Europe’s Violent Extreme Left — Part 7: The Case of Greece — Clandestine Networks and Criminal Connections

Body

By Dr. Triantafyllos (Akis) Karatrantos  

This article is part seven of CEP’s Europe’s Violent Extreme Left series. It examines contemporary violence-oriented extreme-left and anarchist actors in Greece, focusing on recent attacks, the principal organizations and networks, their capabilities, and the role of criminal and transnational connections. This article also assesses how international conflicts influence domestic mobilization and identifies developments relevant to law enforcement and policymakers.

Greece’s violent extreme-left landscape remains heterogeneous. Clandestine bombing cells coexist with incendiary networks and actors legitimizing intimidation through revolutionary narratives. Assessment must connect organization, capabilities, targets, and enabling relationships. Terrorist attack counts alone cannot capture the threat.

Key findings

• Greece remains one of the EU countries with persistent left-wing and anarchist terrorist activity. Europol recorded one failed attack in 2023, three attacks in 2024 and one completed attack in 2025. Arrests peaked at 20 in 2024 before declining to one in 2025. These figures cover terrorism-related cases and do not include other forms of politically motivated violence.

• Clandestine actors retain explosives and incendiary capabilities. Revolutionary Class Self-Defense claimed bomb attacks against a Greek government ministry and a railway operator. The fatal July 2026 incendiary attacks on residences associated with New Democracy demonstrate the risk to political figures, their families and other civilians; suspects were subsequently investigated for alleged links to the anarchist milieu.

• Organizational fragmentation coexists with continued violent activity. Greece's landscape includes clandestine cells, informal networks and publicly active anarchist collectives. New group names and differing structures can make it difficult to determine whether apparently separate attacks involve the same individuals or networks.

• The Partnership of Revenge case illustrates a crime–extremism nexus. Europol reported alleged paid participation by individuals with organized-crime backgrounds rather than shared anarchist ideology. Seven defendants were convicted in July 2025 of crimes connected to attacks in 2023–2024, highlighting the role criminal facilitators and prison connections can play.

• Transnational solidarity is better evidenced than systematic operational cooperation. Greek anarchist networks participate in international prisoner-support and ideological campaigns connecting Europe and Latin America. Evidence is more limited for coordinated cross-border attacks or systematic transfers of operational capabilities to Greek clandestine groups.

• The Israel–Palestine conflict has influenced militant narratives and potential targets. Revolutionary Class Self-Defense invoked Palestinian armed struggle in the group’s statements, while Rouvikonas organized an “anti-Zionist patrol” in Thessaloniki in June 2026 that prompted a police investigation. The cases raise distinct questions about violence justification, intimidation and target identification.

Definitions and evidence

“Violence-oriented” describes actors committing, preparing, facilitating, or explicitly legitimizing violence; it is not an official Greek personnel classification. Article 187A governs terrorism offenses. The Hellenic Police Counter-Terrorism Directorate investigates; prosecutors and courts determine responsibility. Other political violence may involve arson, assault, threats, racist incitement, or criminal-organization offenses. The reviewed sources provide no comparable nationwide estimate of the violence-oriented extreme-left population.

Evolution and current scale

Karatrantos and Panagiotopoulos’s National Centre for Social Research (EKKE) study identifies declining mass protest-related violence alongside expanding lower-intensity political violence during 2015–2019. 

The researchers examined the groups involved, how they operated, their targets, and their connections to criminal activity. The findings suggest that a decline in violent mass protests does not necessarily indicate a decline in violence by smaller groups. 

Successive Europol Terrorism Situation and Trend Reports (EU TE-SAT) recorded two arrests for left-wing and anarchist terrorism in Greece in 2023, 20 in 2024, and one in 2025. The 2024 peak was largely associated with major investigations, including those involving Partnership of Revenge and the Ampelokipoi apartment explosion. The number of reported terrorist attacks fluctuated less sharply: one failed attack in 2023, two completed and one failed attack in 2024, and one completed attack in 2025. Arrest figures therefore reflect the timing and scale of police investigations rather than the overall level of violent extremist activity. Europol's statistics also exclude politically motivated violence that national authorities prosecute under other criminal offenses.

The pronounced fluctuation in terrorism-related arrests partly reflects the timing of major investigations rather than a comparable rise and fall in all forms of political violence. Greece’s two terrorism-related arrests in 2023 concerned individuals affiliated with the Turkish Marxist-Leninist terrorist organization Revolutionary People’s Liberation Party/Front (DHKP-C). In 2024, investigations into Partnership of Revenge and a suspected cell following the Ampelokipoi apartment explosion generated multiple arrests. 

The sharp increase in terrorism-related arrests in 2024 was largely associated with major police investigations, including those targeting Partnership of Revenge and the suspected clandestine cell investigated after the Ampelokipoi explosion. In July 2025, seven defendants in the Partnership of Revenge case were convicted for their involvement in attacks committed during 2023–2024. These developments help explain why annual arrest figures can fluctuate substantially without necessarily reflecting comparable changes in the overall level of extremist violence.

Source: Europol EU TE-SAT reports for 2022, 2024, 2025, 2026. Data for each year refer to arrests for left-wing and anarchist terrorist offenses, not report publication dates. Arrests do not establish guilt or measure the overall prevalence of political violence.

Annual U.S. State Department Country Reports on Terrorism provide additional information about the targets of politically motivated attacks in Greece. The 2022 report documents bombings and arson attacks attributed to anarchist groups against media organizations, journalists’ residences, Orthodox Christian institutions, and property associated with an Italian diplomat. The 2023 report records an attempted bombing near riot-police headquarters in Athens, claimed by Armed Proletarian Justice, a clandestine Greek extremist group.

Actors and organizational  forms

Greece’s violent extreme-left landscape includes clandestine cells using organizational labels, informal affinity networks and publicly active anarchist collectives. Armed Proletarian Justice and Revolutionary Class Self-Defense exemplify the first category. Revolutionary Class Self-Defense claimed the Labour Ministry and Hellenic Train bombings. (Hellenic Train is Greece’s passenger-rail operator.) Rouvikonas (Rubicon), a publicly active Greek anarchist collective known for direct-action campaigns, represents a different organizational form; its activities and allegations involving individual members require separate assessment.

Partnership of Revenge warrants particular attention. On February 27, 2024, Greek counterterrorism police conducted coordinated operations in connection with a series of bomb and grenade attacks during 2023–2024. Six suspects were arrested, while four others were already imprisoned for unrelated offenses. According to Europol's 2025 TE-SAT report, some participants with criminal backgrounds received payment for attacks without sharing the group's anarchist ideology. This suggests that criminal connections and financial incentives contributed to the group's activities alongside political motivations. Europol's 2026 report records that seven defendants were convicted on July 18, 2025, for their involvement in attacks using explosives and grenades during 2023–2024. The case demonstrates how criminal actors can contribute personnel and resources to politically motivated violence.

