(New York, N.Y.) — The Counter Extremism Project (CEP) reports on the methods used by extremists and terrorist groups on the Internet to spread propaganda and incite violence. In this week’s issue:

• ISIS Calls for Attacks on World Cup Matches and Attendees
• ISIS Activity Roundup
• Pro-ISIS Tech Group Posts Cryptocurrency Wallet Explainer
• Neo-Nazi Accelerationist Forum Celebrates First Anniversary; Founder Praises Neo-Nazi Accelerationist Group
• Online Neo-Nazis and Accelerationists Respond to Arrest of South Carolina Man Who Allegedly Defaced a Jewish Community Center
• Extreme Right Propagandists Promote UK Independent Report on Sexual Violence, Trafficking, and Organized Crime, Encourage Violence in Some Cases
• Active Club Substack Posts Advice for Night Protests and Counter-Surveillance Tactics in Escalation of Tactical Advice

ISIS Calls for Attacks on World Cup Matches and Attendees

ISIS called for acts of terrorism against the 2026 FIFA World Cup via the editorial in the group’s al-Naba newsletter released on June 18. The article encouraged knife and vehicular attacks inside stadiums, as well as targeting fans on the street, noting that a successful assault could cause stampedes, leading to more injuries and deaths. The authors noted that the tournament is taking place in 11 U.S. cities, as well as in Canada and Mexico, and that the event’s duration, lasting over one month, could provide ample time for surveillance and target selection. The editorial also noted that sports were permissible as long as they did not violate religious law, but condemned watching the World Cup as a waste of time that could be spent praying, and also criticized the idolization of players and teams. The article pointed out that the media spectacle surrounding the games was a good opportunity to spread pro-ISIS propaganda online using World Cup-related hashtags.

On June 1, pro-ISIS propagandists on RocketChat and SimpleX spread propaganda images calling for attacks on the World Cup. The group’s online supporters also previously called for attacks against the 2018 World Cup held in Russia and the 2022 World Cup in Qatar.

The June 18 ISIS editorial encouraging attacks on the 2026 FIFA World Cup. Screenshot taken on June 18.

ISIS Activity Roundup

Between June 14 and 20, ISIS claimed credit for 16 attacks. Six attacks occurred in the Democratic Republic of the Congo, six in Nigeria, and four in Syria.

On June 16, ISIS claimed responsibility for an attack the previous day in Raqqa, Syria, claiming that four people were allegedly killed or wounded in an attack on an Internal Security Command headquarters. Two ISIS fighters, both reportedly wearing suicide vests, attacked the building, with one detonating their explosives, killing three people and injuring three others. The terrorist group praised the attack in the al-Naba newsletter released on June 18. It noted that in a video, one of the attackers called Syrian soldiers “Trump’s minions and guard dogs.”

ISIS also claimed responsibility for an attack using explosives on June 17 targeting the head of the Justice Palace department in the town of Babila, near Damascus. The official, Salah Ahmad al-Saleh, was injured in the bombing. On June 17, a pro-ISIS Telegram channel praised recent attacks in Syria, claiming that they showed a high level of operational security, planning, and coordination.

Pro-ISIS Tech Group Posts Cryptocurrency Wallet Explainer

On June 14, the pro-ISIS tech group Qimam Electronic Foundation (QEF) released a document explaining six types of cryptocurrency wallets. The post, spread on PasteThis.To and distributed via Rocketchat, noted examples of, and basic usage notes for self-custodial wallets, custodial wallets, multi-signature wallets, smart contract wallets, multi-party computation wallets, and embedded wallets. Pro-ISIS and ISIS-linked propaganda groups routinely call for making donations using cryptocurrency. 

Neo-Nazi Accelerationist Forum Celebrates First Anniversary; Founder Praises Neo-Nazi Accelerationist Group

Between June 14 and 17, members of a neo-Nazi accelerationist forum celebrated the site’s first anniversary. As of June 18, the forum had over 1,050 registered users and over 51,000 messages on over 2,750 threads. Users of the site have promoted neo-Nazi and militant accelerationist beliefs, glorified violent groups including the Atomwaffen Division, and have celebrated acts of white supremacist terrorism. Posts have promoted racism, antisemitism, anti-Muslim sentiment, and anti-LGBTQ+ beliefs. The forum’s creator and early leadership noted their desire to recreate the notorious accelerationist Iron March forum, which was active from 2011 to 2017. 

In a June 14 post celebrating the forum’s anniversary, a poster noted that the first year was about solidifying the site’s online presence and early growth, and that the second year would hopefully focus on recruitment, including youth. Another forum member noted that posters would “live to see the collapse of the system… Or we’ll die taking it down.”

