Nihilistic Violent Extremism: Europe Faces Online Threat

Europe is confronting a changing security landscape in which the threat of terrorism is no longer defined only by established jihadist organisations or traditional ideological movements. A newer and increasingly difficult phenomenon is emerging from online communities where young people can be exposed to extreme violence, encouraged to participate in attacks and rewarded with status for producing shocking content.

European security officials are describing this phenomenon as nihilistic violent extremism. Unlike conventional terrorism, it may not revolve around a coherent political, religious or ideological objective. Instead, violence itself can become the attraction.

EU Counter-Terrorism Coordinator Bartjan Wegter has warned that these online networks can encourage real-world violence while making prevention particularly difficult because many participants are young, have no prior criminal history and operate within encrypted digital communities.

The warning comes 25 years after the September 11, 2001, attacks in the United States fundamentally transformed international counter-terrorism. Jihadist networks remain a major threat to Europe, but authorities increasingly fear that the internet has created a new Environment in which violent behaviour can spread without the traditional organisational structures associated with terrorism.

What is nihilistic violent extremism?

Nihilistic violent extremism is an emerging form of extremist violence in which brutality, destruction and notoriety can matter more than a defined political objective.

Traditional terrorist movements generally use violence to achieve a specific ideological or political purpose. They may seek to change government policy, establish a religious state, promote separatism or intimidate a population into supporting a particular cause.

Nihilistic networks can operate differently.

Participants may be motivated by fascination with violence, a desire for recognition, personal grievances, social status or the thrill of producing increasingly extreme material. Some communities have no single ideology and can contain individuals influenced by multiple extremist subcultures.

European authorities say that the online environment can turn violent behaviour itself into a form of social currency. The more shocking the material, the greater the attention or status a participant may receive inside a community.

Why European authorities are increasingly alarmed

The biggest concern is that online activity is no longer remaining entirely online.

Authorities have identified cases in which young people consumed or produced violent material online before carrying out attacks in the physical world. The internet can provide encouragement, audiences, instructions and recognition before and after an attack.

That creates a difficult security problem because investigators may not be looking for members of a conventional organisation preparing a coordinated operation. They may instead encounter isolated young people whose only visible connection to an extremist network is their online activity.

Such individuals may have no criminal history, no known association with an established terrorist group and no obvious ideological motive.

By the time authorities identify them, the transition from online fascination to real-world violence may already have occurred.

Over 4,300 URLs linked to “The Com” were identified

The scale of the online ecosystem became clearer during a Europe-wide operation in June and July.

Investigators from nine European countries identified and referred approximately 4,340 URLs associated with an online ecosystem known as “The Com”.

The operation was coordinated with Europol and was intended to disrupt extremist material, limit propaganda distribution and generate new investigative leads.

The figure does not represent the number of people in the network. Authorities say the exact size of The Com remains unclear because the ecosystem is fragmented and does not operate like a single centralised organisation.

Instead, it consists of loosely connected online communities that can shift between platforms, private forums, messaging services and gaming spaces.

What is “The Com”?

The term “The Com”, short for “Community,” is used to describe a loose collection of online groups associated with nihilistic and violent subcultures.

According to European law enforcement assessments, these communities can combine extreme violence, self-harm, animal cruelty, cybercrime, sexual exploitation and extremist propaganda.

Some groups have right-wing extremist or accelerationist influences, while others may have little conventional ideology at all.

This lack of a unified belief system makes the networks particularly difficult to classify. Two individuals operating within the same ecosystem may share an appetite for violent content without sharing the same political worldview.

That is one reason Europol does not treat nihilistic violent extremism as a conventional category in its terrorism statistics.

Why the lack of ideology makes prevention harder

Traditional counter-terrorism investigations often depend partly on identifying an ideological pathway.

Investigators might track extremist propaganda, known organisations, radical preachers, political networks or specific ideological communities.

Nihilistic violence can offer fewer such clues.

An individual may consume violent content without expressing a conventional political objective. They may then progress toward increasingly extreme behaviour because of online social pressure or the desire to achieve recognition.

This can make standard risk assessments less reliable.

Officials cannot necessarily assume that someone who lacks a clear ideological manifesto poses no serious threat. A person can be highly motivated to commit violence even when that motivation does not fit a familiar political category.

Young people are increasingly at the centre of the threat

One of the most disturbing characteristics of the emerging ecosystem is the prominence of minors and very young adults.

