(New York, N.Y.) — The Counter Extremism Project (CEP) reports on the methods used by extremists and terrorist groups on the Internet to spread propaganda and incite violence. On April 21, ISIS-K-linked Al-Azaim Media released issue 48 of the web magazine Voice of Khorasan, which included an article celebrating the December Bondi Beach attack, and articles condemning the Taliban and the governments of China and Turkey. ISIS also condemned al-Qaeda regarding the group’s conduct in Mali in an editorial in the al-Naba newsletter, released on April 30. ISIS online supporters celebrated the capture of the town of Ménaka in Mali.
In a search of TikTok in mid-April, CEP researchers located 10 accounts that posted ISIS or pro-ISIS propaganda, including an account that shared bomb making information, which was still on the social media site two weeks later. Elsewhere, ISIS online supporters warned that AI systems should never be used to help build explosives, and that it was crucial to rely on experts and preserve online anonymity.
ISIS claimed responsibility for 58 attacks between April 12 and May 2.
On April 29, al-Qaeda released a communiqué in support of the Afghan Taliban that called for attacks on the Pakistani government.
White supremacists and neo-Nazis celebrated the U.S. Department of Justice’s filing of criminal charges against the Southern Poverty Law Center (SPLC). One extreme right Telegram channel that focuses on strategy noted the potential pause in the non-governmental “surveillance apparatus” with approval. Other channels and chat users asserted the legitimacy of their movement and spread antisemitic conspiracy theories.
CEP researchers reported two Telegram channels to the communications app that shared bomb making instructions, including manuals made by a pro-ISIS group and a notorious ISIS bomb making video, white supremacist terrorist manifestos, and Nihilistic Violent Extremist content. One channel had been removed over two weeks later. Also on Telegram, a neo-Nazi accelerationist group called for opposition to the U.S. government and Jews “by any means necessary,” while a Russian neo-Nazi channel posted violent footage from the Christchurch terrorist attack paired with combat footage from Ukraine.
The Nordic Resistance Movement (NRM), listed as a Specially Designated Global Terrorist (SDGT) by the U.S. government, launched a new website on April 20. Finally, CEP researchers found advertisements on 43 Telegram channels in April, including on channels affiliated with white supremacist Active Clubs in several countries, the NRM, Patriot Front, the Hammerskins, and others.
ISIS-K Linked Web Magazine Celebrates December Australia Terrorist Attack, Calls for Additional Violence Against Jews
On April 21, the ISIS-K-linked Al-Azaim Media released the 48th issue of the web magazine Voice of Khorasan, which included a section celebrating the December 14, 2025, Bondi Beach terrorist attack on Jews celebrating Hanukkah. The article noted that the mass shooting showed that ISIS supporters can still carry out attacks, and noted the importance of violence to redeem oneself spiritually. The article called for further attacks on the Jewish community, noting that all Jews were permissible targets and encouraging attacks on those in close physical proximity.
The main article accused the Afghan Taliban of adopting secularism and abandoning the implementation of religious law, calling for Taliban soldiers to desert the group. Also, regarding Afghanistan, the magazine justified a January attack on a restaurant in Kabul that was frequented by Chinese nationals, claiming that it was revenge for the Chinese government’s persecution of the Uyghurs and accusing the Taliban of providing security and only caring about potential economic benefits from relations with China while abandoning religious duties.
Another article condemned the government of Turkey, accusing it of following the West, embracing secularist democracy, and arresting ISIS fighters. A similar section condemned the Syrian transitional government.
Issue 48 of Voice of Khorasan was released almost a month after an Al-Qaeda in the Arabian Peninsula guide that similarly praised the Bondi Beach perpetrators and contained instructions for making explosives.
ISIS Condemns Al-Qaeda in Al-Naba Editorial
ISIS, in its editorial in issue 545 of the weekly newsletter al-Naba, condemned al-Qaeda for allegedly seeking to create a governing system in Mali deemed acceptable to other states, comparing this to the current government of Syria and the Afghan Taliban. The editorial also condemned al-Qaeda’s alliance with the Azawad Liberation Front (FLA), declaring the latter an apostate nationalist movement seeking regional independence. The editorial asked whether al-Qaeda had given up the group’s “global jihadist project” to endorse “tribal-ethnic nationalism.”
