Who are ISIS-K, the group linked to the Moscow concert hall terror attack?

ISIS claimed responsibly for Friday’s deadly assault on a concert venue in Moscow, releasing graphic footage purporting to show its gunmen carrying out what was Russia’s worst terror attack in decades.

Russian authorities have accused four men from the former Soviet republic of Tajikistan of being behind the attack, which left at least 137 people dead and more than 100 injured. The suspects, who are charged with committing a terrorist act and face possible life imprisonment, have been remanded into pre-trial detention through May 22 after appearing in court in Moscow on Sunday.

Russian President Vladimir Putin said on Monday that “radical Islamists” carried out the assault, but also claimed without proof that a “window” had been prepared for the attackers to escape to Ukraine. Kyiv has denied the allegations.

US officials have tied the attack to ISIS-K, an affiliate that operates in central Asia, which has become one of the region’s most brutal and feared terror groups.

Here’s what we know about ISIS-K.

Who are ISIS-K?

ISIS-K was formed in 2015 and has been active in Afghanistan, Pakistan and Iran. It is a branch of ISIS, the terror group that emerged in Syria and Iraq and, at its peak, controlled a huge stretch of territory.

Five years since the fall of ISIS’ self-proclaimed caliphate across Iraq and Syria, the group has morphed into a terror network with cells spread around the world, including in Africa, the Middle East, Central Asia and Southeast Asia.

The connection between ISIS-K and its apparent parent group is not entirely clear. The affiliates share an ideology and tactics, but the depth of their relationship – such as the chain of command and control – has never been fully established.

By 2018, ISIS-K was ranked the world’s fourth-deadliest terror group, according to the Institute for Economics and Peace, which monitors global terrorism.

The Taliban’s takeover of Afghanistan in August 2021, and the withdrawal of US troops from the country, thrust ISIS-K into the global spotlight – especially after the group orchestrated a deadly bombing outside Kabul airport that killed 13 US military personnel and 170 Afghans.

It was ISIS-K’s most globally consequential action to date and drew a promise of retribution from US President Joe Biden.

The United Nations estimated in 2021 that the group has up to 2,200 core fighters based in Afghanistan’s Kunar and Nangarhar provinces.

What do they want?

Like its parent organization, ISIS-K aims to create a “pure Islamic state,” according to CSIS – describing the group’s vision of a “global, transnational caliphate” governed by Sharia law.

ISIS-K has a mutual hatred of the Taliban and attracts those with views even more radical than the Islamist group that rules Afghanistan. It refuses to acknowledge the Taliban as a legitimate Islamic leader because it relies on a narrow base “instead of committing to a universal Islamic jihad,” according to CSIS.

As such, ISIS-K’s recent attacks have largely been aimed at the Taliban and other symbolic targets, as well as at Afghanistan’s Shia Muslim minorities, in particular the ethnic Hazaras.

The group’s hatred of the West, including the United States, Britain and Europe, also features prominently in their agenda – as does its enmity toward Russia.

Why did they attack Russia?

“Russia has been at the top or near the top of the list of ISIS for many years,” said Daniel Byman, director of Georgetown University’s security studies program. He pointed to Moscow’s crucial role in the Syrian civil war, when it intervened in support of the Syrian government and against ISIS.

ISIS-K has also criticized the Taliban for being “too close to Russia,” Byman added.

In 2022, ISIS-K claimed responsibility for a suicide blast near Russia’s embassy in Kabul, which killed six people, including two consular staff.

Over the past month, Russia has thwarted several ISIS-related incidents, according to state-run news agency RIA Novosti. At least four incidents in March alone have been reported across Russia that local authorities said involved people connected to ISIS, RIA reported.

Russian state media reported on March 7 that the FSB, Russia’s security service, prevented an ISIS attack on a synagogue in Moscow, according to Reuters. The ISIS attackers were killed in a gunfight, the reports said.

What other attacks are they responsible for?

To date, the majority of ISIS-K’s most devastating attacks have been in Afghanistan and Pakistan – the Kabul airport blast being a prominent example.

Others include a May 2020 attack on a Kabul maternity ward that killed 24 people and an attack on Kabul University in November 2020 that killed 22, according to CSIS. ISIS-K was also believed to be behind a horrific car bombing outside a girls’ high school in May 2021 that killed at least 85 people.

The group was particularly active during its peak around 2018 – when an ISIS-K suicide bomber killed 128 people at an election rally in Mastung, Pakistan, one of the bloodiest attacks anywhere in the world that year.

While it’s no longer as strong as it was in 2018, ISIS-K continues to plan attacks in Afghanistan. It is the most active terror group in the country, responsible for 73 deaths in 2023, according to the Institute for Economics and Peace.

Could they pose a broader global threat?

The Kabul airport attack had raised global concerns that ISIS-K could pose a major threat across the region and beyond.

In March 2023, the head of the US Central Command told lawmakers that ISIS-K was becoming more emboldened, and that Europe or Asia were more likely targets for terrorist attacks originating in Afghanistan than the US.

In a 2023 threat assessment report by US intelligence agencies, the Office of the Director of National Intelligence said ISIS-K “almost certainly retains the intent to conduct operations in the West and will continue efforts to attack outside Afghanistan.”

And earlier this year, the UN Security Council warned in a report that ISIS-K was planning or conducting “operational plots” in Europe. Seven people linked to the group were arrested in Germany last year while planning for “high-impact terrorist attacks,” including obtaining weapons and possible targets, the council said.

It is not the first time that ISIS has struck a concert venue. In November 2015, ISIS gunmen attacked the Bataclan theater in Paris – part of an assault that hit other targets in the city – killing at least 130 people. In May 2017, the group claimed responsibility for a suicide bombing at an Ariana Grande concert in Manchester Arena, England, that killed 22 people. ISIS has also inspired terrorists in the US, including the gunman who killed 49 people at the Pulse nightclub in Orlando, Florida, in 2016 in what was then the most lethal terrorist attack in the US since 9/11.

Earlier this month, the US government had information about a planned terrorist attack in Moscow – potentially targeting large gatherings, to include concerts – which prompted the State Department to issue a public advisory to Americans in Russia. The US also shared this information with Russian authorities.

The intelligence that Washington had been getting since November was “fairly specific” and the US intelligence community warned Russia, but it’s not clear if this is directly tied to the March 7 warning by the US embassy in Moscow.

Putin rejected the US embassy warnings about terror attacks as “provocative” in a speech to the FSB, saying they “resemble outright blackmail and the intention to intimidate and destabilize our society.”