European authorities say many participants are young boys who encounter extremist content through mainstream social platforms, gaming communities or messaging apps before being drawn into increasingly closed groups.

Some networks can simultaneously function as recruitment spaces and victimisation environments.

Young people can be exposed to material that begins as disturbing humour or shock content and gradually escalates toward extreme violence, self-harm or abuse.

That progression makes early intervention especially difficult because the initial online behaviour may not look like preparation for terrorism or a violent crime.

The Finland case shows how online violence can move offline

One case cited by European authorities involved a 16-year-old boy in Finland in 2025.

The teenager stabbed three female student colleagues. Before and around the attack, he allegedly shared a manifesto in WhatsApp groups, recorded the incident on Snapchat and sought assistance online to preserve the video for later retrieval.

According to the European assessment, the attacker described a desire to do something significant and exciting, rather than presenting a conventional political motivation.

The case illustrates precisely the concern surrounding nihilistic violent extremism: the attraction can centre on the act itself, the attention generated by it and the online identity created around violence.

For counter-terrorism agencies, that is fundamentally different from tracking a person who is openly preparing an attack to achieve a clearly defined political objective.

An Italian case involved a teenager seeking online notoriety

European authorities have also cited an Italian case involving a 15-year-old boy who allegedly planned a murder with the goal of gaining notoriety online.

Investigators reportedly found violent material on his smartphone, including images and videos involving assaults, murders and school shootings.

The presence of such material does not automatically establish criminal intent, but in the context of an alleged plan for murder it became part of the wider evidence examined by authorities.

The case demonstrates another concern: young people can move through digital environments saturated with violent imagery long before law enforcement becomes aware that they may be considering real-world violence.

European terrorism data still shows jihadism remains a major threat

The emergence of nihilistic violent extremism does not mean that Europe’s traditional terrorist threats have disappeared.

According to Europol’s latest terrorism assessment, 45 terrorist attacks were reported across 10 EU member states in 2025. The total includes completed attacks, failed attacks and plots that were disrupted.

Jihadist terrorism remained the largest category, accounting for 24 of the 45 attacks.

Europol also recorded 486 terrorism-related arrests across 21 EU countries, with roughly 71% connected to jihadist offences.

These figures demonstrate that jihadist networks and individuals inspired by jihadist propaganda remain a major component of Europe’s security threat.

The new online phenomenon therefore represents an additional layer rather than a replacement for established forms of terrorism.

Why minors are appearing more often in terrorism cases

The growing involvement of minors is one of the most concerning trends identified by European authorities.

A significant proportion of people arrested for terrorism-related offences in recent cases have been very young, reflecting the increasing role of digital platforms in radicalisation and mobilisation.

Young people can access extremist content without travelling, joining a physical organisation or meeting established militants.

They may also receive encouragement directly from other young users, creating peer networks that can be harder for parents, schools and authorities to detect.

This changes the prevention challenge fundamentally.

Authorities must identify behavioural signals before a young person’s online activity turns into physical violence while also avoiding interventions that criminalise ordinary adolescent behaviour or legitimate political expression.

The 764 network is another major concern

One network receiving significant attention from European authorities is 764, an online community associated with violent and abusive activity.

The group was founded by American Bradley Cadenhead, who is serving a lengthy prison sentence for child pornography and sexual offences.

Despite his imprisonment, authorities say the network and affiliated communities remain active.

European investigators have linked parts of the 764 ecosystem to extreme violence, exploitation and efforts to manipulate young people.

The network demonstrates how online communities can survive the removal or imprisonment of individual leaders because the wider ecosystem does not necessarily depend on a conventional hierarchy.

Germany case highlights the scale of potential violence

Authorities have also pointed to a German case involving a 20-year-old man believed to be a leading member of the 764 ecosystem.

According to the European assessment, he faced 123 charges involving acts described by investigators as extraordinarily brutal, including allegations involving murder, rape and sexual abuse of children.

The case illustrates how online communities associated with violence can move far beyond extremist speech into serious criminal exploitation.

It also demonstrates the difficulty of defining where cyber-enabled abuse ends and terrorism begins.

Authorities may encounter behaviour that simultaneously involves organised criminality, extremist content, sexual exploitation and violence, making traditional legal categories difficult to apply cleanly.

The internet has become a primary security battleground

Wegter argues that Europe’s security environment has fundamentally changed because so much extremist activity now occurs online.

