian Raid’, The Wall Street Journal, 18 March 2016. 132 Whitehead, T. and Colin Freeman, ‘Brussels explosions: The Isil terror cell that spread across Europe’, The Telegraph, 22 March 2016; ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016; and ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 133 ‘How are the Brussels attackers linked to Paris?’ France 24, 21 April 2016. 134 ibid. 135 ibid. 136 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 137 Verberght, M. et al., ‘Salah Abdeslam, Paris Attacks Suspect, Captured in Belgian Raid’, The Wall Street Journal, 18 March 2016. 138 Whitehead, T. and Colin Freeman, ‘Brussels explosions: The Isil terror cell that spread across Europe’, The Telegraph, 22 March 2016; ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 139 ‘Abid Aberkan reste en détention préventive’, 7 Sur 7, 25 March 2016, available at: http://www.7sur7.be/7s7/fr/36487/Attentats-a- Bruxelles/article/detail/2657803/2016/03/25/Abid-Aberkan-reste-en-detention-preventive.dhtml, last visited: 9 August 2016. 140 Verberght, M. et al., ‘Salah Abdeslam, Paris Attacks Suspect, Captured in Belgian Raid’, The Wall Street Journal, 18 March 2016. 141 ‘Suspects linked to the Paris, Brussels attacks’, Reuters, 8 April 2016.

! ! 16 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

SMAIL and IBRAHIM FARISI:142 Brothers charged in connection with the Brussels attacks. Smail (born 1984) and Ibrahim (born 1988) are linked to a house in Avenue des Casernes, Etterbeek, Brussels, raided on 16 April 2016; was used by Khalid el-Bakraoui and Osama Krayem.143 Smail is believed to have rented the flat and his younger brother Ibrahim, to have cleaned it to remove evidence; Ibrahim denies his involvement.144

YOUSSEF EL AJMI: Arrested on 17 June, El Ajmi (born 1985) is described as a childhood friend of Khalid el-Bakraoui who worked at Zaventem Airport, where he allegedly had access to aircraft. Messages between El Ajmi and el-Bakraoui related to aircraft heading to Israel, Russia and the US were found on El Ajmi’s computer, and he was also alleged to have met el-Bakraoui at a flat in Etterbeek, Brussels.145 He was charged with terrorist murder and participation in the activities of terrorist group on 18 June.146

! ! 142 ‘Brussels jihadists: Belgian recruiter Zerkani given longer term’, BBC News, 14 April 2016, available at: http://www.bbc.co.uk/news/world-europe- 36042877, last visited: 9 August 2016. 143 ‘Brussels bombings: Two more charged with 'terrorist murder', BBC News, 12 April 2016. 144 ibid. 145 ‘Attentats a Bruxelles: la detention de Youssef El Ajmi prolongee’, La Libre, 8 July 2016. 146 ‘Brussels bombing suspect Youssef EA formally charged by Belgian authorities’, , 18 June 2016, available at: https://www.theguardian.com/world/2016/jun/18/brussels-bombing-suspect-youssef-ea-formally-charged-by-belgian-authorities, last visited: 9 August 2016. ! ! 17 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

1.3 Paris: Attackers

ABDELHAMID ABAAOUD aka Umar al-Baljiki147 and Abu Omar148

Role: Abaaoud planned and oversaw the Paris attacks.149 He is reported to have been present near the Bataclan during the Paris attacks150 and to have participated in attacks on cafés and restaurants,151 as well as providing transport for at least one suicide bomber.152 Abaaoud had also planned an attack in the La Defense area of Paris153 and has been connected to a number of other plots.154 He is also believed to have been involved in recruiting IS operatives in Syria for attacks in Europe.155

Bio: Abaaoud is believed to have been born in the Anderlecht area of Brussels on 8 April 1987156 and was a Belgian national157 of Moroccan ancestry.158 He attended a prestigious Catholic school in Brussels for one year before dropping out, and after being thrown out by his parents at 16 he eventually ended up leading a life of a petty criminal in the Molenbeek area of Brussels. After numerous convictions, he was sent to prison in 2011 and again in 2012, being released in September that year. He is believed to have become involved with extremists while in prison and on his release became close to a group recruiting young men to travel to Syria, and left for the country in March 2013, returning to abduct his younger brother before leaving again in January 2014. After this, he is believed to have returned to Europe on a number of occasions before he travelled to carry out the Paris attacks.159 In November 2015 he was killed in a police raid in the Parisian suburb of Saint Denis.160

Foreign training/combat: Abaaoud first left to fight in Syria in 2013 before returning and then travelling again in January 2014.161 He identified himself as a member of IS in March 2014, posting videos of himself on the front lines, including one in which he was filmed driving a truck to which dead bodies were

! ! 147 Stone, J,. ‘Paris attacks ringleader Abdelhamid Abaaoud 'visited UK over the summer', intelligence agencies believe’, Independent, 26 December 2015, available at: http://www.independent.co.uk/news/world/europe/paris-attacks-ringleader-abdelhamid-abaaoud-visited-uk-over-the-summer-intelligence-agencies-believe- a6786381.html, last visited: 9 August 2016. 148 ‘IS in Europe: The Race to the Death’, BBC News, 23 March 2016, available at: http://www.bbc.co.uk/news/magazine-35872562, last visited: 9 August 2016. 149 Allen, P. and Ian Gallagher, ‘Casual evil of Paris killers: Chilling new film of mastermind strolling to Bataclan after his bloody massacre while accomplice saunters into café seconds before detonating suicide vest’, 9 January 2016, available at: http://www.dailymail.co.uk/news/article-3392048/Casual-evil-Paris-killers- Chilling-new-film-mastermind-strolling-Bataclan-bloody-massacre-accomplice-saunters-cafe-seconds-detonating-suicide-vest.html; Porter, T., ‘Isis: Paris attacks planner Abdelhamid Abaaoud 'met jihadists on UK visit’’, International Business Times, 10 January 2016, available at: http://www.ibtimes.co.uk/paris-attacks- planner-abdelhamid-abaaoud-isis-met-jihadists-uk-visit-1537074; and Callimachi, R., ‘How ISIS Built the Machinery of Terror Under Europe’s Gaze’, , 29 March 2016, available at: http://www.nytimes.com/2016/03/29/world/europe/isis-attacks-paris-brussels.html?_r=0. All last visited: 9 August 2016. 150 ‘Paris attacks: Ringleader Abaaoud 'was near' Bataclan theatre’, BBC News, 24 November 2015, available at: http://www.bbc.co.uk/news/world-europe-34916445, last visited: 9 August 2016. 151 Smith, A. and Nancy Ing, ‘Reda Kriket Arrested, Linked to Paris Ringleader’, NBC News, 25 March 2016, available at: http://www.nbcnews.com/storyline/paris- terror-attacks/reda-kriket-arrested-linked-paris-ringleader-report-n545346, last visited: 9 August 2016. 152 Gartenstein-Ross, D. and Nathaniel Barr, ‘Recent Attacks Illuminate the Islamic State’s Europe Attack Network’, The Jamestown Foundation, 27 April 2016, available at: http://www.jamestown.org/single/?tx_ttnews[tt_news]=45362&tx_ttnews[backPid]=7&cHash=480fc6c02c16ce0b3571fc5635fd699c#.VyN0IjArLIX, last visited: 9 August 2016. 153 Brisard, J., ‘THE PARIS ATTACKS AND THE EVOLVING ISLAMIC STATE THREAT TO FRANCE’, Combating Terrorism Center at West Point, 14 December 2015, available at: https://www.ctc.usma.edu/posts/the-paris-attacks-and-the-evolving-islamic-state-threat-to-france, last visited: 9 August 2016. 154 See networks and associates section. 155 Van Vlierden, G., ‘PROFILE: PARIS ATTACK RINGLEADER ABDELHAMID ABAAOUD’, Combating Terrorism Center at West Point, 15 December 2015, available at: https://www.ctc.usma.edu/posts/profile-paris-attack-ringleader-abdelhamid-abaaoud, last visited: 9 August 2016. 156 ibid. 157 ‘Paris attacks: Who was Abdelhamid Abaaoud?’, BBC News, 19 November 2015, available at: http://www.bbc.co.uk/news/world-europe-34835046; and Dearden, L, ‘Abdelhamid Abaaoud: What we know about Belgian man identified as suspected Paris attacks 'mastermind'’, Independent, 16 November 2015, available at: http://www.independent.co.uk/news/world/europe/abdelhamid-abaaoud-belgian-man-identified-as-suspected-mastermind-of-paris-attacks- a6735871.html. Both last visited: 9 August 2016. 158 Faiola, A. and Souad Mekhennet, ‘The Islamic State creates a new type of jihadist: Part terrorist, part gangster’, The Washington Post, 20 December 2015. 159 Van Vlierden, G., ‘PROFILE: PARIS ATTACK RINGLEADER ABDELHAMID ABAAOUD’, Combating Terrorism Center at West Point, 15 December 2015; and Faiola, A. and Souad Mekhennet, ‘The Islamic State creates a new type of jihadist: Part terrorist, part gangster’, The Washington Post, 20 December 2015. 160 ‘Paris attacks: 'Ringleader' Abdelhamid Abaaoud killed in raid’, BBC News, 19 November 2015, available at: http://www.bbc.co.uk/news/world-europe- 34867615, last visited: 9 August 2016. 161 Faiola, A. and Souad Mekhennet, ‘The Islamic State creates a new type of jihadist: Part terrorist, part gangster’, The Washington Post, 20 December 2015.

! ! 18 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW attached. He is suspected of having been a member of IS brigade Katibat al-Battar162 and has been referred to as an IS military commander, acting as the group’s “Emir of War” in Deir Ezzor.163

Movements: Abaaoud travelled back and forth between Syria and Europe via Greece several times164 and boasted of the ease with which he travelled back and forth between Syria and Belgium in IS propaganda.165 He is reported to have travelled to the UK in the summer of 2015, using a fake passport to enter the country through Kent before travelling on to London.166 Greek media has also reported that he stayed at an apartment in Pangrati, Athens, in January 2015

Criminal history: Before travelling to Syria, Abaaoud was described as a “repeat offender”.167 In 2006 he was convicted for concealing stolen goods, and three years later for violence and resisting police officers. In 2010, he broke into a garage in Ottignies, near Brussels, with Salah Abdeslam, and was convicted in 2011. The same year he was convicted of theft with violence and given 18 months in prison, before being jailed in 2012 for hitting someone in Dendermonde.

Known to the authorities: Western intelligence agencies were aware of Abaaoud’s role within IS by early 2015 and were working hard to capture him.168 It is also likely that he had been on the radar of Belgian authorities once he began to associate with the network of extremists around Khalid Zerkani, which had been being monitored since April 2012. Abaaoud was convicted in absentia and sentenced to 20 years for his role with the group in early 2015.169

Networks and associates:

-! Brussels attacks (March 2016): Najim Laachraoui [became associated with Abaaoud in Syria; Ibrahim el-Bakraoui, Khalid el-Bakraoui [Abaaoud’s fingerprints were found at the Charleroi170 property rented by the el-Bakraoui brothers,171 and his fingerprints and DNA were found at an apartment the brothers rented in Schaerbeek].172

-! Paris attacks (November 2015): Salah Abdeslam, Brahim Abdeslam, Chakib Akrouh, Sami Amimour, Bilal Hadfi [Abaaoud is suspected of being a member of IS brigade Katibat al-Battar, of which Hadfi was a member];173 Ahmad al-Mohammed, M al-Mahmod, Omar Ismail Mostefai, Foued Mohammed Aggad [fellow Paris attackers].174 -! Zerkani network: Khalid Zerkani [Abaaoud was given a 20 year sentence in absentia in connection with his involvement with Zerkani’s network],175 Gelel Attar [Attar was given a five ! ! 162 Van Vlierden, G, ‘PROFILE: PARIS ATTACK RINGLEADER ABDELHAMID ABAAOUD’, Combating Terrorism Center at West Point, 15 December 2015. 163 Gauthier-Villars, D. et al., ‘Abdelhamid Abaaoud, Alleged Ringleader of Paris Attacks, Was ‘Emir of War’ in Syria’, Wall Street Journal, 19 November 2015, available at: http://www.wsj.com/articles/alleged-mastermind-of-paris-attacks-was-emir-of-war-in-syria-1447907485, last visited: 9 August 2016. 164 Whitehead, T. and Colin Freeman, ‘Brussels explosions: The Isil terror cell that spread across Europe’, The Telegraph, 22 March 2016. 165 ‘Paris attacks: Extracts from Islamic State Dabiq interview with Abdelhamid Abaaoud – alleged mastermind of carnage’, International Business Times, 16 November 2015, available at: http://www.ibtimes.co.uk/paris-attacks-extracts-islamic-state-dabiq-interview-abdelhamid-abaaoud-alleged-mastermind-1528982; and ‘Sick taunts of the Paris mastermind: Jihadist boasts of freely crossing Europe's borders and mocks police who had him in their clutches’, Daily Mail Online, 17 November 2015, available at: http://www.dailymail.co.uk/news/article-3321335/Sick-taunts-Paris-mastermind-Jihadi-boasts-freely-crossing-Europe-s-border-mocks-police-clutches.html. Both last visited: 9 August 2016. 166 Stone, J., ‘Paris attacks ringleader Abdelhamid Abaaoud 'visited UK over the summer', intelligence agencies believe’, Independent, 26 December 2015,. 167 Faiola, A. and Souad Mekhennet, ‘The Islamic State creates a new type of jihadist: Part terrorist, part gangster’, The Washington Post, 20 December 2015. 168 ‘IS in Europe: The race to the death’, BBC News, 23 March 2016. 169 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016. 170 ‘Belgian police identify three safe houses used by Paris suspects’, The Express Tribune, 13 January 2016. 171 Chrisafis, A, and Henley, J, ‘Brussels suicide bombers identified as police hunt suspect caught on CCTV’, Guardian, 23 March 2016. 172 Kroet, C, ‘Belgian police identify third Paris attack safe house’, Politico, 13 January 2016. 173 Van Vlierden, G, ‘PROFILE: PARIS ATTACK RINGLEADER ABDELHAMID ABAAOUD’, Combating Terrorism Center at West Point, 15 December 2015. 174 ‘Paris attacks: Who were the attackers?’, BBC News, 27 April 2016, available at: http://www.bbc.co.uk/news/world-europe-34832512, last visited: 9 August 2016. 175 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016.

! ! 19 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

year sentence arising from the same investigation into the Zerkani network, and was arrested in Morocco in January 2016;176 Attar built a relationship with Abaaoud while in Syria];177 Reda Kriket [convicted in absentia alongside Abaaoud as part of the same network]178, Yassine Lachriri [IS jihadist sentenced to 20 years in Brussels in July 2015; “deemed close” to Abaaoud and recruited by Khalid Zerkani].179 Yoni Mayne [travelled to Syria with Abaaoud in 2014; known to be one of Zerkani’s disciples].180

-! Islamic State: Amr al-Absi [A member of IS’s Shura Council,181 referred to as the group’s “kidnapper-in-chief”,182 head of media183 and at on1e point Emir of Aleppo184 and provincial leader in Homs,185 al-Absi was killed in March 2016. Abaaoud was part of al-Absi’s group in Syria before he returned to Europe to carry out attacks];186 [Abaaoud is reported to have been working with Clain in Raqqa to recruit French and Belgian fighters for attacks in the West];187 Charaf al-Mouadan [An IS fighter and French national killed in December 2015, Mouadan is claimed to have had a direct link with Abaaoud and been planning attacks in the West].188

-! Other: Younes Abaaoud [on his second trip to Syria, Abaaoud took his 13-year-old brother, Younes, with him to fight for IS];189 Hasna Aitboulahcen [cousin and accomplice; died in explosion during the police raid in which Abaaoud was also killed];190 Mehdi Nemmouche [Abaaoud has been described as having guided Mehdi Nemmouche, alleged to have carried out the May 2014 attack on a Jewish Museum in Brussels.191 The two had met in Syria192 and four days before Nemmouche left from Cologne airport in January 2014, the men had a 24 minute phone call];193 Khalid Ben Larbi, Soufiane Amghar [In January 2015, Abaaoud oversaw a plot to kill police officers with the two men (known as the Verviers Cell) who were both killed in a shoot-out

! ! 176 ibid. 177 Malm, S., ‘Pictured: Belgian terror suspect 'with direct links' to Paris attackers who trained with Bataclan mastermind in Syria is arrested in Morocco’, Daily Mail Online, 18 January 2016, available at: http://www.dailymail.co.uk/news/article-3405087/Morocco-arrests-Belgian-man-linked-Paris-attackers.html, last visited: 9 August 2016. 178 ‘France charges main suspect in foiled attack plot’, The Times of Israel, 31 March 2016, available at: http://www.timesofisrael.com/france-charges-main-suspect- in-foiled-attack-plot/; and ‘Thwarted Paris plot linked to deadly Brussels ISIS cell’, CBS News, 25 March 2016, available at: http://www.cbsnews.com/news/paris- terror-plot-reda-kriket-abdelhamid-abaaoud-brussels-attacks-isis-cell/. Both last visited: 9 August 2016. 179 ‘Un djihadiste belge échangé par la Turquie contre des otages de l’État islamique’, Le Soir, 10 March 2016, available at: http://www.lesoir.be/1145925/article/actualite/belgique/2016-03-10/un-djihadiste-belge-echange-par-turquie-contre-des-otages-l-etat-islamique; and Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016, available at: http://www.wsj.com/articles/investigators-home-in-on-scope-of-terror-network-behind-brussels-paris-attacks-1459728742. Both last visited: 9 August 2016. 180 Cruickshank, P. and Tim Lister, ‘At least 8 suspects are at large with links to attacks in Brussels, Paris’, CNN, 28 March 2016, available at: http://edition.cnn.com/2016/03/28/europe/brussels-paris-attacks-suspects-at-large/, last visited: 9 August 2016. 181 ‘Security Council Al-Qaida Sanctions Committee Adds Names of Four Individuals and Two Entities to Its Sanctions List’, United Nations Meetings Coverage and Press Releases, 29 September 2015, available at: http://www.un.org/press/en/2015/sc12063.doc.htm, last visited: 9 August 2016. 182 Spencer, R., ‘Four jihadists, one prison: all released by Assad and all now dead’, The Telegraph, 11 May 2016; ‘Security Council Al-Qaida Sanctions Committee Adds Names of Four Individuals and Two Entities to Its Sanctions List’, United Nations Meetings Coverage and Press Releases, 29 September 2015. 183 ibid. 184 Orton, K., ‘How Syria's Assad gave rise to one of the most senior IS leaders’, Middle East Eye, 10 March 2016, available at: http://www.middleeasteye.net/columns/how-syrias-assad-gave-rise-one-most-senior-leaders-412885798, last visited: 9 August 2016. 185 ‘Security Council Al-Qaida Sanctions Committee Adds Names of Four Individuals and Two Entities to Its Sanctions List’, United Nations Meetings Coverage and Press Releases, 29 September 2015. 186 Spencer, R., ‘Four jihadists, one prison: all released by Assad and all now dead’, The Telegraph, 11 May 2016. 187 Van Vlierden, G., ‘PROFILE: PARIS ATTACK RINGLEADER ABDELHAMID ABAAOUD’, Combating Terrorism Center at West Point, 15 December 2015. 188 Crawford, J., ‘Coalition forces kill ISIS leader connected to Paris attack’, CNN Politics, 30 December 2015, available at: http://edition.cnn.com/2015/12/29/politics/isis-leader-connected-to-paris-attack-killed-by-coalition-forces/, last visited: 9 August 2016. 189 Cruickshank, P. and Tim Lister, ‘At least 8 suspects are at large with links to attacks in Brussels, Paris’, CNN, 28 March 2016. 190 Allen, P., ‘Female jihadi in Paris attacks died of 'asphyxiation', say prosecutors - as her family sue French police claiming she was murdered by police’, Daily Mail Online, 21 January 2016, available at: http://www.dailymail.co.uk/news/article-3409970/Family-Paris-massacre-jihadi-sues-French-police-claiming-victim-attacks-killed-130.html, last visited: 9 August 2016. 191 Gauthier-Villars, D. et al., ‘Abdelhamid Abaaoud, Alleged Ringleader of Paris Attacks, Was ‘Emir of War’ in Syria’, The Wall Street Journal, 19 November 2015. 192 ‘How Islamic State Infiltrated Europe’, The Wall Street Journal, 1 April 2016. 193 ‘At least 8 suspects are at large with links to attacks in Brussels, Paris’, CNN, 28 March 2016.

! ! 20 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

with police;194 Abaaoud successfully escaped back to Syria.]; 195 Sid Ahmed Ghlam [Abaaoud has been connected to Ahmed Ghlam’s planned April 2015 attack on churches in the Villejuif and Ayoub El Khazzani’s unsuccessful attack on an Amsterdam-Paris train in August 2015];196 Reda Hame [received weapons training from Abaaoud in Raqqa in June 2015]197; Nourreddine Abraimi [brother of Lazez Abraimi, who allegedly assisted Salah Abdeslam after the Paris attacks; 198 provided logistical support to the Verviers cell in January 2015].199

BRAHIM ABDESLAM

Role: Suicide bomber in the Paris attacks, targeted the Comptoir Voltaire café. 200

Bio: Brahim, 31, an unemployed Brussels-born201 trained electrician, was married for two years and known to be involved with drugs,202 with the bar he managed with his brother, Salah, shut down in 2015203 in connection with drug related activity.204 His brother, Mohamed, and friends have suggested he began to change around six months before the attacks and have claimed he only recently became religious.205

Foreign training/combat: His family claimed that he had spent a “long time” in Syria,206 though knowledge of this was denied by his brother Mohamed.207

Movements: Unspecified.

Criminal history: Brahim spent time in jail on two occasions, serving a three month and six month sentence for theft, with one of these believed to relate to stealing Belgian ID cards.208 His bar was shut down in 2015209 in connection with drug-related activity,210 and he was involved with drug trafficking in his teens.211

! ! 194 Dearden, L., ‘Abdelhamid Abaaoud: What we know about Belgian man identified as suspected Paris attacks 'mastermind'’, Independent, 16 November 2015; and Waterfield, B., ‘Belgian police admit seeking wrong man as Vervier shooutout jihadists named’, The Telegraph, 22 January 2015, available at: http://www.telegraph.co.uk/news/worldnews/europe/belgium/11362093/Belgian-police-admit-seeking-wrong-man-as-Vervier-shooutout-jihadists-named.html, last visited: 9 August 2016. 195 Dearden, L., ‘Abdelhamid Abaaoud: What we know about Belgian man identified as suspected Paris attacks 'mastermind'’, Independent, 16 November 2015. 196 ‘Paris attacks: Who was Abdelhamid Abaaoud?’, BBC News, 19 November 2015; and ‘France 'foils five terror attacks' - PM Valls’, BBC News, 23 April 2015, available at: http://www.bbc.co.uk/news/world-europe-32427129, last visited: 9 August 2016. 197 ‘At least 8 suspects are at large with links to attacks in Brussels, Paris’, CNN, 28 March 2016. 198 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015. 199 ‘How Islamic State Infiltrated Europe’, The Wall Street Journal, 1 April 2016; and Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 200 Roberts, H., ‘The pot-smoking Paris suicide bomber: Ex-wife reveals 'blood brother' terrorist was a jobless layabout who spent his time taking drugs and sleeping... and never went to the mosque’, Daily Mail Online, 17 November 2015, available at: http://www.dailymail.co.uk/news/article-3322385/Ex-wife-Comptoir- Voltaire-caf-bomber-reveals-jobless-layabout-spent-day-bed-smoking-pot-French-say-blew-mistake-fiddling-suicide-vest.html, last visited: 9 August 2016. 201 Farmer, B. et al., ‘Who is Salah Abdeslam and who were the Paris terrorists? Everything we know about the Isil attackers’, The Telegraph, 18 March 2016, available at: http://www.telegraph.co.uk/news/worldnews/europe/france/11996120/Paris-attack-what-we-know-about-the-suspects.html, last visited: 9 August 2016. 202 Roberts, H., ‘The pot-smoking Paris suicide bomber: Ex-wife reveals 'blood brother' terrorist was a jobless layabout who spent his time taking drugs and sleeping... and never went to the mosque’, Daily Mail Online, 17 November 2015. 203 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 204 Faiola, A. and Souad Mekhennet, ‘The Islamic State creates a new type of jihadist: Part terrorist, part gangster’, The Washington Post, 20 December 2015. 205 Sharkov, D., ‘WATCH: PARIS ATTACKERS PARTY IN BRUSSELS NIGHT CLUB’, Newsweek Europe, 29 March 2016, available at: http://europe.newsweek.com/watch-paris-attackers-party-brussels-night-club-441547; and Paris attacks: Abdeslam brothers 'were manipulated, not radicalised'’, BBC News, 22 November 2015, available at: http://www.bbc.co.uk/news/world-europe-34895294. Both last visited: 9 August 2016. 206 Roberts, H., ‘The pot-smoking Paris suicide bomber: Ex-wife reveals 'blood brother' terrorist was a jobless layabout who spent his time taking drugs and sleeping... and never went to the mosque’, Daily Mail Online, 17 November 2015; and Roberts, H., ‘Mother of Paris suicide bomber says her son may have blown himself up because of STRESS... while his brother says the family 'are thinking of the victims' after he is released without charge’, available at: http://www.dailymail.co.uk/news/article-3320157/Mother-Paris-suicide-bomber-says-son-did-not-mean-kill-claims-blown-STRESS.html, last visited: 9 August 2016. 207 ‘Paris attacks: Abdeslam brothers 'were manipulated, not radicalised'’, BBC News, 22 November 2015. 208 ‘Is Europe still at threat from Paris-Brussels terror 'supercell'?’, France 24, 11 April 2016. 209 ibid. 210 Faiola, A. and Souad Mekhennet, ‘The Islamic State creates a new type of jihadist: Part terrorist, part gangster’, The Washington Post, 20 December 2015. 211 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016.

! ! 21 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Known to the authorities: Brahim was placed on a police list in 2015 over potential connections to Islamist fighters.212

Networks and associates:

-! Paris attacks (November 2015): Salah Abdeslam [brother], Abdelhamid Abaaoud [Brahim appears alongside Abaaoud in several police files relating to criminal cases between 2010-11; details unknown]213, Chakib Akrouh, Bilal Hadfi, Ahmad al-Mohammed, M al-Mahmod, Omar Ismail Mostefai, Sami Amimour, Foued Mohammed Aggad [fellow attackers].214

CHAKIB AKROUH

Role: Suspected of being one of the Paris gunmen who targeted cafes and restaurants.215

Bio: Akrouh was a 25-year-old Belgian-born Belgian-Moroccan who lived near the Abdeslam brothers in Molenbeek. He became associated with the extremist network related to Khalid Zerkani before travelling to Syria, returning to carry out the Paris attacks.216 He died alongside Abaaoud when he detonated his suicide vest during the police raid.217

Foreign training/combat: He travelled to between Syria in September 2012 and early 2013 with Gelel Attar.218 He first joined Katibat al-Muhajirin before joining IS.219

Movements: Unspecified.

Criminal history: Akrouh was sentenced in absentia to five years in July 2015 for “participating in a terrorist organisation” in connection with his relation to the Zerkani network.220

Known to the authorities: See above.

Network and associates:

-! Paris attacks (November 2015): Abdelhamid Abaaoud, Salah Abdeslam, Brahim Abdeslam, Bilal Hadfi, Ahmad al-Mohammed, M al-Mahmod, Omar Ismail Mostefai, Sami Amimour, Foued Mohammed Aggad [fellow Paris attackers].221

! ! 212 ibid. 213 Farmer, B. et al., ‘Who is Salah Abdeslam and who were the Paris terrorists? Everything we know about the Isil attackers’, The Telegraph, 18 March 2016. 214 ‘Paris attacks: Who were the attackers?’, BBC News, 27 April 2016. 215 ‘Paris attacks: St-Denis bomber also thought to be final gunman’, Guardian, 14 January 2016, available at: http://www.theguardian.com/world/2016/jan/14/paris- prosecutors-identify-bomber-killed-after-november-attacks, last visited: 9 August 2016. 216 Drozdiak, N. and Matthias Verbergt, ‘Paris-Attack Suspect Traveled to Syria in 2013’, The Wall Street Journal, 15 January 2016, available at: http://www.wsj.com/articles/paris-attack-suspect-traveled-to-syria-in-2013-1452859385, last visited: 9 August 2016. 217 Bacchi, U., ‘Paris attacks: Chakib Akrouh was Saint-Denis mystery suicide bomber who died alongside Abdelhamid Abaaoud’, available at: http://www.ibtimes.co.uk/paris-attacks-chakib-akrouh-was-saint-denis-mystery-suicide-bomber-who-died-alongside-abdelhamid-1538129, last visited: 9 August 2016. 218 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016; and Drozdiak, N. and Matthias Verbergt, ‘Paris-Attack Suspect Traveled to Syria in 2013’, The Wall Street Journal, 15 January 2016. 219 Drozdiak, N. and Matthias Verbergt, ‘Paris-Attack Suspect Traveled to Syria in 2013’, The Wall Street Journal, 15 January 2016. 220 ibid. 221 ‘Paris attacks: Who were the attackers?’, BBC News, 27 April 2016.

! ! 22 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

-! Zerkani network: Khalid Zerkani, Gelel Attar [see above]; 222 Ilias Mohammadi [An alleged member of the Zerkani network who returned from Syria to Belgium. Official documents state that he was close to Akrouh].223

-! Other: Hasna Aitboulahcen [Akrouh died alongside Hasna when an apartment was raided in search of Abdelhamid Abaaoud, who was also killed].224

BILAL HADFI

Role: Suicide bomber at the Stade de France during the Paris attacks.225

Bio: A 20-year-old French citizen, Hadfi lived in Needer-over-Heembeek, Belgium. He was raised in Belgium and schooled in Diest, 60km north-east of Brussels. After leaving school he is believed to have trained as an electrician. He is alleged to have become radicalised by an unnamed extremist Imam before travelling to Syria, returning to Belgium and disappearing at some point in 2015.226

Foreign training/combat: Hadfi is believed to have been a member of Katibat al-Battar, an IS brigade which included Abdelhamid Abaaoud.227 Under the aliases Abu Moudjahid Al-Belgiki and Bilal Al Mouhajir, he fought in Syria in the spring of 2015.228 He appears alongside fellow Paris attacker Sami

Amimour (aka Abu Qital al-Faransi) in an IS video, released after the Paris attacks, taking part in beheadings.229

Movements: Syria.230

Criminal history: No known criminal history.

Known to the authorities: When he returned to Belgium he was being monitored by the Belgian authorities, but disappeared.231

Network and associates:

-! Paris attacks (November 2015): Abdelhamid Abaaoud [Abaaoud is suspected of being a member of IS brigade Katibat al-Battar, of which Hadfi was also a member];232 Salah Abdeslam, Brahim

! ! 222 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016. 223 Van Vlierden, G., ‘Belgium knew in 2012 already that Paris suspects were plotting attacks’, Emmejihad, 26 January 2016, available at: https://emmejihad.wordpress.com/2016/01/26/belgium-knew-in-2012-already-that-paris-suspects-were-plotting-attacks/, last visited: 9 August 2016. 224 Allen, P., ‘Female jihadi in Paris attacks died of 'asphyxiation', say prosecutors - as her family sue French police claiming she was murdered by police’, Daily Mail Online, 21 January 2016; and Fenwick, J., ‘Paris suicide bomber who killed Diesel the dog FINALLY named by police’, Express, 15 January 2016, available at: http://www.express.co.uk/news/world/634883/isis-islamic-state-Abdelhamid-Abaaoud-paris-saint-denis-Cahokia-Akrouh-Hasna-Aitboulahcen, last visited: 9 August 2016. 225 Farmer, B. et al., ‘Who is Salah Abdeslam and who were the Paris terrorists? Everything we know about the Isil attackers’, The Telegraph, 18 March 2016. 226 ibid. 227 Gauthier-Villars, D. et al., ‘Abdelhamid Abaaoud, Alleged Ringleader of Paris Attacks, Was ‘Emir of War’ in Syria’, The Wall Street Journal, 19 November 2015. 228 Farmer, B. et al., ‘Who is Salah Abdeslam and who were the Paris terrorists? Everything we know about the Isil attackers’, The Telegraph, 18 March 2016. 229 Rothwell, J. and Josie Ensor, ‘Isil releases beheading video featuring Paris attackers’, The Telegraph, 24 January 2016, available at: http://www.telegraph.co.uk/news/worldnews/islamic-state/12119003/Isil-releases-new-beheading-video-featuring-Paris-attackers.html; Sommers, J., ‘Islamic State Propaganda Video Features Paris Attackers Bilal Hadfi And Samy Amimour’, The Huffington Post, 25 January 2016, available at: http://www.huffingtonpost.co.uk/2016/01/25/islamic-state-propaganda-_n_9067142.html. Both last visited: 9 August 2016. 230 ibid. 231 Farmer, B. et al., ‘Who is Salah Abdeslam and who were the Paris terrorists? Everything we know about the Isil attackers’, The Telegraph, 18 March 2016. 232 Van Vlierden, G., ‘PROFILE: PARIS ATTACK RINGLEADER ABDELHAMID ABAAOUD’, Combating Terrorism Center at West Point, 15 December 2015

! ! 23 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Abdeslam, Chakib Akrouh, Ahmad al-Mohammed, M al-Mahmod, Omar Ismail Mostefai, Sami Amimour, Foued Mohammed Aggad [fellow Paris attackers].233

-! Other: Samir Zarioh234 [A French national, Zarioh was arrested on 29 November 2015235 whilst trying to fly to Morocco. He is believed to be part of Hadfi’s group, and had tried to travel to Syria twice previously];236 Pierre Ndjeka237 [Belgian national arrested on 29 November 2015 suspected of involvement in recruiting jihadists for Syria.238 Detained after a search on his Molenbeek home, he is also thought to be part of Hadfi’s group].239

AHMED AL-MOHAMED aka Ukasah al-Iraqi240

Role: Suicide bomber at the Stade de France during the Paris attacks.241

Bio: Al-Mohamed’s real identity is unknown.242 IS propaganda magazine, Dabiq, may have identified Mohamed as an Iraqi, under the alias Ukasah al-Iraqi.243

Foreign training/combat: Unknown.

Movements: It is believed that al-Mohamed entered Europe as an asylum seeker two months before the attack and his fingerprints matched those taken under the same name in Greece in October 2015. He was carrying a fake Syrian passport during the attack244 and the passport’s use in registration shows that al- Mohamed travelled through Leros, Greece on 3 October 2015, Serbia on 7 October, Croatia on 8 October and then Austria, finally ending up in Paris. The Greek authorities report that before arriving in Greece he had come from Turkey, arriving in a migrant boat. It is also reported that he travelled through Hungary. 245

Criminal history: Unknown.

Known to the authorities: Unknown.

Network and associates:

-! Paris attacks (November 2015): Abdelhamid Abaaoud, Salah Abdeslam, Brahim Abdeslam, Chakib Akrouh, Bilal Hadfi, M al-Mahmod, Omar Ismail Mostefai, Sami Amimour, Foued Mohammed Aggad [fellow Paris attackers].246

! ! 233 ‘Paris attacks: Who were the attackers?’, BBC News, 27 April 2016. 234 ‘La galaxie djihadiste’, Le Parisien, available at: http://atelier.leparisien.fr/galaxie-djihadiste/profil.php?id=P092, last visited: 9 August 2016. 235 ibid. 236 Samuel, H., ‘Belgian police hunt two 'armed and dangerous' new terror suspects over Paris attacks’, The Telegraph, 4 December 2016, available at: http://www.telegraph.co.uk/news/worldnews/europe/belgium/12034240/Belgian-police-hunt-two-armed-and-dangerous-new-terror-suspects-over-Paris-attacks.html, last visited: 9 August 2016. 237 ‘La galaxie djihadiste: Pierre Ndjeka’, Le Parisien, available at: http://atelier.leparisien.fr/galaxie-djihadiste/profil.php?id=P095, last visited: 9 August 2016. 238 ibid. 239 Samuel, H., ‘Belgian police hunt two 'armed and dangerous' new terror suspects over Paris attacks’, The Telegraph, 4 December 2016. 240 Paton, C., ‘Paris attacks: Islamic State's Dabiq magazine identifies two Stade de France suicide bombers as Iraqis’, International Business Times, 20 January 2016, available at: http://www.ibtimes.co.uk/paris-attacks-islamic-states-dabiq-magazine-identifies-two-stade-de-france-suicide-bombers-1538995, last visited: 9 August 2016. 241 Farmer, B. et al., ‘Who is Salah Abdeslam and who were the Paris terrorists? Everything we know about the Isil attackers’, The Telegraph, 18 March 2016. 242 ibid. 243 Paton, C., ‘Paris attacks: Islamic State's Dabiq magazine identifies two Stade de France suicide bombers as Iraqis’, International Business Times, 20 January 2016. 244 Farmer, B. et al., ‘Who is Salah Abdeslam and who were the Paris terrorists? Everything we know about the Isil attackers’, The Telegraph, 18 March 2016. 245 ibid. 246 ‘Paris attacks: Who were the attackers?’, BBC News, 27 April 2016.

! ! 24 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

M AL-MAHMOD aka Ali al-Iraqi247

Role: Suicide bomber at the Stade de France during the Paris attacks.248

Bio: Al-Mahmod’s real identity is unknown. IS propaganda magazine, Dabiq, may have identified Mahmod as an Iraqi under the alias Ali al-Iraqi.249

Foreign training/combat: Pictured in Syria.250

Movements: Al-Mahmod entered Leros, Greece, on 3 October 2015, with Ahmed al-Mohamed.251 Both men also bought ferry tickets to leave Leros.252

Criminal history: Unknown.

Known to the authorities: Unknown.

Network and associates:

-! Paris attacks (November 2015): Ahmed al-Mohamed [fellow Paris attacker and suicide bomber at the Stade de France; travelled from to Europe via Greece with Mohamed], Abdelhamid Abaaoud, Salah Abdeslam, Brahim Abdeslam, Chakib Akrouh, Bilal Hadfi, Omar Ismail Mostefai, Sami Amimour, Foued Mohammed Aggad [fellow Paris attackers].253

OMAR ISMAIL MOSTEFAI

Role: Gunman at the Bataclan concert hall during the Paris attacks.254

Bio: 29 years old and of Algerian ancestry, Mostefai was born in Courcourronnes, a suburb south of Paris, and grew up in the area’s Le Canal estate. He is believed to have moved south to Chartres in 2009-10, possibly taking a young daughter with him. Following this move, he appears to have come to the attention of French authorities over radicalisation concerns, though it is unclear what triggered these worries. He is reported to have attended the Generation 2000 Mosque in Luce and may have been radicalised by a Belgian-born radical Imam who also attended the mosque. He is then believed to have visited Syria, leaving in late 2013 and returning in 2014, where he was identified as being involved with a group of Salafists in Chartres.255

! ! 247 Paton, C., ‘Paris attacks: Islamic State's Dabiq magazine identifies two Stade de France suicide bombers as Iraqis’, International Business Times, 20 January 2016. 248 ‘Paris attacks: BBC names Stade de France bomber as M al-Mahmod’, BBC News, 22 November 2015, available at: http://www.bbc.co.uk/news/world-europe- 34896521, last visited: 9 August 2016. 249 Paton, C., ‘Paris attacks: Islamic State's Dabiq magazine identifies two Stade de France suicide bombers as Iraqis’, International Business Times, 20 January 2016. 250 ibid. 251 ‘Paris attacks: BBC names Stade de France bomber as M al-Mahmod’, BBC News, 22 November 2015. 252 ibid. 253 ‘Paris attacks: Who were the attackers?’, BBC News, 27 April 2016. 254 ‘Paris attacks: BBC names Stade de France bomber as M al-Mahmod’, BBC News, 22 November 2015. 255 Chrisafis, A., ‘Life of Paris attacker Omar Ismail Mostefai: from petty crime to radicalisation’, Guardian, 16 November 2015, available at: http://www.theguardian.com/world/2015/nov/15/paris-attacker-omar-ismail-mostefai; and ‘Profile: Omar Ismail Mostefai’, BBC News, 15 November 2015, available at: http://www.bbc.co.uk/news/world-europe-34827541. Both last visited: 9 August 2016.

! ! 25 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Foreign training/combat: Mostefai is believed to have travelled to Syria in late 2013 or early 2014, with reports suggesting he travelled via Turkey in October 2013 and returned to France early in 2014. It is unclear if he gained combat experience while in Syria.256

Movements: He appears to have travelled through Turkey to Syria around October 2013.257

Criminal history: A petty criminal described as a “delinquent” in his youth,258 Mostefai was arrested eight times between 2004 and 2010 but never jailed.259

Known to the authorities: Mostefai had come to the attention of the French authorities in 2010 as a radicalisation concern,260 and is reported to have been “the subject of a police “S” file for radicalisation”.261

Network and associates:

-! Paris attacks (November 2015): Ahmed al-Mohamed, Abdelhamid Abaaoud, Salah Abdeslam, Brahim Abdeslam, Chakib Akrouh, Bilal Hadfi, M al-Mahmod, Sami Amimour, Foued Mohammed Aggad [fellow Paris attackers].262

SAMI AMIMOUR aka Abu Qital al-Faransi,263 Abu Hajia264

Role: Gunman at the Bataclan concert hall during the Paris attacks.265

Bio: A 28-year-old French citizen, Amimour was born and lived in Drancy, in the north of Paris.266 He graduated from school with his baccalaureate and worked as a bus driver. By 2012, friends had noticed a change in his behaviour, and in October 2012 he was arrested over alleged plans to travel to Yemen.267 He disappeared in 2013 and several months later his father travelled to Raqqa, finding Amimour fighting with IS. Amimour refused to return and is reported to only have reappeared in Paris shortly before the attacks.268

Foreign training/combat: Amimour travelled to Syria sometime in September 2013. Once in Syria, where he fought for IS and was injured, he lived in Raqqa and married.269

Movements: Travelled to Syria in 2013.

! ! 256 Newton-Small, J., ‘Paris Attacker Is an Example of France’s Homegrown Terrorists’, Time, 15 November 2015, available at: http://time.com/4113864/paris- attacks-isis-homegrown-terrorism/, last visited: 9 August 2016; and ‘Profile: Omar Ismail Mostefai’, BBC News, 15 November 2015. 257 ‘Profile: Omar Ismail Mostefai’, BBC News, 15 November 2015. 258 Newton-Small, J., ‘Paris Attacker Is an Example of France’s Homegrown Terrorists’, Time, 15 November 2015. 259 ‘Profile: Omar Ismail Mostefai’, BBC News, 15 November 2015. 260 ibid. 261 Chrisafis, A., ‘Life of Paris attacker Omar Ismail Mostefai: from petty crime to radicalisation’, Guardian, 16 November 2015. 262 ‘Paris attacks: Who were the attackers?’, BBC News, 27 April 2016. 263 Sommers, J., ‘Islamic State Propaganda Video Features Paris Attackers Bilal Hadfi And Samy Amimour’, The Huffington Post, 25 January 2016. 264 Cole, B., ‘Father of Bataclan killer reveals how he travelled to Syria to try to convince him to return home but was rejected’, Daily Mail Online, 16 November 2015, available at: http://www.dailymail.co.uk/news/article-3320975/Father-Bataclan-killer-reveals-travelled-Syria-try-convince-return-home-rejected.html, last visited: 9 August 2016. 265 Farmer, B. et al., ‘Who is Salah Abdeslam and who were the Paris terrorists? Everything we know about the Isil attackers’, The Telegraph, 18 March 2016. 266 ibid. 267 ‘Paris attacks: Samy Amimour, the ‘nice guy’ who became a jihadi’, , 19 November 2015, available at: http://www.ft.com/cms/s/0/472cec90-8eb7- 11e5-8be4-3506bf20cc2b.html#axzz4C76D1Jfi, last visited: 9 August 2016. 268 Farmer, B. et al., ‘Who is Salah Abdeslam and who were the Paris terrorists? Everything we know about the Isil attackers’, The Telegraph, 18 March 2016. 269 ‘Paris attacks: Samy Amimour, the ‘nice guy’ who became a jihadi’, Financial Times, 19 November 2015.

! ! 26 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Criminal history: No known history of petty crime, but charged with “conspiracy to commit terrorism” after arrested in October 2012 before being released on bail.270

Known to the authorities: Following his arrest in October 2012, Amimour was added to “a watch list of potential terrorists” and “placed under judicial supervision” which required him to report to a police station once a week. An international arrest warrant was issued for him by French police when he went missing in 2013.271

Network and associates:

-! Paris attacks (November 2015): Abdelhamid Abaaoud, Salah Abdeslam, Brahim Abdeslam, Chakib Akrouh, Bilal Hadfi, M al-Mahmod, Omar Ismail Mostefai, Ahmed al-Mohamed, Foued Mohammed Aggad [fellow Paris attackers].272

FOUED MOHAMMED AGGAD

Role: Gunman at the Bataclan concert hall during the Paris attacks.273

Bio: A French-born 23-year-old274 from Wissembourg near Strasbourg, Aggad was the son of Moroccan immigrants. He is not reported to have held down a job, and was known to the police as a petty criminal.275 Le Parisien has connected him to a group of young men who travelled to Syria from Strasbourg in 2013, and he is believed to have fought there before returning to France to carry out the Paris attacks.276

Foreign training/combat: Aggad fought in Syria with his brother,277 having travelled to Raqqa with a group of friends via Aleppo in 2013. Two of the group died in March 2014 and the rest returned to France and were arrested278 while Aggad stayed on in Syria.279

Movement: Travelled to Syria in 2013. It is unclear how he returned to France.

Criminal history: Known to police as a petty criminal before traveling to Syria, but no known convictions.

Known to the authorities: Allegedly “subject to an Interpol arrest warrant” after the arrest of his fellow travellers during 2014.280

! ! 270 Henn, P, ‘Paris killer taught to shoot by French police’, Express, 1 December 2015, available at: http://www.express.co.uk/news/world/623384/Sami-Amimour- Paris-Bataclan-police, last visited: 9 August 2016. 271 Farmer, B. et al., ‘Who is Salah Abdeslam and who were the Paris terrorists? Everything we know about the Isil attackers’, The Telegraph, 18 March 2016; and ‘Paris attacks: Samy Amimour, the ‘nice guy’ who became a jihadi’, Financial Times, 19 November 2015. 272 ‘Paris attacks: Who were the attackers?’, BBC News, 27 April 2016. 273 Watkinson, W., ‘Foued Mohamed-Aggad: Isis sent Bataclan terrorist's mother 'martyr text message' after Paris attacks’, International Business Times, 9 December 2015, available at: http://www.ibtimes.co.uk/foued-mohamed-aggad-isis-sent-bataclan-terrorist-martyr-text-message-after-paris-attacks-1532632, last visited: 9 August 2016. 274 ‘Paris attacks profile: Foued Mohamed-Aggad’, BBC News, 9 December 2015, available at: http://www.bbc.co.uk/news/world-europe-35053613, last visited: 9 August 2016. 275 ‘Who was third Bataclan attacker Foued Mohamed-Aggad?’, BBC News, 9 December 2015, available at: http://www.bbc.co.uk/news/world-europe-35055304, last visited: 9 August 2016. 276 ‘La filière de Strasbourg’, Le Parisien, available at: http://atelier.leparisien.fr/galaxie-djihadiste/profil/la-filiere-de-strasbourg/F04, last visited: 9 August 2016. 277 ‘Paris attacks profile: Foued Mohamed-Aggad’, BBC News, 9 December 2015. 278 ‘Who was third Bataclan attacker Foued Mohamed-Aggad?’, BBC News, 9 December 2015. 279 ‘Third Paris Bataclan attacker identified as Foued Mohamed Aggad’, The Sydney Morning Herald, 9 December 2015, available at: http://www.smh.com.au/world/third-paris-bataclan-attacker-identified-as-foued-mohamed-aggad-20151209-gljqw2.html, last visited: 9 August 2016. 280 ‘Who was third Bataclan attacker Foued Mohamed-Aggad?’, BBC News, 9 December 2015.

