Fifteen Years after the Djerba Synagogue Bombing
April 14, 2017
Abstract: Fifteen years ago this month, a Tunisian operative named Nizar Nawar detonated a truck bomb outside the el-Ghriba synagogue in Djerba, Tunisia, killing 19, including 16 German and French tourists. Orchestrated by Khalid Sheikh Mohammed, it was al-Qa`ida’s first successful international attack after 9/11, but it has received far less attention than other attacks launched by the group. Court documents, case files, and primary sources shed significant new light on the attack and al-Qa`ida’s then modus operandi for international attack planning, which has both similarities and differences with recent international terrorist plots carried out by the Islamic State. In retrospect, the Djerba attack should have been a warning sign of the international threat posed by Tunisian foreign fighters, who are now one of the most dangerous cohorts within the Islamic State.
On April 11, 2002, a Tunisian al-Qa`ida operative named Nizar Bin Muhammad Nasar Nawar (Sayf al-Din al-Tunisi) ignored security officers’ orders to stop and drove a truck filled with liquid propane into the wall of el-Ghriba Synagogue, one of Africa’s oldest Jewish synagogues, in Djerba, Tunisia.1 Masterminded by Khalid Sheikh Mohammed (KSM),a the attack killed 14 Germans, three Tunisians, and two Frenchmen and left 30 others injured. Although it was al-Qa`ida’s first successful external operation following the 9/11 attacks, little has been written about how the attack materialized. It is one of the only large-scale, post-9/11 attacks or plots that has not been given a full retrospective treatment based on information that has been gleaned since its execution.2 Additionally, in light of the current Islamic State external operation campaign, it is worth examining how the Djerba bombing compares to more recent terrorist attacks in order to shed light on the evolution of terrorist attack planning.
This article draws on court documents, media reports, Guantanamo Bay prisoner review files, and Arabic primary sources from the jihadi movement to tell the story of the attack. While there is much contradictory information, the author has attempted to piece together what really happened by cross-referencing sources and weighing their credibility. While many scholars and general observers were surprised at the number of Tunisians who became involved with jihadism following the country’s revolution, this study of the network behind the Djerba attack makes clear that Tunisians have, in fact, played a significant role in the global jihadi movement for decades. Equally relevant to understanding the contemporary threat picture, this article sheds light on the longstanding importance of entrepreneurial individuals who link different nodes of networks together.3
The Planning of the Attack
The central figure in the Djerba attack was Nizar Nawar, who was born in 1978.4 His family was originally from Ben Gardane, a town west of Tunisia’s border with Libya that has since become infamous as a recruitment hub for sending foreign fighters to Iraq, Syria, and Libya. Little is known about Nawar prior to his involvement within al-Qa`ida, beyond the fact that he was a poor student, which led him to drop out at the age of 16 and become a small-time salesman. Nawar is known to have traveled to Libya to buy cheap goods and sell them back in the local markets in Ben Gardane.5 When interviewed about Nawar following the attack, family members and friends did not seem to know fully about his activities after he dropped out of school. Many stated they had not observed any outward signs of militancy.6
According to the autobiography of Fadl ‘Abd Allah Muhammad (better known as Fadl Harun), then head of al-Qa`ida in East Africa who spent time in Afghanistan with Usama bin Ladin in the late 1990s, Nawar had been planning the attack since he first returned to Tunisia from Afghanistan in late 1999.7 Between his original return home in late 1999 and the attack in April 2002, Nawar would travel back and forth between Tunisia and Afghanistan for additional guidance. The Saudi al-Qa`ida member Hasan Muhammad ‘Ali Bin Atash, for example, noted that he saw Nawar at the al-Matar Airport Complex in Kandahar in October 2000.8