He has noted that approximately 85% of investigations now involve a digital component, illustrating how central online evidence has become to modern law enforcement.

For investigators, this means that social media profiles, messaging applications, gaming platforms, cloud storage and online financial activity can be as important as physical surveillance.

But the digital environment also creates obstacles that did not exist on the same scale in previous decades.

Encrypted communications, rapidly changing online identities and platforms hosted outside Europe can make evidence difficult to obtain.

Encryption creates a difficult privacy debate

European law enforcement agencies increasingly argue that they need greater access to digital evidence to investigate terrorism and serious crime.

Privacy advocates, however, warn that expanding surveillance powers can undermine the right to private communication and expose ordinary users to unjustified intrusion.

This creates a difficult policy balance.

Law enforcement must be capable of investigating genuine threats without treating every private digital conversation as a potential security case.

The challenge becomes even more complicated when teenagers are involved because authorities must balance public safety with child protection, privacy and freedom of expression.

Wegter’s argument is that law enforcement tools need to reflect the reality that modern investigations increasingly take place inside digital environments.

Why encrypted communities are difficult to monitor

Extremist communities can use multiple layers of digital communication.

Public platforms may be used to attract attention or recruit new participants, while private messaging applications and encrypted forums can be used for more sensitive discussions.

This creates a funnel in which harmful material begins in relatively accessible spaces and gradually moves into closed networks.

By the time investigators identify a particular individual, some of the most important interactions may have taken place in environments where traditional monitoring is extremely difficult.

This is one reason European agencies are placing greater emphasis on cooperation with technology companies and digital platforms.

AI is amplifying violent extremist material

Artificial Intelligence is adding another layer to the problem.

European authorities say criminals and extremist networks are increasingly using AI-generated images, audio and video to produce propaganda and attract attention.

Deepfakes, memes, GIFs and other highly shareable formats can make violent material easier to distribute and harder for users to distinguish from authentic content.

AI-powered bots can also automate aspects of recruitment and communication, allowing extremist communities to reach more people with less direct human effort.

This can dramatically increase the scale at which harmful content circulates.

AI can help create propaganda at unprecedented speed

Traditional propaganda production can require specialised skills in graphic design, video editing and translation.

Generative AI can reduce those barriers by allowing users to create images, audio and written material much more quickly.

A violent extremist community can potentially produce multiple versions of a message for different platforms, languages and audiences without maintaining a large media operation.

The resulting content can also be constantly modified to avoid automated moderation systems or adapt to online trends.

That creates a difficult race between content producers, technology companies and law enforcement.

AI is also being used for attack preparation

European authorities say AI-driven applications are increasingly being used not only for propaganda but also for research related to potential attacks.

The concern is that general-purpose AI tools can lower the technical barriers to certain forms of harmful activity.

At the same time, the same systems can be used by defenders to identify vulnerabilities, analyse threats and strengthen cyber defences.

This produces a dual-use problem.

The technology itself is not inherently extremist. Its impact depends on how it is used, making regulation and security controls more complicated than simply banning a particular tool.

The Com is not a traditional terrorist organisation

One of the most important distinctions in this emerging threat is organisational structure.

Traditional terrorist organisations tend to have identifiable leaders, recruitment systems, formal propaganda channels and geographic areas of operation.

The Com is much more fragmented.

Its communities can form, dissolve and move between platforms without requiring a central authority. Individuals can act independently while drawing inspiration, encouragement or technical information from the wider ecosystem.

This decentralisation can make the network harder to dismantle because removing one group or account does not necessarily eliminate the underlying culture.

Why conventional counter-terrorism models may struggle

Counter-terrorism agencies were historically designed to identify organised threats.

Investigators searched for known extremists, financial transfers, physical meetings, weapons procurement and communications between members of established groups.

Online nihilistic violence disrupts that model.

A teenager can become radicalised at home, interact with anonymous users abroad and decide independently to attack a target without ever meeting another participant face to face.

There may be no financial trail, no weapons network and no formal membership list.

The most important clues may exist only in digital conversations, browsing histories or private online communities.

Schools and parents face a new prevention challenge

The youth dimension means prevention cannot depend exclusively on intelligence agencies and police.

Schools, parents, mental-health professionals, technology companies and community organisations may all encounter warning signs before a criminal investigation begins.

The challenge is recognising genuinely dangerous behaviour without treating every teenager who views disturbing content as a future offender.

