On 22 March 2024, a coordinated terrorist attack against civilians occurred at theCrocus City Hall music venue inCrocus City, Krasnogorsk, Moscow Oblast, Russia. The attack began at around 20:00MSK (UTC+3), shortly before the Russian bandPicnic was scheduled to play a sold-out show at the venue. Four terrorists associated withIslamic State – Khorasan Province (IS–KP or ISIS-K) carried out amass shooting, as well asslashing attacks[3] on the people gathered at the venue, and usedincendiary devices to set the venue on fire.[14][15][16] Investigators said 149 people had been killed (including those who died later in hospital), and more than 609 concertgoers injured by gunfire or suffering from burns.[17][18][16]
IS claimed responsibility for the attack in a statement through the IS-affiliatedAmaq News Agency shortly after the attack, with its regional branch in theAfghanistan–Pakistan border region,Islamic State – Khorasan Province (IS–KP or ISIS-K), most likely being responsible.[19][20][15] Amaq also published a video filmed by one of the attackers. It showed the attackers shooting victims and slitting the throat of a victim, while the filming attacker was reciting thetakbir, praising God and speaking againstinfidels.[3][16]
Russia's Foreign Ministry called the incident aterrorist attack.[21] Russian presidentVladimir Putin called the attack a "barbaric terrorist act" and said that the gunmen had been arrested.[22] He also declared 24 March 2024 to be a national day of mourning,[14] and sought to link assailants toUkraine, in what has been described as "very doubtful and primitive" disinformation.[14][23] It was the deadliest terrorist attack on Russian soil since theBeslan school siege in 2004.[24][25] Investigators detained 12 people in relation to the attack,[26] including four suspects, who were charged with terrorism later on 24 March.[27][12][13]
Russia hadtargeted theIslamic State duringits intervention in theSyrian Civil War on behalf of the government of PresidentBashar al-Assad.[32] After years of reduced activity, the Islamic State has been trying to step up its attacks.[33] On 3 January 2024, IS–KP conductedbombings in Kerman, Iran that killed at least 103 people; the US had warned Iran of the possible attack.[33] Colin Clarke from the independentSoufan Center think tank said that IS–KP "has been fixated on Russia for the past two years, frequently criticizing Putin in its propaganda."[28]
On 2 March 2024, six alleged Islamic State militants were killedin a shootout with Russian security forces inIngushetia.[34] On 7 March, the RussianFederal Security Service (FSB) announced that it had neutralized an Islamic State terrorist cell in Moscow, which had intended to attack a synagogue in the city.[35]
On 7 March, theUnited States Embassy in Moscow warned that "extremists have imminent plans to target large gatherings in Moscow, to include concerts" and advised US citizens to "avoid large gatherings over the next 48 hours,"[36][37][38][39] to avoid crowds, to stay updated by monitoring local media, and to maintain awareness of surroundings.[36] Canada and the United Kingdom also issued similar warnings to their citizens in Russia.[40] That day, the US also privately warned Russian officials of the danger of an impending attack from IS–KP from intelligence gathered earlier in March, under the US intelligence community's "duty to warn" requirement,[41][33] specifically mentioning the Crocus City Hall venue.[42] US officials later stated toThe New York Times that the attack was related to the prior US warning,[38] and also said that the intelligence reports that the warning was based on had been shared with Russian officials before the attack.[28] In contrast, the Russian ambassador to the United States,Anatoly Antonov, said that in regards to the attacks "no concrete information, nothing was passed to us",[41] while the head of the FSB,Alexander Bortnikov, said that the US warning was "of a general nature".[43]
Three days before the Crocus City Hall attack, PresidentVladimir Putin told the board of the FSB that Western warnings of a potential attack inside Russia were "provocative" and "resemble outright blackmail and the intention to intimidate and destabilise our society".[44]
Ten days after the attack, it was reported that Iran had also warned Russia that a major "terrorist operation" was being planned, based on information gathered from IS militants arrested after theKerman bombings. Despite coming from, as described by the news agencyReuters, a "diplomatic ally" of Putin's government, the notification was allegedly dismissed. Iran's communications have been said to have not included the specific target on Russian soil.[45]
