Share story

NAIROBI, Kenya — Soon after gunmen stormed a Kenyan shopping mall on Saturday, killing dozens in a spray of bullets and grenades, triumphant tweets swept the Internet.

“The Mujahideen entered Westgate Mall today at around noon and are still inside the mall, fighting the Kenyan Kuffar inside their own turf,” cheered the Twitter account of al-Shabab, al-Qaida’s affiliate in Somalia. “The Mujahideen inside the mall confirmed to (at)HSM — Press that they killed over 100 Kenyan kuffar & battle is ongoing.”

Hours later, the account disappeared. For the third time this year, Twitter tried to kick al-Shabab off its social media platform.

Within hours, a new account popped up once again, tweeting mocking jibes at Kenyans as if it had never stopped. Then it too went silent.

As the horror of the assault on Nairobi’s Westgate mall spun unresolved through a second day Sunday, with the death toll rising and uncertainty surrounding what was taking place at the multistory complex, the Internet became the only way to learn the motivations of the attackers — amid fierce debate over whether terrorists should have their own platform.

The Saturday attack on the upscale Israeli-owned shopping mall — a popular destination for wealthy Kenyans and Nairobi’s large expatriate community — was the deadliest terror attack since August 1998, when the U.S. Embassy here was bombed, killing more than 200.

In Afghanistan and Pakistan, al-Qaida spokesmen regularly communicate directly with journalists, often by phone. Al-Shabab, too, has an official spokesman — but he is in Somalia, is rarely reachable, and communicates mostly to only a trusted ring of media contacts.

So, when news broke of the attack on Saturday, practically every journalist in East Africa turned immediately to the unsavory sarcasm flowing out of (at)HSM — Press, al-Shabab’s latest Twitter account.

So, too, did the Kenyan government.

“The al-Shabab terror group has claimed responsibility for this cowardly act of terror on social media. However, investigations are underway to conclusively establish those responsible for this mayhem,” President Uhuru Kenyatta of Kenya said in a televised statement Sunday evening.

Al-Shabab, through its Twitter account, said the attack was retribution for the Kenyan military’s offensive into Shabab strongholds in southern Somalia that began in 2011 after a string of cross-border kidnappings.

As anger swept through Kenya at the scale of the attack, Kenyan Twitter users began demanding that al-Shabab again have its account cancelled.

“The danger of course is that they get a following among young gullible people,” said Rashid Abdi, an independent Somali analyst.

But from an intelligence perspective, said Abdi, “allowing these people some kind of forum where they can make claims is important.”

Intelligence services closely monitor flagged terror accounts to help map out other networks of online supporters.

“It’s hard to take one side or the other,” said Abdi.

In the end, the organization’s clear delight in brashly boasting of past and future violence appears to force Twitter’s hand toward the delete button.

In January, the group’s account was removed after it tweeted a picture of a dead French soldier and threatened to execute Kenyan captives. Earlier this month, the group’s account was deleted after it jeeringly vowed to take the life of the Somali president.

The group clearly has no plans to give up its tweeting habit anytime soon.

“Kenyans will not appreciate the gravity of the situation without seeing, feeling and experiencing death in all its ghoulish detail,” tweeted a new account, (at)HSM — PressOffice, claiming to be al-Shabab.

That was before the account was closed again.