FOR OFFICIAL USE ONLY RELEASABLE TO FLEA AFP AUSTRALIAN FEDERAL POLICE Operational Intelligence Report Identification of Indonesian pilots with possible extremist persuasions PROMIS Document ID Date of Report: 18 March 2015 3414324 This report is designed to convey operational intelligence to clients in a timely fashion. Summary On 16 March 2015, information was received by the AFP that indicated two possible Indonesian pilots, likely employees of AirAsia and Premiair, had posted information on their Facebook pages that inferred support to the Islamic State (IS). Upon review of the content from both accounts it is assessed that these persons are likely being influenced by radical elements-at least from the online environment-and as a result, may pose a security threat. (FOUO) Analysis On 16 March 2015, information was provided to the AFP suggesting two Indonesian pilots, likely employees of AirAsia and Premiair, had posted information on their Facebook pages that inferred their support to the Islamic State (IS). The accounts were in the names of Ridwan Ahmad Al Indonesiy alias Ridwan Agustin and Tommy Abu Alfatih alias Tomi Hendratno. Results of a review of the content are contained below. (FOUO) Ridwan Ahmad Al Indonesiy alias Ridwan Agustin1 By the morning of 17 March 2015, Ridwan Agustin?s page had been taken down or suspended. Some content from this account however, had been provided to the AFP prior 1 Facebook ID unknown, however, previous URL resolved to Possible previous account name was Ridwan Ahmad Al Indonesiy. (FOUO) This document is the property of the Australian Federal Police (AFP). It may not be copied or disseminated to any third party without prior AFP approval. To arrange approval, please contact the Intelligence Dissemination team. FOR OFFICIAL USE ONLY RELEASABLE TO FLEA FOR OFFICIAL USE ONLY RELEASABLE TO FLEA to the account?s closure. Ridwan Agustin?s posts and profile information allegedly detailed his employment with AirAsia: - travelled to Toulouse, France with the AirAsia team where he stated he visited the Airbus of?ce in October 2009; graduated from AirAsia academy in January 2010; - ?ew international routes including to Hong Kong in December 2010; and - ?ew domestic routes including QZ7971 Bandung to Singapore in July 2011. (FOUO) Photos posted on the (now closed) Facebook account of Ridwan Agustin In support of his claim to be a pilot, Ridwan A ustin was identified as having Instagram and Flikr accounts under the name *It is apparent that from the profile photos used for these accounts it is the same person as depicted in the Facebook photos above. He also posted to the online Indoflyer forum detailing his flying experiences2 as seen in the below photo. (FOUO) Source information indicated a change in Ridwan Agustin?s posts evident from September 2014, wherein he started posting material indicative of support to IS. At this time, his online network had expanded to also include interaction with another Indonesian pilot Tommy Abu Alfatih (detailed below), who ?liked? Ridwan?s postings relating to IS. (FOUO) In addition, source information suggested that Ridwan Agustin posted comments on the page of possible Jemaah Islamiyah affiliate3 Heri Kustyanto alias Abu Azzam Qaswarah Indonesy", who is probably in Syria or Iraq fighting with IS. Kustyanto?s profile content 2 Found at: (FOUO) 3 Affiliation not confirmed. (FOUO) 4 Facebook ID 1261025603. (FOUO) This document is the property of the Australian Federal Police (AFP). It may not be copied or disseminated to any third party without prior AFP approval. To arrange approval, please contact the Intelligence Dissemination team. FOR OFFICIAL USE ONLY RELEASABLE TO FLEA FOR OFFICIAL USE ONLY RELEASABLE TO FLEA openly shows his involvement in a con?ict with regular postings of personal photographs with weaponry. His friends? list also indicates a strong af?liation with extremist elements including IS and Indonesian terrorist groups. His online network includes contacts from Australias, Malaysia, Indonesia, Singapore, United Kingdom, Syria, Pakistan and Afghanistan. (FOUO) a Hen Kustyanto Man Behnd 'he Gun 5 Example photos from Heri Kustyanto?s Facebook timeline A review of Kustyanto?s page indicates he may have left his pregnant wife and child in Indonesia and travelled to the conflict zone. On 5 March 2015 Kustyanto posted a message on his page about a three