Islamic State (IS), widely known as ISIS or ISIL and also referred to as Daesh, is a Salafi-jihadist terrorist organization that emerged from al-Qaeda in Iraq and later proclaimed a self-styled caliphate across parts of Iraq and Syria in 2014. Although its territorial proto-state was dismantled by 2019, the organization persists as a decentralized transnational network of provinces, affiliates, support nodes, media entities, facilitators, and inspired supporters. It remains one of the most consequential jihadist actors globally, combining insurgency, terrorism, propaganda, external operations, and financial facilitation. Islamic State has targeted civilians, security forces, religious minorities, Shia communities, governments, and Western interests across the Middle East, Africa, Europe, and Asia, while also inspiring or enabling attacks in North America. Its supporters are assessed as among the most lethal homegrown violent extremist threats in the United States, particularly against soft targets such as public gatherings, transportation hubs, hospitality venues, and symbolic events. The group and its affiliates have also demonstrated persistent intent to exploit geopolitical flashpoints and major international events for propaganda and attack planning. The organization is known for sophisticated media operations and online radicalization. Its propaganda apparatus, including al-Hayat Media Centre and outlets such as Dabiq and Amaq, has been used to recruit supporters, incite lone actors, justify sectarian violence, and project the image of a functioning state and global movement. Islamic State has long adapted to platform disruption, shifting from mainstream social media to encrypted and semi-encrypted services such as Telegram and other messaging ecosystems to disseminate propaganda, coordinate supporters, and maintain resilient online communities. Islamic State and its ecosystem have shown sustained interest in technology-enabled tradecraft. Reporting has linked the broader network to training on encryption, operational security, and methods to evade platform safeguards. The group and its supporters have experimented with artificial intelligence for propaganda, translation, disinformation, and operational support, and have promoted the idea of expanding cyber capabilities. Historical reporting also associates Islamic State-linked actors with recruitment of technically skilled supporters, use of encryption tools, and aspirational cyber activity framed as part of a so-called cyber caliphate. Financially, Islamic State has evolved from reliance on territorial revenue streams to a more distributed model involving facilitators, supporters, hawala-style networks, and cryptocurrency. Islamic State Khorasan Province has emerged as a particularly important node in the organization’s contemporary transnational financing architecture, including cryptocurrency fundraising and movement of funds. Somalia-based Islamic State elements have also played an outsized role in revenue generation and financial facilitation for the broader network. Key affiliates and branches include Islamic State Khorasan Province in Afghanistan and Pakistan, Islamic State Somalia, Islamic State Sahel Province, and other regional wilayat established or claimed by the organization. Islamic State Khorasan Province has become especially prominent in external operations, media production, and international attack plotting, and has been linked to high-casualty attacks and disrupted plots beyond South Asia. The group has also maintained influence or support relationships affecting theaters such as Bangladesh, where Islamic State-affiliated or inspired networks have been tied to recruitment and propaganda activity. Islamic State’s tactics include suicide bombings, mass shootings, vehicle attacks, improvised explosive devices, assassinations, sectarian attacks, hostage-taking, intimidation, online incitement, and coordinated propaganda campaigns. It has repeatedly encouraged attacks by individuals or small cells using readily available weapons and simple attack methods, while affiliates have also conducted more complex mass-casualty operations. The organization’s ideology is intensely sectarian, anti-Shia, anti-Western, and anti-state, and it has sought to portray itself as the authentic vanguard of global jihad while competing with al-Qaeda for leadership of that movement. The group has also attempted to embed itself in local insurgencies and weakly governed spaces. In Africa, Islamic State branches and support offices have leveraged instability, illicit finance, and local grievances to expand operationally and financially. In the Arabian Peninsula, it has sought to attack Saudi Arabia and exploit sectarian tensions while presenting itself as a purer alternative to the Saudi religious establishment. In Israel and elsewhere, Islamic State has claimed or inspired attacks even after the collapse of its territorial caliphate, underscoring its continued ability to mobilize adherents. Islamic State is a non-state terrorist organization rather than a nation-state actor. Its aliases commonly include IS, ISIS, ISIL, and Daesh. Its structure encompasses formal provinces, media arms, facilitators, and inspired supporters rather than a single geographically bounded entity, and its enduring threat lies in the combination of ideological reach, adaptable propaganda, decentralized financing, and globally distributed operational nodes.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
13 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
18 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Likely linked trainers reportedly helped Boko Haram members use AI tools, VPNs, encryption, and methods to bypass chatbot safety controls.
Parent organization referenced as the broader network to which ISKP belongs, including media-unit wallets linked on-chain to ISKP-associated addresses.
Supporters of Islamic State are assessed as the most likely violent extremist actors to plot attacks against 2026 FIFA World Cup-related targets in the US, especially audiences, fan zones, transportation infrastructure, and hospitality facilities rather than stadium venues directly.
Referenced as the most likely violent extremist actor whose supporters in the US could plot attacks related to World Cup audiences, fan zones, transportation infrastructure, and hospitality facilities.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.