(New York, N.Y.) — The Counter Extremism Project (CEP) reports on the methods used by extremists and terrorist groups on the Internet to spread propaganda and incite violence. On February 21, ISIS’s spokesperson Abu Hudhayfah Al-Ansari released an official audio address calling for attacks against the Syrian transitional government under President Ahmed al-Sharaa, and commending lone actor attacks and continued ISIS campaigns throughout Africa.
ISIS, via an editorial in its Al-Naba newsletter released on February 19, condemned international borders and what the terrorist organization bemoaned as improper Ramadan celebrations. Also on February 19, ISIS released a video from the group’s West Africa Province in Nigeria, consisting of a speaker describing the idea of hatred of unbelievers and love for coreligionists, including those who have made mistakes in their beliefs. The pro-ISIS French-language group An Nur Media Center released a short video celebrating the January 29 Diori Hamani International Airport attack in Niamey, Niger. Between February 15 and 21, ISIS claimed credit for 23 attacks, with approximately half of all claimed attacks occurring in Nigeria.
Dozens of extreme right Telegram channels belonging to groups or individuals from Europe or the U.S. commemorated Quentin Deranque, a 23-year-old student and far-right activist, who was killed in a fight in Lyon with antifascist activists. Posts included defenses of historical fascist street fighting groups and calls for revenge against the far-left. On February 16, an individual on Telegram released a pamphlet of quotes from the founder of the neo-Nazi accelerationist group Injekt Division, who is currently serving a 60-month prison sentence for being a felon in possession of a firearm, after he reportedly threatened a mass shooting at a Texas Walmart. Also on Telegram, a white supremacist channel posted a link for an alleged AI-generated website hacking tool. Finally, on February 12, a Canadian white supremacist streamer and propagandist launched a Substack.
ISIS Spokesperson Releases Speech Calling for Attacks Against Syrian Government, Praising Lone Actor Terrorism and Ongoing Fighting in Africa
On February 21, ISIS released an approximately 35-minute speech from the group’s spokesperson Abu Hudhayfah Al-Ansari, titled “The Right Course Has Become Clear from the Wrong.” The speech condemned the Syrian transitional government led by Ahmed al-Sharaa as tyrants, apostates, and puppets of the West and Turkey, calling for renewed fighting against the current Syrian government and its soldiers. Al-Ansari noted that ISIS does not fight to implement a political system, but for the implementation of religious rule and religious law.
Al-Ansari also celebrated ISIS lone actor attacks and larger campaigns. He specifically noted the January 1, 2025, New Orleans attack and the December 14, 2025, Bondi Beach attack, both committed by perpetrators inspired by ISIS. Al-Ansari also noted the March 22, 2024, Moscow attack; the Kerman, Iran, attack on January 3, 2024; and the July 2024 attack on a Shiite mosque in Oman. The speech also praised ISIS fighters in Somalia and their confrontations with Puntland military forces, the U.S., and United Arab Emirates (UAE) backed forces. In January 2026, the Somali government cancelled agreements with the UAE. Al-Ansari also praised ISIS attacks in Nigeria; the January 29 attack on the Niamey, Niger airport; and ongoing ISIS campaigns in the Democratic Republic of the Congo and Mozambique. He also called for more fighting in North Africa.
The speech specifically noted the importance of official ISIS propaganda and unofficial pro-ISIS supporter groups. Al-Ansari affirmed this work as incredibly important, but warned against unofficial pro-ISIS supporter groups that go beyond official ISIS rulings and ideology. He also noted the importance of ISIS-aligned religious scholars and cautioned that security had to be taken seriously to avoid arrest or imprisonment by intelligence services and law enforcement.
It has been over two years since Al-Ansari’s last audio message in January 2024.
ISIS Al-Furqan image for the February 21 audio release. Screenshot taken February 23.
ISIS Newsletter Condemns Borders, Disunity, Accuses Muslim Community of Improper Ramadan Celebrations
ISIS, in its editorial in issue 535 of the weekly newsletter Al-Naba, released on February 19, condemned international borders and those who support them, and accused the Muslim community of not celebrating Ramadan properly. The editorial claimed that many people resented the restrictions of fasting and did not fully repent for their sins. The author stated that if Ramadan arrived in human form, many people would attempt to kill the individual. The editorial called on readers to devote themselves to worship, donate money, and participate in religiously mandated fighting.
ISIS West Africa Province Releases Propaganda Video
On February 19, ISIS released a propaganda video from the group’s West Africa Province. The approximately 10-minute video consisted entirely of a speaker, identified as “Abu Abdur-Rahman al-Ansari,” preaching about the concept of love for believers, even those who have erred in their faith, and hatred for disbelievers.
The video was spread via Telegram, Element, RocketChat, SimpleX Chat, and on pro-ISIS propaganda websites. On February 19, CEP researchers reported 20 uploads of the video to Files.Fm, FromSmash, GoFile.Io, LimeWire, Mega.Nz, Odysee, qu.ax, Ufile.Io, Dropbox, and MediaFire. As of February 23, 16 uploads had been removed, and the video was still available on Files.Fm, Odysee, and Ufile.Io.
