Homeland Security Information Bulletin

Potential Indicators of Threats Involving Vehicle Borne Improvised Explosive Devices (VBIEDs)

May 15, 2003

The following information is meant to advise the public as well as people who own and operate facilities about possible indicators of terrorist attack planning.  DHS encourages individuals to report information concerning suspicious or potential criminal activity to law enforcement or a Homeland Security watch office.  Individuals also may report incidents to the Homeland Security Center (HSC) at 202-282-1616, email to State.Local.HSCenter@dhs.gov.

The Department of Homeland Security (DHS) believes that a truck bombing by terrorists may be preempted if the general public remains alert for certain indicators. DHS has no specific information to indicate that a truck bombing of any kind is currently being planned in the United States.

This document is only intended to provide general information to assist in efforts to recognize potential VBIED-related threats or incidents based on the recent Riyadh bombings.

Current Tactics Used in the Riyadh Attack

·        Multiple targets

·        Simultaneous attacks

·        Multiple vehicles per target

·        Assault/breaching cadre armed with small arms/weaponry accompany the VBIED to clear security personnel and gain access to the compound.

International terrorist groups have demonstrated the ability to plan and conduct complex attacks, simultaneously, against multiple targets. In the 11 May Riyadh attack terrorists, possibly Al-Qaida, assaulted three compounds occupied by western guest workers using multiple vehicles.  At least one vehicle in each assault team carried a large explosive charge which was detonated by a suicide bomber.   Media reports indicate that the attackers drove up to each compound killing those guarding the compound gates with small arms fire.  Vehicles carrying the explosive charges were then driven into each compound and detonated.  In one instance it appears that the terrorists attempted to breach the gate security check point by ramming it with a sedan.  It is likely that those involved with executing these attacks conducted extensive preoperational surveillance of the compounds selected.  Meticulous planning, to include preoperational surveillance, is a hallmark of Al-Qaida terrorist attacks. 

·        JEDAWAL COMPOUND

o       Sustained the least amount of damage of the three targets.  Initial attack penetrated one Saudi Military Guard manning watch post at rear corner of compound.

o       Assailants killed the guard and drove the explosive laden car up to the next gate in the back of the compound, where it was detonated. 

Of note, a safe house probably used by these terrorists -- which was raided by Saudi authorities on 6 May -- was only 400 meters from the Jedawal Compound.

While the ability to conduct multiple, near simultaneous attacks against several targets is not new for terrorist groups such as Al-Qaida, the manner in which these attacks was conducted indicates a more refined capability.  In each attack a number of armed terrorists was used to eliminate the security elements guarding the compounds so suicide cadre could drive a vehicle borne improvised explosive device to the desired location and detonate it. Media reports suggest that the terrorist perpetrators may also have fired shots in the air to lure victims out of their dwellings in order to maximize casualties.  The split second timing among the reported three attacks -- while not unprecedented for accomplished terrorist groups – indicates that a trained and dedicated cadre perpetrated this attack.      

Potential VBIED Indicators

DHS has no specific information to indicate that a truck bombing of any kind is currently being planned in the United States.   The existence of any one of the following indicators does not in and of itself suggest terrorist activity.  Each incident should be carefully assessed together with other information present to judge whether there is cause for further investigation:

Purchase or theft of explosives or chemicals may be a precursor to terrorist attacks -Ramsi Yousef--the mastermind behind the 1993 World Trade Center (WTC) attack--purchased the required chemicals directly from a chemical manufacturer. Timothy McVeigh--the perpetrator of the attack on the Murrah Federal Building--used a combination of theft and small purchases over a six (6) week period to amass the necessary ingredients used to assemble his explosive device. 

Rental of self-storage units and the delivery of chemicals to such units - Both Ramsi Yousef and Timothy McVeigh rented self-storage units in order to store chemicals. Ramsi Yousef had the chemical manufacturer deliver $3,400 in chemicals directly to his self-storage unit.

Chemical fires, toxic odors, brightly colored stains, or rusted metal fixtures in apartments, hotels rooms, or self-storage units - Self-storage site managers, motel/hotel staff, and apartment superintendents may wish to be sensitive to any fires, toxic odors, bright stains, or rusted metal fixtures within their facilities. In attempting to prepare an improvised explosive device in the Philippines following the 1993 WTC attack, Ramsi Yousef caused a violent chemical fire to break out in the kitchen where he was preparing his device. Subsequent investigation of this apartment revealed bright stains and rusted metal fixtures (i.e., door hinges, window locks, etc.) throughout the apartment.

Theft of truck or van with minimum one (1) ton carrying capacity - The 1993 WTC attack and 1995 bombing of the Murrah Federal Building were carried out with rented vehicles. However, terrorists may use a stolen vehicle in order to impede subsequent investigation. Moreover, most VBIEDs used in recent years have carried large explosive charge that weighed in excess of 2,000 pounds suggesting that continued use of large vans, SUVs or trucks for this purpose is likely.

Modification of smaller capacity vehicles to accept a minimum one (1) ton load - The two vehicles used in the 1998 East Africa bombings were imported into the target country and then locally modified with heavier springs in order to accommodate the weight of the explosive. Local law enforcement may wish to coordinate with appropriate garages or auto mechanic trade associations in their jurisdictions to sensitize them to this indicator.

Small test explosions in rural or wooded areas - Timothy McVeigh detonated at least one small explosive device in a wooded area near his residence in order to test his chemical mixture. Local law enforcement, as well as fire and rescue departments, may be in the best position to report this indicator to the FBI.

Treated/untreated chemical burns or missing hands and/or fingers - Terrorists may seriously injure themselves while manufacturing their bomb that they require immediate and substantial medical care. Hospitals and out-patient clinics should therefore be requested to report such injuries.

Physical surveillance - Nearly every major terrorist attack is preceded by a thorough surveillance of the targeted facility.  It is likely that similar activity preceded the Riyadh compound bombings.

Purchase of, or illicit access to, blue prints of the targeted facility - In a failed 1996 attempt to destroy the FBI's fingerprint facility in Clarksburg, WV, a domestic anti-government group attempted to acquire the facility's blue prints from a local emergency services worker.

General Characteristics of Terrorist Surveillance:

Terrorist surveillance may be either fixed or mobile.

Protective Measures

Terrorists continue to select soft targets for attack -- particularly those that will yield a high casualty count.  Some examples, though not all inclusive, are:  residences, recreational and shopping venues, and business buildings and complexes.  All available antiterrorism measures should be rigorously reexamined – to include:  physical security perimeters set back distances between security fences and key buildings, and barricades.

Table 1 - Chemicals and Other Demolitions Paraphernalia Used in Recent Truck Bomb Attacks Against US Government Facilities

Note: Substances and Amounts compiled from publicly available sources.

Prepared by:  Risk Assessment Division, Information Analysis Directorate, Department of Homeland Security.