Full Report
Europol reports: In its first year of operation, Project Compass has delivered concrete operational results against “The Com”, a decentralised extremist network targeting minors and vulnerable individuals both online and offline. Since January 2025, Project Compass has contributed to: 4 victims safeguarded 30 perpetrators arrested 62 identified and partially identified victims 179 identified and partially... Source
Analysis Summary
# Incident Report: Project Compass Operations Against "The Com" Network
## Executive Summary
Project Compass, a coordinated international law enforcement initiative, successfully neutralized segments of "The Com," a decentralized extremist network targeting minors and vulnerable individuals. In its first year of operation, the project resulted in 30 arrests, the safeguarding of four immediate victims, and the identification of 179 suspected perpetrators. The operation highlights the shift toward combating decentralized, digitally-native extremist groups through multi-country intelligence sharing.
## Incident Details
- **Discovery Date:** January 2025 (Project Initiation)
- **Incident Date:** Ongoing (Operational results reported March 2026)
- **Affected Organization:** N/A (Targets were private individuals/minors)
- **Sector:** Public Safety / Cybersecurity
- **Geography:** International (28 participating countries, coordinated by Europol)
## Timeline of Events
### Initial Access
- **Date/Time:** January 2025
- **Vector:** Digital Grooming and Social Engineering
- **Details:** Perpetrators utilized decentralized online platforms and social media to target, recruit, and exploit minors and vulnerable individuals.
### Lateral Movement
- **Details:** The network operated in a decentralized manner, moving across various encrypted messaging platforms and "fringe" forums to maintain communications and coordinate both online and offline activities.
### Data Exfiltration/Impact
- **Details:** Impact involved the exploitation of 62 identified or partially identified victims. The "The Com" network focused on the radicalization and exploitation of minors rather than traditional corporate data theft.
### Detection & Response
- **Discovery:** Coordinated intelligence gathering across 28 nations under the "Project Compass" framework.
- **Response Actions:** Law enforcement conducted 30 arrests and carried out nine joint awareness-raising activities to prevent further recruitment.
## Attack Methodology
- **Initial Access:** Social engineering; targeting minors via decentralized platforms.
- **Persistence:** Use of decentralized network structures to avoid single points of failure.
- **Defense Evasion:** Use of encrypted communication and fragmented organizational cells.
- **Discovery:** Reconnaissance of vulnerable individuals via social media monitoring.
- **Impact:** Physical and psychological harm to victims; extremist radicalization.
## Impact Assessment
- **Financial:** N/A (Focus was on human exploitation/extremism).
- **Data Breach:** Compromise of personal safety and private communications of at least 62 victims.
- **Operational:** Disruption of extremist recruitment pipelines across 28 countries.
- **Reputational:** Significant public interest; highlights the dangers of fringe digital communities.
## Indicators of Compromise
- **Behavioral Indicators:** Online grooming patterns, extremist rhetoric on decentralized platforms, targeting of minors for "offline" actions.
- **Network Indicators:** Traffic associated with decentralized/encrypted communication channels used by "The Com" (Specific domains/IPs were not disclosed in the high-level report).
## Response Actions
- **Containment:** Coordinated arrests of 30 active perpetrators to stop immediate harm.
- **Eradication:** Identification of 179 perpetrators to dismantle the network's hierarchy.
- **Recovery:** Safeguarding and providing support for 4 immediate victims; ongoing identification of 62 additional victims for support services.
## Lessons Learned
- **Decentralization Challenges:** Modern extremist threats ("The Com") are harder to dismantle than centralized groups because they lack a single physical or digital headquarters.
- **International Cooperation:** The success of Project Compass proves that rapid information exchange (across 28 countries) is the most effective counter to decentralized digital threats.
- **Proactive Safeguarding:** Early intervention and victim identification are critical when the "attack" involves human exploitation.
## Recommendations
- **Platform Monitoring:** Increased vigilance and reporting mechanisms on decentralized social platforms.
- **Public Awareness:** Continued investment in the nine awareness-raising activities to educate minors on the risks of online grooming by extremist groups.
- **Shared Intelligence:** Ongoing use of the Europol framework for structured operational information exchange between international law enforcement agencies.