Crocus City Hall was built in 2009 as a concert venue with a capacity of 6,200 people and is one of the largest concert venues in the Moscow area.[15] It is a seven-story building which has an area of about 38,000m2.[46] It is part of a larger block of shopping centers, restaurants, and other attractions calledCrocus City,[47] which was built by Azerbaijani billionaire and property developerAras Agalarov[48] and was also the venue of theMiss Universe 2013 pageant and theTop Hit Music Awards in 2013 and 2019.[49]
On 22 March 2024, the Russian bandPicnic was scheduled to play a sold-out show at Crocus City Hall.[51][52] At around 20:00MSK (UTC+3),[53] before the band began their performance, masked gunmen incombat fatigues opened fire on the crowd usingAK–style assault rifles.[28][54] An IS–KP report also claimed that the assailants hadpistols andknives.[2] Because the show was about to begin, some believed the initial sound of gunshots was part of the act.[55] At the time of the attack, children and teenagers were also in the building for aballroom dancing competition.[56] The venue's security guards were unarmed, and it is believed that some of them were killed in the attack.[57] A part-timecloakroom assistant, 15-year-old Islam Khalilov, reportedly helped save more than a hundred concert-goers by showing them an exit through the venue's office space.[58] He was assisted by three of his co-workers, 14-year-old Artyom Donskov, Nikita Ivanov and another.[59]
One witness described the attackers as bearded men.[60] Amateur video footage verified byBBC Verify showed masked gunmen shooting indiscriminately in the entrance hall and auditorium.[61][62] Other footage posted toTelegram showed men in military fatigues andbaseball caps firing into crowds of screaming people.[29] On 23 March, IS released a video throughAmaq News Agency, showing the shooting and throat-slitting of victims in the attack. In the video, the assailants appear to shoot patrons outside the entrance of the auditorium. InArabic subtitles, the assailants were heard shouting; "come, come quickly",[b] "bring the assault rifle, bring the assault rifle",[c] and "kill them and have no mercy".[d][3][16] After shooting the victims, an assailant slits the throat of a still-alive wounded victim, who was shot off-camera prior to the recording. After the killings, in Arabic subtitles, one of the assailants is reported to have stated: "Theinfidels are defeatedby the grace of Allah.Allah is great.. [sic] The infidels are defeated. We went out for the sake of Allah and are supporting his religion."[e][3][63]
The venue building on fire on 22 March
The assailants were also reported to have usedincendiary devices, with an eyewitness claiming the assailants usedpetrol bombs to start a fire in theauditorium.[56] Amateur video footage posted to social media sites showed huge fires and plumes of smoke coming from the building from the fires set by the assailants,[29] including by an emergency stairwell, forcing people towards the attackers' positions in the middle of the lobby.[16] The fire in the complex was estimated to have covered an area of 12,900 square metres (139,000 square feet).[64] Hours later, around 22:14 MSK, a loud sound was reported, followed by a partial roof collapse.[65]Moscow Oblast governorAndrey Vorobyov said the roof over the hall had collapsed.[66]
Survivors were evacuated viamedical helicopters,[72] with 70 ambulance crews reportedly being dispatched.[60] An unknown number of people fled to the parking area from the stage, while others fled to the roof.[11] Authorities evacuated approximately 100 people hiding in the basement.[21] A survivor said that escapees were hampered by locked doors, forcing some of them to break a door open to escape.[73]Firefighters prevented the fire from spreading,[74] while three helicopters were deployed to dump water on the burning rooftop.[75]
By 07:00 on 23 March, Vorobyov reported the fire had been contained and mostly extinguished.[76] He released a video showing extensive damage to the building with the roof and upper rows of the concert hall completely collapsed.[77] By 11:30 that same day, the fire had been extinguished.[78]
The attack left at least 149 dead,[5] with possibly more dying of their wounds after the assault,[84] and 609 injured,[8] some of them critically.[17][85][54][86][87] Aside from gunshot wounds, some of the deaths were caused bysmoke inhalation.[88] According to the Russian Children's Rights Commissioner,Maria Lvova-Belova, six children were killed and seven more injured in the attack. Eight children also lost their parents.[89] The oldest fatality was a woman in her 70s. Most of the victims were from the northwestern edge of Moscow, including Krasnogorsk andKhimki.[88] Three citizens ofBelarus,[81][79] two fromKyrgyzstan,[80] and one each fromMoldova,[83]Armenia[90] andAzerbaijan[91] were among those killed.