Authorities therefore need risk-based approaches that distinguish curiosity, exposure, online bullying and ordinary adolescent experimentation from escalating patterns involving threats, targeted violence, coercion or attack planning.

Early intervention can be particularly important because young people can move rapidly between different online communities and identities.

The problem of violent content as entertainment

One of the most disturbing aspects of the emerging threat is the transformation of real violence into entertainment.

Videos of assaults, killings and other extreme acts can be consumed, shared and discussed as though they were fictional entertainment.

Within some online communities, producing more shocking material can increase a person’s status.

This reverses the traditional relationship between violence and propaganda. Instead of violence serving an ideological message, the violence itself becomes the message.

That can make prevention extremely difficult because the objective is not always to persuade someone to support a political cause. It may simply be to push that person toward more extreme behaviour.

Why online status can become a pathway to violence

Social status is a powerful motivator in many online communities.

Users receive recognition through views, comments, followers and reactions. In extremist communities built around shock content, those incentives can become distorted.

The more extreme the material a person produces, the more attention they may receive.

This can create an escalating cycle in which increasingly violent actions become a means of gaining recognition.

European officials believe this dynamic helps explain why some young people appear willing to commit acts that have little obvious political or ideological purpose.

Europe must deal with two overlapping threats

The new phenomenon does not replace jihadist terrorism.

Europe must instead manage two overlapping challenges: established ideological terrorism and increasingly decentralised online violence.

Jihadist organisations continue to inspire or direct attacks, while individuals influenced by digital extremist ecosystems can act with minimal organisational support.

The two threats can also overlap. A person with a particular ideological belief may consume material from nihilistic networks, while a nihilistic community may absorb extremist ideas without adopting them systematically.

This blurring of categories makes security assessments more complicated.

Why the definition of terrorism matters

The classification of an act as terrorism can affect which laws apply, what investigative powers authorities can use and which agencies become involved.

But nihilistic violence does not always fit neatly into traditional terrorism definitions.

Some incidents may be prosecuted as ordinary violent crimes, child exploitation, cybercrime or hate crimes, even when they occur within extremist online ecosystems.

Europol’s decision not to maintain a standalone statistical category for nihilistic violent extremism reflects this complexity.

The underlying security threat can nevertheless be significant regardless of which legal label is ultimately applied.

Europe’s 2025 terrorism landscape in numbers

Why the 9/11 anniversary gives the warning added significance

The latest European warning comes as countries mark the 25th anniversary of the September 11 attacks.

Those attacks defined an era in which terrorism was associated with large, hierarchical organisations capable of planning complex operations across borders.

A quarter-century later, the security environment has changed dramatically.

Extremist content can spread instantly, communication can occur without physical meetings and young people can be drawn into harmful communities from almost anywhere.

The threat has therefore become more decentralised even as the consequences of individual attacks can remain severe.

The role of social media companies is becoming harder to ignore

Technology platforms are at the centre of Europe’s response because many extremist ecosystems rely on social networks, gaming platforms, messaging applications and video services.

Platforms can remove harmful material, suspend accounts and provide information to investigators in accordance with applicable laws.

But moderation at scale remains difficult.

Extremist communities constantly change language, create new accounts and migrate between services. Some material may also appear ambiguous to automated systems because it uses coded language, memes or symbols whose meaning depends on the surrounding community.

That means technology companies increasingly need to understand not only individual pieces of content but also the networks and behavioural patterns connecting them.

Encrypted platforms create an enforcement gap

Encryption protects billions of legitimate users who need secure private communication.

But the same protections can be exploited by criminal and extremist groups.

This produces one of the most contentious debates in modern Cybersecurity: how can governments investigate genuinely dangerous activity without creating systems that expose ordinary communications to unnecessary surveillance?

There is no simple technical solution.

Any approach that weakens encryption universally can create risks beyond terrorism, including cybercrime, corporate espionage and attacks on private individuals.

European policymakers therefore face the difficult task of improving lawful access to evidence while protecting the broader security and privacy benefits of encrypted communication.

International cooperation is essential

Online extremist networks ignore national borders.

A teenager in one European country can communicate with someone in another continent, consume material hosted in a third jurisdiction and use a platform headquartered somewhere else entirely.

That makes international cooperation essential.

European authorities need to exchange intelligence rapidly, coordinate investigations and work with technology companies operating under different legal systems.

Wegter has stressed that developments outside Europe’s borders can have direct implications for European security, especially when global online communities amplify harmful content.

