Europol Targets The Com Network Behind Cyberattacks and Extreme Online Violence

Europol has escalated its multinational offensive against “The Com,” a decentralized nihilistic extremist network responsible for orchestrating ransomware campaigns and violent extremism across digital platforms.

The operation, dubbed Project COMPASS, has been running since January 2025 under coordination from the European Counter Terrorism Center (ECTC) and now includes 30 partner nations, spanning European Union member states alongside Australia, Canada, New Zealand, the UK, and the United States.

The Com, short for “Community,” functions as a transnational virtual network (TVN) operating openly across social media, messaging apps, gaming platforms, and music services. Investigators have identified three primary operational branches within the network.

Europol Targets The Com Network Behind Cyberattacks

Cyber Com conducts network intrusions and deploys ransomware against commercial and infrastructure targets, while Offline Com promotes property damage, physical harm, and acts of terrorism rooted in nihilistic ideology.

The third branch, (S)extortion Com, targets minors through extortion schemes involving sexual coercion, self-harm promotion, and violence against people, animals, and property.

A particularly dangerous subgroup, known as 764, has drawn heightened law enforcement attention since 2021. This cell specializes in grooming and recruiting vulnerable minors, coercing them into producing explicit content that is later weaponized for blackmail or circulated among network members.

Europol notes that 764’s activities increasingly overlap with accelerationist and satanic extremist ideologies, compounding the network’s overall threat profile and its capacity for real-world harm.

Project COMPASS operates through several coordinated mechanisms designed to counter The Com’s decentralized structure.

The initiative builds a sustained cooperation network among Member States and third countries, facilitating cross-border information and expertise sharing while directly supporting counter-terrorism, CSAM, and organized crime investigative units already working active cases.

Partner nations also participate in structured data sprints, where ongoing case findings are presented and cross-referenced to identify overlapping suspects, victims, and infrastructure.

Beyond investigative support, the project advises on prevention strategies aimed at shielding at-risk populations, particularly minors who are the network’s primary recruitment targets.

As of the July 2026 update, the operation has produced tangible results. Authorities have safeguarded four victims and arrested 30 perpetrators, with some of those arrests contributing to the broader AP Dolphin initiative.

Investigators have identified or partially identified 62 victims and 179 perpetrators tied to the network, alongside conducting nine joint awareness-raising campaigns designed to educate the public and at-risk communities about the threat.

The Com represents a hybrid threat model that blurs traditional boundaries between cybercrime, CSAM networks, and violent extremism, complicating attribution and takedown efforts for defenders and law enforcement alike.

Its use of legitimate platforms for recruitment mirrors tactics seen in other radicalization pipelines, while its ransomware-linked Cyber Com branch signals troubling overlap with financially motivated threat actors.

Security teams monitoring adolescent-targeted platforms or investigating ransomware campaigns carrying ideological messaging should treat Com-linked indicators as high priority, given the network’s demonstrated capacity to escalate from online grooming to real-world violence.

Organizations and researchers can track ongoing developments through Europol’s official channels, as Project COMPASS remains active with no defined end date.

Cut SOC investigation blind spots and contain threats earlier to reduce response costs and business disruption with ANY.RUN.