 

Figure 2. Three organizational  patterns in Greece. The figure illustrates three distinct organizational  forms within Greece’s violent extreme-left landscape: clandestine bombing cells, networks involving criminal facilitators and paid participants, and publicly active anarchist collectives. The examples represent documented activities and relationships, rather than a single organizational  model or shared command structure. Source: Author’s synthesis based on Europol EU TE-SAT reports, as well as reporting by the Greek police and judiciary.

Capabilities and strategic logic

Bombings and incendiary attacks demonstrate continued access to explosive devices and the ability to prepare attacks. Revolutionary Class Self-Defense’s claims combine domestic grievances with Palestinian solidarity. Such attacks can serve purposes including publicity, retaliation, and institutional intimidation. On July 1, 2026, a series of incendiary attacks targeted residences associated with Greece’s governing New Democracy party in Thessaloniki, killing Vagia Nestora and injuring several others. Counterterrorism police subsequently arrested four suspects, some of whom reportedly had connections to the anarchist milieu. Prosecutors brought charges including homicide and participation in a terrorist organization. All four suspects remained in pretrial detention in September 2026, when prosecutors pursued additional charges.

The October 2024 explosion in an apartment in Ampelokipoi, Athens, killed one man and severely injured a woman. In its 2025 TE-SAT report, Europol identified five arrested suspects as members of a newly established anarchist terrorist cell with contacts in Germany and Switzerland. However, on April 24, 2026, an Athens court acquitted three defendants, including Nikos Romanos, after finding insufficient evidence to establish their involvement. The court convicted two women of offenses involving criminal organization, explosives, and weapons. They were subsequently sentenced to 19 and eight years in prison, respectively.

Transnational and cross-issue mobilization

CEP’s transnational analysis highlights personal networks, prisoner campaigns, digital infrastructure and potential capability transfer. Europol identifies solidarity relationships linking anarchist milieus in Italy, Greece, Spain, Chile and Argentina. The international campaign supporting imprisoned Italian anarchist Alfredo Cospito illustrates how prisoner solidarity can generate cross-border threats and attacks. Evidence is strongest for ideological and prisoner-solidarity links and more limited for coordinated operational activity or systematic capability transfers into Greek clandestine networks. 

CEP’s antisemitism analysis identifies Gaza-related narratives within Revolutionary Class Self-Defense and discusses Rouvikonas’s 27 June 2026 “anti-Zionist patrol” in Thessaloniki. The collective presented the patrol as opposition to an Israeli economic presence. Police subsequently identified six alleged participants and prepared a case file concerning suspected racist incitement, threats, and criminal-organization or gang offenses. Jewish community representatives characterized the “patrol” as intimidation. The incident illustrates different pathways through which international conflict narratives may contribute to violence justification or domestic targeting. Relevant warning signs include collective blame, identification of targets, threats, and the explicit legitimation of violence. 

Four threat scenarios

The following scenarios are analytical pathways, not official threat categories or predictions. They identify developments that would justify closer assessment.

Scenario one: Renewed clandestine bombing networks. New labels may conceal either organizational renewal or surviving relationships. Indicators include recurring personnel, linked preparatory activity, and repeated attacks against state, judicial, or commercial targets. Attribution requires investigative and judicial evidence.

Scenario two: Recurrence of lethal residential attacks. The July 2026 Thessaloniki attacks demonstrate that incendiary violence against occupied residences can produce fatalities. Indicators include further attacks against political figures and their families, repeated residential targeting, threats against identifiable individuals, and willingness to proceed despite foreseeable risks to occupants.

Scenario three: Criminal and transnational capability convergence. Paid participation, prison connections, and foreign relationships may increase access to resources. Indicators include financial transfers linked to attacks, recurring facilitators, and demonstrated transfer of operational expertise. Contacts alone are insufficient.

Scenario four: Antisemitic intimidation and target expansion. International grievances may be redirected towards local civilians and businesses. Indicators include identity-based targeting, repeated threatening patrols, publication of personal information, and movement from rhetoric to preparation or physical violence.

State response and priorities

U.S. State Department reporting recognizes Greece’s counterterrorism cooperation, passenger screening, financial-intelligence arrangements, and regional information exchange. Three priorities follow from the cases examined. First, investigative records and threat assessments should be updated to reflect judicial outcomes, rather than perpetuate preliminary organizational attributions. Second, police and prosecutors should examine enabling relationships—including criminal intermediaries, prison contacts, payments, and recurring participants—alongside ideological affiliations. Third, cross-border cooperation should distinguish solidarity and propaganda from evidence of shared personnel, financing, logistics, or transferred capabilities. Protection of identifiable targets and lawful preventive interventions remain essential. Effectiveness should be measured through disrupted preparations, judicial outcomes, repeat offending, and protection results, rather than arrest totals alone.

Europe’s Violent Extreme Left—Part 5: The Case of Spain—Fragmented, Connected, and Underestimated

Body

This article is part five of CEP’s series on the violent extreme left in Europe. It focuses on Spain’s landscape of anarchist, antifascist, radical-left, independentist, and issue-based actors and milieus. It examines documented violence since 2020, transnational networks and foreign-conflict participation, gaps in available data, and Spain’s institutional response. It concludes by identifying indicators that could signal a shift from episodic violence and dispersed capabilities towards sustained organisation, operational cooperation, or capability transfer.

Key Findings

  • Fragmentation shapes how violent mobilisation occurs, rather than simply indicating organisational weakness. Spain’s contemporary violent extreme-left landscape lacks a single organisational centre. However, overlapping anarchist, antifascist, radical-left, independentist and issue-based milieus can converge episodically around political events, conflicts, prisoner campaigns, or confrontations with ideological opponents. Mobilisation capacity, therefore, does not necessarily depend on durable organisational consolidation.

  • Individual and small-cell capabilities exceeds demonstrated collective capability. Most documented violent extreme-left activity since 2020 has relied on tactics such as sabotage, arson, property damage, and street confrontation. Individual cases nevertheless reveal surveillance, role differentiation, use of progressively more powerful explosive devices, and foreign-acquired military experience. Available evidence does not show these capabilities being systematically aggregated or transferred into sustained domestic violent infrastructure.

  • Transnational connectivity is stronger than demonstrated transnational operational integration. Spanish actors and milieus participate in European propaganda networks, prisoner-solidarity campaigns, parallel cross-border mobilisation and foreign conflicts. Evidence becomes substantially thinner, however, for shared financing, logistics, training or sustained operational coordination. The principal documented transnational connections are therefore ideological and mobilisational rather than operational.

  • The convergence of currently dispersed capabilities would be an important indicator of changing operational capacity. Developments to monitor include insurrectionary-anarchist networks rebuilding operational capacity; episodic violent mobilisation developing into persistent networks; evidence of transnational financing, logistics, training, or operational cooperation; and the transfer of skills or contacts acquired in foreign conflicts to domestic violent activity.

  • Measurement remains a major analytical limitation. Spain’s distinction between ideological classification, violent extremism, and terrorism, combined with distributed institutional responsibilities and dispersed public reporting, means there is no single public dataset capturing the scale and evolution of the broader violent far-left milieu across 2020–2026.

