Clues on Twitter Show Ties Between Texas Gunman and ISIS Network
|
Version 0 of 1. Hours before he drove into a Texas parking lot last week and opened fire with an assault rifle outside a Prophet Muhammad cartoon contest, Elton Simpson, 30, logged onto Twitter. “Follow @_AbuHu55ain,” Mr. Simpson posted, promoting a Twitter account believed to belong to Junaid Hussain, a young computer expert from Birmingham, England, who moved to Syria two years ago to join the Islamic State and has become one of the extremist group’s celebrity hackers. This seemingly routine shout-out is an intriguing clue to the question of whether the gunmen, Mr. Simpson and Nadir Soofi, 34, both of Phoenix, were acting in concert with the Islamic State, also known as ISIS or ISIL, in carrying out an attack outside a community center in Garland, Tex. The Islamic State said two days later that the two men, who were killed by officers after opening fire, were “soldiers of the Caliphate.” It was the first time that the terror group had tried to claim credit for an operation carried out in its name on American soil. As the gunmen were driving toward the Curtis Culwell Center, Mr. Hussain logged onto Twitter himself from half a world away, firing off a series of posts in the hour before the attack began at 7 p.m. on May 3. One message posted to his account about 5:45 p.m. seemed to predict imminent violence: “The knives have been sharpened, soon we will come to your streets with death and slaughter!” After the attack, Mr. Hussain was in the first wave of people who praised the gunmen, before his account was suspended. Law enforcement officials have not presented any conclusive evidence that the Islamic State planned or directed the attack. Yet Mr. Simpson appears to have been part of a network of Islamic State adherents in several countries, including the group’s hub in Syria, who have encouraged attacks and highlighted the Texas event as a worthy target. Counterterrorism officials say the case shows how the Islamic State and its supporters use social media to cheerlead for attacks without engaging in the secret training, plotting and control that has long characterized Al Qaeda. But a close look at Mr. Simpson’s Twitter connections shows that he had developed a notable online relationship with some of the Islamic State’s best-known promoters on the Internet, and that they actively encouraged such acts of terror. Speaking of the Texas case last week, James B. Comey, the director of the Federal Bureau of Investigation, said the distinction between an attack “inspired” by a foreign terrorist group and one “directed” by the group “is breaking down.” “It’s not a useful framework,” he added. Mr. Simpson was radicalized years before the Islamic State announced in 2014 that it was creating a caliphate, a unified land for Muslims, and drew global attention for territorial gains and brutal violence. He was investigated by the F.B.I. starting in 2006 and was sentenced to probation in 2011 for lying to investigators. But like many young Muslims drawn by the sensational image of the Islamic State, he enthusiastically joined its virtual community of supporters. An analysis of Mr. Simpson’s Twitter account by the SITE Intelligence Group, which tracks extremist statements, found that Mr. Simpson followed more than 400 other accounts, including “hardcore I.S. fighters from around the world.” They included an alleged British fighter for the Islamic State, known as Abu Abdullah Britani, who according to SITE is believed to be Abu Rahin Aziz, a radical British national who skipped bail to join the terror group. They also included an alleged American fighter called Abu Khalid Al-Amriki and numerous female Islamic State jihadists. Many of Mr. Simpson’s posts announced the new Twitter handles of Islamic State members whose accounts the social media company had suspended, messages commonly called “shout-outs.” “He was taking part in shout-outs of ISIS accounts that were previously suspended, and this shows a pretty deep involvement in the network online,” says J. M. Berger, a senior fellow at the Brookings Institution and co-author of a book about the Islamic State. “He was wired into a legitimate foreign fighters network.” Starting last fall, the Islamic State has repeatedly called for attacks in the West by supporters with no direct connection to its core leadership, and there have been at least six attacks in Europe, Canada and Australia by gunmen who appeared to have been inspired by the group. Each attacker left an online trail similar to that of Mr. Simpson, though not all were in contact with Islamic State operatives in Syria. A review of Mr. Simpson’s Twitter account shows that he interacted not just with sympathizers of the Islamic State, but also with fighters believed to be in Syria and Africa. Some of these fighters later posted on Twitter details of Mr. Simpson’s biography not yet in the public sphere, suggesting that he had shared details about his life with them. “The thing that clearly stands out if you peruse the Texas shooter’s timeline is his third to last tweet,” the one promoting Mr. Hussain, said Daveed Gartenstein-Ross, a senior fellow who researches extremism at the Foundation for the Defense of Democracies and who shared a PDF of Mr. Simpson’s Twitter history. Veryan Khan, who helps run the Terrorism Research and Analysis Consortium, said that Mr. Simpson probably urged others to follow Mr. Hussain in order to draw broader attention to his forthcoming attack. “He wanted to make sure everyone in those circles knew what he’d done,” she said. “It was attention-seeking — that’s what it looks like,” added Ms. Khan, whose organization tracks some 5,000 Islamic State figures and supporters. While still living in Birmingham, Mr. Hussain rose to notoriety as a hacker working under the screen name Tr1Ck, and he was believed to be a core member of what was called TeaM p0isoN. The team claimed a string of high profile cyberattacks, hacking into a Scotland Yard conference call on combating hackers and posting Facebook updates to the pages of its chief executive, Mark Zuckerberg, and former President Nicolas Sarkozy of France. Mr. Hussain was eventually arrested, and he served a six-month prison sentence before traveling to Syria. He has since been linked to a number of Islamic State hacking attacks overseas, though some security officials have doubts about his role. Another well-known promoter of the Islamic State who engaged with Mr. Simpson was a jihadist known on Twitter as Mujahid Miski, believed to be Mohamed Abdullahi Hassan, a Somali-American from Minnesota. Though Mr. Hassan lives in Somalia, he has emerged as an influential recruiter for the group. On April 23, the account Mujahid Miski shared a link on Twitter to a listing for the Muhammad cartoon contest and goaded his followers to attack it. “The brothers from the Charlie Hebdo attack did their part. It’s time for brothers in the #US to do their part,” he wrote. Among the nine people who retweeted his call to violence, according to SITE, was Mr. Simpson. Three days later, Mr. Simpson reached out to Mujahid Miski on Twitter, asking him to message him privately. Whether they actually communicated, or what they may have said, is not publicly known. Minutes before Mr. Simpson arrived at the cartoon event in Garland and began shooting, he went on Twitter one last time to link the attack to the Islamic State. “The bro with me and myself have given bay’ah to Amirul Mu’mineem,” he wrote, using the vocabulary of the Islamic State to say that they had given an oath of allegiance to the Emir of the Believers — the leader of the Islamic State, Abu Bakr al-Baghdadi. “May Allah accept us as mujahedeen,” he wrote, adding the hashtag “#TexasAttack.” Among those who retweeted this last post was Mr. Hussain, the Islamic State hacker in Syria. “Allahu Akbar!!!!” he wrote. “2 of our brothers just opened fire at the Prophet Muhammad (s.a.w) art exhibition in Texas!” he added, using the Arabic abbreviation for “peace be upon him.” After Mr. Simpson’s death, Mujahid Miski tweeted a series of posts, calling Mr. Simpson “Mutawakil,” “One who has faith,” a variation on Mr. Simpson’s Twitter handle, “Atawaakul,” meaning “To have faith.” “I’m gonna miss Mutawakil,” Mujahid Miski wrote. “He was truly a man of wisdom. I’m gonna miss his greeting every morning on twitter.” |