TECH

Europol dismantles "The Com" network's digital infrastructure

Europol, in coordination with law enforcement agencies from nine European countries, identified and moved to take down 4,340 URLs linked to "The Com" network during June and July 2026. This technical intervention aimed to dismantle the online infrastructure of an organization associated with violent extremism and the sharing of child sexual abuse material, with the goal of halting the recruitment and systematic extortion of minors online.

Law enforcement authorities confirm that "The Com" network operates without a structured ideology or central command. The organization is characterized by a nihilistic and misanthropic belief system, in which the use of violence often serves as an end in itself. Certain factions within the network adopt right-wing violent extremist doctrines and accelerationist theories.

The goal stated by these subgroups involves the collapse of social structures—a scenario promoted through physical attacks and the explicit corruption of younger demographics. The European Union Internet Referral Unit (EU IRU), a Europol entity, coordinated the operation in partnership with Spain's Intelligence Center against Terrorism and Organized Crime (CITCO).

This criminal ecosystem utilizes social media platforms, messaging apps, and video games to groom and radicalize members. Recruitment techniques involve distributing seemingly harmless propaganda across public, accessible platforms. Social media algorithms redirect vulnerable young people toward this content, creating a digital path that funnels victims into private forums or closed chat rooms.

Within these restricted spaces, the violence takes on severe physical and psychological dimensions. Criminals incite self-harm, animal torture, and the production of child sexual abuse material. Victims are kept under the network's control through sexual extortion, commonly known as "sextortion." Europol Operation 2026: Factual Data

-Operation Period: June and July 2026.

-Technological Assets: 4,340 URLs submitted for removal (“Referral Action Days”).

-Participating Countries: Portugal, Belgium, Finland, Hungary, Ireland, Luxembourg, the Netherlands, Spain, and Sweden.

-Identified Crime Categories: Child sexual abuse, physical mutilation, animal cruelty, and unstructured terrorism.

Material disseminated within the extremist infrastructure serves to amplify the notoriety of groups or individual profiles. Producing extremist material yields reputational gains within the group—a social dynamic where creating or sharing the most violent content confers power over victims. This material often transitions into live broadcasts featuring an audience and support from other members.

The group’s terminology includes practices such as “blood walls” and “cutting signs.” Members use blood to draw symbols or force individuals to carve the extortionist’s name into their own skin. Images or videos of these acts fuel the infrastructure and legitimize the perpetrator in the eyes of the group. Online terrorist content blends Satanist symbols with the lexicon of violent right-wing extremism.

Law enforcement efforts intercept guides for manufacturing explosives and threats of doxing... Police detected circulating technical manuals designed to instruct young people on how to manufacture improvised explosives, orchestrate attacks in public spaces (referred to as “manhunts”), commit arson, and carry out homicides. The documentation also includes tutorials on radicalization techniques and the sexual exploitation of minors.

Perpetrators use doxing and swatting methods to terrorize victims or critics. The tactic involves stealing and exposing personal data online to trigger a hoax call to the police. The perpetrator reports a fake homicide scenario at the victim's address, resulting in an armed police intervention at the scene. The attack aims to deeply intimidate the target.

The official report "European Union Terrorism Situation and Trend Report" (EU TE-SAT 2026) officially classifies nihilistic violent extremism as a destabilizing ideological factor and notes deliberate attempts to sabotage the structures of modern societies. Europol’s European Counter Terrorism Centre (ECTC) confirms that this ecosystem poses a major global risk, with a primary focus on the corruption of minors—casting them in the roles of both victim and perpetrator.

The ECTC has received hundreds of requests for formal assistance from European Union Member States regarding offenses linked to these networks. The response to this issue is combined with the “COMPASS” project and the European Commission’s “ProtectEU” program—initiatives that aim to actively monitor the exploitation of young people in virtual environments such as video game consoles and social media platforms.