Defining the Violent Far Left in Spain

Spain’s contemporary approach to political extremism is rooted in the democratic settlement that followed the Franco dictatorship. The 1978 Constitution (articles 1 and 16) placed political pluralism and ideological freedom at the centre of the new political order, thereby providing the basis for a system in which radical political objectives are not, in themselves, criminalised.

Consequently, Spain has no discrete criminal offence of “left-wing extremism” or “left-wing political violence.” Authorities use ideological categories to describe and monitor different milieus, while criminal liability depends on the applicable statutory offences rather than ideological classification alone. Prosecutorial and national-security reporting has referred to extrema izquierda (extreme left), anarquismo insurreccionalista (insurrectionist anarchism), anarcoterrorismo(anarchoterrorism), and violent extremism, while the Ministry of the Interior uses “violent far-left and anarchist groups” as an operational policing category. These categories overlap, but not one in itself amounts to terrorism.

Figure 1: Spain's Official Classification of the Violent Far Left.

Figure 1: Spain's Official Classification of the Violent Far Left. Source: Author's synthesis based on the Spanish Criminal Code, Fiscalía reporting, and the Ministry of the Interior's 2022 youth-group framework.

Terrorism has a separate legal threshold. Under Article 573 of the Criminal Code, specified serious offences constitute terrorism when committed for purposes including subverting the constitutional order, seriously destabilising political institutions, seriously disturbing public peace, destabilising an international organisation, or provoking terror among the population. Therefore, an act may not necessarily constitute terrorism even if it is politically motivated, violent, and associated with the violent far left.

Ideology nevertheless remains operationally relevant. In 2022, the Ministry of the Interior revised its framework for violent youth groups, introducing classifications based on ideology or motivation and organisational relationships. One category, “violent far-left and anarchist groups,” expressly includes radical antifascist and okupa (squatter) movements. The framework primarily concerns violent youth groups aged 14–30 and is therefore not an exhaustive taxonomy of Spain’s violent far left.

Figure 2: Spain's 2022 Police Classification of Violent Youth Groups.

Figure 2: Spain's 2022 Police Classification of Violent Youth Groups. Source: Ministry of the Interior, 2022. The category is age-bounded and not a general taxonomy of the radical left.

Quantifying the broader milieu is harder. The Fiscalía de la Audiencia Nacional (Public Prosecutor’s Office at the National High Court) recorded 32 activities under anarquismo insurreccionalista in 2020, but changing categories and less detailed subsequent reporting prevent consistent longitudinal comparison. Interior Ministry hate crime statisticsprovide only a partial proxy: offences recorded under “ideology” do not distinguish between left- and right-wing perpetrators and exclude much of the sabotage, public disorder, and violence against police relevant to this study.

The Informes Anuales de Seguridad Nacional (Annual National Security Reports, or IASN) primarily assess relevant national-security threats rather than provide a consistent quantitative series for violent far-left activity.. Europol’s TE-SAToffers greater continuity, but only for the narrower category of terrorism, and it is compiled from information provided and verified by Member States. Spain’s distinction between violent far-left activity and terrorism therefore also shapes how the phenomenon appears in European-level statistics: activity recorded domestically under broader ideological or security categories will not necessarily appear in TE-SAT.

There is consequently no comparable public dataset tracking the full scale or evolution of Spain’s violent far-left milieu across 2020–2026. Nevertheless, Fiscalía reporting somewhat indicates the scale of activity in individual years. In 2021, prosecutors recorded 77 activities under extrema izquierda and 39 arrests, 36 of which arose from protests over the imprisonment of Catalan rapper Pablo Hasél, who had been convicted of glorifying terrorism and insulting the Crown and state institutions. The following year, the Fiscalía recorded 31 activities and 20 arrests under anarquismo insurreccionalista. The change in categories and reporting practice means these figures are useful as snapshots, but do not provide straightforward year-on-year trends.

Within Europol’s narrower terrorism framework, TE-SAT groups left-wing and anarchist cases together under the analytical category “left-wing and anarchist terrorism.” TE-SAT 2023 records one completed terrorist attack in Spain in 2022, resulting in one injury, and separately refers to an explosives attack on a real-estate agency in L’Hospitalet de Llobregat (Catalonia). The public report does not clarify whether these two mentions concern the same incident. TE-SAT 2026 subsequently records one arrest in Spain for a left-wing or anarchist terrorist offence in 2023, one in 2024 and two in 2025. These figures concern terrorism as classified and reported by Spain; they therefore capture a narrower set of cases than the broader categories of extrema izquierda, anarquismo insurreccionalista, and violent extremism used in Spanish domestic reporting.

The classificatory boundaries are not merely semantic. Actors operating within overlapping radical-left and independentist milieus may fall under different analytical or legal categories depending on the conduct involved and their primary organisational and political context. Spanish prosecutorial reporting places Amnistia Ta Askatasuna (ATA) within the ETA-related and radical Basque separatist framework, rather than under the categories used for anarchist or broader far-left violence. This is consistent with Europol’s wider taxonomy, which treats ETA and Basque separatist violence as “ethno-nationalist and separatist terrorism” instead of “left-wing and anarchist terrorism.” The distinction illustrates why ideological proximity alone does not determine how violent activity is classified.

This fragmentation of classification is analytically consequential. The same broad ideological environment can become visible to the state through different institutional lenses depending on conduct: as public-order violence, violent radicalism, insurrectionary anarchism, separatist violence, or terrorism. Low terrorism figures therefore cannot be treated as a proxy for the prevalence of politically contextualised violence, while broader domestic categories cannot simply be aggregated into a single measure of violent far-left activity. The measurement problem reflects not only incomplete public data but differences in the conduct being measured and the institutional purposes for which it is classified.

That difference is visible in the prosecution of three ATA members for a May 2020 incendiary attack on a Kutxabank branch in Ea (Bizkaia, Basque Country), carried out in support of ETA prisoners. Prosecutors charged the conduct as terrorist arson, and the defendants admitted their involvement before the Audiencia Nacional in 2024.

Figure 3: How Spanish and EU Institutions Describe the Violent Far Left.

Figure 3: How Spanish and EU Institutions Describe the Violent Far Left. Source: Author’s synthesis based on Spanish Fiscalía and national-security reporting, the Ministry of the Interior, Europol TE-SAT, and the European Commission’s prevention framework. The labels capture different legal, operational, and prevention contexts, helping explain why terminology and data do not align neatly across sources.

Fragmentation and Episodic Convergence

Official reporting nevertheless provides a reasonably clear picture of the composition and capabilities of Spain’s violent far-left milieu.. Rather than describing large hierarchical organisations, the reporting depicts a fragmented environment in which insurrectionary anarchism remains the clearest identifiable violent strand. In 2020, the Fiscalía identified Informal Anarchist Federation / International Revolutionary Front (FAI/FRI)-linked individuals and groups as the principal anarchist threat, targeting banks, businesses, political offices, and churches, principally in Madrid and Barcelona. Limited economic, logistical, and operational resources constrained their capacity, and by 2021–22 prosecutors described anarchist violence as low and residual, centred largely on small-scale sabotage following years of police and judicial pressure.