Fadl Harun’s autobiography also commends Nawar for his training capabilities and independence. Nawar had trained in explosives at the al-Qa`ida-affiliated Khalden camp in Paktia province while in Afghanistan.9 According to French court documents on the Djerba attack, this is where Nawar met the Polish-German convert Christian Ganczarski (Abu Muhammad al-Almani).10 Ganczarski befriended Nawar at Khalden and provided support and guidance to him for the synagogue bombing. In 2009, Ganczarski was convicted in a French court for his role in the Djerba attack.11
Further evidence from the trial uncovered that Ganczarski and Nawar had many simultaneous travel patterns in the year or two prior to the Djerba attack, suggesting they worked in tandem.12 Ganczarski allegedly became a mentor to Nawar, possibly due to Ganczarski’s high stature and position within al-Qa`ida.13 According to testimony by Shadi ‘Abd Allah, the leader of a German Jama`at Tawhid wa-l-Jihad cell, who was arrested in April 2002 in connection with Abu Mus`ab al-Zarqawi’s Turkish network, Ganczarski was very close to top al-Qa`ida leaders Saif al-`Adl, Abu Hafs al-Masri, and bin Ladin.14 b According to evidence from the French prosecution, Ganczarski was often seen at al-`Adl’s logistics base in Afghanistan and was one of the individuals in charge of al-Qa`ida’s information technology, including radio links and al-Qa`ida’s internet activities and passing messages between bin Ladin and KSM.15 Ganczarski can also be seen in a January 2000 video sitting near Muhammad Atta, Ramzi Bin al-Shibah, and ‘Abd al-Ra‘uf Jiday (Faruq al-Tunisi) as bin Ladin gives a sermon at Tarnak Farms.16 c
It is certainly possible that Ganczarski was Nawar’s handler for the plot. In fact, the French prosecution noted that just prior to the suicide attack in Djerba, Nawar phoned two individuals: Ganczarski and KSM (twice). According to Germany’s domestic intelligence agency, the Office for the Protection of the Constitution, which was wiretapping Ganczarski’s phone, Nawar asked Ganczarski for his du‘at (blessings) ahead of the operation, to which Ganczarski replied, “go in peace, God’s mercy and blessing be with you.”17 The French were able to determine from wiretapping that Nawar was in constant contact with KSM in the two months leading up to the attack, likely receiving instructions and advice on final plans.18 For these conversations to take place, Nawar relied on a supportive logistical network in Spain and France; KSM had a direct hand in the former, specifically connecting individuals from different parts of the broader Djerba attack network.19 These networks also helped provide the necessary financial resources, which were funneled through Spain, for the planning and execution of the attack, which ended up costing €19,326 (about $17,000) at the time.20
Nawar last left Afghanistan on September 4, 2001, and returned to Tunisia via Switzerland on September 5. He may have had a meeting during his layover with one of KSM and Ganczarski’s European associates, a Swiss-German named Daniel ‘Yusuf’ Morgenegg, who had originally met Ganczarski in Germany in late 1992.21 Morgenegg was likely overseeing the logistics of KSM’s Djerba attack network in Europe, which besides himself, included operatives in France and Spain.22 Once back in Tunisia, Nawar created a front import-export business in Djerba. Final preparations for the attack began in January 2002 when Nawar purchased a used truck and his uncle Biljakim Nawar, a sheet metalworker,23 welded a large steel tank inside it, which Nawar said he planned to use to transport olive oil. In reality, Nawar filled it with liquid propane for his attack.24 Also in January, Nawar dispatched Tariq Hidiyya (Tahar), one of his associates in his hometown of Ben Gardane, to France, with money to purchase a satellite phone through his brother Walid Nawar.25 Hidiyya and Walid met in Saint-Priest near Lyon where Hidiyya presented Walid with an envelope containing €1,800. The money was used by Walid to buy a phone (as well as a modem) in Paris for his brother Nizar, the Djerba attacker.26 This allowed Nizar to speak with KSM and others more conveniently since Nizar had previously been using pay phones to remain in contact with the network.27
