Reminder on Patterns in Gun-Team Attacks

Sadly, it's time to remind readers that in the (very unlikely) event of an explosion outside your hotel or office, do not rush to the window. Planting two bombs in series is a standard terror tactic: the first is to draw people and emergency personnel within range, and the second is larger to inflict maximum injury, as in flying glass shards.

Over four years ago, in this post on Disaster-Wise, Patterns in AQ-LeT Gun Team Attacks, I commented that gun-team attacks on public places were not being taken seriously enough in the West, given the high leverage they were gaining for terror groups based in Chechnya, Iraq, and Pakistan. Here's a snip from my post in November 2010:

It's important to maintain basic citizen awareness of this very dangerous tactic, which poses a real threat even though the coordinated gun-team attack has not materialized recently in the West. While a gun-team attack in a major Western city would be up against a fast and capable security response, attackers tend to hold a tactical advantage in the early moments. The best response is to stop these before the shooting starts, and a vigilant citizenry may well help alert the police to precursor events, such as hostile reconnaissance or cache preparation. I understand that now the press is zeroed in on the attempted package-bomb attack last week on cargo airliners, but I recommend that the gun-team attack move up in the public's awareness.

While gun-team attacks don't happen often, they are terrible when they do: think of the killings at the Beslan school, the Moscow theater, and the school in Peshawar. 

Situational awareness, training, and mental preparation make a big difference when a shooter is on the loose. Check out the "Run, hide, fight" training or this video from Ready Houston:

The video has much good advice, such as gather information, put your phone on silent, call 911, and try to leave the building with others nearby, rather than freeze in fear. 

Don't waste time trying to contact relatives elsewhere to reassure them. That's a common and tragic mistake in extreme situations: people using up time on their phones that they should be spending in understanding the situation and looking at their survival options. (I can think of some protracted emergencies where contacting friends and relatives later might add to one's own awareness, but in the crucial early minutes of the crisis, don't spend time on the phone with anyone except a 911 dispatcher.) The happiest message you can send loved ones is that you're out and in safe hands.

If escape isn't possible, hide or barricade the doors. And if shelter is unavailable, look for ways to fight back, whether that's using a fire extinguisher or throwing something. 

Remember that a group of motivated people can be a very formidable defensive force. Here's a narrative of how bystanders at the shooting of Rep. Giffords in Arizona disarmed the gunman.

Finally, this: while the Paris killings didn't have the scale and intensity of the horror at Mumbai, the risk of a large-scale attack in some city is very real, and it's important to be aware of the ten common patterns in major gun-team attacks, in order of occurrence:

1. Hostile reconnaissance of the target, possibly a year or more ahead: these operatives walk around with cameras and GPS devices to note hallways and doors. A list of ~200 principal targets around the world is already known from interrogations, ELINT, and captured computer files and we can hope the security people are watching the cameras for such behavior. 
2. Gun-team training in a remote location, currently Pakistan but Yemen and Somalia are also likely. Gun teams receive intensive training based on such reconnaissance. They spend much time on tactical shooting and physical endurance. These men are young and highly motivated until captured, at which point their resistance seems to melt.
3. Acquisition of special gear, like satellite phones, IEDs, SIM cards for cellphones, and inflatable boats. The attackers at Grozny were in touch with a handler by cellphone, as were the attackers in Mumbai. Given this pattern it's likely that authorities in major cities are now ready to shut down local cellphone networks.
4. Sometimes, staging caches of supplies inside the primary targets.
5. Final selection of gun teams at the training camp. The organizers try to screen out those who will balk at indiscriminate killing.
6. Arrival in target city. Teams split up and try to reach the primary targets without detection. The idea is to penetrate deeply into the target without using most of the ammunition, leaving most of it for use in a confined space crowded with targets. This didn't work at Parliament House but only because the Indian Vice President's motorcade happened to be blocking the narrow gate the attackers were trying to use.
7. First stage of attack: “Large-space attacks”. Timed for high traffic hours in a crowded public place like a mall, tourist destination, or train station. Teams throw grenades and fire automatic weapons at anyone in sight, killing as many as they can and then running off. If police return fire the gun teams will retreat and move to a softer target. If the space is large enough and has enough exits this stage of shooting might go on for an hour, and so the death toll is high. The gun teams are hard to stop unless police can arrive very quickly.
8. Second stage of attack, “Small-space attacks”: A gun team leaves the first location and moves to someplace more confined. Most likely is a restaurant or club near a five-star hotel. They continue shooting there. They begin setting fires and taking hostages before they move to the final destination. If they don't break off the attack and try to escape, this leads to:
9. The third stage of attack, “hostage-holding”: Hostages are brought to a defensible location, likely to be upper floors of a hotel or apartment building. More fires are set, and boobytraps may be laid. At this point the teams may join up with each other and try to establish regular communication with leaders in a remote location. The organizers want to prolong the event as long as possible, adding fires and explosions. Often this involves checking identification and making a big show of releasing Muslims.
10. Fourth stage of attack, “martyrdom”: Die as martyrs in a firefight with police or in a bomb explosion.