Fragmentation should not, however, be understood simply as the absence of organisational capacity. It also shapes the way mobilisation occurs. In a milieu without a dominant organisational centre, particular events and causes can temporarily bring otherwise distinct actors and networks into the same mobilising environment without producing a durable organisation. The relevant analytical distinction is therefore between organisational consolidation and episodic convergence. The latter can generate violence around a common trigger, even where participating milieus remain organisationally separate before and after the event.

Operation Phiros adds an important qualification to this picture of residual, small-scale sabotage. Mossos d’Esquadra(Catalan regional police) investigators attributed a violent-anarchist motivation to three men suspected of placing up to seven homemade explosive devices at bank branches and a supermarket in Barcelona between 2022 and 2023. The bombs reportedly became progressively more powerful, caused more than €80,000 in damage and involved a recurring division of labour in which one suspect placed the device while another conducted surveillance. No one claimed responsibility for the attacks, and the suspects were investigated for offences including explosives possession, criminal damage, and estragos (a Spanish criminal offence covering acts of destruction that threaten public safety), rather than publicly reported terrorism charges. Separate reporting likewise records the increasing charge size and the absence of claims of responsibility.

Beyond the anarchist core, the boundaries of the violent far-left milieu become less clear. Confrontational mobilisation against political opponents has periodically resulted in violence without necessarily corresponding to a discrete organisational milieu. During a campaign event held by Vox, Spain’s national-conservative, right-wing political party, in Madrid’s Vallecas district in April 2021, for example, clashes involving counter-protesters left 35 people injured, including 21 police officers, amid the throwing of stones, bottles, and other objects. More recently, clashes during a June 2026 counterdemonstration against the neo-Nazi Núcleo Nacional in Barcelona left four police officers injured. Also in Catalonia, protesters destroyed an information stand belonging to the student organisation S'ha Acabat at the Autonomous University of Barcelona (UAB) in October 2021. Contemporary reporting identified the attackers as independentist students.. Similar intersections are visible in the Basque Country and Navarre, through actors including Ernai and the Gazte Koordinadora Sozialista (GKS).

A further example of confrontational mobilisation occurred in October 2025, when a counterdemonstration against a gathering of the fascist and national-syndicalist group Falange in Vitoria-Gasteiz (Basque Country) escalated into object-throwing, clashes with police, and burning of containers. The Ertzaintza (Basque regional police) ultimately reported 19 arrests for public disorder and around 20 officers lightly injured. The official account documents the incident but does not establish a durable organisation behind all participants.

These cases also illustrate the difficulty of defining the boundaries of the milieu. Antifascist, radical-lef, and independentist mobilisation encompasses diverse actors and activities that cannot collectively be treated as violent extremism, even where particular participants, networks, or events involve violence. The overlap between these environments therefore complicates attempts to construct a single national “violent far-left” category and reinforces the distinction between ideological affiliation, mobilisation, and documented violent activity.

Issue-based mobilisation increasingly appears alongside these established milieus. The Fiscalía has monitored ecologismo radical (radical environmentalism), including actions ranging from road blockages to property damage, although prosecutors subsequently clarified that they did not consider either Futuro Vegetal or Extinction Rebellion a terrorist organisation. Other causes can similarly provide mobilisation opportunities across otherwise distinct radical-left, anarchist, antifascist, or independentist environments. Housing-related mobilisation offers another example. Following an eviction in Barcelona’s Sant Andreu district in January 2021, a group of around 50 people attacked bank branches, an estate agency, and an energy-company office, slightly injuring two Mossos officers. Contemporary reporting noted anarchist, okupa, and anti-eviction graffiti at the scene, illustrating how issue-based mobilisation can overlap with anarchist and okupa milieus without making the broader housing movement itself a violent-extremist phenomenon.

The 2024 IASN noted that far-left radical actors adapt contemporary social and geopolitical causes—including migration detention, labour disputes, and, increasingly, international conflicts—to existing ideological agendas. Mobilisation around the Israel–Palestine conflict provides a recent example: during a pro-Palestinian gathering in Bilbao in December 2025, a nonviolent sit-in blocking the tram was followed by clashes during a police intervention, when several participants attempted to prevent an arrest and, according to the Basque Department of Security, assaulted Ertzaintza officers. Such incidents show how broader political mobilisations can provide convergence points for existing radical networks and confrontational actors.

Figure 4: Violent Repertoires and Mobilisation within Spain's Violent Far Left.

Figure 4: Violent Repertoires and Mobilisation within Spain's Violent Far Left. Source: Author's synthesis based on Fiscalía, police, and case reporting cited in the text. Categories overlap and do not imply prevalence.

The 2021 disturbances following the imprisonment of Catalan rapper Pablo Hasél bring several of these dynamics together. Demonstrations in several cities involved barricades, property damage, and attacks on police. In Barcelona, a Guardia Urbana (Urban Guard) van was set alight while an officer remained inside. Eight suspects were subsequently remanded in custody on allegations including attempted homicide, public disorder and membership of a criminal group. Police believed the wider group involved comprised around 12–16 people, with different participants carrying out, directing, and monitoring the action, suggesting some degree of role differentiation and coordination. In official reporting, the incidents associated with the Hasél protests were recorded by the Fiscalía under extrema izquierda rather than terrorism. This distinction is also reflected at the European level: Europol’s TE-SAT recorded no left-wing or anarchist terrorist attack in Spain in 2021, while Spanish domestic reporting documented a broader range of violent activity under extrema izquierda.

These episodes do not establish a single violent network moving between causes. They instead illustrate a recurring mobilisation structure: wider political controversies create temporary convergence points within which established radical milieus, issue-based activists, and confrontational actors may overlap. The security relevance lies less in the ideological content of any particular cause than in whether such convergence produces recurrent violent actors, greater coordination, or capabilities that persist after the mobilising event ends.

On 27 February, during the Barcelona protests that followed Hasél’s imprisonment, eight people were detained who subsequently became known as the presos del 27F. Their detention generated a solidarity campaign extending beyond Spain, including fundraising for legal and prison expenses, while the Fiscalía reported that Italian militants supported propaganda efforts around their case. The 27F case illustrates how domestic street violence can acquire a transnational dimension after the event through international solidarity, fundraising, and propaganda activity around those detained.

The sequence is significant because different forms of connectivity emerged at different stages. The initial mobilisation generated a temporary operational grouping around street violence; detention then provided a new focal point around which transnational solidarity, propaganda, and material support developed. Transnationalisation therefore need not precede domestic violence or indicate external operational direction. It can also emerge retrospectively, as local confrontations and imprisoned participants become symbols around which wider networks mobilise.

