Hackers Plant Porn in ISIS Propaganda

Source: thedailybeast.com

Six young Iraqis used hacked accounts to attack the so-called  “virtual caliphate.” Nada and Ahmed are two of those six. 

For obvious reasons they wanted to use aliases for this story. They formed Daeshgram around a year ago.

It all began with “infiltrating their Telegram channels” says Nada, “we spent months observing, and pretending to be ISIS members. We studied how they behaved, the sort of language they used, and tried to take note of the unwritten rules.”

Some of Daeshgram’s early efforts saw them photoshop a pornographic scene into an image announcing the opening of a new media center in Wilyat Al-Khayar, an area that roughly correlates to Deir az-Zour in eastern Syria. 

The scene is amusing, if a little crass, but it served an important purpose.

“It let Daesh know that we were capable of replicating their media to a very high standard, it was the first seed of doubt,” explains Nada. 

However, they soon learned that to have the effect they desired “our output had to be subtle, and believable.” 

Nada adds, “We wanted to create items that ISIS members would not question and would share widely”—believability was key, as with all fake news.

In one effort some months ago, the group released an official-looking video warning that Amaq, ISIS’ official news agency which has become the go-to source for information on the group’s activities, had been hacked. 

It hadn’t, but so legitimate-looking was the warning that moderators on various Telegram channels began marking Amaq output from the day as fake, and warning members off it.

The confusion was growing.

In another instance, seeing a rumor that ISIS’ radio station Al-Bayan had been destroyed in an airstrike, the group produced a perfectly branded and edited audio statement in the style of Al-Bayan denying it had been taken offline. 

Their Al-Bayan piece was ambitious, but it appeared to work: It was downloaded without question almost 800 times, and it included information about ISIS losses on the battlefield, and the increasing number of ISIS fighters who were working as informants for Western governments, or outright defecting—topics official ISIS media outlets would never include.

Another effort saw the group create the fake Al-Adnani news channel, which at its peak had some 500 members. Controlling the channel gave the group nearly complete control over exactly what was posted and shared between members.

This tactic of imitation and subtle manipulation became the focus of their efforts; “We took their templates, and we started to manipulate the information on there, it was almost impossible to tell which statements were ISIS and which we had made,” said Nada.

Just this past week, the group pulled off what they described as “a major operation,” the culmination of weeks of preparation with other groups.

Dubbed #ParalyzingAmaq the operation saw the main Amaq website taken down by a hack, and perhaps equally as significant, the website’s Firefox plugin, which automatically redirects followers to the latest incarnation of Amaq, was thwarted.

With the site down, the group began uploading some of the more than 40 duplicate Amaq sites it had created—many of them barely discernible from the original—even to the best-trained eye. 

These duplicate sites are being bandied about among dozens of Telegram sites as genuine, with ISIS members vouching for their authenticity.

The Telegram phenomenon has given birth to an industry of analysts and experts. 

Navigating the groups and channels which frequently shut down and respawn is not especially complex, but it is time consuming and requires near constant attention.

Some analysts were quick to criticise last week’s efforts to disrupt ISIS’ activities labeling it “a publicity stunt.” Others said it was “just annoying.”

When I put it to Nada and Ahmed that their operation largely flopped, Nada said the purpose of the operation was never merely to take down Telegram accounts, as some appear to have expected. 

It was “to sow discord and confusion, and to undermine the credibility of Amaq among ISIS supporters, particularly Arabic speakers,” said Nada. “We achieved that goal.”

Indeed a look at some of the popular channels frequented by ISIS suggests they are right: In one chat several ISIS members are seen bickering following Amaq’s hacking. 

“This channel is not official,” says one. Another replies, “How do you know it’s not official?” A third member interjects, “No, give your evidence.” Only for the first to respond, “You should be careful what you say to me.”

Ahmed points out that ISIS enforces stringent anti-discord rules on Telegram, as it does in the real world. 

Arguments, and the questioning of authority, will often see members banned.

“That discord, or fitna [the Quranic term used by ISIS] includes doubting any credible news outlet,” says Ahmed. 

He adds that, following Friday’s operation, “We made them break their own rules, we made them engage in debates regarding what was real, and what wasn’t.”

Nada concludes: “Journalists and analysts are not our target audience. Daesh supporters themselves, especially the Arabic speaking ones, are our target. 

Our main objective was to create confusion and discord, and we were able to do that. What Western analysts think is not really relevant to our work.

“ISIS supporters don’t know which Amaq sites to trust,” she said, so, “they don’t trust Amaq anymore.”

In the fight against the virtual caliphate, that is no small victory.