UNCLASSIFIED // FOR OFFICIAL USE ONLY

2 February 2021 Bulletin #: 21-02-21

CENTRAL FLORIDA INTELLIGENCE EXCHANGE (CFIX)

Brevard ⋆ Indian River ⋆ Lake ⋆ Martin ⋆ Orange ⋆ Osceola ⋆ Seminole ⋆ St Lucie ⋆ Volusia

(U//FOUO) Self-Radicalized Singaporean Juvenile Planned to Target Two Mosques in a Christchurch-

Style Attack

(U) Scope

(U//FOUO) This bulletin was created by the Central Florida Intelligence Exchange (CFIX) to provide situational
awareness on a juvenile arrested in Singapore who was planning a Christchurch-style attack targeting two
mosques and the mobilization indicators that were potentially observable in his activities. This information is
intended to support local, state and federal government agencies along with the private sector in developing /
prioritizing protective and support measures relating to existing or emerging threats to homeland security.

(U) First Amendment Acknowledgement

(U) The CFIX recognizes that Americans have constitutionally protected rights to assemble, speak, and petition
the government. The CFIX safeguards these rights and reports on only those activities where the potential use
of rhetoric and/or propaganda could be used to incite violent or criminal acts. Additionally, potential criminality
exhibited by certain members of a group does not negate the constitutional rights of the group itself or its law-
abiding participants to exercise their individual liberties under the First Amendment to the U.S. Constitution.

(U) Overview1,2,

(U) On 27 January 2021, the Singapore’s Ministry of Home Affairs

(MHA) released a statement announcing the detainment of a 16-
year-old boy under the Internal Security Act (ISA). The juvenile was
detained for making detailed plans and preparations to conduct a
machete attack targeting Muslims at two mosques on the 15
March 2021 anniversary of the Christchurch, New Zealand mosque
shootings. The juvenile was a secondary school student who was
described as a “Protestant Christian of Indian ethnicity” and is the
first detainee to be inspired by far-right extremist ideologies in
Singapore. He is also the youngest individual detained under the (U) Source: Singapore Ministry of Home Affairs
ISA for terrorist-related activities. The MHA advised that the juvenile appeared to be self-radicalized and drew
inspiration from violent extremist content he viewed online. Specifically, he drew inspiration from Brenton
Tarrant, the perpetrator of the 15 March 2019 attacks on two mosques in Christchurch, New Zealand, after

HANDLING NOTICE: This information is the property of the CFIX and may be distributed to federal, state, local, tribal, and territorial
counterterrorism and law enforcement officials and private sector security partners. This document contains sensitive information FOR
OFFICIAL USE ONLY that cannot be released to the public, the media, or other personnel who do not have a valid "need-to-know"
without prior CFIX approval.
UNCLASSIFIED // FOR OFFICIAL USE ONLY
 UNCLASSIFIED // FOR OFFICIAL USE ONLY
CFIX INTELLIGENCE BULLETIN

viewing a livestream of Tarrant’s attack and reading his manifesto. During the investigation, the juvenile
admitted that he saw only two outcomes to his planned attacks, that he would be arrested before carrying out
the attacks, or killed during the execution of his attacks.

 (U//FOUO) On 15 March 2019, Brenton Tarrant conducted mass-shootings on two mosques in

Christchurch, New Zealand during Friday prayers resulting in 51 deaths and approximately 50 injured.
During the first attack, Tarrant was livestreaming on his Facebook account. Prior to executing the attack,
Tarrant had posted on social media his intent to “attack the invaders” along with a link to the livestream
and several other links to his 74-page manifesto “The Great Replacement.” In the days following the
Christchurch attacks, White Racially Motivated Violent Extremists (WRMVEs) engaged in several online
discussions where they describe Tarrant’s attack as a “perfect model” that should be replicated in other
locations, with mention of Europe and the United States. Tarrant has since been declared a “Saint” by
WRMVEs and is referenced in propaganda regularly.3

(U) Based on media reports, it appears that the juvenile began his radicalization process in late 2019 after
viewing Islamic State of Iraq and ash-Sham (ISIS) propaganda videos, which resulted in him holding the mistaken
belief that ISIS represented Islam. He appears to have become operational in October 2020 after a terror-related
stabbing attack against Christians at the Notre-Dame Basilica in Nice, France. At this time, the MHA investigation
indicates that the juvenile acted alone and doesn’t appear to have involved others. Additionally, immediate
family and those in his social circle were unaware of his attack plans or anti-Muslim beliefs.