Transnational Networks and Foreign Conflict Participation

The 27F campaign was not an isolated example, and the significance of FAI/FRI in Spain is not limited to the domestic threat identified by prosecutors. Spanish-linked activity sits within a transnational anarchist ecosystem extending particularly to Italy and Greece, in which connectivity is expressed less through formal organisational structures than through shared propaganda, prisoner-solidarity campaigns and parallel actions undertaken in response to common causes or events. The 2023 mobilisation around imprisoned Italian FAI militant Alfredo Cospito involved a more direct form of cross-border action: the Italian consulate in Barcelona was vandalised amid an international campaign that also generated violent actions against Italian diplomatic targets in Berlin and Athens.

The broader picture of limited domestic anarchist activity combined with continuing transnational connections also appears in other official assessments. Spain’s 2024 National Risk Assessment addendum on money laundering and terrorist financing likewise describes violent anarchist activity as low and contained, while noting that international campaigns circulated through anarchist websites continue to have repercussions in Spain. Taken together, these sources point to a limited domestic operational footprint but continuing exposure to wider transnational anarchist mobilisation.

Transnationality should therefore be treated as a variable rather than a binary characteristic. The available evidence supports different degrees of integration, ranging from ideological affinity and propaganda exchange through prisoner solidarity and parallel mobilisation to financing, training, skills transfer, and operational cooperation. These forms are not equivalent. In the Spanish case, evidence is strongest towards the ideological and mobilisational end of this spectrum and becomes progressively weaker as the threshold moves towards sustained operational integration.

Foreign conflict participation adds a more concrete dimension to these transnational links. Its scale is difficult to precisely establish because available estimates cover different populations and periods. Fiscalía reporting referred to Spanish nationals who had travelled over preceding years to Iraqi Kurdistan, while broader reporting documented travel to Rojava or Sinjar since 2015. The latter travelers encompassed anarchists, communists, and other ideological profiles. These differently scoped accounts point to a heterogeneous Spanish presence in Kurdish armed theatres.

The clearest organisational example remains Reconstrucción Comunista (Communist Reconstruction), which in 2015 became the Partido Marxista-Leninista (Marxist-Leninist Party, a.k.a. PML-RC), although the case itself predates the main period covered by this report (2020–26). In late 2014, the organisation created a committee in solidarity with the Kurdish cause, sought volunteers to join the Kurdish People’s Defense Units (YPG) in Syria, and selected Álvaro Fernández Ruiz and Pablo Díaz Ocampo, who departed Spain the following month and subsequently received military training in Rojava. Spanish National Court proceedings later documented weapons possession, preparations for violent confrontation, and attacks or threats against political opponents and former members. The case therefore establishes an unusually direct overlap between organised foreign deployment and a violent domestic communist environment, while the court itself distinguished those criminal acts from the party’s formal political programme.

The Donbas conflict generated a separate Spanish cohort. Eight Spanish nationals were detained in 2015 after returning from pro-Russian separatist formations, and contemporary reporting identified several as coming from antifascist or radical-left environments. According to contemporaneous judicial reporting, the Audiencia Nacional dismissed the case in October 2015. Sergio Becerra and Héctor Arroyo, for example, had served together in Unit 404, while other Spaniards were integrated into the Prizrak Brigade and associated international units. Arroyo, who described himself as antifascist and politically closer to anarchism, later returned to the front and rejoined Prizrak despite having already come under investigation in Spain. His trajectory therefore illustrates repeat ideological mobilisation, but the broader cohort is equally important: foreign deployment was not confined to isolated individuals, but included small groups of Spanish volunteers entering the same armed formations. Reporting from 2022 continued to identify Becerra, Ángel Arribas, Arroyo, and other Spanish volunteers within the earlier pro-Russian contingent.

Other trajectories show the acquisition of capabilities abroad more directly. A Spanish volunteer using the alias “Demhat,” described as anarchist and antifascist, said he had never handled a firearm before travelling to Syria to fight alongside Kurdish forces. Foreign conflict experience also remained connected to domestic political milieus after deployment. In December 2021, a Spanish Donbas veteran using the alias “Vadim” appeared publicly with Roberto Vaquero, leader of Frente Obrero (Proletarian Front), and Fernández Ruiz (identified under his alias Álvaro Martos), the Syria veteran who had been selected as a volunteer by PML-RC v to join the YPG in 2014. The same reporting identifies Frente Obrero as PML-RC’s street-level organisation and describes Vadim as having entered Prizrak from an antifascist background before later identifying as communist. The significance lies less in the discussion itself than in what the post-deployment links reveals: veterans of different conflicts remained connected to a Spanish Marxist-Leninist political environment after returning from the conflict zone.

More recent cases bring the issue directly into the article’s timeframe. Two young Catalans, described by Spanish intelligence sources as fitting a far-left profile, returned independently from Kurdistan in July 2023 after spending roughly a year there. A young Catalan nurse close to the okupa milieu was among at least five participants in Kurdish militias repatriated with Spanish diplomatic assistance since 2021. These cases indicate that the overlap between foreign fighting and Spanish radical-left or okupa environments did not end with the earlier PML-RC episode.

Not every trajectory led back to Spain. Martin Klamper, a Spanish-German veteran of the YPG in Syria and later of the YBS in Sinjar, was by 2026 associated with the Anti-Fascist Internationalist Front in Myanmar. Klamper’s trajectory complicates a purely returnee-focused assessment: continued involvement across successive conflict theatres may deepen combat experience, broaden transnational networks, and reinforce militant socialisation, potentially complicating disengagement and reintegration should such individuals later return to Spain.

Figure 5: Spanish-Linked Foreign-Conflict Cases Relevant to the 2020–2026 Assessment.

Figure 5: Spanish-Linked Foreign-Conflict Cases Relevant to the 2020–2026 Assessment. Source: Author's synthesis based on court records and reporting cited in the text. Labels distinguish reported affiliation from proven violent conduct. Selected sources: Audiencia Nacional judgment (2018); Supreme Court judgment (2020); Arges Artiaga profile. Artiaga is included as a boundary/comparator case: the reporting establishes combat experience but no documented link to a Spanish violence-oriented far-left milieu.

Taken together, the cases document organised deployment, repeat travel, combat-skill acquisition, post-return veteran networking, recent returnees linked to radical-left milieus and onward mobilisation into new conflicts. They show that some individuals acquired military skills and transnational contacts exceeding the capabilities ordinarily visible in Spain’s domestic violent far-left milieu.

Public reporting has not identified systematic transfer of those capabilities into domestic violent activity. Spanish authorities have themselves recognised the potential risks associated with returning non-jihadist combatants. Fiscalía 2020reporting explicitly described Spaniards fighting in foreign conflict zones as a potential threat upon return.

For the non-jihadist returnees examined here, however, the most specific later public assessment appears in the Fiscalía’s report covering 2022, which stated that it had no record of incidents involving those returning from Ukraine, Syria, or Iraq. The relevant escalation indicator is therefore not return, but capability transfer: evidence that skills, contacts or operational experience acquired abroad are being transmitted to domestic networks, incorporated into planning, or used to increase the sophistication of violent activity.

Figure 6: Types of Transnationality Applied to Spain's Violent Far Left (2020–2026).