According to Spanish court documents, in early March 2002, in order to arrange additional funds for Nawar’s activities, KSM associate Isa Isma‘il Muhammad, a Canadian-Pakistani based in Karachi, faxed a message to Enrique Cerda Ibanez (Kiké), CEO of the Valencia-based business Hispania de Calcomanias. In the fax, he stated that a man named ‘Abd Allah Jafir would be calling Ibanez and that “Isa Karachi has a gift of €5,720.”28 The Spanish investigation found that ‘Abd Allah Jafir was a pseudonym that KSM gave Nawar to use when contacting Ibanez.29 Isa Isma‘il Muhammad and Ibanez had business dealings for years, suggesting that transfers between the two men were one way that money was being sent from the Afghanistan/Pakistan region to operatives and cells in Europe.30
KSM also gave Nawar the business phone number of Ibanez, which Nawar used to contact Ibanez via his new satellite phone. Apparently, there were issues with Ibanez, however. Morgenegg, the network’s Swiss-German logistical coordinator, called KSM saying that the “wedding” (a code-term used by al-Qa`ida for an attack) would happen soon, but that those based in Europe and Tunisia were waiting for Ibanez to “arrive” (i.e. provide the money).31 Morgenegg then ordered Walid Nawar to follow through on KSM’s orders to contact Ibanez. Walid called Ibanez on March 16, and Morgenegg then followed up with KSM, Nizar, and Nizar’s uncle Biljakim about the status of the payment. On the same day, the Pakistan-based Isa Isma‘il Muhammad sent another fax to Ibanez, reprimanding him for not yet transferring the funds.32
The reprimand appears to have worked because Ibanez finally made the transfers two days later. He deposited €9,500 into a shared Bancaja bank account with Ahmad Rukhsar, a Logrono-based owner of New Lagpal, a business in Spain that was used for hawala transfers, among other things.33 There was also another deposit of €6,000 on April 10, the day before the attack.34 Given at least one phone call took place between Nawar and Rukhsar, it is likely that Nawar was the final recipient of these funds.35 With the money and equipment in place, the attack was imminent. As with other deceptions, on the day of the attack, Nawar told his family he was traveling to Libya.36 According to French court documents, he also had a specific message for his uncle Biljakim, telling him that after he conducted the attack, Biljakim should contact KSM.37
El-Ghriba synagogue in Djerba, Tunisia, in May 2016 (Yassine Gaidi/Anadolu Agency/Getty Images)
The bomb Nawar prepared for the attack was a smaller version of the one used in the 1998 U.S. Embassy bombing in Tanzania,38 illustrating how tradecraft was replicated over time. Additionally, similar to the 1998 embassy attacks in Kenya and Tanzania, a statement of responsibility was released by Jaysh al-Islami Li-Tahrir al-Muqadisat (JITM, or the Islamic Army for the Liberation of the Holy Sites, a front name for al-Qa`ida) via fax to the Arabic newspapers Al-Hayat and Al-Quds al-Arabi on April 16, 2002.39 It stated that “Nizar Bin Muhammad Nawar Sayf al-Din al-Tunisi carried out the attack, which was commissioned by JITM,” that the “martyr” Nawar was a model for the ummah, and that Nawar carried the attack out in the name of Palestine against the Jews. Attached to the statement was a martyrdom will from Nawar dated July 5, 2000, which highlighted the plot’s long gestation period. In the will, Nawar reminds the reader to “not be fooled … I’m a martyr in the cause of God.”40 Months later, in late June 2002, al-Qa`ida’s spokesperson at the time, Sulayman Abu Ghayth, officially claimed responsibility, stating that the attack was carried out by a “man of the al-Qa`ida organization.”41
A Canadian Interlude?
Questions remain about whether Nawar traveled to Canada as part of the planning for the attack. The details that came forth in jihadi primary sources and the court cases in France and Spain would suggest otherwise, but following the Djerba bombing, his family made a number of claims about Nawar’s whereabouts between 1999 and 2002. It should be remembered that Nawar’s brother and uncle took part in the attack planning and would eventually be arrested for providing material support for the attack. Therefore, it is plausible that some family members were attempting to cover up what they knew by spinning an alternative history or only repeating what Nawar told them.
