The Triple Agent

Abu Dujana had been thrust into a small elite of jihadist writers and pundits with large online audiences and global reach. Yet no one knew who he really was. The speculation among his most ardent online followers was that he was a Saudi and very likely a senior official within al-Qaeda. But in fact even the al-Hesbah managers who gave Abu Dujana the moderator’s job did not know his true name or nationality. Nor did the Mukhabarat or the CIA, which employs teams of specialists to monitor jihadist Web sites full-time and write reports deciphering and analyzing their content. Balawi’s father and brothers joked about his love affair with his computer, but even they knew nothing about the secret life he created on the flickering blue screen.

The transformation would occur at home, usually at night or on weekends, when he was free from his duties at the clinic. Balawi would hunch over his small desktop computer for hour after hour until his eyes reddened and his wife, Defne, began to worry. Already Balawi had a reputation for being a recluse, rarely going out or socializing with friends or even attending Friday prayers at the local mosque. Balawi would deflect Defne’s questions by insisting that he had to study, but when she came into the room, the books would be tossed to the side and her husband would be where he always was, perched on his favorite chair with eyes locked on the computer screen. The more Abu Dujana grew, the smaller Balawi and his old life became.

“He was preoccupied,” Defne said later. “He was living in fantasy in another world.”

Balawi had written online columns under several other fake names before Abu Dujana al-Khorasani made his first appearance in 2007, just as Balawi was hitting his stride as an essayist. The pseudonym itself was a mash-up of historical names instantly recognizable to devout Muslims; Al-Khorasani means “from Khorasan,” the ancient name for the vast swath of Muslim lands stretching from the old Persian empire to the Hindu Kush mountains, encompassing much of modern-day Afghanistan. Abu Dujana was a seventh-century Arab warrior who was a favorite of the Prophet Muhammad’s. A skilled swordsman who relished the mayhem of hand-to-hand combat, he was also arrogant and showy. Before battle he would don a red headband and taunt his enemies by strutting mockingly in front of their lines.

Abu Dujana the pundit was a showman as well, prone to verbal bluster and fireworks. His first articles quickly cemented his reputation as one of the most engaging and colorful writers in the online community of radical Islam. He raged against all the usual targets—Israel, the West, and U.S.-friendly Arab governments—but his writings also reflected an understanding of Western culture and a knack for appealing to younger Muslims who grew up with instant messaging and social networks. In one passage he would excoriate ordinary Muslims as being unthinking clones, “like Dolly, the cloned sheep,” and in another he would write wistfully about a future in which even the Barbie doll “will wear the veil and recite the Koran when you touch it.”

He would also entice his audience with images of battlefield carnage, fresh from amateur jihadi photographers in Tikrit or Ramadi, served up with a gleefully ghoulish commentary that became Abu Dujana’s trademark.

“Welcome to the al-Hesbah café,” he wrote to open one Internet session. “Go to the menu and pick today’s dish:

“Roasted Humvee with sauce of human remains.

“Exploded tank by an IED [improvised explosive device] with no survivors.

“Or a pastry made of Americans’ brains taken out with snipers’ bullets.”

Thousands of Muslims sampled Abu Dujana’s offerings and paused to read his words. And each week the appetite for his articles grew larger still. Abu Dujana—whoever he was, wherever he was—was becoming a true celebrity.

He had to be stopped.

Inside the headquarters of the secretive National Security Agency in suburban Washington is a computer search engine unlike any other in the world. Code-named Turbulence, it is a five-hundred-million-dollar-a-year network that continuously vacuums up terabytes of data from across the Internet and scours them for possible security threats. When specific targets are identified—a new Web site or an unknown militant group, for instance—it can burrow into a single computer on the other side of the world to steal files or drop off eavesdropping software. Agents on the ground can then follow up with portable surveillance gear so sensitive it can detect individual strokes on a computer keyboard from hundreds of feet away.