Weekly Analyst Review

28 October 2026

Bottom Line Up Front

Bloodshed in Karak: A Christian Funeral, Three Extremists and the Shadow of Islamic State

Nearly a decade after Islamic State militants struck Karak, a deadly attack on Christian mourners has renewed questions about the group's enduring influence in Jordan.

On 23 October 2026, armed assailants opened fire on mourners attending a funeral at a Greek Orthodox church in Karak Governorate, southern Jordan, killing nine people and wounding 40 others. The attackers arrived in a pickup truck before opening fire on civilians gathered inside and around the church. Witnesses described sustained gunfire and scenes of panic as approximately 150 to 200 people attended the funeral.

The attack immediately raised concerns over a possible Islamic State (IS) connection, given the group's longstanding hostility towards Jordan's monarchy, its history of deadly operations in the country and its repeated propaganda threats against the kingdom. TRAC also identified chatter concerning an alleged pledge of allegiance by the attackers.

Three Suspects Arrested — But Questions Remain

On 26 October, Jordan's Public Security Directorate (PSD) announced the arrest of three suspects linked to the massacre. Security forces located the men hiding in an abandoned house, where they opened fire and resisted arrest. All three were wounded during the confrontation and subsequently detained, while authorities recovered multiple weapons and a substantial quantity of ammunition. Of particular significance are the PSD's preliminary findings: the three suspects belonged to the same family, held extremist views and acted independently, with no identified links to other terrorist cells. Authorities also described the decision to attack the funeral as spontaneous rather than premeditated.

Of course, Jordan has an interest in playing down any suspected IS involvement. However, for TRAC, the absence of an identified operational connection does not exclude ideological inspiration or informal contact with extremist networks. IS has long encouraged supporters to conduct attacks independently, without requiring direct instructions or formal membership. TRAC therefore continues to examine the possibility of IS-inspired or IS-linked involvement, while recognising that neither organisational affiliation nor operational coordination has been established.

Why Jordan? Islamic State's Longstanding Enemy

Jordan has occupied a prominent place in IS propaganda for more than a decade. The group has repeatedly portrayed the Jordanian monarchy as an illegitimate, apostate government aligned with Western and Israeli interests, accusing it of obstructing jihadist operations and suppressing efforts to confront Israel. TRAC has documented repeated messaging from unofficial IS-aligned outlets, including al-Adiyat and Halummu Media, reinforcing these narratives. Such propaganda frames Jordan not merely as a political adversary but as a legitimate target for violence.

The group's hostility towards Jordan is neither new nor confined to online rhetoric. In February 2015, IS released one of its most notorious propaganda videos, showing the immolation of captured Jordanian pilot Muath al-Kasasbeh. The execution became a defining example of the group's brutality and its deliberate targeting of the Jordanian state. In the years that followed, IS released multiple additional videos threatening the kingdom, including The Tyrant of Jordan Pays the Price in 2016, Humankind in 2017 and The Lions of Jordan in 2018. These publications demonstrate Jordan's persistence as a propaganda target, although they do not independently establish a connection to the October 2026 attack.

Why Karak Matters: A City Already Marked by IS Violence

The location of the latest massacre is especially significant. On 18 December 2016, IS militants carried out a series of shootings targeting Jordanian security forces and civilians in Karak, culminating in an armed confrontation at the historic Karak Castle. The attack killed ten people, including security personnel, civilians and a Canadian tourist. The operation demonstrated IS's ability to carry out a deadly assault deep inside Jordan, beyond the country's border regions and established security flashpoints.

Nearly ten years later, Karak has once again become the scene of mass-casualty violence. The latest attack's targeting of Christian mourners introduces an additional sectarian dimension, consistent with IS's longstanding hostility towards Christian communities. However, the victims' religious identity and the geographical overlap with the 2016 attack are indicators of possible ideological alignment, not proof that the same organisation was responsible.

TRAC Assessment: The Threat Beyond Organised Cells

The Karak massacre raises renewed concerns over the potential for extremist violence in Jordan, particularly attacks conducted by small groups of radicalised individuals operating outside established organisational structures. The family relationship between the suspects, their extremist beliefs and the authorities' finding that they acted independently are compatible with a locally organised attack. They do not, however, resolve whether the perpetrators were influenced by IS propaganda, maintained informal extremist contacts or acted for reasons unrelated to the group.

The central question is therefore not only whether IS directed the attack, but whether its ideology helped motivate it. Jordan's prominence in IS propaganda, the group's documented history of attacks in Karak and the deliberate targeting of Christian mourners make this a real possibility.

