# Herat, Afghanistan

Type: location

Source: Cyber Intelligence Brief — https://getcyberbrief.com/entity/herat-afghanistan
Canonical HTML page: https://getcyberbrief.com/entity/herat-afghanistan

## Timeline

- **2026-03**: Fifteen sentenced to life in Russia — A Russian military court sentences the four attackers and eleven facilitators to life imprisonment, marking the legal conclusion of the Crocus City Hall case.
- **2025**: UNSC reports highlight ISKP cyber capabilities — United Nations Security Council monitoring team reports, along with Pakistani domestic media, detail ISKP’s sophisticated use of encrypted apps, the dark web, and cryptocurrencies, warning of a new era of terrorism.
- **2024-03-22**: Crocus City Hall Massacre — 149 people are killed and 600 injured in Moscow by four Tajik ISKP followers. Planning is conducted entirely via encrypted channels from Herat, Afghanistan, with no physical contact between planners and attackers.
- **2024-01**: Kerman Attack in Iran — ISKP carries out a mass-casualty attack in Kerman, Iran, using a remotely planned, digitally coordinated operational template later replicated in Moscow.
- **2024**: Pakistan-led international operations start — Pakistan, in coordination with Iran, Russia, and other international partners, begins intelligence-based operations targeting high-value ISKP operatives from the Pakistan-Afghanistan border regions.

## Recent coverage (2 stories)

### 149 Dead, 600 Injured: ISKP's Digital Planning Exposes Cyber‑Terror Gap
2026-07-16 00:46:02 · Sentiment: Negative · Impact: 8/10 · Sources: 9

The Crocus City Hall massacre and a Kerman bombing were orchestrated entirely online via encrypted apps, dark web, and crypto. This marks a paradigm shift in terrorist operations, demanding a fusion of CT and cybersecurity defenses that is currently absent.
Full story: https://getcyberbrief.com/story/iskp-cyber-terror-gap

### ISKP’s remote-controlled massacre: 149 killed in attack planned entirely via encrypted channels
2026-07-15 20:17:26 · Sentiment: Neutral · Impact: 8/10 · Sources: 2

The Moscow concert hall attack signals a new era where terrorist operations are planned and executed through encrypted apps, dark web, and cryptocurrencies. Cybersecurity professionals must adapt to this evolving threat landscape.
Full story: https://getcyberbrief.com/story/iskp-digital-domain-cyber-terrorism

---
This page is a machine-readable summary. Sentiment measures the directional read of each development for this entity, not the tone of the reporting; impact weights consequence, not syndication reach. See https://getcyberbrief.com/guides/methodology for the full editorial methodology.