Despite not controlling significant territory, ISKP has expanded its reach through a dual-pronged approach: intensifying its digital propaganda efforts and strategically orchestrating international attacks. The group’s ability to leverage online infrastructure has significantly enhanced its operational capabilities, making it a formidable transnational threat.
Initially, ISKP functioned primarily as a regional insurgent group, engaging in guerilla warfare within Afghanistan and Pakistan. However, as its territorial influence diminished due to counterterrorism operations, the group adapted its strategy. It pivoted from territorial control to a more flexible and elusive operational model that emphasises digital recruitment, online radicalisation, and remotely guided attacks.
A key element in this transformation has been the Al-Azaim Foundation for Media Production, which serves as ISKP’s primary media wing. Al-Azaim produces a wide array of propaganda materials in multiple languages, including Pashto, Dari, Arabic, Urdu, Farsi, Uzbek, Tajik, English, Russian, and Turkish. The group’s sophisticated multilingual strategy enables it to reach and radicalise individuals far beyond its traditional base of operations in South and Central Asia.
ISKP has developed a highly effective online presence, which has become integral to its strategy of global expansion. Al-Azaim has strengthened ISKP’s outreach by collaborating with pro-IS media entities, including Fursan al-Tarjuma and the I’lam Foundation archive. These partnerships facilitate the distribution of extremist content across various platforms, including encrypted messaging applications, surface web forums, and the dark web.
A notable milestone in ISKP’s digital campaign was the launch of its English-language magazine, Voice of Khurasan, in 2022. This publication has attracted contributors from diverse backgrounds, including individuals from Canada, Australia, Italy, and Tajikistan, illustrating ISKP’s growing international footprint. The group has also exploited artificial intelligence to create high-quality propaganda videos, such as Khurasan TV, further enhancing its influence.
One of the most alarming developments in ISKP’s strategy is its ability to remotely guide and inspire attacks without directly training operatives. This hybrid attack model relies on online communication channels to provide recruits with tactical guidance, target selection, and weapons procurement strategies. ISKP’s digital infrastructure allows it to orchestrate attacks across multiple continents without the need for physical training camps.
A striking example of ISKP’s external operations was the January 2023 suicide bombing targeting a Chinese diplomatic delegation in Kabul. This attack underscored the group’s commitment to targeting foreign nationals and destabilizing diplomatic relationships. Similarly, ISKP claimed responsibility for the March 2024 Crocus City Hall attack in Moscow, demonstrating its ability to conduct high-profile international operations.
ISKP’s increasing online presence and operational reach pose significant challenges for global security. The group has successfully diversified its recruitment base, attracting members from Central Asia, the Caucasus, and even Western Europe. Arrests in Germany, Austria, and Turkey in 2024 revealed ISKP-linked cells comprising individuals from Chechen, Bosnian, Russian, Uzbek, Kyrgyz, Azerbaijani, and Sudanese backgrounds. This diversity highlights the effectiveness of ISKP’s digital outreach efforts.
The organisation’s ability to leverage real-world events to incite violence further amplifies its threat. Following the Quran-burning incident in Sweden in January 2023 and the October 7, 2023, Hamas attack on Israel, ISKP intensified its online calls for attacks against Western and Jewish targets. Its Voice of Khurasan magazine published guides on executing attacks, detailing weapons selection and operational tactics, reinforcing the danger posed by its propaganda efforts.
Given ISKP’s reliance on digital platforms to sustain its operations, counterterrorism efforts must prioritise the disruption of its online infrastructure. Governments, intelligence agencies, and technology companies must collaborate to:
ISKP has successfully transformed itself from a regional insurgency into a global jihadist force by capitalising on digital platforms. Its sophisticated online propaganda, multilingual outreach, and ability to remotely orchestrate attacks make it a uniquely dangerous entity. Addressing this evolving threat requires a comprehensive counterterrorism strategy that integrates both digital and physical security measures. The battle against ISKP will not only be fought on the ground but also in cyberspace, where the group continues to expand its influence and reach.
This excerpt is taken from ‘Islamic State Khurasan Province’s International Expansion and Growing Online Activities. Tech Against Terrorism Analysis’ by Lucas Webber, Senior Threat Intelligence Analyst, Tech Against Terrorism, and Cat Cadenhead, Junior Research and Project Officer, Tech Against Terrorism, originally published in the Global Terrorism Index 2025 report.
— Download the Global Terrorism Index 2025 Press Release
— Request a Media Interview.
— View the Global Terrorism Index 2025 interactive map
— Understanding Global Terrorism Index 2025 – Frequently Asked Questions
The number of countries recording a terrorist attack increased from 58 to 66, according to the 12th annual Global Terrorism Index (GTI). This...
Western democracies face a growing threat from lone wolf attackers, who operate independently, often radicalising rapidly and acting with little to...
Evolving Patterns of Terrorism & Radicalisation in Western Democracies
