Europe’s terrorist threat landscape is undergoing a significant transformation, moving away from the era of large-scale attacks orchestrated by internationally connected extremist organizations and toward a more diffuse, complex, and difficult-to-detect pattern of violence. According to a recent assessment by The Soufan Center, the continent now faces a growing threat from lone actors, rapidly radicalized young people, state-linked operations, and emerging forms of extremism that often defy traditional ideological categories.
The shift comes against the backdrop of heightened tensions across Europe following the October 7 Hamas attacks and the subsequent war in Gaza, developments that have intensified concerns about polarization, social cohesion, and extremist mobilization. While established terrorist organizations such as al-Qaeda and the Islamic State continue to pose risks, security experts increasingly point to smaller-scale attacks targeting public spaces as the defining feature of Europe’s contemporary threat environment.
Unlike the mass-casualty attacks that dominated security concerns in previous decades, many recent incidents have involved individuals acting alone and targeting soft targets such as concerts, sporting events, transportation hubs, and crowded public areas. These attacks often require limited planning, minimal resources, and little or no direct connection to established terrorist organizations, making them particularly challenging for authorities to identify and disrupt before violence occurs.
A notable aspect of this evolving landscape is the growing involvement of minors and young adults. The assessment cites findings from the 2026 Global Terrorism Index indicating that youth and minors accounted for 42 percent of terror-related investigations in Europe and North America in 2025, a figure that has tripled since 2021. The trend reflects the increasingly central role of online spaces in the radicalization process, where exposure to extremist content can rapidly influence vulnerable individuals.
Researchers have observed that radicalization timelines are becoming significantly shorter. Where extremist recruitment and ideological indoctrination once unfolded over months or years, contemporary cases increasingly involve individuals moving from exposure to action within weeks. Terrorism scholar Thomas Renard has described this phenomenon as “fast-food terrorism,” a model characterized by compressed radicalization periods and simple operational methods. At the same time, terrorism scholar Brian Jenkins has identified what he calls the “atomization of political violence,” in which individuals carry out attacks independently without substantial organizational direction.
The Soufan Center notes that the trend extends beyond operational changes. Increasingly, perpetrators display unclear, overlapping, or entirely absent ideological affiliations. While Salafi-jihadi terrorism remains the most common threat category in Europe, investigators are encountering more individuals whose motivations do not fit neatly within traditional political, religious, or ideological frameworks.
At the same time, European security agencies are contending with another evolving challenge: the growing role of hostile states in operations that increasingly resemble acts of terrorism. According to the assessment, both Russia and Iran have conducted activities on European soil that have crossed into territory traditionally associated with state-sponsored terrorism, often relying on intermediaries and proxy actors to maintain plausible deniability.
The report highlights attacks claimed by Harakat Ashab al-Yamin al-Islamia, a group linked to the Iran-directed Iraqi militia Kataib Hezbollah, as an example of how state-linked actors can operate indirectly while advancing broader geopolitical objectives. Such incidents have reinforced concerns among European officials about the expanding use of covert and hybrid tactics that blur distinctions between terrorism, espionage, sabotage, and influence operations.
The assessment also draws attention to efforts aimed at undermining social cohesion within European societies. In France, Russia-linked operations have been accused of staging incidents designed to inflame tensions between communities, including acts targeting both Muslim and Jewish sites. Such actions illustrate how external actors can exploit existing societal divisions while contributing to an environment in which extremist narratives gain traction.
The intersection of terrorism and organized crime remains another area of growing concern. Security officials have increasingly documented cases in which criminal networks are used to facilitate attacks, procure equipment, or provide logistical support. The report points to a May 2025 indictment involving a 28-year-old man linked to the Danish gang Loyal to Familia, who allegedly conspired to acquire drones on behalf of Hamas for use in a planned attack in Denmark or elsewhere in Europe. Israeli intelligence assessed that the broader network intended to target the Israeli embassy in Sweden, where transnational criminal organizations have previously been linked to activities conducted on Iran’s behalf.
Beyond Europe’s borders, analysts are also monitoring the rise of Islamic State affiliates in Africa. The Islamic State Sahel Province, in particular, has emerged as a growing concern as it consolidates territory, resources, and operational capabilities. According to The Soufan Center, these developments could increase the group’s attractiveness to radicalized individuals in Europe seeking to become foreign fighters.
Researchers have also identified indications that the Islamic State Sahel Province has expressed interest in directing external operations toward Europe, including through routes involving Morocco and Spain. At the same time, developments in post-Assad Syria continue to attract close scrutiny, particularly regarding the future of foreign fighters and the persistence of Islamic State cells that could support operations beyond the Middle East.
Compounding these challenges is the emergence of forms of violence that do not align with traditional extremist movements. European authorities are increasingly encountering nihilistic, performative, and memetic forms of violence, often originating in online communities that revolve around shared digital cultures rather than established ideological doctrines. Europol has warned about networks such as 764 and the broader “Com” ecosystem, while the June 2025 attack at a high school in Graz, Austria, highlighted concerns about niche online communities where fascination with crime and mass violence can evolve into admiration for perpetrators.
These developments are testing institutions originally designed to confront clearly defined ideological threats. Security practitioners now face a more fragmented environment in which motivations overlap, ideological boundaries blur, and online influence can rapidly translate into real-world violence.
As Europe adapts to this changing landscape, authorities are increasingly confronting a threat environment shaped by lone actors, digital radicalization, state-linked operations, criminal networks, and emerging extremist subcultures. The Soufan Center’s assessment underscores that while traditional terrorist organizations remain a concern, the continent’s security challenges are becoming more diverse, decentralized, and interconnected, requiring continued attention to a rapidly evolving threat landscape.