The first claim was that Nawar traveled to South Korea in early 1999 to work at a restaurant and returned nine months later after not making any money.42 This time frame tracks with Nawar’s first trip to Afghanistan, suggesting talk of work in South Korea was a deception Nawar concocted to conceal his ulterior motives. The second claim by family members was that Nawar traveled to Montreal shortly after his late 1999 return to Tunisia in order to study at a travel agency.43 While the alleged study trip seems far-fetched, it is possible that Nawar traveled to Montreal for other reasons—specifically, guidance or support in preparation for the attack. Yet, according to Canadian travel records, there is no evidence that Nawar traveled to the country.44 That said, Canadian officials believe that many of the Tunisians who entered the country in 1999 and 2000 used fraudulent student visas, which they were unable to monitor.45
It is possible Nawar traveled to Montreal by exploiting connections in his network, though definitive proof remains elusive. One person he may have come into contact with was Ra‘uf Hanashi, a Tunisian who acquired Canadian citizenship in 1986. Hanashi first became involved in the jihadi milieu during the Bosnian war when he fought for Katibat al-Mujahidin.46 After that, he was a key part of the jihadi recruitment network in Montreal in the mid- to late 1990s that connected recruits to the Khalden safe houses in Pakistan and Afghanistan run by Zayn al-‘Abidin Muhammad Husayn, better known as Abu Zubaydah. (The Khalden safe house network should not be confused with the Khalden camp in Afghanistan’s Paktia province.) After Hanashi returned from training at Khalden in Paktia in the summer of 1997, he became the mu‘azin (the one who leads the call to prayer) and later imam at al-Sunnah al-Nabawiyyah Mosque in Montreal.47 The mosque was established in 1993 and was frequented by many Afghan and Bosnian jihad returnees.48 There is even evidence to suggest that videos promoting jihad and committing martyrdom were distributed at the mosque at that time.49
It was through Hanashi’s stories of jihad that the Algerian Ahmad Ressam, who illegally immigrated to Montreal in 1994, was first inspired to go to Afghanistan to train.50 Hanashi facilitated Ressam’s contact with Abu Zubaydah and the Khalden network in Afghanistan, where he (Ressam) allegedly joined a 60-man group made up of mostly Tunisian veterans of the Bosnian jihad.51 One of the earlier (and largest) plots that the Khalden network’s Abu Zubaydah planned was the thwarted 2000 millennium plot that sought to bomb four tourist sites in Jordan, Los Angeles International Airport (LAX), the USS The Sullivans, and the hijack of Indian Airlines Flight 814.52 Ressam played a role in planning the LAX component of the plot.53 After training at the Khalden camp in Paktia from March 1998 through February 1999, Ressam traveled back to Canada and was arrested on December 14, 1999, while attempting to cross the U.S.-Canadian border in Vancouver en route to Los Angeles to conduct the attack.54 Nawar’s training at Khalden and the Tunisian connection with Abu Zubaydah is a plausible way Hanashi and Nawar could have come into contact.
Another possible contact Nawar might have exploited to reach Montreal was a Mauritanian jihadi well known to Nawar’s mentor Ganczarski,55 Muhammadu ‘Uld Slahi (Muhammad al-Muritani). Slahi trained at al-Faruq in Afghanistan in the early 1990s, fought in Bosnia, and then helped recruit al-Qa`ida operatives in Europe, including three of the 9/11 hijackers (Muhammad Atta, Marwan al-Shihi, and Ziyad Jarrah).56 He then based himself in Duisburg, Germany, where he ran an alleged import-export business. It was in Duisburg that Slahi met Ganczarski in the mid-1990s.57 In 1995, the two founded al-Taqwa Mosque.58
The reason Slahi may have played a role in helping Nawar get to Canada is around the same time that Nawar’s family claims that Nawar went to Montreal, Slahi himself moved to Montreal.59 Further, Karim Mihdi, one of the individuals Slahi recruited and who attended his mosque in Duisburg, moved to Montreal with Slahi, illustrating further the interconnectedness of these various networks.60 Relatedly, according to Tunisian Combatant Group member ‘Abd al-Bin Muhammad Bin Abis Awrji, Slahi was also a close associate of the Tunisian-Canadian cleric Hanashi and took over the pulpit of Hanashi’s mosque starting in November 26, 1999, during Ramadan while Hanashi was in Saudi Arabia.61 Awrji also claimed that Slahi helped Hanashi with Ressam’s LAX plot.62 Although the Canadian government never charged Slahi with involvement in the plot,63 it is possible that Slahi provided spiritual guidance to Ressam ahead of his arrest. Slahi left Canada on January 21, 2000, after being interrogated by Canadian authorities.64 Therefore, if Nawar did, in fact, travel to Montreal in late 1999 as his family alleged, it is possible that Slahi and Nawar met through Ganczarski.