The search for victims ended on 23 March.[92] The health department of Moscow said it expected to finish identification of bodies in two weeks.[48] As of 30 March, 134 fatalities had been identified.[93]
The members of Picnic posted onInstagram that they and their management were "alive and safe",[94] withTASS later reporting that they had been evacuated.[95] However, the band later said onVK that one of the band's staff members was missing;[96] the band's assistant director was on the merchandise stall and died in the attack.[97]
Alexei Filatov, an anti-terrorist operations expert, attributed the large amount of casualties to the fire brigade being delayed bytraffic congestion.[98]
The venue building on 30 March following the attack and the fireSAR satellite picture of the partially collapsed roof
As of 27 April, 12 people have been detained, including the four suspected assailants in a white car, who were captured[99] on the 376-kilometre (234 mi) mark of theM3 highway leading to the Ukrainian border (140 kilometres [87 mi] away), near the village ofKhatsun [ru] inBryansk Oblast,[100] and about 340 kilometres (211 mi) southwest of Moscow, on the evening of 22 March.[101][102][32] Russia coordinated with Belarusian security forces to prevent the suspects from crossing theBelarus–Russia border.[103][104] TheInvestigative Committee of Russia launched a criminal terrorist probe into the attack.[105] Officials later said that the attackers were not Russian citizens.[106]
State Duma deputyAlexander Khinshtein said thatTajik passports were discovered in the vehicle of the individuals in custody,[32] and the Russian Telegram channel Baza identified the four attackers as citizens ofTajikistan.[107][108] The Ministry of Internal Affairs of Tajikistan denied the involvement of three of its citizens, stating that the individuals named in the discovered passports had returned to Tajikistan months earlier and were working there.[109][110] In a phone call with Putin, Tajikistani PresidentEmomali Rahmon said that "terrorists have no nationality, no homeland and no religion".[111] On 12 April however, Tajikistani foreign ministerSirojiddin Muhriddin issued a statement condemning the alleged torture of the suspected attackers in Russian custody, calling it "unacceptable".[112] As Tajikistan signed adual citizenship agreement with Russia in the 1990s, it is possible that the perpetrators held dual Tajik and Russian citizenships.[113]
On 24 March, four suspects, Dalerjon Mirzoyev, 32; Saidakrami Rachabalizoda, 30; Shamsidin Fariduni, 25; and Muhammadsobir Faizov, 19, appeared atBasmanny District Court in Moscow and were charged withterrorism.[114][61][115][116] Mirzoyev, Rachabalizoda, and Fariduni pled guilty during the hearing.[117] All showed signs of having been tortured.[118] They had facial injuries and bruises and Rachabalizoda appeared with a bandage covering his missing right ear.[119] Faizov was brought into court in a wheelchair wearing a hospital gown, and appeared to have an eye missing.[120][121] They were ordered to remain inpre-trial detention until at least 22 May.[122]
A short video on Telegram allegedly showed Rachabalizoda being tortured by FSB agents, who cut off his ear and forced him to eat it.[123][63] In another interrogation video released by Russian state media, Fariduni said that he participated in the attack in exchange for 1 million rubles ($11,005), half of which he claimed to have already received by card transfer from individuals who contacted him on Telegram and whose identities he did not know.[124] He also said he was contacted about a month ago by a cleric's assistant. He then traveled to Turkey for a few days, returning to Russia with Rachabalizoda.[125][126] A leaked photograph showed Fariduni apparently being tortured byhaving his genitals shocked with aTA-57 field telephone.[127][128]
The suspects were officially identified as citizens of Tajikistan.[129] Mirzoyev, who was presented as the ringleader of the attacks, had an expired residency permit inNovosibirsk.[130] According toAgentstvo, three out of the four men had spent several months in Russia, but did not come to the attention of Russian authorities;[131]Meduza said that, according to one source, the alleged perpetrators met 3–4 weeks before the attack.[132]Izvestia alleged that two of the gunmen received instructions when travelling to Turkey.[133] According to Turkish media, the mentioned terrorist organization was based in an illegal mosque or madrasa called Darul Vefa İlim ve Amel Merkezi (Muvahhid Derneği) inBaşakşehir, Istanbul.[134][135] An analysis byThe New York Times matched the clothes of the four suspects with the gunmen in the attack.[63] If convicted, the four could receive a sentence oflife imprisonment.[136]
On 25 March, three more suspects appeared in court and were placed in pre-trial detention until 22 May. They were identified as a father, Isroil Islomov, and his two sons, Aminchon Islomov and Dilovar Islomov, and were accused of aiding and abetting terrorism. Dilovar Islomov was the previous owner of the car in which the four suspected attackers fled the crime scene.[137]