! ! 27 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Network and associates:

-! Paris attacks (November 2015): Abdelhamid Abaaoud, Salah Abdeslam, Brahim Abdeslam, Chakib Akrouh, Bilal Hadfi, M al-Mahmod, Omar Ismail Mostefai, Ahmed al-Mohamed, Sami Amimour [fellow Paris attackers].281

-! Other: Mourad Fares [Arrested in Turkey in 2014, Fares is believed to have recruited Aggad and his fellow travellers to Syria];282 Karim Mohammed Aggad [Brother and fellow IS militant arrested along with the remaining jihadists with whom Aggad travelled to Syria].283

1.4 Paris: Accomplices

SALAH ABDESLAM

Role: Abdeslam played a logistical role in the Paris attacks284 and claims to have failed to carry out a suicide bombing at the Stade de France. Accused of “terrorist murder” and is believed to have been planning a shooting attack with Soufiane Ayari and Mohamed Belkaid to accompany the Brussels attacks.285

Bio: A Belgian-born French national of Moroccan descent, Abdeslam was born in Brussels on 15 September 1989 and grew up in the Molenbeek area of the city.286 Involved in petty crime including drug trafficking in his teens, he worked as a transport technician for the state-owned Belgian railway firm Société des Transports Intercommunaux de Bruxelles (STIB) from 2009 to 2011 before being fired. During this time he was also “jailed briefly for burglary” alongside childhood friend Abdelhamid Abaaoud.287 By 2013, he was running a bar with his brother, Brahim, as well as a grocery store. The bar was later shut down in connection with drug offences in 2015, and Salah Abdeslam was fined for possession of cannabis in the Netherlands in February of that year.288

By 2015, it also appears that he was becoming more closely involved with extremists, and was placed on a police list for links to IS fighters in Syria along with his brother.289 In the months leading up to the Paris attacks, he began to travel across Europe to pick up fighters returning from Syria as they gathered for the attacks, including Najim Laachraoui, believed to be the bomb-maker.290 He travelled between Brussels and Paris several times in September and October, buying detonators, and booked apartments and hotel rooms for the attackers.291

! ! 281 ibid. 282 ‘Who was third Bataclan attacker Foued Mohamed-Aggad?’, BBC News, 9 December 2015; and Willsher, K, ‘Paris attacks: police identify third Bataclan assailant’, Guardian, 9 December 2016, available at: https://www.theguardian.com/world/2015/dec/09/paris-attacks-third-bataclan-attacker-identified-by-police, last visited: 9 August 2016. 283 ‘Who was third Bataclan attacker Foued Mohamed-Aggad?’, BBC News, 9 December 2015. 284 Payne, E., ‘Salah Abdeslam claims a minor role in Paris terror attacks’, CNN, 26 March 2016, available at: http://edition.cnn.com/2016/03/26/europe/paris- terror-attacks-salah-abdeslam/, last visited: 9 August 2016. 285 ‘Suspects linked to the Paris, Brussels attacks’, Reuters, 8 April 2016, available at: http://www.reuters.com/article/us-belgium-blast-people-factbox- idUSKCN0X5208, last visited: 9 August 2016. 286 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016; Farmer, B. et al., ‘Who is Salah Abdeslam and who were the Paris terrorists? Everything we know about the Isil attackers’, The Telegraph, 18 March 2016; and Chrisafis, A., ‘Paris attacks: suspect's fingerprint found in Belgian raid apartment’, Guardian, 18 March 2016, available at: https://www.theguardian.com/world/2016/mar/18/paris-attackers-dna-found-in-belgian-raid-apartment last visited: 9 August 2016. 287 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 288 Chrisafis, A., ‘Paris attacks: suspect's fingerprint found in Belgian raid apartment’, Guardian, 18 March 2016. 289 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 290 Whitehead, T. and Colin Freeman, ‘Brussels explosions: The Isil terror cell that spread across Europe’, The Telegraph, 22 March 2016; and ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 291 Brisard, J., ‘THE PARIS ATTACKS AND THE EVOLVING ISLAMIC STATE THREAT TO FRANCE’, Combating Terrorism Center at West Point, 14 December 2015.

! ! 28 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

On the day of the attack, he played a major role and drove a team of suicide bombers to the Stade de France. However, he failed to carry out his own attack, disposed of his suicide belt, and called friends to drive him back to Brussels.292 This fits with the recording claiming IS’s responsibility which features the voice of Fabien Clain, and mentions an attack on the 18th arrondissement. No such attack took place, but Salah Abdeslam’s car was found abandoned in the spot where Clain appears to have expected an attack to take place.293 Abdeslam appears to have spent the months between the Paris attacks and his arrest on 18 March 2016 hiding in and around Brussels, including in a flat in Forest raided by police.294

Foreign training/combat: Unknown.

Movements: A former Slovak Interior Ministry official claimed Abdeslam spent three weeks in Nitra, Slovakia in the summer of 2015.295 Abdeslam travelled by boat from to the Greek port of Patras in August 2015 alongside Ahmed Dahmani, later arrested in Turkey;296 He visited Keleti railway station in Budapest in mid-September 2015, leaving with two men who had been travelling as a refugee.297 He was stopped by police on the border between Hungary and Austria in the same month with Mohamed Belkaid and Najim Laachraoui;298 He then visited three men in a refugee shelter in Ulm, Germany in October 2015, and was stopped by police alongside Soufiane Ayari and Osama Krayem;299 Paris (November 2015); Brussels.300

Criminal history: Abdeslam was jailed for burglary in 2010.301 His bar was shut down in 2015302 in connection with drug-related activity,303 and he was involved with drug trafficking in his teens. Fined for possession of cannabis in the Netherlands in February 2015.304

Known to the authorities: Belgian authorities questioned Abdeslam in February 2015305 and he was placed on a police list for links to IS fighters in Syria early that year.306 It has been reported that Belgian authorities dropped an investigation into both Abdeslam brothers six months before the Paris attacks.307

Networks and associates:

-! Brussels attacks (March 2016): Najim Laachraoui [Laachraoui was stopped in September 2015 at the Hungary-Austria border in a car driven by Abdeslam;308 Laachraoui’s DNA was also found

! ! 292 ‘How are the Brussels attackers linked to Paris?’, France 24, 21 April 2016. 293 Robinson, M., ‘Revealed: French voice behind chilling ISIS Paris massacres message is also a homegrown terrorist behind other attacks in his own country’ Daily Mail Online, 18 November 2015, available at: http://www.dailymail.co.uk/news/article-3323851/French-voice-chilling-ISIS-Paris-massacres-message-homegrown- terrorist-attacks-country.html, last visited: 9 August 2016. 294 ‘How are the Brussels attackers linked to Paris?’, France 24, 21 April 2016. 295 Cunningham, B., ‘Salah Abdeslam spent three weeks in Slovakia’, Politico, April 7 2016, available at: http://www.politico.eu/article/slovak-officials-confirm-terror- suspect-was-in-the-country-last-year-salah-abdeslam-isil-terror-attacks-paris-brussels/, last visited: 9 August 2016. 296 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 297 ‘Paris attacks suspect was at Budapest railway station, Hungarian government claims’, Guardian, 3 December 2016, available at: http://www.theguardian.com/world/2015/dec/03/paris-attacks-suspect-salah-abdeslam-budapest-keleti-railway-station, last visited: 9 August 2016. 298 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016; and ‘How are the Brussels attackers linked to Paris?’ France 24, 21 April 2016. 299 Whitehead, T. and Colin Freeman, ‘Brussels explosions: The Isil terror cell that spread across Europe’, The Telegraph, 22 March 2016; and ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 300 Chrisafis, A., ‘Paris attacks suspect Salah Abdeslam shot and arrested in Brussels’, Guardian, 18 March 2016, available at: http://www.theguardian.com/world/2016/mar/18/paris-attacks-suspect-salah-abdeslam-wounded-in-brussels-terror-raid-reports, last visited: 9 August 2016. 301 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 302 ibid. 303 Faiola, A. and Souad Mekhennet, ‘The Islamic State creates a new type of jihadist: Part terrorist, part gangster’, The Washington Post, 20 December 2015. 304 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 305 ‘How are the Brussels attackers linked to Paris?’, France 24, 21 April 2016. 306 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 307 ‘Salah Abdeslam 'seen by Belgian police posing with Isil flag' three weeks before Paris attacks’, The Telegraph, 17 May 2016, available at: http://www.telegraph.co.uk/news/2016/05/17/salah-abdeslam-seen-by-belgian-police-posing-with-isil-flag-thre/, last visited: 9 August 2016. 308 ‘Najim Laachraoui, 24, Bomb Maker for Paris and Brussels Attacks’, International New York Times, 25 March 2016.

! ! 29 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

in a house in Schaerbeek309 where police also found a fingerprint belonging to Abdeslam];310 Osama Krayem [Krayem was in a car with Abdeslam stopped in Ulm, Germany in October 2015];311 Mohammed Abrini [Believed to have rented an apartment with Salah Abdeslam in Paris which was used by the attackers;312 Caught on CCTV with Salah Abdeslam on 11 November 2015;313Abrini was also a regular at a bar run by Salah and Brahim Abdeslam until it was shut down for its connections to drug dealing].314

-! Paris attacks (November 2015): Brahim Abdeslam [brother]; Abdelhamid Abaaoud, Chakib Akrouh, Bilal Hadfi, Ahmad al-Mohammed, M al-Mahmod; Omar Ismail Mostefai, Sami Amimour, Foued Mohammed Aggad [fellow Paris attackers];315 Ahmed Dahmani [Abdeslam travelled alongside Dahmani in August 2015.316 Dahmani, having travelled from Amsterdam days earlier, was arrested in November in Turkey in relation to the Paris attacks, suspected of having scouted out target locations].317

-! Other: Soufiane Ayari318 [Gave the name Monir Ahmed Alaaj when stopped alongside Abdeslam in Ulm in October 2015.319 Ayari was with Abdeslam when he escaped from a flat in Forest raided by the police on 15 March320 and arrested alongside Abdeslam and gave another false name – Amine Choukri];321 Mohammed Belkaid [Abdeslam travelled twice to Budapest, Hungary, in September 2015 and one of his passengers when stopped at the Austrian border was Belkaid.322 Belkaid was killed as he covered Abdeslam’s escape during a police raid on 15 March 2016.323 Ayari, Belkaid and Abdeslam are believed to have been planning a shooting attack to accompany the Brussels attacks].324 Mohamed Amri, Hamza Attou [Amri and Attou were charged in November 2015 for participation in terrorist activity,325 after they were seen and videoed driving Abdeslam from France to Belgium after the attacks];326 Ali Oulkadi and Lazez Abraimi, [Accused of driving Abdeslam around Brussels after the Paris attacks327 and handguns were discovered in Lazez’s car];328 Abid Aberkan [Abdeslam was eventually arrested alongside Aberkan at Aberkan’s mother’s address.329 Aberkan is the nephew of Fatima Aberkan, described the “mother” of the Zerkani Network].330

! ! 309 Cendrowicz, L., ‘Najim Laachraoui: Belgian police launch manhunt for suspect who could have made suicide belts for Paris attacks’, Independent, 21 March 2016. 310 ‘Paris attacks hideouts found in Belgium’, BBC News, 13 January 2016. 311 ‘How are the Brussels attackers linked to Paris?’, France 24, 21 April 2016. 312 ‘Brussels suspect: Check-in area for Tel Aviv flight was targeted’, The Times of Israel, 14 April 2016. 313 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015. 314 Bartunek, R. and Alastair Macdonald, ‘Belgians seize key suspects in Paris, Brussels attacks’, Reuters, 9 April 2016. 315 ‘Paris attacks: Who were the attackers?’, BBC News, 27 April 2016. 316 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 317 ‘21 arrested and one charged in Belgian raids, Salah Abdeslam at large’, France 24, 23 November 2015, available at: http://www.france24.com/en/20151122- brussels-lockdown-second-day-attack-fears-paris-belgium-terrorism-islamic-state-group, last visited: 9 August 2016. 318 ‘At least 8 suspects are at large with links to attacks in Brussels, Paris’, CNN, 28 March 2016. 319 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 320 Verberght, M. et al., ‘Salah Abdeslam, Paris Attacks Suspect, Captured in Belgian Raid’, The Wall Street Journal, 18 March 2016. 321 Whitehead, T. and Colin Freeman, ‘Brussels explosions: The Isil terror cell that spread across Europe’, The Telegraph, 22 March 2016; ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 322 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016; and ‘How are the Brussels attackers linked to Paris?’ France 24, 21 April 2016. 323 Verberght, M. et al., ‘Salah Abdeslam, Paris Attacks Suspect, Captured in Belgian Raid’, The Wall Street Journal, 18 March 2016. 324 ‘Suspects linked to the Paris, Brussels attacks’, Reuters, 8 April 2016. 325 Vinograd, C. et al., ‘Paris Attacks: Salah Abdeslam's Alleged Getaway Drivers Charged’, NBC News, 17 November 2015, available at: http://www.nbcnews.com/storyline/paris-terror-attacks/paris-attacks-salah-abdeslams-alleged-getaway-drivers-charged-n464666, last visited: 9 August 2016. 326 Mindock, C., ‘Who Is Hamza Attou, Mohammed Amri? Everything We Know About The Alleged Paris Terrorist Getaway Drivers’, International Business Times, 17 November 2015, available at: http://www.ibtimes.com/who-hamza-attou-mohammed-amri-everything-we-know-about-alleged-paris-terrorist-2188100, last visited: 9 August 2016. 327 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015. 328 ibid. 329 ‘Brussels attacks: Have blunders hampered Belgian investigation?’, BBC News, 15 April 2016. 330Gartenstein-Ross, D, and Nathaniel Barr, ‘Recent Attacks Illuminate Islamic State’s Europe Attack Network’, The Jamestown Foundation, 27 April 2016.

! ! 30 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

MOHAMED BELKAID aka Samir Bouzid331

Role: Believed to have been one of the co-ordinators of the Paris attacks and to have been in telephone contact with the Paris attackers on the night of the attacks.332 Believed to have been planning a shooting attack with Soufiane Ayari and Salah Abdeslam to accompany the Brussels attacks.333

Bio: A 35-year-old Algerian,334 Belkaid appears to have been unknown to the authorities as an extremism risk and told IS recruiters in 2014 he had no experience as a jihadist and that his former occupation was as a confectioner.335 He was shot and killed by Belgian police on 15 March during the raid on the apartment in Rue de Dries, Forest, which led to the later arrest of Salah Abdeslam on 18 March.336

Foreign training/combat: Travelled to Syria in April 2014.

Movements: Belkaid claimed to have travelled throughout Europe, including to Spain, Germany and France, and “listed his residence as Sweden”.337 He used a fake Belgian ID under the name Samir Bouzid.338 Belkaid travelled with Salah Abdeslam to pick up Najim Laachraoui, who was travelling back from Syria, from Hungary.339

Criminal history: Reported to be known to Belgian police in relation to a theft case in 2014.340

Known to the authorities: Following the Paris attacks was known to investigators only as Samir Bouzid.341

Networks and Associates:

-! Brussels attacks (March 2016): Khalid el-Bakraoui [El-Bakraoui rented the apartment in Forest in which Belkaid was killed];342 Najim Laachraoui [Belkaid travelled with Abdeslam to pick up Laachraoui in Hungary in September 2015];343

-! Paris attacks (November 2015): Salah Abdeslam [killed in the raid that led to Abdeslam’s arrest, Belkaid also travelled to Hungary with Abdeslam]; Believed to have been one of the coordinators of the attacks.344

-! Other: Hasna Aitboulahcen [the two were in contact by telephone and he wired money to her;345 Belkaid’s fake ID was used to transfer money to the bank account of Hasna, Abaaoud’s cousin];346 Soufiane Ayari [Ayari escaped from the apartment in Forest during the police raid in which

! ! 331 ‘Belkaïd, alias Samir Bouzid, lié aux attentats de Paris et tué à Forest’, Le Parisien, 18 March 2016, available at: http://www.leparisien.fr/faits-divers/belkaid-alias- samir-bouzid-lie-aux-attentats-de-paris-et-tue-a-forest-18-03-2016-5638775.php, last visited: 9 August 2016. 332 ‘How are the Brussels attackers linked to Paris?’, France 24, 21 April 2016. 333 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015. 334 ‘La galaxie djihadiste: Les protaganistes’, Le Parisien, available at: http://atelier.leparisien.fr/galaxie-djihadiste/profil.php?id=P066; Olidort, J., ‘Flipping the Script on ISIS’, The Washington Institute, 18 April 2016, available at: http://www.washingtoninstitute.org/policy-analysis/view/flipping-the-script-on-isis. Both last visited: 9 August 2016. 335 ‘Dead Brussels gunman wanted to be ISIS suicide bomber’, , 19 March 2016, available at: http://nypost.com/2016/03/19/dead-brussels-gunman- wanted-to-be-isis-suicide-bomber/, last visited: 9 August 2016. 336 ‘How are the Brussels attackers linked to Paris?’, France 24, 21 April 2016. 337 ‘Dead Brussels gunman wanted to be ISIS suicide bomber’, New York Post, 19 March 2016. 338 ‘Mohamed Belkaid, Brussels Gunman, Sought Islamic State Suicide Mission’, The Huffington Post, 19 March 2016, available at: http://www.huffingtonpost.ca/2016/03/19/mohamed-belkaid-islamic-state_n_9505626.html, last visited: 9 August 2016. 339 ‘How are the Brussels attackers linked to Paris?’, France 24, 21 April 2016. 340 Chrisafis, A., ‘Two suspects still on run after Brussels anti-terror raid that killed one’, Guardian, 16 March 2016. 341 ‘How are the Brussels attackers linked to Paris?’, France 24, 21 April 2016. 342 ‘Brussels suicide bombers identified as police hunt suspect caught on CCTV’, Guardian, 23 March 2016. 343 ‘How are the Brussels attackers linked to Paris?’, France 24, 21 April 2016. 344 ibid. 345 ibid. 346 ‘Dead Brussels gunman wanted to be ISIS suicide bomber’, New York Post, 19 March 2016.

! ! 31 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Belkaid was killed.347 Ayari, Belkaid and Abdeslam are believed to have been planning a shooting attack to accompany the Brussels attacks].348

HASNA AITBOULAHCEN: 26-year-old Aitboulahcen died alongside her cousin Abdelhamid Abaaoud and Chakib Akrouh during the raid in Saint Denis.349 She was also in contact with Mohammed Belkaid – the two had been in contact by telephone350 and he had wired money to her account using a fake ID.351 She also allegedly had contact with a man identified as Abdoullah C after the Paris attacks.352 Aitboulahcen was also under surveillance in a narcotics operation.353

MOHAMED AMRI and HAMZA ATTOU: Amri and Attou were charged in November 2015 for participation in terrorist activity,354 after they were seen and videoed driving Abdeslam from France to Belgium after the attacks.355 Attou was extradited to France on 29 June 2016.356

LAZEZ ABRAIMI: A 39-year-old Moroccan from Brussels,357 Lazez allegedly drove Salah Abdeslam across Brussels after the Paris attacks.358 Two handguns were discovered in his car, though he claims these were part of a business deal.359 Lazez is the brother of Noureddine Abraimi.360

ALI OULKADI: A 31-year-old French national based in Molenbeek who admits to driving Abdeslam around Brussels on 14 November 2015.361

DJAMAL EDDINE OUALI: Italian police arrested the 40-year-old Algerian in Salerno in connection with the supplying of fake documents to the Brussels and Paris attackers. Specifically, he provided the fake ID for Najim Laachraoui. He is suspected of being part of a criminal network providing fake IDs for illegal immigration.362

AHMED DAHMANI: 26-year-old Dahmani, a Belgian of Moroccan descent, was arrested in Turkey suspected of having scouted out target locations for the Paris attack. He was arrested in a hotel in Antalya, Turkey having travelled from Amsterdam on 14 November 2015.363 He had previously travelled with Salah Abdeslam in August 2015 from Italy to the Greek port of Patras by boat.364

! ! 347 Verberght, M. et al., ‘Salah Abdeslam, Paris Attacks Suspect, Captured in Belgian Raid’, The Wall Street Journal, 18 March 2016. 348 ‘Suspects linked to the Paris, Brussels attacks’, Reuters, 8 April 2016. 349 Allen, P., ‘Female jihadi in Paris attacks died of 'asphyxiation', say prosecutors - as her family sue French police claiming she was murdered by police’, Daily Mail Online, 21 January 2016; and Fenwick, J, ‘Paris suicide bomber who killed Diesel the dog FINALLY named by police’, Express, 15 January 2016. 350 ‘How are the Brussels attackers linked to Paris?’, France 24, 21 April 2016. 351 ‘How are the Brussels attackers linked to Paris?’, France 24, 21 April 2016. 352 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015. 353 ‘Is Europe still at threat from Paris-Brussels terror 'supercell'?’, France 24, 11 April 2016. 354 Vinograd, C. et al., ‘Paris Attacks: Salah Abdeslam's Alleged Getaway Drivers Charged’, NBC News, 17 November 2015. 355 Mindock, C, ‘Who Is Hamza Attou, Mohammed Amri? Everything We Know About The Alleged Paris Terrorist Getaway Drivers’, International Business Times, 17 November 2015. 356 ‘Belgium transfers man who picked up Salah Abdeslam after Paris attacks’, Politico, 30 June 2016, available at: http://www.politico.eu/article/hamza-attou- belgium-transfers-man-who-picked-up-salah-abdeslam-after-paris-attacks/, last visited: 9 August 2016. 357 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015. 358 ibid. 359 ibid. 360 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 361 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015, and ‘France puts two men under investigation over Paris attacks’, The Guardian, 6 July 2016, available at: https://www.theguardian.com/world/2016/jul/06/france-puts-two-men-under-investigation-over-paris-attacks, last visited: 24 August 2016. 362 ‘Arrested at gunpoint: Armed Italian police swoop on Algerian linked to Paris and Brussels terror attacks’, Daily Mail Online, 27 March 2016, available at: http://www.dailymail.co.uk/news/article-3511323/Moment-armed-Italian-police-arrest-Algerian-man-wanted-Belgium-fake-ID-documents-used-Paris- Brussels-terrorists.html, and Ganley, E., ‘Bogus identities with fake IDs vital for terror networks’, Associated Press, 6 April 2016, last visited: 24 August 2016. 363 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015. 364 Whitehead, T. and Colin Freeman, ‘Brussels explosions: The Isil terror cell that spread across Europe’, The Telegraph, 22 March 2016; and ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016.

! ! 32 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

MOHAMMED BAKKALI: Bakkali was arrested on 26 November 2015 in connection with the Paris attacks and accused of playing a leading role in planning the attack. He has a history of petty crime365 and lived in Auvelais, renting a car which was used to travel to safe houses in Auvelais, Charleroi and Schaerbeek.366 His extradition to France was approved on 9 June 2016 over claims he rented the apartment in which the suicide vests used in the Paris attacks were made.367

Bakkali is also reported to have been a key suspect in an alleged “dirty bomb plot”, with police raids finding ten hours of footage in Bakkali’s wife’s flat from a hidden camera targeting the house of an executive from the Centre for the Study of Nuclear Energy who had access to radioactive isotopes.368

! ! 365 Cruickshank, P., ‘Paris attacks: Directives came from operatives in Brussels, investigators say’, CNN, 7 January 2016, available at: http://edition.cnn.com/2016/01/07/europe/paris-attacks-brussels-operatives/, last visited: 9 August 2016. 366 Wolgelenter, M., ‘ISIS Militant Returned to Belgium Before Paris Attacks’, The New York Times, 13 January 2016, available at: http://www.nytimes.com/2016/01/14/world/europe/belgium-paris-attacks-safe-houses.html, last visited: 9 August 2016. 367 ‘Paris attacks: Belgian judge approves extradition of terror suspects Mohamed Abrini and Mohamed Bakkali to France’, The Independent, 9 June 2016. 368 Holehouse, M., ‘All Belgian residents issued with iodine tablets to protect against radiation’, The Telegraph, 28 April 2016. ! ! 33 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

1.5 Zerkani Network

KHALID ZERKANI

Role: Zerkani ran a recruitment network in the Brussels area, using petty crime to fund the recruitment of fighters for IS.369 He put potential jihadist fighters in contact with Turkish smugglers who would help them reach Syria.370

Bio: Born in Zenata, Morocco, the 42-year-old Zerkani gained Belgian residency in 2002 after periods spent living in Spain and the Netherlands.371 Operating from mosques in Molenbeek, he ran a network aiming to radicalise and recruit young men to fight in Syria.372 Unemployed since at least 2010 and possibly earlier, he financed his recruitment efforts with the proceeds of petty theft of phones, cars, laptops and cash.373 In 2012, Belgian police began an investigation into his network and arrests began in 2014.374 Arrested in February 2014,375 Zerkani was found to be carrying a large quantity of money in multiple currencies.376 He was jailed for 12 years in July 2015, and this was extended to 15 years in April 2016 by an appeal court.377 Zerkani was due to be tried again in May 2016 in connection with a second group of recruits sent to Syria, including Brussels attacker Najim Laachraoui,378 but the trial has since been postponed until 5 September 2016.379

Foreign training/combat: Zerkani has been described as a veteran of Afghan jihad.380

Movements: Unknown.

Criminal history: Convicted for recruiting young men to travel to Syria and jailed for 12 years in July 2015. This was extended to 15 years in April 2016 by an appeal court.381 Belgian authorities have also stated he was involved in petty crime including shoplifting before becoming involved in recruitment.382

Known to the authorities: Under investigation since 2012, Zerkani has been in prison since his arrest in February 2014.383

Networks and associates:

-! Brussels attacks (March 2016): Najim Laachraoui [Described as an “associate” of Zerkani and was due to go on trial in absentia alongside Zerkani in May 2016].384

! ! 369 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016. 370 ‘Brussels jihadists: Belgian recruiter Zerkani given longer term’, BBC News, 14 April 2016. 371 Higgins, A. and Kimiko De Freytas-Tamura, ‘A Brussels Mentor Who Taught ‘Gangster ’ to the Young and Angry’, The New York Times, 11 April 2016, available at: http://www.nytimes.com/2016/04/12/world/europe/a-brussels-mentor-who-taught-gangster-islam-to-the-young-and-angry.html?_r=0, last visited: 9 August 2016. 372 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016. 373 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 374 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016. 375 Graham, C. et al., ‘Sources say Ibrahim el-Bakraoui was on US counterterrorism watch list before Paris attacks- live’ Daily Telegraph, 26 March 2016. 376 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 377 ‘Brussels jihadists: Belgian recruiter Zerkani given longer term’, BBC News, 14 April 2016. 378 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 379 ‘Le second procès de Khalid Zerkani pour terrorisme reporté au 5 septembre’, Medias de Bruxelles, 18 May 2016, available at: http://bx1.be/news/le-second- proces-de-khalid-zerkani-pour-terrorisme-reporte-au-5-septembre/, last visited: 9 August 2016. 380 ‘At least 8 suspects are at large with links to attacks in Brussels, Paris’, CNN, 28 March 2016. 381 ‘Brussels jihadists: Belgian recruiter Zerkani given longer term’, BBC News, 14 April 2016. 382 Higgins, A. and Kimiko De Freytas-Tamura, ‘A Brussels Mentor Who Taught ‘Gangster Islam’ to the Young and Angry’, The New York Times, 11 April 2016. 383 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 384 ‘Belgian court sentences jihadist recruiter to 15 years in prison’, France 24, 14 April 2016.

! ! 34 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

-! Paris attacks (November 2015): Abdelhamid Abaaoud [Abaaoud was given a 20 year sentence in absentia in connection with his involvement with Zerkani’s network],385 Chakib Akrouh [became associated with the extremist network related to Khalid Zerkani before travelling to Syria].386

-! Zerkani network: Fatima Aberkan [Convicted in July 2015 of involvement in Zerkani’s recruitment network];387 Soufiane Alilou [22-year-old Zerkani network recruit who travelled to and from Syria five times before getting caught];388 Abderrahmane Ameroud [Described as “linked” to the Zerkani network, though the nature of the link is unclear];389 Gelel Attar [Attar was given a five year sentence arising from the same investigation into the Zerkani network, and was arrested in Morocco in January 2016];390 Youssef Bouyabarem [An alleged Zerkani recruit who tried and failed to join both al-Shabaab and IS];391 Reda Kriket [convicted in absentia in July 2015 as part of the Zerkani network];392 Yassine Lachriri [Sentenced in July 2015 in Brussels to 20 years393 and recruited by Zerkani];394 Yoni Mayne [Attended Zerkani’s meetings and became more radical in the process before travelling to Syria];395 Ilias Mohammadi [An alleged member of the Zerkani network who returned from Syria to Belgium using false ID and was arrested with “a significant amount of ammunition”;396 Sami Zarrouk [An IS fighter who attended Zerkani’s meetings and was convicted in absentia alongside Zerkani in July 2015].397

-! Other: Mohammed Khemir [A Sharia4Belgium member described as lieutenant to Jean-Louis Denis, a leading member of Sharia4Belgium.398 Khemir travelled with Zerkani to take a French recruit travelling to Syria to the airport in Brussels]; Jean-Louis Denis [A leading member of Sharia4Belgium, he attended the same meetings with Zerkani which included Khemir].399

FATIMA ABERKAN

Role: Member of the Zerkani network involved in the recruitment and logistics of sending young men to fight for jihadist groups overseas.400

Bio: A 55-year-old who has been connected to extremist groups since at least 2007, Aberkan appears to have played a major role in recruiting young men to fight in Syria and has been dubbed the “mother of Brussels jihad”.401 She is believed to have travelled to Syria in 2013 and 2014, making a number of trips ! ! 385 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016. 386 Drozdiak, N. and Matthias Verbergt, ‘Paris-Attack Suspect Traveled to Syria in 2013’, The Wall Street Journal, 15 January 2016. 387 ‘‘Papa Noel’—the militant recruiter in Brussels who groomed young men for violence’, Los Angeles Times, 28 March 2016; and ‘Brussels jihadists: Belgian recruiter Zerkani given longer term’, BBC News, 14 April 2016. 388 Van Vlierden, G., ‘Belgium knew in 2012 already that Paris suspects were plotting attacks’, Emmejihad, 26 January 2016. Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016, available at: http://www.jamestown.org/single/?tx_ttnews%5Btt_news%5D=45305&tx_ttnews%5BbackPid%5D=381#.VyhrCo-cHVI; ‘France charges main suspect in foiled attack plot’, The Times of Israel, 31 March 2016; and Mortimer, C., ‘Reda Kriket: Main suspect charged in connection with foiled Paris attack plot’, Independent, 30 March 2016, available at: http://www.independent.co.uk/news/world/europe/reda-kriket-main-suspect-charged-in-connection-with-foiled-paris-attack-plot- a6959941.html. All last visited: 9 August 2016. 390 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016. 391 Van Vlierden, G., ‘Belgium knew in 2012 already that Paris suspects were plotting attacks’, Emmejihad, 26 January 2016. 392 ‘France charges main suspect in foiled attack plot’, The Times of Israel, 31 March 2016; and ‘Thwarted Paris plot linked to deadly Brussels ISIS cell’, CBS News, 25 March 2016. 393 ‘Un djihadiste belge échangé par la Turquie contre des otages de l’État islamique’, Le Soir, 10 March 2016 394 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 395 ibid. 396 Van Vlierden, G., ‘Belgium knew in 2012 already that Paris suspects were plotting attacks’, Emmejihad, 26 January 2016. 397 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 398 Sharia4Belgium, headed by Fouad Belkacem, are a Belgian Islamist group that have been prolific in their recruitment of fighters involved in the conflict in Syria and Iraq. It is estimated that 80 fighters are ‘clearly linked’ with Sharia4Belgian. Most of their recruitment is believed to have taken place between 2012 and 2014. Many of these recruits became incorporated into the brigade associated with Amr al-Absi (see Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016; see also profile ‘Amr al-Absi’). 399Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016 400ibid. 401 Van Vlierden, G., ‘PROFILE: PARIS ATTACK RINGLEADER ABDELHAMID ABAAOUD’, Combating Terrorism Center at West Point, 15 December 2015.

! ! 35 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW via Turkey, and taking two of her daughters to the country402 and sending four of her sons to fight there,403 one of whom was killed in action. Aberkan was arrested and tried alongside Khalid Zerkani for her role in the recruitment network, and was imprisoned in July 2015.404

Foreign training/combat: Unknown.

Movements: Aberkan travelled to Syria at least twice in 2013 and 2014. She is also believed to have stayed in Turkey facilitating travel and finances for those individuals recruited to fight in Syria.405

Criminal history: Convicted in July 2015 of involvement in Zerkani’s recruitment network and sentenced to eight years. This was increased to 15 years by an appeal court in April 2016.406

Known to the authorities: In 2007, Aberkan and her friend, Malika el-Aroud, were arrested on suspicion of involvement in a plot to free , a convicted al-Qaeda terrorist, from prison. Aberkan was released without charge. 407

Networks and associates:

-! Zerkani network: Abdelhouaid Aberkan [Brother. Convicted as a member of the Zerkani network in July 2015 and in 2003 for his role in the assassination of Ahmad Shah Massoud];408 Abid Aberkan [Nephew];409 Khalid Zerkani [Convicted alongside Zerkani];410 See Khalid Zerkani profile for full list of other network associates Aberkan may have associated with.

-! Other: Nizar Trabelsi [Aberkan provided Trabelsi with a mobile phone in prison and was suspected of involvement in a plot to free him];411 Malika el-Aroud [Aberkan was close friends with el-Aroud and arrested alongside her in the Trabelsi case.412 El-Aroud was convicted of recruiting fighters to send to Afghanistan in May 2010];413 Moez Garsallaoui [A high ranking al- Qaeda member and husband of Malika el-Aroud, Aberkan acted as a “go-between” for the couple];414 Soufiane Alilou [Son415 and 22-year-old Zerkani network recruit who travelled to and from Syria five times before getting caught].416

! ! 402 ‘‘Papa Noel’—the militant recruiter in Brussels who groomed young men for violence’, Los Angeles Times, 28 March 2016, available at: http://www.latimes.com/world/europe/la-fg-belgium-recruiter-20160328-story.html, last visited: 9 August 2016. 403 Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016. 404 ‘‘Papa Noel’—the militant recruiter in Brussels who groomed young men for violence’, Los Angeles Times, 28 March 2016. 405 Van Vlierden, G, ‘PROFILE: PARIS ATTACK RINGLEADER ABDELHAMID ABAAOUD’, Combating Terrorism Center at West Point, 15 December 2015. 406 ‘‘Papa Noel’—the militant recruiter in Brussels who groomed young men for violence’, Los Angeles Times, 28 March 2016; and ‘Brussels jihadists: Belgian recruiter Zerkani given longer term’, BBC News, 14 April 2016. 407 Van Vlierden, G., ‘PROFILE: PARIS ATTACK RINGLEADER ABDELHAMID ABAAOUD’, Combating Terrorism Center at West Point, 15 December 2015. 408 ‘Men jailed over Al Qaeda anti-NATO plot’, ABC News, 30 September 2003, available at: http://www.abc.net.au/news/2003-09-30/men-jailed-over-al-qaeda-anti- nato-plot/1486058, last visited: 9 August 2016, Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016; and ‘Country Reports on Terrorism 2004’, US State Department, April 2005, available at: https://www.state.gov/documents/organization/45321.pdf, last visited: 9 August 2016, p. 45. 409 Gartenstein-Ross, D. and Nathaniel Barr, ‘Recent Attacks Illuminate the Islamic State’s Europe Attack Network’, The Jamestown Foundation, 27 April 2016. 410 ‘‘Papa Noel’—the militant recruiter in Brussels who groomed young men for violence’, Los Angeles Times, 28 March 2016; and ‘Brussels jihadists: Belgian recruiter Zerkani given longer term’, BBC News, 14 April 2016. 411 Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016. 412 ibid. 413 ‘Brussels jihadists: Belgian recruiter Zerkani given longer term’, BBC News, 14 April 2016. 414 Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016. 415 Van Vlierden, G., ‘Profile: Paris Attack Ringleader Abdelhamid Abaaoud’, Combating Terrorism Center, 15 December 2015, available at: van Vlierden, G, ‘PROFILE: PARIS ATTACK RINGLEADER ABDELHAMID ABAAOUD’, Combating Terrorism Center at West Point, 15 December 2015. 416 Van Vlierden, G, ‘Belgium knew in 2012 already that Paris suspects were plotting attacks’, Emmejihad, 26 January 2016.

! ! 36 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

GELEL ATTAR aka Abou Ibrahim417

Role: Member of the Zerkani network.418

Bio: 26-year-old Attar has dual Belgian-Moroccan nationality419 and lived in Molenbeek.420 As early as 2012, he is believed to have hosted meetings in his apartment in Molenbeek’s Rue de Ribaucourt which discussed armed attacks on Western democracy.421 He then travelled to Syria, with Belgian prosecutors claiming he did so “with one of the suicide bombers of Saint Denis”.422 He was arrested near Mohammadia in Morocco in January 2016.423 He is believed to have been in “close contact” with the leadership of IS while in Syria.424

Foreign training/combat: Attar fought for both Jabhat al-Nusra and IS in Syria.425

Movements: Attar travelled from Belgium to Syria on 4 January 2013 and returned in May 2013. He then travelled to Morocco and returned to Syria.426 He is then believed to have left Syria via Turkey and travelled through Germany, Belgium and the Netherlands before being arrested in Morocco.427

Criminal history: Attar was convicted in absentia for involvement in terrorist activity in 2015 as part of the Zerkani network and sentenced to five years in prison.428

Known to the authorities: Allegedly known to the Belgian authorities for have hosted meetings discussing Islamism-inspired terrorism as early as April 2012.429

Networks and associates:

-! Paris attacks (November 2015): Abdelhamid Abaaoud, Chakib Akrouh [Attar travelled to Syria in 2013 with Akrouh and built a relationship with Abaaoud whilst in Syria].430

-! Zerkani network: Khalid Zerkani [Attar was given a five year sentence for his role in the Zerkani network431 and has been described as Zerkani’s lieutenant]; Ilias Mohammadi [An alleged member of the Zerkani network. Official documents state that he was close to Attar];432 See Khalid Zerkani profile for full list of other network associates Attar may have associated with.

! ! 417 Malm, S., ‘Pictured: Belgian terror suspect 'with direct links' to Paris attackers who trained with Bataclan mastermind in Syria is arrested in Morocco’, Daily Mail Online, 18 January 2016. 418 Dalton, M. and Matthias Verbergt, ‘Paris Terror Attackers’ Contact Arrested in Morocco’, The Wall Street Journal, 18 January 2016, available at: http://www.wsj.com/articles/paris-terror-attackers-contact-arrested-in-morocco-1453136276, last visited: 9 August 2016. 419 Malm, S., ‘Pictured: Belgian terror suspect 'with direct links' to Paris attackers who trained with Bataclan mastermind in Syria is arrested in Morocco’, Daily Mail Online, 18 January 2016. 420 ibid. 421 Van Vlierden, G., ‘Belgium knew in 2012 already that Paris suspects were plotting attacks’, Emmejihad, 26 January 2016. 422 ‘Paris terror attack suspect arrested in Morocco is named as Gelel Attar’, The Telegraph, 19 January 2016, available at: http://www.telegraph.co.uk/news/worldnews/africaandindianocean/morocco/12106083/Belgian-national-tied-to-Paris-terror-attacks-arrested-say-Moroccan- authorities.html, last visited: 9 August 2016. 423 Malm, S., ‘Pictured: Belgian terror suspect 'with direct links' to Paris attackers who trained with Bataclan mastermind in Syria is arrested in Morocco’, Daily Mail Online, 18 January 2016. 424 Dalton, M. and Verbergt, M, ‘Paris Terror Attackers’ Contact Arrested in Morocco’, The Wall Street Journal, 18 January 2016. 425 ‘Paris Attacks Suspect Arrested In Morocco’, , 18 January 2016, available at: http://news.sky.com/story/1625074/paris-attacks-suspect-arrested-in- morocco, last visited: 9 August 2016. 426 Malm, S., ‘Pictured: Belgian terror suspect 'with direct links' to Paris attackers who trained with Bataclan mastermind in Syria is arrested in Morocco’, Daily Mail Online, 18 January 2016. 427 Dalton, M. and Matthias Verbergt, ‘Paris Terror Attackers’ Contact Arrested in Morocco’, The Wall Street Journal, 18 January 2016. 428 ibid. 429 Van Vlierden, G., ‘Belgium knew in 2012 already that Paris suspects were plotting attacks’, Emmejihad, 26 January 2016. 430 Malm, S., ‘Pictured: Belgian terror suspect 'with direct links' to Paris attackers who trained with Bataclan mastermind in Syria is arrested in Morocco’, Daily Mail Online, 18 January 2016. 431 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016. 432 Van Vlierden, G., ‘Belgium knew in 2012 already that Paris suspects were plotting attacks’, Emmejihad, 26 January 2016.

! ! 37 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

SAMI ZARROUK aka Abu Hudayfa al-Tunisi 433

Role: Member of the Zerkani network434 and IS fighter.435

Bio: Tunisian-born436 Sami Zarrouk was born on 13 September 1983437 and lived in Molenbeek, Brussels, where he attended Khalid Zerkani’s meetings.438 According to leaked IS administrative documents he claims to have been in Belgium for four years and to have previously worked in media.439 He is reported to have tried to convince his wife to travel with him to Afghanistan to become a suicide bomber, and in July 2013 travelled to Syria.440 He is described by IS as having been dispatched to Homs.

Foreign training/combat: IS fighter.

Movements: Zarrouk told IS he had visited France.441 He travelled to join IS in Syria via Rome then Turkey. 442

Criminal history: Unknown.

Known to the authorities: He was convicted in absentia in July 2015 in relation to the Zerkani network. An international warrant for his arrest was issued by Belgian authorities in February 2015.443

Networks and associates:

-! Zerkani network: Khalid Zerkani [Zarrouk attended meetings led by Zerkani at Mosque Loqman and in Molenbeek apartments].444 See Khalid Zerkani profile for full list of other network associates Zarrouk may have associated with.

REDA KRIKET

Role: Kriket is the main suspect in a foiled Paris attack, charged with possessing and transporting arms and explosives and holding fake documents.445 Convicted in absentia as part of the Zerkani network and claimed to be one of the network’s financiers, allegedly providing €12,000 to help recruits join IS.446

Bio: Little is known about the background of 34-year-old French national Kriket. He appears to have had a history of petty crime, including theft, before travelling to Syria in 2014. In July 2015, he was sentenced to ten years in prison in absentia for recruiting people to fight in Syria.447 Kriket was arrested in Boulogne-

! ! 433 ‘ISIS-registration form’, Instagram, available at: https://www.instagram.com/p/BFUaytrPGyb/?taken-by=akhbaralaan, last visited: 9 August 2016. 434 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 435 ‘ISIS-registration form’, Instagram. 436 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 437 ‘ISIS-registration form’, Instagram. 438 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 439 ‘ISIS-registration form’, Instagram. 440 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 441 ‘ISIS-registration form’, Instagram. 442 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 443 ibid.! 444 ibid. 445 Mortimer, C., ‘Reda Kriket: Main suspect charged in connection with foiled Paris attack plot’, Independent, 30 March 2016. 446 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 447 ‘French attack plot: Reda Kriket 'had weapons cache'’, BBC News, 31 March 2016, available at: http://www.bbc.co.uk/news/world-europe-35932170, last visited: 9 August 2016; and Mortimer, C., ‘Reda Kriket: Main suspect charged in connection with foiled Paris attack plot’, Independent, 30 March 2016.

! ! 38 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Billancourt, near Paris, on 24 March 2016.448 When police raided his apartment in Argenteuil, Paris, they discovered TATP explosive, five assault rifles and seven handguns.449

Foreign training/combat: Kriket travelled to Syria in 2014 and 2015, though it is unclear if he saw combat.

Movements: Kriket “made several trips” to France, Belgium and the Netherlands, and spent time in Syria in 2014 and 2015.450

Criminal history: Kriket had “multiple convictions for robbery, possession of stolen goods and acts of violence.’ He was also convicted in absentia in July 2015 for his role in financing Khalid Zerkani’s recruitment network.451

Known to the authorities: Known to be involved in jihadist activity following his conviction in July 2015, an international arrest warrant had already been issued for Kriket in March 2015, several months before his conviction.452 Regarded as “extremely dangerous”, Kriket was placed on a “Most Wanted police list” in January 2016.453

Networks and associates:

-! Paris attacks (November 2015): Abdelhamid Abaaoud [Both men convicted in absentia for their role in the Zerkani network];454 Chakib Akrouh [Both men were part of the Zerkani network and travelled to Istanbul together in January 2013].455

-! Zerkani network: Khalid Zerkani [Kriket was convicted for his role in funding Zerkani’s network];456 Abderrahmane Ameroud [Charged with involvement with Kriket’s plot457 and described as “linked” to the Zerkani network, though the nature of the link is unclear];458 See Khalid Zerkani profile for full list of other network associates Kriket may have associated with.

-! Foiled Paris plot: Rabah Meniker [34-year-old Algerian charged with helping Kriket in the foiled Paris plot];459 Yassine Alami [33-year-old Belgian citizen charged in connection to the foiled Paris plot];460 461 Anis Bahri [32-year-old arrested in Rotterdam in connection with the foiled Paris plot. It is believed Bahri and Kriket travelled to together Syria in late 2014 to early 2015].462

! ! 448 ‘Man accused of plotting French terror tied to 2015 Paris attacks ringleader’, CNN, 25 March 2016, available at: http://edition.cnn.com/2016/03/24/europe/france-anti-terror-operation-arrest/index.html, last visited: 9 August 2016. 449 ‘French attack plot: Reda Kriket 'had weapons cache'’, BBC News, 31 March 2016. 450 ibid. 451 Breeden, A., ‘Investigators Pursue Leads on Frenchman Accused of Terror Plot’, The New York Times, 31 March 2016, available at: http://www.nytimes.com/2016/04/01/world/europe/investigators-pursue-leads-on-frenchman-accused-of-terror-plot.html?_r=0, last visited: 9 August 2016. 452 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 453 Allen, P., ‘Convicted ISIS recruiter who 'planned imminent terrorist attack in France' is among seven arrested as police use grenades in raids in Belgium and Paris’, Daily Mail Online, 24 March 2016, available at: http://www.dailymail.co.uk/news/article-3508608/At-one-person-arrested-masked-anti-terror-police-launch- raids-Paris-suburb-Argenteuil-following-Brussels-suicide-attacks.html, last visited: 9 August 2016. 454 ‘Thwarted Paris plot linked to deadly Brussels ISIS cell’, CBS News, 25 March 2016. 455 Alonso, P., ‘Qui est Gelel Attar, le suspect des attentats de Paris arrêté au Maroc?’, Liberation, 19 January 2016, available at: http://www.liberation.fr/france/2016/01/19/qui-est-gelel-attar-le-suspect-des-attentats-de-paris-arrete-au-maroc_1427332, last visited: 9 August 2016. 456 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016. 457Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016. 458 ibid.; ‘France charges main suspect in foiled attack plot’, The Times of Israel, 31 March 2016; and ‘Thwarted Paris plot linked to deadly Brussels ISIS cell’, CBS News, 25 March 2016; Mortimer, C, ‘Reda Kriket: Main suspect charged in connection with foiled Paris attack plot’, Independent, 30 March 2016. 459 Breeden, A. and Sewell Chan, ‘Third Man Is Charged in Belgium Over Foiled Plot in France’, The New York Times, 2 April 2016, available at: http://www.nytimes.com/2016/04/03/world/europe/belgium-terrorist-plot-france.html, last visited: 9 August 2016. 460 ibid. 461 See ‘Cellule d'Argenteuil: la conversation téléphonique qui lie le Bruxellois Rabah Meniker à Reda Kriket’, La Capitale, 3 June 2016, available at: http://www.lacapitale.be/1588454/article/2016-06-03/cellule-d-argenteuil-la-conversation-telephonique-qui-lie-le-bruxellois-rabah-me, last visited: 9 August 2016, for full names. 462 Breeden, A., ‘Investigators Pursue Leads on Frenchman Accused of Terror Plot’, The New York Times, 31 March 2016.

! ! 39 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

ABDERRAHMANE AMEROUD

Role: Charged with involvement in Reda Kriket’s foiled plot to attack Paris.463

Bio: A 38-year-old Algerian, Ameroud was involved in petty crime as a youth along with his older brothers before graduating to violent extremism. He is claimed to have visited al-Qaeda training camps in the late 1990s464 and to have been involved in the assassination of Ahmad Shah Massoud. He is reported to have been sentenced to seven years in prison for his role in this attack in 2005.465 He has also been described as “linked” to the Zerkani network, though the nature of the link is unclear.466 Ameroud was shot in the leg and arrested in Schaerbeek in March 2016 in relation to Reda Kriket’s foiled plot to attack Paris.467

Foreign combat experience: Reports in the French media suggest he travelled to an al-Qaeda training camp in Afghanistan in 1999.

Movements: Afghanistan.468

Criminal history: Ameroud was convicted in 2005 as an accomplice to the assassination of Ahmad Shah Massoud in 2001 and sentenced to seven years.469

Known to the authorities: Known to the authorities following his conviction in 2005.

