Daniele Garofalo Monitoring

Daniele Garofalo Monitoring

Europe's New Jihadist Threat Landscape

Intelligence Assessment of Digital Mobilisation, Behavioural Radicalisation and Low-Complexity Terrorism

Daniele Garofalo's avatar
Daniele Garofalo
Jul 20, 2026
∙ Paid

The European jihadist threat is undergoing a structural transformation rather than a strategic decline. Current intelligence reporting, judicial investigations and counterterrorism operations conducted across multiple European states indicate that the principal risk no longer derives from centrally directed terrorist organisations capable of orchestrating complex, multi-country attacks. Instead, Europe is increasingly confronting a decentralised mobilisation ecosystem in which digitally connected individuals and small informal networks can rapidly progress from ideological engagement to operational violence.

This assessment draws upon recent investigations, arrests and disrupted plots across Italy, Spain, France, Germany, Austria, Belgium, the Netherlands, Switzerland and other Western countries. Considered individually, these cases may appear isolated. Analysed collectively, however, they reveal consistent behavioural patterns that point towards the maturation of a transnational mobilisation environment characterised by shortened radicalisation pathways, algorithmically amplified propaganda, behavioural acceleration and low-complexity attack planning.

Current evidence does not indicate the imminent re-emergence of the coordinated external operations architecture that enabled the attacks in Paris, Brussels, Manchester or Barcelona. The more plausible threat trajectory is different. Organisational capability has declined, while behavioural unpredictability has increased. Contemporary jihadist violence is increasingly produced by individuals operating with limited logistical requirements but within a shared digital ecosystem that provides ideological legitimacy, operational inspiration and psychological reinforcement.

The principal intelligence judgement is therefore that Europe has entered a new phase of the jihadist threat in which the centre of gravity has shifted from terrorist organisations towards behavioural mobilisation. Counterterrorism strategies designed primarily to dismantle hierarchical networks remain essential, but they are no longer sufficient. The decisive challenge increasingly lies in identifying behavioural escalation early enough to interrupt mobilisation before it crystallises into violence.


Key Judgments

  • The probability of large-scale, centrally directed jihadist attacks in Europe remains lower than during 2015 to 2017, although it cannot be excluded.

  • The principal threat has shifted towards decentralised actors, self-activating individuals, and micro-networks that operate with minimal logistical requirements.

  • Digital ecosystems have become the primary infrastructure of jihadist mobilisation, replacing many of the organisational functions previously performed by hierarchical terrorist networks.

  • Radicalisation timelines appear to be shortening, particularly among adolescents and young adults exposed to algorithmically amplified extremist content.

  • Recent investigations across Europe reveal consistent behavioural indicators despite significant national differences, suggesting the emergence of a common transnational mobilisation environment.

  • Behavioural mobilisation has become a more useful analytical indicator than formal organisational membership when assessing contemporary terrorist risk.

  • Low-complexity attacks remain the most likely operational scenario during the next 12 to 24 months.

  • Counterterrorism capabilities should increasingly prioritise behavioural intelligence, digital ecosystems, multidisciplinary prevention and early detection rather than exclusively focusing on organisational disruption.


The Structural Transformation of the European Jihadist Threat

The European jihadist threat should no longer be assessed through the analytical framework that dominated between 2015 and 2017. The operational structures responsible for the coordinated attacks in Paris, Brussels, Nice and Manchester have been substantially degraded by sustained counterterrorism pressure, international intelligence cooperation and the collapse of the Islamic State's territorial project. However, the absence of comparable large-scale attacks should not be interpreted as evidence that the strategic threat has diminished. Instead, it signals the emergence of a different threat architecture in which organisational control has given way to decentralised mobilisation, digitally enabled radicalisation and autonomous low-complexity violence.

This post is for paid subscribers

Already a paid subscriber? Sign in
© 2026 Daniele Garofalo Monitoring · Privacy ∙ Terms ∙ Collection notice
Start your SubstackGet the app
Substack is the home for great culture