The deadly attack at Sydney’s Bondi Beach, in which 15 people lost their lives, appears to have been driven by Islamic State (IS) ideology, underscoring the group’s continued ability to inspire violence far beyond its traditional strongholds. According to a report by Australian broadcaster ABC News, the attackers had pledged allegiance to ISIS. The report further noted that one of the suspects, Naveed, had previously been questioned by authorities over alleged links to the terror organisation. These details have renewed concerns among security agencies about the group’s enduring global reach, despite years of sustained counter-terrorism pressure.
Although the Islamic State has suffered major territorial defeats and its operational capabilities on the ground have been significantly degraded, the organisation has proven adept at adapting to changing circumstances. Its presence on mainstream social media platforms has been sharply reduced due to coordinated global bans and takedown efforts. However, rather than disappearing, ISIS has shifted its activities to less-regulated and decentralised digital spaces, using them to continue spreading propaganda, recruiting sympathisers, and radicalising supporters across borders.
An investigation by the India Today OSINT team has revealed how ISIS-linked networks are increasingly exploiting decentralised communication platforms built on the Matrix ecosystem. Matrix is an open-source protocol designed for secure, end-to-end encrypted messaging, allowing users to communicate across federated servers without reliance on a single central authority. Applications based on this framework — including Element, Cinny, and Techhaven — have emerged as alternative channels for extremist groups seeking to evade traditional surveillance and law-enforcement monitoring.
These platforms, which promote privacy and decentralisation, are being misused by ISIS affiliates to host dozens of covert channels operating under different names. Networks such as Al Basir Media, Halummu Official, and Fursan al-Tarjuma are actively distributing extremist content across these apps. The material is shared in a wide range of formats, including PDFs, audio messages, translated publications, and written posts, and is circulated in multiple languages such as English, Arabic, Persian, and even Bangla. This multilingual outreach points to a deliberate strategy to target diverse regions and audiences worldwide.
Open-source intelligence findings indicate that these channels are not limited to ideological messaging alone. Many of them function as command-and-control hubs, where senior operatives issue instructions, share guidance on operational conduct, and provide advice on fundraising and digital security practices. The objective, investigators say, is to sustain and expand the broader terror ecosystem even in the absence of physical territory.
One such channel, Dar Al-Arqam, operating on the Techhaven platform, has openly promoted what it describes as “financial jihad.” The channel urges supporters who may not be directly involved in acts of violence to contribute money instead, framing financial support as a religious duty. One message explicitly called on followers to use their wealth to purchase weapons for militants to carry out attacks.
Internal discussions within these ISIS-linked networks reveal growing frustration over repeated account removals and content takedowns on platforms such as Telegram. To adapt, members are increasingly instructed to avoid sharing files directly and instead rely on external, third-party file-hosting services to distribute material while minimising the risk of detection.
Another ISIS-affiliated group, the Al-Saqri Foundation, reportedly launched several new channels on the Element app in October. These channels focus on specialised areas, including military training, medical preparedness, and physical conditioning. They also feature private chat rooms where individuals can seek tailored advice, raising further alarm about the sophistication of the group’s online operations.
Most concerning for security agencies is evidence that these digital networks have recently circulated manuals detailing how to manufacture explosive substances such as TNT. This development highlights the persistent and evolving threat posed by ISIS’s online infrastructure, demonstrating that even as the group loses ground physically, it continues to innovate digitally to inspire, instruct, and mobilise supporters around the world.