According to an official Europol statement, an estimated 4,340 URLs linked to nihilistic violent extremism were flagged during an initiative organized by the EU Internet Referral Unit (EU IRU) and the Spanish Intelligence Centre against Terrorism and Organised Crime (CITCO). The operation took place over several weeks: throughout June and July 2026, Europol supported an action targeting online nihilistic violent extremist content. Researchers from nine countries participated in these "Referral Action Days" with the shared goal of disrupting "The Com's" online ecosystem, limiting the spread of propaganda, and uncovering new investigative leads.

A distinction highlighted by various analyses is important: flagging or referring content is not the same as confirming its removal. Authorities reported the addresses to online service providers, but this does not necessarily mean there was independent confirmation that every link had actually been taken down. Nevertheless, a coordinated flagging campaign can significantly reduce access to harmful material, generate intelligence for ongoing cases, and expose patterns of platform usage by extremist and criminal networks.

This action is part of a broader framework. It complements the efforts of Project COMPASS—coordinated by Europol’s European Counter Terrorism Centre (ECTC)—which brings together law enforcement authorities from EU Member States and external partners to combat "The Com."

What is "The Com"? The name derives from "Community." Europol describes it as a diffuse network of fringe online groups adhering to a misanthropic, nihilistic worldview—lacking a unified ideology or centralized structure—where violence is often an end in itself. Some factions have adopted violent far-right beliefs and accelerationist views, seeking to hasten societal collapse through violent attacks and the corruption of youth.

It operates like a funnel. Affiliated groups recruit and groom victims via social media, messaging apps, and gaming platforms, coercing them into self-harm, violence, and the production of child sexual abuse material—often through extortion. They distribute propaganda on accessible platforms to attract young people, steering potential members and victims toward private forums and chat rooms where radicalization and victimization take place; victims are typically coerced into remaining under the perpetrators' influence through sexual extortion.

The network is organized into subgroups with distinct focuses. According to a Europol report published earlier this month, "Cyber ​​Com" focuses on activities such as distributed denial-of-service (DDoS) attacks, doxing, swatting, and ransomware, while "Offline Com" groups primarily engage in real-world attacks, such as arson, stabbings, or homicide. Sexual extortion groups groom and extort—primarily—underage girls into performing sexual or violent acts; these acts are recorded and subsequently used to coerce the victims into committing increasingly degrading deeds.

The internal logic is competitive and cruel. According to Europol, the more extreme and harmful the content a user or group manages to produce or extort, the higher their status within the online community. These acts are frequently livestreamed on social media platforms—where viewers offer encouragement—and are later saved and disseminated. Flagged content has included so-called "blood walls"—paintings made with blood displaying the extortionist's pseudonym and affiliation—and "cut-signs," where victims are forced to carve the extortionist's name into their own bodies.

Regarding the results of Project Compass, Europol reported that the year-long coordinated operation led to 30 arrests and identified 179 suspects linked to "The Com," with investigators identifying 62 victims and directly protecting four of them. Launched in January 2025 and led by the ECTC, it brought together authorities from 28 countries. The scale of the problem is indicated by the demand itself: over the past two years, the ECTC has observed the network evolve into a global threat—particularly regarding minors acting as both victims and perpetrators—having received hundreds of requests from Member States and third parties concerning crimes committed within "The Com."

How flagging works at the European level...The EU IRU, based in The Hague, is the European instrument for this type of operation. It detects, analyzes, and flags publicly available online content related to terrorism and violent extremism, aiming to restrict its accessibility and facilitate the attribution of crimes and the prosecution of perpetrators. "Referral Action Days" are part of this set of capabilities and can be either thematic or platform-specific: thematic actions are flagging campaigns targeting online content related to a specific theme identified across multiple platforms.

It is worth distinguishing between two regimes. There is voluntary flagging, where content is assessed by the platform against its terms of service, and there is the binding mechanism established by Regulation (EU) 2021/784 on addressing the dissemination of terrorist content online. This regulation aims to ensure the rapid removal of publicly accessible terrorist content through cooperation and coordination among Member States, Europol, and hosting service providers, applying to all entities offering services in the EU. Voluntary cooperation through flagging coexists with these binding instruments.

mundophone