Loading threat actor…
Egyptian Islamic Jihad (EIJ) was an Egyptian Sunni Islamist militant organization dedicated to the violent overthrow of the Egyptian government and, by the late 1990s, to attacks against the United States and its interests. The group was led by Ayman al-Zawahiri during the 1990s and became closely integrated with al-Qaeda, effectively merging with it by at least February 1998. EIJ was part of the broader jihadist milieu that aligned with al-Qaeda’s campaign of transnational terrorism and endorsed violence against American civilians. EIJ operated as an affiliated component of al-Qaeda’s international terrorist network and participated in a long-running conspiracy to kill U.S. nationals and attack U.S. diplomatic and military targets. Reporting tied EIJ and associated al-Qaeda operatives to the 1998 bombings of the U.S. embassies in Nairobi, Kenya, and Dar es Salaam, Tanzania, mass-casualty attacks that killed and wounded large numbers of civilians and diplomatic personnel. The organization’s activities were also linked to broader al-Qaeda efforts involving explosives, surveillance, operational planning, facilitation, training, and international coordination. Known behavior associated with EIJ in this period includes terrorist plotting against government and diplomatic targets, use of explosives in coordinated attacks, reconnaissance in support of operations, and collaboration with allied jihadist actors across multiple countries. After its merger into al-Qaeda, EIJ ceased to function as a clearly distinct operational entity and is best understood as one of the principal Egyptian currents that helped shape al-Qaeda’s leadership, ideology, and external operations.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
7 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Militant organization led by Ayman al Zawahiri that sought the violent overthrow of the Egyptian government and opposed the United States; many of its leaders became influential in al Qaeda, it effectively merged with al Qaeda by 1998, maintained cells in Baku and London, issued threats against America, and helped disseminate claims of responsibility for the 1998 embassy bombings.
Named as an associated militant group whose members and associates were involved alongside al Qaeda in the conspiracy and embassy bombing-related offenses described in the indictment.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.