French TV hack ‘a step up’ in cyberjihadism: experts

The "unprecedented" cyber-attack on French television channel TV5Monde represents a major "step up" in the Internet warfare being waged by highly specialized jihadist hackers, experts said on Thursday.

French TV hack 'a step up' in cyberjihadism: experts
The French television channel TV5 Monde was attacked by cyberjihadists on Wednesday. Photo: Pierre Verdy/AFP

Since January's three-day Islamist attacks in Paris that killed 17 people, hackers have launched hundreds of assaults on French websites, from denial of service attacks that snarl up web traffic to full-scale hacks.

But taking over a television channel and blocking programming — as happened to TV5Monde — is another matter entirely, experts believe, an "unprecedented" attack, according to the station's boss Yves Bigot.

"This is certainly a step up," said Gilbert Ramsay, expert on cyberjihadism at Scotland's St. Andrews University.

"For years now, low-level cyber-attacks have been a routine part of Islamist mobilization. They have published manuals on how to hack websites.

But this is an escalation," he added.

What's more, they are almost impossible to trace, as they work in virtual teams and can be based anywhere in the world.

"Sometimes they don't even bother to hide their IP addresses," said one cyber-crime investigator, who did not wish to be identified.

"Cyberjihadist attacks are commonplace, but this is the first time they have been able to stop a television channel," this source said.

Like real-world "terrorism", these virtual warriors "come from all sorts of backgrounds," he added.

However, he said "investigations generally led towards the countries of North Africa."

'Global recruitment'

Cyber-attacks are nothing new, stressed Daniel Martin, co-founder of the Paris-based Cyber Crime Institute.

Even during a wave of Algerian attacks on France in the 1990s there were "high-level IT experts capable of launching sophisticated attacks," he said.

"So we shouldn't be surprised, given the means at the disposal of the Islamic State, that they can afford the best specialists."

"Some people think that jihadists are low-brow terrorists, but that is not at all the case: they have considerable technical know-how," added Martin.

He said the attack on TV5Monde was probably months in the planning and would have required several hackers working in close coordination.

"We're not talking about a basic little hacker. We're not talking about amateurs. This time, they really did some damage."

As of late afternoon on Thursday, the station was still able only to broadcast pre-recorded programmes but had regained control of its website.

Just hours before the attack, the Islamic State extremist group had published a video praising their "knights of the media" carrying out cyber-attacks and urged them to step up their efforts.

"They have global recruitment," said Martin.

"A bit like the Chinese army, which has set up cyberwarfare battalions, they are totally capable of doing the same thing."

Ramsay from St. Andrews University said he believed the jihadists had something to prove after recent military reverses — notably in the Iraqi city of Tikrit.

"The IS fundamental theme is momentum: They want to show that they are on the offensive, on the ground and in cyberspace," he said.

"After the set-back in Tikrit, for example, it can be important for them to show that they can continue the struggle elsewhere."


France charges jihadi with murder in IS territory

France on Friday charged a man with murder days after his expulsion from Turkey, holding him in custody over crimes alleged to have taken place in jihadist-controlled areas of Iraq and Syria.

France charges jihadi with murder in IS territory
People walk under a billboard erected by the Islamic State (IS) group as part of a campaign in the IS controlled Syrian city of Raqqa in 2014. Photo: Raqa Media Center / AFP
Using the pseudonym “Abou Salman al Faransi”, 26-year-old Othman Garrido is believed to have arrived in the region in 2012, where anti-terror prosecutors (PNAT) say he committed “murder in connection with a terrorist undertaking” and joined a “terrorist conspiracy”.
He is believed to have played an important role in and have information on the French jihadist scene.
A judge on Friday ordered him jailed provisionally after he spent the week in police custody.
“Based on photographs of abuses where he is visible”, Garrido “was likely involved in other murders in Iraq and Syria” being probed in a separate investigation, PNAT said.
Prosecutors suspect him of three murders in total, although they have not been able to precisely date the crimes.
France has had an arrest warrant out since 2016 for Garrido, a native of southern city Montpellier.
Turkish forces captured him near the Syrian border in July, and handed him over under a Paris-Ankara deal covering the return of French jihadists.
A youth court sentenced Garrido in 2017 to 15 years in jail for joining the Islamic State (IS) group in Syria, where he trained and fought as well as attempting to incite violence by French Muslims.
After burning his French passport, Garrido urged Muslims to kill “infidels” in a seven-minute video distributed by IS' communications arm in 2014.
He was flanked in that recording by two other French jihadists using the pseudonyms Abou Ousama al Faransi and Abou Maryam al Faransi.   
Garrido's parents and two of his brothers have also received jailed sentences of 10 and 15 years. It is unclear whether his brothers, who also travelled to Syria, remain alive.