The latest EU Terrorism Situation and Trend Report (EU TE-SAT) reveals how online ecosystems are reshaping terrorism. Traditional ideology-driven terrorism dominates the landscape, with jihadism being the most widespread form. However, for a significant number of perpetrators, violence has become a means of gaining identity, recognition, and belonging. This development has created a more fragmented, complex and less predictable threat across Europe.
Terrorism in Europe is entering a new phase. The latest European Union Terrorism Situation and Trend Report (EU TE-SAT) 2026, published today, shows how online ecosystems are fundamentally reshaping the way terrorist threats emerge, evolve online and materialise offline. Traditional ideology-driven terrorism is reported as remaining persistent, with jihadism being the most prevalent form. However, while radicalisation no longer depends solely on direct contact with established terrorist organisations, violent actors increasingly combine extremist ideologies with criminality, conspiracy narratives and nihilistic violence.
As violence, identity, and ideology become increasingly intertwined, the traditional indicators that once served for the identification of terrorist threats are now becoming more complex and less predictable. This development has become a new challenge for law enforcement across Europe.
Anna Sjöberg
Head of Europol’s European Counter Terrorism Centre
Terrorism and violent extremism continue to pose a significant threat to the European Union. While jihadist terrorism continues to constitute the most persistent threat, the lines between established terrorist ideologies and other forms of violent extremism are increasingly blurred. The growing influence of newer destabilising ideologies, alongside traditional extremist narratives, illustrates the evolving nature of the threat. In this complex security environment, effective cooperation and information exchange between national authorities are fundamental to anticipating developments and delivering a robust response to the continuously evolving threat landscape.
Digitalisation and fragmentation shape the new face of terrorism
Online platforms have become a catalytic environment for the development of the terrorist threat. Social media, encrypted messaging services, gaming platforms and decentralised online communities now serve as ecosystems where propaganda, radicalisation, recruitment, and planning of offline actions reinforce one another. The online environment enables terrorist organisations to reach individuals directly. Simultaneously, it gives the space to self-radicalised perpetrators to mobilise independently, often without formal membership or previously established direction.
At the same time, criminal actors increasingly provide services that terrorists can exploit and vice versa. From money laundering and weapons trafficking to online fraud, encrypted communications and other crime-as-a-service capabilities, violent extremist communities borrow tactics from organised crime. Hybrid threat actors make use of organised crime and instrumentalise proxies to perpetrate terrorist offences. The main objective of hybrid threat actors is to destabilise the society. Rather than single attacks, destabilisation involves persistent, targeted and cumulative disruptions.
Terrorist actors no longer need large organisational structures to cause harm. Online ecosystems enable dispersed networks, lone actors and self-initiated cells to radicalise, mobilise and act autonomously. The result is a far more complex threat landscape in which boundaries between ideologies, and of extremely violent and terrorist acts are increasingly blurred, making threats significantly harder to identify before they materialise.
EU TE-SAT 2026 key figures:
• 45 terrorist attacks across 10 EU Member States, including 22 completed attacks, 20 foiled attempts, and 3 failed;
• 486 suspects arrested for terrorism-related offences across 21 EU Member States, 71% of which for jihadism-related offences;
• 5 fatalities and 81 injuries resulted from jihadist attacks;
• 1 fatality following a right-wing attack.
Jihadist terrorism remains the primary threat
Jihadist terrorism continued to account for the largest share of terrorist activity in the EU, with 24 of the 45 attacks and 347 of the 486 terrorism arrests recorded in 2025. More than 70% concerned terrorist propaganda and support activities. These figures illustrate a major focus of counter-terrorism activities – to disrupt radicalisation and mobilisation long before attacks are executed.
Similar to other forms of terrorism, the online environment has fundamentally transformed the operational model of jihadist terrorism. Rather than organising complex attacks, terrorist groups increasingly encourage individuals to act remotely by spreading propaganda through digital platforms. Many of these perpetrators exhibit only a superficial grasp of ideology. Instead, they are driven by extremist narratives and motivated by personal grievances and a fascination with violence. This shift creates a more diffuse and less predictable threat, where the accumulation of attacks by lone actors and small, self-initiated cells can produce the same psychological impact as highly coordinated operations.
Young people are both targets and perpetrators
The report identifies the persistent phenomenon – the involvement of young people – as one of the major developments in the current terrorism landscape. Violent extremist propaganda, gaming communities and violent digital subcultures radicalise vulnerable young people with multiple ideological influences simultaneously. Increasingly, they become both victims of manipulation and perpetrators of violence, with the lines between these two becoming less clear than ever before.
In 2025, 130 terrorism suspects arrested across the EU were aged 18 or younger, at 12 years old for the youngest. Many of them display only a superficial understanding of established ideologies. Instead, they are seen to embrace fragmented combinations of extremist narratives encountered online. This growing overlap between vulnerability and criminality, a development also seen in organised crime, adds another layer of complexity to the terrorism threat landscape, requiring responses that combine prevention, safeguarding, and law enforcement.
Beyond ideology: when violence shapes identities in a broader pool of perpetrators
Across jihadist, right-wing, left-wing, anarchist and other forms of terrorism and violent extremism, ideological commitment increasingly coexists with personal grievances, the search for identity, belonging, and recognition. As these motivations merge, the boundaries that once separated terrorist ideologies are becoming less distinct, making threats harder to identify and anticipate.
Within decentralised online communities, such as The Com network, violence has become a means of gaining status and recognition. Rather than being united by a coherent political or religious doctrine, individual actors move fluidly between extremist narratives, misogyny, nihilism, criminality and terrorist propaganda, adopting whichever ideas reinforce their identity within the group. Violence is rewarded with visibility and social capital, and extreme behaviour is driven by notoriety itself.
Across the terrorism landscape, from religiously inspired terrorism to militant accelerationism, online communities shape individuals through a sense of belonging. Ideology no longer acts alone, as violence itself becomes part of the self-identification. Motivation is more fluid, and radicalisation pathways become considerably more difficult to recognise. As online ecosystems dissolve traditional ideological boundaries and enable individuals to move between extremist milieus, law enforcement can no longer rely solely on conventional ideological criteria to identify emerging threats. This leads to a new landscape where terrorism is more fragmented, more adaptive and less predictable.