(New York, N.Y.) — The Counter Extremism Project (CEP) reports weekly on the methods used by extremists to exploit the Internet and social media platforms to recruit followers and incite violence. Last week, CEP researchers located a Twitter/X video lauding Nazi Germany’s economic policies and highlighting antisemitic conspiracy theories, which received more than 1.2 million views since it was posted on October 18. CEP also located a website hosting more than 100 gigabytes of far-right books promoting white supremacy, antisemitism, anti-LGBTQ sentiment, and Holocaust denial, as well as instruction manuals to build explosives and other weapons.
White supremacist and neo-Nazi online communities on Telegram praised the recent attacks on Israel and accused Israel and Jewish organizations of potentially creating a refugee crisis in Europe. On Google-owned YouTube, a channel affiliated with a previously banned Active Club propaganda group resurfaced to urge the release of the white supremacist leader Robert Rundo, who was extradited to the U.S. from Romania earlier this year and is awaiting trial.
On October 22, the pro-ISIS Tala’a al-Ansar Foundation released a video celebrating the October 16 Brussels shooting and calling on supporters to engage in similar acts. The same day, the pro-al-Qaeda online group Jaysh al-Malahem claimed responsibility for coordinating bomb threats on eight French airports and Jewish schools across Europe.
CEP researchers also located an ISIS bombmaking instructional video on the Interplanetary File System (IPFS) gateway website Pinata and the download site Catbox.moe linked to the 2017 Manchester Arena bombing. Qimam Electronic Foundation, a pro-ISIS technology group that regularly produces guides for ISIS followers, also issued a statement warning against potential scam cryptocurrency sites.
Tweet Containing Antisemitic Video Receives Over 1 Million Views on Twitter/X
A tweet made by a verified account containing an antisemitic video uploaded to Twitter/X on October 18 had over 1.2 million views on the 26th. The almost three-minute video praised Nazi Germany’s economic and monetary policies and Hitler for standing “up to the bankers.” A tweet uploaded with the video spread antisemitic conspiracy theories and encouraged the viewing of two antisemitic and pro-Hitler faux documentaries. A follow-up tweet by the same Twitter/X account spread additional pro-Nazi and antisemitic content from a known neo-Nazi content creator. CEP reported the tweet on October 26, but it was still online on October 30.
Tweet containing antisemitic text and video. Screenshot taken on October 26.
White Supremacist Website Located With Over 18,000 Books and Manuals, Including Explosives Information
On October 25, CEP researchers located a website containing over 18,000 books and manuals, totaling over 100 gigabytes, that promoted white supremacy, antisemitism, anti-LGBTQ sentiment, and Holocaust denial. Dozens of manuals on the site included information for the homemade construction of explosive devices and other weapons. A manifesto written by the perpetrator of a white supremacist attack, James Mason’s book Siege, and large quantities of extreme-right literature were also present on the site. Content on the website had been uploaded on October 9 and October 10. CEP reported the site to the website’s nameserver, QHoster, on October 25, but it was still accessible on October 30
Online White Supremacist Communities Continue to Celebrate Attacks on Israel and Spread Anti-Refugee Messages
Between October 8 and 28, white supremacist and neo-Nazi online communities continued celebrating the October 7 Hamas attack on Israel. Extreme right Telegram channels posted messages and photos, including AI-generated art, and praised violence against Israelis. A Telegram channel with almost 2,000 followers that supports Atomwaffen Division successor groups shared photos of Israeli casualties and celebrated violence against Jews. At least five other channels, which were affiliated with the Terrorgram community and had an average of 540 subscribers, shared a message from a private channel praising acts of violence against Jews and noting that long-term planning was necessary to achieve “glorious results.”
Other extreme-right Telegram channels warned their followers that Israeli military operations following Hamas’ October 7 attack would result in refugees fleeing the conflict. Multiple channels invoked anti-Muslim tropes or, echoing antisemitic conspiracy theories, accused Jewish non-profit organizations of being responsible for bringing Arab and Muslim refugees into the U.S. and Europe. Individuals affiliated with the white supremacist National Justice Party alleged that Israel intentionally sought to create a refugee crisis in Europe.
On October 25, a member of a neo-Nazi Telegram chat dedicated to information and operations security warned that extreme right internet personalities encouraging open support for Hamas might be putting their audience at risk because of the organization’s status as a U.S.-designated terrorist group.