It is clear from the above information that there is only circumstantial evidence that Nawar traveled to Montreal. But based on what is known about the case and Nawar’s prior lie about traveling to South Korea, it is most likely that instead of going to Montreal, Nawar simply traveled to Afghanistan and fabricated another aspect of his travel plans to deceive members of his family.
Evolution of International Terrorism Since Djerba
Much has changed since the Djerba attack—in particular, the creation of a global, cooperative counterterrorism architecture and advancements in communications technologies. The former has benefited the nations fighting al-Qa`ida and the Islamic State, while the latter has benefited jihadi groups. One consistent factor, however, has been that terrorism training matters. As Thomas Hegghammer has noted, those who have been involved in foreign fighting and training have been far more effective and lethal in perpetrating attacks than those who have not.65 For example, the 2015 mass casualty attacks at the Bardo Museum and Sousse beach in Tunisia were carried out by individuals who had previously trained with the Islamic State in Sabratha, Libya.66 Similarly, when comparing the multi-pronged Islamic State attacks in Paris in November 2015, which killed 130 and injured another 368,67 and the Islamic State-inspired, multi-pronged attack in San Bernardino in early December 2015 that killed 14 and injured 22, one can see the difference that foreign fighting, training, and guidance have in conducting attacks.
Another consistent factor in major international plots has been the role of a coordinator. Coordination was evident in the Djerba synagogue attack and a series of plots in 2015-2016 by the Paris-Brussels attack network. Nawar traveled back and forth between Tunisia and Afghanistan, but he also remained in close contact via satellite phone with KSM and Ganczarski until right before the attack. Similarly, Abdelhamid Abaaoud coordinated a plot by a group of operatives hiding in a safe house in Verviers, eastern Belgium. And in the Paris attacks, Abaaoud was so involved, he was even in the vicinity of the Bataclan attack and likely giving direct orders in real-time.68 Likewise, Boubaker al-Hakim, a French-Tunisian Islamic State external operations leader based in al-Raqqah who was killed in a drone strike in November 2016, helped enable the Bardo and Sousse attacks through an intermediary in Libya.69 d
There has also been consistency in target selection. Global jihadis have retained a focus on Jewish-related entities. Nawar chose to attack a Jewish synagogue in Tunisia, while more recently, Mehdi Nemmouche attacked the Jewish Museum of Belgium in Brussels.70 Part of this trend is due to the continuing resonance of the Palestinian plight within the broader Muslim world, which jihadi groups co-opt to gain legitimacy, support, and new recruits.
Another constant is the reliance on support networks in various locations to facilitate attacks. There were a number of support nodes that helped the Djerba attack materialize, spanning Afghanistan, France, Germany, Spain, Switzerland, Tunisia, and possibly Canada. Similarly, the Tunisian Islamic State supporter and Berlin attacker Anis Amri had an attack and support network that spanned France, Germany, Italy, Libya, and the Netherlands.71 Such support systems underscore the fact that gaps in information sharing and cooperation between nations still exist.
On the other hand, due to the larger tracking architecture and sharing system for worldwide counterterrorism operations, deception is more necessary than ever for the new generation of international attack plotters. Unlike Nawar, who was able to travel back and forth between Afghanistan and Tunisia, the Paris attackers used the refugee flows to return to Europe from Syria, which shielded those who were already on watch lists.72 Furthermore, plots in the Islamic State era generally entail a shorter time period between inception and execution. Recent Islamic State plots, including the Paris attacks, have seen a quicker “flash to bang” than some of al-Qa`ida’s conspiracies a generation ago. As outlined above, Nawar had begun planning the April 2002 Derjba attack after he first returned to Tunisia from Afghanistan in late 1999, a time span of almost two and a half years.
One advantage contemporary international plotters have is access to encryption technology, which has been used in many recent cases, including the attacks in Paris, Brussels, Berlin, Istanbul, and the United States.73 And yet, while the methods of communication may differ, then—as now—there has consistently been an ability for the leader of the plot to communicate whenever necessary with the individual executing the attack.