Why prevention must begin before an attack

The diffuse nature of online violence makes prevention more important than ever.

Waiting until a person acquires weapons, identifies a target or begins travelling toward an attack location may be too late.

Investigators increasingly need to identify patterns of escalating behaviour at earlier stages.

That may involve assessing threatening posts, violent fantasies, coercive behaviour, targeted harassment, attempts to recruit peers or searches for attack-related information alongside other contextual signals.

However, prevention must remain evidence-based because aggressive monitoring of large populations can produce false positives and undermine trust.

The challenge is to identify genuine risk without turning every troubling online interaction into a terrorism investigation.

AI makes the prevention challenge even harder

Artificial intelligence could complicate this task further because it enables both extremists and defenders to operate at greater scale.

Attackers can generate content quickly, automate communications and modify material to evade moderation. Defenders can use AI to detect patterns, prioritise investigations and identify networks of suspicious activity.

This creates an arms race in which each side can increasingly automate parts of its operation.

The outcome may depend less on whether AI is available and more on who can deploy it effectively, under what safeguards and with what level of human oversight.

Europe is confronting a threat that does not look like traditional terrorism

The rise of nihilistic violent extremism represents a major shift in how violence can be organised, encouraged and executed.

The threat is younger, more decentralised and more digitally dependent than many traditional terrorist structures. Participants may have no criminal history and may not belong to an identifiable organisation.

Some may not even consider themselves political extremists.

Yet their behaviour can still produce serious violence.

That is what makes the phenomenon so difficult for security agencies: the absence of a conventional ideology does not necessarily mean the absence of dangerous intent.

What governments need to balance

European governments now face several competing priorities.

They need stronger digital investigative capabilities, closer cooperation with technology companies and better methods for identifying emerging threats among young people.

At the same time, they must protect privacy, avoid excessive surveillance and ensure that counter-terrorism powers are not stretched so far that lawful speech and ordinary online activity become security concerns.

The rise of young people in these networks makes that balance even more important because minors require particular care when governments and technology companies intervene in their online lives.

Effective prevention will therefore require a combination of intelligence, technology, Education, child protection and community intervention rather than relying solely on arrests after violence occurs.

The new European security challenge is increasingly digital

Europe’s terrorism landscape is changing, but the most important shift may not be the emergence of one new organisation. It is the transformation of how violent behaviour spreads.

The Com, 764 and similar ecosystems demonstrate how online communities can connect vulnerable young people with violent content, encourage increasingly extreme behaviour and turn real-world attacks into a source of digital status.

The absence of a coherent ideology can make these networks harder to recognise than traditional extremist organisations. The absence of a criminal history can make individual perpetrators harder to identify. And encrypted communications can make the most important evidence difficult to access.

At the same time, jihadist terrorism remains a serious and measurable threat across Europe, meaning governments cannot shift all their resources toward the newer phenomenon.

Europe enters a new era of counter-terrorism

The emerging threat of online-driven nihilistic violence shows how different the security environment has become since September 11, 2001.

The old model of terrorism involved organisations, commanders, physical training camps and carefully coordinated operations. Today’s threats can emerge from decentralised digital communities where young people interact anonymously, consume violent content and encourage one another without ever meeting in person.

Europol’s identification of around 4,340 URLs associated with The Com during a coordinated operation involving nine countries offers a sense of the scale of the digital ecosystem, even though the network’s actual membership remains unknown.

Jihadist terrorism remains Europe’s leading terrorism threat, accounting for 24 of the 45 attacks recorded in the EU in 2025 and the majority of terrorism-related arrests. But authorities are increasingly concerned that another form of violence is developing underneath the traditional categories.

This new threat is driven not necessarily by political programmes but by violence itself, online recognition and the ability of digital communities to turn extreme behaviour into status.

The response will require more than traditional counter-terrorism policing. Europe will need better digital investigations, responsible cooperation with technology platforms, stronger international intelligence sharing and prevention programmes capable of identifying vulnerable young people before online fascination becomes physical violence.

The central challenge is maintaining that security response without sacrificing the privacy and civil liberties that democratic societies are designed to protect.

As AI makes violent content easier to produce and online communities increasingly shape real-world behaviour, the distinction between cyber space and physical security is becoming less meaningful. For European authorities, that means the next generation of counter-terrorism may begin not at a border or a weapons facility, but inside a phone, a gaming platform or an encrypted online community.