Pro-ISIS Propaganda Channels Celebrate Capture of Mali Town; JNIM Releases Statement Praising JNIM-FLA Offensive
On April 28 and 29, Pro-ISIS propaganda channels on Telegram celebrated the group’s brief takeover of the town of Ménaka, Mali. One channel noted that ISIS Sahel Province had established checkpoints in the town, and claimed that the border separating Mali and Niger had “disappeared.” The Malian armed forces and Russian soldiers with the Africa Corps reportedly retook Ménaka on April 29. Posts also condemned al-Qaeda for allegedly seeking to follow the governments of Mauritania, Saudi Arabia, and the Taliban, defined as “implementing religion in a manner acceptable to the United Nations.” Tuareg separatists of the Azawad Liberation Front (FLA) and al-Qaeda linked Jama’at Nusrat al-Islam wal Muslimeen (JNIM) have launched an offensive in Mali, killing the defense minister, attacking military bases, and allegedly capturing two cities.
On April 30, JNIM released a statement via the group’s Az-Zallaqa Foundation, praising the April 25 offensive and noting cooperation with the FLA. The communiqué noted attacks in Gao, Sévaré, and Kati, and called for the creation of a united front to fight the government of Mali. Az-Zallaqa also called for the creation of “a peaceful, responsible, and inclusive transition” in Mali, to be governed by religious law.
Pro-ISIS Content, Including Bomb Making Information, Located on TikTok
CEP researchers found 10 pro-ISIS accounts on TikTok in a sample of content found on April 14. The accounts made posts advocating for acts of terrorism, celebrating individuals who had committed or attempted to commit attacks, pages from the group’s al-Naba newsletter, clips from propaganda videos, Amaq propaganda photos, and additional pro-ISIS posts.
An account with over 300 followers posted instructions for making homemade explosives. The TikTok account also advertised a library of explosives-related content and encouraged its followers to contact it via several platforms, including Threema and Element, to obtain manuals. The account used the same name as a pro-ISIS explosives-related channel on a different communications platform. CEP previously reported two other TikTok accounts likely affiliated with the same user in August and November 2025.
On April 10, an account with over 1,100 followers made a post glorifying the two individuals charged with throwing explosives at a demonstration outside of Gracie Mansion in New York City on March 9. Another account, with over 1,200 followers, posted a photo on April 7 glorifying the November 2015 Paris attackers, which originally appeared in a January 2016 ISIS video. The post had over 5,000 views when CEP found it one week later.
Other accounts posted pro-ISIS propaganda posters that encouraged lone actor violence, including an April 13 post that encouraged vehicular attacks that had over 550 views within 24 hours.
CEP reported the 10 accounts to TikTok on April 14. Two weeks later, on April 29, three of the 10 accounts were still online, including the account that posted explosives-related content, and two accounts that posted ISIS propaganda photos and pages from the group’s al-Naba newsletter.
A post from a pro-ISIS TikTok account encouraging acts of terrorism received over 550 views within 24 hours. TikTok removed the account after CEP reported it. Screenshot taken on April 14.
Pro-ISIS Channels Issue Warnings Not to Use AI For Building Explosives or Depicting ISIS Fighters
In late April, two pro-ISIS entities issued warnings relating to the use of AI by the group’s supporters. On April 21, a pro-ISIS entity on the RocketChat and Element platforms that posts instructions and tips for building explosives noted that AI should not be used in relation to bomb making. The post noted that AI did not provide the physical or operational security necessary, that preparing explosive components was dangerous, that only experts should provide advice, and that AI systems did not ensure anonymity. In January, an online ISIS supporter shared part of a conversation with an AI chatbot regarding explosives and claimed that AI systems could be used to help in the construction of a bomb.
On April 26, a pro-ISIS channel on Element noted that AI should not be used to generate images that violate religious law. The post noted that AI images of ISIS leaders or fighters should never be created or used.