Figure 6: Types of Transnationality Applied to Spain's Violent Far Left (2020–2026). Source: Author’s analytical typology based on the cases cited in the text; categories are not official classifications or measures of prevalence. Selected sources: Spanish Ministry of the Interior on the Laruns sabotage; Climate Emergency Fund on its support for nonviolent disruption. Available reporting does not establish that foreign funding supported the Laruns action or other violent activity. The Budapest participation reference is based on movement reporting and has not been independently verified.

Institutional Response and Coordination

The fragmented character of Spain’s violent far-left landscape is reflected in Spain’s institutional architecture. The Spanish authorities address different manifestations of violent far-left activity through several channels, with responsibility determined by conduct, legal threshold, and security context.

The resulting public record of violent far-left activity is correspondingly dispersed across several institutional and legal frameworks. The Centro Nacional de Inteligencia (CNI) assesses intelligence relevant to national-security threats, while the Ministry of the Interior’s CITCO (Intelligence Centre Against Terrorism and Organised Crime) integrates intelligence on terrorism and violent radicalism and coordinates police and international information exchange. Policía Nacional and Guardia Civil conduct investigations alongside regional forces including the Mossos d'Esquadra and Ertzaintza. Terrorism cases fall within the Audiencia Nacional's specialised judicial and prosecutorial architecture, while the Departamento de Seguridad Nacional (Department of National Security, or DSN) incorporates these threats into its broader national-security assessment. Taken together, this architecture reflects the fact that Spain does not treat the violent far left as a single, self-contained security category. Different manifestations are instead addressed through terrorism, violent-radicalism, public-order and broader national-security frameworks, which explains why the publicly available picture remains institutionally and statistically fragmented.

This distribution of responsibilities reflects the different legal thresholds engaged by street disorder, violent radicalism, insurrectionary anarchism and terrorism, including where participants emerge from overlapping ideological milieus. Trends therefore cannot reliably be inferred from any one institutional dataset. Changes in recorded terrorism, for example, may say relatively little about changes in confrontational street violence or small-scale sabotage, and vice versa.

Spain’s response is not limited to intelligence, policing, and prosecution. At the broader counter-radicalisation level, the current framework is anchored in the 2020 Plan Estratégico Nacional de Prevención y Lucha contra la Radicalización Violenta (PENCRAV), which replaced an earlier 2015 strategy and adopts a multi-agency approach to preventing violent radicalisation across ideological contexts. The wider architecture also includes the Strategic Plan against Terrorist Financing. Alongside this, the Interior Ministry’s 2022 framework for violent youth groups updated a separate police plan first introduced in 2005 and renewed in 2014, strengthening prevention in educational and social settings, coordination with prosecutors to support disengagement from violent groups, and monitoring of online mobilisation and incitement.

Figure 7: Spain's Response to the Violent Far Left.

Figure 7: Spain's Response to the Violent Far Left. Source: Author’s synthesis based on official descriptions of CNI, CITCO, police, Fiscalía, Audiencia Nacional, DSN and Interior’s prevention framework. Institutional source: Centro Nacional de Inteligencia. 

Operational Limits and Escalation Potential

Taken together, the evidence points to a violent milieu oriented less towards an achievable revolutionary seizure of power than towards disruption, symbolic targeting, confrontation with perceived adversaries, and the amplification of wider political struggles.

Demonstrated domestic operational sophistication within Spain’s violent far-left milieu has remained generally limited since 2020. Spain contains small cells capable of surveillance, role differentiation, and repeated attacks; individuals with military training and combat experience acquired abroad; transnational networks capable of propaganda circulation and solidarity mobilisation; and broader milieus capable of episodic street mobilisation. These capacities appear dispersed rather than systematically integrated into a durable domestic violent infrastructure.

This distinction helps reconcile two apparently contradictory features of the contemporary landscape: persistent violent activity and transnational connectivity coexist with very low recorded levels of left-wing and anarchist terrorism. Mobilisation capacity is greater than organisational consolidation, transnational connectivity exceeds demonstrated operational integration, and individual or small-cell capability is superior to demonstrated collective capability.

Operation Phiros and the 27F investigation show how those distinctions can change. Phiros demonstrates that greater sophistication can emerge within a small domestic cell through surveillance, repeated targeting, role differentiation, and increasingly powerful devices. The 27F case shows differentiated roles emerging within episodic street mobilisation. Together, they identify observable mechanisms through which domestic violent capability could develop.

What to Watch

Several developments would indicate a change in the operational capacity of Spain’s violent far-left milieu: the emergence of persistent violent networks from episodic mobilisation; renewed operational activity among insurrectionary-anarchist groups; evidence of sustained cross-border logistical, financial or operational cooperation; and the transfer of foreign-acquired military skills into domestic violent activity. These indicators would help distinguish fluctuations in recorded incidents from changes in organisational capacity. A meaningful shift in capability would be indicated less by isolated confrontations than by repeated target surveillance, more sophisticated devices, common procurement or communications, or evidence that transnational contacts were providing logistical or operational support.

These indicators matter because each would represent movement across one of the boundaries that currently constrain the milieu: from mobilisation to organisation, from connectivity to operational integration, or from individual expertise to collective capability.

Summary

Spain’s contemporary violent far left comprises an uneven distribution of mobilisation, connectivity and capability across overlapping milieus. Fragmentation constrains sustained violent organisation while allowing episodic convergence around political events, prisoners, conflicts, or perceived adversaries. Transnational connections broaden this environment, and foreign conflicts have produced individuals with capabilities exceeding those ordinarily demonstrated domestically. Public reporting has not identified systematic integration of these elements into a more sophisticated violent infrastructure. The relevant escalation indicators are episodic mobilisation becoming sustained organisation, transnational solidarity becoming operational support, and individually acquired skills becoming transferable collective capability.

Reintegration of Foreign Terrorist Fighters in the European Union: Challenges and Ways Forward

Body

The reintegration of those returning from conflict zones – especially Syria and Iraq – after having been involved in extremist and terrorist groups like ISIS and Al-Qaeda has been a security concern for European Union (EU) member states in the last decade. In fact, in 2017, it was estimated that around 1563 individuals had come back to EU countries (including the United Kingdom). Many times, they brought their children, which has presupposed an added layer of complexity to the matter of how member states should adequately deal with their return. Denominated as Foreign Terrorist Fighters (FTFs) at the international policy level, these individuals still pose challenges at the policy and security level in EU member states. This is the second in a two-part blog series on the reintegration of extremist and terrorist individuals in the EU and will explore current challenges and ways forward in the reintegration of FTFs.

The repatriation of FTFs is a complex matter that has challenged policymakers and practitioners for over a decade. The EU has taken action in an attempt to address this maand capacity building of key stakeholders in the field towards the reintegration and rehabilitation of FTFs. Indeed, the EU Knowledge Hub for the Prevention of Radicalisation has a key role in this regard, particularly through its Thematic Panel 6 ‘Management of Foreign Terrorist Fighters (FTFs), Volunteers, and their Families’. 