Networks and associates:

-! Zerkani network: Reda Kriket [Charged with involvement with Kriket’s plot]; Khalid Zerkani [Described as “linked” to the Zerkani network];470 See Khalid Zerkani profile for full list of other network associates Ameroud may have associated with.

ILIAS MOHAMMADI: An alleged member of the Zerkani network who returned from Syria to Belgium using false ID the day after the 24 May 2014 attack on a Jewish museum in Brussels and was arrested with “a significant amount of ammunition”. Official documents revealed that he knew Gelel Attar and Chakib Akrouh.471

YONI PATRIC MAYNE: A 25-year-old472 Belgian-Malian, Mayne had worked in a video store473 before attending Zerkani’s meetings and became more radical in the process.474 On 20 January 2014, he travelled to Syria with Abdelhamid Abaaoud and Abaaoud’s brother, Younes, flying from Cologne to Istanbul. However, he is first believed to have travelled to Syria in April 2013. He was arrested on his return, but

! ! 463 ‘Belgian charged with terrorism over foiled Paris attack plot’, France 24, 2 April 2016, available at: http://www.france24.com/en/20160402-belgian-charged-with- terrorism-over-foiled-attack-plot, last visited: 9 August 2016. 464 ibid. 465 ‘Terror suspect shot and held by Brussels police 'had been jailed for seven years for helping Taliban assassinate Afghan leader two days before 9/11'’, Daily Mail Online, 26 March 2016, available at: http://www.dailymail.co.uk/news/article-3510599/Terror-suspect-shot-held-Brussels-police-jailed-seven-years-helping-Taliban- assassinate-Afghan-leader-two-days-9-11.html, last visited: 9 August 2016. 466Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016. 467 ‘France charges main suspect in foiled attack plot’, The Times of Israel, 31 March 2016; and ‘Thwarted Paris plot linked to deadly Brussels ISIS cell’, CBS News, 25 March 2016; Mortimer, C., ‘Reda Kriket: Main suspect charged in connection with foiled Paris attack plot’, Independent, 30 March 2016. 468Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016; ‘Nouvelle reconduite vers l'Algérie’, Le Parisien, 29 July 2005, available at: http://www.leparisien.fr/faits-divers/nouvelle-reconduite-vers-l-algerie-29-07-2005-2006166577.php, last visited: 9 August 2016. 469 ‘Terror suspect shot and held by Brussels police 'had been jailed for seven years for helping Taliban assassinate Afghan leader two days before 9/11'’, Daily Mail Online, 26 March 2016. 470Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016. 471 Van Vlierden, G., ‘Belgium knew in 2012 already that Paris suspects were plotting attacks’, Emmejihad, 26 January 2016. 472 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 473 ‘At least 8 suspects are at large with links to attacks in Brussels, Paris’, CNN, 28 March 2016. 474 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016.

! ! 40 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW quickly released. Photos emerged in March 2014 claiming to show that he had been killed,475 but despite this France’s internal security directorate has issued instructions to keep looking for Mayne.476

YOUSSEF BOUYABAREM: An alleged member of the Zerkani network who attended meetings at Gelel Attar’s apartment in 2012. Tried unsuccessfully to join al-Shabaab, for which his brother, Moustapha Bouyabarem, already fought, and also failed in an attempt to travel to Syria.477

! ! 475 ‘At least 8 suspects are at large with links to attacks in Brussels, Paris’, CNN, 28 March 2016. 476 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 477 Van Vlierden, G., ‘Belgium knew in 2012 already that Paris suspects were plotting attacks’, Emmejihad, 26 January 2016. ! ! 41 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

1.6 Islamic State

SALIM BENGHALEM

Role: Recruitment and organisation. There has been speculation over whether Salem was the primary organiser of the Paris attacks above Abdelhamid Abaaoud.478 He has been described as IS’s theatre commander for Europe.479

Bio: Benghalem, who grew up in the Cachan suburb to the south of Paris,480 is reported to have been a sociable young man who drank and took drugs while working in a number of jobs including as a supermarket cashier. He became involved in gang violence and fled to in 2001 after being accused of attempted murder. He returned to France and was arrested in 2002, and was held on until his conviction in 2007, when he was sentenced to 11 years.481 He was released in 2010 and appears to have become radicalised while in prison. He was involved in a plot to free a convicted Islamist extremist from jail in 2010 alongside Charlie Hebdo shooter Cherif Kouachi and the Hypercache supermarket shooter Ahmedy Coulibaly on his release in 2010, and is also believed to have travelled to Yemen with Kouachi in 2011. He is thought to have travelled to Syria in 2013.482

Since arriving in Syria, Benghalem is alleged to have worked as an IS “police chief” in al-Bab district of Aleppo where he lives. US officials have referred to him as “chief executioner” because he is believed to have been involved with the kidnap and torture of Western hostages.483 He has also been described as France’s top IS recruiter484 and has also been involved with IS propaganda. In January 2015, he praised the Paris attacks of that month in an IS video,485 and he was also filmed calling on French Muslims to carry out terror operations in France a month later.486 In early January 2016, Benghalem was sentenced in absentia by a Paris court to 15 years for recruiting for IS.487 He has since been reported to have received injuries to his legs in a coalition airstrike.488

Foreign training/combat: Believed to have travelled to Yemen in 2011 and come “under the influence” of al-Qaeda in the Arabian Peninsula (AQAP) leader Anwar al-Awlaki.489 In 2013, he travelled to Syria and is believed to be there currently.490

Movements: Algeria (2001); Yemen (2011); Syria (2013).

! ! 478 ‘Paris attacks: Was Salim Benghalem the real ringleader?’, BBC News, 23 January 2015, available at: http://www.bbc.co.uk/news/world-europe-35399021, last visited: 9 August 2016. 479Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016. 480 Weiss, M., ‘Is This Frenchman Running ISIS Terror Networks in the West?’, The Daily Beast, 2 May 2016, available at: http://www.thedailybeast.com/articles/2016/05/01/is-this-frenchman-running-isis-terror-networks-in-the-west.html, last visited: 9 August 2016. 481 ‘French IS group recruiter sentenced to 15 years in absentia’, France 24, 7 January 2015, available at: http://www.france24.com/en/20160107-france-benghalem- islamic-state-recruiter-jailed-absentia, last visited: 9 August 2016. 482 ‘Paris attacks: Was Salim Benghalem the real ringleader?’, BBC News, 23 January 2015. 483 Weiss, M., ‘Is This Frenchman Running ISIS Terror Networks in the West?’, The Daily Beast, 2 May 2016. 484 McHugh, J., ‘Who Is Salim Benghalem? Trial Begins For France's Top ISIS Recruiter, Called True Mastermind Of Paris Islamic State Attacks’, International Business Times, 1 December 2015, available at: http://www.ibtimes.com/who-salim-benghalem-trial-begins-frances-top-isis-recruiter-called-true-mastermind- 2205958, last visited: 9 August 2016. 485 ‘Paris attacks: Was Salim Benghalem the real ringleader?’, BBC News, 23 January 2015. 486 ibid. 487 ibid. 488 Weiss, M., ‘Is This Frenchman Running ISIS Terror Networks in the West?’, The Daily Beast, 2 May 2016. 489 ‘Paris attacks: Was Salim Benghalem the real ringleader?’, BBC News, 23 January 2015. 490 McHugh, J., ‘Who Is Salim Benghalem? Trial Begins For France's Top ISIS Recruiter, Called True Mastermind Of Paris Islamic State Attacks’, International Business Times, 1 December 2015.

! ! 42 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Criminal history: Convicted of attempted murder in 2007. Convicted of recruiting for IS in January 2016.491

Known to the authorities: Known to French authorities for terrorism-related links following his involvement in a plot to free Smaïn Ait Ali Belkacem from prison in 2010.492 In 2014, he was added to a US list of ten Specially Designated Global Terrorists (SDGT), and according to the US State Department is subject to a European Arrest Warrant.493

Networks and associates:

-! Paris attacks (November 2015): Terrorism Research and Analysis Consortium have suggested that Benghalem may have played a significant role in organising the Paris attacks.494

-! Buttes-Chaumont Group: Mohamed el-Ayouni [leader of the group, believed to have met Benghalem in prison]; Said and Cherif Kouachi [Charlie Hebdo attackers and members of the Buttes-Chaumont network.495 Benghalem was involved in a planned jail-break with Cherif Kouachi in 2010 and travelled to Yemen with him in 2011]; Ahmedy Coulibaly [Kosher supermarket attacker and associate of Benghalem involved in jail-break plans].

-! Other: Anwar al-Awlaki [Benghalem was allegedly influenced by the AQAP ideologue while in Yemen]; Mehdi Nemmouche [The two men were jailers for IS in Aleppo between July and December 2013, during which time they guarded French hostages].496

FABIEN CLAIN aka Omar497

Role: There is speculation that he may have taken over Abaaoud’s role of recruiting IS operatives to carry out attacks in Europe. His voice was identified as that on the recording claiming responsibility for the Paris attacks,498 while his past discussions with French militants about attacking the Bataclan concert hall has led to suggestions he may have had input into target selection.499

Bio: A French convert from Toulouse, Clain converted to Islam in the 1990s and became radicalised in the early 2000s. He and his brother, Jean-Michel, were involved with the Salafist community in Toulouse.500 Originally from Reunion, he has been described as a “veteran of [the] radical Islamist networks” of Toulouse501 and it is reported he was close to the family of Mohammed Merah when living

! ! 491 ‘French IS group recruiter sentenced to 15 years in absentia’, France 24, 7 January 2015; and ‘Paris attacks: Was Salim Benghalem the real ringleader?’, BBC News, 23 January 2015. 492 Samuel, H. and Patrick Sawyer, ‘Charlie Hebdo attack: the Kouachi brothers and the network of French Islamists with links to Islamic State’, The Telegraph, 8 January 2015, available at: http://www.telegraph.co.uk/news/worldnews/europe/france/11334249/Charlie-Hebdo-attack-the-Kouachi-brothers-and-the-network-of- French-Islamists-with-links-to-Islamic-State.html, last visited: 9 August 2016. 493 ‘Designations of Foreign Terrorist Fighters’, US Department of State, 24 September 2014, available at: http://www.state.gov/r/pa/prs/ps/2014/09/232067.htm, last visited: 9 August 2016. 494 ‘Paris attacks: Was Salim Benghalem the real ringleader?’, BBC News, 23 January 2015. 495 McHugh, J., ‘Who Is Salim Benghalem? Trial Begins For France's Top ISIS Recruiter, Called True Mastermind Of Paris Islamic State Attacks’, International Business Times, 1 December 2015. 496 ‘Paris attacks: Was Salim Benghalem the real ringleader?’, BBC News, 23 January 2015. 497 Robinson, M., ‘Revealed: French voice behind chilling ISIS Paris massacres message is also a homegrown terrorist behind other attacks in his own country’, Daily Mail Online, 18 November 2015 498 Gartenstein-Ross, D, and Nathaniel Barr, ‘Recent Attacks Illuminate Islamic State’s Europe Attack Network’, The Jamestown Foundation, 27 April 2016. 499 ibid. 500 Taylor, A,. ‘A French Muslim convert living in Syria is believed to play a key role in European terror’, The Washington Post, 21 November 2015, available at: https://www.washingtonpost.com/news/worldviews/wp/2015/11/21/a-french-muslim-convert-living-in-syria-is-believed-to-play-a-key-role-in-european-terror/, last visited: 9 August 2016. 501 Robinson, M., ‘Revealed: French voice behind chilling ISIS Paris massacres message is also a homegrown terrorist behind other attacks in his own country’, Daily Mail Online, 18 November 2015

! ! 43 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW in Toulouse.502 Clain and his brother travelled to Egypt and the Netherlands in the early 2000s, and are believed to have become associated with Olivier Corel, who “has since been accused of radicalizing a number of young Muslims”. In 2009, Clain was jailed for recruiting fighters to send to Iraq, and on his release in 2012 he moved to Normandy, living there for two years before fleeing to Syria in 2014.503

Clain is now believed to live in Raqqa, where he is thought to been involved with a cell producing and distributing IS propaganda.504 He is also believed to have directed Sid Ahmed Ghlam, who failed in his efforts to target churches in the Villejuif suburb of Paris after shooting himself in the leg, communicating with Ghlam online.505

Foreign training/ combat: Clain travelled to join IS Syria in 2014.

Movements: Netherlands, Egypt (Early 2000s); Syria (2014)

Criminal history: Clain was sentenced to five years in prison in 2009 for recruiting fighters to travel to Iraq. He was released in 2012.506

Known to the authorities: Clain has been known to the authorities since at least 2009, when he was associated with a plot to attack the Bataclan507 and convicted for recruiting fighters to travel to Iraq.

Networks and associates:

-! Paris attacks (November 2015): Abdelhamid Abaaoud [Abaaoud is reported to have been working with Clain in Raqqa to recruit French and Belgian fighters for attacks in the West].508

-! Other: Sid Ahmed Ghlam [French-Algerian student who failed who failed in his efforts to target churches in the Villejuif suburb of Paris in April 2015. Clain is described as Ghlam’s “point of contact”];509 Mohammed Merah [Clain is described as a close friend of the Merah family].510

AMR AL-ABSI aka ‘Abu Atheer’511

Role: A member of IS’s Shura Council and described as the group’s “kidnapper-in-chief” and head of media. Believed to have served as the IS provincial leader in Homs from mid-2014512 and governor of Aleppo before being killed in March 2016.513

! ! 502 Brisard, J., ‘THE PARIS ATTACKS AND THE EVOLVING ISLAMIC STATE THREAT TO FRANCE’, Combating Terrorism Center at West Point, 14 December 2015. 503 Taylor, A., ‘A French Muslim convert living in Syria is believed to play a key role in European terror’, The Washington Post, 21 November 2015. 504 O’Connor, R., ‘Paris attacks: Voice in Isis propaganda is 'probably' French jihadist Fabien Clain’, Independent, 17 November 2015, available at: http://www.independent.co.uk/news/world/europe/paris-attacks-voice-in-isis-video-is-probably-french-jihadist-fabien-clain-a6737736.html, last visited: 9 August 2016. 505 Taylor, A., ‘A French Muslim convert living in Syria is believed to play a key role in European terror’, The Washington Post, 21 November 2015. 506 ibid. 507 Brisard, J., ‘THE PARIS ATTACKS AND THE EVOLVING ISLAMIC STATE THREAT TO FRANCE’, Combating Terrorism Center at West Point, 14 December 2015. 508 Van Vlierden, G., ‘PROFILE: PARIS ATTACK RINGLEADER ABDELHAMID ABAAOUD’, Combating Terrorism Center at West Point, 15 December 2015. 509Taylor, A., ‘A French Muslim convert living in Syria is believed to play a key role in European terror’, The Washington Post, 21 November 2015. 510 Brisard, J., ‘THE PARIS ATTACKS AND THE EVOLVING ISLAMIC STATE THREAT TO FRANCE’, Combating Terrorism Center at West Point, 14 December 2015. 511 Cruickshank, P. et al., ‘Who might lead ISIS if al-Baghdadi dies?’, CNN, 3 July 2015, available at: http://edition.cnn.com/2015/05/11/middleeast/isis-leadership/, last visited: 9 August 2016. 512 ‘Security Council Al-Qaida Sanctions Committee Adds Names of Four Individuals and Two Entities to Its Sanctions List’, UN Security Council Press Release, 29 September 2015. 513 Spencer, R., ‘Four jihadists, one prison: all released by Assad and all now dead’, The Telegraph, 11 May 2016.

! ! 44 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Bio: A 36-year-old Saudi-born Syrian,514 al-Absi and his older brother, Firas al-Absi (an associate of al- Qaeda in Iraq head Abu Musab Al-Zaqarwi)515 joined IS while it was still affiliated with al-Qaeda.516 The brothers led a group they called the Majlis Shura Mujadeddin (MSM) which they had set up in 2012 and Amr al-Absi took over the group after Firas was killed later that year. In 2013, he incorporated the MSM into IS and was later appointed the group’s governor of Aleppo.517 From then until his death in 2016, he is described as having played an “important role” in IS’s Shura Council,518 potentially as IS leader Abu Bakr al-Baghdadi’s Syrian deputy,519 and directed the production of IS’s online propaganda.520 He was also called the group’s “kidnapper-in-chief” and his hostages included James Foley, John Cantlie, Alan Henning and David Haines.521

Foreign training/combat: See above.

Movements: Unknown.

Criminal history: Unknown.

Known to the authorities: Al-Absi was added to the UN sanctions list in September 2015.522

Networks and associates:

-! Brussels attacks (March 2016): Najim Laachraoui [Part of al-Absi’s group in Syria;523 alleged to have been put in charge of the interrogation of hostages].524

-! Paris attacks (November 2015): Abdelhamid Abaaoud [Believed to have been at one time close to al-Absi].525

-! Other: Mehdi Nemmouche [Tortured hostages under the command of al-Absi]; 526 Mohammed Emwazi [Part of al-Absi’s group in Syria, he was one of al-Absi’s jailers].527

ABU SULEYMAN AL-FARANSI

Role: Alleged to be a director of IS’s external intelligence operation, the Amn al-Kharji, it has been suggested al-Faransi may have “conceived and planned” the Paris attacks,528 and may have also seen and approved the Brussels attack plans.529

! ! 514 Bacchi, U., ‘Isis: Islamic State kidnapper-in-chief Amr al-Absi 'killed in Aleppo', International Business Times, 4 March 2016, available at: http://www.ibtimes.co.uk/isis-islamic-state-kidnapper-chief-amr-al-absi-killed-aleppo-1547638, last visited: 9 August 2016. 515 Spencer, R., ‘Four jihadists, one prison: all released by Assad and all now dead’, The Telegraph, 11 May 2016. 516 Bacchi, U., ‘Isis: Islamic State kidnapper-in-chief Amr al-Absi 'killed in Aleppo', International Business Times, 4 March 2016. 517 ibid. 518 Barrett, R., ‘The Islamic State’, The Soufan Group, November 2014, available at: http://soufangroup.com/wp-content/uploads/2014/10/TSG-The-Islamic-State- Nov14.pdf, last visited: 9 August 2016, pp. 52, 30. 519 ‘An Account of Abu Bakr al-Baghdadi & Islamic State Succession Lines’, Aymenn Jawad Al-Tamimi, 24 January 2016, available at: http://www.aymennjawad.org/2016/01/an-account-of-abu-bakr-al-baghdadi-islamic-state, last visited: 9 August 2016. 520 Bacchi, U., ‘Isis: Islamic State kidnapper-in-chief Amr al-Absi 'killed in Aleppo', International Business Times, 4 March 2016. 521 Spencer, R., ‘Four jihadists, one prison: all released by Assad and all now dead’, The Telegraph, 11 May 2016. 522 Bacchi, U., ‘Isis: Islamic State kidnapper-in-chief Amr al-Absi 'killed in Aleppo', International Business Times, 4 March 2016. 523 Spencer, R., ‘Four jihadists, one prison: all released by Assad and all now dead’, The Telegraph, 11 May 2016. 524 ‘Brussels bomber Laachraoui was hostage gaoler in Syria – lawyer’, Reuters, 22 April 2016, available at: http://uk.reuters.com/article/uk-europe-attacks-syria- idUKKCN0XJ1FU, last visited: 9 August 2016. 525 Spencer, R., ‘Four jihadists, one prison: all released by Assad and all now dead’, The Telegraph, 11 May 2016. 526 ‘Masterminds of Terror’, Raconteur, May 2016, available at: http://raconteur.net/magazine/masterminds-of-terror, last visited: 9 August 2016. 527 Spencer, R., ‘Four jihadists, one prison: all released by Assad and all now dead’, The Telegraph, 11 May 2016. 528 Weiss, M., ‘Is This Frenchman Running ISIS Terror Networks in the West?’, The Daily Beast, 2 May 2016. 529 Gartenstein-Ross, D. and Nathaniel Barr, ‘Recent Attacks Illuminate Islamic State’s Europe Attack Network’, The Jamestown Foundation, 27 April 2016.

! ! 45 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Bio: While little is known about al-Faransi other than that he used to be a gym manager, his pseudonym indicates that he is probably a French national, with IS sources claiming he was born and educated in France and is of North African heritage. He is believed to be living in al-Bab in Aleppo district, northern Syria, with his wife and two children. An IS defector claims al-Faransi started out as a low-ranking officer in IS’s security services before presenting IS leader Abu Bakr al-Baghdadi with plans for the Paris attacks. Reports suggest he was promoted to “operations chief” after the attacks and a French security source has described him as the “head of overall operations in Europe”.530

Foreign training/combat: See above.

Movements: Unknown.

Criminal history: Unknown.

Known to the authorities: Unknown.

Networks and associates:

-! Brussels attacks (March 2016): Ibrahim el-Bakraoui [El-Bakraoui passed plans of the plot on to al-Faransi].531

-! Paris attacks (November 2015): Alleged to have potentially “conceived and planned” the Paris attacks.532

! ! 530 Weiss, M., ‘Is This Frenchman Running ISIS Terror Networks in the West?’, The Daily Beast, 2 May 2016. 531 Gartenstein-Ross, D. and Nathaniel Barr, ‘Recent Attacks Illuminate Islamic State’s Europe Attack Network’, The Jamestown Foundation, 27 April 2016. 532 Weiss, M., ‘Is This Frenchman Running ISIS Terror Networks in the West?’, The Daily Beast, 2 May 2016. ! ! 46 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

1.7 Other

KHALID BEN LARBI

Role: A member of the Verviers cell.

Bio: A 23-year-old from Molenbeek, Ben Larbi had a history of petty crime including theft, and is believed to have travelled to fight in Syria with Katibat al-Battar533 in 2014 before returning to Belgium in December 2014.534 Having used false identity papers, Ben Larbi was killed in a gun battle with Belgian police during a raid on the cell on 15 January 2015.535 Police discovered Kalashnikovs, bomb-making equipment and police uniforms at the scene.536

Foreign training/combat: Katibat al-Battar, a militia in Syria associated with IS claimed Ben Larbi had fought with them in Syria.537

Movements: Syria (2014).538

Criminal history: Ben Larbi reportedly had a history of petty crime, including theft and robbery.539

Known to the authorities: Both Ben Larbi and his associate, Sofiane Amghar, were under Belgian surveillance before the police raid in which they were killed.540

Networks and associates:

-! Paris attacks (November 2015): Abdelhamid Abaaoud [Believed to have been plotting to kill police officers with Abaaoud].541

-! Verviers cell: Sofiane Amghar [Plotted together to attack Belgian police];542 Marouane el-Bali [Suspected of providing logistics for the cell and present in the house during the firefight].543

SOFIANE AMGHAR

Role: A member of the Verviers cell.

Bio: A 26-year-old from Molenbeek, Amghar had a history of petty crime, and is believed to have travelled to fight in Syria with Katibat al-Battar544 in 2014 before returning to Belgium in December 2014.545 Having used false identity papers, Amghar was killed in a gun battle with Belgian police during a raid on the cell

! ! 533 Dalton, M., ‘Two Killed in Belgian Terror Raid Linked to Militants in Syria’, The Wall Street Journal, 3 February 2015, available at: http://www.wsj.com/articles/two-killed-in-belgian-terror-raid-linked-to-militants-in-syria-1422992315, last visited: 9 August 2016. 534 Waterfield, B., ‘Belgian police admit seeking wrong man as Vervier shooutout jihadists named’, The Telegraph, 22 January 2015. 535 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 536 Waterfield, B., ‘Belgian police admit seeking wrong man as Vervier shooutout jihadists named’, The Telegraph, 22 January 2015. 537 Dalton, M., ‘Two Killed in Belgian Terror Raid Linked to Militants in Syria’, The Wall Street Journal, 3 February 2015. 538 Waterfield, B., ‘Belgian police admit seeking wrong man as Vervier shooutout jihadists named’, The Telegraph, 22 January 2015. 539 Dalton, M., ‘Two Killed in Belgian Terror Raid Linked to Militants in Syria’, The Wall Street Journal, 3 February 2015. 540 Waterfield, B., ‘Belgian police admit seeking wrong man as Vervier shooutout jihadists named’, The Telegraph, 22 January 2015. 541 Dearden, L., ‘Abdelhamid Abaaoud: What we know about Belgian man identified as suspected Paris attacks 'mastermind'’, Independent, 16 November 2015. 542 ibid. 543 Waterfield, B., ‘Belgian police admit seeking wrong man as Vervier shooutout jihadists named’, The Telegraph, 22 January 2015. 544 Dalton, M., ‘Two Killed in Belgian Terror Raid Linked to Militants in Syria’, The Wall Street Journal, 3 February 2015. 545 Waterfield, B., ‘Belgian police admit seeking wrong man as Vervier shooutout jihadists named’, The Telegraph, 22 January 2015.

! ! 47 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW on 15 January 2015.546 Police discovered Kalashnikovs, bomb-making equipment and police uniforms at the scene.547

Foreign training/combat: Katibat al-Battar, a militia in Syria associated with IS claimed Amghar had fought with them in Syria.548

Movements: Syria (2014).549

Criminal history: Amghar reportedly had a history of petty crime, including theft and robbery.550

Known to the authorities: Both Amghar and his associate, Khalid Ben Larbi, were under Belgian surveillance before the police raid in which they were killed.551

Networks and associates:

-! Paris attacks (November 2015): Abdelhamid Abaaoud [Believed to have been plotting to kill police officers with Abaaoud].552

-! Verviers cell: Sofiane Amghar [Plotted together to attack Belgian police];553 Marouane el-Bali [Suspected of providing logistics for the cell and present in the house during the firefight].554

MEHDI NEMMOUCHE: Nemmouche, alleged to be responsible for a gun attack on a Brussels Jewish Museum in May 2014,555 is linked to Abdelhamid Abaaoud. The two men had met in Syria556 and four days before Nemmouche left from Cologne airport in January 2014 the men had a 24 minute phone call.557 Nemmouche has been described as a “sadistic jailer”558 who allegedly tortured prisoners for IS under the command of Amr al-Absi.559 He had previously been imprisoned for robbery for five years and was released in 2012.560

AYOUB EL KHAZZANI: A 25-year-old Moroccan who attacked an Amsterdam-Paris train in August 2015, Khazzani’s attack failed when he was incapacitated by passengers. Originally from Tetouan, Morocco, he moved to Spain from 2007 to 2014 before moving to France, and then Belgium. In Spain he attended a well-known radical mosque in Algeciras and was involved in drugs trafficking, and was already known to the Spanish authorities for “comments defending jihadists”.561 Abdelhamid Abaaoud is believed to have been involved with the attack.562

! ! 546 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 547 Dearden, L., ‘Abdelhamid Abaaoud: What we know about Belgian man identified as suspected Paris attacks 'mastermind'’, Independent, 16 November 2015. 548 Dalton, M., ‘Two Killed in Belgian Terror Raid Linked to Militants in Syria’, The Wall Street Journal, 3 February 2015. 549 Waterfield, B., ‘Belgian police admit seeking wrong man as Vervier shooutout jihadists named’, The Telegraph, 22 January 2015. 550 Dalton, M., ‘Two Killed in Belgian Terror Raid Linked to Militants in Syria’, The Wall Street Journal, 3 February 2015. 551 Waterfield, B., ‘Belgian police admit seeking wrong man as Vervier shooutout jihadists named’, The Telegraph, 22 January 2015. 552 Dearden, L., ‘Abdelhamid Abaaoud: What we know about Belgian man identified as suspected Paris attacks 'mastermind'’, Independent, 16 November 2015. 553 ibid. 554 Waterfield, B., ‘Belgian police admit seeking wrong man as Vervier shooutout jihadists named’, The Telegraph, 22 January 2015. 555 ‘France arrests Syria jihad suspects as Nemmouche held’, BBC News, 1 June 2014, available at: http://www.bbc.co.uk/news/world-europe-27660683, last visited: 9 August 2016. 556 ‘How Islamic State Infiltrated Europe’, The Wall Street Journal, 1 April 2016. 557 ‘At least 8 suspects are at large with links to attacks in Brussels, Paris’, CNN, 28 March 2016. 558 Mendick, R. et al., ‘Brussels museum shooting suspect 'was Syria hostage torturer'’, The Telegraph, 6 September 2016, available at: http://www.telegraph.co.uk/news/worldnews/middleeast/syria/11079100/Brussels-museum-shooting-suspect-was-Syria-hostage-torturer.html, last visited: 9 August 2016. 559 ‘Masterminds of Terror’, Raconteur, May 2016. 560 ‘France arrests Syria jihad suspects as Nemmouche held’, BBC News, 1 June 2014. 561 ‘France train shooting: Attack 'was well prepared'’, BBC News, 26 August 2015, available at: http://www.bbc.co.uk/news/world-europe-34055713, last visited: 9 August 2016. 562 ‘Paris attacks: Who was Abdelhamid Abaaoud?’, BBC News, 19 November 2015.

! ! 48 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

SID AHMED GHLAM: A 24-year-old Algerian computer science student, Ghlam plotted to attack churches in the Villejuif suburb of Paris. The plot failed when he accidentally shot himself and called an ambulance. A cache of weapons was discovered in his car. Ghlam is also believed to have been involved in the murder of Aurelie Chatelain, found dead in Villejuif the day Ghlam was arrested. According to French officials, Ghlam was already known to the security services over his desire to travel to Syria,563 and Abdelhamid Abaaoud is believed to have been involved in the plot.564

NOUREDDINE ABRAIMI: The 29-year-old brother of Lazez Abraimi, Noureddine travelled from his home in Molenbeek to Syria at the end of 2014, leaving behind his wife and children. Noureddine allegedly provided logistical support to Abdelhamid Abaaoud as part of the foiled plot against Belgian police in Verviers, January 2015 and is said to have been recruited by Abaaoud.565 His home was raided in January 2015566 and he will be tried in absentia in connection to the Verviers plot.567 His brother’s lawyers claim Noureddine is currently in Syria.568

NICHOLAS MOREAU: Charged with involvement in a “conspiracy related to terrorist enterprise”, Moreau claimed Abdelhamid Abaaoud was responsible for vetting potential European recruits.569 Before Moreau converted to Islam in prison, he had been a petty criminal. He left Nantes to fight in Syria in 2014 and was arrested on his return in 2015. After his arrest, he revealed crucial information about the inner workings of IS’s external operations, including that selected fighters were given £40,000 to fund attacks.570

REDA HAME: A 29-year-old French computer technician,571 Hame was arrested in August 2015572 and suspected of plotting a hostage-taking at a concert hall in Paris. He revealed that he had received weapons training from Abaaoud in Raqqa in June. Hame claimed IS was using encrypted communication technology to connect with European operatives and that Abdelhamid Abaaoud had given him the tools to do so.573 Abaaoud is believed to have been his handler and to have trained him and an associate to hit targets in France and Spain. Hame was arrested after his accomplice was arrested in Spain. 574

ABID ABERKAN: The nephew of Fatima Aberkan,575 and accomplice to Salah Abdeslam and Soufiane Ayari576, acting as their “landlord”.577 He has been described as “a distant cousin” of Abdeslam’s,578 and Abdeslam was eventually arrested at Aberkan’s mother’s address.579

! ! 563 ‘France 'foils five terror attacks' - PM Valls’, BBC News, 23 April 2015. 564 ‘Paris attacks: Who was Abdelhamid Abaaoud?’, BBC News, 19 November 2015. 565 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 566 ibid. 567 Cruickshank, P. and Lister, T, ‘Immense challenges remain despite arrests of terror suspects’, CNN, 8 April 2016, available at: http://edition.cnn.com/2016/04/08/europe/belgium-arrests-significance/, last visited: 9 August 2016. 568 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015. 569 ‘At least 8 suspects are at large with links to attacks in Brussels, Paris’, CNN, 28 March 2016. 570 ‘IS in Europe: The race to the death’, BBC News, 23 March 2016. 571 Callimachi, R., ‘How ISIS Built the Machinery of Terror Under Europe’s Gaze’, The New York Times, 29 March 2016. 572 ibid. 573 ‘At least 8 suspects are at large with links to attacks in Brussels, Paris’, CNN, 28 March 2016. 574 Gartenstein-Ross, D. and Nathaniel Barr, ‘Recent Attacks Illuminate Islamic State’s Europe Attack Network’, The Jamestown Foundation, 27 April 2016. 575 ibid. 576 ‘Brussels attacks: Have blunders hampered Belgian investigation?’, BBC News, 15 April 2016. 577 ‘Abid Aberkan reste en détention préventive’, 7 Sur 7, 25 March 2016. 578 ‘Captured Paris terror suspect Salah Abdeslam says he planned more attacks’, The Wall Street Journal, 21 March 2016, available at: http://www.wsj.com/articles/arrested-paris-terror-suspect-salah-abdeslam-says-he-planned-more-attacks-1458499173, last visited: 9 August 2016. 579 ‘Brussels attacks: Have blunders hampered Belgian investigation?’, BBC News, 15 April 2016. ! ! 49 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

2.!Profiles: Al-Qaeda-inspired Networks

2.1 The Rotterdam Cell: US Embassy and Cultural Centre Plot

DJAMEL BEGHAL

Role: Described as the “ringleader” of the plot to attack the US Embassy in Paris.580 Beghal was convicted in France in 2005 of involvement in the 2001 al-Qaeda plot to bomb the US Embassy and Cultural Centre in Paris.581

Bio: A former dual French-Algerian national582 born in Algeria in 1965, Beghal grew up in the Parisian suburb of Corbeil-Essonnes. Having worked “menial jobs”, he began to visit radical mosques and was arrested in 1994 in connection with a network of Algerian militants. Following this, he began to speak in mosques and Islamic centres and “raised money for jihadists in Chechnya and Bosnia”.583 In 1997 he moved to Leicester, where he is thought to have recruited extremists and to have been a bridge between al-Qaeda and European members of Takfir wal-Hijra.584 He has also been linked to the Groupe Salafiste pour la Predication et le Combat (GSPC).585 During this time he also regularly visited Finsbury Park Mosque and became involved with Abu Hamza and Abu Qatada,586 as well as with other extremists including Abu Walid, , and . He also travelled frequently to Europe, and was arrested and questioned in France in 1999.587

In November 2000, Beghal travelled to Jalalabad, Afghanistan.588 Once there, he admits to having visited to discuss the plot to bomb the US embassy, and told police in the (UAE) that he was told to travel to Europe through Morocco and Spain by , a senior al-Qaeda logistics hub, though he later retracted these claims.589 When returning from Afghanistan in July 2001, Beghal was arrested in Dubai carrying a false passport590 (or forged visa extension)591 provided by Brahim Benmerzouga and Baghdad Meziane.592 He was extradited to Paris from the UAE in October 2001.593 In 2005, Beghal was sentenced to ten years in prison for his involvement in the plot.

After Beghal was released from prison in 2010 he moved to Cantal, a town in Auvergne, southern France, and with Ahmedy Coulibaly and Cherif Kouachi plotted to free Smain Ali Belkacem, imprisoned for his

! ! 580 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004, available at: http://www.nytimes.com/2004/07/19/world/europe-fears-islamic-converts-may-give-cover-for-extremism.html?_r=0, last visited: 9 August 2016. 581 ‘Six jailed over Paris bomb plot’, BBC News, 15 March 2005, available at: http://news.bbc.co.uk/1/hi/world/europe/4350525.stm, last visited: 9 August 2016. 582 ‘Bin Laden suspect 'recruited in UK'’, BBC News, 3 October 2001, available at: http://news.bbc.co.uk/1/hi/uk/1576313.stm, last visited: 9 August 2016. 583 Erlanger, S. and Chris Hedges, ‘Terror Cells Slip Through Europe's Grasp’, The New York Times, 28 December 2001, available at: http://www.nytimes.com/2001/12/28/international/europe/28EURO.html, last visited: 9 August 2016. 584 Henley, J., ‘Paris plot reveals link to terror chief’, Guardian, 3 October 2001, available at: http://www.theguardian.com/world/2001/oct/03/afghanistan.terrorism1, last visited: 9 August 2016. 585 Gardner, B., ‘Charlie Hebdo terror mentor's wife on benefits in Leicester’, The Telegraph, 9 January 2015, available at: http://www.telegraph.co.uk/news/uknews/terrorism-in-the-uk/11337056/Charlie-Hebdo-terror-mentors-wife-on-benefits-in-Leicester.html, last visited: 9 August 2016. 586 Halliday, J. et al., ‘Mentor of Charlie Hebdo gunmen has been UK-based’, Guardian, 11 January 2015, available at: http://www.theguardian.com/world/2015/jan/11/mentor-charlie-hebdo-gunmen-uk-based-djamel-beghal, last visited: 9 August 2016. 587 Erlanger, S. and Chris Hedges, ‘Terror Cells Slip Through Europe's Grasp’, The New York Times, 28 December 2001. 588 Halliday, J. et al., ‘Mentor of Charlie Hebdo gunmen has been UK-based’, Guardian, 11 January 2015. 589 Henley, J., ‘Paris plot reveals link to terror chief’, Guardian, 3 October 2001; and Erlanger, S. and Chris Hedges, ‘Terror Cells Slip Through Europe's Grasp’, The New York Times, 28 December 2001. 590 Henley, J., ‘Paris plot reveals link to terror chief’, Guardian, 3 October 2001. 591 Erlanger, S. and Chris Hedges, ‘Terror Cells Slip Through Europe's Grasp’, The New York Times, 28 December 2001. 592 Simcox, R. et al., ‘Islamist Terrorism: The British Connections’, The Henry Jackson Society (2011), p. 363. 593 ‘Terror suspect extradited to France’, BBC News, 1 October 2001, available at: http://news.bbc.co.uk/1/hi/world/europe/1573746.stm, last visited: 9 August 2016.

! ! 50 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW involvement with an attack on the Paris metro in 1995.594 Coulibaly and Beghal were convicted of involvement and Beghal was sentenced to ten years and stripped of his French nationality.595

Foreign training/combat: Believed to have spent time at training camps in Afghanistan in 2001.596

Movements: Moved to France aged 22; Moved to the UK in 1997;597 Spain, the Netherlands, Belgium and France (1997-2000); London to Afghanistan (November 2000); Afghanistan to Dubai (July 2001). 598

Criminal history: Convicted of involvement in the 2001 al-Qaeda plot to bomb the US Embassy and Cultural Centre in Paris (2005);599 Convicted of involvement in plot to free Smain Ali Belkacem (2010); 600 Organised the kidnapping of Azzedin Journazi’s children in 2000, but does not appear to have been convicted of involvement. He was already imprisoned when associate Mustafa Abushima was convicted in 2005.601

Known to the authorities: Beghal was arrested in 1994 in connection with a network of Algerian militants.602 In 1996, French authorities found that a suspected terrorist was in possession of Beghal’s phone number and he was questioned,603 and Beghal was stopped and questioned again by French authorities in 1999. Before his arrest in July 2001, he had been under surveillance for two years, though the French had “lost track” of him when he left for Afghanistan. On his return, the CIA is claimed to have “insisted Beghal be held and questioned”.604

Networks and associates:

-! Al-Qaeda: Baghdad Meziane, Brahim Benmerzouga [Convicted al-Qaeda financiers, Beghal has been described as a “close friend” of the two men605 and visited them before travelling to Afghanistan];606 [Reid was recruited by Beghal after the men met at Finsbury Park Mosque where Reid was staying];607 Zacharias Moussaoui [Convicted of involvement with the 9/11 attacks, Moussaoui is believed to have been recruited by Beghal];608 David Courtailler [Assisted Beghal in the kidnapping of Azzedin Journazi’s children];609 Abu Zubaydah [Senior al-Qaeda operative and logistics hub who met with Beghal in Afghanistan].610

-! US Embassy and Cultural Centre plot (2001): Nizar Trabelsi [Trabelsi was to be the suicide bomber to attack the Embassy and cultural centre. He had attended Abu Qatada’s study sessions

! ! 594 Mendick, R., ‘Leicester terrorist cell that laid seeds of Paris atrocity’, The Telegraph, 17 January 2015, available at: http://www.telegraph.co.uk/news/uknews/terrorism-in-the-uk/11353140/Leicester-terrorist-cell-that-laid-seeds-of-Paris-atrocity.html, last visited: 9 August 2016. 595 ‘French attacks inquiry centers on prison 'sorcerer' Beghal’, Reuters, 15 January 2015, available at: http://www.reuters.com/article/us-france-shooting-beghal- insight-idUSKBN0KO28G20150115, last visited: 9 August 2016. 596 ‘Six jailed over Paris bomb plot’, BBC News, 15 March 2005. 597 Halliday, J. et al., ‘Mentor of Charlie Hebdo gunmen has been UK-based’, Guardian, 11 January 2015. 598 Erlanger, S. and Chris Hedges, ‘Terror Cells Slip Through Europe's Grasp’, The New York Times, 28 December 2001. 599 ‘Six jailed over Paris bomb plot’, BBC News, 15 March 2005. 600 ‘French attacks inquiry centers on prison 'sorcerer' Beghal’, Reuters, 15 January 2015. 601 Laville, S., ‘Terrorist organised children's kidnap’, Guardian, 1 July 2005, available at: https://www.theguardian.com/uk/2005/jul/01/alqaida.world, last visited: 9 August 2016. 602 Erlanger, S. and Chris Hedges, ‘Terror Cells Slip Through Europe's Grasp’, The New York Times, 28 December 2001. 603 Halliday, J. et al., ‘Mentor of Charlie Hebdo gunmen has been UK-based’, Guardian, 11 January 2015. 604 Erlanger, S. and Chris Hedges, ‘Terror Cells Slip Through Europe's Grasp’, The New York Times, 28 December 2001. 605 Mendick, R., ‘Leicester terrorist cell that laid seeds of Paris atrocity’, The Telegraph, 17 January 2015. 606 ‘Britain's first al Qaida terrorists jailed’, Daily Mail Online, available at: http://www.dailymail.co.uk/news/article-174742/Britains-al-Qaida-terrorists-jailed.html, last visited: 9 August 2016. 607 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006) p. 225. 608 Bird, S., ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003, available at: http://www.thetimes.co.uk/tto/news/uk/article1908171.ece?acs_cjd=true, last visited: 9 August 2016. 609 Sapsted, D., ‘Vet is convicted of kidnapping five children’, The Telegraph, 1 July 2005, available at: http://www.telegraph.co.uk/news/uknews/1493140/Vet-is- convicted-of-kidnapping-five-children.html, last visited: 9 August 2016. 610 Henley, J., ‘Paris plot reveals link to terror chief’, Guardian, 3 October 2001.

! ! 51 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

with Beghal];611 Kamel Daoudi [A co-conspirator alongside Beghal,612 Daoudi was Beghal’s “number two” who used an apartment in Corbeil owned by Beghal];613 Jerome Courtailler [Convicted in the Netherlands in 2004 for involvement in the 2001 plot to bomb the US Embassy in Paris.614 Courtailler is believed to have been converted to Islam by Beghal].615

-! Finsbury Park Mosque: Abu Qatada [Beghal has been described as “a constant presence” at Finsbury Park Mosque, where Qatada preached and is said to have been close to Qatada];616 Abu Walid [Abu Qatada’s “right-hand man”, Beghal and Walid were close associates];617 Abu Hamza al-Masri [Beghal frequented Finsbury Park Mosque,618 and security sources have claimed the two men were “close”].619

-! Other: Cherif Kouachi [Charlie Hebdo attack gunman believed to have been radicalised by Beghal whilst in prison from January 2005 to October 2006.620 Kouachi visited Beghal while he was under house arrest,621 and was seen playing football and trekking with him.622 He was arrested alongside Beghal due to alleged involvement in the plot to free Smain Ali Belkacem but later released];623 Ahmedy Coulibaly and Hayat Boumeddiene624 [Hypercache supermarket shooter and his wife. Coulibaly met Beghal in prison between January and August 2005.625 Both Coulibaly and Boumeddiene visited Beghal after his release for “cross-bow practice”.626 Coulibaly was convicted alongside Beghal of involvement in the plot to free Smain Ali Belkacem];627 Smain Ali Belkacem [Imprisoned for an attack on the Paris metro in 1995. Beghal was in phone contact with Belkacem].628

KAMEL DAOUDI

Role: Responsible for logistics and communications in the 2001 plot to bomb the US Embassy in Paris629 and convicted alongside Djamel Beghal in 2005.630

Bio: Daoudi, a French national631 of Algerian origin moved from Algeria to France at the age of five. He grew up in Paris and was a promising student before dropping out of his university course and working in

! ! 611 Barnett, A. and Burhan Wazir, ‘From football to terrorism’, Guardian, 7 October 2001, available at: https://www.theguardian.com/world/2001/oct/07/terrorism.afghanistan2, last visited: 9 August 2016. 612 ‘Six jailed over Paris bomb plot’, BBC News, 15 March 2005. 613 Henley, J., ‘Paris plot reveals link to terror chief’, Guardian, 3 October 2001. 614 ‘Dutch court jails terror supporters’, BBC News, 21 June 2004, available at: http://news.bbc.co.uk/1/hi/world/europe/3826031.stm, last visited: 9 August 2016. 615 ‘Europe Fears Islamic Converts May Give Cover for Extremism’, The New York Times, 19 July 2004. 616 Rayner, G. and David Barrett, ‘Charlie Hebdo suspect 'mentored' by Abu Hamza disciple’, The Telegraph, 8 January 2015, available at: http://www.telegraph.co.uk/news/worldnews/europe/france/11333776/Charlie-Hebdo-suspect-mentored-by-Abu-Hamza-disciple.html, last visited: 9 August 2016. 617 Erlanger, S. and Chris Hedges, ‘Terror Cells Slip Through Europe's Grasp’, The New York Times, 28 December 2001. 618 ibid. 619 Hughes, C. and David Collins, ‘Paris terror attacks: Abu Hamza linked with dead fanatics as Britain announces £100m counter-terror warchest’, Mirror, 9 January 2015, available at: http://www.mirror.co.uk/news/uk-news/paris-terror-attacks-abu-hamza-4951659, last visited: 9 August 2016. 620 Rayner, G. and David Barrett, ‘Charlie Hebdo suspect 'mentored' by Abu Hamza disciple’, The Telegraph, 8 January 2015. 621 Halliday, J. et al., ‘Mentor of Charlie Hebdo gunmen has been UK-based’, Guardian, 11 January 2015. 622 Gauthier-Villars, D. and Stacy Meichtry, ‘Algerian Terror Convict Links Paris Gunmen’, The Wall Street Journal, 13 January 2015, available at: http://www.wsj.com/articles/algerian-terror-convict-links-paris-gunmen-1421119392, last visited: 9 August 2016. 623 ‘French attacks inquiry centers on prison 'sorcerer' Beghal’, Reuters, 15 January 2015. 624 Drury, F., ‘'His heart burned to join his brothers': France's Most Wanted Woman praises Paris deli murderer husband in ISIS magazine as she boasts about how easy it was to flee to Syria’, Daily Mail Online, 12 February 2015, available at: http://www.dailymail.co.uk/news/article-2950446/Amedy-Coulibaly-s-wife-gives- interview-ISIS-magazine.html, last visited: 9 August 2016. 625 ‘French attacks inquiry centers on prison 'sorcerer' Beghal’, Reuters, 15 January 2015. 626 Halliday, J. et al., ‘Mentor of Charlie Hebdo gunmen has been UK-based’, Guardian, 11 January 2015. 627 ‘French attacks inquiry centers on prison 'sorcerer' Beghal’, Reuters, 15 January 2015. 628 ibid. 629 Randall, C., ‘Suspect in embassy suicide plot on trial’, The Telegraph, 4 January 2005, available at: http://www.telegraph.co.uk/news/worldnews/europe/france/1480390/Suspect-in-embassy-suicide-plot-on-trial.html, last visited: 9 August 2016. 630 ‘Six jailed over Paris bomb plot’, BBC News, 15 March 2005. 631 ‘Terror arrest in London’, BBC News, 1 October 2001, available at: http://news.bbc.co.uk/1/hi/uk/1573638.stm, last visited: 9 August 2016.

! ! 52 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW a cyber-café.632 He has since been described as a computer expert.633 He is thought to have travelled to Afghanistan and spent time in al-Qaeda training camps and to have been designing a bomb for the attack on the US Embassy and cultural centre. After Beghal’s arrest in July 2001, Daoudi fled Paris for Leicester and made contact with Brahim Benmerzouga and Baghdad Meziane. On 25 September, all three were arrested and “files on conventional, guerrilla and nuclear warfare” as well as a Taliban statement were found with Daoudi.634 He was extradited to France on 30 September 2001635 and convicted in 2005, receiving a nine year sentence.636 Daoudi was released from prison in April 2008, and the European Court of Human Rights ordered France to suspend attempts to deport him to Algeria.637 He is currently under house arrest in Carmaux, southern France.638

Foreign training/combat: Al-Qaeda training camp in Afghanistan (2001)639

Movements: Afghanistan (2001); UK (2001).