(U) Tactics, Techniques and Procedures (TTPs) 4,5,6,7

(U//FOUO) Indicators of an individual or group mobilizing to carry out acts of violence may be compared to the
indicators provided by the National Counterterrorism Center’s (NCTC) Homegrown Violent Extremist (HVE)
Mobilization Indicator Handbook. Although this handbook is specific to HVEs, the content can also be applied
to domestic violent extremists (DVEs) and their physical and online activities.8 Based on reporting from several
media sources, the following are examples of NCTC Mobilization Indicators observable in the Singaporean
juvenile’s physical and online activities.

Mobilization Indicator Diagnosticity

The extent to which the behaviors demonstrates mobilization to violence
Group A Group B Group C
Highly diagnostic Moderately diagnostic Minimally diagnostic
on their own on their one on their own

(U) NCTC Indicators: Seeking religious or political justification for a planned violent act; and, Preparing and
disseminating a martyrdom video/statement, last will
 (U) In November 2020, the juvenile prepared two documents which he intended to distribute prior to
his attacks. One focused on the October 2020 stabbing attack in Nice, France and the second was a
manifesto which detailed his “hatred of Islam” and his hope that his attacks would be called a
“justifiable act of violence.”

(U) NCTC Indicator: Expressing acceptance of violence as a necessary means to achieve ideological goals
 (U) In his manifesto, the juvenile referenced the Christchurch attacks as a “justifiable killing of Muslims.”
He also expressed his belief that “violence should never be solved with peace, because peace, while
moral, is nowhere near effective as violence.”

UNCLASSIFIED // FOR OFFICIAL USE ONLY

 UNCLASSIFIED // FOR OFFICIAL USE ONLY
CFIX INTELLIGENCE BULLETIN

(U) NCTC Indicator: Participating in online sites or groups that promote violent extremism
 (U) He frequently visited online sites and forums specializing in violent extremist content (i.e. sites with
ISIS propaganda and RMVE content).

(U) NCTC Indicator: Conducting research for target or tactic selection

 (U) Identified two mosques near his residence and did “online reconnaissance” to plan his travel route,
identify entrances to the mosques, and where he would park his vehicle.
 (U) Initially planned to use an assault rifle similar to Brenton Tarrant’s but found it would be difficult to
obtain one due to Singapore’s strict gun laws.
 (U) Researched how to make a Triacetone Triperoxide (TATP) bomb and also considered mimicking
Tarrant’s plan of setting fire to the mosques with gasoline. He decided against both of these tactics “due
to logistical and personal safety concerns.”
 (U) The juvenile decided to use a machete for his attack and planned to target the neck and chest area
of his victims after watching YouTube videos on “how to attack using a machete.” He intended to
purchase the machete from Carousell, a Singaporean web-based community marketplace.
 (U) Like Tarrant, the juvenile intended to drive between the two attack sites. He did not have a driver’s
license, and he planned to steal his father’s credit card to rent a vehicle. He watched videos on renting
a car and how to operate an automatic transmission vehicle.

(U) NCTC Indicator: Promoting violent extremist narratives

 (U) In late 2019, the juvenile viewed ISIS propaganda videos and became angry after viewing a video
showing the execution of Ethiopian Christians in Libya. He came to the inaccurate conclusion that ISIS
represented Islam and that Islam teaches its adherents to kill Christians and other non-believers.
 (U) Following the 29 October 2020 stabbings in Nice, France, at the Notre-Dame basilica by a Tunisian
national, the juvenile was convinced of the need to defend his people and that additional attacks by
Muslims on Christians would occur.
 (U) He believed that the “Muslim fertility rate would lead to subjugation of Christians to Islamic rule in
Singapore.” This belief led him to begin making plans to attack two mosques on the 15 March 2021
anniversary of the Christchurch attacks.
 (U) He referred to his planned attacks as “an act of vengeance” and a “call for war” against Islam.

(U) NCTC Indicator: Praising past successful or attempted attacks

 (U) Juvenile became interested in the Christchurch attacks after coming across an image of Brenton
Tarrant’s rifle online. He found Tarrant’s manifesto and live-stream video of the attack and the “anti-
Muslim aspect of Tarrant’s ideology resonated with him.”
 (U) The juvenile’s manifesto borrowed heavily from Tarrant’s manifesto, referred to Tarrant as a
“Saint,” and referenced the Christchurch attacks as a “justifiable killing of Muslims.”