Finally, there are major differences in methodology for claiming attacks. In the case of al-Qa`ida and the Djerba attack, Nawar sent a written will and statement of responsibility to major Arabic newspapers, and Sulayman Abu Ghayth’s video claiming responsibility was played on Al-Jazeera. This is in contrast to the Islamic State, which has adherents that will pledge bay`a to the group’s leader, Abu Bakr al-Baghdadi, either through a video message, which the Islamic State then releases through its own news agency, Amaq, or through a private message, which the Islamic State then uses to claim responsibility via an Amaq graphic. In many ways, these differences reflect changes in jihadi media capabilities over the past 15 years. Previously, al-Qa`ida was reliant on the mainstream media to push out its message, whereas today, individual jihadis and jihadi groups, whether the Islamic State or al-Qa`ida, have the capability to bypass the gatekeepers, disseminate information directly through their own media systems, and therefore, exert greater control over their narrative.74
In the aftermath of the Djerba synagogue bombing, the Tunisian government was initially dismissive of any ties to terrorism, suggesting the attack was only an accident.75 A sense of denial about the threat contributed to a fundamental lack of understanding within Tunisia’s political establishment of jihadism, of how many people were involved in Tunisia, and of the plotters themselves. Part of this misunderstanding stemmed from many in the government viewing the threat as a homegrown issue rather than one with regional or even international components.76 e
Thus, Tunisia’s political leadership was surprised when in December 2006/January 2007, a Tunisian al-Qa`ida in the Islamic Maghreb front group called Jund Asad Bin al-Furat (JABF) carried out a series of attacks in the country.77 There were no other large-scale incidents until after the Tunisian uprising four years later.
As the Djerba attack illustrated, Tunisians have long been involved in international terrorism plots, attacks, and foreign fighting. This trend is likely to continue, especially as so many Tunisians have gone to train in Libya, Iraq, and Syria over the past six years. The Nizar Nawars of today are finding a melting pot of contacts and networks they can tap into, just as Nawar himself did more than 15 years ago. Given the fact that Tunisia has had one of the largest foreign fighter mobilization to Libya, Iraq, and Syria and that hundreds of Tunisian foreign fighters have returned home or to Europe,78 the world is likely to continue to see Tunisians play a significant role within the jihadi movement in the years to come. CTC
Aaron Y. Zelin is the Richard Borow Fellow at the Washington Institute for Near East Policy and a Ph.D. candidate at King’s College London where his dissertation details the history of Tunisian jihadism. Parts of this article are derived from his dissertation. He also founded Jihadology.net. Follow @azelin
[a] French and Spanish court documents on the Djerba attack obtained by the author show that Khalid Sheikh Mohammed was the mastermind behind the attack.
[b] Shadi ‘Abd Allah himself met Ganczarski in Afghanistan in early 2000. Jama`at Tawhid wa-l-Jihad was the name of the group that Abu Mus`ab al-Zarqawi led before it became a part of al-Qa`ida in October 2004 (and subsequently the Islamic State). Guido W. Steinberg, German Jihad: On the Internationalization of Islamist Terrorism (New York: Columbia University Press, 2013), pp. 44-48; French prosecution charging/indictment document on the Djerba bombings, November 8, 2006, pp. 81-83.
[c] Jiday was a Tunisian-Canadian among the 29 candidates for the 9/11 attacks and later assigned to what KSM dubbed the “second wave” of 9/11-style attacks. He even prepared a martyrdom video tape for the operation. According to Nasir al-Bahri, bin Ladin’s bodyguard at the time, in the summer of 2001 in Karachi, he (al-Bahri) stayed at the house where KSM, Muhammad Atta, Ramzi bin al-Shibah, and Jiday were also staying and remembers the latter three individuals playing a flight simulator game on a PlayStation in preparation. Sometime between the summer of 2001 and the 9/11 attack, it is believed that Jiday dropped out and returned to Canada. Jiday remains on the FBI’s Most Wanted List for further questioning. Nasser al-Bahri, Guarding Bin Laden: My Life in al-Qaeda (London: Thin Man Press, 2013), pp. 88-89.
[d] Prior to joining up with the Islamic State in Syria, al-Hakim had spent time in mid- to late 2013 (and possibly early 2014) in Libya, helping traffic weapons and train individuals for attacks in Tunisia, which were set into motion in Sousse and Monastir but ultimately failed due to the attacker’s bomb malfunctioning in Monastir and the attacker’s inability to kill anyone else in Sousse. Maria Abi-Habib, “Young Tunisians Embrace Jihad, Raise Tension at Home,” Wall Street Journal, December 17, 2013; Carlotta Gall, “Worry in Tunisia Over Youths Who Turn to Jihad,” New York Times, December 18, 2013.
