Loading threat actor…
Ansaroul Islam is a Burkinabè jihadist armed group operating as an affiliate of Jama’at Nusrat al-Islam wal-Muslimin (JNIM) in Burkina Faso. It has been identified as one of the principal vehicles through which JNIM expanded from Mali into Burkina Faso, and it forms part of JNIM’s broader cross-border command structure in the Sahel. The group is led by Jafar Dicko, who has also been described as JNIM’s supreme leader in Burkina Faso, with Ousmane Dicko, also known as Owais, serving as his deputy and as a JNIM deputy commander in the country. Ansaroul Islam has been linked to serious violence against civilians in Burkina Faso, including mass killings attributed to JNIM-affiliated forces under Jafar Dicko’s command. Reported abuses include killings of civilians in multiple localities in 2024 and 2025. Within the wider JNIM campaign, associated forces have used coercion and violence to establish territorial control, punish communities, and displace civilians. JNIM operations in Burkina Faso have also included sieges of towns and villages, abductions, attacks on humanitarian convoys, use of improvised explosive devices, and destruction of civilian infrastructure such as bridges, electric lines, water sources, and communications links. Ansaroul Islam should therefore be understood as part of a broader insurgent and terrorist network engaged in sustained attacks on civilians and state authority in Burkina Faso. The group’s dominant orientation is militant Islamist insurgency aligned with JNIM’s regional agenda rather than financially motivated crime. High-confidence reporting places its activity primarily in Burkina Faso, where it has been implicated in grave abuses that may amount to war crimes and crimes against humanity.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
JNIM-affiliated armed group operating across Burkina Faso, especially in northern and western regions; implicated in multiple mass-casualty attacks against civilians.
Burkinabè armed group founded in 2016 and later effectively absorbed into JNIM. It operates across Burkina Faso, especially in northern and western regions, and is described as one of the affiliated groups through which JNIM expanded into Burkina Faso.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.