Forum members previously noted that one of the two teenagers who murdered three people at the Islamic Center of San Diego on May 18 likely had had an account before moderators removed it. On June 3, forum members released a new edition of a neo-Nazi book, originally published in 2021, that advocates for acts of violence against LGBTQ+ people, Jews, Latinos, and others.

On a podcast released on June 7, the current forum owner described his own radicalization and discussed his use of the 4chan imageboard before moving to Telegram. He also praised the militant accelerationist group Injekt Division, stating, “I am proud to say they are my comrades.”

Online Neo-Nazis and Accelerationists Respond to Arrest of South Carolina Man Who Allegedly Defaced a Jewish Community Center

Online neo-Nazis and white supremacists noted the arrest of Dalton Ray Mullis on June 11 for posting antisemitic flyers encouraging violence at a Jewish community center in Charlotte, North Carolina. Mullis, who extreme right Telegram users identified as the leader of a small accelerationist neo-Nazi group, was charged with a hate crime and faces up to 20 years in prison. On January 20, the group that Mullis allegedly led claimed responsibility for defacing the Shalom Park facility with antisemitic posters. 

A Telegram channel connected to an accelerationist website operated by former members of the Atomwaffen Division and successor organizations noted that defacing the Jewish community center was pointless. A white supremacist Christian accelerationist group condemned Mullis, proclaiming that the group disavowed him and would not associate with those who commit illegal acts. Similarly, a Canadian accelerationist group claimed that they do not conduct illegal actions and had no official connection with Mullis or his group, despite being “friendly” with one another. Members of a neo-Nazi chat noted that accelerationism was a legitimate strategy, but trying to get media attention through provocative methods would lead to poor results, including arrest.

One accelerationist meme channel posted an image in support of Mullis. Users of a neo-Nazi accelerationist forum founded in June 2025, on which Mullis allegedly posted, noted his arrest and warned others to remove him from communications channels and chats. Forum members noted that Mullis made several operational security mistakes.

Extreme Right Propagandists Promote UK Report on Sexual Violence, Trafficking, and Organized Crime, Encourage Violence in Some Cases

Approximately two dozen extreme right Telegram channels promoted a report released by right-wing British MP Rupert Lowe, head of the anti-immigrant Restore Britain party, on June 16. The report, which is not an official parliamentary inquiry, alleged that from the 1950s to the present, 250,000 girls were subjected to sexual violence, trafficking, exploitation, abuse, and torture by predominantly Pakistani Muslim men and that law enforcement, health services, schools, politicians, and other authorities intentionally did not take action. In at least one instance, law enforcement has disputed the report’s alleged findings.

A Scottish chapter of the white supremacist Active Club advised reading the report to “get angry” and use it as motivation to “spur fascist street action in defence [sic] of our people’s [sic] and Nations.” Others directly promoted violence, including an Ohio-based white supremacist Telegram channel with 900 subscribers, and an antisemitic channel with over 6,000 followers. Several additional channels shared a post from a right-wing Swedish bodybuilder, who has almost 14,000 followers on Telegram, calling for “mass executions” and “mass remigration.” Other Telegram channels posted anti-Muslim and anti-South Asian content. 

Active Club Substack Posts Advice for Night Protests and Counter-Surveillance Tactics in Escalation of Tactical Advice

On June 15, an Active Club-affiliated Substack published an essay allegedly written by a member of a UK chapter that advocated unpermitted evening or nighttime protests. The essay noted that nighttime events had multiple advantages, including: a lower chance of attracting counter-protestors; the difficulty of identifying participants at night; fewer counter-protestors or journalists with cameras who could later be used to identify participants; and the difficulty for the police to identify participants in low-light situations. The essay advised “wearing two pairs of black surgical gloves, masks, non-descriptive dark clothing and the leaving of all electronic devices at home”. Also, it noted that sand, oil-based paint, and engine lube could be combined in balloons and be thrown at windshields and glass surfaces to make them opaque. The essay stated that there was “a real-time transition in patriotic protest tactics in places like Glasgow” where anti-immigrant protestors adopted “black bloc methodology.”  The essay claimed to provide advice in an “academic capacity” as a way of avoiding responsibility.

On June 17, the same author posted an essay on counter-surveillance, specifically how to prevent being followed to or from one’s place of residence. The essay provided instructions on how to tell if someone is following you and how to evade a tail. While the author noted that it would be theoretically acceptable to attack a tail if they were “Antifa, a racial or religious enemy, or a journalist,” it was inadvisable in case the individual was a member of law enforcement or the security services. The essay also warned the reader that, if carrying a cell phone, always have the battery and SIM card disconnected, and carry the SIM card in your pocket so you can quickly destroy it if you are arrested. The post also noted that individuals’ locations could be revealed through cell phone triangulation.

A post from the Active Club Substack noting that anti-immigrant protestors “have upgraded their understanding of OPSEC after the Northern Ireland protests.” Screenshot taken on June 18.