Residual Threats from Tunisian Jihadists

Residual Threats from Tunisian Jihadists

Executive Summary:

• In January, Tunisian security forces conducted two counterterrorism operations in Kasserine governorate, disrupting localized networks—including an Islamic State (IS)-affiliated cell—that use the western mountains near Algeria as refuges.
• Jihadist networks in Tunisia remain fragmented and localized, reflecting a residual militancy and featuring small cells lacking the capacity for coordinated large-scale attacks or national-level destabilization.
• Tunisia’s deeply institutionalized security architecture maintains operational superiority through enhanced surveillance and preemptive sweeps. This strategy prevents militant expansion, ensuring critical infrastructure remains a theoretical vulnerability rather than an active battlefield.

In January, Tunisian security forces conducted two counterterrorism operations in Kasserine governorate, underscoring the continued presence of jihadist networks in western Tunisia. In the first operation, on January 3, security units foiled a planned attack near the weekly market in Fériana, killing a suspected militant identified as Seddik El Abidi and arresting an accomplice (La Presse, January 3). Abidi, born in 1997 in El Kef governorate, was described by security sources as a long-standing member of the Islamic State (IS)-affiliated Jund al-Khilafa battalion, which is active in the mountainous areas of Kasserine and Sidi Bouzid (Espace Manager, January 3). A security officer later died from injuries sustained during the operation, and authorities subsequently detained ten additional individuals linked to the foiled plot (Le Quotidien (Tunis), January 4).

Around three weeks later, security forces announced the killing of four members of what was described as a “terrorist cell” near Majel Bel Abbes, also in Kasserine (Youm7; Nabd, January 23). This marked the second such operation within twenty days. According to a regional source, moreover, there was a connection between the two operations (Al-Ain News, January 23).

These incidents reflect the enduring but geographically confined nature of jihadist militancy in Tunisia’s western mountainous belt, particularly around the Selloum and Meghila ranges. Since 2011, small armed factions linked to al-Qaeda in the Islamic Maghreb (AQIM)—namely its local offshoot of Katibat Uqba Ibn Nafi—and IS have used these areas near the Algerian border as operational refuges. Kasserine has witnessed some of Tunisia’s deadliest attacks, including the beheading of eight soldiers in July 2013 and the killing of fourteen soldiers in August 2013. The operational intensity of militant activity, however, had significantly declined since the mid-2010s, until these most recent two episodes.

Analysis of the January Operations

The January counterterrorism operations illustrate three key dynamics. First, jihadist networks in Tunisia remain fragmented and localized. The killing of Abidi—reportedly one of the longest-serving militants in the western mountain networks—suggests the persistence of small, aging cells rather than the regeneration of broader organizational structures. The absence of coordinated, large-scale attacks over the past decade indicates that militant capacity remains limited. Security forces appear capable of detecting and disrupting larger plots in the early stages.

Second, the operational geography of militancy remains structurally constrained. Kasserine and adjacent governorates, such as Le Kef and Jendouba, continue to serve as sanctuaries due to their terrain and proximity to Algeria. These zones, however, function more as survival spaces for diminished cells than as platforms for national-level destabilization. Regular counterterrorism sweeps along the Algerian border have prevented militant expansion.

Against this backdrop, activities in the capital, Tunis, and the major urban centers of the so-called Tunisian Sahil have remained extremely limited. [1] This specific geography might still retain strategic relevance, however, as it hosts critical parts of the TransMed gas pipeline linking Algeria to Italy via Tunisia, including the compression station in Feriana (Newsline Magazine, July 11, 2024). While there is no evidence that the January plots specifically targeted energy installations, the location was not insignificant. Past precedents in the region, such as the 2013 In Amenas attack in Algeria and IS’s “economic jihad” campaign against oil infrastructure in Libya between 2014 and 2016, demonstrate that hydrocarbon facilities represent symbolically and economically attractive targets (see Terrorism Monitor, January 25, 2013; May 27, 2016). Nevertheless, in the Tunisian case, there are no indications at present of a structured campaign aimed at energy infrastructure. The current threat profile remains opportunistic and localized rather than strategic and systemic.

Third, Tunisia’s counterterrorism posture remains deeply institutionalized, with the month-by-month renewal of the nationwide state of emergency. First introduced in 2015 following a wave of mass-casualty terrorist attacks—including the assault on the Bardo National Museum, the beach resort in Sousse, and the bombing of a presidential guard bus in Tunis—the emergency framework has been continuously renewed for more than a decade. The state of emergency has drawn sustained criticism from civil liberties advocates and has arguably been instrumentalized, particularly after President Kais Saied’s July 2021 power consolidation. It has, however, entrenched a preventive and somewhat efficient security architecture.

Enhanced surveillance, expanded detention powers, tighter border monitoring, and regular preemptive sweeps in mountainous areas have contributed to constraining militant mobility. Following the June 27, 2019, double suicide attack in Tunis, terrorism-related activity sharply declined (see Militant Leadership Monitor, July 31, 2019). The most significant recent incident occurred in May 2023, when an attack on the Ghriba synagogue in Djerba caused multiple casualties (Le Soir D’Algérie, May 10, 2023). Since then, however, no sustained campaign of violence has reemerged, reinforcing the assessment that current militant activity remains residual rather than systemic.

Conclusion

The January counterterrorism incidents do not signal a structural resurgence of jihadist insurgency. Rather, they reflect what might be described as “residual militancy,” or the continued existence of small armed clusters operating in historically embedded environments. The attritional pattern—isolated plots, targeted security raids, limited manpower—suggests containment rather than escalation. The operational tempo remains low, the geographic scope is narrow, and the organizational depth is shallow. Overall, Tunisia’s jihadist threat profile appears persistent but marginal and non-systemic, operationally constrained, and far from its peak in terms of recruitment capacity, both in quantity and quality. The mountainous west continues to host isolated militants, and critical infrastructure remains a theoretical vulnerability rather than an active battlefield, with security institutions that maintain an obvious operational superiority.

Notes:

[1] This term refers to the coast, usually considered to include Sousse, Monastir, and Mahdia, from which most of the country’s political and ruling elites come.