(U) NCTC Indicator: Unusual purchase of military-style tactical equipment other than weapons
 (U) The juvenile bought a tactical vest from an online platform that he intended to adorn with “right-
wing symbols” and modify so he could strap on his mobile device to livestream the attack, which Tarrant
also wore.

UNCLASSIFIED // FOR OFFICIAL USE ONLY

 UNCLASSIFIED // FOR OFFICIAL USE ONLY
CFIX INTELLIGENCE BULLETIN

(U) Outlook

(U//FOUO) This case highlights the ease with which an individual can access violent extremist content online
and have a rapid mobilization from self-radicalization to violence. Leading up to his detention there were several
indicators which could be considered as suspicious activity and potentially indicative of their preparedness level
in the radicalization process to becoming mobilized to conduct the attack. Law enforcement’s ability to
understand and recognize the physical and online mobilization indicators will be essential in identifying
individuals affiliated with violent extremists who are inciting or planning violent acts.

(U//FOUO) Additionally, violent extremists frequently use anniversaries of significant events and terrorist
attacks as inspiration to carry out their own attack regardless of their ideology. It is likely that we will see other
groups and individuals, both HVEs and RMVEs, choose the New Zealand mosque attacks as their inspiration.

(U) Reporting Notice

(U) The CFIX is providing this information for situational awareness. For additional information on this product,
or to report suspicious activity, please contact CFIX at 407-858-3950 or CFIX-Counterterrorism@ocfl.net.

(U) Entities and agencies outside of the Central Florida region should report suspicious activity to the
appropriate law enforcement agency and their regional or state fusion center.

(U) Tracked by: HSEC-8.1, HSEC-8.2, HSEC-8.5, HSEC-8.8, CFIX-1.3, CFIX-1.6, CFIX-10.1.3, CFIX-10.2

1
(U) Vice; “Singapore Teen Arrested for ‘Christchurch Inspired Plan’ To Attack Mosques”; 28 January 2021;
https://www.vice.com/en/article/pkdvav/singapore-teen-arrested-for-christchurch-inspired-plan-to-attack-mosques;
accessed on 28 January 2021.
2
(U) The Straits Times; “How a Sec 4 Student Who Planned to Attack Mosques in Singapore was Radicalised Within
Months”; 28 January 2021; https://www.straitstimes.com/singapore/how-a-sec-4-student-who-planned-to-attack-
mosques-in-spore-was-radicalised-within-months; accessed on 31 January 2021.
3
(U//FOUO) CFIX; Based on CFIX’s review of publically available social media of DVE networks, 16 MAR 2019.
4
(U) Ministry of Home Affairs (MHA)- Internal Security Department; Press Release; “Detention of Singaporean Youth Who
Intended to Attack Muslims on the Anniversary of Christchurch Attacks in New Zealand”; 27 January 2021;
https://www.mha.gov.sg/newsroom/press-release/news/detention-of-singaporean-youth-who-intended-to-attack-
muslims-on-the-anniversary-of-christchurch-attacks-in-new-zealand; 1 February 2021.
5
(U) Channel News Asia (CAN) YouTube Channel; “16-year-old Singaporean Detained Under ISA After Planning to Attack
Muslims at 2 Mosques”; 27 January 2021; https://www.channelnewsasia.com/news/singapore/16-year-old-singaporean-
detained-isa-planned-attack-2-mosques-14052400; accessed on 29 January 2021.
6
(U) BBC; Singapore Boy Held for Christchurch-Inspired Mosque Attack Plot”; 29 January 2021;
https://www.bbc.com/news/world-asia-55836774; accessed on 31 January 2021.
7
(U) Channel News Asia (CAN) YouTube Channel; “Teen Detained for Planning Machete Attack on 2 Singapore Mosques
was “Prepared to Die”: K Shanmugam”; 27 January 2021; https://www.youtube.com/watch?v=FZ-
9aDDaKvI&feature=youtu.be; accessed on 1 February 2021.
8
(U) National Counterterrorism Center (NCTC); “Homegrown Violent Extremist Mobilization Indicators 2019”; 23 January
2019; https://www.dni.gov/index.php/nctc-newsroom/nctc-resources/item/1945-homegrown-violent-extremist-
mobilization-indicators-2019; accessed on 1 February 2021.

UNCLASSIFIED // FOR OFFICIAL USE ONLY