Criminal history: Convicted of involvement in the 2001 al-Qaeda plot to bomb the US Embassy and Cultural Centre in Paris (2005).640

Known to the authorities: Monitored by MI5 following his escape from Beghal’s Paris flat and travel to Leicester.641

Networks and associates:

-! Al-Qaeda: Brahim Benmerzouga, Baghdad Meziane [Visited by Daoudi in Leicester in early 2001 to arrange travel to training camps in Afghanistan. Daoudi was arrested at Benmerzouga’s home in September 2001 after fleeing there following Beghal’s arrest].642

-! US Embassy and Cultural Centre plot (2001): Djamel Beghal [Convicted alongside Beghal,643 Daoudi was Beghal’s “number two” and used an apartment in Corbeil owned by Beghal];644 Nizar Trabelsi [Trabelsi attended Abu Qatada’s classes in London with Daoudi,645 and was claimed to have been the suicide bomber to be used to attack the US Embassy by Beghal].646

-! Finsbury Park Mosque: Abu Qatada [Attended classes in London before he went to Afghanistan].

! ! 632 ‘The Baker Street connection’, Independent, 6 October 2001, available at: http://www.independent.co.uk/news/world/europe/the-baker-street-connection- 9234533.html, last visited: 9 August 2016. 633 ‘Six jailed over Paris bomb plot’, BBC News, 15 March 2005. 634 Bird, S., ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003. 635 ‘Bin Laden suspect 'recruited in UK'’, BBC News, 3 October 2001. 636 ‘Six jailed over Paris bomb plot’, BBC News, 15 March 2005. 637 ‘France: European Court Orders Suspension of Deportation’, Human Rights Watch, 24 April 2008, available at: https://www.hrw.org/news/2008/04/24/france- european-court-orders-suspension-deportation, last visited: 9 August 2016. 638 Sayare, S., ‘The Ultimate Terrorist Factory’, Harper’s Magazine, January 2016, available at: http://harpers.org/archive/2016/01/the-ultimate-terrorist-factory/1/, last visited: 9 August 2016. 639 ‘Six jailed over Paris bomb plot’, BBC News, 15 March 2005. 640 ibid. 641 Bird, S., ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003. 642 ibid. 643 ‘Six jailed over Paris bomb plot’, BBC News, 15 March 2005. 644 Henley, J., ‘Paris plot reveals link to terror chief’, Guardian, 3 October 2001. 645 ‘The Baker Street connection’, Independent, 6 October 2001. 646 Barnett, A. and Burhan Wazir, ‘From football to terrorism’, Guardian, 7 October 2001.

! ! 53 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

NIZAR TRABELSI aka Qaqa Tunisi647

Role: Convicted in 2003 of plotting a suicide attack on a NATO airbase in Kleine Brogel, Belgium in 2001.648 Beghal claimed Trabelsi was to be the suicide bomber used to attack the US Embassy,649 yet it has also been suggested Trabelsi’s attack in Belgium was intended to take place at the same time as attacks on the US Embassy and Strasbourg’s Christmas markets.650

Bio: Trabelsi, a Tunisian, signed for Fortuna Dusseldorf in 1989 before being released and moving from team to team as he became increasingly involved with drugs including cocaine. After a number of criminal offences he was jailed, though it is unclear for how long. On his release, he is believed to have come under the influence of Islamist radicals in Dostrum, Germany, potentially at a mosque visited by Djamel Beghal651 and it has been claimed he was recruited by Beghal.652 French authorities say he attended classes run by Abu Qatada in London before travelling to Afghanistan,653 where he claimed to have met Osama bin Laden in 1999 and asked to be allowed to carry out a suicide attack.654 Trabelsi then appears to have returned to Belgium and was arrested in Brussels on 13 September 2001.655 When Trabelsi was arrested, the authorities discovered a machine gun and bomb-making instructions in his Brussels apartment.656 The materials for a bomb were also discovered in a Brussels restaurant.657 Trabelsi was tried alongside 23 others, 18 of whom were found guilty of crimes relating to the bomb plot, acting as al-Qaeda recruiters and forgery, and was given a ten year sentence.658 In 2006, he was indicted by a US court over his trip to Afghanistan and his extradition was requested in 2008. He was extradited to the US in October 2013659 and is currently awaiting trial.660

Foreign training/combat: Trabelsi spent time in training camps in Afghanistan in the late 1990s.661

Movements: Germany (1989); UK (1990s); Afghanistan (1999); Belgium (Unclear date of return).662

Criminal history: Trabelsi had a history of petty crime, drug abuse and violence prior to his radicalisation and spent time in prison on at least one occasion.663 Convicted in 2003 of plotting a suicide attack on a NATO airbase in Kleine Brogel, Belgium in 2001.664

! ! 647 ‘Deposition in U.S. v. Adis Medunjanin’, 29 March 2012, available at: http://apps.washingtonpost.com/g/documents/world/deposition-in-us-v-adis- medunjanin/859/, last visited: 9 August 2016, p. 68. 648 ‘Belgium foils al-Qaeda jailbreak’, BBC News, 21 December 2007, available at: http://news.bbc.co.uk/1/hi/world/europe/7155539.stm, last visited: 9 August 2016. 649 Barnett, A. and Burhan Wazir, ‘From football to terrorism’, Guardian, 7 October 2001. 650 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 227. 651 Johnson, Z., ‘Chronology: The Plots’, PBS Frontline, available at: http://www.pbs.org/wgbh/pages/frontline/shows/front/special/cron.html, last visited: 9 August 2016. 652 Bird, S., ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003. 653 ‘The Baker Street connection’, Independent, 6 October 2001. 654 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 227. 655 ‘Belgium foils al-Qaeda jailbreak’, BBC News, 21 December 2007. 656 Bird, S., ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003. 657 ‘Al Qaeda Bomb Plotter Convicted in Belgium’, The Washington Post, 1 October 2003, available at: https://www.washingtonpost.com/archive/politics/2003/10/01/al-qaeda-bomb-plotter-convicted-in-belgium/a1a562bf-dc73-435b-8c99-4e513941482a/, last visited: 9 August 2016. 658 ibid. 659 ‘Tunisian Nizar Trabelsi extradited to US on terror charges’, BBC News, 4 October 2013, available at: http://www.bbc.co.uk/news/world-us-canada-24393770, last visited: 9 August 2016. 660 ‘Court chides Belgium over terror suspect Nizar Trabelsi’, BBC News, 4 September 2014, available at: http://www.bbc.co.uk/news/world-us-canada-29062760, last visited: 9 August 2016. 661 Simcox, R. et al., ‘Islamist Terrorism: The British Connections’, The Henry Jackson Society (2011), p. 366. 662 Johnson, Z., ‘Chronology: The Plots’, PBS Frontline; and ‘The Baker Street connection’, Independent, 6 October 2001. 663 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 226; and Johnson, Z, ‘Chronology: The Plots’, PBS Frontline. 664 ‘Belgium foils al-Qaeda jailbreak’, BBC News, 21 December 2007.

! ! 54 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Known to the authorities: Unknown.

Networks and associates:

-! Al-Qaeda: Osama bin Laden [Trabelsi claimed to have met Osama bin Laden in 1999];665 Mohammed Amor Sliti, Tarek Ben Habib Maaroufi [Convicted alongside Trabelsi for running a recruitment network for al-Qaeda and trafficking in false documents.666 Trabelsi met Amor Sliti in Brussels and maintained contact while both men were in Afghanistan in 1999];667 Richard Reid [Stayed with Trabelsi,668 who has been described as Reid’s handler in the 2001 shoe bomb plot];669 Saajid Badat [Badat was sent from Afghanistan to meet Trabelsi in September 2001,670 who has been described as his handler in the 2001 shoe bomb plot];671 David Courtailler [al-Qaeda operative in Europe described as a “close contact’ of Trabelsi”].672

-! US Embassy and Cultural Centre plot (2001): Djamel Beghal, Kamel Daoudi [Trabelsi is claimed to have been recruited by Beghal673 and attended Abu Qatada’s classes in London with Beghal and Daoudi.674 Beghal claimed Trabelsi was planned to have been the suicide bomber used to attack the US Embassy];675 Jerome Courtailler and Mohammed Berkous [Dutch prosecutors claimed wiretaps showed Courtailler and Berkous had been in contact with Trabelsi to arrange a safe house in the Netherlands and passports,676 and Courtailler was convicted of involvement in 2004].

-! NATO Airbase Plot network: Abdelcrim El-Haddouti [Described as Nizar Trabelsi’s “zealous lieutenant”, El-Haddouti supplied chemical ingredients for bomb-making in the NATO airbase plot].677

-! Finsbury Park Mosque: Abu Qatada [Trabelsi attended Qatada’s study sessions in London].678

JEROME COURTAILLER

Role: Convicted in the Netherlands in 2004 for involvement in the 2001 plot to bomb the US Embassy in Paris.679

Bio: French national Courtailler680 was raised with his brother, David, in Bonneville in the French Alps. The son of a butcher, he worked for a time in the trade before his father’s business failed and his parents

! ! 665 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 227. 666 ‘Men jailed over Al Qaeda anti-NATO plot’, ABC News, 30 September 2003. 667 Shishkin, P., ‘Belgian Trial Provides Look at Terror Logistics’, The Wall Street Journal, 9 July 2003, available at: http://www.wsj.com/articles/SB105769450730773800, last visited: 9 August 2016. 668 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 229. 669 Dodd, V., ‘Former grammar school boy gets 13 years for shoe bomb plot’, Guardian, 23 April 2005, available at: https://www.theguardian.com/uk/2005/apr/23/terrorism.world1, last visited: 9 August 2016. 670 ‘Deposition in U.S. v. Adis Medunjanin’, 29 March 2012, pp. 30, 68. 671 Dodd, V., ‘Former grammar school boy gets 13 years for shoe bomb plot’, Guardian, 23 April 2005. 672 Henley, J., ‘Trial and terror’, Guardian, 18 March 2004, available at: https://www.theguardian.com/world/2004/mar/18/worlddispatch.alqaida, last visited: 9 August 2016. 673 Bird, S., ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003. 674 ‘The Baker Street connection’, Independent, 6 October 2001. 675 Barnett, A. and Burhan Wazir, ‘From football to terrorism’, Guardian, 7 October 2001. 676 ‘Suspect arrested in foiled embassy plot’, The Chicago Tribune, 23 June 2002, available at: http://articles.chicagotribune.com/2002-06- 23/news/0206230444_1_algerian-origin-adel-tobbichi-mohammed-berkous, last visited: 9 August 2016. 677 Osborn, A., ‘Bin Laden disciple jailed for 10 years in Belgium’, Guardian, 23 February 2003, available at: https://www.theguardian.com/world/2003/oct/01/alqaida.terrorism, last visited: 9 August 2016. 678 ‘The Baker Street connection’, Independent, 6 October 2001. 679 ‘Dutch court jails terror supporters’, BBC News, 21 June 2004. 680 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004.

! ! 55 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW divorced, and he became involved with alcohol and drug abuse. By 1997,681 Jerome appears to have been living in the UK with David and to have converted to Islam under the influence of Djamel Beghal, as well as praying at the Finsbury Park Mosque. He is alleged to have travelled to Afghanistan at some time in the late 1990s alongside David,682 before returning and moving to Rotterdam in the Netherlands.683 Courtailler was arrested on 13 September 2001684 in Rotterdam and found to be in possession of fake passports, extremist material, and bomb-making information. He was believed to have been connected to the supplying of fake documentation to those involved in the assassination of Ahmad Shah Massoud in 2001 and had been recorded by Dutch intelligence discussing the provision of fake documents with Nizar Trabelsi.685 In 2002, he was acquitted of involvement in the US Embassy bomb plot and was released, moving to St.-Pierre-en-Faucigny in southern France. He was then convicted on appeal in absentia in June 2004 and sentenced to six years, giving himself up on 24 June.686

Foreign training/combat: Trained in Afghanistan.687

Movements: UK [1997]; Afghanistan (late 1990s); Netherlands (Unclear); France (2002).688

Criminal history: Involved with drug abuse prior to his radicalisation.689 Convicted in 2004 for involvement in the 2001 plot to bomb the US Embassy in Paris.690

Known to the authorities: Came under surveillance from Dutch intelligence on moving to Rotterdam.691

Networks and associates:

-! Al-Qaeda: David Courtailler [Brother; the two men are believed to have lived in Brixton with Zacarias Moussaoui and travelled to Afghanistan together]; Zacarias Moussaoui [Shared an apartment with Courtailler in Brixton]692; Omar Altimimi [Altimimi stayed at an apartment in Rotterdam in which Courtailler had also lived]693 Richard Reid [Courtailler met Reid in the Netherlands].694

-! US Embassy and Cultural Centre plot (2001): Djamel Beghal695 [Courtailler is believed to have been converted to Islam by Beghal].696 Nizar Trabelsi [Dutch intelligence intercepted phone calls between Courtailler and Trabelsi discussing the provision of fake documentation];697 Abdelghani

! ! 681 Rotella, S. and David Zucchino, ‘Embassy plot offers insight into terrorist recruitment, training’, The Chicago Tribune, 22 October 2001, available at: http://www.chicagotribune.com/news/nationworld/sns-worldtrade-embassyplot-lat-story.html, last visited: 9 August 2016. 682 Barnett, A. et al., ‘UK student's 'key terror role'’, Guardian, 28 October 2001, available at: https://www.theguardian.com/world/2001/oct/28/terrorism.uk; and Burke, J., ‘AK-47 training held at London mosque’, Guardian, 17 February 2002, available at: https://www.theguardian.com/uk/2002/feb/17/terrorism.religion. Both last visited: 9 August 2016. 683 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 684 ‘Dutch court jails terror supporters’, BBC News, 21 June 2004. 685 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004; and ‘Suspect arrested in foiled embassy plot’, The Chicago Tribune, 23 June 2002. 686 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 687 Barnett, A. et al., ‘UK student's 'key terror role'’, Guardian, 28 October 2001. 688 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004; and Rotella, S. and David Zucchino, ‘Embassy plot offers insight into terrorist recruitment, training’, The Chicago Tribune, 22 October 2001. 689 Rotella, S. and David Zucchino, ‘Embassy plot offers insight into terrorist recruitment, training’, The Chicago Tribune, 22 October 2001. 690 ‘Dutch court jails terror supporters’, BBC News, 21 June 2004. 691 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 692 Barnett, A. et al., ‘UK student's 'key terror role'’, Guardian, 28 October 2001. 693 Pantucci, R., “We Love Death as You Love Life”: Britain’s Suburban Terrorists, (London, 2015), pp. 178-9. 694 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 695 ‘Sentences of up to six years sought for Dutch terrorism suspects’, Agence France Presse, 4 December 2002. 696 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 697 ‘Suspect arrested in foiled embassy plot’, The Chicago Tribune, 23 June 2002.

! ! 56 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Rabia, Adel Tobbichi [Tried and acquitted alongside Courtailler in 2002.698 Both convicted alongside Courtailler in 2004].699

-! Finsbury Park Mosque: Abu Qatada [Courtailler met Qatada while living in London].700

2.2 Rotterdam Cell: Accomplices

ABDELGHANI RABIA

Role: Convicted in the Netherlands in 2004 for involvement in the 2001 plot to bomb the US Embassy in Paris.

Bio: An Algerian national, Rabia was arrested in the days after the 9/11 attacks alongside Jerome Courtailler.701 Accused of providing fake travel documents and credit cards to militants intending to carry out the attack on the US Embassy, he was acquitted by a Rotterdam court in 2002 after evidence was ruled inadmissible.702 Following this, he is thought to have been deported to Algeria. In June 2004, he was convicted in absentia after an appeal and was sentenced to four years in prison,703 and an arrest warrant was issued.704

Foreign training/combat: Unknown.

Movements: Unknown.

Criminal history: Convicted in the Netherlands in 2004 for involvement in the 2001 plot to bomb the US Embassy in Paris.

Known to the authorities: Unknown.

Networks and associates:

-! US Embassy and Cultural Centre plot (2001): Jerome Courtailler, Adel Tobbichi [Tried and acquitted alongside the two men in 2002705 and convicted alongside them in 2004].706

AMINE MEZBAR aka Adel Tobbichi707

Role: Acquitted of involvement in the US Embassy bomb plot, but convicted alongside other members of the plot in June 2004 for belonging to a criminal group that produced false passports.708

! ! 698 ‘Dutch prsecutors appeal acquittal of Islamic militants in bomb plot’, Agence France Presse, 19 December 2002. 699 ‘Dutch court jails two for terror links’, Agence France Presse, 21 June 2004. 700 Simcox, R. et al., ‘Islamist Terrorism: The British Connections’, The Henry Jackson Society (2011), p. 364. 701 ‘Dutch court jails terror supporters’, BBC News, 21 June 2004. 702 ‘Four men acquitted in first Dutch terrorism trial’, Associated Press International, 18 December 2002. 703 ‘Dutch court jails two for terror links’, Agence France Presse, 21 June 2004. 704 ‘Dutch appeal court jails embassy bomb plotters’, Daily Telegraph, 22 June 2004. 705 ‘Dutch prosecutors appeal acquittal of Islamic militants in bomb plot’, Agence France Presse, 19 December 2002. 706 ‘Dutch court jails two for terror links’, Agence France Presse, 21 June 2004. 707 ‘Paris bomb plot acquittal appealed’, Toronto Star, 20 December 2002. 708 ‘Dutch court jails two for terror links’, Agence France Presse, 21 June 2004.

! ! 57 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Bio: An Algerian who was given permanent residency in Canada under the name Adel Tobbichi in 2000,709 Mezbar had lived in since April of that year.710 He was extradited to the Netherlands in 2002 to stand trial alongside Courtailler and Rabia over alleged involvement in the US Embassy bomb plot.711 Mezbar was accused of doctoring travel documents to aid those involved in the plot to travel across European borders712 and his fingerprints were found at the site of passport thefts across Netherlands in 1997 and 1999.713 He was acquitted in 2002714 and then convicted on appeal and sentenced to 12 months “for belonging to a criminal group that produced false passports”.715

Foreign training/combat: Unknown.

Movements: Unknown.

Criminal history: Convicted alongside members of the US Embassy plot in June 2004 for belonging to a criminal group that produced false passports.716

Known to the authorities: Unknown.

Networks and associates:

-! US Embassy and Cultural Centre plot (2001): Jerome Courtailler, Adelghani Rabia [Tried and acquitted alongside the two men in 2002717 and convicted alongside them in 2004].718

BRAHIM BENMERZOUGA

Role: Financier. 719 Arrested in connection with the US Embassy bomb plot,720 Benmerzouga was convicted of funding al-Qaeda through counterfeit credit cards from almost 200 stolen bank details.721

Bio: Benmerzouga lived in the UK illegally following his entry from Algeria in 1997 from Algeria, where he is alleged to have been a member of the Groupe Islamique Armé (GIA)722 and used fake French passports to gain access to services including bank accounts and benefits. He lived in Leicester and worked at a sandwich factory in nearby Corby.723 Using at least three fake passports, Benmerzouga worked alongside Baghdad Meziane to develop a vast credit card fraud, as well as purchasing military equipment. He was visited by al-Qaeda members involved in the US Embassy bomb plot including Djamel Beghal and Kamel Daoudi, and facilitated Daoudi’s travel to Afghanistan.724 After Beghal’s arrest in July 2001,

! ! 709 ‘Paris bomb plot acquittal appealed’, Toronto Star, 20 December 2002. 710 Krauss, C., ‘World Briefing | Americas: Canada: Terror Suspect Won't Fight Extradition’, International New York Times, 27 June 2002, available at: http://www.nytimes.com/2002/06/27/world/world-briefing-americas-canada-terror-suspect-won-t-fight-extradition.html, last visited: 9 August 2016. 711 ‘Paris bomb plot acquittal appealed’, Toronto Star, 20 December 2002. 712 ‘Canada and Terrorism’, ADL, January 2004, available at: http://archive.adl.org/terror/tu/tu_0401_canada.html#.Vzs1OY-cHug, last visited: 9 August 2016. 713 ‘Dutch Arrest Eight on Suspicion of Fund Raising, Recruiting for Al Qaeda’, Fox News, 2 September 2002, available at: http://www.foxnews.com/story/2002/09/02/dutch-arrest-eight-on-suspicion-fund-raising-recruiting-for-al-qaeda.html, last visited: 9 August 2016. 714 ‘Dutch prosecutors appeal acquittal of Islamic militants in bomb plot’, Agence France Presse, 19 December 2002. 715 ‘Dutch court jails two for terror links’, Agence France Presse, 21 June 2004. 716 ibid. 717 ‘Dutch prosecutors appeal acquittal of Islamic militants in bomb plot’, Agence France Presse, 19 December 2002. 718 ‘Dutch court jails two for terror links’, Agence France Presse, 21 June 2004. 719 Count 1, private correspondence, Leicester Crown Court, 10 June 2009. 720 ‘A nation challenged: London; British charge 2 Algerians with belonging to al-Qaeda’, The New York Times, 18 January 2002, available at: www.nytimes.com/2002/01/18/world/a-nation-challenged-london-british-charge-2-algerians-with-belonging-to-al-qaeda.html, last visited: 9 August 2016. 721 ‘Terror-link pair jailed’, BBC News, 1 April 2003, available at: http://news.bbc.co.uk/1/hi/england/2887953.stm, last visited: 9 August 2016. 722 Mendick, R., ‘Leicester terrorist cell that laid seeds of Paris atrocity’, The Telegraph, 17 January 2015. 723 ‘Quiet lives hid a quest to recruit for global jihad’, The Telegraph, 2 April 2003, available at: http://www.telegraph.co.uk/news/uknews/1426340/Quiet-lives-hid-a- quest-to-recruit-for-global-jihad.html, last visited: 9 August 2016. 724 ‘Britain's first al Qaida terrorists jailed’, Daily Mail Online.

! ! 58 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Daoudi fled to Leicester and contacted Brahim Benmerzouga, who was put under surveillance. On 25 September, he was arrested alongside Daoudi and Meziane,725 with police finding forged documents and at least “60 films promoting suicide bombings and martyrdom, including 19 copies of a video of Osama bin Laden”. He was convicted of conspiracy to defraud and entering into a funding arrangement for the purpose of terrorism in April 2003 and jailed for 11 years.726 He was deported to Algeria on 26 January 2010.727

Foreign training/combat: Unknown – believed to have been a member of the GIA in Algeria.

Movements: UK (1997).728

Criminal history: Arrested in December 1999 for opening a bank account with a fake passport and disappeared after being released on bail.729 Convicted of conspiracy to defraud and entering into a funding arrangement for the purpose of terrorism in April 2003.730

Known to the authorities: Not in relation to terrorism until he was put under surveillance following Kamel Daoudi’s arrival in the UK in 2001.731

Networks and associates:

-! US Embassy and Cultural Centre plot (2001): Baghdad Meziane [Convicted together in April 2003];732 Kamel Daoudi [Arrested together after Daoudi fled to his house following Beghal’s arrest, Benmerzouga had helped Daoudi travel to Afghanistan];733 Djamel Beghal [Beghal visited Benmerzouga in Leicester en route to train in Afghanistan].734

BAGHDAD MEZIANE

Role: Financier. 735 Arrested in connection with the US Embassy bomb plot,736 Meziane was convicted of funding al-Qaeda through counterfeit credit cards from almost 200 stolen bank details.737

Bio: Like Benmerzouga, Meziane lived in the UK illegally following his entry from Algeria in 1997, and is also alleged to have been a member of the GIA.738 He claimed asylum in 1999, having previously done so in Germany739 and settled in Spinney Hill, Leicester, working at the same sandwich factory as Benmerzouga740 and possessed a passport in the name of Cyril Jacob which he had used to get a job and gain benefits. He worked alongside Brahim Benmerzouga to run a fraud and forgery operation which raised hundreds of thousands of pounds for al-Qaeda and provided other extremists with false identities.

! ! 725 Bird, S., ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003. 726 Count 1, private correspondence, Leicester Crown Court, 10 June 2009; and ‘Terror-link pair jailed’, BBC News, 1 April 2003. 727 ‘T v. Secretary of State for the Home Department, SC/31/2005’, United Kingdom: Special Immigration Appeals Commission (SIAC), 22 March 2010, para. 17, available at: http://www.refworld.org/docid/4bab727e2.html, last visited: 9 August2016. 728 Mendick, R., ‘Leicester terrorist cell that laid seeds of Paris atrocity’, The Telegraph, 17 January 2015. 729 ‘Algerian pair ‘plotted to wage holy war’, BBC News, 5 February 2005, available at: http://news.bbc.co.uk/1/hi/uk/2729241.stm, last visited: 9 August 2016. 730 Count 1, private correspondence, Leicester Crown Court, 10 June 2009. 731 Bird, S., ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003. 732 Count 1, private correspondence, Leicester Crown Court, 10 June 2009. 733 Bird, S., ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003. 734 ‘Convicted terror leader with link to Paris whom we cannot deport’, The Telegraph, 17 January 2015. 735 Count 1, private correspondence, Leicester Crown Court, 10 June 2009. 736 ‘A nation challenged: London; British charge 2 Algerians with belonging to al-Qaeda’, The New York Times, 18 January 2002. 737 ‘Terror-link pair jailed’, BBC News, 1 April 2003. 738 Mendick, R., ‘Leicester terrorist cell that laid seeds of Paris atrocity’, The Telegraph, 17 January 2015. 739 ‘Algerian pair ‘plotted to wage holy war’, BBC News, 5 February 2005. 740 ‘Quiet lives hid a quest to recruit for global jihad’, The Telegraph, 2 April 2003.

! ! 59 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

He was visited by al-Qaeda members involved in the US Embassy bomb plot including Djamel Beghal and Kamel Daoudi, and is thought to have provided Daoudi with a false passport allowing him to travel to Afghanistan.741 He was placed under surveillance after Daoudi fled to Leicester following Beghal’s arrest and was arrested alongside Daoudi and Benmerzouga on 25 September 2001.742 Police found a “forger’s kit” and material relating to the 9/11 attacks in his house.743 He was convicted of conspiracy to defraud and entering into a funding arrangement for the purpose of terrorism in April 2003 and jailed for 11 years.744 He was released in 2009 and has been successfully fighting against deportation to Algeria since.745

Foreign training/combat: Unknown – believed to have been a member of the GIA in Algeria.746

Movements: Germany (Unclear); UK (1997).747

Criminal history: Convicted of conspiracy to defraud and entering into a funding arrangement for the purpose of terrorism in April 2003.748

Known to the authorities: Not in relation to terrorism until he was put under surveillance following Kamel Daoudi’s arrival in the UK in 2001.749

Networks and associates:

-! US Embassy and Cultural Centre plot (2001): Brahim Benmerzouga [Convicted together in April 2003];750 Kamel Daoudi [Arrested together after Daoudi fled to the UK following Beghal’s arrest, Meziane had helped Daoudi travel to Afghanistan];751 Djamel Beghal [Beghal visited Benmerzouga in Leicester en route to train in Afghanistan752 and Meziane had known Beghal when he had lived in Leicester]. 753

-! Finsbury Park Mosque: Abu Qatada [Meziane has been described as a “follower” of Qatada’s and the two are believed to have been in “daily contact” by telephone].754

MOHAMMED BERKOUS: Rotterdam prosecutors linked Algerian Berkous to Jerome Courtailler and Nizar Trabelsi. Along with Courtailler, Berkous was claimed to have spoken to Trabelsi discussing the provision of fake documentation.755

! ! 741 ‘Britain’s first al-Qaeda terrorists jailed’, Daily Mail, 1 April 2003. 742 Bird, S., ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003. 743 ‘Britain’s first al-Qaeda terrorists jailed’, Daily Mail, 1 April 2003. 744 Count 1, private correspondence, Leicester Crown Court, 10 June 2009; and ‘Terror-link pair jailed’, BBC News, 1 April 2003. 745 ‘Convicted terror leader with link to Paris whom we cannot deport’, The Telegraph, 17 January 2015, available at: http://www.telegraph.co.uk/news/uknews/terrorism-in-the-uk/11353243/Convicted-terror-leader-with-link-to-Paris-who-we-cannot-deport.html, last visited: 9 August 2016. 746 Mendick, R., ‘Leicester terrorist cell that laid seeds of Paris atrocity’, The Telegraph, 17 January 2015. 747 ‘Algerian pair ‘plotted to wage holy war’, BBC News, 5 February 2005. 748 Count 1, private correspondence, Leicester Crown Court, 10 June 2009. 749 Bird, S., ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003. 750 Count 1, private correspondence, Leicester Crown Court, 10 June 2009. 751 Bird, S., ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003. 752 ‘Terrorist Pair Helped Raise A Fortune’, Sky News, 1 April 2003. 753 Bird, S, ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003. 754 'Leicester terrorist cell that laid seeds of Paris atrocity', Daily Telegraph, 17 January 2015. 755 ‘Suspect arrested in foiled embassy plot’, The Chicago Tribune, 23 June 2002. ! ! 60 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

2.3 The ‘Frankfurt Cell’: Strasbourg Market Plot

MOHAMMED BENSAKHRIA aka Mohammed Ben Aissa756

Role: One of the leaders of the ‘Frankfurt cell’ which planned a bomb attack on Strasbourg Christmas market.757

Bio: An Algerian national who has been described as “passing himself off as a businessman” in Germany,758 Bensakhria is alleged to have been one of Osama bin Laden’s representatives in Europe.759 Following the arrest of four of his co-conspirators in Frankfurt in December 2000,760 Bensakhria fled to Spain, where he disguised himself as a “poor North African migrant worker”,’761 and used the aliases Mohammed ben Aissa and Meliani.762 He lived in a van in North African immigrant neighbourhood in Alicante, and was arrested by Spanish police in June 2001 on the basis of an arrest warrant issued by French authorities.763 He was extradited to France and convicted of “criminal association with a terrorist enterprise” and sentenced to ten years in December 2004.

Foreign training/combat: The Strasbourg market plotters were alleged to have learned bomb-making techniques in Afghanistan, but is unclear which individuals attended training camps there.764

Movements: Germany (Unclear); Spain (2000).765

Criminal history: Bensakhria is believed to have had a history of petty crime including theft and assault, fraud and drug dealing while in Germany.766 Convicted of “criminal association with a terrorist enterprise” in December 2004.767

Known to the authorities: Wanted by French authorities following his escape in December 2000, as well as by Interpol and US law enforcement agencies.768

Networks and associates:

-! The ‘Frankfurt Cell’: Slimane Khalfaoui Rabah Kadre, Yacine Aknouche, Lazhar Ben Mohammed Tlili, Abdelkader Tcharek, Meroine Berrahal, Laurent Mourad Djoumakh, Samir Korchi, Nicolas Belloni [Convicted alongside as members of the ‘Frankfurt cell’ in December 2004, Bensakhria was in direct contact with Khalfaoui and Aknouche];769 Fouhad Sabour, Lamine

! ! 756 ‘Bin Laden associate arrested in Spain’, CNN, 22 June 2001, available at: http://edition.cnn.com/2001/WORLD/europe/06/22/spain.arrest/, last visited: 9 August 2016. 757 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004, available at: http://news.bbc.co.uk/1/hi/4102023.stm, last visited: 9 August 2016. 758 Tremlett, G., ‘Spanish police arrest Bin Laden suspect’, Guardian, 23 June 2001, available at: https://www.theguardian.com/world/2001/jun/23/gilestremlett, last visited: 9 August 2016. 759 ‘Threats and responses: Militants; Spain arrests 16 suspected of ties to al-Qaeda’, The New York Times, 25 January 2003. 760 ‘Bin Laden associate arrested in Spain’, CNN, 22 June 2001; and ‘Algerian linked to bin Laden to be jailed pending extradition to France’ Associated Press International, 23 June 2001. 761 Tremlett, G., ‘Spanish police arrest Bin Laden suspect’, Guardian, 23 June 2001. 762 ‘Bin Laden associate arrested in Spain’, CNN, 22 June 2001. 763 ‘Algerian linked to bin Laden to be jailed pending extradition to France’, Associated Press International, 23 June 2001. 764 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 765 Tremlett, G., ‘Spanish police arrest Bin Laden suspect’, Guardian, 23 June 2001. 766 Finn, P., ‘Five Linked to Al Qaeda Face Trial in Germany’, The Washington Post, 15 April 2002, available at: https://www.washingtonpost.com/archive/politics/2002/04/15/five-linked-to-al-qaeda-face-trial-in-germany/4b7c7dee-6dfd-4ed3-abba-bf474b58db74/, last visited: 9 August 2016. 767 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 768 ‘Algerian linked to bin Laden to be jailed pending extradition to France’, Associated Press International, 23 June 2001. 769 ‘French court convicts group in Strasbourg Christmas market bomb’, Agence France Presse, 16 December 2004 and ‘Brothers-in-law, one considered key player, investigated in French Strasbourg bomb plot’, Associated Press International, 29 November 2002.

! ! 61 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Maroni, Salim Boukhari, Aerobi Beandali [‘Frankfurt cell’ members convicted in March 2003, Bensakhria had fled Germany prior to their arrest].770

-! Al-Qaeda: Said Arif [Bensakhria was reportedly in contact with Arif when the latter moved to Germany after his time with al-Qaeda in Afghanistan].771

SLIMANE KHALFAOUI

Role: One of the leaders of the ‘Frankfurt cell’ which planned a bomb attack on Strasbourg Christmas market.772

Bio: A joint French-Algerian national and significant member of al-Qaeda, Khalfaoui had travelled to fight in Bosnia and spent time in Afghanistan and London before he settled in France. He was arrested in November 2002 after a raid at his sister’s apartment in Montefermeil, Paris, from which he attempted to escape. Stolen and falsified passports were discovered in the apartment and Nicolas Belloni, his brother- in-law, was also arrested during the same raid.773 Khalfaoui was convicted of “criminal association with a terrorist enterprise” in December 2004 and sentenced to ten years in prison.774

Foreign training/combat: According to the French authorities, Khalfaoui admitted to having fought in Bosnia and allegedly spent seven months in Afghanistan in 1998.

Movements: Bosnia (Unclear); Afghanistan (1998); UK (Unclear); France (Unclear).

Criminal history: Unknown.

Known to the authorities: Authorities had been looking for Khalfaoui in connection to French network recruiting fighters for training camps in Afghanistan and Pakistan,775 and he had “been on wanted lists since 1996”.776

Networks and associates:

-! The ‘Frankfurt Cell’: Mohamed Bensakhria, Rabah Kadre, Yacine Aknouche, Lazhar Ben Mohammed Tlili, Abdelkader Tcharek, Meroine Berrahal, Laurent Mourad Djoumakh, Samir Korchi, Nicolas Belloni [Convicted alongside as members of the ‘Frankfurt cell’ in December 2004, Khalfaoui was in direct contact with Bensakhria and Aknouche and was arrested at Belloni’s house, which had also received calls from Kadre];777 Fouhad Sabour, Lamine Maroni, Salim Boukhari, Aerobi Beandali [‘Frankfurt cell’ members convicted in March 2003].778

! ! 770 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003, available at: http://www.thetimes.co.uk/tto/news/world/article1970620.ece?acs_cjd=true; and Tremlett, G., ‘Spanish police arrest Bin Laden suspect’, Guardian, 23 June 2001. Both last visited: 9 August 2016. 771 Hafez, M., ‘Suicide Bombers in Iraq’, United States of Peace Press, 2007, available at: https://books.google.co.uk/books?id=0I8m2CnuVooC&pg=PA204&lpg=PA204&dq=said+arif+mohammed+bensakhria&source=bl&ots=- wUVgid3u2&sig=HbOddzjNhZylWwNvb- PEq0t4Uho&hl=en&sa=X&ved=0ahUKEwjv_KHI8pjNAhWkKMAKHbEfDCsQ6AEIJDAB#v=onepage&q=said%20arif%20mohammed%20bensakhria&f=false, last visited: 9 August 2016, p. 204. 772 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 773 ‘Brothers-in-law, one considered a key player, investigated in French Strasbourg bomb plot’, Associated Press International, 29 November 2002. 774 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 775 ‘Brothers-in-law, one considered key player, investigated in French Strasbourg bomb plot’, Associated Press International, 29 November 2002. 776 ‘Al-Qaeda member among six held in Paris over cathedral plot’, Agence France Presse, 25 November 2002. 777 ‘French court convicts group in Strasbourg Christmas market bomb’, Agence France Presse, 16 December 2004 and ‘Brothers-in-law, one considered key player, investigated in French Strasbourg bomb plot’, Associated Press International, 29 November 2002. 778 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003; and Tremlett, G, ‘Spanish police arrest Bin Laden suspect’, Guardian, 23 June 2001.

! ! 62 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

-! Abu Doha network: Abu Doha [Khalfaoui is claimed to have had “indirect contact” with Abu Doha].779

-! Al-Qaeda: [Ressam plotted to bomb LAX Airport in Los Angeles780 and had “crossed paths” with Khalfaoui in Afghanistan].781

RABAH KADRE

Role: Convicted of involvement in the plot to bomb Strasbourg Christmas market.782

Bio: An Algerian national based in the UK,783 Kadre helped to establish Abu Doha’s European network of extremists. He was regarded as his “second in command”, and had been spotted inside Finsbury Park Mosque in 1998. Following Doha’s arrest in February 2001, he is believed to have taken over much of Doha’s role as leader of the network – having been arrested himself and then released, disappearing for 18 months.784 In November 2002, Kadre was arrested again, this time suspected of involvement with a plot to carry out a ricin attack and was charged in February 2003,785 while a warrant for his arrest in relation to the Strasbourg plot had been issued by the French authorities the same month he was arrested.786 Kadre was convicted in the UK of owning a false passport after the ricin-related charges were dropped,787 and was then convicted in absentia by a French court of “of criminal association with a terrorist enterprise” in relation to the Strasbourg plot and given a six year prison term.788 He was then held in the UK while he awaited extradition to France, and was transferred in June 2006. He was released in April 2008 and deported to Algeria.789

Foreign training/combat: Unknown. Is alleged to have been a member of the GSPC.790

Movements: UK (Unclear).

Criminal history: Convicted of owning a false passport (2003);791 Convicted of “of criminal association with a terrorist enterprise” in 2004.792

Known to the authorities: Identified in 1998 by intelligence agents in Finsbury Park Mosque and monitored until his arrest in 2002.793

! ! 779 ‘Brothers-in-law, one considered key player, investigated in French Strasbourg bomb plot’, Associated Press International, 29 November 2002. 780 ‘Ahmed Ressam’s Millennium Plot’, Frontline, available at: http://www.pbs.org/wgbh/pages/frontline/shows/trail/inside/cron.html, last visited: 9 August 2016. 781 ‘Brothers-in-law, one considered key player, investigated in French Strasbourg bomb plot’, Associated Press International, 29 November 2002. 782 Cosgrove-Mather, B., ‘France Convicts Islamic Militants’, CBS News, 16 December 2004, available at: http://www.cbsnews.com/news/france-convicts-islamic- militants/, last visited: 9 August 2016. 783 Burrell, I. and John Lichfield, ‘Warning signs of Algerian terror cells as early as 1994’, Independent, 16 January 2003, available at: http://www.independent.co.uk/news/uk/crime/warning-signs-of-algerian-terror-cells-as-early-as-1994-124430.html, last visited: 9 August 2016. 784 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), pp. 142, 240-1. 785 ‘Men on ricin charges’, BBC News, 26 February 2003, available at: http://news.bbc.co.uk/1/hi/uk/2801309.stm, last visited: 9 August 2016. 786 ‘France moves for UK terror suspect’, BBC News, 30 November 2002, available at: http://news.bbc.co.uk/1/hi/england/2530773.stm, last visited: 9 August 2016. 787 ‘Cageprisoners Submission- Home Office Extradition Review’, Cageprisoners, undated, available at: https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/117188/public-consultation-4.pdf, last visited: 9 August 2016. 788 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 789 ‘Cageprisoners Submission- Home Office Extradition Review’, Cageprisoners, undated. 790 Stuart, H. et al., Islamist Terrorism: The British Connections, 2nd edition (The Henry Jackson Society, 2011), pp. 445-6 791 ‘Cageprisoners Submission- Home Office Extradition Review’, Cageprisoners, undated. 792 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 793 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), pp. 240-1.

! ! 63 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Known associates and networks:

-! Ricin plot (2002): Kamel Bourgass, Mohammed Meguerba [Bourgass was convicted in connection with the ricin plot while Merguba was tried in Algeria after skipping bail.794 Both are alleged to have been associates of Kadre through the Finsbury Park Mosque].795

-! The ‘Frankfurt Cell’: Mohamed Bensakhria, Slimane Khalfaoui, Yacine Aknouche, Lazhar Ben Mohammed Tlili, Abdelkader Tcharek, Merouane Berrahal, Laurent Mourad Djoumakh, Samir Korchi, Nicolas Belloni [Convicted alongside as members of the ‘Frankfurt cell’ in December 2004, Kadre had called Belloni’s home, where Khalfaoui also lived];796 Fouhad Sabour, Lamine Maroni, Salim Boukhari, Aeroubi Beandali [‘Frankfurt cell’ members convicted in March 2003.797 Kadre’s fingerprints were found in Beandali’s home];798 Merouane Benahmed [Reported to have been in contact with Kadre].799

-! Abu Doha network: Abu Doha [Kadre helped establish Abu Doha’s European network of extremists and is believed to have taken over as leader of the network].800

-! Al-Qaeda/GIA: Said Arif, Mabrouk Echiker [GIA fighters associated with al-Qaeda. Kadre helped both men leave Europe following the arrest of Abu Doha].801

YACINE AKHNOUCHE

Role: Organising al-Qaeda cells in France and Germany.802 Convicted of involvement in the plot to bomb Strasbourg Christmas market.803

Bio: An Algerian and former chemistry student, Aknouche appears to have travelled to Germany in the early 1990s, before using a false passport to flee to England following an arrest for credit card fraud.804 He continued to be involved with similar frauds while splitting his time between London and Paris, something he said was approved by preachers at Finsbury Park Mosque,805 where he is believed to have spent time from at least 1996 onwards. He is thought to have been chosen to travel to Afghanistan by Abu Doha sometime after this,806 using a fake French passport to travel to the border between Afghanistan and Pakistan. He claims to have met al-Qaeda-linked militants including Ahmed Ressam and Zacarias Moussaoui while there between at least 1998 and 2000 before returning to France, where he was arrested

! ! 794 ‘Killer jailed over poison plot’, BBC News, 13 April 2005, available at: http://news.bbc.co.uk/1/hi/uk/4433709.stm, last visited: 9 August 2016. 795 Stuart, H. et al., Islamist Terrorism: The British Connections, 2nd edition (The Henry Jackson Society, 2011), p. 445-6. 796 ‘French court convicts group in Strasbourg Christmas market bomb’, Agence France Presse, 16 December 2004; and ‘Brothers-in-law, one considered key player, investigated in French Strasbourg bomb plot’, Associated Press International, 29 November 2002. 797 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003; and Tremlett, G, ‘Spanish police arrest Bin Laden suspect’, Guardian, 23 June 2001. 798 Simcox, R. et al., ‘Islamist Terrorism: The British Connections’, The Henry Jackson Society (2011), p. 446. 799 Willsher, K., ‘Chechen terror group linked to Paris ricin’, The Telegraph, 23 March 2003, available at: http://www.telegraph.co.uk/news/worldnews/europe/france/1425416/Chechen-terror-group-linked-to-Paris-ricin.html, last visited: 9 August 2016. 800 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), pp. 142, 240-241. 801 Botha, A., ‘Terrorism in the Maghreb: The transnationalisation of domestic terrorism’, available at: https://www.issafrica.org/uploads/MONO144CHAP5.PDF, last visited: 9 August 2016, p. 162. 802 Burke, J., ‘Al-Qaeda trained hundreds from UK’, Guardian, 24 February 2002, available at: http://www.theguardian.com/uk/2002/feb/24/religion.september111, last visited: 9 August 2016. 803 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 804 Burke, J., ‘Al-Qaeda trained hundreds from UK’, Guardian, 24 February 2002. 805 Ulrich, A. et al., ‘The Changing Threat of Al-Qaida: How Widespread is Terrorism in Europe?’, Aus Dem Spiegel, 11 July 2005, available at: http://www.spiegel.de/international/spiegel/the-changing-threat-of-al-qaida-how-widespread-is-terrorism-in-europe-a-364661-3.html, last visited: 9 August 2016. 806 Botha, A., ‘Terrorism in the Maghreb: The transnationalisation of domestic terrorism’.

! ! 64 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW in Paris as part of the investigation into the Strasbourg plot.807 Convicted of “criminal association with a terrorist enterprise” in December 2004 and sentenced to eight years in prison.808

Foreign training/combat: Trained at an al-Qaeda camp in Afghanistan809 and has been reported to have spent up to four years in the country.810

Movements: Germany (Unclear); UK (Unclear); France (Unclear, 2000); Afghanistan (1996/8-2000).811

Criminal history: Arrested previously in Germany for credit card fraud812 and appears to have been involved in similar activity in the UK.813 Convicted of “criminal association with a terrorist enterprise” in December 2004.814

Known to the authorities: Unclear

Networks and associates:

-! The ‘Frankfurt Cell’: Mohamed Bensakhria, Slimane Khalfaoui, Rabah Kadre, Lazhar Ben Mohammed Tlili, Abdelkader Tcharek, Meroine Berrahal, Laurent Mourad Djoumakh, Samir Korchi, Nicolas Belloni [Convicted alongside as members of the ‘Frankfurt cell’ in December 2004, Aknouche was in direct contact with Bensakhria and Khalfaoui];815 Fouhad Sabour, Lamine Maroni, Salim Boukhari, Aerobi Beandali [‘Frankfurt cell’ members convicted in March 2003].816

-! Abu Doha Network: Abu Doha [Aknouche and Doha are believed to have worked together, and he named Doha as Osama bin Laden’s “UK recruiter”.

-! Al-Qaeda: Osama bin Laden [Aknouche claimed he had met bin Laden several times while in Afghanistan]; Abu Zubaydah [Alleged to have known Zubaydah, likely while in Afghanistan); Zacarias Moussaoui, Richard Reid, Ahmed Ressam [Aknouche confessed to having met the three men while in Afghanistan).817

FOUHAD SABOUR

Role: Convicted of involvement in the plot to bomb Strasbourg Christmas market. Gathered bomb- making material and carried out reconnaissance.818

Bio: Described as a French citizen of Algerian origin, Sabour is believed to have moved to London in 2000 after living in both Bosnia and Pakistan,819 and having spent two years between 1998 and 2000 in

! ! 807 ‘French find a 'goldmine' of information’, News 24 Archives, 10 February 2002, available at: http://www.news24.com/xArchive/Archive/French-find-a-goldmine- of-information-20020210, last visited: 9 August 2016. 808 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 809 Ulrich, A. et al., ‘The Changing Threat of Al-Qaida: How Widespread is Terrorism in Europe?’, Aus Dem Spiegel, 11 July 2005. 810 ‘London al-Qaeda suspect will face extradition’, Sunday Times, 10 March 2002. 811 Multiple sources, see biographical section. 812 Burke, J., ‘Al-Qaeda trained hundreds from UK’, Guardian, 24 February 2002. 813 Ulrich, A. et al., ‘The Changing Threat of Al-Qaida: How Widespread is Terrorism in Europe?’, Aus Dem Spiegel, 11 July 2005. 814 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 815 ‘French court convicts group in Strasbourg Christmas market bomb’, Agence France Presse, 16 December 2004. 816 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003; and Tremlett, G, ‘Spanish police arrest Bin Laden suspect’, Guardian, 23 June 2001. 817 Burke, J., ‘Al-Qaeda trained hundreds from UK’, Guardian, 24 February 2002; and ‘French find a 'goldmine' of information’, News 24 Archives, 10 February 2002. 818 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003. 819 Finn, P., ‘Five Linked to Al Qaeda Face Trial in Germany’, The Washington Post, 15 April 2002.

! ! 65 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Afghanistan.820 It is unclear where he was based prior to this, but he had been convicted in absentia in 1995 by a French court for involvement in a series of bombings in Paris, so is likely to have spent some time in France prior to 1995. In October 2000, he moved on to Frankfurt, where he met up with Lamine Maroni, Salim Boukhari, Aeroubi Beandali and Mohamed Bensakhria.821 During December, he and the other men purchased chemicals used for bomb-making and filmed a reconnaissance tape, as well as contacting Abu Doha to request additional funds. After the phone call, and surveillance which suggested the men were moving weapons, they were arrested on 26 December 2000, with the police finding explosives, firearms, fake and stolen IDs and a significant haul of hashish.822 Charged with conspiracy to murder, Sabour was convicted in March 2003 and sentenced to 11 years and six months in prison.823

Foreign training/combat: Sabour spent two years in Afghanistan between 1998 and 2000 and was taught how to build bombs.

