ISIS pursues a bloody return

While ISIS is organizing itself through cells in northern and eastern Syria, the HTS administration in Damascus has opened the door to ISIS terrorist attacks.

Developments in North and East Syria between December 1, 2024, and May 1, 2025, show that ISIS continues to maintain its presence through cell structures even after its organizational collapse and is attempting to regain power in some areas. According to data from the SDF (Syrian Democratic Forces) Press Center, the Internal Security Forces of North and East Syria, and the Syrian Observatory for Human Rights (SOHR), the attacks that took place during the mentioned period of time reveal that ISIS continues to pose a serious threat, not only to regional but also to international security.

According to official data from the Internal Security Forces of North and East Syria, a total of 33 people were killed and 12 wounded in 59 attacks carried out by ISIS. In operations against ISIS sleeper cells, 100 ISIS members were arrested and seven cells were completely neutralized. Of the 59 attacks carried out by ISIS, 32 were directed against the Internal Security Forces and SDF positions, resulting in the martyrdom of 14 security personnel and the injury of 5 others.

The results of the operations carried out by the SDF against ISIS cells between December 8, 2024, and May 4, 2025, and the attacks carried out by ISIS are as follows: A total of 46 ISIS members were arrested and 2 others were killed in 25 operations. During this period, ISIS carried out a total of 13 attacks, resulting in the martyrdom of 12 SDF fighters and the injury of 6 SDF fighters.

According to SOHR data, the total number of casualties in the five-month period ranged between 100 and 150. Of these, between 20 and 30 were civilians, while the rest were fighters. In addition, between 50 and 70 ISIS members were killed.

Most attacks in Deir ez-Zor

Deir ez-Zor: ISIS local cells were effective in rural areas such as El-Busayra, Diban, and El-Tayana with armed ambushes and bomb attacks.

Cizîrê (Markada, Til Hemîs, Dêşîşe): Areas used by cells as hiding and infiltration points.

Raqqa: Bomb attacks and ambushes, particularly in markets, are notable.

Hesekê: Assassinations targeting local officials and security forces are indicative of targeted attacks by ISIS.

Hol Camp: Attempts to escape from the camp and provocative activities by ISIS members inside reveal that the region remains fragile.

ISIS gains new ground

The takeover of certain areas around Damascus by Hayat Tahrir al-Sham (HTS) in early 2025 has led to renewed activity not only by Al-Qaeda-affiliated groups but also by organizations such as ISIS. The group's increased display of flags and emblems in the capital Damascus, as well as threatening graffiti on public buildings, indicates that it is attempting to reorganize not only in eastern Syria but also in the west of the country. The fact that ISIS-emblazoned clothing was found on the perpetrators of massacres along the Syrian coast, that ISIS-linked names have come to the fore in attacks against Druze, and that a large number of former ISIS members have joined certain groups within the Turkey-backed Syrian National Army (SNA) structure, shows that these activities are no longer limited to rural attacks.

Turkey’s role and support lines

Many regional analyses and local sources indicate that ISIS elements have been returned to the field through Turkey's support for the mercenaries it commands in Syria (especially SNA). Leaked information about the SNA's structure indicates that many ISIS members have changed their names and are active in these groups. This fact is evidence that Turkey's cross-border attacks are not aimed at combating ISIS, but rather at creating dynamics that indirectly revive it.

The SDF Command and the International Coalition

The latest statements issued by the SDF General Command included the following notable remarks: “ISIS attacks are no longer limited to direct combat but also involve psychological and structural threats. Any security breach at Hol Camp could pave the way for large-scale infiltrations and mass actions in the future. Our cooperation with the Coalition forces is of critical importance.”

The International Coalition, particularly the US and France, emphasizes that ISIS has entered a process of “tactical reorganization” and that this process is being carried out through both the Hol Camp and the energy infrastructure east of the Euphrates. The US Central Command (CENTCOM) stated in January 2025: “Military solutions alone are not sufficient to permanently eliminate ISIS; socio-political solutions are also necessary. Long-term stability is not possible without eliminating radical elements in the camps.”

ISIS’ cell tactics and new targets

Instead of large-scale attacks in open areas, ISIS appears to be operating through secret cells, using methods such as roadside improvised explosive devices, assassinations, ambushes, sabotage of oil tankers, and sudden raids on security checkpoints. Local officials, social service centers, and energy infrastructure are also among the targets of these attacks.

Warnings and security vulnerabilities

If international indifference continues, especially in areas such as Hol Camp, it is inevitable that ISIS will consider these areas as logistics and human resource centers. In addition, Turkey's increased military presence in Syria and its warm relations with HTS are creating new transit routes and safe zones for ISIS. SDF sources report that escape attempts from the camps have increased in recent months and that security walls are being breached both from within and outside. If the International Coalition and the UN do not take more serious steps to address this situation, it is possible that ISIS could re-emerge with organized attacks by the end of 2025.

ISIS is not over; it has turned into a network of cells

Although ISIS appears to be far from being a structure with geographical domination goals today, it has turned into a network of cells operating with a geographyless jihadist ideology. This makes it more dangerous and difficult to predict. The presence of ISIS members hiding within groups supported by Turkey is a significant indicator of its reorganization. If the international community continues to view this threat as merely a local issue, ISIS could once again lead to a widespread catastrophe.