day battle in Kobani entitled Come Back to Kobani, coupled with photos of himself (allegedly) in the conflict zone. However neither Kustayanto?s recent posts, nor his friends? list mention Ridwan Agustin (most likely due to the account being disabled/suspended somewhere between 16 and 17 March 2015). (FOUO) 5 This account was assessed as non?extremist in nature, according to the content available at the time. (FOUO) ?Ibis document is the property of the Australian Federal Police (AFP). It may not be copied or disseminated to any third party without prior AFP approval. To arrange approval, please contact the Intelligence Dissemination team. FOR OFFICIAL USE ONLY RELEASABLE TO FLEA FOR OFFICIAL USE ONLY RELEASABLE TO FLEA auwmm-m. Pali y'a-yd Facebook post by Heri Kustyanto One user identified as responding to the 5 March 2015 post was Hobi Panahan?, who commented only by tagging a female's name, Diah Suci Wulandari7. A comparison of photos from the disabled account of Ridwan Agustin and the newly established account of Hobi Panahan (account created on 16 March 2015) shows similar interests of flying and archery. (FOUO) Ridwan Agustin (disabled between Hobi Panahan (established 16 16-17 March 2015) March 2015) Cover photo as at February 2015 Current profile photo 6 Facebook ID 100009344827267. (FOUO) 7 Facebook ID 1387710656. (FOUO) 'lhis document is the property of the Australian Federal Police (AFP). It may not be copied or disseminated to any third party without prior AFP approval. To arrange approval, please contact the Intelligence Dissemination team. FOR OFFICIAL USE ONLY RELEASABLE TO FLEA FOR OFFICIAL USE ONLY RELEASABLE TO FLEA Current cover photo depicting view from Various photos showed his employment an a'rplane with AirAsia Further, a review of Diah Suci Wulandari?s account photos reveals a likely match with Ridwan Agustin. Diah Suci Wulandari was one of the ?rst people Hobi Panahan ?befriended' upon creation of his account and lists her previous employment as an AirAsia hostess. (FOUO) Ridwan Aqustin (disabled between Diah Suci Wulandari (current) 16-17 March 2015) Posted 1 July 2013 Slight scar visible near upper lip extending to right cheek posted 16 January 2014 This document is the property of the Australian Federal Police (AFP). It may not be copied or disseminated to any third party without prior AFP approval. To arrange approval, please contact the Intelligence Dissemination team. FOR OFFICIAL USE ONLY RELEASABLE TO FLEA FOR OFFICIAL USE ONLY RELEASABLE TO FLEA Posted 6 December 2014 (slight scar visible on right cheek) It is assessed likely that Ridwan Agustin is Hobi Panahan, and married to Diah Suci Wulandari. According to Diah Suci Wulandari?s page, she resides in Bandung Indonesia and her date of birth is 9 June 1984. Her pro?le information states she also worked for Star Air prior to AirAsia. She has recently reposted information from the pro-IS Indonesian radical group Jemaah Anshorut Tauhid (JAT). (FOUO) A progressive change is apparent in Hobi Panahan?s dress, towards more conservative Islamic dress and growing of facial hair. The content he posts online has also seen a change from innocuous to a likely radicalised persuasion. The content on the new account (assessed as partially locked down) indicates support to IS. As at 17 March 2015, Hobi Panahan was actively ?befriending? others. An initial review of his small friends? list indicates the content on his online contacts? pages is strongly indicative of radicalised individuals (most likely Indonesian). One such person posted on their pro?le on 14 March 2015, that they wished to go to Syam if Allah permitted. Hobi Panahan actively follows extremist pro-IS pages including Khilafah Daw/a Islamiyyahs, Panjimas9 and Shoutussa/am Medial? pages that regularly post graphic imagery and content relating to IS activity, executions and beheadings. As at 17 March 2015 he listed his current city as Raqqa, Syria. (FOUO) It is not clear from the new account whether Hobi Panahan remains employed as a pilot or whether he is in Syria. His interest flying probably hasn?t waned as his cover photo suggests. (FOUO) Tommy Abu Alfatih alias Tomi Hendratno11 According to public information on his profile, Tommy Abu Alfatih resides in Bogor Indonesia and is married to ?12. (FOUO) 8 Facebook ID 1065879886761717. (FOUO) 9 Facebook ID 393215627486179. (FOUO) 10 Facebook ID 