On 26 March, another suspect, identified as Alisher Kasimov, appeared in court. He rented out his apartment to the four suspected attackers and was also placed in pre-trial detention until 22 May.[138]
On 28 March, another suspect was detained,[139] with the Investigative Committee of Russia saying that he was involved in the "financing" of the attack.[140] He was later identified as Nazrimad Lutfulloi, although he was said to have been detained on 23 March, the day after the attack. He appeared in court on 29 March, was charged with conspiracy to conduct acts of terrorism and pleaded guilty to some of the charges. He was also placed in pre-trial detention until 22 May.[141][142][143]
On 31 March, the FSB announced the arrest of four people inMakhachkala andKaspiysk inDagestan on suspicion of providing funds and weapons to the attackers at Crocus City Hall.[144] They also allegedly planned to carry out another attack in Kaspiysk.[145]
In Tajikistan, authorities arrested nine people fromVahdat District on suspicion of involvement with the attackers on 25 March.[146] On 4 April, the FSB announced the arrest of three people in Moscow,Yekaterinburg andOmsk, two for allegedly transferring money for firearms and vehicles used in the attack, and the third for allegedly recruiting and financing the gunmen.[147][148]
On 7 April, the Investigative Committee of Russia announced that Crocus fire safety officials and the head of the Crocus fire brigade were being investigated for fire code violations, which carry a criminal charge of negligence, and placed under house arrest. Neither of them was named at the time.[149] On 27 April, Russian authorities announced that charges were filed against a twelfth suspect for allegedly providing communications logistics and financing to the attackers.[26]
On 29 August, the Basmanny District Court released the names of five additional suspects in the attack, all of whom were citizens of Tajikistan.[150]
A trial for 19 defendants in the attack began on 4 August 2025 at the 2nd Western District Military Court in Moscow.[151]
The FSB announced that twelve people[26] were arrested in connection with the attacks, with eight of them appearing in court as of 26 March.[152] Nine people were arrested in the town ofVahdat, Tajikistan in connection with the attacks.[153][154] The FSB announced the arrest of four people inDagestan, who were suspected of providing the gunmen with the weapons used.[155][156] On 1 April, the FSB released an interrogation video where one of the suspects reportedly confessed to transferring weapons fromMakhachkala toMytishchi.[157] Six suspects who could not be traced were reportedly chargedin absentia with recruiting and training the attackers.[158]
Dalerjon Barotovich Mirzoev, born on (1991-11-23)23 November 1991 (age 33). A native of Tajikistan, Mirzoyev had acquired a temporary registration for three months inNovosibirsk. However,RIA Novosti reported that his registration had expired.[160][161] His brother, Ravshanjon Mirzoev, joined the central branch of IS in 2016 and was presumed to have been killed in Syria in 2020. Ravshanjon was put on a wanted list by Tajik authorities and his family was put under surveillance.[162]
Saidakrami Muradali Rachabalizoda, born on (1994-02-04)4 February 1994 (age 31).[161] He was raised in the town ofVahdat, and dropped out of ninth grade and never received religious education. Before moving to Russia, he worked at a furniture factory in the town.[163] He communicated through an interpreter.[160]
Shamsidin Fariduni, born on (1998-09-17)17 September 1998 (age 27). A native of Tajikistan, he was officially employed at a factory inPodolsk, and was registered inKrasnogorsk.[160] Before moving to Russia, he worked in a bakery inHisar and was previously jailed in Tajikistan for sexual harassment before being freed in 2020.[125][164] He said he was contacted by a "Preacher" on Telegram who promised to pay him $10,500 if he "shot a few people".[159] He was married in 2022 and left behind an eight-month-old son.[164] Fariduni owned social media accounts under the name of Abdulloh Zargarov and Abu Abdulloh Zargar, where he posted photographs of himself inIstanbul and near the city'sFatih Mosque.[165]
Muhammadsobir Zakirjonovich Faizov, born on (2004-05-20)20 May 2004 (age 21). He was presented while nonresponsive in a wheelchair. Formerly employed in a barber shop inIvanovo, Faizov was temporarily unemployed and registered in that city.[160][161] He was described by his mother as lacking religious education, not regularly praying, and had planned to study abroad in China.[166] Faizov posted a drawing of anIS flag on hisVKontakte page in 2016, when he was twelve.[167]
Aminchon Isroilovich Islomov andDilovar Isroilovich Islomov, and their father,Isroil Ibrahimovich Islomov,[168] residing inTver Oblast. Dilovar was identified byNovaya Gazeta Europe as the previous owner of thegetaway car used by the perpetrators, though he was not named by the publication.[137][169] Dilovar said that he had sold the car a week before the attack and expressed shock at seeing it at the crime scene. A relative said that Dilovor and another relative had informed police in relation to the incident. According toMediazona, Aminchon denied involvement in the attack in court.[137] According toReadovka, one of these individuals was a Russian citizen.[168]