[e] This was even though Tunisians had been foreign fighters since the 1980s and were, at the time of the JABF attacks, one of the highest per capita groups of foreign nationals that had become foreign fighters in Iraq between 2003-2009.
 “Blast at Tunisian synagogue kills five,” BBC, April 11, 2002.
 Most of the cases are covered in Fernando Reinares and Bruce Hoffman’s edited volume The Evolution of the Global Terrorist Threat: From 9/11 to Osama bin Laden’s Death (2014).
 For more on this theory in the context of terrorism, see Jonathan Kennedy and Gabriel Weimann, “The Strength of Weak Terrorist Ties,” Terrorism and Political Violence 23:2 (2011).
 Marc Sageman, Understanding Terror Networks (Philadelphia: University of Pennsylvania Press, 2004), p. 189.
 Chris Hedges, “Tunisian Killed in Synagogue Blast Was Unlikely Convert to Militancy,” New York Times, June 9, 2002.
 Harun, The War Against Islam: Fadil Harun’s Story, pp. 1,092, 1,335; David Malet, Foreign Fighters: Transnational Identity in Civil Conflicts (Oxford: Oxford University Press, 2013), p. 191.
 “Hassan Mohammed Ali Bin Attash,” The Guantánamo Docket, New York Times.
 French prosecution charging/indictment document on the Djerba bombings (hereafter referred to as French prosecution of the Djerba bombings), November 8, 2006, p. 76.
 Bruce Crumley, “French Terror Conviction: Lesson for U.S?” Time, February 6, 2009.
 Piotr Smolar, “De la Haute-Silésie à Médine, l’itinéraire d’un ‘haut responsable d’Al-Qaida’ arrêté en France En savoir plus sur,” Le Monde, July 12, 2005.
 Guido W. Steinberg, German Jihad: On the Internationalization of Islamist Terrorism (New York: Columbia University Press, 2013), pp. 44-48; French prosecution of the Djerba bombings, pp. 81-83.
 French prosecution of the Djerba bombings, pp. 77, 91; “German Terror Link: Djerba Bombing Trial Begins in Paris,” Der Spiegel, January 5, 2009.
 French prosecution of the Djerba bombings, pp. 100-101.
 “German Terror Link: Djerba Bombing Trial Begins in Paris.”
 French prosecution of the Djerba bombings, p. 64.
 Audiencia Nacional, Juzgado Central de Instrucción no. 2, Senencia 20/2006, pp. 11-12.
 French prosecution of the Djerba bombings, p. 64.
 Ibid., p. 68.
 “Deadly attack keeps world on alert,” Guardian, September 3, 2002.
 David S. Cloud and Ian Johnson, “Hunt for al Qaeda Misses The Likes of Nizar Nawar,” Wall Street Journal, August 20, 2002; Anneli Botha, “Terrorism in Maghreb: The Transnationalisation of Domestic Terrorism,” p. 118.
 “Le kamikaze tunisien de Djerba avait bénéficié de l’aide de sa famille en France en savoir plus sur,” Le Monde, February 11, 2003.
 French prosecution of the Djerba bombings, p. 115.
 Audiencia Nacional, Juzgado Central de Instrucción no. 2, Senencia 20/2006, p. 5.
 Ibid., p. 12.
 Ibid., p 11.
 Ibid., pp. 13-14.
 Ibid., p. 15.
 French prosecution of the Djerba bombings, p. 115.
 Ibid.; Cloud and Johnson.
 Ahmad Muwafiq al-Zaydan, “Tanzim qarib min ‘al-Qa’idah’ yutabna ‘amaliyyat kanis jerbah,” Al-Hayat, April 16, 2002.
 “Tanzim al-qa‘ida yuwa‘id al-amrikiyyin,” BBC Arabic, June 23, 2012.
 Colin Nickerson, “Canada gets reputation as a haven for fugitives,” Boston Globe, December 21, 2000.