Movements: Bosnia (Unclear); Pakistan (Unclear); Afghanistan (1998-2000); London (July 2000); Germany (December 2000).

Criminal history: Convicted in absentia in 1995 for bombings in France.824 Convicted of conspiracy to murder in March 2003.825

Known to the authorities: Sabour appears to have come to the attention of the authorities after French intelligence alerted German authorities to the plot, after which the group came under surveillance.826

Networks and associates:

-! The ‘Frankfurt Cell’: Lamine Maroni, Salim Boukhari, Aeroubi Beandali [Convicted alongside as members of the ‘Frankfurt cell’ in March 2003];827 Mohamed Bensakhria, Slimane Khalfaoui, Rabah Kadre, Yacine Aknouche, Lazhar Ben Mohammed Tlili, Abdelkader Tcharek, Merouane Berrahal, Laurent Mourad Djoumakh, Samir Korchi, Nicolas Belloni [‘Frankfurt cell’ members convicted in December 2004].828

-! Abu Doha network: Abu Doha [Doha was contacted by the cell members to request more money in late December 2000].829

LAMINE MARONI

Role: Convicted of involvement in the plot to bomb Strasbourg Christmas market. Gathered bomb- making material and carried out reconnaissance.830

! ! 820 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002, available at: https://www.theguardian.com/world/2002/apr/21/terrorism.religion, last visited: 9 August 2016. 821 Finn, P., ‘Five Linked to Al Qaeda Face Trial in Germany’, The Washington Post, 15 April 2002. 822 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 823 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004; and Simcox, R. et al., ‘Islamist Terrorism: The British Connections’, The Henry Jackson Society (2011), p. 361. 824 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 825 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 826 Finn, P., ‘Five Linked to Al Qaeda Face Trial in Germany’, The Washington Post, 15 April 2002. 827 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003; and Tremlett, G., ‘Spanish police arrest Bin Laden suspect’, Guardian, 23 June 2001. 828 ‘French court convicts group in Strasbourg Christmas market bomb’, Agence France Presse, 16 December 2004. 829 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 830 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003.

! ! 66 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Bio: An Algerian, Maroni travelled to Afghanistan in 1998 and stayed there until August 2000 when he travelled to the UK and claimed asylum, moving to Sheffield where he claimed to be an odd-job man and dealt cannabis. He is believed to have associated with Sabour and Salim Boukhari before moving to Frankfurt in November with Boukhari using false or stolen documentation.831 In Frankfurt, the two men met up with Sabour, Aeroubi Beandali and Mohamed Bensakhria.832 During December, he and the other men purchased chemicals used for bomb-making and filmed a reconnaissance tape, as well as contacting Abu Doha to request additional funds. After the phone call, and surveillance which suggested the men were moving weapons, they were arrested on 26 December 2000, with the police finding explosives, firearms, fake and stolen IDs and a significant haul of hashish. His UK flat was raided soon after, and the explosive TATP was found there.833 Charged with conspiracy to murder, Maroni was convicted in March 2003 and sentenced to 11 years in prison.834

Foreign training/combat: Maroni spent two years in Afghanistan between 1998 and 2000 and was taught how to build bombs.

Movements: Afghanistan (1998-2000); UK (August 2000); Germany (November 2000).

Criminal history: Maroni dealt cannabis while in the UK835 and Italian authorities have suggested he may have been convicted of robbery.836 Convicted of conspiracy to murder in March 2003.837

Known to the authorities: Maroni appears to have come to the attention of the authorities after French intelligence alerted German authorities to the plot, after which the group came under surveillance.838

Networks and associates:

-! The ‘Frankfurt Cell’: Fouhad Sabour, Salim Boukhari, Aeroubi Beandali [Convicted alongside as members of the ‘Frankfurt cell’ in March 2003];839 Mohamed Bensakhria, Slimane Khalfaoui, Rabah Kadre, Yacine Aknouche, Lazhar Ben Mohammed Tlili, Abdelkader Tcharek, Merouane Berrahal, Laurent Mourad Djoumakh, Samir Korchi, Nicolas Belloni [‘Frankfurt cell’ members convicted in December 2004].840

-! Abu Doha network: Abu Doha [Doha was contacted by the cell members to request more money in late December 2000].841

! ! 831 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 832 Finn, P., ‘Five Linked to Al Qaeda Face Trial in Germany’, The Washington Post, 15 April 2002. 833 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 834 ‘Strasbourg bomb plotters jailed’, BBC News, 10 March 2003, available at: http://news.bbc.co.uk/1/hi/world/europe/2835587.stm; and Simcox, R. et al., ‘Islamist Terrorism: The British Connections’, The Henry Jackson Society (2011), p. 361. 835 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 836 Finn, P., ‘Five Linked to Al Qaeda Face Trial in Germany’, The Washington Post, 15 April 2002. 837 ‘Strasbourg bomb plotters jailed’, BBC News, 10 March 2003. 838 Finn, P., ‘Five Linked to Al Qaeda Face Trial in Germany’, The Washington Post, 15 April 2002. 839 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003; and Tremlett, G, ‘Spanish police arrest Bin Laden suspect’, Guardian, 23 June 2001. 840 ‘French court convicts group in Strasbourg Christmas market bomb’, Agence France Presse, 16 December 2004. 841 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002.

! ! 67 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

SALIM BOUKHARI

Role: Convicted of involvement in the plot to bomb Strasbourg Christmas market. Gathered bomb- making material and carried out reconnaissance.842

Bio: Born in Algeria, Boukhari moved to France to study in the early 1990s before moving to London. He worked as a security guard and trained to be a chef, living in Leyton, East London, as well as attending the Finsbury Park Mosque. He became increasingly radical and decided to travel to Afghanistan, travelling via Pakistan to Jalalabad.843 He is believed to have stayed there between 1998 and 2000, meeting Strasbourg plot cell members Fouhad Sabour and Lamine Maroni while there before returning to London in the summer of 2000. He travelled to Frankfurt that November alongside Maroni844 and met up with Sabour, Aeroubi Beandali and Mohamed Bensakhria.845 During December, he and the other men purchased chemicals used for bomb-making and filmed a reconnaissance tape, as well as contacting Abu Doha to request additional funds. After the phone-call, and surveillance which suggested the men were moving weapons, they were arrested on 26 December 2000, with the police finding explosives, firearms, fake and stolen IDs and a significant haul of hashish.846 Charged with conspiracy to murder, Boukhari was convicted in March 2003 and sentenced to 12 years in prison.847

Foreign training/combat: Boukhari spent two years in Afghanistan between 1998 and 2000 and was taught how to build bombs.

Movements: France (Early 1990s); UK (1990s, August 2000); Afghanistan (1998-2000); Germany (November 2000).848

Criminal history: Convicted of conspiracy to murder in March 2003.849

Known to the authorities: Boukhari appears to have come to the attention of the authorities after French intelligence alerted German authorities to the plot, after which the group came under surveillance.850

Networks and associates:

-! The ‘Frankfurt Cell’: Fouhad Sabour, Lamine Maroni, Aeroubi Beandali [Convicted alongside as members of the ‘Frankfurt cell’ in March 2003];851 Mohamed Bensakhria, Slimane Khalfaoui, Rabah Kadre, Yacine Aknouche, Lazhar Ben Mohammed Tlili, Abdelkader Tcharek, Merouane Berrahal, Laurent Mourad Djoumakh, Samir Korchi, Nicolas Belloni [‘Frankfurt cell’ members convicted in December 2004].852

! ! 842 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003. 843 Taylor, P., ‘A Jihad Warrior in London’, Guardian, 9 February 2004, available at: https://www.theguardian.com/world/2004/feb/09/alqaida.terrorism, last visited: 9 August 2016. 844 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 845 Finn, P., ‘Five Linked to Al Qaeda Face Trial in Germany’, The Washington Post, 15 April 2002. 846 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 847 ‘Strasbourg bomb plotters jailed’, BBC News, 10 March 2003. 848 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002; and Taylor, P, ‘A Jihad Warrior in London’, Guardian, 9 February 2004. 849 ‘Strasbourg bomb plotters jailed’, BBC News, 10 March 2003. 850 Finn, P., ‘Five Linked to Al Qaeda Face Trial in Germany’, The Washington Post, 15 April 2002. 851 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003; and Tremlett, G, ‘Spanish police arrest Bin Laden suspect’, Guardian, 23 June 2001. 852 ‘French court convicts group in Strasbourg Christmas market bomb’, Agence France Presse, 16 December 2004.

! ! 68 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

-! Abu Doha network: Abu Doha [Doha was contacted by the cell members, with Boukhari believed to be the main contact, to request more money in late December 2000].853

AEROUBI BEANDALI aka Mustapha Kelouili854 aka Djilalli Benali855

Role: Convicted of involvement in the plot to bomb Strasbourg Christmas market. Gathered bomb- making material and carried out reconnaissance.856

Bio: Believed to be a French citizen of Algerian origin,857 Beandali claims to have travelled from Algeria to Germany in 1992 and to have lived an irreligious lifestyle, using alcohol and drugs. After being shocked by images from the in 1998, he became more religious and decided to travel to Afghanistan, flying first to a religious school in Pakistan and then to a training camp in Afghanistan where he “learned about weapons and explosives” and met Salim Boukhari.858 After spending nine months at the training camp,859 Beandali appears to have returned to Germany, as he was living in Frankfurt when Boukhari brought Sabour and Maroni to his apartment in November 2000. He claims to have supplied the cell's weapons.860 During December, he and the other men purchased chemicals used for bomb- making and filmed a reconnaissance tape, as well as contacting Abu Doha to request additional funds. After the phone call, and surveillance which suggested the men were moving weapons, they were arrested on 26 December 2000, with the police finding explosives, firearms, fake and stolen IDs and a significant haul of hashish.861 Charged with conspiracy to murder, Beandali was convicted in March 2003 and sentenced to ten years in prison despite showing repentance.862

Foreign training/combat: Spent nine months in Afghanistan where he received weapons training.863

Movements: Germany (1992); Afghanistan (late 1990s).864

Criminal history: Beandali was known to the police through his drug dealing.865 Convicted of conspiracy to murder in March 2003.866

Known to the authorities: Beandali appears to have come to the attention of the authorities after French intelligence alerted German authorities to the plot, after which the group came under surveillance.867

! ! 853 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 854 ‘FFI Report- Jihad in Europe’, Norwegian Defence Research Establishment, 13 April 2004, available at: https://www.ffi.no/no/Rapporter/04-01146.pdf, last visited: 9 August 2016. 855 ‘German prosecutors seek heavy jail terms for bomb plot suspects’, Agence France Presse, 11 February 2003. 856 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003. 857 ‘French court convicts group in Strasbourg Christmas market bomb’, Agence France Presse, 16 December 2004. 858 Schelzig, E., ‘Repentant Algerian Tells of Bomb Plot’, The Washington Post, 24 April 2002, available at: https://www.washingtonpost.com/archive/politics/2002/04/24/repentant-algerian-tells-of-bomb-plot/2b04ceb2-7964-47a5-bb56-efb17fc9138f/, last visited: 9 August 2016. 859 ‘Militant admits French bomb plot’, BBC News, 23 April 2002, available at: http://news.bbc.co.uk/1/hi/world/europe/1946653.stm, last visited: 9 August 2016. 860 Schelzig, E., ‘Repentant Algerian Tells of Bomb Plot’, The Washington Post, 24 April 2002. 861 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 862 ‘Strasbourg bomb plotters jailed’, BBC News, 10 March 2003. 863 ‘Militant admits French bomb plot’, BBC News, 23 April 2002. 864 Schelzig, E., ‘Repentant Algerian Tells of Bomb Plot’, The Washington Post, 24 April 2002. 865 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003. 866 ‘Strasbourg bomb plotters jailed’, BBC News, 10 March 2003. 867 Finn, P., ‘Five Linked to Al Qaeda Face Trial in Germany’, The Washington Post, 15 April 2002.

! ! 69 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Networks and associates:

-! The ‘Frankfurt Cell’: Fouhad Sabour, Lamine Maroni, Salim Boukhari [Convicted alongside as members of the ‘Frankfurt cell’ in March 2003];868 Mohamed Bensakhria, Slimane Khalfaoui, Rabah Kadre, Yacine Aknouche, Lazhar Ben Mohammed Tlili, Abdelkader Tcharek, Merouane Berrahal, Laurent Mourad Djoumakh, Samir Korchi, Nicolas Belloni [‘Frankfurt cell’ members convicted in December 2004].869

-! Abu Doha network: Abu Doha [Doha was contacted by the cell members, with Boukhari believed to be the main contact, to request more money in late December 2000].870

2.4 Frankfurt Cell: Accomplices

LAZHAR BEN MOHAMMED TLILI

Role: Convicted of involvement in the plot to bomb Strasbourg Christmas market871 and is believed to have provided logistical support.872

Bio: A Tunisian national,873 who made a living dealing drugs, Tlili became involved with extremists while living in Milan in the 1990s and frequented an Islamic centre described by the US Treasury as an “al- Qaeda station house”. He travelled to Afghanistan for military training and received instruction in bomb- making and the use of weapons for ten months before losing a hand in an accident and returning to Europe. He was arrested in France in 2002874 over involvement in the Strasbourg plot, convicted of “criminal association with a terrorist enterprise” in December 2004,875 and sentenced to five years in prison.876 Tlili was extradited to Italy in 2006 over the procurement and selling of “military items” and entered Italian witness protection scheme in return for information on detainees in the US and Italy who had attended Afghan training camps.877 He was released from prison in January 2007 and removed from the UNSC al-Qaeda sanctions list in April 2015.878

Foreign training/combat: Received instruction in bomb-making and the use of weapons in training camps in Afghanistan.

! ! 868 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003; and Tremlett, G., ‘Spanish police arrest Bin Laden suspect’, Guardian, 23 June 2001. 869 ‘French court convicts group in Strasbourg Christmas market bomb’, Agence France Presse, 16 December 2004. 870 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 871 ‘French court convicts group in Strasbourg Christmas market bomb trial’, Agence France Presse, 16 December 2004. 872 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 873 ‘French court convicts group in Strasbourg Christmas market bomb trial’, Agence France Presse, 16 December 2004. 874 ‘Tunisian May Hold Key to Guantanamo Trials’, CBS News, 13 November 2009, available at: http://www.cbsnews.com/news/tunisian-may-hold-key-to- guantanamo-trials/, last visited: 9 August 2016. 875 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 876 ‘French court convicts group in Strasbourg Christmas market bomb trial’, Agence France Presse, 16 December 2004. 877 ‘Tunisian May Hold Key to Guantanamo Trials’, CBS News, 13 November 2009. 878 ‘Security Council Al-Qaida Sanctions Committee Deletes Six Individuals from Its Sanctions List’, United Nations Security Council Press Release, 30 April 2015, available at: http://www.un.org/press/en/2015/sc11878.doc.htm, last visited: 9 August 2016.

! ! 70 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Criminal history: Dealt drugs while living in Milan in the 1990s.879 Convicted of “criminal association with a terrorist enterprise” in December 2004.880 Extradited to Italy in connection with arms/explosives trafficking, aiding illegal immigration and receiving stolen goods881 and released in 2007.882

Known to the authorities: Designated as involved in logistical support or terrorism in the US in August 2002 following his arrest in connection to the Strasbourg plot.883

Networks and associates:

-! The ‘Frankfurt Cell’: Mohamed Bensakhria, Slimane Khalfaoui, Rabah Kadre, Yacine Aknouche, Abdelkader Tcharek, Merouane Berrahal, Laurent Mourad Djoumakh, Samir Korchi, Nicolas Belloni [Convicted alongside as members of the ‘Frankfurt cell’ in December 2004];884 Fouhad Sabour, Lamine Maroni, Salim Boukhari, Aeroubi Beandali [‘Frankfurt cell’ members convicted in March 2003].885

ABDELKADER TCHAREK

Role: Provided logistical support to leader Mohammed Bensakhria886 and convicted of involvement in the plot to bomb Strasbourg Christmas market.887

Bio: An Algerian arrested with five other Algerians in Strasbourg in November 2001 before being transferred to Paris over allegations that he had provided logistical support to Strasbourg plot leader Mohammed Bensakhria. Tcharek was also accused of having violated immigration procedures and utilising false documents for terrorist purposes.888 He was convicted of “criminal association with a terrorist enterprise” in December 2004889 and sentenced to two and a half years in prison, with an 18 month suspension.890

Foreign training/combat: Unclear

Movements: Unclear

Criminal history: Convicted of “criminal association with a terrorist enterprise” in December 2004.891

Known to the authorities: Unclear

! ! 879‘Tunisian May Hold Key to Guantanamo Trials’, CBS News, 13 November 2009. 880 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 881 ‘The United States and Italy Designate Twenty-Five New Financiers of Terror’, US Department of the Treasury Press Release, 29 August 2002, available at: https://www.treasury.gov/press-center/press-releases/Pages/po3380.aspx, last visited: 9 August 2016. 882 ‘Security Council Al-Qaida Sanctions Committee Deletes Six Individuals from Its Sanctions List’, United Nations Security Council Press Release, 30 April 2015. 883 ‘The United States and Italy Designate Twenty-Five New Financiers of Terror’, US Department of the Treasury Press Release, 29 August 2002. 884 ‘French court convicts group in Strasbourg Christmas market bomb’, Agence France Presse, 16 December 2004. 885 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003; and Tremlett, G, ‘Spanish police arrest Bin Laden suspect’, Guardian, 23 June 2001. 886 ‘Algerian faces charges of conspiracy to commit terrorist acts’, Agence France Presse, 14 November 2001. 887 ‘French court convicts group in Strasbourg Christmas market bomb trial’, Agence France Presse, 16 December 2004. 888 ‘Algerian faces charges of conspiracy to commit terrorist acts’, Agence France Presse, 14 November 2001. 889 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 890 ‘French court convicts group in Strasbourg Christmas market bomb trial’, Agence France Presse, 16 December 2004. 891 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004.

! ! 71 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Associates and networks:

-! The ‘Frankfurt Cell’: Mohamed Bensakhria, Slimane Khalfaoui, Rabah Kadre, Yacine Aknouche, Lazhar Ben Mohammed Tlili, Merouane Berrahal, Laurent Mourad Djoumakh, Samir Korchi, Nicolas Belloni [Convicted alongside as members of the ‘Frankfurt cell’ in December 2004.892 Tcharek met Bensakhria several times and held numerous phone calls with him];893 Fouhad Sabour, Lamine Maroni, Salim Boukhari, Aerobi Beandali [‘Frankfurt cell’ members convicted in March 2003].894

LAURENT MOURAD DJOUMAKH: Convicted of involvement in the plot to bomb Strasbourg Christmas market alongside Mohamed Bensakhria, Slimane Khalfaoui, Rabah Kadre, Yacine Aknouche, Lazhar Ben Mohammed Tlili, Merouane Berrahal, Abdelkader Tcharek, Samir Korchi, and Nicolas Belloni895 and is believed to have provided logistical support.896 Said Arif, an Algerian al-Qaeda operative,897 travelled to in 2001 using Djoumakh’s passport.898

NICOLAS BELLONI: Convicted of involvement in the plot to bomb Strasbourg Christmas market alongside Mohamed Bensakhria, Slimane Khalfaoui, Rabah Kadre, Yacine Aknouche, Lazhar Ben Mohammed Tlili, Merouane Berrahal, Abdelkader Tcharek, Samir Korchi, and Laurent Mourad Djoumakh and given three years with an 18 month suspension. 899 Believed to have provided logistical support.900 Belloni’s brother in law, Slimane Khalfaoui, was arrested alongside Belloni at his apartment in Montefermeil, Paris, where stolen and falsified passports were discovered.901 Belloni’s home telephone had also received calls from Rabah Kadre.902

SAMIR KORCHI: A Moroccan national, Korchi, moved to France in the 1980s with his family.903 Convicted of involvement in the plot to bomb Strasbourg Christmas market alongside Mohamed Bensakhria, Slimane Khalfaoui, Rabah Kadre, Yacine Aknouche, Lazhar Ben Mohammed Tlili, Merouane Berrahal, Abdelkader Tcharek, Nicholas Belloni, and Laurent Mourad Djoumakh, he was sentenced to four years in December 2004.904 He is believed to have provided logistical support905 and was expelled to Morocco in April 2005 on completion of his sentence.906

MEROUANE BERRAHAL: Convicted of involvement in the plot to bomb Strasbourg Christmas market alongside Mohamed Bensakhria, Slimane Khalfaoui, Rabah Kadre, Yacine Aknouche, Lazhar Ben Mohammed Tlili, Nicholas Belloni, Abdelkader Tcharek, Samir Korchi, and Laurent Mourad

! ! 892 ‘French court convicts group in Strasbourg Christmas market bomb’, Agence France Presse, 16 December 2004. 893 ‘Algerian faces charges of conspiracy to commit terrorist acts’, Agence France Presse, 14 November 2001. 894 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003; and Tremlett, G., ‘Spanish police arrest Bin Laden suspect’, Guardian, 23 June 2001. 895 ‘French court convicts group in Strasbourg Christmas market bomb trial’ Agence France Presse, 16 December 2004. 896 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 897Hafez, M., ‘Suicide Bombers in Iraq’, United States of Peace Press, 2007. 898 ‘Criminal Association in Relation to a Terrorist Undertaking’, Human Rights Watch, July 2008, available at: https://www.hrw.org/reports/2008/france0708/4.htm, last visited: 9 August 2016. 899 ‘French court convicts group in Strasbourg Christmas market bomb trial’, Agence France Presse, 16 December 2004. 900 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 901 ‘Brothers-in-law, one considered key player, investigated in French Strasbourg bomb plot’, Associated Press International, 29 November 2002 902 ibid. 903 ‘In the Name of Prevention’, Human Rights Watch, 5 June 2007, available at: https://www.hrw.org/report/2007/06/05/name-prevention/insufficient-safeguards- national-security-removals, last visited: 9 August 2016. 904 ‘French court convicts group in Strasbourg Christmas market bomb trial’, Agence France Presse, 16 December 2004. 905 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 906 ‘In the Name of Prevention’, Human Rights Watch, 5 June 2007.

! ! 72 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Djoumakh907 and sentenced to six years in December 2004.908 Believed to have provided logistical support.909

MOHAMED AOUANI aka Heni ben Lased:910 Aouani acted as a liaison between the ‘Frankfurt cell’ and an Italian al-Qaeda cell, and was also involved in weapons and explosives trafficking.911 Born in Tunis on 5 February 1970, he was thought to be Libyan, claiming to be Heni ben Lased. Other aliases include Al-Asad ben Hani and Mohamed ben Belgacem Awani.912 Italian authorities issued a warrant for his arrest over links to a criminal gang and he was arrested in Munich on 10 October 2001. He was alleged to be involved in smuggling and document forgery, was wanted for providing logistical support to al-Qaeda,913 and was claimed to have been in regular contact with the ‘Frankfurt cell’ between August and November 2000.914 He was tried in Milan,915 charged with trafficking chemical weapons, explosives and arms,916 and sentenced to six years. According to the UN Security Council he was deported on the 27 August 2006 from Italy to .917

MEROUANE BENAHMED: Suspected of having provided bomb-making expertise to the Strasbourg cell, Benahmed is also thought to have been the leader of a plot to blow up the Russian Embassy in Paris.918 An Algerian former commander of the GIA and expert in bomb-making and electronics,919 Benahmed is alleged to have visited militant training camps in Afghanistan, Chechnya and Georgia. He had extensive contacts within European Islamist networks and with the GSPC. These contacts also included Rabah Kadri. Benahmed was convicted in 2006920 and sentenced to ten years for conspiring to attack in France as part of a ‘Chechen Network’ between 2001 and 2002.921

! ! 907 ‘French court convicts group in Strasbourg Christmas market bomb trial’, Agence France Presse, 16 December 2004. 908 ibid. 909 ‘Jail for Strasbourg bomb plotters’, BBC News, 16 December 2004. 910 ‘SECURITY COUNCIL AL-QAIDA AND TALIBAN SANCTIONS COMMITTEE APPROVES DELETION OF TWO ENTRIES FROM CONSOLIDATED LIST’, United Nations Security Council, 24 January 2011, available at: http://www.cnbs.gob.hn/files/uif_pdf/Entidades%20Suprimidas.pdf, last visited: 9 August 2016. 911 ‘Freeze Ordered U.S. on Assets Of Pakistan-Based Group, 9 People’, The Washington Post, 20 April 2002, available at: https://www.washingtonpost.com/archive/politics/2002/04/20/freeze-ordered-us-on-assets-of-pakistan-based-group-9-people/b101c368-dbfa-4ad6-8ef4- 23632457c73e/, last visited: 9 August 2016. 912 ‘SECURITY COUNCIL AL-QAIDA AND TALIBAN SANCTIONS COMMITTEE APPROVES DELETION OF TWO ENTRIES FROM CONSOLIDATED LIST’, United Nations Security Council, 24 January 2011. 913 ‘Libyan terrorism suspect remanded in custody in Germany’, Agence France Presse, 16 October 2001. 914 Simcox, R. et al., ‘Islamist Terrorism: The British Connections’, The Henry Jackson Society (2011), p. 446. 915 Willan, P., ‘Al-Qaida suspect on trial in Italy’, Guardian, 4 July 2002, available at: http://www.theguardian.com/world/2002/jul/04/philipwillan, last visited: 9 August 2016. ‘Freeze Ordered U.S. on Assets Of Pakistan-Based Group, 9 People’, The Washington Post, 20 April 2002. 917 ‘SECURITY COUNCIL AL-QAIDA AND TALIBAN SANCTIONS COMMITTEE APPROVES DELETION OF TWO ENTRIES FROM CONSOLIDATED LIST’, United Nations Security Council, 24 January 2011. 918 ‘FFI Report- Jihad in Europe’, Norwegian Defence Research Establishment, 13 April 2004, pp. 62-3. 919 ‘France dismantles terror cell linked to al-Qaida, ministry says’, Associated Press International, 27 December 2002. 920 David, R., ‘Assigné à résidence, un ancien membre du GIA retourne en prison’, , 29 July 2015, available at: http://www.lefigaro.fr/actualite- france/2015/07/29/01016-20150729ARTFIG00287-assigne-a-residence-un-ancien-membre-du-gia-retourne-en-prison.php, last visited: 9 August 2016. 921 ‘Assigné à résidence, le terroriste Merouane Benahmed témoigne’, Europe 1, 27 February 2015, available at: http://www.europe1.fr/faits-divers/assigne-a- residence-le-terroriste-merouane-benahmed-temoigne-2385153: last visited: 9 August 2016. ! ! 73 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

2.5 NATO Airbase Plot Network

MOHAMMED AMOR SLITI

Role: Tried as part of the NATO airbase plot network,922 and convicted of “recruiting militants and trafficking false passports” in connection with the assassination of Ahmad Shah Massoud.923

Bio: A Belgian citizen of unclear origin, Sliti has been described as both Tunisian924 and Algerian,925 and as an alleged founder of the Tunisian Combatant Group (TCG) is most likely to be Tunisian. Sliti was living in Belgium in late 1998 when his cousin, Hisham Bin Amor Sliti, moved in with him. He is alleged to have travelled to Afghanistan in early 2000 and to have been present when the TCG was founded in Jalalabad in June 2000.926 He is also alleged to have trained new recruits.927 Sliti was arrested in Iran after fleeing Afghanistan and was extradited to the Netherlands, where he was arrested in February 2002928 before being extradited to Belgium to stand trial.929 Convicted of “recruiting militants and trafficking false passports” in connection with the assassination of Ahmad Shah Massoud, he was sentenced to five years in prison in September 2003.930

Foreign training/combat: Travelled to Afghanistan and was involved in training militants.931

Movements: Belgium (1990s); Afghanistan (2000); Iran (2002).932

Criminal history: Convicted of “recruiting militants and trafficking false passports” in September 2003.933

Known to the authorities: Sliti was wanted in Belgium in connection with the supply of false documents to the killers of Ahmad Shah Massoud.934

Networks and associates:

-! NATO Airbase Plot Network: Nizar Trabelsi [Sliti met Trabelsi in Brussels and maintained contact while both men were in Afghanistan in 1999.935 He was convicted alongside Trabelsi in September 2003];936 Tarek Ben Habib Maaroufi [Convicted alongside Sliti in September 2003].937

! ! 922 ‘Major terror trial due in Belgium’, CNN International, 21 May 2003, available at: http://edition.cnn.com/2003/WORLD/europe/05/21/belgium.terror/, last visited: 9 August 2016. 923 ‘Men jailed over Al Qaeda anti-NATO plot’, ABC News, 30 September 2003. 924 ‘Between: The Secretary of State for the home department –and- E’, England and Wales High Court (Administrative Court) Decisions, 16 February 2007, available at: http://www.bailii.org/ew/cases/EWHC/Admin/2007/233.html#back2, last visited: 9 August 2016. 925 ‘Major terror trial due in Belgium’, CNN International, 21 May 2003. 926 ‘JTF-GTMO Detainee Assessment’, United States Department of Defense, 1 October 2008, available at: https://assets.documentcloud.org/documents/82798/isn- 174-hisham-bin-ali-bin-amor-sliti-jtf-gtmo.pdf, last visited: 9 August 2016. 927 Escobar, P., ‘The Roving Eye: Part 4: Tracking al-Qaeda in Europe’, Asia Times Online, 13 July 2002, available at: http://www.atimes.com/atimes/Middle_East/DG13Ak02.html, last visited: 9 August 2016. 928 ‘Between: The Secretary of State for the home department –and- E’, England and Wales High Court (Administrative Court) Decisions, 16 February 2007. 929 ‘Massoud Assassination Suspect Arraigned in Belgium’, Voice of America, 1 March 2002, available at: http://www.darivoa.com/a/a-48-a-2002-03-01-7-1- 94055494/1420213.html, last visited: 9 August 2016. 930 ‘Men jailed over Al-Qaeda anti-NATO plot’, ABC News, 30 September 2003. 931 Escobar, P., ‘The Roving Eye: Part 4: Tracking al-Qaeda in Europe’, Asia Times Online, 13 July 2002. 932 ‘JTF-GTMO Detainee Assessment’, United States Department of Defense, 1 October 2008; and ‘Between: The Secretary of State for the home department – and- E’, England and Wales High Court (Administrative Court) Decisions, 16 February 2007. 933 ‘Men jailed over Al Qaeda anti-NATO plot’, ABC News, 30 September 2003 934 ‘Massoud Assassination Suspect Arraigned in Belgium’, Voice of America, 1 March 2002. 935 Shishkin, P., ‘Belgian Trial Provides Look at Terror Logistics’, The Wall Street Journal, 9 July 2003. 936 ‘Men jailed over Al Qaeda anti-NATO plot’, ABC News, 30 September 2003. 937 ibid.

! ! 74 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

-! Finsbury Park Mosque: Abu Qatada [Sliti frequented Finsbury Park Mosque938 and it has been suggested Qatada acted as a mentor to Sliti there].939

-! Other: Dahmane Abd el-Sattar, Bouraoui El-Ouaer [Also known as Karim Touzani and Kacen Bakkali, Sliti aided the two men, who assassinated Ahmad Shah Massoud,940 in travelling to Afghanistan941 and trafficked passports linked to the assassination];942 ‘E’ [A Tunisian former Control Order subject, ‘E’ provided accommodation and false documentation for Sliti in the UK, and he and his network were connected to the men who assassinated Ahmad Shah Massoud];943 Hisham Bin Amor Sliti [Cousin. Hisham lived with Mohammed and followed him to Afghanistan. Convicted in absentia in relation to the NATO airbase plot network trial, he was held in Guantanamo Bay and transferred to Slovakia in November 2014].944

TAREK BEN HABIB MAAROUFI

Role: Tried as part of the NATO airbase plot network,945 and convicted of “recruiting militants and trafficking false passports” in connection with the assassination of Ahmad Shah Massoud.946

Bio: A Tunisian-born Belgian citizen living in Brussels,947 Maaroufi is believed to have become involved in violent Islamist militancy as early as 1991, when he associated with Rachid Ramda, a GIA commander in Europe. He was convicted of involvement in GIA arms trafficking948 in 1995 and sentenced to three years in prison, though appears to have only served one before being released, allegedly going on to recruit militants to travel to Chechnya. He travelled to Afghanistan in 2000, where he was involved in the formation of the TCG.949 On his return, he appears to have had knowledge of the Strasbourg plot, being recorded by Italian police discussing their arrests,950 and was involved in recruiting extremists including one of Ahmad Shah Massoud’s killers. He was arrested in December 2001951 and tried as part of the NATO airbase plot network. He was convicted of “recruiting militants and trafficking false passports” in connection with the assassination of Ahmad Shah Massoud in September 2003 and sentenced to six years in prison.952 He was stripped of Belgian citizenship in 2009 before being released and returned to Tunisia

! ! 938 Roy, O., ‘The Second Wave: Western Muslims’, PBS Frontline, 2004, available at: http://www.pbs.org/wgbh/pages/frontline/shows/front/etc/roy.html, last visited: 9 August 2016. 939 Simcox, R. et al., ‘Islamist Terrorism: The British Connections’, The Henry Jackson Society (2011), p. 351-2. 940 ‘France gives 5 who aided terrorism jail sentences of up to 7 years’, The New York Times, 17 May 2005, available at: http://www.nytimes.com/2005/05/17/international/europe/france-gives-5-who-aided-terrorism-jail-sentences-of-up.html?_r=0, last visited: 9 August 2016. 941 Roy, O., ‘The Second Wave: Western Muslims’, PBS Frontline, 2004. 942 ‘Men jailed over Al Qaeda anti-NATO plot’, ABC News, 30 September 2003. 943 ‘Between: The Secretary of State for the home department –and- E’, England and Wales High Court (Administrative Court) Decisions, 16 February 2007. 944 ‘JTF-GTMO Detainee Assessment’, United States Department of Defense, 1 October 2008; and Scheinkman, A. et al., ‘Hisham Bin Ali Bin Amor Sliti’ in ‘The Guantanamo Docket’, The New York Times, available at: http://projects.nytimes.com/guantanamo/detainees/174-hisham-bin-ali-bin-amor-sliti, last visited: 9 August 2016. 945 ‘Major terror trial due in Belgium’, CNN International, 21 May 2003. 946 ‘Men jailed over Al Qaeda anti-NATO plot’, ABC News, 30 September 2003. 947 ‘A Nation Challenged: Milan; Italian Tapes Portray Young Arabs Operating on the Edges of Islamic Terror’, The New York Times, 29 October 2001. 948 ‘Men jailed over Al Qaeda anti-NATO plot’, ABC News, 30 September 2003. 949 Zelin, A., ‘Tarek Maaroufi: Tunisia's Most Notorious Jihadist, Returns Home’, Tunisialive, 1 April 2012, available at: http://www.tunisia- live.net/2012/04/01/tarek-maaroufi-tunisias-most-notorious-jihadist-returns-home/, last visited: 9 August 2016. 950 Tagliabue, J., ‘A NATION CHALLENGED: MILAN; Italian Tapes Portray Young Arabs Operating on the Edges of Islamic Terror’, International New York Times, 29 October 2001, available at: http://www.nytimes.com/2001/10/29/world/nation-challenged-milan-italian-tapes-portray-young-arabs-operating- edges.html?pagewanted=all, last visited: 9 August 2016. 951Escobar, P., ‘The Roving Eye: Part 4: Tracking al-Qaeda in Europe’, Asia Times Online, 13 July 2002. 952 ‘Men jailed over Al Qaeda anti-NATO plot’, ABC News, 30 September 2003.

! ! 75 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW in 2012,953 where he is alleged to have joined Ansar al-Sharia Tunisia, proscribed as a terrorist organisation in the UK in May 2014,954 in a non-public role related to its military capacities.955

Foreign training/combat: Travelled to Afghanistan in 2000.

Movements: Belgium (Unclear); Afghanistan (2000); Tunisia (2012).

Criminal history: Convicted in 1995 over GIA arms trafficking. Convicted of “recruiting militants and trafficking false passports” in September 2003, and of “recruiting militants and trafficking false passports” in connection with the assassination of Ahmad Shah Massoud.

Known to the authorities: Known following his GIA-related conviction, Maaroufi was also wanted in connection with the plot to bomb the US embassy in Rome.956

Networks and associates:

-! NATO Airbase Plot network: Nizar Trabelsi [Convicted alongside Trabelsi in September 2003];957 Mohammed Amor Sliti [Convicted alongside Sliti in September 2003].958

-! Other: Dahmane Abd el-Sattar [Maaroufi is believed to have recruited Abd el-Sattar, a Tunisian living in Belgium, who was one of Massoud’s killers];959 Essid Sami Ben Khemais [The leader of an al-Qaeda-linked cell in Milan cell,960 Khemais was in telephone contact with Maaroufi and discussed the arrest of the Strasbourg cell];961 ‘E’ [Maaroufi claimed he had met with ‘E’ on a number of occasions];962 Sayf Allah Bin Hassine [Founded the TCG alongside Maaroufi].963

2.6 NATO Airbase Plot Network: Accomplices

HISHAM BIN ALI BIN AMOR aka Ahmad Muhammed Jumr al-Masaudi: Cousin of Mohammed Amor Sliti. He moved in with Mohammed in Belgium in September 1998 after escaping from an Italian prion 11 months into a 44 month sentence for drug offences and worked as a mechanic. He followed Mohammed to Afghanistan in May 2000 and was recruited into the TCG, receiving weapons training and likely taking part in “hostilities against US and Coalition forces in Afghanistan”. He was captured in Pakistan in December 2001 and transferred to Guantanamo Bay. Convicted in absentia in relation to the NATO airbase plot network trial, he was held in Guantanamo Bay and transferred to Slovakia in November 2014.964

! ! 953 Zelin, A., ‘Tarek Maaroufi: Tunisia's Most Notorious Jihadist, Returns Home’, Tunisialive, 1 April 2012. 954‘PROSCRIBED TERRORIST ORGANISATIONS’, The Home Office, 18 March 2016, available at: https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/509003/20160318proscription.pdf, last visited: 9 August 2016. 955 Gartenstein-Ross, D., ‘Ansar al-Sharia Tunisia’s Long Game: Dawa, Hisba, and Jihad’, May 2013, available at: http://www.icct.nl/download/file/Gartenstein-Ross- Ansar-al-Sharia-Tunisia's-Long-Game-May-2013.pdf, last visited: 9 August 2016. 956 ‘Men jailed over Al-Qaeda anti-NATO plot’, ABC News, 30 September 2003, available at: ‘Men jailed over Al Qaeda anti-NATO plot’, ABC News, 30 September 2003; and Zelin, A., ‘Tarek Maaroufi: Tunisia's Most Notorious Jihadist, Returns Home’, Tunisialive, 1 April 2012. 957 ‘Men jailed over Al Qaeda anti-NATO plot’, ABC News, 30 September 2003. 958 ibid. 959 Escobar, P., ‘The Roving Eye: Part 4: Tracking al-Qaeda in Europe’, Asia Times Online, 13 July 2002. 960 ‘Italy jails four terror suspects’, BBC News, 22 February 2002, available at: http://news.bbc.co.uk/1/hi/world/europe/1835577.stm, last visited: 9 August 2016. 961 ‘A Nation Challenged: Milan; Italian Tapes Portray Young Arabs Operating on the Edges of Islamic Terror’, The New York Times, 29 October 2001. 962 ‘Between: The Secretary of State for the home department –and- E’, England and Wales High Court (Administrative Court) Decisions, 16 February 2007. 963 Zelin, A., ‘The Tunisian-Libyan Jihadi Connection’, The Washington Institute, 6 July 2015, available at: http://www.washingtoninstitute.org/policy- analysis/view/the-tunisian-libyan-jihadi-connection, last visited: 9 August 2016. 964 ‘JTF-GTMO Detainee Assessment’, United States Department of Defense, 1 October 2008; and ‘JTF-GTMO Detainee Assessment’, United States Department of Defense, 1 October 2008; and Scheinkman, A. et al., ‘Hisham Bin Ali Bin Amor Sliti’ in ‘The Guantanamo Docket’, The New York Times.

! ! 76 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

ABDELCRIM EL-HADDOUTI: El-Haddouti, described as Nizar Trabelsi’s “zealous lieutenant”, acted as the supplier of chemical ingredients for bomb-making and was sentenced to five years in prison.965

! ! 965 Osborn, A., ‘Bin Laden disciple jailed for 10 years in Belgium’, Guardian, 23 February 2003. ! ! 77 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

2.7 Abu Doha Network966

ABU DOHA aka Hider Hanani, aka Amar Makhlulif,967 aka Didier Ajuelos, aka ‘The Doctor’968

Role: Al-Qaeda-linked recruiter969 and alleged plot mastermind and financier linked to the ‘Millennium bomb’ plot at Los Angeles Airport; 970 the Strasbourg Market bomb plot;971 and a plot to bomb the US Embassy in Rome.972

Bio: Doha, who was born in Algeria in 1963,973 came to Britain in 1994 from France and claimed asylum974 before settling in Islington, North London,975 where he became associated with Finsbury Park Mosque.976 Using the mosque, he allegedly operated as al-Qaeda’s “chief recruiter in Europe”977 and created “one of the most significant groups of terrorists in the United Kingdom”.978 Doha travelled to Afghanistan in 1996, where he is said helped to run , established by al-Qaeda in 1998.979 During this time it is claimed he met Osama bin Laden in Kandahar to discuss collaboration between their networks.980 He returned to Britain after three years,981 and in June 2000 his application for asylum was rejected. During this time he is alleged to have conspired with Ahmed Ressam to bomb LAX airport in Los Angeles982 and to have been in contact with the Strasbourg cell, who contacted him to request more fund in December 2000.983 Doha was arrested and imprisoned in March 2001984 while trying to travel to Saudi Arabia on a false passport.985 While the charges were dropped in May, he continued to be held over accusations he had breached his admission conditions.986

In August 2001, Doha was indicted in the US in connection with Ressam’s plot after Ressam claimed he had overseen the operation. Once the US had requested that Doha be extradited, other countries who claimed to have evidence connecting him to terror plots including France, Grammy and Italy dropped their own requests. In 2003, Ressam stopped cooperating with US authorities, leading the US charges to ! ! 966 We cite the existence of this network after drawing together information from multiple law enforcement and journalistic sources, including a British judge who said Doha had developed “one of the most significant groups of terrorists in the United Kingdom” (see O’Neill, S., ‘Immigration powers used to hold al-Qaeda kingpin in jail’, The Times, 20 October 2006), a former head of the Direction de la Surveillance du Territoire (DST) who said Doha was “al-Qaeda’s main recruiting sergeant in Europe”, and the journalists Sean O’Neill and Daniel McGrory, who have described Doha as “the ‘principle catalyst’ in setting up a network of North African Islamist terrorists in the UK” (see O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), pg. 116). 967 ‘Terror suspect held for seven years without charge in British prison’, Birmingham Mail, 3 January 2009, available at: http://www.birminghammail.co.uk/news/local-news/terror-suspect-held-for-seven-years-237565, last visited: 9 August 2016. 968 Meyer, J., ‘Alleged Mastermind in LAX Bomb Plot Indicted’, Los Angeles Times, 29 August 2001, available at: http://articles.latimes.com/2001/aug/29/news/mn-39692, last visited: 9 August 2016. 969 Crumley, B., ‘The Terror Suspect Who May Go Free’, Time, 30 October 2006, available at: http://content.time.com/time/world/article/0,8599,1552218,00.html, last visited: 9 August 2016. 970 Meyer, J., ‘Alleged Mastermind in LAX Bomb Plot Indicted’, Los Angeles Times, 29 August 2001. 971 Crewdson, J., ‘Germany sends 4 to prison in New Year's plot’, Chicago Tribune, 11 March 2003, available at: http://articles.chicagotribune.com/2003-03- 11/news/0303110303_1_al-qaeda-bombing-plot-terror-network, last visited: 9 August 2016. 972 Lashmar, P., ‘Ricin 'made for use in random killing spree', Independent, 12 January 2003, available at: http://www.independent.co.uk/news/uk/crime/ricin-made- for-use-in-random-killing-spree-123981.html, last visited: 9 August 2016. 973 Burns, J., ‘2nd Terror Suspect Released in Britain’, International New York Times, 4 July 2008. 974 Gardham, D., ‘Terrorist 'linked to Osama bin Laden' released on bail’, The Telegraph, 3 July 2008, available at: http://www.telegraph.co.uk/news/uknews/2240804/Terrorist-linked-to-Osama-bin-Laden-released-on-bail.html, last visited: 9 August 2016. 975 O’Neill, S., ‘Immigration powers used to hold al-Qaeda kingpin in jail’, The Times, 20 October 2006, available at: http://www.thetimes.co.uk/tto/news/uk/crime/article1876009.ece, last visited: 9 August 2016. 976 Burrell, I. and John Lichfield, ‘Warning signs of Algerian terror cells as early as 1994’, Independent, 16 January 2003; and O’Neill, S., ‘Immigration powers used to hold al-Qaeda kingpin in jail’, The Times, 20 October 2006. 977 Norton-Taylor, R., ‘Algerian detainee deported to France for alleged terror links’, Guardian, 16 September 2006, available at: http://www.theguardian.com/uk/2006/sep/16/france.politics, last visited: 9 August 2016. 978 O’Neill, S., ‘Immigration powers used to hold al-Qaeda kingpin in jail’, The Times, 20 October 2006. 979 Gardham, D., ‘Terrorist 'linked to Osama bin Laden', released on bail’, The Telegraph, 3 July 2008. 980 Hooper, J., ‘Al-Qaida cell in UK 'planned attack'’, Guardian, 26 October 2001, available at: https://www.theguardian.com/uk/2001/oct/26/afghanistan.world1, last visited: 9 August 2016. 981 Gardham, D., ‘Terrorist 'linked to Osama bin Laden', released on bail’, The Telegraph, 3 July 2008. 982 Meyer, J., ‘Alleged Mastermind in LAX Bomb Plot Indicted’, Los Angeles Times, 29 August 2001. 983 Crewdson, J., ‘Germany sends 4 to prison in New Year's plot’, Chicago Tribune, 11 March 2003. 984 Anonymised SIAC judgement, available on request. 985 Burns, J., ‘2nd Terror Suspect Released in Britain’, International New York Times, 4 July 2008. 986 Anonymised SIAC judgement, available on request.

! ! 78 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW be dropped in 2005 and meaning other countries were unable to charge Doha as they had already tried the cases he was alleged to be involved in.987 Doha was due to be deported Algeria in 2006,988 but was instead released on bail in 2008.989 He was jailed again in February 2009,990 and released to house arrest in 2011.991

Foreign training/combat: Doha is alleged to have helped to run al-Qaeda’s Khalden training camp in Afghanistan.992

Movements: France (Unclear); UK (1994, 1999); Afghanistan (1996).993

Criminal history: No known convictions.

Known to the authorities: Following his arrest, it transpired Doha was wanted by authorities in the US, France, Germany and Italy.994

Networks and associates:

-! Al-Qaeda: Osama bin Laden [Prosecutors claimed the two men met in Kandahar in December 1998].995

-! Finsbury Park Mosque: Abu Qatada [Qatada has been described as a “close associate” of Doha].996

-! The ‘Frankfurt Cell’: Fouhad Sabour, Lamine Maroni, Salim Boukhari, Aeroubi Beandali [The four men sought extra funds from Abu Doha for the Strasbourg plot];997 Rabah Kadre [Convicted of involvement in the Strasbourg plot, Kadre was Doha’s deputy and successor].998

-! Other: Ahmed Ressam [Ressam alleged Doha had overseen the plot before withdrawing his testimony].999

AHMED RESSAM

Role: Convicted of plotting to bomb Los Angeles LAX airport on 31 December 1999.1000

Bio: Algerian Ressam was born 19 and grew up near . He travelled to Paris in 1984 for medical treatment and learned more about Algeria’s history, becoming involved with Islamist causes on his return. He was unsuccessful at school, graduating in 1988, and after failing to find work with the Algerian security forces and a stint in a coffee shop he moved to France in 1992. Living illegally in the country, mostly in , until 1994 he then used a false passport to travel to Montreal, Canada, where ! ! 987 Crumley, B., ‘The Terror Suspect Who May Go Free’, Time, 30 October 2006. 988 O’Neill, S., ‘Immigration powers used to hold al-Qaeda kingpin in jail’, The Times, 20 October 2006. 989 Gardham, D., ‘Terrorist 'linked to Osama bin Laden' released on bail’, The Telegraph, 3 July 2008. 990 Anonymised SIAC judgement, available on request. 991 Anonymised SIAC judgement, available on request. 992 Gardham, D., ‘Terrorist 'linked to Osama bin Laden' released on bail’, The Telegraph, 3 July 2008. 993 Anonymised SIAC judgement, available on request. 994 Crumley, B., ‘The Terror Suspect Who May Go Free’, Time, 30 October 2006. 995 Hooper, J., ‘Al-Qaida cell in UK 'planned attack'’, Guardian, 26 October 2001. 996 Gardman, D., ‘Profile: Abu Qatada’, The Telegraph, 17 January 2012, available at: http://www.telegraph.co.uk/news/uknews/terrorism-in-the- uk/9019817/Profile-Abu-Qatada.html, last visited: 9 August 2016. 997 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 998 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), pp. 142, 240-1. 999 Crumley, B., ‘The Terror Suspect Who May Go Free’, Time, 30 October 2006. 1000 ‘'Millennium bomber' Ahmed Ressam given longer sentence’, BBC News, 24 October 2012, available at: http://www.bbc.co.uk/news/world-us-canada-20075561, last visited: 9 August 2016.