However, often, reintegration efforts are impacted by challenges at the member states’ level, such as stigmatization, personal vulnerabilities (e.g., continued radicalization, trauma and mental health matters, physical health issues), political dynamics and priorities, and discrepancies in multi-agency work. Besides, it can also be difficult to keep track of these individuals upon their return, which hinders the capacity of member states to ascertain vulnerabilities and put forward adequate interventions when needed. Legal consequences, which are often the only way for practitioners to be in contact with FTFs, are not always consistent and, when implemented, can be overly focused on punitive measures without complementary reintegration efforts being employed.

Another pressing issue when it comes to FTFs is the matter of repatriation. In fact, some countries are not open to receiving their citizens and, in some cases, even strip them of their citizenship. A well-known case is that of Shamima Begum, a United Kingdom-born woman who left for Syria at 15-years-old to join the Islamic State and who, upon trying to return, saw her citizenship revoked, leaving her stateless. Nonetheless, the approach of denying repatriation has been questioned in terms of efficiency, as well as regarding concerns for basic human rights, particularly concerning cases where it leads to statelessness. Besides, without repatriation, potential reintegration and rehabilitation efforts are highly undermined.

The specificities of women and children

Within the already complex matter of managing the return of FTFs are the cases of women and children. Regarding women, most of them left for Syria and Iraq to follow their husbands or marry men already involved with extremist or terrorist groups. However, some of the intention of joining these groups to contribute to their cause. Concerning children, these were either taken to or born in conflict zones, and many ended up being held in detention camps in Syria with their mothers after the dismantlement of ISIS and Al-Qaeda. Some of these children live alone in the camps, leaving them in situations of heightened vulnerability to being harmed, exploited, and recruited.

One of the most well-known locations was the now closed Al-Hol camp in northeast Syria, which, in 2025, held more than 30 000 people, including FTFs. The United Nations estimates that 60% of these individuals were children and that 8 500 people were foreigners. Accounts regarding the camp highlight the dire conditions in which these individuals lived, often without prospects of repatriation and reintegration in their home countries. Indeed, such conditions might even further develop vulnerabilities to radicalization and facilitate continuous recruitment by extremist groups that still operate in the area.

When it comes to reintegration, specific challenges are associated with these women and children. Women’s often blurred roles and associated stigmas make it difficult to understand their needs and assess their vulnerability upon returning. Indeed, judicial responses can be complex to implement due to ambiguous evidence, and women’s potential dual role as victim and perpetrator adds another layer of intricacy when dealing with their reintegration. 

As for children, these are particularly vulnerable during key developmental stages of their lives. Hence, being exposed to high amounts of violence can have serious consequences, both at the physical and psychological levels, which can be exceptionally difficult to overcome during their reintegration process. Thus, their heightened vulnerability and multi-level needs require cross-sectoral approaches that are not always available in the country in which they are being reintegrated. Besides, being taken to a new country and the changes associated with it can pose significant challenges. These children’s ability to reintegrate is highly dependent on their experiences in the new country, hence being fundamental that member states are prepared to receive them.

Ways forward in policymaking

As the adequate management of returning FTFs and their families remains a pressing matter for EU member states, continuously promoting know-how development and assessing policy design and implementation in this field are crucial. Understanding how member states can be active participants in the reintegration of their citizens whilst mitigating security concerns and upholding fundamental human rights remains a challenge that has yet to be adequately addressed. As some member states have more experience than others in the matter, potentially transferable lessons learnt and promising practices – which are gender sensitive and age-tailored – can be a key first step to ensure that member states are well equipped and prepared to receive FTFs and their families when/if faced with the issue.

Overall, the EU encourages the repatriation of FTFs and their families, especially when women and children are involved, but maintains that, ultimately, the decision is of the member states. Nonetheless, when making such decisions, it can be beneficial for member states to consider the long-term benefits of repatriation as a means towards both potentially effective reintegration and hindrance of recidivism, as well as a preventive measure that will mitigate the consequences of living in difficult circumstances in detention camps – particularly when it comes to children.

Ultimately, inaction from member states or refusal to repatriate their citizens does not ensure their security, nor is it sustainable in the long-term. In fact, when faced with this uncertainty, FTFs and their families have left the detention camps even without government support and returned to their countries. With unresolved grievances and a lack of key support, such can pose additional difficulties to member states. Hence, a proactive and multi-agency approach that prioritizes reintegration can be of added value to implement as soon as possible.

Russia and Italian Right Wing Extremists—Part III: Transnational Political and Martial Arts Networks

Body

This blog entry is the third in a three-part series focusing on foreign fighters from Italy fighting for Russia in the war against Ukraine. The first entry describes a network of neo-Nazi and neo-fascist extremists in Italy who fought on the side of Russia in occupied Ukraine and recruited foreign fighters from Italy. The second installment focused on the Russian links of the right-wing extremist networks in Italy, and the political networks they associated with. This final part analyses the wider European political and martial arts networks these fighters belonged to. These networks have also functioned as bases for Russian recruitment as well as centres for radicalization into violent extremism.

The pro-Russian mercenary and recruitment network arrested in Italy in 2018 and convicted in 2019 featured organizers with links to Russian intelligence who were operating within local and international groups that included both the far left (neo-Soviets) and the far right (neo-Nazis and neo-Fascists). This blog post describes the three main groups that were connected with mercenary recruitment in Italy and how they came together across significant ideological differences in support of the pro-Russian separatist movement in occupied Ukraine.

Russian tradecraft in an Italian martial arts group

Olsi Krutaini, an Albanian immigrant to Italy, was convicted in Italy in 2019 as a member of the network who recruited mercenaries to fight for Russia in Donbas, for which he served two years and eight months in Italian prison. In his autobiographical accounts Krutani has stated he is a retired paratrooper for the Russian Armed Forces who served in Chechnya. He owns several gyms in Italy where he teaches martial arts and he tours to give martial arts workshops throughout Italy. In his 2019 trial prosecutors stated that his martial arts workshops were fronts for his promotion of the Russian political and social movement Essence of Time (Суть времени) (EoT). In an intercepted phone conversation in August 2015, Orazio Gnerre indicated that he had arranged with Krutani to direct proceeds to Donbas from Systema (GRU-linked Russian martial arts) courses they had planned together in Italy.

This follows a broad pattern in Russian tradecraft that stretches back to the Cold War era. In his 1988 book Spetsnaz: The Inside Story of the Soviet Special Forces, GRU defector Viktor Suvorov (Vladimir Rezun) described how special forces personnel could be disguised as airborne forces in the Soviet army and would operate in the West undercover as professional athletes. Russian intelligence continues to follow a similar pattern, with one recent studynoting, for example, that the Russian GRU and FSB intelligence services are using Russian martial arts clubs in the EU as recruitment hubs with “coaches and officials in Western Europe including former agents, paratroopers and civilian combatants.”

Pro-Russian Militants Bridged Left-Right Boundaries

One of the notable features of this case is that it involved coordination between left-wing extremist and right-wing extremist groups in Europe who came together in opposition to the EU and NATO and in support for Russia. The leftist groups included Essence of Time and Millennium, while the right-wing extremist groups included neo-fascist and neo-Nazi groups with close ties to far right political parties in Northern Italy. 

