Full Report
Europol supported the Spanish National Police (Policía Nacional) in disrupting activities of the far-right terrorist group ‘The Base’. The operation took place over three days in Madrid and Valencia, resulting in significant seizures and the arrest of three suspected far-right extremists on 25 November 2025. The operation was led by the General Commissariat of Information…
Analysis Summary
# Threat Actor: The Base
## Attribution & Identity
**Actor Identification:** Far-right terrorist group.
**Aliases and Associated Groups:** Identified as the "international right-wing terrorist organisation ‘The Base’."
**Law Enforcement/Government Support:** Operation supported by Europol’s European Counter Terrorism Centre (ECTC) and led by the Spanish National Police’s General Commissariat of Information (Comisaría General de Información).
## Activity Summary
The article describes a large-scale disruption operation supported by Europol in Spain against the group.
- **Date of Disruption:** 25 November 2025.
- **Location:** Madrid and Valencia, Spain.
- **Outcome:** Arrest of three suspected far-right extremists following five house searches over three days.
- **Seizures:** Significant seizures of weapons (bladed weapons and firearms, and ammunition), military tactical equipment, and **accelerationist and supremacist material and documentation.**
## Tactics, Techniques & Procedures
* **Terrorist Material Dissemination/Possession:** Seizure of "accelerationist and supremacist material and documentation."
* **Weapons Acquisition/Stockpiling:** Seizure of a variety of weapons, military tactical equipment, bladed weapons, and firearms with ammunition.
- [Specific MITRE ATT&CK IDs are not mentioned in the provided text as the focus is on physical terrorism, not cyber TTPs.]
## Targeting
**Sectors:** Not explicitly stated/digital, but the target is clear based on the group's nature (terrorism).
**Geography:** Madrid and Valencia, Spain (based on the arrests).
**Victims:** The context implies the group is a threat actor targeting societal stability and potentially infrastructure/individuals based on its designation as a terrorist organization, though no specific victims of attacks are named in this summary.
## Tools & Infrastructure
* **Malware Families Used:** None mentioned (Focus is on physical disruption).
* **Infrastructure (C2, domains, IPs):** None mentioned. The disruption focused on physical locations (house searches).
## Implications
The disruption highlights the ongoing threat posed by internationally linked far-right extremist organizations operating within Europe. The seizure of weapons and accelerationist literature indicates a readiness or intent toward future violent action, confirming the group's status as a serious physical security threat requiring international law enforcement coordination (Europol/Policía Nacional).
## Mitigations
- Enhanced physical surveillance and intelligence gathering operations coordinated across member states (as demonstrated by Europol ECTC involvement).
- Prioritization of counter-terrorism operations targeting the physical logistics and recruitment/ideological dissemination phase (seizure of documentation).
- Arrest and prosecution of individuals linked to international extremist networks specializing in weapons cache accumulation and ideological radicalization.