! ! 79 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW he claimed asylum, saying he had suffered torture and been falsely accused of terror offences. He lived in Canada for a further four years, staying in an apartment connected to the GIA and supporting himself through theft. His asylum claim was denied in 1995, but he was not deported after he fraudulently obtained a .

Ressam left Canada in 1998 for Afghanistan via Peshawar in Pakistan and met Abu Zubaydah, before travelling on to a training camp in April that year. He returned to Montreal in 1999 via Seoul and Los Angeles and began to formulate his plot to target LAX airport. He moved to and began to produce explosives before attempting to cross into the US on 14 December 1999 with the explosives in his car. His car was searched and he was arrested. After associates testified against him,1001 Ressam was convicted of conspiracy to commit a terrorist act and smuggling explosives in 2001. He initially cooperated with investigators before withdrawing his testimony in 2003 and was sentenced to 22 years in 2005. In 2010, this was ruled to have been too short, and was increased to 37 years in 2012.1002

Foreign training/combat: Ressam travelled to Afghanistan in 1998 and attended Khalden training camp where he learned how to use light weapons, how to make “explosive devices” and techniques for “sabotage, the selection of targets, urban warfare, tactics (including assassinations), security, and the use of poisons and poisonous gasses”.1003

Movements: France (1984, 1992-94); Canada (1994-1998, 1999); Afghanistan (1998-99).

Criminal history: When living in Canada, Ressam supported himself with petty theft. He was arrested four times and convicted once for robbing tourists. He also trafficked stolen identity documents and bank cards, providing these to other militants.

Known to the authorities: Ressam was under CSIS surveillance from 1996 until 1998 when he left Canada for Afghanistan after the phone number of his apartment was discovered on the body of a GIA militant killed in Roubaix, France. In April 1999, Ressam was named in a letter from the French authorities asking the to search properties linked to Algerian militants. Canadian authorities were looking for Ressam when he used a fake ID to evade them and re-enter the country in 1999.

Networks and associates:

-! Al-Qaeda: Abu Zubaydah [Zubaydah met with Ressam in Peshawar in 1999. Zubaydah approved him and he was sent to a training camp in April 1998];1004 David Courtailler, Richard Reid, Zacharias Moussaoui [The men all appear to have been at Khalden training camp at the same time].1005

-! Abu Doha network: Abu Doha [Ressam alleged Doha had overseen the plot before withdrawing his testimony].1006

-! Other: Mokhtar Haouari [Algerian refugee who Ressam worked with to traffic fake and stolen documents and bank cards]; Abdelmajid Dahoumane [Ressam’s accomplice to the LAX plot,

! ! 1001 ‘Ahmed Ressam’s Millennium Plot’, Frontline. 1002 ‘'Millennium bomber' Ahmed Ressam given longer sentence’, BBC News, 24 October 2012. 1003 ‘United States v. Ressam’, United States Court of Appeals for the Ninth Circuit, 12 March 2012, available at: http://www.investigativeproject.org/documents/case_docs/1927.pdf, last visited: 9 August 2016. 1004 ‘Ahmed Ressam’s Millennium Plot’, Frontline. 1005 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 1006 Crumley, B., ‘The Terror Suspect Who May Go Free’, Time, 30 October 2006.

! ! 80 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

the two men set up a bomb factory to make the explosives for the plot. After Ressam’s arrest, Dahoumane escaped to Afghanistan and was later convicted in Algeria].1007

SAID ARIF: Arif, an Algerian who had left the Algerian army to join al-Qaeda in Afghanistan in the late 1990s,1008 was found to be a member of Abu Doha’s network by a French court in June 2006, something supported by Laurent Djoumakh’s testimony that Arif, who had travelled to Georgia in 2001 using his passport, was involved with Doha’s network.1009 Arif also claimed to have been present at a meeting in Kabul in 2000 at which Doha was present. Arif was also in contact with Mohammed Bensakhria, the leader of the Frankfurt cell, after he moved to Germany and fled to Pakistan to avoid arrest in relation to the Strasbourg plot. Arif was arrested in Syria in May 2003 and extradited to France in June 2004,1010 where he was convicted, in June 2006, of “membership in a criminal organisation in relation to a terrorist undertaking” and sentenced to nine years, increased in May 2007 to ten years.1011 In October 2013, he fled house arrest in France and travelled to Syria, joining Jabhat al-Nusra and Interpol issued a Red Notice.1012 He was reportedly killed in an airstrike in May 2015.1013

KAMAL BOURGASS: An associate of Rabah Kadre through Finsbury Park Mosque,1014 Bourgass was convicted in June 2004 for the murder of Detective Constable Stephen Oake in 2003 and sentenced to 20 years in prison He was convicted in April 2005 and sentenced to 17 years in connection with the ricin plot.1015

MOHAMMED MEGUERBA: An associate of Rabah Kadre through Finsbury Park Mosque,1016 Meguerba was also mentioned as a member of Abu Doha’s network in a SIAC judgement against Moloud Sihali.1017 He was involved in the ricin plot alongside Bourgass, but fled the UK and was tried in Algeria,1018 where he was jailed for ten years for “belonging to a foreign terror organisation” in July 2005.1019

! ! 1007 ‘Ahmed Ressam’s Millennium Plot’, Frontline. 1008 ‘Terrorist Designation of Said Arif’, US Department of State, 18 August 2014, available at: http://www.state.gov/r/pa/prs/ps/2014/230677.htm, last visited: 9 August 2016. 1009 ‘Criminal Association in Relation to a Terrorist Undertaking’, Human Rights Watch, July 2008. 1010 Hafez, M., Suicide Bombers in Iraq: the Strategy and Ideology of Martyrdom, (Institute of Peace Press, 2007), p. 205. 1011 ‘Criminal Association in Relation to a Terrorist Undertaking’, Human Rights Watch, July 2008. 1012 ‘Terrorist Designation of Said Arif’, US Department of State, 18 August 2014. 1013 Joscelyn, T., ‘Another al Qaeda veteran reportedly killed while leading Jund al Aqsa in Syria’, The Long War Journal, 27 May 2016, available at: http://www.longwarjournal.org/archives/2015/05/another-al-qaeda-veteran-reportedly-killed-while-leading-jund-al-aqsa-in-syria.php, last visited: 9 August 2016. 1014 Stuart, H. et al., Islamist Terrorism: The British Connections, 2nd edition (The Henry Jackson Society, 2011), pp. 445-6. 1015 ‘Killer jailed over poison plot’, BBC News, 13 April 2005. 1016 Stuart, H. et al., Islamist Terrorism: The British Connections, 2nd edition (The Henry Jackson Society, 2011), pp. 445-6. 1017 ‘Between: MOLOUD SIHALI - and - SECRETARY OF STATE FOR THE HOME DEPARTMENT’, Special Immigration Appeals Commission, 26 March 2010, available at: http://www.refworld.org/pdfid/4bb226682.pdf, last visited: 9 August 2016, p. 7. 1018 ‘Killer jailed over poison plot’, BBC News, 13 April 2005. 1019 ‘Ten years for ricin plot leader’, Manchester Evening News, 4 July 2005, available at: http://www.manchestereveningnews.co.uk/news/greater-manchester- news/ten-years-for-ricin-plot-leader-1074575, last visit: 9 August 2016. ! ! 81 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

2.8 Other

DAVID COURTAILLER

Role: Logistics. Convicted for conspiring to help those engaged in terrorism.1020

Bio: French national Courtailler1021 was raised with his brother, Jerome, in Bonneville in the French Alps. The son of a butcher, he studied accounting at a Catholic school before his father’s business failed and his parents divorced, and he and Jerome became involved with alcohol and drug abuse.1022 He converted to Islam in 19961023 after moving to Brighton and being told it would help with his drug problems.1024 After moving to London with Jerome, David Courtailler was given money and a fake passport by friends at Finsbury Park Mosque who sent him to train in Afghanistan.1025 He travelled via Pakistan and spent time at Khalden training camp alongside a number of other al-Qaeda militants including Ahmed Ressam and Richard Reid before returning to Europe in August 1998.1026 David stayed in Tangiers, Morocco on his return before he returned to France, where he was arrested in 1999 after shoplifting a pair of shoes leading to the police being notified of his return. Suspected of involvement in the 1998 attacks on the US Embassies in Kenya and Tanzania,1027 he was interrogated in Paris1028 before being released on bail. Courtailler fled to the UK and is thought to have moved to Leicester, while his fake French driving license was discovered with large quantities of explosives in a Birmingham apartment.1029 In 2000, he was arrested alongside Djamel Beghal in Calais as Beghal oversaw a kidnapping plot, before disappearing again.1030 He appeared in court in France in March 2004 “accused of recruiting for al-Qaeda”1031 and was sentenced to two years in prison with two years suspended after being convicted of “conspiring with criminals engaged in a terrorist enterprise” in May 2004.1032

Foreign training/combat: Trained at Khalden training camp in Afghanistan until 1998.

Movements: UK (1996); Afghanistan (1997-98); Morocco (1998); France (1999).

Criminal history: Involved with drugs prior to converting to Islam. Arrested for shoplifting in France in 1999.1033 Convicted of “conspiring with criminals engaged in a terrorist enterprise” in May 2004.1034

Known to the authorities: Courtailler was known to the authorities on his return from Afghanistan, with US intelligence notifying the French authorities he was travelling to Europe in August 1998.1035 He was also detained in 1999 as part of an investigation into the 1998 US Embassy attacks. 1036

! ! 1020 ‘Frenchman jailed for terror ties’, BBC News, 25 May 2004, available at: http://news.bbc.co.uk/1/hi/world/europe/3746951.stm, last visited: 9 August 2016. 1021 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 1022 Rotella, S. and David Zucchino, ‘Embassy plot offers insight into terrorist recruitment, training’, The Chicago Tribune, 22 October 2001. 1023 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 1024 Barnett, A. et al., ‘UK student's 'key terror role'’, Guardian, 28 October 2001. 1025 Norton-Taylor, R. and Rosie Cowan, ‘Madrid bomb suspect linked to UK extremists’, Guardian, 17 March 2004, available at: https://www.theguardian.com/world/2004/mar/17/spain.terrorism1, last visited: 9 August 2016. 1026 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 1027 Barnett, A. et al., ‘UK student's 'key terror role'’, Guardian, 28 October 2001. 1028 ‘In Paris, a Frightening Look at Terror’s Inconspicuous Face; Probe: Officials say plot against U.S. Embassy offers insight into recruitment and training of ordinary young men’, Los Angeles Times, 21 October 2001, available at: http://articles.latimes.com/2001/oct/21/news/mn-59825/4, last visited: 9 August 2016. 1029 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 1030 Sapsted, D., ‘Vet is convicted of kidnapping five children’, The Telegraph, 1 July 2005. 1031 ‘France puts 'Islamists' on trial’, BBC News, 17 March 2004, available at: http://news.bbc.co.uk/1/hi/world/europe/3520974.stm, last visited: 9 August 2016. 1032 ‘Frenchman jailed for terror ties’, BBC News, 25 May 2004. 1033 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 1034 ‘Frenchman jailed for terror ties’, BBC News, 25 May 2004. 1035 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 1036 ‘In Paris, a Frightening Look at Terror’s Inconspicuous Face; Probe: Officials say plot against U.S. Embassy offers insight into recruitment and training of ordinary young men’, Los Angeles Times, 21 October 2001.

! ! 82 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Networks and associates:

-! Al-Qaeda: Zacarias Moussaoui [Convicted of involvement in the 9/11 attacks,1037 Moussaoui is believed to have lived with Courtailler in Brixton1038 and they were at Khalden training camp together]; Richard Reid, Ahmed Ressam [Courtailler’s time at Khalden training camp is believed to have coincided with that of both men].1039

-! US Embassy and Cultural Centre plot (2001): Djamel Beghal [Courtailler assisted Beghal in the kidnapping of Azzedin Journazi’s children];1040 Nizar Trabelsi [Courtailler has been described as a “close contact’ of Trabelsi”].1041

-! Finsbury Park Mosque: Abu Hamza al-Masri [Courtailler has been described as “very active in Abu Hamza’s circles]”.1042

-! Other: Chaouki Baadache, Ahmed Laidouni [Convicted alongside Courtailler in May 2004];1043 Jamal Zougam [Convicted for his role in the 2004 Madrid train bombings,1044 Zougam met Courtailler in a Madrid Mosque in 1998];1045 Moinul Abedin [A fake driving licence in Courtailler’s name was found in his house];1046 Omar Deghayes [Alleged to have given Courtailler telephone numbers for men in Spain and Morocco involved in the Madrid and Casablanca bombings].1047

ZACARIAS MOUSSAOUI

Role: Convicted of involvement in the 9/11 attacks, it has been suggested Moussaoui was in fact supposed to carry out a different attack.1048

Bio: A French national whose parents had immigrated to the country,1049 Moussaoui was born in Morocco1050 and raised in Bayonne, south-west France.1051 As a child he became involved with local gangs, as well as with radicals who “ranted about the brutal treatment of their brothers in Bosnia”. He travelled to the UK at least once1052 prior to moving to the country in 1993, and on arrival he attended London South Bank University and enrolled on an MA International Business Studies course. He also spent a significant amount of time at Brixton Mosque, sleeping there when he had nowhere else to live. He began to attend radical meetings, listening to Abdullah el-Faisal’s violent speeches in south London,1053 as well as attending Abu Qatada’s mosque in Baker Street and Finsbury Park Mosque, forming a close connection with extremists including Djamel Beghal and Kamel Daoudi.1054 Moussaoui travelled to Afghanistan in ! ! 1037 Mears, B., ‘Terrorist Zacarias Moussaoui's appeal of life sentence denied’, CNN, 4 January 2010, available at: http://edition.cnn.com/2010/CRIME/01/04/us.moussaoui.conviction/, last visited: 9 August 2016. 1038 Norton-Taylor, R. and Rosie Cowan, ‘Madrid bomb suspect linked to UK extremists’, Guardian, 17 March 2004. 1039 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 1040 Sapsted, D., ‘Vet is convicted of kidnapping five children’, The Telegraph, 1 July 2005. 1041 Henley, J., ‘Trial and terror’, Guardian, 18 March 2004. 1042 Pantucci, R., “We Love Death as You Love Life”: Britain’s Suburban Terrorists, (London, 2015), p. 118. 1043 ‘Frenchman jailed for terror ties’, BBC News, 25 May 2004. 1044 ‘Madrid bombings: Defendants’, BBC News, 9 August 2016, available at: http://news.bbc.co.uk/1/hi/world/europe/4899544.stm, last visited: 9 August 2016. 1045 ‘Europe 'must share terror intelligence'’, Independent, 17 March 2004, available at: http://www.independent.co.uk/news/world/europe/europe-must-share-terror- intelligence-566605.html, last visited: 9 August 2016. 1046 ‘Police investigation: How many more are out there?’, Independent, 23 July 2004, available at: http://www.independent.co.uk/news/uk/crime/police- investigation-how-many-more-are-out-there-301236.html, last visited: 9 August 2016. 1047 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 1048 Mears, B., ‘Terrorist Zacarias Moussaoui's appeal of life sentence denied’, CNN, 4 January 2010. 1049 Erlanger, S. and Chris Hedges, ‘Terror Cells Slip Through Europe's Grasp’, The New York Times, 28 December 2001. 1050 ‘Moussaoui: Failed plotter’, BBC News, 3 May 2006, available at: http://news.bbc.co.uk/1/hi/world/americas/4873828.stm, last visited: 9 August 2016. 1051 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 220. 1052 ibid. 1053 ‘Restless convert in quest for jihad’, BBC News, 3 May 2006, available at: http://news.bbc.co.uk/1/hi/uk/4942924.stm, last visited: 9 August 2016. 1054 Erlanger, S. and Chris Hedges, ‘Terror Cells Slip Through Europe's Grasp’, The New York Times, 28 December 2001.

! ! 83 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

September 1997,1055 arriving at the Khalden training camp by 19981056 at the same time as other extremists including Richard Reid and Ahmed Ressam.1057 He was given US$14,000 for flight lessons by ,1058 who he is alleged to have met in Afghanistan in 2000 and, after visiting Malaysia where he stayed in an apartment in which two of the 9/11 attackers had stayed,1059 he travelled to the US to attend flight schools in Oklahoma and Oregon in February 2001, proving unsuccessful at both and justifying Mohammed’s claim that he had dispatched Moussaoui to a different training camp to the 9/11 attackers as he did not trust his capabilities.1060 In August 2001, Moussaoui’s odd behaviour attracted attention and he was arrested.1061 Moussaoui was indicted in connection with the 9/11 attacks in December 2001 and plead guilty in April 2005. He was sentenced to life in prison without parole in May 2006, with the sentence affirmed in January 2010 despite claims from Osama bin Laden that Moussaoui had not been chosen for a role in the 9/11 attacks.1062

Foreign training/combat: Travelled to Afghanistan in September 19971063 and spent time at the Khalden training camp during 1998.1064

Movements: France (Unclear); London (1993); Afghanistan (1997-98, 2000); Malaysia (2000); USA (February – May 2001).1065

Criminal history: Convicted of six counts of conspiracy,1066 including conspiracy to commit acts of terrorism, conspiracy to commit aircraft piracy, and conspiracy to murder United States employees.1067

Known to the authorities: French authorities are believed to have become aware of Moussaoui in 1996 and to have placed him on watch list in 1999.1068

Networks and associates:

-! US Embassy and Cultural Centre plot (2001): Jerome Courtailler [Courtailler shared an apartment with Moussaoui in Brixton];1069 Djamel Beghal [Moussaoui is believed to have been recruited by Beghal];1070 Kamel Daoudi [Moussaoui was “part of a circle” that involved Daoudi at Abu Qatada’s London mosque].1071

-! Finsbury Park Mosque: Moussaoui regularly attended the mosque and associated with other extremists there.1072

! ! 1055 Barnett, A. et al., ‘UK student's 'key terror role'’, Guardian, 28 October 2001. 1056 ‘Restless convert in quest for jihad’, BBC News, 3 May 2006. 1057 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 1058 O’Neill and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), pp. 222, 224. 1059 ‘Zacarias Moussaoui Fast Facts’, CNN, 7 June 2016, available at: http://edition.cnn.com/2013/04/03/us/zacarias-moussaoui-fast-facts/, last visited: 9 August 2016. 1060 O’Neill and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), pp. 222, 224. 1061 ‘Moussaoui: Failed plotter’, BBC News, 3 May 2006. 1062 ‘Zacarias Moussaoui Fast Facts’, CNN, 7 June 2016. 1063 Barnett, A. et al., ‘UK student's 'key terror role'’, Guardian, 28 October 2001. 1064 ‘Restless convert in quest for jihad’, BBC News, 3 May 2006. 1065 ‘Restless convert in quest for jihad’, BBC News, 3 May 2006; and ‘Zacarias Moussaoui Fast Facts’, CNN, 7 June 2016. 1066 ‘Zacarias Moussaoui Fast Facts’, CNN, 7 June 2016. 1067 ‘INDICTMENT OF ZACARIAS MOUSSAOUI’, United States Department of Justice, 9 September 2014, available at: https://www.justice.gov/ag/indictment- zacarias-moussaoui: last visited: 9 August 2016. 1068 ‘Zacarias Moussaoui Fast Facts’, CNN, 7 June 2016. 1069 Barnett, A. et al., ‘UK student's 'key terror role'’, Guardian, 28 October 2001. 1070 Bird, S., ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003. 1071 Erlanger, S. and Chris Hedges, ‘Terror Cells Slip Through Europe's Grasp’, The New York Times, 28 December 2001. 1072 ibid.

! ! 84 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

-! 9/11 Attacks (2001): Mohammed Atta [It has been suggested Moussaoui shared a flat with Atta in Hamburg,1073 and he allegedly “received two money transfers from a man who shared a flat with Atta in Hamburg”].1074

-! Al-Qaeda: Richard Reid [Reid is said to have “hero worshipped’” Moussaoui1075 and the two men’s time at Khalden coincided];1076 David Courtailler [Moussaoui is believed to have lived with Courtailler in Brixton1077 and they were at Khalden training camp together]; Ahmed Ressam [Moussaoui’s time at Khalden training camp is believed to have coincided with that of Ressam];1078 Khalid Sheikh Mohammed [Allegedly met with Moussaoui in Afghanistan in 2000]; Ramzi bin al-Shibh [An al-Qaeda operative, al-Shibh, wired US$14,000 to Moussaoui from Germany].1079

-! Other: Abdullah el-Faisal [Moussaoui was a follower of el-Faisal in south London];1080 Xavier Djaffo [Friend of Moussaoui’s killed in Chechnya in 1998].1081

RICHARD REID aka Abdel Rahmin,1082 aka Tariq Raja1083

Role: Convicted of attempting to blow up a transatlantic aircraft en route to the US from Europe using explosives hidden in his shoes.1084

Bio: Reid was born in 1973 in Bromley, South London and struggled at school, leaving at 16. He became involved in petty crime as a teenager, including street robbery and drug use, before being convicted of an assault on a pensioner and a string of robberies in 1992. He converted to Islam whilst in prison after being convicted of these offences.1085 After his release in 1996 he became acquainted with extremists when attending Brixton mosque as part of an informal rehabilitation programme for ex-prisoners run by staff there.1086 While attending Brixton mosque he began travelling around the UK to hear preachers speak in Luton, the Midlands and elsewhere in London, and it is believed that it was during this time that he first came into contact with Abu Hamza al-Masri before moving to the Finsbury Park Mosque alongside Zacharias Moussaoui after quarrelling with worshippers in Brixton.1087 At Finsbury Park Mosque he came under the influence of both al-Masri and Djamel Beghal.1088 In 1998, he travelled to Afghanistan, training in Khalden training camp at the same time as other extremists including Ahmed Ressam.1089 On his return, Reid travelled across the Middle East, first acquiring a new passport in Brussels. He visited Israel, Turkey and Egypt and is believed to have been carrying out intelligence-gathering, before returning to Europe and working in kitchens in Belgium and the Netherlands – associating with Nizar Trabelsi in the process. ! ! 1073 ‘Investigating Al-Qaeda: Other Suspects’, BBC News, available at: http://news.bbc.co.uk/1/shared/spl/hi/world/02/september_11/investigating_al_qaeda/html/people/other_suspects.stm, last visited: 9 August 2016. 1074 ‘Germany withholds Moussaoui evidence’, BBC News, 1 September 2002, available at: http://news.bbc.co.uk/1/hi/world/europe/2229231.stm, last visited: 9 August 2016. 1075 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 221. 1076 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 1077 Norton-Taylor, R. and Rosie Cowan, ‘Madrid bomb suspect linked to UK extremists’, Guardian, 17 March 2004. 1078 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 1079 ‘Zacarias Moussaoui Fast Facts’, CNN, 7 June 2016. 1080 ‘Restless convert in quest for jihad’, BBC News, 3 May 2006. 1081 Erlanger, S. and Chris Hedges, ‘Terror Cells Slip Through Europe's Grasp’, The New York Times, 28 December 2001. 1082 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 221. 1083 ‘Bomb suspect 'part of network'’, BBC News, 26 December 2001, available at: http://news.bbc.co.uk/1/hi/world/americas/1728709.stm, last visited: 9 August 2016. 1084 ‘Unrepentant Shoe Bomber Sentenced to Life’, International New York Times, 31 January 2003, available at: http://www.nytimes.com/2003/01/31/national/31SHOE.html, last visited: 9 August 2016. 1085 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006) p. 219. 1086 ‘London mosque leader recalls bomb suspect’, CNN, 26 December 2001, available at: http://edition.cnn.com/2001/WORLD/europe/UK/12/26/baker.cnna/index.html, last visited: 9 August 2016. 1087 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 219. 1088 ibid, p. 221. 1089 ‘Sources: Reid is al Qaeda operative’, International CNN, 6 December 2003, available at: http://edition.cnn.com/2003/WORLD/asiapcf/southeast/01/30/reid.alqaeda/, last visited: 9 August 2016.

! ! 85 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Following the 9/11 attacks, he returned to Afghanistan via Pakistan and met with bomb-maker Abu Khabbab al-Masri before returning to carry out his suicide attack.1090 On 22 December he was spotted as he tried to detonate his shoe bomb and was overpowered by passengers. In October 2002, he plead guilty to the attempted attack and was sentenced to life in prison.1091

Foreign training/combat: Attended Khalden training camp in Afghanistan in 1998.1092

Movements: Afghanistan (1998, 2001); Belgium (2001); Israel (2001); Egypt (2001); Turkey (2001); Pakistan (2001); the Netherlands (2001).1093

Criminal history: Reid was involved in petty crime including robbery and drug use in his youth and was imprisoned in Feltham Young Offenders Institution in 1992 for an attack on a pensioner. Convicted of over 40 counts of burglary in 1992 and imprisoned for three years.1094 Convicted of attempting to blow up a transatlantic aircraft en route to the US from Europe in January 2003.1095

Known to the authorities: Unknown.

Networks and associates:

-! ‘Shoe-bomb’ plot: Saajid Badat [Conspired with Reid to ‘shoe-bomb’ a transatlantic flight but backed out];1096 Abu Khabbab al-Masri [Reid visited the bomb maker in Jalalabad in November 2001].1097

-! US Embassy and Cultural Centre plot (2001): Djamel Beghal [Reid was recruited by Beghal after the men met at Finsbury Park Mosque where Reid was staying].1098

-! NATO Airbase plot: Nizar Trabelsi [Stayed with Trabelsi,1099 who has been described as Reid’s handler in the 2001 shoe bomb plot].1100

-! US Embassy plot: Jerome Courtailler [Believed to have met Reid in the Netherlands].1101

-! Al-Qaeda: David Courtailler [Courtailler’s time at Khalden training camp is believed to have coincided with that of Reid];1102 Zacarias Moussaoui [Reid is said to have “hero worshipped’” Moussaoui1103 and the two men’s time at Khalden coincided]; Ahmed Ressam [The two men appear to have been at Khalden at the same time].1104

! ! 1090 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006) pp. 228-230 1091 ‘Shoe bomber: Tale of another failed terrorist attack’, CNN, 26 December 2009, available at: http://edition.cnn.com/2009/CRIME/12/25/richard.reid.shoe.bomber/, last visited: 9 August 2016. 1092 ‘Sources: Reid is al Qaeda operative’, International CNN, 6 December 2003. 1093 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 228-9. 1094 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006) p. 219. 1095 ‘Unrepentant Shoe Bomber Sentenced to Life’, International New York Times, 31 January 2003. 1096 ‘Terror suspect admits plane plot’, BBC News, 28 February 2005, available at: http://news.bbc.co.uk/1/hi/england/gloucestershire/4304223.stm, last visited: 9 August 2016. 1097 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 230. 1098 ibid, p. 225. 1099 ibid, p. 229. 1100 Dodd, V., ‘Former grammar school boy gets 13 years for shoe bomb plot’, Guardian, 23 April 2005. 1101 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 1102 ibid. 1103 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 221. 1104 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004.

! ! 86 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

SAAJID BADAT

Role: Admitted conspiring to blow up a transatlantic aircraft en route to the US from Europe using explosives hidden in his shoes.1105

Bio: Born in 1979 in Gloucester, Badat’s parents had immigrated to the UK from Malawi in the 1970s. He grew up in Gloucester and attended a Church of England primary school and grammar school.1106 Badat left school with 10 GCSEs and four A Levels1107 and claims he resisted his father’s wishes he train as an imam, running away to London in 1997 aged 17,1108 where he worked as a kitchen porter and as a security officer.1109 Before leaving home, he become familiar with the recordings of Azzam publications which eulogised the ‘martyrs’ of the Bosnian wars.1110 Badat claims meeting the south-London-based British Muslims known as the ‘Tooting Circle’, which included the owner of Azzam Publications, Babar Ahmed, was central to his radicalisation.1111 According to Badat, Ahmed became his mentor and introduced him to the idea of “taking up arms in the name of Islam”.1112 He also came under the influence of Abu Hamza-al Masri at Finsbury Park Mosque.1113 In 1998, Badat went to , Bosnia, to offer assistance in relief operations,1114 and then travelled to Afghanistan in 1999, where he visited multiple training camps and met with senior al-Qaeda members including Osama bin Laden, Abu Hafs al-Masri, and Saif al-Adel.1115 He worked for a Taliban magazine in the summer and autumn of 2000, 1116 and gathered online intelligence on potential Jewish targets in South Africa after a request from Abu Hafs and Saif al- Adel.1117

In September 2001, Badat was dispatched to Belgium by Abu Hafs and Saif al-Adel to meet a man he identified as Nizar Trabelsi and to obtain a replacement passport.1118 He then returned to Afghanistan to collect bombs hidden in shoes, and to meet with bin Laden and Khalid Sheikhs Mohammed, before Mohammed dispatched him to to meet his nephew, Ammar Al-Baluchi. 1119 After returning to the UK, Badat pulled out of the shoe-bomber plot by emailing his handler in Pakistan telling him that he would not go ahead with the suicide attack and hid the evidence, a detonator, beneath his bed in his parents’ house, though he had already purchased his plane ticket to Amsterdam. He enrolled at an Islamic college, but was later arrested in November 2003.1120 Badat plead guilty1121 and cooperated with British authorities, resulting in his sentence being reduced from 13 to 11 years.1122 He was released from prison in March 2010.1123

! ! 1105 ‘Shoe bomb plotter given 13 years’, BBC News, 22 April 2005; ‘Saajid Badat: “walking angel” who became a terrorist’, Daily Telegraph, 16 April 2012. 1106 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006) p. 229. 1107 ‘Deposition in U.S. v. Adis Medunjanin’, p. 49; ‘Shock as “walking angel” arrested’, BBC News, 28 November 2003; ‘British would-be shoe bomber admits plot to blow up plane’, Guardian, 1 March 2005. 1108 ‘Deposition in U.S. v. Adis Medunjanin’, p. 51. 1109 R v Saajid Badat, Prosecution Opening of Facts, p. 2. 1110 ‘Deposition in U.S. v. Adis Medunjanin’, 29 March 2012, pp. 27, 53. 1111 ibid, p. 51. 1112 ibid, pp. 52-3. 1113 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006) p. 225. 1114 ibid, p. 230. 1115 ‘Deposition in U.S. v. Adis Medunjanin’, pp. 8-11. 1116 ibid, p.9. 1117 ibid, p. 18. 1118 ibid, pp. 30, 68. 1119 ibid, pp. 35-8. 1120 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006) pp. 231-2. 1121 Johnson, W., ‘Shoe bomber Saajid Badat has jail sentence cut’, Independent, 16 April 2012, available at: http://www.independent.co.uk/news/uk/crime/shoe- bomber-saajid-badat-has-jail-sentence-cut-7647927.html, last visited: 9 August 2016. 1122 ‘Application under section 75 of the Serious Organised Crime and Police Act’, Crown Prosecution Service, 13 November 2009, available at: www.cps.gov.uk/publications/docs/badat_transcript_of_s74_socpa_hearing.pdf, last visited: 9 August 2016. 1123 ‘Gloucester bomb plotter Saajid Badat spotted in city’, Gloucester Citizen, 17 April 2012, available at: www.gloucestercitizen.co.uk/Gloucester-bomb-plotter- Saajid-Badat-spotted-city/story-15837995-detail/story.html, last visited: 9 August 2016; ‘Deposition in U.S. v. Adis Medunjanin’, p. 46.

! ! 87 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Badat testified against Adis Medunjanin in 2012, who was subsequently sentenced to life for a plot to carry out suicide bombings on the New York subway.1124 In March 2014, he also testified against al-Qaeda spokesperson and bin Laden’s nephew, , sentenced to life for conspiring to kill Americans.1125 In April 2014, Badat testified against Abu Hamza-al Masri, who was subsequently convicted and jailed for life in the US for hostage-taking and plotting to establish a in Oregon.1126 He also gave testimony which was used during the trial of Babar Ahmed and Syed Talha Ahsan, who plead guilty to providing material support to terrorists.1127 In August 2015, the US State Department removed Badat from its list of designated global terrorists.1128

Foreign training/combat: Badat received six to eight months of training in light and heavy weapons, explosives and intelligence at Derunta training camp, al-Matar (aka al-Obaida) training camp, and al- Farooq training camp.1129

Movements: Bosnia (1998); (Afghanistan 1999, 2001); Belgium (2001); UK (2001).1130

Criminal history: Convicted of conspiracy to destroy, damage or endanger the safety of an aircraft in service in February 2005.1131

Known to the authorities: Unknown.

Networks and associates:

-! ‘Shoe-bomb’ plot: Richard Reid [Conspired with Reid to ‘shoe-bomb’ a transatlantic flight];1132 Nizar Trabelsi [Badat was sent from Afghanistan to meet Trabelsi in September 2001];1133 Abu Khabbab al-Masri [Badat visited the bomb-maker in Jalalabad in November 2001].1134

-! Al-Qaeda: Osama bin Laden [Badat met with bin Laden on more than one occasion,1135 meeting him in 2001 before leaving Afghanistan]; 1136 Abu Hafs al-Masri [Al-Qaeda’s military chief, Badat met al-Masri personally1137 and was dispatched to Belgium in September 2001 by him]; 1138 Saif al- Adel [Bin Laden’s director of terrorist operations abroad, al-Adel met with Badat1139 and sent him to Belgium in 2001]; Khalid Sheikh Mohammed [Met with Badat before he left Afghanistan in

! ! 1124 ‘New York bomb plotter Adis Medunjanin sentenced to life’, BBC News, 17 November 2012, available at: www.bbc.co.uk/news/world-us-canada-20371785, last visited: 9 August 2016. 1125 ‘UK man who plotted shoe bombing to testify at Bin Laden son-in-law trial’, Guardian, 11 March 2014; ‘Sulaiman Abu Ghaith sentenced to life in prison’, BBC News, 23 September 2014, available at: www.bbc.co.uk/news/world-us-canada-29331395, last visited: 9 August 2016. 1126 ‘Osama Bin Laden “gave me a hug and wished me well”: British supergrass tells Abu Hamza trial about his relationship with Al Qaeda leader’, Daily Mail, 28 April 2014, available at: www.dailymail.co.uk/news/article-2615297/Osama-Bin-Laden-gave-hug-wished-British-supergrass-tells-Abu-Hamza-trial-relationship-Al- Qaeda-leader.html, last visited: 9 August 2016 ; ‘Former al-Qaida operative turned informant testifies in Abu Hamza trial’, Guardian, 28 April 2014; ‘Radical cleric Abu Hamza jailed for life by US court’, BBC News, 9 January 2015, available at: www.bbc.co.uk/news/world-us-canada-30754959, last visited: 9 August 2016. 1127 ‘Two Britons who pleaded guilty to US terror charges seek access to secret files’, Guardian, 4 April 2014, available at: www.theguardian.com/world/2014/apr/04/britons-terror-charges-secret-file-trial-bomb, last visited: 9 August 2016. 1128 ‘In the Matter of the Designation of Sajid Mohammad Badat as a Specially Designated Global Terrorist Pursuant Section 1(b) of Executive Order 13224, as Amended’, US Federal Register, 26 August 2015, available at: www.federalregister.gov/articles/2015/08/26/2015-21162/in-the-matter-of-the-designation-of-sajid- mohammad-badat-as-a-specially-designated-global-terrorist, last visited: 9 August 2016; ‘Designation of Sajid Mohammed Badat as a Foreign Terrorist Organization’, US State Department, 19 December 2005, available at: www.state.gov/j/ct/rls/other/des/58253.htm, last visited: 9 August 2016. 1129 ‘‘Deposition in U.S. v. Adis Medunjanin’, pp. 7, 12, 19, 63-4 and 74. 1130 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006) and Deposition in U.S. v. Adis Medunjanin 1131 Saajid Badat, trial record sheet, private correspondence, Central Criminal Court, 17 June 2009. 1132 ‘Terror suspect admits plane plot’, BBC News, 28 February 2005. 1133 ‘Deposition in U.S. v. Adis Medunjanin’, 29 March 2012, pp. 30, 68. 1134 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 230. 1135 ‘Deposition in U.S. v. Adis Medunjanin’, p. 8. 1136 ibid, p. 35. 1137 ‘Deposition in U.S. v. Adis Medunjanin’, pp. 9-11; ‘Ministers paid £1m to suspect “seen at al-Qaeda terror camp”’, Daily Telegraph, 18 May 2014. 1138 ‘Deposition in U.S. v. Adis Medunjanin’, p. 18. 1139 ‘Deposition in U.S. v. Adis Medunjanin’, pp. 9-11; ‘Ministers paid £1m to suspect “seen at al-Qaeda terror camp”’, Daily Telegraph, 18 May 2014.

! ! 88 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

2001 and1140 told him to travel to Karachi to meet his nephew]; 1141 Ammar al-Baluchi [Nephew of Khalid Sheikh Mohammed who acted as one of Badat’s handlers]. 1142

-! Finsbury Park Mosque: Badat stayed at the mosque.1143 Feroz Abbasi [Badat was instructed to “look after” Abbasi in Kandahar and claims to have seen Abbasi at al-Farouq training camp in 2001. He acted as Abbasi’s translator in his meeting with two senior al-Qaeda figures].1144

-! The ‘Tooting Circle’: Babar Ahmad [The founder of Azzam Publications1145 and Bosnian veteran,1146 Badat claims Ahmad became his mentor and introduced him to the idea of “taking up arms in the name of Islam”].1147

OMAR ALTIMIMI

Role: Described as a “sleeper”, Altimimi was convicted of possession of material for a purpose connected with terrorism, including material on how to establish cells.1148

Bio: Altimimi came to the UK in 2004 from the Netherlands1149 and sought to claim asylum for himself and his family, moving to Bolton and looking for work in teaching and law enforcement.1150 In 2006 he was arrested on suspicion of money laundering, which led to a police search of his home. Information seized from his computer contained files on the organisation of a terror cell, how to make explosives, ‘bombing strategies,’ details of targets and recordings of executions. He was also found to have created multiple identities for himself. In July 2007, Altimimi was sentenced to nine years in prison for six counts of possessing documents for the purposes of terrorism and three years for offences relating to the proceeds of crime.

Foreign training/combat: Unknown.

Movements: UK (2004).

Criminal history: Initially arrested on suspicion of money laundering, Altimimi was convicted of possessing documents for the purposes of terrorism and offences relating to the proceeds of crime.

Known to the authorities: Originally investigated over money laundering suspicions.1151

Networks and associates:

-! US Embassy and Cultural Centre plot (2001): Jerome Courtailler [Altimimi stayed at an apartment in Rotterdam in which Courtailler had also lived]. ! ! 1140 ‘Deposition in U.S. v. Adis Medunjanin’, p. 35. 1141 ibid, p. 36. 1142 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), pp. 89-90. 1143 ‘Former al-Qaida operative turned informant testifies in Abu Hamza trial’, Guardian, 28 April 2014. 1144 Mendick, R., ‘Ministers paid £1m to suspect 'seen at al-Qaeda terror camp’’, The Telegraph, 18 May 2014, available at: http://www.telegraph.co.uk/news/uknews/terrorism-in-the-uk/10838411/Ministers-paid-1m-to-suspect-seen-at-al-Qaeda-terror-camp.html, last visited: 9 August 2016. 1145 Herbig, K., Changes in Espionage by Americans: 1947-2007, (Northrop Grumman Technical Services, March 2008). 1146 ‘The trials of Babar Ahmad: from jihad in Bosnia to a US prison via Met brutality’, Guardian, 19 March 2016, available at: https://www.theguardian.com/uk- news/2016/mar/12/babar-ahmad-jihad-bosnia-us-police-interview, last visited: 9 August 2016. 1147 ibid, pp. 52-3. 1148 ‘Man jailed over terror cell plans’, BBC News, 6 July 2007, available at: http://news.bbc.co.uk/1/hi/england/manchester/6277384.stm, last visited: 9 August 2016. 1149 ‘Altimimi and Abdullah’, The Counter-Terrorism Division of the Crown Prosecution Service (CPS), available at: http://www.cps.gov.uk/publications/prosecution/ctd_2007.html#a09, last visited: 9 August 2016. 1150 ‘Mystery asylum seeker kept bomb manuals’, The Telegraph, 6 July 2007, available at: http://www.telegraph.co.uk/news/uknews/1556659/Mystery-asylum- seeker-kept-bomb-manuals.html, last visited: 9 August 2016. 1151 ‘Altimimi and Abdullah’, The Counter-Terrorism Division of the Crown Prosecution Service (CPS).

! ! 89 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

-! Other: Junade Feroze [Jailed for 22 years for his part in Dhiren Barot’s bomb plots, Feroze’s phone number was found in Altimimi’s home];1152 Raschid Messoukat [It is believed Altimimi transferred £8,000 to Messoukat, who has been convicted of terrorism-related offences in Europe].1153

CHAOUKI BAADACHE: An Algerian sentenced to ten years in prison in France in 2004 alongside David Courtailler and Ahmed Laidouni for providing support to Islamist terrorists in Europe.1154 Part of a seven year enquiry into the networks involved in aiding French individuals to travel to Afghanistan to join al-Qaeda-linked groups,1155 Chaouki’s conviction was on the same charge as David Courtailler – conspiring with criminals engaged in a terrorist enterprise.

AHMED LAIDOUNI: A French national, Laidouni was sentenced to seven years in prison in France in 2004 alongside David Courtailler and Chaouki Baadache for providing support to Islamist terrorists in Europe.1156

JAMAL ZOUGAM: A Moroccan national convicted in November 2007 of involvement in the 2004 Madrid train bombings,1157 Zougam met Courtailler in a Madrid Mosque in 1998.1158 According to the French prosecutors who successfully brought charges against him, Courtailler knew Zougam and made contact with him after returning from Afghanistan.1159

MOINUL ABEDIN: A Bangladeshi-born resident of the UK arrested in Birmingham in November 2000, police discovered bomb-making handbooks and material used in making explosives on Abedin’s rented premises. David Courtailler’s false British driving licence was also discovered in his home.1160 Abedin was sentenced to 20 years in prison in February 2002 and released on licence in August 2012 before breaching his release terms over the use of a computer. He was returned to prison and will not be eligible for release until November 2020.1161

! ! 1152 Pantucci, R., “We Love Death as You Love Life”: Britain’s Suburban Terrorists, (London, 2015), pp. 178-9. 1153 'The terrorist in our midst', Manchester Evening News, 18 April 2010, available at: www.manchestereveningnews.co.uk/news/greater-manchester-news/the- terrorist-in-our-midst-997385, last visited: 9 August 2016. 1154 ‘Frenchman jailed for terror ties’, BBC News, 25 May 2004. 1155 ‘Three Islamist suspects to go on trial in France after seven-year enquiry’, Agence France Presse, 15 January 2004. 1156 ‘Frenchman jailed for terror ties’, BBC News, 25 May 2004. 1157 Hamilos, P., ‘Mass murderers jailed for 40 years as judge delivers verdicts on Spain's 9/11’, Guardian, 1 November 2007, available at: https://www.theguardian.com/world/2007/nov/01/spain.international, last visited: 9 August 2016. 1158 ‘Europe 'must share terror intelligence'’, Independent, 17 March 2004, 1159 ‘Frenchman jailed for terror ties’, BBC News, 25 May 2004. 1160 ‘Police investigation: How many more are out there?’, Independent, 23 July 2004. 1161 ‘Bomb-maker inspired by al-Qaeda loses appeal against 20-year prison sentence’, Birmingham Mail, 4 February 2016, available at: http://www.birminghammail.co.uk/news/birmingham-bomb-maker-inspired-al-8574078, last visited: 9 August 2016. ! ! 90 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

3.!Analysis

3.1 Introduction

The biographical profiles in this report cover two networks of extremists separated by over ten years and associated with two different Islamist groups now violently at odds with one another. While many of the men involved in the networks and plots of the later 1990s and early 2000s were associated with al-Qaeda and its Afghan training camps, or with al-Qaeda-linked North African groups like the GIA or GSPC, those behind the recent attacks in Brussels and Paris appear to have instead been closely connected to IS. Despite this, there is a clear continuity between the Islamism-inspired terrorist activity in Europe of the late 1990s and early 2000s and the threat faced by the continent today. The most striking evidence of this is the direct connections between individuals involved with the older al-Qaeda-inspired networks and the modern networks associated with IS. When the extent of this network’s involvement in the Paris and Brussels attacks are documented, it is clear a direct line exists between the violent extremism and terrorism of the old and new networks.

The repeated failure of the police and security services to recognise quickly enough the pernicious impact of recruitment networks responsible for radicalising people and providing them with access to training and combat experience overseas also demonstrates this continuity. In both cases, the networks used similar structures to recruit individuals and aid their travel to areas in which attacks could be planned and training provided. These structures meant members of the networks were able to exploit access to safe havens overseas where training, networking and attack planning could take place, showing the importance of challenging both the recruitment networks and the groups which provide sanctuary for terrorist training. Other biographical similarities, such as a history of crime and drug use among network members prior to their involvement in Islamism-inspired terrorism, are also a common factor across both networks, and highlight further the endurance of the Islamist threat to Europe.

These similarities demonstrate the extent to which the threat facing Europe from Islamist terrorism today mirrors that of the late 1990s and early 2000s, and highlight their importance for those seeking to challenge radicalisation and terrorism. However, it is also important to understand why the modern networks affiliated with IS have had greater success than those connected to al-Qaeda. The network created by Abaaoud was able to commit a second large-scale attack, with those involved in logistical roles during the Paris attacks transitioning to operational roles in the Brussels attacks, a unique development for an Islamism-inspired network in Europe.1162The experience provided by the connections to the old network, differences in the way connections developed between the modern network members, and the operation of network members on ‘home territory’ may be behind this increased robustness – something policy-makers and practitioners seeking to counter future attacks should look to take into account.

3.2 Network Connections

The existence of direct connections between individuals involved with the older al-Qaeda-inspired networks and the groups which would attack Paris and Brussels are of particular concern as they appear to show those peripherally involved in terrorist activity going on to be involved in the recruitment of the next generation of militants. This suggests that even when the original networks were broken up and individuals involved convicted of offences, an element of recidivism remained a significant problem,

! ! 1162 Gartenstein-Ross, D. and Nathaniel Barr, ‘Recent Attacks Illuminate the Islamic State’s Europe Attack Network’, The Jamestown Foundation, 27 April 2016. ! ! 91 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW raising questions about how to ensure those found guilty of offences do not return to illegal Islamist activism on release. The identification of these connections also raises questions about how those on the fringes of the networks, as documented below in the case of Fatima Aberkan, can be identified and engaged with prior to their greater involvement in terrorist networks.

3.3 The Zerkani Network and al-Qaeda

The connections in question revolve around the assassination of the Afghan militia commander Ahmad Shah Massoud, murdered in a suicide bombing two days before the 9/11 attacks. It has been suggested that the attack on Massoud, carried out by Tunisians Dahmane Abd el-Sattar and Bouraoui El-Ouaer,1163 was ordered by Osama bin Laden in anticipation of any role Massoud might play should the US target Afghanistan and his Taliban hosts following the 9/11 attacks.1164 Several terrorists profiled as part of the older network were involved in the assassination of Massoud, and a number of Belgium-based extremists convicted of involvement in the attack or associated with those involved would later be imprisoned for their involvement in the so-called ‘Zerkani network’. This group radicalised and recruited young men to travel to fight in Syria, including Abdelhamid Abaaoud, the leader of the team which carried out the Paris attacks in November 2015, and Najim Laachraoui, one of the suicide bombers who struck Brussels airport in March 2016.

