Behind #OpISIS and GhostSec, a group of hactivists fighting ISIS online, gathering and passing intelligence, which may have helped to disrupt a terror plot
Anonymous vs. the Islamic State — For nearly a year, a war has been unfolding in strange corners of the Internet.
Context & Ripple Effects
By the time Foreign Policy published this piece, the volunteer counter-ISIS campaign was already months old: loosely-organized online vigilantes had been reporting suspect accounts to Twitter since early 2015, and the network around GhostSec had matured into something more ambitious than account flagging — actual intelligence gathering and handoff. What makes this article a marker in the arc is the claim that amateur-sourced intel may have helped disrupt a real terror plot, not just taken down propaganda channels.
The timing also frames the next moves in the corpus: days later Wired published ISIS' own OPSEC manual covering Tor, Tails, and BlackPhone, showing the adversary adapting defensively, while US law enforcement's pursuit of British hacker-turned-propagandist Junaid Hussain showed how volunteer reporting and state hunts were converging on the same targets.
First-order effects
- Platforms like Twitter become the chokepoint: vigilante reporting floods them with flagged ISIS-linked accounts, forcing moderation teams to triage volunteer intel alongside their own enforcement pipelines.
Second-order effects
- ISIS propagandists respond by hardening operations — the OPSEC manual's shift toward Tor, Tails, and encrypted devices — and by dispersing coordination across chat apps like Telegram, which later coverage shows carrying both its operational direction and its donation flows.
Third-order effects
- If volunteer intelligence keeps proving operationally useful, counterterrorism becomes a hybrid of state agencies and unaccountable hacktivist networks, raising verification and oversight questions that neither side has an answer for.
The trend: The fight against ISIS online is shifting from platform takedowns run by companies to a decentralized contest between volunteer hackers and increasingly security-conscious extremist networks.