Full Report
“No Lives Matter” has emerged in recent months as a particularly violent splinter group within the extremist crime network known as Com and 764, and experts are at a loss for how to stop its spread.
Analysis Summary
# Threat Actor: Com and 764 (also referred to as 764)
## Attribution & Identity
* **Primary Identification:** A network of individuals initially known for online extortion and crimes related to Child Sexual Abuse Material (CSAM).
* **Evolution:** Progressed towards real-world violence, adopting an ethos of "idolizing death" and seeking "purification of all mankind through endless attacks."
* **Classification:** Classified by the US Department of Justice (DOJ) as a "**Tier One**" terrorism threat, the highest priority for an extremist group in American law enforcement’s internal rubric.
* **Associated Groups/Ideologies:** Amalgamated elements from the **Columbine Effect**, neo-Nazi propaganda group **Terrorgram Collective**, and domestic terror groups like the **Atomwaffen Division**. Also shows confluence with the **Order of Nine Angles (O9A)** and Ted-Kaczynski-inspired neo-Luddism.
* **Known Affiliates/Manifestation:** A splinter group known as "**No Lives Matter**" embodies the violent ethos.
* **Known Individuals:**
* **Cameron Finnegan** (handle: “Acid”): Convicted in the UK for 764-related offenses.
* **Nino Luciano** (handle: “Tobbz”): Identified as the lodestar for the shift towards wanton violence within the group.
* **“Slain”**: Claimant connected to the group, supposedly based in Sweden, the UK, and Bulgaria.
## Activity Summary
* **Historical Activities:** Initially focused on online extortion and crimes related to CSAM, often targeting women from diminished social groups.
* **Recent Campaigns:** Transitioned to escalating exhortations and execution of physical violence globally.
* Connected to knifings, killings, firebombings, drive-by shootings, school shootings, and murder-for-hire plots in North America and Europe.
* Members egg each other on to increasingly violent acts for internet notoriety.
* Involved in large-scale bomb threats against US schools and institutions (e.g., a Romanian teenager allegedly made hundreds of such calls).
* A 15-year-old in Italy was arrested for planning to murder a homeless man and livestream the act, allegedly as part of a "week of terror" coordinated with colleagues.
* **Ideological Goal:** To change society through violence and chaos, where committing violence earns status within the group.
## Tactics, Techniques & Procedures
* **Violence Incitement/Execution:** Planning and carrying out real-world attacks including shootings, knife attacks, and firebombings.
* **Manual Dissemination:** Authored and distributed at least two "kill guides" containing viable instructions for lethal attacks using knives, firearms, and vehicles.
* **Online Radicalization:** Utilizing platforms (like Telegram) to encourage progressive acts of violence and social degradation ("egg each other on").
* **Tactics Cross-Pollination:** References to, or inspiration drawn from, manifestos linked to Terrorgram-inspired mass shooters (e.g., Solomon Henderson in Tennessee).
* **Online Status Seeking:** Violence is committed partly for internet notoriety and status advancement within the network.
* **Ideological Synthesis:** Picking and choosing elements from disparate ideologies (O9A, Neo-Nazism, Kaczynski-inspired Luddism) to form a personalized belief structure.
* **CSAM Exploitation:** Ongoing activity involving the acquisition and distribution of CSAM.
## Targeting
* **Sectors:** No specific commercial sectors are consistently emphasized for violence, but involvement in attacks against schools and religious institutions (via bomb threats) is noted. Primarily targets perceived "weak" members of society (historically women, currently broader targets for violence).
* **Geography:** North America (US), Europe (UK, Romania, Italy, Germany mentioned), and Mexico. The group claims presence in Sweden, the UK, and Bulgaria.
* **Victims:** Historically vulnerable women; currently includes homeless individuals, classmates (school shootings), and the general public via mass violence plots.
## Tools & Infrastructure
* **Malware Families Used:** Not explicitly detailed, but the nature of the activity suggests use of encrypted communication platforms and potentially guides for assembling improvised weapons.
* **Infrastructure:**
* Strong presence on platforms used for circulation, such as **Telegram**.
* References to communication between accounts connected to subsequent attackers.
* Mentions of specific individuals' handles (“Acid,” “Tobbz,” “Slain764”).
## Implications
The group represents a significant and evolving threat due to its hybrid nature, transitioning from online exploitation to organized and inspired real-world terrorism. The lack of coherent structure makes it hard to combat, but the Tier One classification reflects the severe and global reach of the violence they promote and inspire. The fusion with O9A ideology suggests a sustained focus on ritualistic violence and societal chaos.
## Mitigations
* Increased vigilance regarding the ideological fusion between existing extremist groups (O9A, Atomwaffen) and newer phenomena like Com/764.
* Proactive law enforcement efforts leveraging terrorism charges against actors engaged in conspiracy to commit violence, even across international borders.
* Monitoring of online platforms (especially forums and encrypted chat apps) for the circulation of explicit "kill guides" and exhortations to violence.
* Focus on countering the pipeline from CSAM exploitation and online sadism to kinetic action, as seen in the evolution of this network.