Alisher Khatamovich Kasimov,[170] a 32-year-old Russian citizen born in Kyrgyzstan. He admitted having rented out his apartment in Moscow Oblast onAvito to the four suspected attackers.[138]
Nazrimad Lutfulloi, a 23-year-old from the city ofBokhtar in Tajikistan, suspected of having helped finance the attacks.[171][172]
Yakubjoni Davlatkhon Yusufzoda, a citizen of Tajikistan who was illegally working as a construction worker.[173][174] He reportedly confessed to having sent money to the gunmen and attempted to evade arrest.[175]
Dzhumokhon Kurbonov, a citizen of Tajikistan who was initially detained on charges of petty hooliganism on 15 April and was subsequently charged with providing financial and communications assistance to the attackers on 27 April.[26]
Umedzhon Soliev, a citizen of Tajikistan who fled the country after becoming wanted for armed robbery.[176] He and two others allegedly brought weapons used in the attack from Dagestan to give to the perpetrators.[177]
Two of the alleged perpetrators during the escape, captured by public CCTV[178]
Islamic State (IS) claimed responsibility for the attack shortly after in a statement released viaTelegram by the IS-affiliatedAmaq News Agency,[19][179] stating that the attackers "retreated to their bases safely".[180] IS did not specify which one of its branches was responsible but all the information points toIslamic State – Khorasan Province (ISIS-K), which is the regional branch of the Islamic State that isactive in South-Central Asia, primarilyAfghanistan, as being responsible, most likely with involvement from the Islamic State branches in Turkey and possibly theCaucasus.[181][182] US officials said they had intelligence indicating that IS–KP had been planning an attack on Moscow.[33]
On 23 March, IS released photos of the attackers and a full report on the attack.[2][183] Later the same day, the IS-affiliated Amaq News Agency released a one and a half-minute-long video of the attack, filmed by one of the attackers. It showed an attacker with an assault rifle shooting victims, another attacker slitting a victim's throat with a knife, one more attacker with a backpack, and the filming attacker reciting thetakbir (Arabic:Allāhu ʾakbar), praising God and declaring thatinfidels will be defeated.[3]
American officials said that their intelligence revealed IS–KP had acted alone in the attack.[16] French presidentEmmanuel Macron stated that French intelligence had determined that "an Islamic State entity masterminded the attack and carried it out," and offered to help Russians investigate IS–KP.[184] On 25 March, Putin acknowledged that the attack was carried out by "radical Islamists", but suggested that Ukraine alone was involved.[185]
On 23 May, FSB chiefAlexander Bortnikov acknowledged ISIS-K's culpability in the attack, but insisted that Ukraine was involved.[186]
Commemoration of the dead near thememorial to Soviet soldiers in the center ofVolgogradMemorial video featuring a single candle on a billboard in theMoscow Metro on 23 March 2024Commemoration of the dead near the memorial to Soviet soldiers in the center ofRostov-on-Don on 24 March 2024Crocus City Hall restoration in June 2025
Despite apolice cordon, passers-by laid tributes outside Crocus City Hall following the attack,[187] while advertising billboards in Moscow displayed memorial posters showing a candle and the messageSkorbim ("We mourn").[73][188][189] Heavy equipment began clearing debris and structures at the scene on 24 March.[190] Makeshift memorials for the victims of the attack were also erected in cities across Russia.[191] On 25 March, three shopping malls belonging toAras Agalarov's Crocus International company, the company that ran theCrocus City Hall, were closed indefinitely.[184]
In an address to the nation on 23 March, President Putin announced that 24 March would be a day of national mourning for the victims of the attack and vowed to punish those responsible. Putin also said that all the attackers had been apprehended, and claimed they were trying to enter Ukraine with help from unknown persons on the Ukrainian side.[55][192][193] However, on 26 March, Belarusian president Lukashenko said the attackers first tried to flee into Belarus, but turned away because border security had been tightened after the attack.[43]
For his efforts in saving hundreds of concertgoers, 15-year-old Islam Khalilov was awarded the Medal of Russian Muslims "For Merit" by theRussian Council of Muftis[203] and received 1 million rubles ($10,785) from rapperMorgenshtern.[204] His family were Muslim immigrants fromKyrgyzstan.[59][58]
A friendly football match betweenRussia andParaguay scheduled on 25 March at theVTB Arena in Moscow was postponed indefinitely due to the attack.[205]
On 30 March, diplomats from around 130 countries, including ambassadors from "unfriendly states" such as the United States and European Union countries laid flowers at the site of the attack.[93]
