A restaurant employee allegedly planned to help turn his own workplace into the scene of a terrorist attack. That detail should stop us cold.
According to a joint statement from the Israel Police, Israel Security Agency, and Israeli militia, Israeli authorities uncovered an extensive Hamas-linked terrorist infrastructure involving more than 30 operatives from Jerusalem and Judea and Samaria. Investigators say members of the network recruited armed cells, obtained weapons, sought guidance in preparing explosives, and planned attacks against Jewish civilians and Israeli security forces.
This was not an impulsive act by a single radicalized individual. It was allegedly an organized system with leaders, recruiters, weapons, training, targets, and multiple cells operating across different locations.
That distinction matters because too much of the world still discusses Palestinian terrorism as if every attack emerges spontaneously from anger or desperation. The infrastructure described by Israeli authorities tells a very different story. Terrorist organizations do not simply wait for violence to happen. They recruit people, exploit personal access, transfer knowledge, distribute weapons, and patiently build the machinery required to murder civilians.
Lt. Dean Elsdunne, international spokesperson for the Israel Police, told me the network was stopped before its members could carry out the alleged attacks.
“We caught this network before it could carry out the planned attacks against our civilians, real families with real lives,” Elsdunne said. “That is the goal of our operations: to act early, remove weapons from the streets, and dismantle terrorist networks before anyone is harmed.”
The investigation centered in part on Rashid Rishk and Tzabih Abu Tzabih, two Jerusalem residents whom authorities identified as members of Shabab al Aqsa, an organization affiliated with Hamas. Israeli investigators allege that the two established the infrastructure and recruited armed terrorist cells throughout Judea and Samaria.
Tzabih Abu Tzabih is the son of Misbah Abu Tzabih, who murdered two Israelis in a shooting attack in Jerusalem in October 2016. Rishk, meanwhile, was released in January 2025 as part of the hostage release framework.
Neither fact should be treated as incidental.
The alleged involvement of the son of a previous attacker illustrates how terrorist glorification can endure across generations. When murderers are celebrated as heroes, their violence does not necessarily end with their deaths. It can become an inheritance, a source of status, and a model for the next person prepared to act.
Rishk’s reported role raises another difficult question. Hostage agreements force Israel to make agonizing decisions because bringing captives home is a profound national and moral responsibility. But when prisoners are released through such frameworks, the international community rarely remains focused on what happens afterward.
If the allegations are proven, this case demonstrates why the risks do not disappear when an exchange is completed. Monitoring released operatives and dismantling the networks prepared to receive them are not peripheral concerns. They are essential parts of preventing the next kidnapping, shooting, or bombing.
The alleged restaurant plot is especially chilling because it shows how terrorists can weaponize familiarity. Authorities say Ahmad Azmi Bakri and Rishk intended to advance an attack at a restaurant in Modi’in where Bakri worked.
A workplace provides access. It provides knowledge of routines, crowded hours, entrances, exits, and security vulnerabilities. Customers see an employee and assume he is part of the ordinary rhythm of the space. According to the indictment, that trust was allegedly being turned into an operational advantage.
Investigators also allege that Muhammad Azmi Bakri instructed Rishk and Muhammad Abu Tzabih in preparing explosive devices after learning of their intention to conduct terrorist activity. Separately, Rishk and Tzabih allegedly planned a shooting attack against Israeli security forces in Al-Eizariya.
Taken together, these allegations reveal a network that was not centered on a single weapon or target. It was allegedly considering attacks involving firearms and explosive devices against both civilians and security personnel.
That is why the arrest of more than 30 suspected operatives matters far beyond the five men now facing serious indictments in Jerusalem. It exposes the breadth of the ecosystem required to move from hateful ideology to mass violence.
Weapons must be found. Recruits must be identified. Instructions must be delivered. Targets must be studied. Individuals must be persuaded that murdering Jews is not only permissible but honorable.
The public often sees only the final minutes of a terrorist attack. Police officers and intelligence personnel must uncover the months of preparation that precede it.
The operation also demonstrates why cooperation among the Israel Police, ISA, and Israeli militia is indispensable. The alleged network crossed geographic and jurisdictional boundaries, connecting Jerusalem with cells throughout Judea and Samaria. No single agency could effectively confront a structure of that scope alone.
According to Elsdunne, preventing attacks depends on sustained coordination across Israel’s security services.
“Israel Police officers work constantly alongside our partners in the ISA and IDF to thwart those seeking to harm civilians or build terrorist infrastructure targeting our communities,” he said. “Whether officers are standing ready to respond immediately or striking early, the objective remains the same: protecting civilian lives.”
The weapons seized are tangible evidence of what authorities say was moving toward execution. They are also a reminder that successful counterterrorism often produces no dramatic images of the lives saved. A restaurant remains open. Commuters return home. Police officers finish their shifts. Families never learn how close they may have come to tragedy.
Prevention is almost invisible by definition.
That invisibility can lead foreign observers to underestimate the threat and treat Israeli security measures as though they exist in a vacuum. But restrictions, surveillance, arrests, and intelligence operations do not arise solely from theoretical fears. They are responses to networks such as the one authorities say they have now dismantled.
At the same time, indictments are not convictions, and each defendant is entitled to the legal process now underway. More indictments against suspects from Judea and Samaria are expected.
Yet due process should not prevent us from confronting the broader pattern described by investigators. Hamas is not merely an armed force operating from Gaza. It is an ideological and organizational movement that seeks to cultivate operatives wherever it can reach them.
DEAD TERRORISTS CAN’T TALK: THE ‘MADURO METHOD’ JUST ARRIVED IN GAZA
The central lesson is not simply that Israeli authorities stopped another plot. It is that terrorism depends on infrastructure long before blood is spilled.
The world notices an attack when people are already dead. Israel’s security forces are required to recognize it while the restaurant is still full, the weapons are still hidden, and the plotters still believe no one is watching.
Ariella Noveck is a journalist specializing in antisemitism and Middle East affairs, with extensive experience covering Jewish communities worldwide.