(New York, N.Y.) – The Counter Extremism Project (CEP) reports weekly on the methods used by extremists to exploit the Internet and social media platforms to recruit followers and incite violence. Last week, CEP researchers located a recently released ISIS propaganda video with French subtitiles, “To Be Absolved Before Your Lord 2,” which features combat footage between ISIS and Taliban forces allegedly in Afghanistan, shows the bodies of Taliban fighters killed in action, and accuses the Taliban of working for the U.S. Additionally, CEP researchers located a pro-ISIS video made by a media group called “Virtual Battlefield” that contained footage from several previously released ISIS propaganda films and urged the spread of official ISIS media, called for public support of ISIS online, and encouraged attacks. Also, ISIS supporters contined to share login information via RocketChat for accounts on the virtual private network (VPN) service Nord.
Meanwhile, the white supremacist group NSC131 used three Twitter accounts to recruit and spread propaganda using anti-Semitic photos and statements urging acts of violence. Finally, the Nordic Resistance Movement (NRM) celebrated an anti-Semitic propaganda campaign conducted during Yom Kippur on their website and Spreaker.
French Subtitled ISIS Video Located on Multiple Websites
On October 7, ISIS online supporters re-released a recent propaganda video with French subtitles. The video, “To Be Absolved Before Your Lord 2” was originally released on September 22 via the group’s self-proclaimed Khorasan province in Afghanistan. The footage shows combat between ISIS and Taliban forces allegedly in Nangarhar and Kunar provinces, shows the bodies of Taliban fighters killed in action, and accuses the Taliban of working for the U.S. The video was released while the Afghan government and the Taliban negotiate in Doha, Qatar.
Links to the original, non-subtitled video were spread on RocketChat and Hoop, and uploaded to at least 12 websites pCloud, MediaFire, the Microsoft One Drive, the Internet Archive, Mail.Ru, File.Fm, Mega.Nz, NextCloud, Ok.Ru, PixelDrain, Amazon Cloud Drive, and Dropbox.
Links to the subtitled video released on October 7 were spread via RocketChat and Minds. The video was uploaded to at least 11 websites: the Microsoft One Drive, the Internet Archive, Mail.Ru, pCloud, File.Fm, Mega.Nz, NextCloud, Ok.Ru, PixelDrain, Dropbox, and MediaFire. Approximately 24 hour later, the video was still available on six websites: the Internet Archive, Mail.Ru, pCloud, NextCloud, Ok.Ru, and MediaFire.
ISIS propaganda video on pCloud, October 8, 2020.
Twitter Accounts for White Supremacist Group Located
CEP researchers located three Twitter accounts belonging to the white supremacist group NSC131. The accounts, which each had 84, 23, and 21 followers respectively, were used to recruit and spread propaganda, and included anti-Semitic photos and statements urging acts of violence. The accounts were created in May 2020, October 2020, and September 2020. The accounts were reported on October 8 however were still online on October 12.
Pro-ISIS Video Encouraging Spread of Propaganda Located on NextCloud
CEP researchers located a pro-ISIS video made by a media group called “Virtual Battlefield.” The video was hosted on a NextCloud storage site, and was spread via RocketChat. The video contains footage from several previously released ISIS propaganda films, as well as new graphics. The video urges the spread of official ISIS media, public support for ISIS online, and also encourages attacks.
Nordic Resistance Movement Celebrates Recent Anti-Semitic Campaign
On their website and podcast available on Spreaker, the Nordic Resistance Movement (NRM) celebrated an anti-Semitic propaganda campaign conducted during Yom Kippur on September 27. NRM members passed out anti-Semitic flyers and hung posters near synagogues and in public places in numerous locations in Sweden, Norway, Denmark, and Iceland. On a podcast hosted on Spreaker, NRM leaders claimed that they warned about “Zionist world monger plans.” The NRM website uses Cloudflare as its name server.
ISIS Supporters Share VPN Logins on RocketChat
ISIS supporters continue to share login information via RocketChat for accounts on the virtual private network (VPN) service Nord. VPNs allow for individuals to shield their IP addresses in an attempt to conceal their location. Login information was also shared via a bulletin board website.