On 2 April, Russia'sForeign Intelligence Service сhiefSergey Naryshkin said that FSB "received some information from the U.S. intelligence services that such a thing was unfortunately possible. But as our Russian colleagues said, the information was too general and did not allow us to fully identify those who committed this terrible crime."[206]
On 29 June, Andrei Vorobyov announced that the Crocus City Hall would no longer hold concerts after it is restored.[207]
Russia has a large number of Central Asian migrant workers, including those from Tajikistan. They are often employed in menial jobs with no security, but wages are better in Russia than their homeland. Since theRussian invasion of Ukraine in 2022, there have been frequent raids on living quarters and hostels, deportations of undocumented migrants, and fears over conscription to the Russian army. The precarious position ofTajik migrants increased after the Crocus City Hall attack.[208] Following the attack, the central Asian country ofKyrgyzstan warned against unnecessary travel to Russia from its citizens.[113]
According to a report by the NGONorth Caspian Institute, the attack and its coverage by the Russian media have caused an increase in xenophobic and anti-immigrant attitudes among Russians. Tajik immigrants working as taxi drivers in major Russian cities have reported clients refusing to ride with them because of their ethnicity. A Tajik barista in Moscow was verbally harassed on two occasions for having the same nationality as the suspected attackers. InVolgograd and several other cities, police raided cheap hostels which allegedly housed labor immigrants from Central Asia. In Moscow, local government employees advised immigrant street cleaners against going outside on 24 March because of "mass police raids against Tajiks and Uzbeks on the day of mourning".[209][210] An attack was reported on a newspaper stall occupied by Central Asian workers inBlagoveshchensk.[211] Employees of the barbershop where Muhammadsobir Faizov previously worked were subjected to death threats.[212]
A lawyer representing migrants toldMediazona that she had received 2,500 reported "acts of aggression" against migrants in the two days following the attack, adding that 30 cases of torture were also recorded following police raids into migrant hostels and dormitories nationwide.[213] Kyrgyzstan's foreign ministry, as well as the Tajikistani embassy in Moscow, issued travel warnings on its citizens in response to the reports.[214] On 12 April, Kyrgyzstan's foreign ministry lodged a protest after the family of one of its diplomats was physically assaulted and harassed by police who conducted an identity check on their apartment in Moscow on 8 April despite holdingdiplomatic immunity.[215]
Several pro-government news outlets such asReadovka began sending the message that "not all Tajiks are terrorists" and "disturbing the interethnic harmony in Russia and making us hate each other is the goal of our real enemies, Ukraine and the West". However, manyRussian nationalists accusedReadovka of becoming a "Tajik media outlet".[209]
On 24 March, RussianState Duma memberMikhail Sheremet (United Russia) called for the introduction of a total ban on immigration until Russia finishes its "special military operation", as the Kremlin calls its invasion of Ukraine. According to Sheremet, any foreigner entering Russia could be suspected to be a terrorist or saboteur.[216]Sergei Mironov, the leader ofA Just Russia – For Truth, called for the establishment of a visa regime, saying "It is necessary to regulate migration and counter terrorist attacks."[212] On 26 March,Novgorod Oblast also banned migrants from working as taxi drivers and selling beverages and tobacco, followed byNovosibirsk Oblast on 15 April.[217]
The knife used to cut off Rachabalizoda's ear during his torture was auctioned off by Evgeny Rasskazov, a member of the neo-NaziRusich Group.[218]
Putin and the FSB suggested that Ukraine was involved in the attack, without offering evidence.[185] Putin said the terrorists tried to flee into Ukraine and that "the Ukrainian side" had "opened a window" for them to crossthe border.[219] Russia and Ukraine have beenat war since 2014 and Russia has been undertakinga full-scale invasion of the country since 2022.Nikolay Patrushev, the secretary of theSecurity Council of Russia, claimed that Ukraine was behind the attack.[220]Alexander Bortnikov, the head of the FSB, said that "radical Islamists" prepared the attack with help from Ukrainian and Western "special services".[221]Maria Zakharova of theRussian foreign ministry accused the US of using Islamic State as a "bogeyman" to cover for Ukraine.[219] Following the arrest of a suspected "financier" of the attack, the Investigative Committee of Russia said on 28 March that it had recovered data suggesting that the attackers received "significant amounts of money andcryptocurrency from Ukraine".[222] On 5 April, it also announced that it had found images ofUkrainian flags and a Ukrainian postage stamp from a phone belonging to one of the suspects.[223] Latvia-based Russian news outletMeduza reported thatstatemedia in Russia were instructed by the Russian government to highlight possible "traces" of Ukrainian involvement.[224] A day after the attack, pro-Kremlin Russian television stationNTV broadcast anaudio deepfake purporting to confirm Ukrainian involvement.[225] On 26 March, Putin's claims were seemingly contradicted by his close ally, Belarusian presidentAlexander Lukashenko, who said the attackers had first tried to cross into Belarus.[226]