Abdelhouaid Aberkan, convicted as a member of the Zerkani network in July 2015, had previously been convicted in 2003 for his role in the assassination of Massoud, and is believed to have driven Abd el- Sattar to the airport as he departed on his mission to kill the Afghan warlord.1165 Aberkan’s sister, Fatima Aberkan, meanwhile, was a close associate of Abd el-Sattar’s wife Malika el-Aroud1166 and was arrested alongside her in 2007 in relation to an alleged plot to free the convicted al-Qaeda terrorist, Nizar Trabelsi, from prison before being released without charge.1167 Fatima Aberkan was convicted in July 2015 of involvement in Zerkani’s recruitment network and sentenced to eight years in prison, which was increased to 15 years by an appeal court in April 2016.1168 A third member of the Zerkani network involved with the assassination of Massoud,1169 Abderrahmane Ameroud, was convicted in 2005 as an accomplice to the attack and sentenced to seven years in prison.1170

These historic connections between members of the Zerkani network who would radicalise the next generation of militants and the al-Qaeda-linked militants behind the assassination of Massoud demonstrate the direct line which exists between the Islamist terrorism of the early 2000s and today. The clearest example of this is the radicalisation of Abdelhamid Abaaoud, who became associated with the Zerkani network on his release from prison in 2012 and was given a 20 year sentence in absentia in connection with his involvement with the network.1171 Another of the Paris attackers, Chakib Akrouh, became associated with the extremist network related to Khalid Zerkani before travelling to Syria and was ! ! 1163 ‘France gives 5 who aided terrorism jail sentences of up to 7 years’, The New York Times, 17 May 2005. 1164 ‘Ahmed Shah Massoud: A Decade After His Murder, Would Afghanistan Be Different Were He Alive?’, Time, 9 September 2011, available at: http://world.time.com/2011/09/09/ahmed-shah-massoud-a-decade-after-his-murder-would-afghanistan-be-different-were-he-alive/, last visited: 9 August 2016. 1165 ‘Men jailed over Al Qaeda anti-NATO plot’, ABC News, 30 September 2003; Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016; and ‘Country Reports on Terrorism 2004’, US State Department, April 2005, p. 45. 1166 Higgins, A. and Kimiko De Freytas-Tamura, ‘A Brussels Mentor Who Taught ‘Gangster Islam’ to the Young and Angry’, International New York Times, 11 April 2016. 1167 Van Vlierden, G., ‘PROFILE: PARIS ATTACK RINGLEADER ABDELHAMID ABAAOUD’, Combating Terrorism Center at West Point, 15 December 2015. 1168 ‘‘Papa Noel’—the militant recruiter in Brussels who groomed young men for violence’, Los Angeles Times, 28 March 2016; and ‘Brussels jihadists: Belgian recruiter Zerkani given longer term’, BBC News, 14 April 2016. 1169 Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016. 1170 ‘Terror suspect shot and held by Brussels police 'had been jailed for seven years for helping Taliban assassinate Afghan leader two days before 9/11'’, Daily Mail Online, 26 March 2016. 1171 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016.

! ! 92 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW also convicted in absentia in July 2015 for “participating in a terrorist organisation” in connection with his relation to the network, receiving a five year prison sentence.1172 Like Abaaoud, Akrouh was to return from Syria to carry out the Paris attacks and was killed alongside Abaaoud during a police raid on 18 November 2015.1173

Salah Abdeslam, arrested in March 2016 after having played a key logistical role in the Paris attacks,1174 was eventually discovered alongside a man called Abid Aberkan at Aberkan’s mother’s address.1175 Aberkan is Fatima Aberkan’s nephew, and as such it is possible Abdeslam had some connection to the wider Zerkani network of which Fatima Aberkan was such an important part.1176 Just days after Abdeslam’s arrest, his associate Najim Laachraoui, who had been stopped in September 2015 at the Hungary-Austria border in a car driven by Abdeslam,1177 carried out a suicide attack on Zaventem airport in Brussels. He had been due to go on trial in absentia in May 2016 in connection with his relationship with the Zerkani network and has been described as an associate of the radical preacher.1178 Meanwhile, Reda Kriket, another man convicted in absentia in July 2015 as part of the Zerkani network1179 is the main suspect in a foiled Paris attack, charged with possessing and transporting arms and explosives and holding fake documents.1180 In yet another connection between the old and new networks, Abderrahmane Ameroud was also shot in the leg and arrested in Schaerbeek in March 2016 in relation to his suspected involvement in Kriket’s foiled plot.1181

3.04 The Buttes-Chaumont Connection

Away from the attacks on Paris and Brussels, the profiles also highlight direct connections between recent mass-casualty attacks and those involved in the al-Qaeda-linked networks of the late 1990s and early 2000s. Cherif Kouachi, one of the gunmen who targeted the Charlie Hebdo magazine offices in January 2015 is believed to have been radicalised by the notorious al-Qaeda recruiter, Djamel Beghal, whilst in prison from January 2005 to October 2006.1182 Kouachi visited Beghal, profiled as one of the key nodes in the old network, while Beghal was under house arrest,1183 playing football and trekking with him.1184 Kouachi was later arrested alongside Beghal due to his alleged involvement in a plot to free a convicted Islamist militant from prison, but released.1185 In addition, the Hypercache supermarket shooter, Ahmedy Coulibaly, met Beghal in prison between January and August 20051186 and visited him after his release.1187 Coulibaly was later convicted alongside Beghal of involvement in the prison break plot which Kouachi had been dropped from.1188

! ! 1172 Matthias Verbergt, ‘Paris-Attack Suspect Traveled to Syria in 2013’, The Wall Street Journal, 15 January 2016. 1173 Bacchi, U., ‘Paris attacks: Chakib Akrouh was Saint-Denis mystery suicide bomber who died alongside Abdelhamid Abaaoud’. 1174 Payne, E., ‘Salah Abdeslam claims a minor role in Paris terror attacks’, CNN, 26 March 2016. 1175 ‘Brussels attacks: Have blunders hampered Belgian investigation?’ BBC News, 15 April 2016. 1176 ‘Abid Aberkan reste en détention préventive’, 7 Sur 7, 25 March 2016. 1177 Blaise, L. and Aurelien Breeden, ‘Najim Laachraoui, 24, Bomb Maker for Paris and Brussels Attacks’, International New York Times, 25 March 2016. 1178 Blaise, L. and Aurelien Breeden, ‘Najim Laachraoui, 24, Bomb Maker for Paris and Brussels Attacks’, International New York Times, 25 March 2016; ‘Belgian court sentences jihadist recruiter to 15 years in prison’, France 24, 14 April 2016. 1179 ‘France charges main suspect in foiled attack plot’, The Times of Israel, 31 March 2016; and ‘Thwarted Paris plot linked to deadly Brussels ISIS cell’, CBS News, 25 March 2016. 1180 Mortimer, C., ‘Reda Kriket: Main suspect charged in connection with foiled Paris attack plot’, Independent, 30 March 2016. 1181 ‘France charges main suspect in foiled attack plot’, The Times of Israel, 31 March 2016; and ‘Thwarted Paris plot linked to deadly Brussels ISIS cell’, CBS News, 25 March 2016; Mortimer, C., ‘Reda Kriket: Main suspect charged in connection with foiled Paris attack plot’, Independent, 30 March 2016. 1182 Rayner, G. and David Barrett, ‘Charlie Hebdo suspect 'mentored' by Abu Hamza disciple’, The Telegraph, 8 January 2015. 1183 Halliday, J. et al., ‘Mentor of Charlie Hebdo gunmen has been UK-based’, Guardian, 11 January 2015. 1184 Gauthier-Villars, D. and Stacy Meichtry, ‘Algerian Terror Convict Links Paris Gunmen’, The Wall Street Journal, 13 January 2015. 1185 ‘French attacks inquiry centers on prison 'sorcerer' Beghal’, Reuters, 15 January 2015. 1186 ibid. 1187 Halliday, J. et al., ‘Mentor of Charlie Hebdo gunmen has been UK-based’, Guardian, 11 January 2015. 1188 ‘French attacks inquiry centers on prison 'sorcerer' Beghal’, Reuters, 15 January 2015.

! ! 93 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

The so-called Buttes-Chaumont network involved in this plot also featured Salim Benghalem, profiled in the new networks section of this report as an IS theatre commander for Europe and suggested to have played a significant role in organising the Paris attacks.1189 Benghalem was involved in a plot which Beghal was convicted for, and is also believed to have travelled to Yemen with Kouachi in 2011. He is thought to have travelled to Syria in 2013,1190 from where he is believed to have become involved in recruitment, being described as France’s top IS recruiter1191 and sentenced in absentia by a Paris court to 15 years for recruiting for IS.1192 While the extent of his connections to the Paris attack are unclear, his involvement with Beghal’s post-prison network demonstrates further evidence of the cross-over between the older al- Qaeda-linked militants of the early networks and the IS members currently working to recruit fighters and target the West.

3.5 Foreign Training and Combat Experience

The failure of the police and security services to deal swiftly enough with recruitment rings in both networks also raises concerns. Given the extent to which individuals with foreign training or combat experience have been involved in Islamist terrorism both in these networks and beyond, this suggests the lessons which should have been learned from the widespread foreign travel present in the old al-Qaeda- linked network were not taken into account. It also alludes to a wider similarity in the structures which have made up the networks operating within Europe over the past 15 to 20 years. Responsible for radicalising people and providing them with access to training and combat experience overseas, both networks featured recruiters with religious authority such as Abu Doha and Khalid Zerkani, as well as cell leaders tasked with identifying individuals who could be used to carry out operational and logistical roles, such as Djamel Beghal and Abdelhamid Abaaoud.

The threat posed by foreign fighters is clear, with data collated by the Henry Jackson Society previously demonstrating the extent to which the most serious terrorism plots in the UK have been influenced by individuals with overseas combat or training experience. This research found that “individuals who had previously fought in jihadist conflicts or trained abroad have been disproportionately involved in the most serious Islamism-inspired terrorism offences in the UK”. Between 1999 and 2010, 134 people were either convicted of such offences or killed themselves in suicide attacks, and almost one in five (19%, n=26/134) had attended foreign terrorist training camps and/or obtained combat experience abroad. Of eight major terrorism bomb plots planned or executed during this period, 41% of participants or plotters had attended foreign terrorist training camps and/or obtained combat experience abroad. Individuals with foreign terrorist training/combat experience were, therefore, much more prominent among the major Islamism- inspired terrorist offenders than they were among all Islamism-inspired terrorist offenders (41% and 19% respectively).1193

When this evidence is taken into account alongside the preponderance of ‘foreign fighter’ involvement in both the old al-Qaeda-linked networks and the plots in Europe planned by IS-directed networks, it is clear that this is an element of violent extremism which has not changed since the late 1990s. It also demonstrates the importance of taking the threat posed by individuals with such skills seriously, given their involvement in terrorist plots across Europe over the past 15 years, and of understanding the

! ! 1189 ‘Paris attacks: Was Salim Benghalem the real ringleader?’, BBC News, 23 January 2015. 1190 ibid. 1191 McHugh, J., ‘Who Is Salim Benghalem? Trial Begins For France's Top ISIS Recruiter, Called True Mastermind Of Paris Islamic State Attacks’, International Business Times, 1 December 2015. 1192 ibid. 1193 Stuart, H., ‘Understanding CAGE: A Public Information Dossier’, The Henry Jackson Society, March 2015, available at: http://henryjacksonsociety.org/wp- content/uploads/2015/04/Understanding-CAGE.pdf, last visited: 9 August 2016. ! ! 94 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW significance and necessity of spaces for training and operational planning to militants. Given that both networks sought to gain access to these spaces and used them to prepare for attacks, it also highlights the need to remove the ability to operate freely in these spaces – either through targeted military action or cooperation with local allies. Finally, it suggests that despite the widespread role of foreign/returned fighters in attack plots, European governments are still struggling to uncover these networks early enough or identify these individuals on their return.

3.6 The Afghan Connection

Of those individuals profiled, the failure to effectively challenge Khalid Zerkani’s recruitment network until up to 40 people had left for Syria and Iraq1194 echoes the inability to properly identify and challenge the networks used to recruit individuals to travel to Afghanistan in the late 1990s and early 2000s. Similarly to Zerkani, Abu Doha was allegedly able to use Finsbury Park Mosque to operate as one of the most significant al-Qaeda recruiters in Europe”,1195 creating “one of the most significant groups of terrorists in the United Kingdom”.1196 Djamel Beghal, meanwhile, frequented Finsbury Park Mosque and targeted the vulnerable young men who attended in his predatory efforts “to assemble a team of malleable volunteers” for al-Qaeda.1197 These included Richard Reid, recruited by Beghal after the men met at Finsbury Park Mosque where Reid was staying,1198 and Zacharias Moussaoui,1199 and possibly even Jerome Courtailler, believed to have been converted to Islam by Beghal.1200 The recruitment network at Finsbury Park Mosque also provided the means for new recruits to travel to Afghanistan, with David Courtailler given money and a fake passport by friends at Finsbury Park Mosque who sent him to train in Afghanistan.1201

Of those profiled in the early networks, over twenty individuals had some of military training, most commonly training which had been provided in camps linked to al-Qaeda in Afghanistan. These include the individuals closely associated with the circles which developed at Finsbury Park Mosque such as Djamel Beghal,1202 Kamel Daoudi,1203 and Nizar Trabelsi,1204 as well as those men Beghal and others are believed to have helped recruit at the mosque and elsewhere across London, such as Jerome and David Courtailler,1205 Zacharias Moussaoui,1206 Richard Reid,1207 and Saajid Badat.1208 Abu Doha, meanwhile, travelled to Afghanistan and is alleged to have taken part in the administration of Khalden training camp,1209 while his Canadian contact, Ahmed Ressam, attended the training camp in 1998.1210

However, other networks also featured a significant number of men with foreign combat training, including the so-called ‘Frankfurt cell’. Slimane Khalfaoui allegedly admitted to having fought in Bosnia

! ! 1194 Faiola, A. and Souad Mekhennet, ‘The Islamic State creates a new type of jihadist: Part terrorist, part gangster’, The Washington Post, 20 December 2015. 1195 Norton-Taylor, R., ‘Algerian detainee deported to France for alleged terror links’, Guardian, 16 September 2006. 1196 O’Neill, S., ‘Immigration powers used to hold al-Qaeda kingpin in jail’, The Times, 20 October 2006. 1197 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 225. 1198 ibid. 1199 Bird, S., ‘Quiet existence in Leicester suburb masked complex terrorist network’, The Times, 2 April 2003. 1200 ‘Europe Fears Islamic Converts May Give Cover for Extremism’, The New York Times, 19 July 2004. 1201 Norton-Taylor, R. and Rosie Cowan, ‘Madrid bomb suspect linked to UK extremists’, Guardian, 17 March 2004. 1202 ‘Six jailed over Paris bomb plot’, BBC News, 15 March 2005. 1203 ibid. 1204 Simcox, R. et al., ‘Islamist Terrorism: The British Connections’, The Henry Jackson Society (2011), p. 366. 1205 Barnett, A. et al., ‘UK student's 'key terror role'’, Guardian, 28 October 2001; and Burke, J., ‘AK-47 training held at London mosque’, Guardian, 17 February 2002. 1206 ‘Restless convert in quest for jihad’, BBC News, 3 May 2006. 1207 ‘Sources: Reid is al Qaeda operative’, International CNN, 6 December 2003. 1208 ‘Deposition in U.S. v. Adis Medunjanin’, pp.7, 12, 19, 63-4 and 74. 1209 Gardham, D., ‘Terrorist 'linked to Osama bin Laden' released on bail’, The Telegraph, 3 July 2008. 1210 ‘United States v. Ressam’, United States Court of Appeals for the Ninth Circuit, 12 March 2012.

! ! 95 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW and spent time in Afghanistan,1211 while Yacine Aknouche,1212 Fouhad Sabour,1213 Lamine Maroni,1214 Salim Boukhari,1215 Lazhar Ben Mohammed Tlili,1216 and Aeroubi Beandali1217 all spent time in Afghanistan. Another al-Qaeda operative connected to the plot, Said Arif, had travelled to Afghanistan in the late 1990s,1218 and would later flee to Syria following the outbreak of the conflict there before being killed in a Coalition airstrike.1219 In addition to the ‘Frankfurt cell’ members, at least two of the men convicted as part of the NATO airbase plot other than Nizar Trabelsi had experience of Afghan training camps, with Mohammed Amor Sliti involved in training militants1220 and his cousin Hisham bin Ali bin Amor receiving weapons training and fighting against Coalition forces.1221

Other members of the networks are likely to have gained training with other Islamist militant groups, with the al-Qaeda financiers Baghdad Meziane and Brahim Benmerzouga believed to have been members of the GIA in Algeria.1222 Similarly, Abu Doha’s protégée, Rabah Kadre, is alleged to have been a member of the GSPC.1223 Others, including Beghal, have been named as members of the GIA or GSPC who then travelled on to Afghanistan, including Merouane Benahmed, described as a former GIA commander,1224 and Tarek Maaroufi, convicted of involvement in GIA arms trafficking1225 before he travelled to Afghanistan.1226

3.7 The Syria/Iraq Connection

The Brussels-Paris networks offer a similar story. A recent interview with IS defector Abu Khaled suggested that IS operatives, raised in Europe and trained in Syria, are being deployed by IS to form networks with the sole purpose of attacking the West. Abu Khaled claimed that the IS leadership are “trying to make sleeper cells all over the world. [They] asked people to stay in their countries and fight there, kill citizens, blow up buildings, whatever they can do”.1227 This has been echoed by the suggestions that IS uses ‘theatre commanders’ to oversee attacks who originate in the regions over which they preside, with the theatre commander thought to be connected to the Paris-Brussels networks a French national called Salim Benghalem.1228

As a result, similarly to the older al-Qaeda-linked networks, many of those behind the Brussels and Paris attacks and associated cells travelled overseas to gain combat experience. Abdelhamid Abaaoud, the ringleader of the Paris attacks, is believed to have been close1229 to IS Shura Council member Amr al-

! ! 1211 ‘Brothers-in-law, one considered key player, investigated in French Strasbourg bomb plot’, Associated Press International, 29 November 2002. 1212 ‘London al-Qaeda suspect will face extradition’, Sunday Times, 10 March 2002. 1213 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 1214 ibid. 1215 ibid. 1216 ‘Tunisian May Hold Key to Guantanamo Trials’, CBS News, 13 November 2009. 1217 ‘Militant admits French bomb plot’, BBC News, 23 April 2002. 1218 ‘Terrorist Designation of Said Arif’, US Department of State, 18 August 2014. 1219 Joscelyn, T., ‘Another al Qaeda veteran reportedly killed while leading Jund al Aqsa in Syria’, The Long War Journal, 27 May 2016. 1220 Escobar, P., ‘The Roving Eye: Part 4: Tracking al-Qaeda in Europe’, Asia Times Online, 13 July 2002. 1221 ‘JTF-GTMO Detainee Assessment’, United States Department of Defense, 1 October 2008; and ‘JTF-GTMO Detainee Assessment’, United States Department of Defense, 1 October 2008; and Scheinkman, A. et al., ‘Hisham Bin Ali Bin Amor Sliti’ in ‘The Guantanamo Docket’, The New York Times. 1222 Mendick, R., ‘Leicester terrorist cell that laid seeds of Paris atrocity’, The Telegraph, 17 January 2015. 1223 Stuart, H. et al., Islamist Terrorism: The British Connections, 2nd edition (The Henry Jackson Society, 2011), pp. 445-6 1224 ‘France dismantles terror cell linked to al-Qaida, ministry says’ Associated Press International, 27 December 2002. 1225 ‘Men jailed over Al Qaeda anti-NATO plot’, ABC News, 30 September 2003. 1226 Zelin, A., ‘Tarek Maaroufi: Tunisia's Most Notorious Jihadist, Returns Home’, Tunisialive, 1 April 2012. 1227 ‘Confessions of an ISIS spy’, The Daily Beast, 15 November 2015, available at: http://www.thedailybeast.com/longforms/2015/isis-weiss/confessions-of-an-isis- spy.html, last visited: 9 August 2016. 1228Gartenstein-Ross, D, and Nathaniel Barr, ‘Recent Attacks Illuminate the Islamic State’s Europe Attack Network’, The Jamestown Foundation, 27 April 2016. 1229 Spencer, R., ‘Four jihadists, one prison: all released by Assad and all now dead’, The Telegraph, 11 May 2016.

! ! 96 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Absi1230 and is suspected of having been a member of Katibat al-Battar,1231 a militia in Syria associated with IS, and an IS military commander.1232 Other members of the Paris cell who had travelled overseas seeking combat experience or training included Chakib Akrouh,1233 Bilal Hadfi,1234 Sami Amimour,1235 Omar Ismail Mostefai,1236 and Foued Mohammed Aggad.1237 Of the men who would go on to strike Brussels in March 2016, Najim Laachraoui, was described as a “suspected ISIL commander” who travelled to Syria in 2013,1238 while Ibrahim Bakraoui travelled to Turkey in June 2015, and was identified as “a potential foreign fighter” intending to travel to Syria.1239 A number of the group’s associates also travelled to Syria, including Osama Krayem,1240 Mohamed Abrini,1241 and Mohamed Belkaid.1242

In addition, those involved in the recruitment of some of the network’s senior members also had experience of overseas conflict, including Khalid Zerkani, who has been described as a veteran of Afghan jihad,1243 Abderrahmane Ameroud, who reports claim travelled to an al-Qaeda training camp in Afghanistan in 1999,1244 and Fatima Aberkan, who is thought to have travelled to Syria in 2013 and 2014.1245 A number of the wider network members also spent time in Syria, including Gelel Attar,1246 Sami Zarrouk,1247 and Reda Kriket,1248 while two members of the so-called Verviers cell were claimed as former members by Katibat al-Battar.1249

3.8 Petty Crime and Fraud and Forgery

The extensive criminal history of members of the networks which struck Paris and Brussels over the past 18 months has led to members being referred to as a “new type of jihadist: part terrorist, part gangster”,1250 yet this history of petty crime is not new or unique to the Brussels-Paris network, nor to Islamist terrorists more widely. In the UK it can be found in the biographies of prominent paramilitaries in Northern Ireland such as Loyalists and Billy Wright,1251 and Republican Martin McGartland.1252 It can also be found in the backgrounds of 7/7 plotters Hasib Hussain, cautioned for shoplifting, and Shehzad

! ! 1230 ‘Security Council Al-Qaida Sanctions Committee Adds Names of Four Individuals and Two Entities to Its Sanctions List’, United Nations Meetings Coverage and Press Releases, 29 September 2015. 1231 Van Vlierden, G., ‘PROFILE: PARIS ATTACK RINGLEADER ABDELHAMID ABAAOUD’, Combating Terrorism Center at West Point, 15 December 2015. 1232 Allen, P., ‘Female jihadi in Paris attacks died of 'asphyxiation', say prosecutors - as her family sue French police claiming she was murdered by police’, Daily Mail Online, 21 January 2016; and Winsor, M., ‘Is Abdelhamid Abaaoud Dead? Top ISIS Military Commander, Alleged Paris Attacks Mastermind Killed In Saint- Denis Raid’, International Business Times, 19 November 2015, available at: http://www.ibtimes.com/abdelhamid-abaaoud-dead-top-isis-military-commander- alleged-paris-attacks-mastermind-2191696. Both last visited: 9 August 2016. 1233 Drozdiak, N. and Matthias Verbergt, ‘Paris-Attack Suspect Traveled to Syria in 2013’, The Wall Street Journal, 15 January 2016. 1234 Farmer, B. et al., ‘Who is Salah Abdeslam and who were the Paris terrorists? Everything we know about the Isil attackers’, The Telegraph, 18 March 2016. 1235 ‘Paris attacks: Samy Amimour, the ‘nice guy’ who became a jihadi’, Financial Times, 19 November 2015. 1236 Newton-Small, J., ‘Paris Attacker Is an Example of France’s Homegrown Terrorists’, Time, 15 November 2015; and ‘Profile: Omar Ismail Mostefai’, BBC News, 15 November 2015. 1237 ‘Paris attacks profile: Foued Mohamed-Aggad’, BBC News, 9 December 2015. 1238 Holehouse, M., ‘El-Bakraoui brothers: Who are the suicide bombers Khalid and Brahim behind the Brussels attacks?’, Daily Telegraph, 25 March 2016. 1239 Henley, J. and Kareem Shaheen, ‘Suicide bombers in Brussels had known links to Paris attacks’, Guardian, 23 March 2016. 1240 ‘Osama Krayem: Swedish jihadist linked to Brussels bombings charged with 'terrorist murder' over Paris attacks’, Independent, 20 April 2016; and Watkinson, W, ‘Brussels attack: Who is Osama Krayem the jihadi from Malmo arrested with 'Man in the Hat'?’, International Business Times, 10 April 2016. 1241 Newton, J. et al., ‘Terror suspect seen driving with Salah Abdeslam two days before Paris massacre had previously visited Syria, Belgian authorities reveal’, Daily Mail Online, 26 November 2015. 1242 ‘Dead Brussels gunman wanted to be ISIS suicide bomber’, New York Post, 19 March 2016. 1243 ‘At least 8 suspects are at large with links to attacks in Brussels, Paris’, CNN, 28 March 2016. 1244 Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016; and ‘Nouvelle reconduite vers l'Algérie’, Le Parisien, 29 July 2005. 1245 Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016. 1246 Malm, S., ‘Pictured: Belgian terror suspect 'with direct links' to Paris attackers who trained with Bataclan mastermind in Syria is arrested in Morocco’, Daily Mail Online, 18 January 2016. 1247 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 1248 ibid. 1249 Dalton, M., ‘Two Killed in Belgian Terror Raid Linked to Militants in Syria’, The Wall Street Journal, 3 February 2015. 1250 Faiola, A. and Souad Mekhennet, ‘The Islamic State creates a new type of jihadist: Part terrorist, part gangster’, The Washington Post, 20 December 2015. 1251 ‘Billy Wright: the loyalist assassin too violent for his comrades’, Telegraph, 15 September 2010, available at: http://www.belfasttelegraph.co.uk/news/northern-ireland/billy-wright-the-loyalist-assassin-too-violent-for-his-comrades-28558895.html, last visited: 9 August 2016. 1252 ‘IRA informer accuses police of abandoning him to die’, The Guardian, 22 April 2015, available at: https://www.theguardian.com/uk-news/2015/apr/22/ira- informer-police-abandon-die, last visited: 9 August 2016.

! ! 97 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Tanweer, cautioned for disorderly conduct.1253 More examples can be found among attackers with peripheral connections to both networks profiled in this report. The Charlie Hebdo office attackers, Cherif and Said Kouachi, were both involved in petty crime as part of a group of friends whose members were involved in theft and drug use.1254

Profiles of individuals involved in both networks covered, as well as the biographies of more recent attackers such as the man who carried out the 14 July attack on Nice,1255 also suggest involvement in petty crime has often been the only point of contact between individuals involved in terrorist attacks and the authorities. As such, it can be suggested identifying this history as a significant risk factor in an individual’s susceptibility to radicalisation, particularly if this involves a history of violent crime, may be crucial in helping provide policy-makers and practitioners with a better understanding of how to recognise those who may be at risk of recruitment and recognise behaviour which may be of concern. In addition to histories of petty crime prior to radicalisation, the profile also show that criminality was used as a means of funding violent Islamist activities by members of these networks. This provides further evidence individuals involved in the networks may come into contact with the authorities in relation to offences after their recruitment but prior to involvement in violence, providing further intervention opportunities.

3.9 Criminality in the Paris/Brussels Networks

The extent of the criminal histories identified by the profiles can be seen most clearly in the highly connected network of petty criminals which went on to form the heart of the IS-affiliated Islamist terror network that would launch two mass-casualty attacks in France and Belgium. Khalid and Ibrahim el- Bakraoui, who detonated suicide bombs in the Brussels Metro and Zaventem airport respectively, were known to the police owing to their long-term involvement in violent crime. Khalid had a history of car- jackings and bank robbery, as well as kidnap,1256 while his brother, Ibrahim, had a more substantial criminal record, opening fire on police officers during a violent robbery.1257 Like the el-Bakraoui brothers, the Abdeslam brothers also had a history of criminality. Salah Abdeslam and his brother Brahim had managed a bar which was shut down in 20151258 in connection with drug-related activity,1259 and Salah was detained and fined in 2015 after being caught in possession of cannabis.1260 In addition to their involvement with drugs, Salah was jailed for burglary in 2010,1261 while Brahim had been jailed for theft on at least two occasions.1262

This criminal activity has also been connected to other individuals who would go on to form the backbone of the networks behind the Brussels and Paris attacks. Salah Abdeslam was jailed along with childhood friend and ring-leader of the Paris attacks, Abdelhamid Abaaoud, for a 2010 burglary 1263 when the two broke into a garage in Ottignies, near Brussels. 1264 Abdelhamid Abaaoud has been described as a “repeat

! ! 1253 ‘Profile: Hasib Mir Hussain’, BBC News, 11 May 2006, available at: http://news.bbc.co.uk/1/hi/uk/4762263.stm; and ‘Profile: Shehzad Tanweer’, BBC News, 6 July 2006, available at: http://news.bbc.co.uk/1/hi/uk/4762313.stm. Both last visited: 9 August 2016. 1254 ‘Charlie Hebdo attackers: born, raised and radicalised in Paris’, Guardian, 12 January 2015, available at: http://www.theguardian.com/world/2015/jan/12/-sp- charlie-hebdo-attackers-kids-france-radicalised-paris, last visited: 9 August 2016. 1255 ‘Mohamed Lahouaiej-Bouhlel: who was the Bastille Day truck attacker?’, Guardian, 15 July 2016, available at: https://www.theguardian.com/world/2016/jul/15/bastille-day-truck-driver-was-known-to-police-reports-say, last visited: 9 August 2016. 1256 ‘Ibrahim and Khalid el-Bakraoui: From Bank Robbers to Brussels Bombers’, International New York Times, 24 March 2016. 1257 ibid. 1258 Kirby, P., ‘Paris attacks: Salah Abdeslam's luck runs out’, BBC News, 19 March 2016. 1259 Faiola, A. and Souad Mekhennet, ‘The Islamic State creates a new type of jihadist: Part terrorist, part gangster’, The Washington Post, 20 December 2015. 1260 Kirby, P., ‘Paris attacks: Salah Abdeslam's luck runs out’, BBC News, 19 March 2016. 1261 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 1262 ‘Is Europe still at threat from Paris-Brussels terror 'supercell'?’, France 24, 11 April 2016. 1263 ibid. 1264 Van Vlierden, G., ‘Profile: Paris Attack Ringleader Abdelhamid Abaaoud’, Combating Terrorism Center, 15 December 2015.

! ! 98 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW offender”1265 who associated with a “loosely organised” gang of youths in Brussels, which included Salah and Brahim.1266 As early as 2006, Abaaoud was convicted for concealing stolen goods, and three years later for violence and resisting police officers.1267 In 2011 he was convicted of illegal entry, and later sentenced for theft with violence and assault in 2012.1268 Mohammed Abrini, meanwhile, who was involved with both the Paris and Brussels attacks, was another of Salah’s childhood friends who had been jailed for crimes including theft and drug possession.1269 Abaaoud’s cousin, Hasna Aitboulahcen, who sheltered him while he was hiding from the authorities, was also under surveillance in relation to a narcotics operation at the time of the police raid in which she was killed alongside Abaaoud.1270

As well as within this network of friends and relatives, a history of criminality also features in the biographies of a number of the attackers and accomplices. Paris attacker, Omar Ismail Mostefai, was known as a “delinquent”1271 who, though never jailed, had been arrested eight times between 2004 and 2010.1272 Mostefai’s fellow Bataclan gunman, Foued Mohammed Aggad, was allegedly known to police as a petty criminal before he fled Strasbourg to travel to Syria.1273 Mohammed Belkaid, one of the accomplices in the Paris attacks, was known to the authorities following a 2014 theft;1274 while Mohammed Bakkali, arrested on 26 November 2015 in connection with the Paris attacks, is also alleged to have had a history of petty crime.1275 Brussels attacks accomplice, Osama Krayem, has also been alleged to have been involved in petty crime and drug use in Sweden, though it is unclear if he was ever convicted of any offences.1276 In addition to these Europe-based individuals, the IS theatre commander connected to the Paris attacks, Salim Benghalem, also has a history of criminality and was convicted of gang-related attempted murder in 2007 over an offence committed several years before.1277

Further examples of individuals connected to these networks having a history of petty crime can also be found outside of the two major plots, with Abaaoud’s associates in the Verviers cell reportedly having a history of theft and robbery. 1278 Mehdi Nemmouche, the alleged Brussels Jewish Museum gunman, had previously been imprisoned for robbery,1279 while Ayoub el-Khazzani had a history of drugs trafficking1280 and Nicholas Moreau had been involved with petty crime in Nantes before leaving to fight in Syria.1281 Meanwhile, a number of those connected to the Zerkani network which Abaaoud and Laachraoui were part of had similar histories. Yoni Mayne allegedly had a history of petty crime,1282 Reda Kriket had “multiple convictions for robbery, possession of stolen goods and acts of violence”,1283 and Abderramane

! ! 1265 ‘Islamic State creates a new type of jihadist: Part terrorist, part gangster’, Washington Post, 20 December 2015. 1266 Van Vlierden, G., ‘Profile: Paris Attack Ringleader Abdelhamid Abaaoud’, Combating Terrorism Center, 15 December 2015. 1267 ibid. 1268 ibid. 1269 ‘Brussels suspect: Check-in area for Tel Aviv flight was targeted’, The Times of Israel, 14 April 2016. 1270 ‘Is Europe still at threat from Paris-Brussels terror ‘supercell’?’ France 24, 12 April 2016. 1271 Newton-Small, J., ‘Paris Attacker Is an Example of France’s Homegrown Terrorists’, Time, 15 November 2015. 1272 ‘Profile: Omar Ismail Mostefai’, BBC News, 15 November 2015; Austin, H., ‘Paris attacks: Gunman Omar Ismail Mostefai a petty criminal with a record of radicalisation’, International Business Times, 15 November 2015, available at: http://www.ibtimes.co.uk/paris-attacks-gunman-omar-ismail-mostefai-petty-criminal- record-radicalisation-1528821, last visited: 9 August 2016. 1273 ‘Who was third Bataclan attacker Foued Mohamed-Aggad?’, BBC News, 9 December 2015. 1274 Chrisafis, A., ‘Two suspects still on run after Brussels anti-terror raid that killed one’, Guardian, 16 March 2016. 1275 Cruickshank, P., ‘Paris attacks: Directives came from operatives in Brussels, investigators say’, CNN, 7 January 2016. 1276 Watkinson, W., ‘Brussels attack: Who is Osama Krayem the jihadi from Malmo arrested with 'Man in the Hat'?’, International Business Times, 10 April 2016. 1277 ‘French IS group recruiter sentenced to 15 years in absentia’, France 24, 7 January 2015; and ‘Paris attacks: Was Salim Benghalem the real ringleader?’, BBC News, 23 January 2015. 1278 Dalton, M., ‘Two Killed in Belgian Terror Raid Linked to Militants in Syria’, The Wall Street Journal, 3 February 2015. 1279 ‘France arrests Syria jihad suspects as Nemmouche held’, BBC News, 1 June 2014. 1280 ‘France train shooting: Attack 'was well prepared'’, BBC News, 26 August 2015. 1281 ‘IS in Europe: The race to the death’, BBC News, 23 March 2016. 1282 Faiola, A. and Souad Mekhennet, ‘The Islamic State creates a new type of jihadist: Part terrorist, part gangster’, The Washington Post, 20 December 2015. 1283 Breeden, A., ‘Investigators Pursue Leads on Frenchman Accused of Terror Plot’, The New York Times, 31 March 2016.

! ! 99 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Ameroud, who along with his brothers is believed to have transitioned from petty crime to violent extremism,1284 have all been connected to the network.

3.10 Criminality in the al-Qaeda-linked Networks

Petty crime including drug use and fraud also features prominently in biographical details of members of the older al-Qaeda networks. Nizar Trabelsi, for example, who is alleged to have been involved with two major plots, had a history of petty crime, drug abuse and violence,1285 while another key figure, Djamel Beghal, had helped organise a kidnapping in 2000.1286 Beghal’s associates in the UK, Brahim Benmerzouga and Baghdad Meziane, had a history of fraud arrests and worked together to develop a vast credit card fraud,1287 while several of those he is suggested to have recruited had a history of drug abuse or petty crime, including David Courtailler,1288 Jerome Courtailler,1289 and Richard Reid.1290

Other cells, such as the Frankfurt cell which planned to attack the Strasbourg Christmas market were made up of members with similar histories of petty crime to the new IS networks. Mohammed Bensakhria, the group’s leader, is believed to have had a history of theft, assault, fraud and drug dealing,1291 while Aerobi Beandali was known to the police as a drug dealer.1292 Lamine Maroni dealt cannabis while based in the UK on his return from Afghanistan1293 and may have been convicted of robbery.1294 Yacine Aknouche, meanwhile, had been arrested in Germany for credit card fraud1295 and appears to have been involved in similar activity in the UK.1296 Two of those connected to the cell as liaisons or logistical support also appear to have been involved in criminality, with Mohammed Aouani wanted by the Italian authorities for links to a smuggling gang1297 and Lazhar Ben Mohammed Tlili connected to drug dealing in Milan1298 and the trafficking of explosives and identity papers.1299

Other extremists profiled as part of the old al-Qaeda-linked networks had also been involved in petty crime before being radicalised, with Hisham bin Ali bin Amor convicted of drug offences in Italy before escaping from prison and travelling to live with his cousin.1300 Others used petty crime to support them themselves. The LAX airport bomb plotter Ahmed Ressam stole suitcases and wallets from tourists1301 and was also involved in the trafficking of stolen driver’s licence numbers, bank cards, social security cards, passports and other identity documents.1302 In the UK, Brahim Benmerzouga and Baghdad Meziane used their well-developed fraud and forgery operation to fraudulently raise hundreds of thousands of

! ! 1284 Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016. 1285 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006), p. 226; and Johnson, Z., ‘Chronology: The Plots; Bin Laden's Striker: The case of Nizar Trabelsi’, PBS Frontline, 25 January 2005. 1286 Laville, S., ‘Terrorist organised children's kidnap’, Guardian, 1 July 2005. 1287 ‘Britain's first al Qaida terrorists jailed’, Daily Mail Online. 1288 ‘Europe fears Islamic converts may give cover for extremism’, The New York Times, 19 July 2004. 1289 Rotella, S. and David Zucchino, ‘Embassy plot offers insight into terrorist recruitment, training’, The Chicago Tribune, 22 October 2001. 1290 O’Neill, S. and Daniel McGrory, The Suicide Factory: Abu Hamza and the Finsbury Park Mosque (London: Harper Collins, 2006) p. 219. 1291 Finn, P., ‘Five Linked to Al Qaeda Face Trial in Germany’, The Washington Post, 15 April 2002. 1292 Boyes, R., ‘Algerians jailed for Christmas bomb plot’, The Times, 11 March 2003. 1293 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 1294 Finn, P., ‘Five Linked to Al Qaeda Face Trial in Germany’, The Washington Post, 15 April 2002. 1295 Burke, J., ‘Al-Qaeda trained hundreds from UK’, Guardian, 24 February 2002. 1296 Ulrich, A. et al., ‘The Changing Threat of Al-Qaida: How Widespread is Terrorism in Europe?’, Aus Dem Spiegel, 11 July 2005. 1297 ‘Libyan terrorism suspect remanded in custody in Germany’, Agence France Presse, 16 October 2001. 1298 ‘Tunisian May Hold Key to Guantanamo Trials’, CBS News, 13 November 2009. 1299 ‘The United States and Italy Designate Twenty-Five New Financiers of Terror’, US Department of the Treasury Press Release, 29 August 2002. 1300 ‘JTF-GTMO Detainee Assessment’, United States Department of Defense, 1 October 2008; and ‘JTF-GTMO Detainee Assessment’, United States Department of Defense, 1 October 2008; and Scheinkman, A. et al., ‘Hisham Bin Ali Bin Amor Sliti’ in ‘The Guantanamo Docket’, The New York Times. 1301 Heath, D., ‘Ahmed Ressam, mastermind of foiled LAX plot, gave up valuable details about al-Qaida without harsh interrogation’, The Center for Public Integrity, 3 June 2011, available at: https://www.publicintegrity.org/2011/06/03/4802/ahmed-ressam-mastermind-foiled-lax-plot-gave-valuable-details-about-al-qaida- without, last visited: 9 August 2016. 1302 ‘Ahmed Ressam’s Millennium Plot’, Frontline.

! ! 100 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW pounds for al-Qaeda and provided other extremists with false identities to help them travel to training camps in Afghanistan.1303

3.11 Fraud and Forgery in Both Networks

This illegal creation and dissemination of false documentation was a common feature of the petty crime committed across the network, including in relation to the plot to bomb the US Embassy in 2001. Jerome Courtailler, Abdelghani Rabia, and Adel Tobbichi were all accused of providing fake travel documents to the proposed attackers1304 while Mohammed Berkous was alleged to have discussed providing fake documentation with Nizar Trabelsi.1305 Courtailler was also linked to the supply of fake documents used during the killing of Ahmad Shah Massoud,1306 while Mohammed Amor Sliti and Tarek Ben Maaroufi1307 were both convicted of “trafficking false passports” in connection with the assassination.1308

When Lamine Maroni, Salim Boukhari, Aeroubi Beandali and Mohamed Bensakhria were arrested in Frankfurt, police discovered fake passports and stolen IDs.1309 Other members of the cell who were linked to similarly fraudulent activities include Yacine Aknouche, who used a false passport to enter the UK1310 and a fake French passport to travel to Afghanistan.1311 Stolen and false passports were also discovered at Nicolas Belloni’s apartment when both he and his brother-in-law, Slimane Khalfaoui, were arrested.1312 Abdelkader Tcharek was found to have used false documents for terrorist purposes,1313 and Mohamed Aouani, linked to the ‘Frankfurt cell’,1314 allegedly forged and sold false documents, such as passports, identity cards and driver’s licences.1315

The fraudulent creation and use of false documentation is also apparent in travel of the new IS-affiliated network, with Djamal Eddine Ouali arrested in March on suspicion of being part of a criminal network supplying false documents, and is believed to have provided Najim Laachraoui with fake ID.1316 Laachraoui was able to use the alias ‘Soufiane Kayal’ when he was stopped at the Austria-Hungary border on 19 September 2015 with Salah Abdeslam and Mohamed Belkaid.1317 Belkaid, meanwhile, used a fake Belgian ID with the name Samir Bouzid.1318 In addition to these examples, the Paris attack coordinator, Abdelhamid Abaaoud, is reported to have made several trips between Syria and Europe,1319 allegedly entering the UK using a fake passport.1320 Other members of the network used fake documentation as they exploited migrant routes into Europe, with Ahmed al-Mohammed using a fake Syrian passport1321 and Osama Krayem posing as a migrant using the name Naim al Hamed.1322 Another man,1323 Soufiane Ayari,

! ! 1303 ‘Britain’s first al-Qaeda terrorists jailed’, Daily Mail, 1 April 2003. 1304 ‘Dutch prosecutors appeal acquittal of Islamic militants in bomb plot’, Agence France Presse, 19 December 2002. 1305 ‘Suspect arrested in foiled embassy plot’, Chicago Tribune, 23 June 2002. 1306 Simcox, R. et al., ‘Islamist Terrorism: The British Connections’, The Henry Jackson Society (2011), p. 365. 1307 ibid. 1308 ‘Men jailed over Al Qaeda anti-NATO plot’, ABC News, 30 September 2003. 1309 Harris, P. et al., ‘Al-Qaeda's bombers used Britain to plot slaughter’, Guardian, 21 April 2002. 1310 Burke, J., ‘Al-Qaeda trained hundreds from UK’, Guardian, 24 February 2002. 1311 ‘French find a 'goldmine' of information’, News 24 Archives, 10 February 2002. 1312 ‘Brothers-in-law, one considered a key player, investigated in French Strasbourg bomb plot’, Associated Press International, 29 November 2002. 1313 ‘Algerian faces charges of conspiracy to commit terrorist acts’, Agence France Presse, 14 November 2001. 1314 Simcox, R. et al., ‘Islamist Terrorism: The British Connections’, The Henry Jackson Society (2011), p. 446. 1315 ‘A Nation Challenged: Milan; Italian Tapes Portray Young Arabs Operating on the Edges of Islamic Terror’, The New York Times, 29 October 2001 and ‘Libyan terrorism suspect remanded in custody in Germany’, Agence France Presse, 16 October 2001. 1316 Robinson, J., ‘Arrested at gunpoint: Armed Italian police swoop on Algerian linked to Paris and Brussels terror attacks’ Daily Mail Online, 27 March 2016. 1317 ‘How are the Brussels attackers linked to Paris?’ France 24, 21 April 2016. 1318 ‘Mohamed Belkaid, Brussels Gunman, Sought Islamic State Suicide Mission’, The Huffington Post, 19 March 2016. 1319 Whitehead, T. and Colin Freeman, ‘Brussels explosions: The Isil terror cell that spread across Europe’, The Telegraph, 22 March 2016. 1320 Stone, J., ‘Paris attacks ringleader Abdelhamid Abaaoud 'visited UK over the summer', intelligence agencies believe’, Independent, 26 December 2015. 1321 Farmer, B. et al., ‘Who is Salah Abdeslam and who were the Paris terrorists? Everything we know about the Isil attackers’, The Telegraph, 18 March 2016. 1322 ‘How are the Brussels attackers linked to Paris?’ France 24, 21 April 2016. 1323 ibid.

! ! 101 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW used fake identification to travel under the aliases ‘Amine Choukri’1324 and ‘Monir Ahmed Alaaj’.1325 While it is unclear if he used them, Reda Kriket also possessed an abundance of false documents1326 when he was arrested in March 2016. 1327

3.12 Differences in Militant Networks

Despite the abundance of functional and biographical similarities one obvious difference stands out between the two networks — the increased success of the IS-affiliated plots when compared to the al- Qaeda-linked plots. Given the networks were both structured in much the same way, recruited individuals with similar backgrounds, and provided many of their members with training overseas, the question of what differences enabled the IS-affiliated network to carry out two successful mass-casualty attacks is a vital one. When analysing the biographical data provided in the profiles of both networks, the differences which become apparent are the divergent nature of the way in which connections developed between the modern network members, and the operation of the network members on ‘home territory’ rather than the more rootless nature of the old al-Qaeda-linked groups. It is possible that these two factors contributed to the increased robustness of the new network, with close family and friendship connections more apparent across both the Paris and Brussels plots, and many of those involved facilitating attacks very close to the areas in which they had been raised.

However, before addressing these points, it is also important to return to the importance of the direct connections between the two networks, and the access to hard-won experience provided by individuals from the old networks this offers. Khalid Zerkani, responsible for running one of the major recruitment nodes within the new network, has been described as a veteran of Afghan jihad,1328 while his associate, Fatima Aberkan, had long moved in extremist circles connected to the old al-Qaeda-linked networks profiled in this report, developing communications routes with a senior al-Qaeda fighter based in Afghanistan and Pakistan.1329 Another member of the Zerkani network who was alleged to be involved in a plot to target Paris, Abderrahmane Ameroud, is also believed to have travelled to an al-Qaeda training camp in Afghanistan in 1999.1330 This suggests that the recruitment network would have been able to use the knowledge gained from this history of Islamist activism to aid their efforts to recruit young men to travel to Syria, and impart this knowledge of previous European terrorist networks to their recruits. The same is true of Salim Benghalem’s connection to the network surrounding Djamel Beghal during his time under house arrest, with Benghalem now based in Syria and believed to be involved in attack planning.

3.13 The Family and Friendship Group

Meanwhile, the networks behind the attacks in Paris and Brussels will also have been able to learn from the failures of the cells which sought to target Paris and Strasbourg regardless of whether or not there were any direct personal connections. One of the lessons learned may have been the importance of network security to prevent plots from being uncovered before attacks could be carried out, with an apparent change in recruitment focus to the identification and contacting of a network of old friends and family connections, rather than the long-term predatory grooming of vulnerable individuals. When compared to the old al-Qaeda-linked networks recruited by leaders like Djamel Beghal and Abu Doha, which ! ! 1324 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 1325 ‘How are the Brussels attackers linked to Paris?’ France 24, 21 April 2016. 1326 Mortimer, C., ‘Reda Kriket: Main suspect charged in connection with foiled Paris attack plot’, Independent, 30 March 2016. 1327 ‘Man accused of plotting French terror tied to 2015 Paris attacks ringleader’, CNN, 25 March 2016. 1328 ‘At least 8 suspects are at large with links to attacks in Brussels, Paris’, CNN, 28 March 2016. 1329 Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016; 1330 Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016; and ‘Nouvelle reconduite vers l'Algérie’, Le Parisien, 29 July 2005. ! ! 102 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW identified at-risk individuals like Richard Reid or Saajid Badat as potential recruits for the cause first and foremost, the core of the Brussels-Paris networks knew each other from childhood and moved through a period of petty crime before becoming involved with the terror network developed by Abaaoud.

