Islamic State: A Russian Story

Executive Summary

− The Islamic State - Khorasan Province (ISKP) claimed responsibility for a devastating attack on Crocus City Hall in Moscow on March 22, which resulted in over 140 fatalities, marking the deadliest terrorist incident in Russia in 20 years and the deadliest in Europe claimed by the Islamic State.
− Russian authorities and media quickly sought to link Ukraine to the incident, despite ISKP's claim and absence of concrete evidence supporting Kyiv's involvement. President Putin and other officials have insinuated Ukraine's role, aligning this narrative with broader geopolitical objectives, particularly in relation to the conflict in Ukraine.
− Russia's response to the attack has been multifaceted, including arrests of suspects primarily from Tajikistan, speculation about increasing security measures and signalling a potential for increased military mobilization. Despite this, Moscow is expected to continue prioritizing its military engagement in Ukraine over a drastic overhaul of its counterterrorism posture.
− The attack has prompted discussions within Russia about the security of Central Asian migrants, potential retaliatory actions within Afghanistan, and the broader geopolitical implications, including Russia's relations with Central Asian states and the Taliban.

Overview of the Attack

On March 22, four armed assailants launched a complex attack on Crocus City Hall, a concert venue located in Krasnogorsk, approximately 20 kilometres from the centre of Moscow where 6,200 people had gathered for a concert by the rock band, Picnic. The attack involved the use of 3 or 4 AK-12 automatic assault rifles, knives and at least two improvised incendiary devices, resulting in the death of over 140 individuals and a fire which caused widespread catastrophic damage to the venue.

In addition to the 140 people killed, 551 people were wounded in the attack. A further 95 people were reported missing by Russian authorities on March 28.

The attackers arrived at the location at around 1950hrs, pulling into the eastern car park of the venue in a white saloon vehicle. The attack appeared to have been initiated outside the front entrance before the attackers moved into the foyer. They then began systematically moving through the venue, searching toilets and other possible hiding places, before entering the main concert hall where they deployed the two incendiary devices as well as continuing to fire their weapons. The attackers then moved back through towards the foyer, again targeting people hiding or trying to flee before getting back in their vehicle and leaving the area.

The attack lasted around 10 minutes with many dying from bullet wounds and others from smoke inhalation. Helicopters were tasked with bringing water to the site in an effort to douse the flames, however, it took around 10 hours for the fire to be contained.

This incident has been recorded as the deadliest terrorist attack in Russia in two decades and the deadliest ever in Europe to be claimed by an Islamic State-affiliated group. In the immediate aftermath, the Islamic State Khorasan Province (ISKP), an Afghanistan-based faction of the broader Islamic State network, took responsibility for the massacre through an announcement on their Telegram channel. Russian law enforcement swiftly apprehended four individuals, identified by Russian media as Tajik nationals, believed to be the attackers, in a heavily forested area near the city of Bryansk, 400km southwest of Krasnogorsk, close to the borders with Ukraine and Belarus. Further arrests have since been made, including in Tajikistan, with authorities stating they had facilitated the attack in various capacities.

The attack came after the US warned its nationals of an impending terrorist attack in Russia. On March 07, US citizens were warned to avoid crowds for the following 48 hours after stating that they had reports extremists had imminent plans to target large gatherings in Moscow.

Graphic: Showing the Crocus City Hall, Moscow and Bryansk in relation to Ukraine and Belarus

Raedan Group intelligence & operations

Islamic State Khorasan Province

ISKP's claimed responsibility for the attack via its Telegram channel. This claim positions the attack within the group's broader jihadist agenda, reflecting its capability and intent to extend operations beyond its core region in Afghanistan and comes after the group carried out a coordinated suicide attack in Iran in January. However, the narrative within Russia quickly took a geopolitical turn, with high-ranking Russian officials, including President Putin, insinuating Ukrainian involvement or facilitation of the attack, despite a lack of evidence to substantiate such claims.

This rhetoric serves multiple Russian strategic interests: it diverts attention from potential security lapses, frames Russia as a victim of Ukrainian aggression amidst the ongoing conflict and justifies continued or escalated military actions against Ukraine.

Russian Security and Political Response

Russia's response has been characterized by a blend of law enforcement actions, including arrests and raids, and political messaging aimed at internal and external audiences. Domestically, the Kremlin has emphasized the narrative of Ukrainian complicity, potentially to galvanize public support for its military efforts in Ukraine and to stigmatize opposition.

Externally, Russia has signalled a possible escalation in military mobilization and hinted at retaliatory measures against ISKP, possibly including actions in Afghanistan. However, Moscow's strategic calculus appears to prioritize the conflict in Ukraine over a comprehensive reassessment of its counterterrorism strategy or its approach to managing the threat from radicalized elements within Central Asia and as such, is unlikely to effectively mitigate against future attacks by the group against Russia or Russian interests.

This approach reflects a broader understanding of Russia's geopolitical priorities and the limitations imposed by economic and political considerations, including the significant role of Central Asian migrants in the Russian economy.

Conclusion

The tragic attack on Crocus City Hall by ISKP represents a significant security and political challenge for Russia. While Moscow has attributed some level of responsibility to Ukraine, this narrative seems more aligned with geopolitical manoeuvring than with the available evidence. Russia's response, both in terms of security measures and political rhetoric, indicates a complex balancing act: addressing the immediate threat of terrorism while avoiding actions that could undermine its strategic objectives in Ukraine and its economic reliance on Central Asian labour. As Russia navigates these challenges, the broader implications for regional stability, Russian domestic politics, and Moscow's international relations will continue to unfold.