Roundup of Claimed ISIS Attacks
Between April 12 and May 2, ISIS claimed credit for 58 attacks. ISIS claimed 19 attacks between April 12 and 18, including eight in Nigeria, three in Niger, and two each in Mali, Mozambique, Pakistan, and Syria. Between April 19 and 25, ISIS claimed responsibility for 22 attacks: 18 in Nigeria, and one each in Niger, Cameroon, Mozambique, and the Democratic Republic of the Congo. Finally, during the week of April 26 to May 2, ISIS claimed responsibility for 17 attacks. 11 attacks occurred in Nigeria, three in Mozambique, and one each in the Democratic Republic of the Congo, Pakistan, and Syria.
Al-Qaeda Issues Communiqué in Support of Afghan Taliban and Calls for Attacks on Pakistani Government
On April 29, al-Qaeda released a statement via the group’s As-Sahab Media Foundation, noting its “profound and enduring bond” with the Afghan Taliban and condemning the Pakistani government. The communiqué noted al-Qaeda’s intention to conduct killings and assassinations against Pakistani political and military leaders and called on Pakistani soldiers to mutiny. The post stated that the Pakistani military has sought to destabilize the country and engage in a war against the Afghan Taliban at the direction of U.S. President Donald Trump. It condemned Pakistani elites, accusing them of taking bribes and choosing to ally with the U.S. Al-Qaeda noted that Afghans have suffered for decades fighting against the Soviets and the U.S., noting that the current war with Pakistan was a continuation of that fight.
April 29 al-Qaeda communiqué calling for attacks on the Pakistani government and pledging support for the Afghan Taliban. Screenshot taken on April 30.
Neo-Fascist Propagandists Celebrate SPLC Indictment, Assert Legitimacy of White Power Organizing, Promote Antisemitism
Multiple white supremacist propagandists and leaders celebrated on Telegram and social media following the April 21 indictment of the Southern Poverty Law Center (SPLC) by the Department of Justice. A Telegram channel connected to former members of the Atomwaffen Division that promotes accelerationism noted that their views were legitimate, that the white power movement was not astroturfed, and that they were looking forward to informants being publicly named. Robert Rundo, the founder of the Active Club movement, similarly cheered the indictment and speculated on the identity of those in the white power movement who had given information to the SPLC. A Texas area Active Club also posted a video on April 28, noting the legitimacy of the extreme right, and invoking tropes of Jewish control of U.S. politics. On April 24, Patriot Front continued to push back on allegations from far-right influencers that the U.S. government supports the group.
An antisemitic media group whose founder served time in prison for breaching the Capitol on January 6, 2021, noted that “the tables had turned,” while a neo-Nazi Telegram channel with over 1,700 subscribers noted on April 22 that “Charlottesville is now objectively and officially the fault of the Jews.”
A white supremacist podcaster noted that the indictment was positive, stating, “I don’t see any downsides politically, this is, in all likelihood gonna [sic] be good.” Members of a Telegram chat that endorses violence and routinely posts footage from white supremacist mass shooting attacks condemned the SPLC.
Some posters, including a former leader of the white supremacist National Justice Party, were celebratory but also suspected U.S. government motives, suggesting that the federal government wanted to be the sole entity responsible for infiltration and suggested that this was an attempt to appeal to the far-right before launching future “wars or schemes.”
A Telegram channel with over 250 subscribers that regularly posts on strategy and tactics noted that the SPLC indictment could disrupt “NGO undercover activities in the near term” and highlighted a gap in the “surveillance apparatus.”
In October 2025, extreme right propagandists celebrated the FBI cutting ties with the SPLC and the Anti-Defamation League. A significant neo-Nazi accelerationist Telegram channel at the time accused the SPLC of involvement in “every major movement arrest [in] the past decade.”
CEP Reports Two Telegram Channels Sharing Bomb Making Instructions, White Supremacist, and Nihilistic Violent Extremist Content
Two channels on Telegram that shared bomb making information, encouraged acts of terrorism, and posted information useful for committing acts of violence were still on the communications platform over two weeks after CEP reported them. One channel, created on April 13, “to help spread hidden PDFs to aid in terrorism,” used a logo associated with the Terrorgram Collective and posted multiple guides for creating explosive devices and homemade firearms, including guides made by pro-ISIS groups, the manifesto of the Christchurch attacker, and content from violent accelerationist and Nihilistic Violent Extremist (NVE) groups. The same channel also posted information on harassment, swatting, and doxxing.
