al-Shabab
al-Shabab is a Somali Islamist militant and insurgent group aligned with al-Qaeda. The provided content describes it as a powerful insurgent group in Somalia and notes that the United States conducted its first drone strike in Africa in 2011 against senior al-Shabab leaders. In Somalia, al-Shabab has adapted to drone pressure by shifting from convoys of land cruisers to motorcycles and wooden farm carts to reduce exposure to U.S. and Somali government strikes. The group has also been linked to external attacks in Kenya, including the 2020 attack on the Manda Island military base that killed three Americans. The content further references major al-Shabab-linked attacks in Nairobi, including the 2013 Westgate Mall siege and a 2019 hotel attack that killed 21 people. A Kenyan border security program cited in the content used U.S.-provided drones to detect al-Shabab supply caches and disrupt an attempted bomb-planting operation. The content also states that a U.N. panel reported al-Shabab was developing a transactional or opportunistic relationship with the Houthis in Yemen. Known alias in the provided content: al_shabab.
Know when an actor pivots toward your sector
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Targeting
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Who they target
Sectors the actor has been observed targeting.
- Government & Administration
- Military
Where they target
Geographies tied to known operations.
- 🇸🇴 Somalia
Where they're from
Attributed origin per open-source reporting.
- SO
Tradecraft
5 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
Recent activity
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Somali Islamist militant group discussed as a target of drone strikes and as an actor adapting its tactics to evade aerial surveillance and strikes.
Militant insurgent group operating in Somalia and Kenya, conducting terrorist attacks, using IEDs, and threatening regional security while maintaining links to al-Qaeda.
The version that knows your environment.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.