 Mitchell D. Silber, The Al Qaeda Factor: Plots Against the West (Philadelphia: University of Pennsylvania Press, 2012), p. 60.
 Evan Kohlmann, Al-Qaida’s Jihad in Europe: The Afghan-Bosnian Network (Oxford: Berg, 2004), pp. 204-205.
 Silber, p. 58.
 Kohlmann, pp. 204-205.
 Ibid., p. 206; Brynjar Lia, Architect of Global Jihad: The Life of al-Qaida Strategist Abu Mus’ab al-Suri (New York: Columbia University Press, 2008), p. 249.
 Mustafa Hamid and Leah Farrall, The Arabs at War in Afghanistan (London: Hurst and Company, 2015), pp. 257-261.
 Silber, pp. 57-67.
 United States of America v. Ahmed Ressam, Criminal Complaint, United States District Court, Western District of Washington at Seattle, December 1999; United States of America v. Ahmed Ressam, Appeal, United States Court of Appeals for the Ninth Circuit, November 2, 2009.
 Yves Bordenave, “Trois hommes jugés à Paris pour l’attentat de Djerba En savoir plus sur,” Le Monde, January 5, 2009; French prosecution of the Djerba bombings, p. 76.
 “Mohamedou Ould Slahi [Muhammad al-Muritani],” The Guantánamo Docket, New York Times.
 Ibid; Britta Sandberg and Holger Stark, “German’s Terror Trial to Close: Verdict Expected in Djerba Bombing Case,” Der Spiegel, February 5, 2009.
 “Mohamedou Ould Slahi [Muhammad al-Muritani],” The Guantánamo Docket, New York Times.
 “Abdul Bin Mohammed Bin Abess Ourgy,” The Guantánamo Docket, New York Times; Christopher J. Chipello, “Officials Investigate Possible Link To Canada in Synagogue Explosion,” Wall Street Journal, May 2, 2002; “Criminal Intelligence Summary,” Department of the Army: United States Army Criminal Investigation Command, May 3, 2002.
 “Abdul Bin Mohammed Bin Abess Ourgy.”
 Mohamedou Ould Slahi, Guantánamo Diary (New York: Little Brown Company, 2015).
 “Mohamedou Ould Slahi [Muhammad al-Muritani],” The Guantánamo Docket, New York Times.
 Thomas Hegghammer, “The Rise of Muslim Foreign Fighters: Islam and the Globalization of Jihad,” International Security, 35:3 (2011).
 Chris Stephen, “Tunisia gunman trained in Libya at same time as Bardo museum attackers,” Guardian, June 30, 2015.
 Jean-Charles Brisard, “The Paris Attacks and the Evolving Islamic State Threat to France,” CTC Sentinel 8:11 (2015); Pieter Van Ostaeyen, “Belgian Radical Networks and the Road to the Brussels Attacks,” CTC Sentinel 9:6 (2016); Jean-Charles Brisard and Kévin Jackson, “The Islamic State’s External Operations and the French-Belgian Nexus,” CTC Sentinel 9:11 (2016).
 Paul Cruickshank, “US drone strike kills French ISIS operative, Pentagon says,” CNN, December 10, 2016.
 Van Ostaeyen.
 Georg Heil, “The Berlin Attack and the ‘Abu Walaa’ Islamic State Recruitment Network,” CTC Sentinel 10:2 (2017).
 Brisard and Jackson.
 Ahmet S. Yayla, “The Reina Nightclub Attack and the Islamic State Threat to Turkey,” CTC Sentinel 10:3 (2017); Seamus Hughes and Alexander Meleagrou-Hitchens, “The Threat to the United States from the Islamic State’s Virtual Entrepreneurs,” CTC Sentinel 10:3 (2017).
 Jason Burke, “The Age of Selfie Jihad: How Evolving Media Technology is Changing Terrorism,” CTC Sentinel 9:11 (2016).
 “Deadly attack keeps world on alert.”
 Author interview, former senior governmental minister in Le Kram, Tunisia, February 2013.
 For more on the case, see Alison Pargeter, “The Suleiman affair – Radicalism and jihad in Tunisia,” Jane’s Intelligence Review 23:1 (2011).
 “Tunisians protest against the return of jihadis like Amri,” Associated Press, December 24, 2016.