However, while the connections to family, friends and neighbourhoods developed by the new network differ from the old al-Qaeda-linked networks associated with Beghal and Doha, where there are fewer instances of familial connection, it is not an unusual element within terrorist networks. Family ties in particular have been identified as important to the development of terrorist networks from the Italian Red Brigades to al-Qaeda in Iraq.1331 They can also be seen in a number of Islamist terror networks which sought to carry out attacks in the UK over the past 15 years, with the failed 21/7 attacks on the London transport network providing a clear example. Hussain Osman’s wife, Yeshiemebet Girma, provided transport, a mobile phone and cash for Osman, and cleared his home of evidence following the attacks. Osman also relied upon his sister-in-law, Mulumebet Girma, who provided him with safe houses in Brighton and treated his wounds, and his brother-in-law, Esayas Girma. Meanwhile, the failed bomber at Oval station, Ramzi Mohammed, was provided with a mobile phone and food while in hiding by his brother Wahbi, who was also responsible for the camera on which the bombers filmed their suicide missions. Yassin Omar, the failed Warren Street bomber, relied on a close friend he had been fostered alongside to remove evidence from his flat, and also used a school friend, Adel Yahya, to gather bomb- making information and purchase hydrogen peroxide for use in the bombs.1332

Mohammed Hafez has suggested that the use of these networks helps “link individuals who share similar beliefs or a social category”, provide environments in which “trust is already established and the risk of talking to the “wrong people” is minimized”, and ensures “defection from the group entails a double betrayal — betraying the cause and betraying one’s family”.1333 In the case of the Paris-Brussels network, it is clear that utilising such connections provided greater success than the al-Qaeda-linked networks plots, and also saw the group able to carry out a second attack just days after the arrest of several of the network’s major members on 18 March 2016.

It is also interesting to note that several attacks linked back to Abaaoud which failed appear to have followed the pattern of recruitment more closely associated with the old networks. Identifying individuals he had no previous connections to while in Syria, Abaaoud sought to recruit fighters for smaller one-off attacks in Europe. These included Reda Hame, trained in weapons usage by Abaaoud and dispatched to Paris but arrested after another unnamed recruit Abaaoud had sent to Spain was arrested and told the authorities of Hame’s plans. Other plots planned in a similar way included Sid Ahmed Ghlam, who accidently shot himself in the leg before he could carry out Abaaoud’s request to strike a Parisian church, and Ayoub el-Khazzani, who was overpowered by passengers as he sought to open fire on a train.1334

3.14 The Close Connections of the Paris/Brussels Networks

Conversely to the recruitment of these individuals, the exploitation of close family and friendship connections pre-dating Islamist activity was an important characteristic of the IS-affiliated networks responsible for the attacks on Paris and Brussels, with two sets of brothers playing a major role in both attacks, and long-term relationships developed through criminal histories, childhood friendships and

! ! 1331 Hafez, M., ‘The Ties that Bind: How Terrorists Exploit Family Bonds’, CTC, 19 February 2016, available at: https://www.ctc.usma.edu/posts/the-ties-that-bind- how-terrorists-exploit-family-bonds; and ‘Jihad by family’: Why are terrorist cells often made up of brothers?’, Guardian, 17 November 2015, available at: https://www.theguardian.com/world/2015/nov/17/jihad-by-family-terrorism-relatives-isis-al-qaeda. Both last visited: 9 August 2016. 1332 Stuart, H. et al., Islamist Terrorism: The British Connections, 2nd edition (The Henry Jackson Society, 2011), pp. 60-77, 91. 1333 Hafez, M., ‘The Ties that Bind: How Terrorists Exploit Family Bonds’, CTC, 19 February 2016. 1334 ‘How ISIS built the machinery of terror under Europe’s gaze’, The New York Times, 29 March 2016. ! ! 103 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW family connections existing between network members. These later solidified as a result of involvement in the same extremist circles in Europe or contact in Syria and formed the backbone of the terrorist network behind the attacks.

In addition to the close family ties that saw the Abdeslam brothers and el-Bakraoui brothers work together on the attacks, two of the central figures in the plots, Abdelhamid Abaaoud and Salah Abdeslam, had been childhood friends,1335 and had become involved in criminality together from a young age. Despite Abdeslam not traveling to Syria or becoming involved with the extremist networks Abaaoud had associated with before travelling, the connection between the two men was enough that Abaaoud was able to recruit him to play a logistical role in the Paris attacks he was planning. Mohamed Abrini, meanwhile, who was caught on CCTV just north of Paris with Abdeslam and a car used in the attacks had lived in the same area as the Abdeslam brothers and Abaaoud1336 and was a close childhood friend of Salah Abdeslam.1337 Abrini would go on to play a role in the Brussels attacks as well, connecting with other Brussels-based extremists in the process. One of these, bomb-maker and airport suicide bomber Najim Laachraoui, had also become involved with the Zerkani network1338 before connecting with Abaaoud in Syria.1339 Another figure allegedly involved in the Brussels attacks, airport worker Youssef El Ajmi, is reported to have been a childhood friend of Khalid el-Bakraoui.1340

As well as these personal connections, Abaaoud also exploited a wider family relationship, calling his cousin, Hasna Aitboulahcen, as he sought to hide from the police and asking her “to find him a hideout and spare shoes and clothes”, as well as sheltering with her while he was hiding from the authorities alongside Chakib Akrouh.1341 Like Abaaoud, Akrouh had grown up near the Abdeslam brothers in Molenbeek and become associated with the Zerkani network before travelling to Syria.1342 Similar family connections also straddle the plots and networks involved, with Lazez Abraimi, who is alleged to have driven Salah Abdeslam to Brussels after the Paris attacks, the younger brother of Noureddine Abraimi,1343 who allegedly provided logistical support to Abaaoud as part of the Verviers cell.1344 Senior Zerkani network member Fatima Aberkan’s nephew, Abid Aberkan, also appears to have been involved in sheltering those involved in the attacks. Described as “a distant cousin” of Abdeslam’s,1345 he appears to have provided Abdeslam and Soufiane Ayari with a place to hide at his mother’s house, where the two men were eventually arrested.1346

As a result of the extent of these long-term personal connections between members of the network, it also appears the network was also able to establish a relationship with areas of Brussels like Molenbeek, which may have provided the terrorist network with a more benign area in which to operate. Mohammed Abrini, the Abdeslam brothers and Abdelhamid Abaaoud all grew up in the same neighbourhood in Molenbeek,1347 while the el-Bakraoui brothers grew up in nearby Laeken1348 and Najim Laachraoui grew

! ! 1335 ‘Paris attacks: Salah Abdeslam’s luck runs out’, BBC News, 19 March 2016. 1336 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015. 1337 ‘Paris attacks suspect Salah Abdeslam ‘had planned to target Brussels’, Guardian, 20 March 2016. 1338 Blaise, L. and Aurelien Breeden, ‘Najim Laachraoui, 24, Bomb Maker for Paris and Brussels Attacks’, International New York Times, 25 March 2016; ‘Belgian court sentences jihadist recruiter to 15 years in prison’, France 24, 14 April 2016. 1339 ‘How Islamic State Infiltrated Europe’, The Wall Street Journal, 1 April 2016. 1340 ‘Attentats a Bruxelles: la detention de Youssef El Ajmi prolongee’, La Libre, 8 July 2016. 1341 ‘Paris attacks: ‘I exposed Abaaoud’ says witness’, BBC News, 4 February 2016, available at: http://www.bbc.co.uk/news/world-europe-35491902, last visited: 9 August 2016. 1342 Drozdiak, N. and Matthias Verbergt, ‘Paris-Attack Suspect Traveled to Syria in 2013’, The Wall Street Journal, 15 January 2016. 1343 Dalton, M., ‘Investigators Home In on Scope of Terror Network Behind Brussels, Paris Attacks’, The Wall Street Journal, 4 April 2016. 1344 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015. 1345 ‘Captured Paris terror suspect Salah Abdeslam says he planned more attacks’, The Wall Street Journal, 21 March 2016. 1346 ‘Brussels attacks: Have blunders hampered Belgian investigation?’ BBC News, 15 April 2016. 1347 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015. 1348 ‘Ibrahim and Khalid el-Bakraoui: From Bank Robbers to Brussels Bombers’, International New York Times, 24 March 2016.

! ! 104 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW up in Schaerbeek, where one of the group’s safe houses was found.1349 Both Abrini and Abdeslam also returned to Brussels after the Paris attacks.1350 In addition to these men, Khalid Zerkani, the recruiter whose network was connected to attackers including Abaaoud, Laachraoui, and Chakib Akrouh also operated out of mosques in Molenbeek.1351 This is lacking in the older network, whose members were often born in North Africa before travelling to Europe as young men, and then travelling extensively across Europe after this, with individual institutions like Finsbury Park Mosque playing a more important role than the neighbourhoods they had grown up in.

! ! 1349 ‘Masterminds of Terror’, Raconteur, May 2016, p. 26 1350 ‘Factbox: The hunt for the Paris attackers’, Reuters, 24 December 2015; and ‘Mohamed Abrini: Belgian authorities issue international arrest warrant for new Paris attack suspect’, The Independent, 24 November 2015, available at: http://www.independent.co.uk/news/world/europe/mohamed-abrini-paris-attacks-suspect- salah-abdeslam-a6747606.html, last visited: 9 August 2016. 1351 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016. ! ! 105 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

4.!Conclusions and Implications

4.1 Conclusions

The mass-casualty attacks carried out by IS gunmen and suicide bombers in Paris on 13 November 2015, and Brussels on 22 March 2016, saw the first example of an Islamist network being able to carry out a second strike on a European capital after an initial attack. The scale and complexity of the attacks, which appear to have been organised and directed by senior IS members based in Syria before being overseen by European nationals born and raised in the cities they targeted – as well as the realisation of the interconnectedness of the networks – elicited suggestions that the threat posed by these networks and its members represented something new and unprecedented.

However, this report highlights that significant similarities existed between these networks, documenting direct connections between the older al-Qaeda-inspired networks and the modern networks associated with IS. It also shows how, in both cases, the networks used similar structures to recruit individuals and facilitate access to safe havens overseas where training, networking and attack planning could take place. Other biographical similarities, such as a history of petty crime and drug use among network members prior to their involvement in Islamism-inspired terrorism, can also be shown to be a common factor across both networks.

Despite these similarities, one major difference exists – the success achieved by the new IS-affiliated networks in carrying out their attacks. Identifying key differences, this report highlights how the new network was successfully able to develop around the exploitation of close family and friendship connections pre-dating Islamist activity. Its members were also able to establish an operational relationship with areas of Brussels like Molenbeek as a result of these connections, which appears to have provided them with a more benign area in which to operate. It is possible that these two factors contributed to the increased robustness of the new networks, aiding them in carrying out their attacks, and outline issues which should be taken into account if future networks are to be disrupted before successfully carrying out further attacks.

4.2 Implications

That a network which contained so many similarities to those which sought to target Europe during the early 2000s was able to successfully execute two attacks on Paris and Brussels appears to have been a disastrous failure to learn the lessons provided by past plots. Not only was Europe the target of sophisticated plots once again, but the attacking network was more robust and more successful than many of those that had preceded it, apparently learning from the failures of these past networks in a way in which the governments and security services seeking to challenge their operations had failed to do. Given the urgency which should have been provided by the failed networks profiled in this report, as well as the successful attacks on Madrid in 2004 and London in 2005, it is unclear why these lessons were not learned.

Despite the clear threat the older networks had shown they posed, the development of new recruitment networks which channelled individuals overseas to gain training and combat experience were not challenged swiftly enough, allowing large numbers to exploit the opportunity this provided. That a number of individuals involved in these recruitment networks were able to do so despite a long history of involvement in Islamist activism or terrorism is further evidence of a failure to identify the nature of the threat. In addition to these failures, not enough appears to have been done to keep track of fighters

! ! 106 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW returning from training and combat overseas, or to ensure that they faced sufficient legal sanction, with the threat they posed downplayed by too many. This may have stemmed from a desire to rehabilitate rather than criminalise those who could not be proven to have fought for proscribed terrorist groups, but was also likely a consequence of the sheer number of individuals involved.

The inability to properly identify returning fighters was likely also influenced by the repeated use of false identification documents, with some individuals able to travel and return from Syria – in some cases multiple times. This use of fraud and forgery was a major part of past terrorist networks which operated in Europe, and its successful use by the operational teams which would hit Paris and Brussels shows yet another hole in the efforts to keep Europe safe. The extent to which crime featured in the backgrounds of both networks profiled also suggests processes to recognise individuals who may be at risk of radicalisation and recruitment have not been effective enough in spotting increasing radicalism or the risk posed by extremist recruiters when dealing with petty criminals prior to imprisonment, within the prison system, or following release.

On a geopolitical level, meanwhile, it is also clear that the need to remove safe havens for terrorist groups went unidentified, with disquiet over criticisms following the invasions of Afghanistan and Iraq, as well as limited intervention in Libya, resulting in terrorist groups which sought to target the West able to operate without challenge for too long in Syria.

If similar networks to the one which struck Paris and Brussels are to be successfully challenged in future, government policy and law enforcement practice must take these lessons into account, seeking to ensure that networks are not able to use the same practices to carry out attacks in the future. As such, it is important they:

1.! Understand that future terrorist networks will be fuelled by recruitment networks which channel people overseas, and disrupt these networks as early as possible;

The extremist network connected to the recruitment of some of the most senior militants involved in the network which attacked Paris and Brussels was able to operate for two years following an investigation being opened by Belgian authorities. In that time, dozens of individuals were able to leave Belgium for Syria, with the majority, including Abdelhamid Abaaoud, being charged in absentia by the time prosecutors eventually brought charges against the network.1352 The same is true of other networks outside of those profiled in this report, such as that run by Omar Diaby in Nice, France, who began preaching an aggressive version of Islam to young people following his release from prison in 2009. He was arrested in 2011 just before 30 individuals he had allegedly persuaded to travel to Afghanistan were intercepted, but released without charge.1353 Despite this, he was able to operate for another two years, producing Islamist propaganda “credited with inspiring the first wave of jihadist fighters to leave France” before leaving for Syria himself in 2013.1354

Identifying which individuals to focus on is an extremely difficult task for overstretched intelligence and police services across Europe, and even those known to be of concern simply cannot be monitored consistently, with reports in November 2014 suggesting that MI5 is able to monitor only 50 terrorist ! ! 1352 ‘Khalid Zerkani, Brussels’ jihadist preacher who ‘perverted a generation’’, France 24, 26 March 2016. 1353 ‘France’s Pied Piper of Jihad’, The Daily Beast, 30 January 2015, available at: http://www.thedailybeast.com/articles/2015/01/30/france-s-pied-piper-of-jihad.html, last visited: 9 August 2016. 1354 ‘Omar Diaby, the leading French jihadist who faked his own death’, France 24, 1 June 2016, available at: http://www.france24.com/en/20160531-omar-diaby- omsen-french-jihadist-recruiter-syria-fake-death-lepen, last visited: 9 August 2016.

! ! 107 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW suspects 24/7.1355 As a result, the authorities across Europe are constantly having to make challenging decisions on which leads to commit resources to and which to consider more marginal. While the focus to date has rightly been on identifying those seeking to carry out attacks as the most pressing targets, this report also highlights the damaging influence individuals involved in recruiting young people to travel overseas can have. These people have been responsible for radicalising people, but also providing them with the opportunity to develop the skills necessary for violent terrorism while associating with groups which aspire to target the West. Targeting such individuals before they send people overseas should therefore be a major priority, with any evidence that they have encouraged people to travel to conflict zones overseas an immediate red flag.

While it may not always be possible to prosecute these recruiters, any such evidence should be considered as justification for increased investigation and surveillance of individuals, with the intention to secure a prosecution in open court at the earliest possible date. Policy-makers should also consider the application of civil orders which could be used to restrict an individual’s access to outlets used to publish propaganda, such as YouTube, as well as to vulnerable individuals such as children or those with a history of petty crime convictions. These orders could also potentially be used to deny individuals platforms within public sector or charitable institutions such as mosques or local authority-funded buildings. Finally, the creation and promotion of material encouraging travel, or speech deemed to do so, could be considered a risk factor worthy of referral to voluntary deradicalisation programmes, such as Channel in the UK, which could ensure individuals remain in contact with the authorities.

2.! Deal more effectively with recidivism and propagandising to ensure those convicted of offences are not able to recruit in future;

The presence of individuals within the recruitment network connected to Khalid Zerkani who had been convicted of offences in relation to terrorism carried out by the old al-Qaeda-linked networks, as well as the influence of Djamel Beghal on the Kouachi brothers, Ahmedy Coulibaly, and Salim Benghalem, highlight another element of the recruitment networks which must be challenged in future. Those who have been convicted of terror offences must be prevented from passing on their ideology, experience, and contacts to a younger generation, yet developing policy to ensure this is extremely challenging. One way in which this could be done would be via licence conditions forbidding individuals convicted of serious terrorism offences from proselytising or associating with known recruiters, as well as flagging concerns about potential recruitment to parole officers and any other support staff working with the individual following release.

However, such conditions would only be effective while individuals were on licence, with overly long or disproportionate licence periods likely to be highly unpopular and divisive. Another option could be the imposition of legally mandated deradicalisation programmes for individuals convicted of offences which would continue past the completion of a licence period and remain mandatory until an individual is no longer considered a recruitment threat. In its most recent annual report for the UK’s counter-terrorism strategy, CONTEST, the government has announced plans for “a new deradicalisation scheme, which will be mandatory where the law allows, for those who are further down the path to radicalisation and who

! ! 1355 ‘Only a fraction of terror suspects can be watched 24/7’, The Telegraph, 24 November 2014, available at: http://www.telegraph.co.uk/news/uknews/terrorism-in- the-uk/11251792/Only-a-fraction-of-terror-suspects-can-be-watched-247.html, last visited: 9 August 2016.

! ! 108 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW need a particularly intensive type of support”.1356 Such a programme could be adapted to deal with those convicted of offences who are considered to be likely to seek to recruit individuals in future.

While it is almost certainly already considered serious enough to ensure investigation, contact with convicted terrorists on licence, under house arrest, or subject to any form of civil orders, should also serve as another significant red flag leading to increased investigation and surveillance if the convicted individual was unknown to the visitor prior to conviction. The example provided by Djamel Beghal, who was regularly visited by individuals who would go on to be involved in terrorist attacks while under house arrest, highlights the importance of keeping track of those who visit major nodes within terrorist networks – even if those nodes have completed their sentences.

In addition, the malign influence of those organisations and individuals which regularly promote or advocate on behalf of convicted terrorists should also be considered as worth challenging – particularly where this is done on the property or social media of public sector or charitable institutions. While not direct recruitment, the lionising of men and women convicted of serious crimes risks glorifying their activities and galvanising support for their cause. More serious is the publication of material written by convicted terrorist recruiters from within prison, with the pro-terrorist group, CAGE, publishing Djamel Beghal’s writings on its website in 2013. In one article, Beghal tells readers that other Muslims are being “imprisoned because of their religious convictions” and that the disbelievers are exploiting “the subjugated condition of the Muslims”. By publishing this material, CAGE enabled a convicted terrorist to continue propagandising from within prison, highlighting both the difficulty in preventing those convicted of offences from recruiting and the importance of seeking to do so.

3.! Ensure individuals returning from jihadist conflicts are dealt with as rigorously as the law allows, and develop policy to address gaps in law enforcement;

The pervasiveness of foreign training or combat experience across terrorists involved in both networks profiled in this report highlights the importance of identifying the threat posed by fighters returning from jihadist conflicts. The same is true of data collected by the Henry Jackson Society, which has identified the central role played within serious bomb plots by those with such experience. Outside of these networks, those responsible for a number of recent terrorist attacks have also sought such training, with Larossi Abballa, responsible for killing French police commander Jean-Baptiste Salvaing and his wife in June 2016, having been previously convicted for his role in a recruitment network “linked to Pakistan and Afghanistan”.1357 Meanwhile, Adel Kermiche, who killed Father Jacques Hamel in July 2016 was reported to have been electronically tagged after seeking to enter Syria twice in 2015.1358

While there has been considerable focus on the foreign fighter phenomenon since the extent to which individuals had begun travelling to the country became apparent in 2012, it is clear that the threat posed was underestimated. Some academics suggested it could be argued “Syria’s foreign fighters are less of a danger than is often supposed” and wrote that “hounding them with the threat of arrest or otherwise

! ! 1356‘The United Kingdom’s Strategy for Countering Terrorism: Annual Report for 2015’, HM Government, July 2016, available at: https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/539683/55469_Cm_9310_Web_Accessible_v0.11.pdf, last visited: 9 August 2016, p. 16. 1357 ‘French police chief and partner killed in stabbing claimed by Isis’, Guardian, 14 June 2016, available at: https://www.theguardian.com/world/2016/jun/13/french-policeman-stabbed-death-paris, last visited: 9 August 2016. 1358 ‘French priest’s killer was freed from jail despite aiming to join jihadis’, Guardian, 27 July 2016, available at: https://www.theguardian.com/world/2016/jul/27/teenager-who-murdered-french-priest-was-like-a-ticking-time-bomb, last visited: 9 August 2016.

! ! 109 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW creating a sense of alienation can backfire”.1359 Others argued that jihadists who appeared disillusioned should potentially be allowed to return home without prosecution, entering deradicalisation programmes in order to prevent them from becoming “really hardened extremists”.1360 Extremist groups have further clouded the issue by downplaying the threat posed by such individuals, with CAGE claiming in 2014 that it was exaggerated and that there was no evidence of any threat from these fighters.1361 CAGE has also repeatedly criticised prison sentences given to those returning from fighting, claiming it is evidence of a two-tier justice system in the UK which targets Muslims.1362 In addition, the families of at least one individual killed fighting for IS have criticised the UK government for “making it difficult for foreign fighters to return home”.1363

However, while it is clear this approach needs to be reassessed, the middle ground approach suggested by some has also faced significant challenges. This emphasised a focus on developing increased surveillance of those who have returned from fighting overseas, but cannot be proven to have worked alongside proscribed terrorist groups. While this approach must remain a major part of the solution, it appears to have been overwhelmed by the sheer number of individuals involved, with even those on terrorism watch-lists such as Ibrahim el-Bakraoui going on to carry out major attacks. The same is true of those who have suggested high-intensity and personally tailored deradicalisation programmes, with the development of the capacity to provide such services a huge undertaking requiring credible specialist intervention providers who cannot simply be trained, often requiring long experience of violent extremist activism and rhetoric before they can be effective.1364 As such, it is vital governments now re-think their approach to dealing with those returning from fighting overseas for jihadist groups, as well as individuals with a history of extremist activism who are arrested before they are able to travel.

One facet of this approach could include seeking to prosecute more cases, potentially by proscribing more Syrian militant groups which have a history of involvement in terrorism or war crimes. While this poses the risk of exposing individuals to a prison environment which risks further radicalising them, it could also be used ensure their access to mandatory deradicalisation programmes, as well as providing a punitive threat to deter future travellers. This cannot be the only solution though. Not only is jailing returnees and those aspiring to join proscribed organisations a relatively short-term solution, it also fails to address those who have committed no provable crimes, with wishing to travel to overseas conflict zones like Syria not illegal. However, it is vital those identified as seeking to travel are not allowed to fall off the radar if that travel is not realised due to personal reasons or is frustrated by law enforcement agencies. Should the mandatory deradicalisation programmes mentioned in the 2015 CONTEST review come into force, they could be used to target those who are known to have travelled or sought to do so, with civil orders restricting movement and association with known extremists a sanction for those who refuse to engage. However, this will require increased investment, with the development of programmes to challenge returning and aspirant fighters from jihadist conflict zones seen as a significant law enforcement and counter-terrorism priority.

! ! 1359 Byman, D., and Jeremy Shapiro, ‘Be Afraid. Be A Little Afraid: The Threat of Terrorism from Western Foreign Fighters in Syria and Iraq’, Brookings, November 2014’, available at: http://www.brookings.edu/~/media/research/files/papers/2014/11/western-foreign-fighters-in-syria-and-iraq-byman-shapiro/be-afraid-- web.pdf, last visited: 9 August 2016, p. 26. 1360 ‘Let us come home, say young British jihadists’, The Times, 5 September 2014, available at: http://www.thetimes.co.uk/tto/news/world/middleeast/article4197191.ece, last visited: 9 August 2016. 1361 Qureshi, A., ‘Blowback – Foreign Fighters and the Threat they Pose’, CAGE, 2014, available at: http://cage.ngo/wp- content/uploads/A4_CAGE_SYRIA_REPORT.pdf, last visited: 9 August 2016. 1362 ‘Syria sentences: I know these men and they are not terrorists’, CAGE, 5 December 2014, available at: https://cage.ngo/uncategorized/syria-sentences-i-know- these-men-and-they-are-not-terrorists/, last visited: 9 August 2016. 1363 ‘No place like home: What to do when jihadists return’, BBC News, 18 November 2014, available at: http://www.bbc.co.uk/news/world-middle-east-29725116, last visited: 9 August 2016. 1364 ibid. ! ! 110 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

4.! Improve efforts to challenge prison radicalisation and develop more effective policy to prevent offenders being drawn into terrorism;

One of the most prominent details identified by this report to occur in the biographical data of members of both the old al-Qaeda-linked networks and the new IS-affiliated networks is a history of petty crime. The data also highlights that in many cases, particularly with regard to those involved in the attacks on Paris and Brussels, the only contact between the authorities and those who would go on to be involved in terrorism was in relation to this petty crime rather than terrorism offences or known links to extremist groups. While this factor provides an important insight which must be taken into account if European policy-makers and security services are to learn the lessons highlighted by both networks profiled, working out how to do so is extremely difficult. Any policy developed to try and identify those petty criminals which may be most vulnerable risks Muslim offenders being targeted in a discriminatory manner.

However, it is possible to include those most likely to come into contact with those arrested and convicted of petty crimes of specified authorities in any legislative efforts to prevent people from being drawn into terrorism. In the UK, the Counter-Terrorism and Security Act 2015 (CTSA) mandates these specified authorities to “have due regard to the need to prevent people from being drawn into terrorism”.1365 In practice, this means these authorities must be able to “demonstrate an awareness and understanding of the risk of radicalisation in their area, institution or body”, ensure “staff understand the risk and build the capabilities to deal with it” and “understand how to obtain support for people who may be being exploited by radicalising influences”.1366 The CTSA includes a number of specified authorities where staff are likely to come into contact with those involved in petty crime, including police forces, prisons and young offender institutions, providers of probation services, and local authorities responsible for providing pastoral care facilities for vulnerable individuals. Ensuring these authorities focus on the prevalence of petty crime in the backgrounds of terrorists when training staff could lead to a greater awareness of the risks across these sectors.

It is also vital that prison services across Europe take the threat of radicalisation within their establishments more seriously. It is almost inconceivable that a man as important to so many terrorist networks across Europe as Djamel Beghal was free to radicalise Cherif Kouachi, who would go on to kill 12 people alongside his brother during their attack on the Charlie Hebdo magazine offices, while the two men were in prison together from January 2005 to October 2006.1367 Beghal was also able to meet the Hypercache shooter Ahmedy Coulibaly in prison between January and August 2005,1368 with Coulibaly later visiting him at his home before being convicted alongside him. In addition, Abdelhamid Abaaoud is also believed to have become involved with extremists while in prison, as is Salim Benghalem – who would later become involved in the same militant network as Beghal and eventually rise to become an IS “theatre commander”.1369 Both Mehdi Nemmouche and Mohammed Merah have also been named as men radicalised during their time in prison for petty crimes.1370 In the UK meanwhile, the Prison Officers

! ! 1365 ‘Counter-Terrorism and Security Act 2015’, HM Government, available at: http://www.legislation.gov.uk/ukpga/2015/6/section/26/enacted, last visited: 9 August 2016. 1366‘Revised Prevent Duty Guidance for England and Wales’, HM Government, 16 July 2015, available at: https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/445977/3799_Revised_Prevent_Duty_Guidance__England_Wales_V2- Interactive.pdf, last visited: 9 August 2016. 1367 Rayner, G. and David Barrett, ‘Charlie Hebdo suspect 'mentored' by Abu Hamza disciple’, The Telegraph, 8 January 2015. 1368 ‘French attacks inquiry centers on prison 'sorcerer' Beghal’, Reuters, 15 January 2015. 1369 Van Vlierden, G., ‘The Zerkani Network: Belgium’s Most Dangerous Jihadist Group’, The Jamestown Foundation, 12 April 2016. 1370 ‘Are French prisons ‘finishing schools’ for terrorism’, Guardian, 17 March 2016, available at: https://www.theguardian.com/world/2016/mar/17/are-french- prisons-finishing-schools-for-terrorism, last visited: 9 August 2016.

! ! 111 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Association has claimed there is a serious problem with radicalisation within prisons, and that this is being ignored by those responsible for offender management.1371

This situation simply cannot continue if future networks similar to those profiled in this report are to be identified or even disrupted prior to their formation. Understanding how extremists have sought to recruit within prisons must be a top priority for institutions, as must the identification of the groups of individuals within prisons who are working to radicalise fellow prisoners and those who are most at risk, as well as those institutions facing the most significant challenge. Repeated contact with known recruiters in prison should be taken into account by staff, and also be passed on to any agencies involved with an individual following release to ensure staff are aware to be vigilant for any behaviour which may suggest continued or increasing radicalism. Developing programmes which can provide those considered vulnerable to radicalisation with the support needed to mitigate the risks posed by recruiters must combine education challenging extremist misinformation and ideology, as well as training/advice addressing reintegration on release, and be delivered by credible and properly vetted delivery staff.

5.! Understand domestic security is tied to overseas conflicts, and that removing safe havens for terrorist groups through diplomatic and military action must be part of counter-terrorism policy;

Finally, it is important that governments facing the most significant threat from groups such as IS take on board the evidence detailed in the profiles of plots being planned and facilitated from safe havens held by terrorist groups. Many of the terrorist plots detailed in the biographical profiles of old al-Qaeda-linked networks had their germination in Afghanistan, where al-Qaeda operatives met with and provided advice and funding to those who would later be dispatched back to Europe. In addition to the safe haven the country provided for the group, it also provided a space for extremists to meet and develop connections, as well as to form their own jihadist groups – something seen in the case of those network members involved in the formation of the Tunisian Combat Group in Jalalabad. Meanwhile, it is also clear that the safe haven available to IS gave senior members the ability to plan the Paris attacks and train the gunmen who would carry it out. Abdelhamid Abaaoud was also able to use this space to identify and recruit of individuals like Reda Hame inside Syria as he sought to organise numerous small attacks on vulnerable European targets including churches and concert halls. Away from these networks, the territory controlled by AQAP in Yemen has also aided the plotting of attacks, with Umar Farouk Abdulmutallab trained and equipped in the country by AQAP before he attempted to bomb an aircraft over Detroit in 2009.1372

Removing these safe havens, or at least putting significant military pressure on the groups that operate within them, can therefore potentially disrupt the ability of groups to plan and carry out complex attacks, with the pressure facing al-Qaeda operatives in the border areas between Afghanistan and Pakistan arguably a significant factor in the group’s failure to carry out major attacks in recent years. The US State Department highlights that “denying terrorists safe haven plays a major role in undermining terrorists’ capacity to operate effectively, and thus forms a key element of U.S. counterterrorism strategy as well as the cornerstone of UN Security Council Resolution 1373”.1373 However, any efforts to implement such policy will continue to face a number of challenges, with the most intractable being the politicisation and unpopularity of military intervention in many of the states facing the threat from terrorism. The recent ! ! 1371 ‘Islamists actively seek prison sentences to radicalise other convicts, say officers’, Guardian, 12 December 2015, available at: https://www.theguardian.com/society/2015/dec/12/islamists-radicalise-convicts-prison-officers, last visited: 9 August 2016. 1372 ‘Profile: Umar Farouk Abdulmutallab’, BBC News, 12 October 2011, available at: http://www.bbc.co.uk/news/world-us-canada-11545509, last visited: 9 August 2016. 1373 ‘Chapter 3 – Terrorist Safe Havens’, US Department of State, 28 April 2006, available at: http://www.state.gov/j/ct/rls/crt/2005/64333.htm, last visited: 9 August 2016.

! ! 112 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW release of the Chilcot Report and debate which surrounded it highlighted the ongoing impact the invasion of Iraq has had on the debate in the UK,1374 while the results of the limited intervention in Libya continue to be used as an example of why military action should be avoided at all costs.1375

As such, it is vital that policy-makers seeking to challenge the threat posed by terrorist networks like those profiled in this report make a strong public case on the need to disrupt the activities of the terrorist groups which organise and train them. This should include credible assessments of the threat, detailing past attacks planned in such safe havens, and clear plans for the aftermath of any military activity – with the failure to provide this in the past alienating those who otherwise support the use of military action to end conflicts in which violent extremism thrives.1376 It should also include publicising the successes achieved against terrorist groups by both Western forces and their allies within the regions in which these groups operate, showing that military action can drive terrorist groups back and outlining the benefits for those liberated from the rule of such groups. Finally, it should stress the importance of military action being coordinated with allies in the regions in which terrorist groups operate, while refusing to work alongside those regimes which are part of the problem, such as that of President Assad in Syria. Developing this case will be vital if future military action to remove terrorist safe havens is to be a serious option, and will be as important in challenging terrorist networks as the smaller-scale measures working to identify those at risk of radicalisation.

! ! 1374 Jones, O., ‘The war in Iraq was not a blunder or a mistake. It was a crime’, Guardian, 7 July 2016, available at: https://www.theguardian.com/commentisfree/2016/jul/07/blair-chilcot-war-in-iraq-not-blunder-crime, last visited: 9 August 2016. 1375 ‘Everyone says the Libya intervention was a failure. They’re wrong’, Brookings, 12 April, 2016, available at: http://www.brookings.edu/blogs/markaz/posts/2016/04/12-libya-intervention-hamid, last visited: 9 August 2016. 1376 Cox, J., ‘With Regret, I Feel I Have No Other Option But to Abstain on Syria’, The Huffington Post, 2 December 2015, available at: http://www.huffingtonpost.co.uk/jo-cox/syria-vote_b_8698242.html, last visited: 9 August 2016. ! ! 113 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

! ! 114 ! AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

Appendix A: Network Maps

! ! 115 ! Brussels Attacks (March 2016) On 22 March 2016, what remained of the network behind the Paris attacks successfully launched another mass-casualty attack in Brussels, detonating suicide bombs in the Zaventem International Airport and the Maelbeek Metro station, killing 32 and wounding many more. A shooting involving Salah Abdeslam, Mohammed Belkaid and Soufiane Ayari is thought to have been planned to accompany the attacks, but was disrupted by Belgium police.

NAJIM MOHAMED LAACHRAOUI BELKAID Suicide Bomber, MOHAMED Potential Foiled Airport ABRINI Attacker Accomplice

KHALID SALAH EL-BAKRAOUI ABDESLAM Potential Foiled Suicide Bomber, Attacker Metro

SOUFIANE AYARI Potential Foiled YOUSSEF IBRAHIM OSAMA Attacker AL-AJMI EL-BAKRAOUI KRAYEM Accomplice Suicide Bomber, Accomplice Airport

Attackers

Profiles can be found on pages 8 - 17 Accomplices/ Potential Foiled Attacker Paris Attacks (November 2015) On 13 November 2015, Islamic State gunmen and suicide bombers descended on Paris, launching simultaneous attacks in multiple locations, outside the Stade de France, in the 10th and 11th arrondissements, and at the Bataclan concert hall, killing 130 and wounding hundreds. Behind the attacks was an extensive network largely composed of returned foreign fighters and orchestrated by Molenbeek-raised petty criminal turned Islamic State operative Abdelhamid Abaaoud.

HASNA NAJIM MOHAMMED AITBOULAHCEN LAACHRAOUI BAKKALI M Accomplice Accomplice AL-MOHAMED Accomplice MOHAMED Suicide Bomber ABRINI Accomplice IBRAHIM AHMED EL-BAKRAOUI AL-MOHAMED Accomplice Suicide Bomber HAMZA ATTOU KHALID Accomplice EL-BAKRAOUI BILAL ABDELHAMID Accomplice SALAH HADFI ABAAOUD ABDESLAM Suicide Bomber Ring Leader Accomplice BRAHIM MOHAMED ABDESLAM AMRI Suicide Bomber Accomplice SAMI AMIMOUR AHMED Gunman CHAKIB DAHMANI Accomplice FOUED AKROUH OMAR ISMAIL MOHAMED MOHAMMED Gunman MOSTEFAI BELKAID AGGAD Gunman Accomplice Attackers Gunman

Profiles can be found on pages 18 - 33 Accomplices Zerkani Network Recruiter and financier, Khalid Zerkani, who has been described as a veteran of Afghan jihad who operated out of Molenbeek mosques, stood at the centre of a vast network of foreign fighters and those plotting attacks at home, including many involved in the Paris and Brussels attacks. His connections extend from the previous al-Qaeda networks to those behind the recent Islamic State attacks and plots in Europe.

NAJIM ABDELHAMID LAACHRAOUI ABAAOUD Paris & Brussels attacks, Paris attacks, Accomplice/Attacker YONI Ringleader MAYNE SAMI Islamic State Fighter ZARROUK CHAKIB Islamic State Fighter AKROUH ILIAS Paris attacks, MOHAMMADI Attacker Arrested in Belgium Possessing Ammunition, 2014 GELEL YOUSSEF KHALID ATTAR BOUYABAREM ZERKANI Islamic State Fighter (formally Jabhat al-Nussra) Failed to travel to Recruiter, Syria Financier REDA KRIKET Failed Paris Plot FATIMA YASSINE ABERKAN LACHRIRI Recruiter ABDERRAHMANE Islamic State Fighter AMEROUD Failed Paris Plot & Assassination of Ahmed SOUFIANE Shah Masood - Accomplice ALILOU Profiles can be found on pages 34 - 41 Suspected Fighter New Network Connections The links established between members of the networks behind the attacks targeting Paris on 13 November 2015 and Brussels on 22 March 2016, as well as between the Belgian networks responsible for recruiting extremists to fight in Syria and the Islamic State networks behind the plots.

YOUSSEF LAZEZ NOUREDDINE KHALID ABRAIMI BEN LARBI AL-AJMI ABRAIMI SID AHMED FABIEN IBRAHIM ALI GHLAM CLAIN FARISI OULKADI SOFIANE MOHAMED AMGHAR SMAIL AMRI AYOUD EL FARISI MOMAMED HAMZA NICHOLAS KHAZZANI MOHAMMED ABRINI KHEMIR ATTOU MOREAU SAMI REDA ZARROUK OSAMA HAME KRAYEM MOMAMED RABAH YASSINE ABDERRAHMANE BELKAID ABID SALAH ABERKAN ABDELHAMID MENIKER ALAMI KHALID AMEROUD KHALID ABDESLAM ABAAOUD EL-BAKRAOUI ZERKANI REDA KRIKET SOUFIANE YOUSSEF IBRAHIM NAJIM FATIMA ALILOU BOUYABAREM EL-BAKRAOUI LAACHRAOUI SOUFIANE YONI PATRIC ABERKAN AYARI MAYNE MALIKA EL AROUD ANIS HASNA ABU SULEYMAN GELEL BAHRI AITBOULAHCEN AL-FARANSI ATTAR ABDELHOUAID AHMED MOMAMMED ILIAS ABERKAN DAHMANI BAKKALI ABDOULLAH C MOHAMMADI MEHDI NEMMOUCHE AMR AL-ABSI OMAR FOUED BRAHIM BILAL M AHMAD CHAKIB SAMI ISMAIL MOHAMMED ABDESLAM HADFI AL-MAHMOD AL-MOHAMED AKROUH AMIMOUR MOSTEFAI AGGAD SAMIR PIERRE ZARIOH NDJEKA

SAID KOUACHI

CHERIF KOUACHI SALIM BENGHALEM MOHAMED EL-AYOUNI Paris Attack Brussels Attack AHMEDY COULIBALY Other Plots & Attacks Zerkani Network Other Islamic State (IS) US Embassy & Cultural Centre Plot / Rotterdam Cell Under the direction of prolific al-Qaeda recruiter Djamel Beghal the network represented below plotted an attack on the US Embassy and Cultural Centre in Paris, 2001, with former footballer Nizar Trabelsi allegedly designated as the attack’s suicide bomber.

MOHAMMED BERKOUS Accomplice ADEL TOBBICHI NIZAR Accomplice TRABELSI JEROME Plotter (Proposed Suicide Bomber) COURTAILLER Plotter ABDELGHANI RABIA DJAMAL Accomplice BEGHAL Plotter

BAGHDAD MEZIANE Accomplice KAMEL DAOUDI Plotter BRAHIM BENMERZOUGA Accomplice

Profiles can be found on pages 50 - 60 Strasbourg Plot/Frankfurt Cell In 2000 a network led by Mohammed Bensakhria plotted to attack the Christmas Market outside Strasbourg Cathedral by blowing up pressure cookers containing explosives. The main operatives were Bensakhria, Slimane Khalfaoui, Yacine Akhnouche and Rabah Kadri, however, the number of individuals in supporting roles was extensive. Four conspirators were arrested in December 2000, and other members of the plot were arrested in the following years, with two trials seeing convictions in March 2003 and December 2004. ABU DOHA Financier RABAH KADRE SALIM LAMINE FOUHAD Plotter BOUKHARI MARONI SABOUR MEROUANE Plotter Plotter Plotter BENAHMED Plotter AEROUBI BEANDALI SLIMANE Plotter KHALFAOUI MOHAMMED Plotter ABDELKADER BENSAKHRIA TCHAREK Leader of the Frankfurt Cell NICOLAS Plotter BELLONI Plotter LAURENT MOURAD DJOUMAKH YACINE Accomplice AKHNOUCHE SAMIR Plotter MOHAMED LAZHAR BEN KORCHI MEROUANE MOHAMMED TLILI Attackers Accomplice AOUANI BERRAHAL Accomplice Accomplice Accomplice Profiles can be found on pages 61 - 73 Accomplices Abu Doha Network Abu Doha was allegedly one of al-Qaeda’s primary recruiters in Europe and head of one of its most significant terror networks. Operating out of Finsbury Park Mosque at the same time as the infamous ideologues Abu Hamza and Abu Qatata, his network’s connections extend to numerous major plots. Not only did he act as financier to the 2000 plot to attack the Christmas market outside of Strasbourg Cathedral, he allegedly conspired with Ahmed Ressam to bomb LAX airport, Los Angeles, in the same year.

AHMED RESSAM FOUHAD Los Angeles Airport Plot SABOUR Strasbourg Plot

LAMINE MARONI KAMAL Strasbourg Plot BOURGASS Ricin Plot ABU SALIM DOHA BOUKHARI Financier Strasbourg Plot

MOHAMMED MEGUERBA RABAH Ricin Plot KADRE Strasbourg Plot

SAID ARIF Al-Qaeda

Profiles can be found on pages 78 - 81 Old Network Connections The links established between members of the networks involved in the failed al-Qaeda-linked plots to attack the US Embassy in Paris, the Christmas market outside of Strasbourg Cathedral, and the Kleine Brogel NATO airbase in Belgium in 2000-2001, as well as a number of prominent al-Qaeda-linked individuals connected to the members of those networks.

ABU ABU ZUBAYDAH QATADA KHALID SHEIKH FOUHAD SABOUR MOHAMMED ABU HAMZA AL-MASRI LAMINE MARONI ABDELGHANI RABIA SALIM BOUKHARI

BRAHIM AHMED AEROBI BEANDALI BENMERZOUGA DJAMEL ZACARIAS RESSAM MOUSSAOUI BEGHAL YACINE AKHNOUCHE BAGHDAD MEZIANE LAZHAR BEN ABU DOHA MOHAMMED TLILI ADEL TOBBICHI MEROUANE BENAHMED

OMAR JEROME MOHAMMED BENSAKHRIA SAID ALTMIMI COURTAILLER MOHAMED BERKOUS ARIF SLIMANE KHALFAOUI RASDIID KAMEL NIZAR MESSOUKAT DAOUDI RABAH KADRE TRABELSI MOHAMMED MEGUERBA MOHAMED AOUANI ABDELAZIZ DAVID ABDELKRIM KAMAL BENYAICH COURTAILLER ‘E’ MEROUANE BERRAHAL EL-HADDOUTI BOURGASS

LAURENT MOURAD MOINUL MOHAMMED ‘MILIHOUD H’ DJOUMAKH ABEDIN AMOR SLITI RICHARD TAREK BEN HISHAM BIN SAMIR KORCHI REID JAMAL HABIB ALI BIN AMOR ZOUGAM MAAROUFI NICOLAS BELLONI AHMED SAAJID LAIDOUNI ABDELKADER TCHAREK BADAT ESSID SAMI CHAOUKI DAHMANE ABD EL-SATTAR BAADACHE BEN KHAMAIS

FEROZ EMBASSY PLOT/ FINSBURY BABAR BOURAOUI EL-OUAER ROTTERDAM CELL PARK MOSQUE AHMED ABBASI OTHER PLOTS & STRASBOURG/ ATTACKS FRANKFURT CELL

NATO AL QAEDA Network Connections Connections between the networks behind the Paris and Brussels attacks and the old al-Qaeda networks are significant. Khalid Zerkani’s network acts as a pathway between the two, with Fatima Aberkan and Abderamane Ameroud active in both the past and present networks. The same is true of Djamel Beghal, whose activity as a recruiter spans both the networks, with the Buttes-Chaumont network connected to Cherif Kouachi, Ahmedy Coulibaly, and significantly, Salim Benghalem, the Islamic State theatre commander believed to be behind the Paris attacks. DJAMEL SALIM BEGHAL BENGHALEM Al-Qaeda Recruiter, Islamic State Theatre US Embassy Plot Commander behind the CHERIF Paris Attacks KOUACHI Charlie Hebdo Attack, Gunman JEROME AHMEDY COURTAILLER COULIBALY Assassination of Hypercache Supermarket Attack, Ahmed Shah Massoud, Gunman Accomplice, US Embassy Plot REDA KRIKET ABDERAMANE ASSASSINATION Failed Paris Attack AMEROUD OF AHMED TAREK BEN ABDELHAMID Assassination of SHAH MASSOUD MAAROUFI ABAAOUD Ahmed Shah Massoud, Assassination of Accomplice Ahmed Shah Massoud, Paris Attacks, Accomplice Ringleader MOHAMMED AMOR SLITI ZERKANI ABDELHOUAID Assassination of NAJIM Ahmed Shah Massoud, LAACHRAOUI NETWORK ABERKAN Accomplice Paris & Brussels Attacks, Assassination of Accomplice/Attacker Ahmed Shah Massoud, Accomplice, Brother of Fatima Aberkan CHAKIB SOUFIANE DAHMANE AKROUH ALILOU ABD EL SATTAR Paris Attacks, Assassination of Suspected Fighter, Attacker Ahmed Shah Massoud, Son of Fatima Aberkan SALAH MALIKA EL Attacker ABDESLAM AROUD Paris Attacks, Islamist Activist Accomplice FATIMA (linked to al-Qaeda) ABERKAN Recruiter

ABID NIZAR ABERKAN TRABELSI New Network Paris Attacks, US Embassy & Accomplice, NATO Plot Old Network Nephew of Fatima Aberkan AN ENDURING THREAT: EUROPE’S ISLAMIST TERROR NETWORKS THEN AND NOW

About the Authors

Emma Webb is a Research Fellow at The Henry Jackson Society, and focuses on European and domestic terrorism, as well as how to deal with the challenges posed by radicalisation. Emma has spoken on regional and national radio on security issues including the threat level facing the UK and recent terrorist attacks across Europe, and has written for the Spectator and the Times of Israel. She holds an MA with distinction in Jewish Studies from King’s College London, and a BA in Theological and Religious Studies from Trinity College, Cambridge.

Rupert Sutton is the Director of ‘Student Rights’, and a Research Fellow at The Henry Jackson Society, where he focuses on domestic extremism and security issues. He has written for Haaretz, World Affairs, The Huffington Post and New Humanist and has presented his research at the British and European Parliaments. Rupert has an MA in Terrorism and Security with distinction from King’s College London and a BA in War Studies from the University of Kent.

About the Centre for the Response to Radicalisation and Terrorism

The Centre for the Response to Radicalisation and Terrorism (CRT) at The Henry Jackson Society provides top-quality, in-depth research and delivers targeted, tangible and impactful activities to combat the threats from radical ideologies and terrorism at home and abroad.

About The Henry Jackson Society

The Henry Jackson Society is a think tank and policy-shaping force that fights for the principles and alliances which keep societies free - working across borders and party lines to combat extremism, advance democracy and real human rights, and make a stand in an increasingly uncertain world.

! ! 125 !