Image from the February 19 ISIS video on the Element platform. Screenshot taken on February 19.
Pro-ISIS Propaganda Group Releases Video Celebrating Niamey, Niger Airport Attack
On February 19, the pro-ISIS French-language group An Nur Media Center released a video celebrating the January 29 Diori Hamani International Airport attack in Niamey, Niger. The approximately one-minute video included previously released Amaq footage of burning aircraft, with added graphics, originally appearing in the Al-Naba newsletter, identifying which planes, helicopters, and buildings were destroyed. In December, the An Nur Media Center announced it was seeking graphic designers and video editors.
An Nur Media Center video. Screenshot taken on February 20.
Roundup of Claimed ISIS Attacks
Between February 15 and 21, ISIS claimed credit for 23 attacks. The same as the previous week, Nigeria had the largest number of claimed ISIS attacks, with 11; followed by four attacks in the Democratic Republic of the Congo; three claimed attacks in Syria; two in Niger; and one each in Mali, Mozambique, and Somalia.
On February 18, ISIS released an Amaq video that showed a February 16 nighttime attack on a Nigerian military camp in Borno State. The video included combat scenes, photos of casualties, the burning of vehicles and buildings, and captured weapons and equipment.
Extreme Right Telegram Channels Condemn Killing of Activist in Lyon, France
From February 14 to 21, dozens of Telegram channels belonging to extreme right groups and propagandists commemorated Quentin Deranque, a 23-year-old student and far-right activist, who was killed following a fight between far-right and far-left groups in Lyon. Deranque died in a hospital on February 14, two days after sustaining head injuries from being assaulted by multiple people. French authorities detained 11 people for the attack, including individuals allegedly belonging to a banned antifascist group, the Young Guard. Two people were charged with murder in connection with the case.
Multiple extreme right channels condemned the attack, commemorated Deranque as a martyr, and in some cases, advocated for acts of violence. Several Active Club chapters, including those in France, Sweden, Germany, Greece, the Netherlands, Colombia, and the United States, posted photos or videos commemorating Deranque. At least three neo-Nazi accelerationist channels shared posts noting the attack, with one channel, connected to a small American neo-Nazi group, stating a desire for revenge and claiming that they would respond in kind.
On February 14, a Telegram channel affiliated with the Active Club movement posted that it was necessary to fight back, noting that the purpose of training in combat sports was to “defend” speakers, demonstrations, and other events. The post pointed to the Sturmabteilung, also known as the Brownshirts, in 1920s Germany, the Blackshirts in Italy, and the Blueshirts in Spain as examples of appropriate responses to “communist agitation.” The same channel shared a post on February 16 from a European extreme right hooligan Telegram channel, which claimed to show footage of three men beating an antifascist activist in the south of France as revenge.
A Telegram post from a Dutch Active Club channel. Text on the bottom reads “left-wing extremism kills.” Screenshot taken on February 19.
Pamphlet of Injekt Division Leader’s Quotations Released on Telegram
On February 16, a white supremacist Telegram channel shared a four-page pamphlet dedicated to Coleman Blevins, a.k.a. “Korb,” the founder of the neo-Nazi accelerationist group Injekt Division. In May 2024, Blevins was sentenced to 60 months in prison for being a felon in possession of a firearm, after he reportedly threatened a mass shooting at a Texas Walmart. The pamphlet, dated February 16, 2026, stated it was the first in a series, and praised Blevins for his “extensive knowledge,” and contained 10 quotes to explain “why people support Coleman so adamantly.” Blevins’ quotes in the pamphlet concerned the concepts of suffering, alienation, addiction, and the promotion of white supremacist themes. Telegram channels affiliated with Injekt Division have previously released propaganda endorsing antisemitic and racist violence, including the glorification of mass shooters. The group has called itself a “religious ‘extremist’ alternative to the 12-step program.” Blevins is scheduled to be released from federal prison in April 2027.
On February 20, the same user uploaded a modified pamphlet containing additional quotes, including one that seemed to call for violence.
White Supremacist Telegram Channel Posts Link to AI-Generated Website Hacking Tool
On February 9, a white supremacist Telegram channel with approximately 200 subscribers posted a link to a GitHub page for an autonomous website hacking tool using the Claude Code AI assistant. The Telegram channel admin shared a post noting that the program could obtain private information from websites. The page on GitHub, which has been starred over 23,000 times, indicating that it is widely known, claims that the program is an autonomous AI pentesting tool for legal use to discover cybersecurity vulnerabilities.
Canadian White Supremacist Leader Launches Substack
On February 12, Alex Vriend, a Canadian white supremacist propagandist and streamer, launched a newsletter on Substack. Vriend, who is the vice president of the Active Club movement inspired group Second Sons Canada, has over 17,500 followers on Telegram. Posts on Vriend’s Substack included short essays on organizing, holding public demonstrations, and the wearing of masks by extreme-right groups during such demonstrations.