EoT is a communist organization based in Russia that aims for the re-establishment of the USSR. Mercenary recruiter Olsi Krutani was a member of EoT, as were a number of European and American mercenaries, including Spanish mercenary Sergio Becerra, American mercenary Russell Bonner Bentley, and Italian mercenary Gabriele Carugati. EoT was able to appeal to Italian and Spanish fighters by drawing parallels with the experience of those countries in World War II, portraying the Ukrainians as Nazis and Fascists and aligning the Russia with the Anti-Fascists who fought against the villains of WWII in Italy and Spain.

Millennium (a.k.a. Millennivm, Millennium-PCE) was an Italian political group co-founded by university students Orazio Gnerre and Luca Pintaudi.  The group’s philosophy blended anti-liberal philosophies with Aleksandr Dugin’s Fourth Political Theory, which aims to move beyond left-right distinctions. Pintaudi had been a member of the Italian left party Sinistra Ecologia Libertà and was a member of a leftist student group. When Gnerre and Pintaudi travelled to the Donbas in June 2014, they appeared in photos holding an Italian Communist Party flag alongside Pavel Gubarev, then the self-proclaimed leader of the pro-Russian separatist Donetsk People’s Republic. In associated communications they identified as Anti-Fascists, by which they likely meant anti-Ukrainian and anti-EU.

How pro-Russians from the left and right came together in Italy

While many details of the case remain unknown, it appears that the parties on the left and right were initially in contact with Russians in Moscow and the Donbas separately before they came into contact with each other. 

As a member of EoT and self-described Russian paratrooper who served in Chechnya, Olsi Krutani presumably had his own line of contact with Russian intelligence.

Orazio Gnerre, co-founder of Millennium, by his own account had been in contact with sanctioned Russian propagandist Aleksandr Dugin for “at least five years” before the annexation of Crimea in February 2014, the event which mobilized the pro-Russian networks in Italy. After the annexation of Crimea, Gnerre and Millennium co-founder Luca Pintaudi traveled to the Donbas, where they met separatist leader Pavel Gubarev as well as GRU officer Igor Girkin. Up to this point, they do not appear to have been in touch with members of EoT or political groups from the Italian right-wing extremist milieu.

During the same time period, members of far-right political and right wing extremist networks in Northern Italy were in contact with Russia through their own independent channels. In February 2014 one of the leaders of the mercenary network, Andrea Palmeri, was sentenced to four years in prison for his role in the violent assault on left wing activist Stefano Benassi and ordered to remain under house arrest while his appeal was pending. Palmeri fled from house arrest in Northern Italy to Donbas in late February 2014, and appears to have travelled from there to Russia before returning to Ukraine to fight for Russia in fall 2014. He operated as one of the main recruiters of Italian mercenaries, largely through his Facebook page, which was handled by Antony Cataldo, an Italian veteran of the French Foreign Legion who received military training in Russia.

Following this first stage of activity in February 2014, when the various parties in Italy contacted or renewed contact with handlers in Donbas and Moscow, they each established sham charities for raising money for the pro-Russian opposition in Donbas, which prosecutors identified as fronts for mercenary recruitment. 

Phone records presented during his trial also showed that Palmeri was in contact from Donbas with members of Millennium and Olsi Krutani by October 2014.

Gnerre organized a conference which took place on 29 November, 2014 in Lavagna, Genoa, in the Liguria region of northern Italy. The ostensible purpose was to raise funds for medical aid in Donbas, but prosecutors prosecutors in the trial against Palmeri and the other mercenaries and mercenary recruiters argued that the conference was the first venue that brought together the members of Millennium and the far left university network, Krutani and his left-wing extremist group EoT, with right-wing extremist skinhead and neo-fascist groups based in northern Italy. 

Intercepted phone calls, presented during his trial, indicated that Olsi Krutani received instructions from an unknown superior to “merge the groups.” In this way the associated right-wing and left-wing extremist groups in Italy involved in this case apparently succeeded in joining, not by overcoming their ideological differences but through their shared opposition to the EU and Ukraine and support of Russia.

POLICY RECOMMENDATIONS 

  • Domestic intelligence monitoring of foreign state-linked civil society organizations' online activity. EU member states should task domestic security services with monitoring the online activity including social media posts and fundraising activities of civil political groups and martial arts clubs for links to foreign state intelligence networks.

  • Develop an EU-level counterintelligence mechanism. The EU should explicitly include foreign state use of civil society organizations such as martial arts networks, cultural associations, and charitable fronts, as a named threat category within the forthcoming Europol mandate reform legislation announced under ProtectEU. This should include a specific mandate for cross-border intelligence coordination on such networks distinct from the existing terrorism and FIMI frameworks.
30
Jul

The Berlin terror attack exposes deep failings in the state

Germany knew Abdul Ballout was dangerous. It let him go anyway.

“The question is whether the system needs reform, or whether its application was wrong,” says Hans-Jakob Schindler, an expert on terrorism at the Counter Extremism Project, an ngo. “But it certainly looks odd.”

 

 

28
Jul

Berlin Pride attacker was "hardcore ISIS sympathizer" on government list, extremism expert says

Authorities say the suspect who attacked Berlin's Pride event was known to German police for other crimes. Dr. Hans-Jakob Schindler of the Counter Extremism Project speaks on German efforts to monitor extremists, and CBS News' Bradley Blackburn takes a look at German data on hate crimes against LGBTQ+ people.

27
Jul

Deadly Attack at Pride Event Shakes Europe & Trump Roasts the Media

A deadly terror attack on a Pride event in Berlin prompts more calls for a crackdown on Islamic extremism. Fresh off the rescheduled White House Correspondents Dinner, Trump signals a new phase in the Iran conflict: And, the key midterm contests are locked in. Reporting from Tim Rice and Cabot Phillips. Plus, we speak with Dr. Hans-Jakob Schindler, Senior Director of the Counter Extremism Project. Get the facts first with Morning Wire.
26
Jul

GB News: Interview with Dr Hans-Jakob Schindler

Speaking about the terrorist attack on the Berlin Pride event, Dr Hans-Jakob Schindler tells GB News that it's unclear which part of the Islamist milieu the suspect belonged to. He explains the security steps that were implemented in advance for the event.

24
Jul

'Hamas sleeper cell terrorist' is found working at luxury Crete hotel 'while preparing cruise ship attack' - as plot to carry out 'second October 7' in Europe is foiled

However, terrorism expert Hans-Jakob Schindler of the Counter Extremism Project said he did not find that explanation convincing, saying: 'The personnel links to the Hamas leadership are too close.'

Schindler said Hamas' growing weakness following the war with Israel could increase the risk of attacks abroad.

'Hamas' weakness is not a good sign for Europe in itself,' he added.

He said terrorist organisations seek publicity to demonstrate their continued relevance.

 Schindler further suggested that an attack in a European city or on a cruise ship in the Mediterranean would generate global attention