Ukraine denied any involvement in the attack,[24][227][228][229] and described the FSB's claims as "very doubtful and primitive"disinformation, noting that the border is heavily militarized on both sides, guarded by soldiers and drones,mined in many areas, and often shelled from both sides.[230] Ukraine'sForeign Ministry rejected the Russian allegations,[231] calling them a "planned provocation by the Kremlin to further fuelanti-Ukrainian hysteria in Russian society, create conditions for increasedmobilisation of Russian citizens to participate in the criminal aggression against our country, and discredit Ukraine in the eyes of the international community."[232] The ministry also implied that the attack was afalse flag operation by the Russian government.[233] Ukraine'sDefense Intelligence also said the attack was a "deliberate provocation by the Russian special services" at the behest of Putin.[232][234]
On 23 March, Ukrainian PresidentVolodymyr Zelenskyy said that Putin, "instead of dealing with his citizens of Russia, addressing them...remained silent for a day – thinking how to bring this to Ukraine."[235] On 25 March, Zelenskyy called Putin's claims "sick and cynical".[220] The US said there was no indication of Ukrainian involvement,[38][236] while UKChancellor of the ExchequerJeremy Hunt called the Russian allegations "a smokescreen of propaganda to defend an utterly evil invasion of Ukraine."[237] The Ukrainian-based militant groupsRussian Volunteer Corps andFreedom of Russia Legion also denied involvement.[238] Putin, who previously said the attack was caused by "radical Islamists" aided by the U.S. and Ukraine, later said that the act was not one of Islamic terrorism, as it demonstrated "a unique example of interfaith and interethnic unity".[239]
On 6 April, theTajikistani foreign ministry denied claims by Russian officials that Ukraine was recruiting mercenaries in the country through its embassy inDushanbe.[240] In March 2025, an investigation carried out by theInvestigative Committee of Russia found no Ukrainian involvement in the attack, contrary to previous public statements by Russian authorities.[241]
Putin wished those injured in the attack a speedy recovery and praised the doctors involved in treating the victims.[242] Prime MinisterMikhail Mishustin said that "the perpetrators will be punished. They do not deserve mercy."[185] A spokesperson forPatriarch Kirill of theRussian Orthodox Church said that he was "praying for peace for the souls of the dead".[243][244]
Chechen leaderRamzan Kadyrov released a statement condemning the attack,[246] as didYulia Navalnaya, the widow of opposition figureAlexei Navalny,[247] whodied five weeks before the attack.[248] Navalny associateIvan Zhdanov criticised Russian security services for their "catastrophic incompetence" and the FSB for being "busy with everything except its direct responsibilities – killing their political opponents, spying on citizens and prosecuting people who are against the war." Another associate,Leonid Volkov, said that the FSB "can't do the only job it really should be doing: preventing a real, nightmarish terrorist attack." Exiled oligarch and Putin criticMikhail Khodorkovsky said the attack showed the "impotence" of the Kremlin's security apparatus.[249]Novaya Gazeta Europe's chief editor,Kirill Martynov, criticized Putin for dismissing Western intelligence warnings and focusing resources on "LGBT extremists" and the war with Ukraine instead of guarding against "real threats".[211]
Opposition activists and human rights groups also criticized the torture inflicted on the suspects in the attack – Sergei Davidis ofMemorial said that Russian security services had "decided that this time there are no reasons to conceal their methods", adding that it was a "bad sign".[250]Tatyana Moskalkova, Russia'sCommissioner for Human Rights, also said that it was "absolutely inadmissible to use torture against detainees and accused persons", and reiterated that "any procedural operational actions must be carried out in accordance with the law".[251]
In late March 2024, more than 50% of Russians believed that Ukraine was responsible for the terrorist attack, while 27% saidIslamic State was responsible and 6% blamed the so-called "collective West", according to a survey conducted by OpenMinds. The Islamic State was blamed most often by young people aged 18-30 who opposed the war in Ukraine.[254]
On 3 April, Russia'sDefense Ministry announced that "around 16,000 citizens" had signed military contracts in the last 10 days to fight as contract soldiers in theRusso-Ukrainian War, with most of them saying they were motivated to "avenge those killed" in the Crocus City Hall attack.[255]