Other Developments

Nearly 1,000 Schools, No Bombs: Europe Hit by Wave of Coordinated Terror Hoaxes

Hundreds of schools across Europe were targeted by bomb threats in a matter of days, raising concerns over a potentially coordinated campaign of mass disruption.

On 19 October 2026, approximately 300 schools in Northern Ireland received near-simultaneous bomb threats via email, triggering evacuations, temporary closures and emergency security responses. But Northern Ireland was far from alone. Similar threats targeted around 300 schools in Scotland, more than 150 in the Republic of Ireland, over 100 in Serbia, and between 50 and 100 in Italy, alongside reports of threats affecting more than 70 schools in Hungary.

In total, more than 900 schools across six European countries were targeted, highlighting the extraordinary reach of the campaign. Despite the alarming messages, authorities found no explosives at the locations inspected, and the threats were widely assessed as hoaxes.

Islamist Threats — Or Deliberate Misdirection?

The messages employed explicitly Islamist language, including references to Sharia law and the phrase “Allahu Akbar”, seemingly designed to evoke the threat of jihadist terrorism. In Italy, more than 50 schools received emails titled “Death is near”, claiming that ammonium nitrate-based explosive devices had been planted and warning that further attacks would follow. The messages also appeared to impersonate the Saudi Ministry of Education.

TRAC's assessment is that the use of Islamist terminology was intended to misdirect investigators, heighten public fear or inflame existing religious and political tensions. A false-flag operation designed to provoke anti-Muslim sentiment. It should be noted that many of the targeted schools were located in areas densely populated by immigrants.

Mass Disruption Without a Single Explosion

Of particular significance is the coordination and scale of the threats. Their similar wording and near-simultaneous distribution across multiple countries suggest a potentially shared origin or coordinated distribution effort, although a common perpetrator has not been confirmed. The consequences were nevertheless immediate: schools evacuated, classes disrupted, and police, emergency responders and specialist search teams mobilised across multiple jurisdictions.

The campaign illustrates how anonymous, potentially automated threats can generate widespread disruption without physical violence. Whether intended as ideological provocation, deliberate misdirection or mass harassment, the incidents demonstrate how perpetrators can exploit the threat of terrorism itself to strain security resources and unsettle communities.

The Ku Klux Klan Goes Virtual: White Hoods, Digital Avatars and VRChat Ceremonies

The KKK has found a new gathering place: virtual reality, complete with digital robes, ceremonial oaths and segregated social spaces.

On 24 October 2026, the Southern State Knights (SSK), a Ku Klux Klan-affiliated group, hosted a virtual “naturalisation” ceremony on VRChat, complete with hooded avatars, KKK-style insignia and an apparent oath-taking ritual. The gathering involved the conferring of ranks and titles, alongside discussions of upcoming organisational changes and private objectives.

Images from the event depict avatars dressed in elaborate purple, white and green KKK-style robes gathered around an American flag-draped table, with a chalice, documents and an illuminated cross completing the scene. One avatar, dressed in a hoodie and beanie, appears to raise their hand in an oath-taking gesture before the assembled figures. The group also hosted a segregated virtual gathering at The Knights Sacred Church, an SSK-associated space described as hosting Sunday sermons, racially segregated social events and games intended for white youth. There appear to be at least six different avatars in the meeting. Note that customised VR gatherings are subscription-based, and the minimum cost without customisation is around $10 USD per month. Although you can participate in VRChat without a headset, a complete setup costs between $ 500 and $2,500 USD. So participation in the SSK meeting might offer anonymity, but it comes at a cost and carries a risk of being detected through purchases.

TRAC notes that this was not an isolated event. The SSK has previously organised gatherings on VRChat, indicating that the platform has become a recurring meeting space for its supporters. While the spectacle of hooded cartoon avatars conducting KKK ceremonies may appear absurd, its significance should not be dismissed. Virtual environments allow extremist groups to reproduce their rituals, reinforce group identity and socialise with supporters without the same exposure associated with physical gatherings.

The robes may be digital, but the ideology behind them is not.

Ansaru Militants Assassinate Sheikh Yahya Masusuka in Katsina State, Nigeria

Islamic State Supporter Shot Dead After Targeting Gendarmerie Officer in Knife Attack Outside the Israeli Embassy, Belgrade, Serbia

Severed Human Head Left in Cooler Alongside Narcomanta at Mazatlán Municipal Palace, Sinaloa, Mexico

CLICK HERE FOR PAST WEEKLY BRIEFINGS