966185990065901. (FOUO) 11 Facebook ID 1215499088. Previous account name was probably Tomi Hendratno. (FOUO) This document is the property of the Australian Federal Police (AFP). It may not be copied or disseminated to any third party without prior AFP approval. To arrange approval, please contact the Intelligence Dissemination team. FOR OFFICIAL USE ONLY RELEASABLE TO FLEA FOR OFFICIAL USE ONLY RELEASABLE TO FLEA Online details also state he graduated from an Indonesian Flight School in 1999 and worked for the Indonesian Navy as a pilot. He currently works at Premiair. His resume follows: 2005 graduated from Jeanne d?arc Navy Of?cer Training College in France; - 2008 graduated from Merdeka University in Surabaya 2008; 2009 graduated from a school of flight instructors for the Indonesian Armed Forces 2010 - left his job as a pilot in Indonesian Navy and joined Garuda Indonesia; 0 2011 left Garuda and worked at Bali International Flight Academy as a certi?ed flight instructor; and 2012 joined Premiair, providing chartered airplane and helicopter flights for private/commercial purposes. (FOUO) 5? Personal photos posted by Tommy Abu Alfatih According to his posts, Tommy Abu Alfatih displays a strong nationalist perspective. Posted images are indicative of his trips around the world?most likely as a pilot?including to Australia, Europe, Middle East and the United States, the latter being on 17 February 2014. By mid-2014 his postings afforded increased attention to the grievances of the plight of Muslims across the world. By December 2014, pro?IS material surfaced. He has described police as ansharu thagut (widely used term by jihadists to describe police as helpers of the oppressive government) and described a photo-allegedly of his son-as muwahid (term often misused by jihadists to describe the mujahidin). (FOUO) Recent reposts include extremist related articles from shoutussalam.com and kiblat.com and other Facebook users such as Heri Kustyanto and the anti-Shia page Syiah Bukan Islam. His ?Likes? have also include the extremist Khi/afah Islamiyah Rising13 page. (FOUO) Tommy Abu Alfatih's friends list is extensive and by virtue of his ?ying experience is connected to many fellow pilots and air crew from AirAsia, Kalstar Aviation, Lion Air, Garuda, Tiger Airways, Global Aviasi, Enggang Air Services, Sriwijaya Air, Wings Air, and Air new Plymouth. 12 Facebook ID (FOUO) 13 Facebook ID 455024744655531. (FOUO) This document is the property of the Australian Federal Police (AFP). It may not be copied or disseminated to any third party without prior AFP approval. To arrange approval, please contact the Intelligence Dissemination team. FOR OFFICIAL USE ONLY RELEASABLE TO FLEA FOR OFFICIAL USE ONLY RELEASABLE TO FLEA His friends list also shows connections with Air Navy Indonesia, military pilots and POLRI of?cers. The latter may assist police enquiries in further identifying Tommy Abu Alfatih. (FOUO) It is likely from his Facebook posts that Tommy Abu Alfatih remains employed as a pilot. (FOUO) Conclusion Pilots, air crew and others with access to and within the aviation environment can pose obvious threats if these persons are radicalised. Their access and knowledge of security and safety regimes provides the ability to attempt attacks as witnessed by past global events. It is noted that a recent edition of the Al Qaeda magazine Inspire actively encouraged attacks within the aviation environment. (FOUO) While it is not clear whether Ridwan Agustin alias Hobi Panahan is currently employed as a pilot, his online behaviour has suggests a likely progression to radicalisation. He would still possess requisite skills to fly and together with his wife's previous employment, they would have current contacts within the aviation sector. Similarly with Tommy Abu Alfatih alias Tomi Hendratno, however it is assessed that Tommy is currently working for Premiair. Both appear to be in?uenced by pro-IS elements including extremist online propaganda by well-known radical Indonesia outlets and a suspected Indonesian foreign terrorist ?ghter who is likely to be in either Syria or Iraq. (FOUO) ?lhis document is the property of the Australian Federal Police (AFP). It may not be copied or disseminated to any third party without prior AFP approval. To arrange approval, please contact the Intelligence Dissemination team. FOR OFFICIAL USE ONLY RELEASABLE TO FLEA