Al-Shabaab has spent the last three years quietly reorganising. The group we assess today is not the group that peaked in 2010–2014: it is smaller, harder to target, more selective in its operations and materially more sophisticated in how it uses information, finance and coercion.
Tactical evolution
Complex attacks remain in the playbook, but the group has shifted weight towards targeted assassinations, financial coercion of the private sector and infiltration of state institutions. Where large-scale offensives have failed, sustained pressure on individuals and networks has produced meaningful strategic effect.
Financing and coercion
The group's revenue base — informal taxation of commerce, transport and telecoms — has proven remarkably resilient. Federal counter-financing measures have inconvenienced Al-Shabaab without cutting the flow. For any organisation with a supply chain that transits south-central Somalia, financial exposure to the group is an operational reality that requires management, not denial.
The group's centre of gravity has migrated from territory to networks. That makes it harder to see and harder to hit.
Implications for security leaders
- Assume infiltration risk in any hiring pipeline that touches south-central Somalia.
- Scrutinise supply chain payments — informal taxation is a compliance and reputational risk, not just an operational one.
- Treat information operations as a live threat, particularly around staff safety and organisational reputation.
- Invest in indications and warning — targeted attacks reward defenders with disciplined threat monitoring.
Al-Shabaab will continue to shape the operating environment for organisations across the Horn well beyond Somalia's borders. Treating it as a Somali problem, rather than a regional one, is the mistake most planning cycles still make.