The United States embassy in Moscow expressed "sincere condolences to the Russian people",[256] while advising its citizens to avoid the area as they were "severely limited" in their ability to assist US citizens due to the limits placed on US personnel's ability to travel within Russia.[256][11][257] TheBritish embassy in Moscow condemned the attack and expressed its "sincere condolences to the relatives and loved ones of those hurt and killed in today's events."[60] TheSpanish embassy in Moscow also condemned the attack, expressing its thoughts and solidarity with those affected, and flew flags athalf mast.[258]
In IS–KP stronghold Afghanistan, where the rulingTaliban wereattacked by IS–KP just a day earlier,[259] theMinistry of Foreign Affairs called the attack in Russia "a blatant violation of all human standards" and called on neighboring countries to cooperate "against such incidents directed at regional destabilization".[260] Numerous countries' governments condemned the attack and expressed their condolences to the Russian people and families of the victims. In many nations, includingArmenia,[261]Azerbaijan,[262] andKazakhstan,[263] flowers were laid outside Russian embassies in memory of the victims of the attack. Tajikistan also warned against "fake information" about the alleged role of Tajik citizens in the attack.[264]United Nations Secretary-GeneralAntónio Guterres,[265] the European Union,[266] theNorth Atlantic Treaty Organization,[267] andMoussa Faki, theChairperson of the African Union Commission also condemned the attack and expressed condolences.[19][256][268]Pope Francis also expressed condolences to the victims and families.[269] The attack was also condemned byHezbollah andHamas.[270][271] On 30 March, foreign diplomats from the United States, European Union, Africa, Latin America, and representatives of the United Nations and other organizations attended a ceremony to lay flowers at the memorial near the Crocus City Hall.[272][273]
On 24 March, the French government raised its security alert to its highest level, with Prime MinisterGabriel Attal citing the Crocus City Hall attack as one of the reasons.[274] Following a phone call between French defence ministerSébastien Lecornu and his Russian counterpartSergei Shoigu on 3 April in which the latter suggested French collusion with Ukraine in the attack, presidentEmmanuel Macron dismissed the accusations as "ridiculous" and "indeed baroque and threatening."[275]
Since the attack, the Turkish government has expanded its crackdown on IS by detaining over 180 people suspected to have links to the group. This includes 147 detained on 26 March in raids across 30 provinces.[276][277]
According to the Turkish administration'sMinister of the Interior,Ali Yerlikaya, the country as of March 2024 carried out a total of 1,316 counterterrorism operations against IS since June 2023.[276] Of the 2,919 suspects who have been apprehended and questioned, 692 have been charged and jailed.[278]
On 8 April, Turkey announced that it had cancelled a 2018 bilateral visa-exemption agreement withTajikistan citing "security concerns" and that Tajik citizens will need toobtain a visa before traveling to Turkey.[240][279] The visa requirements went into effect on 20 April.[280]
On 16 April, the Tajik government announced that it would beimposing visa requirements on Turkish citizens visiting the country, citing the "principle of reciprocity" and claimed the rule change is a response to Turkish government measures on imposing a visa regime on Tajiks.[281][282][283] It has also advised its citizens visiting Turkey to "take necessary precautions" while those using Turkey as a transit route are encouraged to explore alternative travel routes.[284]
On 22 March 2025, on the first anniversary of the attack, a memorial was unveiled near the building in memory of the victims.[285][286][287][288] The monument was designed byAraz Agalarov, the owner of Crocus Group.[286]
^abc"تنظيم "الدولة" يقدم روايته عن هجوم موسكو" [The organization of the [Islamic] "State" presents its version about the Moscow attack].Enab Baladi (in Arabic).Archived from the original on 23 March 2024. Retrieved23 March 2024.
^ab"Теракт в "Крокус сити холле". Факты" [The terrorist attack at Crocus City Hall. Facts].TASS (in Russian). The Russian News Agency TASS.Archived from the original on 23 March 2024. Retrieved25 March 2024.
^Grudtsinov, Ruslan (24 March 2024)."Шеремет предложил запретить въезд мигрантов в Россию на время СВО" [Sheremet proposed banning migrants from entering Russia for the duration of the SMO (Special Military Operation)].Parlamentskaya Gazeta (in Russian).Archived from the original on 24 March 2024. Retrieved24 March 2024.
^"Russia lauding torture was unthinkable – now it is proud to do so".The Guardian. 26 March 2024.Archived from the original on 26 March 2024. Retrieved26 March 2024.The officer who cut off Rachabalizoda's ear had military patches including a far-right Totenkopf (dead person's head) previously worn by Nazi SS units. The knife he used has been auctioned off online as the "ear-cutter", according to Evgeny Rasskazov, a member of the far-right paramilitary battalion Rusich, who facilitated the sale.