YouTube Account for Previously Banned Active Club Propaganda Group Located
On October 12, CEP researchers located a YouTube account belonging to the propaganda group Media2Rise, which is affiliated with the white supremacist Active Club movement. The account was created on March 1, 2023, but posted its first public content on September 3, consisting of a video calling for the release of Robert Rundo, calling the case against him for conspiracy to violate the Anti-Riot Act and rioting politically motivated. Rundo was extradited to the U.S. from Romania in August. The YouTube account contained contact information for Media2Rise, and social media addresses.
CEP has previously located Media2Rise content on YouTube, which has since been removed. CEP reported the Media2Rise account to YouTube on October 13, but it was still online on October 30.
Media2Rise video on YouTube. Screenshot taken on October 12.
Pro-ISIS Video Celebrates October 16 Attack, Encourages Additional Violence in Europe
On October 22, the pro-ISIS media group Tala’a al-Ansar Foundation released a video celebrating the October 16, 2023, Brussels shooting, where Abdesalem Lassoued murdered two Swedish nationals and injured one other before the attacker was killed by police the next day. ISIS claimed responsibility for the attack on the 17th, referring to the attacker as an “Islamic State fighter.” It is unclear whether Lassoued had communicated with any of the group’s supporters or members.
The video released on October 22, which contained previously released footage from the October 16 attack and clips from previously released ISIS propaganda videos, also encouraged additional acts of terrorism in the West.
CEP reported the video to Mega.Nz, Gofile.Io, FromSmash, and Dropbox. The video was inaccessible on all four services on October 30.
European law enforcement and security officials are on high alert regarding potential terrorist attacks. On October 25, German authorities arrested a man in Duisburg who had previously served time in prison for ISIS membership and had recently reportedly indicated his willingness to commit a violent attack.
The pro-ISIS Tala'a al-Ansar Foundation video on GoFile. Screenshot taken on October 26.
Online Pro-Al Qaeda Group Claims Responsibility for Bomb Threats in Europe
On October 22, the online pro-al-Qaeda group Jaysh al-Malahem claimed responsibility for bomb threats at eight French airports and threats against Jewish institutions in Europe. In a statement released online, the group proclaimed that the threatening communications, which they described as “electronic warfare,” were in response to Israeli attacks on Gaza. The group stated they collected contact information for various entities and individuals to spread terror. Jaysh al-Malahem claimed to have sent over 100 false reports to emergency authorities in Berlin, Paris, Rome, and Madrid. The group claimed that they used maps of the airports to give credibility to the bomb hoaxes and that they also contacted private individuals at the airports and students at European Jewish schools.
English Jaysh al-Malahem statement, released on October 24. Screenshot taken on October 26.
ISIS Bomb Making Video Located on IPFS and File Download Sites
On October 11, CEP researchers located two uploads of a notorious ISIS video on the Interplanetary File System (IPFS) gateway website Pinata and the download site Catbox.Moe. The video was initially released in November 2016 and linked to the 2017 Manchester Arena bombing perpetrator. The video includes step-by-step instructions for making homemade explosives and a shrapnel explosive device. The video also encourages acts of terrorism and attacks with knives, which are shown being used against a human target, who is brutally executed in the process. The links were posted in a pro-ISIS chat.
Pinata, a decentralized Web3 platform, provides IPFS gateways. The company’s Acceptable Use policy prohibits using Pinata’s services to spread “offensive content,” including content that is “obscene, abusive…or otherwise objectionable.” Catbox.Moe offers file download services, including temporary download links that expire after one hour to three days. The website prohibits a variety of content, including “heavy gore.”
Pinata blocked access to the video after CEP reported it. It is unclear whether Catbox.Moe removed the video after CEP reported it or if the link expired without actions from the site admin.
ISIS bomb making video on Pinata. Screenshot taken on October 11, 2023.
Pro-ISIS Tech Group Warns Followers About Cryptocurrency Scams
On October 11, the pro-ISIS tech group Qimam Electronic Foundation (QEF) warned their followers about potential cryptocurrency scams. The post noted that warning signs of a scam included guaranteed increases in value, insufficient technical documentation, overselling, and lack of information about the company. The most recent issue of the pro-ISIS-K web magazine “Voice of Khorasan,” released on October 2, requested donations in the cryptocurrency Monero. Cryptocurrency is one of several financial tools that ISIS members and their alleged supporters use.
QEF warning “How to spot cryptocurrency scams.” Screenshot taken on October 12.