The other channel, created in January 2025, also posted white supremacist terrorist content, including the Christchurch attacker’s manifesto, neo-Nazi books, including the anthology Siege, and guides on explosives, including an infamous ISIS step by step bomb making video and pro-ISIS explosives guides.
CEP reported both channels to Telegram on April 15. As of April 30, both channels were still online. The channel created on April 13 was removed by Telegram between April 30 and May 4.
ISIS bomb making video (text obscured by CEP) on a Telegram channel that posted various content promoting white supremacism, terrorism, and Nihilistic Violent Extremism (NVE). The video, posted on February 2, 2025, had over 1,200 views as of April 30. Screenshot taken on April 30. The channel was still online on May 4.
Neo-Nazi Accelerationist Group Calls to Oppose Jews and U.S. Government “By Any Means Necessary”
On April 29, a small online neo-Nazi accelerationist group, noting the difficulty of being “fully legal,” stated that their group opposed the U.S. government and Jews “by any means necessary.” The group, which has approximately 250 subscribers on its Telegram channel, is linked to at least three similar channels that claim to represent accelerationists in the Southeast, Northeast, and Pacific Northwest. The channel has posted photos that show antisemitic sticker and flyer efforts.
Russian Neo-Nazi Telegram Channel Posts Violent Footage from Christchurch Attack Video, Ukraine Combat Footage
On April 23, a Russian neo-Nazi Telegram channel posted violent footage from the Christchurch attack video alongside gory combat footage from the war in Ukraine, noting that there was “no difference” and that it was necessary to “kill all [sic].” The channel has almost 1,900 subscribers and previously celebrated the fourth anniversary of the full-scale Russian invasion of Ukraine by celebrating the deaths of Ukrainians. The channel has previously made posts supporting neo-Nazism and acts of terrorism.
Nordic Resistance Movement Launches New Website
On April 20, Adolf Hitler’s birthday, the Nordic Resistance Movement (NRM) announced on Telegram that it was inaugurating a new “modern and user-friendly site” to facilitate communication with the organization. The post noted that the site launch came after “a period of lower online activity.” The site is registered under the .dk domain and uses the Swedish company Loopia as its nameserver.
The U.S. government designated the NRM and three of its leaders as Specially Designated Global Terrorists (SDGT) in June 2024. The designation blocks SDGT assets in the U.S. and prevents U.S. persons or businesses from engaging in transactions with them.
CEP Continues to Find Advertisements on White Supremacist, Neo-Nazi, and Antisemitic Telegram Channels
CEP researchers found advertisements on 43 extreme right, white supremacist, neo-Nazi, and antisemitic Telegram channels in April. Nine channels were linked to the Active Club movement, including accounts tied to an affiliated clothing label, music, individuals, and chapters in Canada, France, Poland, Denmark, and the U.S. Channels connected to multiple other groups also had advertisements enabled, including the Nordic Resistance Movement who the U.S. government lists as a Specially Designated Global Terrorist (SDGT), the main channel for the White Lives Matter movement, Patriot Front, a music venue and clubhouse connected to the neo-Nazi skinhead gang the Hammerskins, and Patriotic Alternative in the United Kingdom.
NRM previously had Telegram ads enabled in June 2024, following the group’s SDGT listing.
Additional channels were connected to white supremacist influencers, news sites, and meme channels, channels that promote antisemitism and Holocaust denial, a neo-Nazi operations security channel, and a channel that lists upcoming white supremacist music events.
The 43 April channels are slightly lower than the 45 channels in March and down from the high of 49 in February. Telegram allows channels with over 1,000 subscribers to include advertisements, with payments made in the company’s TON (Telegram Open Network) cryptocurrency. Telegram channel administrators receive half of the revenue for ad placement.
An advertisement on a Telegram channel for an online white supremacist clothing store affiliated with the Active Club movement. Screenshot taken on April 22.