Pro-ISIS account on TikTok advertising explosives material and requesting that users contact them to obtain more detailed instructions. The post was uploaded on August 12 and had over 550 views on August 28. Screenshot taken on August 28.
Pro-ISIS Telegram Channel Celebrates Anniversary of Kabul Airport Attack
On August 26, a pro-ISIS Telegram channel celebrated the fourth anniversary of a suicide bombing at Kabul International Airport, which killed 13 U.S. service members and 170 Afghan civilians. The Telegram post stated that the attack had targeted U.S. and Taliban forces and individuals who had worked with the U.S., noting that this was a painful moment for the American defense establishment.
User in Pro-ISIS Chat Recommends Destroying Phones and Hard Drives in the Event of Arrest
On August 25, a user in a pro-ISIS chat on the RocketChat platform noted that law enforcement or intelligence personnel could obtain an individual’s phone or hard drives in the event of arrest, noting the importance of destroying those devices before being taken into custody. The post stated that accounts could be accessed and used by law enforcement. The user also recommended using a virtual private network (VPN) paid for with either cash or cryptocurrency, using separate operating systems for legal and illegal purposes, encrypting files, and taking precautions to properly delete data before disposing of a mobile device, laptop, or desktop.
Another user in the same chat noted that accounts could be hijacked after an individual’s arrest and used to spread malware, noting the importance of constantly checking shared files and links for malware or IP grabbers, even from known users.
Extreme Right Telegram Users Promote Antisemitism Following Minnesota Catholic School Shooting
Extreme right users on Telegram blamed Jews and wished harm upon the Jewish community following the August 27 shooting at a Minnesota Catholic school, where an individual killed two children and injured at least 21 others before committing suicide. The attacker was reportedly obsessed with mass shootings, according to law enforcement officials. A video spread online, allegedly made by the attacker before the shooting, showed several firearms and magazines with both extreme right and left-wing messages written on them that alluded to various internet memes and promoted violence, including violence against children, Jews, Muslims, Indians, and President Trump. The names of several perpetrators of violence were also written on firearms and equipment, including the 2011 Norway attacker, Ted Kacyzynksi, the 2018 Pittsburgh synagogue shooter, the Christchurch attacker, and the man who attacked a Palm Springs IVF clinic in May 2025. Anti-religious narratives were also included.
A white supremacist propagandist with over 3,000 subscribers on Telegram asked why transgender perpetrators of violent attacks, like the Minnesota shooter, “don’t hold Jews accountable” and attack synagogues, referencing the antisemitic conspiracy theory that Jews are responsible for the existence and societal acceptance of transgender people. A small neo-Nazi Telegram channel with three dozen subscribers that promotes accelerationist groups claimed that the shooter was Jewish and promoted antisemitic violence. Several other accounts claimed, without evidence, that the shooter was Jewish. A neo-Nazi Telegram channel with over 12,000 subscribers that supports the Active Club movement and Patriot Front claimed that the August 27 attack was the result of Jewish “subversion,” and a connected channel promoted transphobia, claiming that national socialism was necessary to eliminate transgender people.
Multiple White Supremacist Telegram Channels Found with Advertisements in August
For August, CEP researchers located 16 Telegram channels with advertisements enabled. The channels included those for the Nordic Resistance Movement (NRM), designated by the U.S. Department of State as a Specially Designated Global Terrorist in 2024; a channel affiliated with a neo-Nazi accelerationist website that promotes the work of James Mason and former members of the Atomwaffen Division; four Telegram channels directly affiliated with the white supremacist Active Club movement, including their main channel, and chapters in California, Michigan, and the Netherlands; a Patriot Front affiliated channel; a large neo-Nazi channel with over 12,000 subscribers that promotes Active Clubs and Patriot Front; two white supremacist news channels; the main channel for the British fascist group Patriotic Alternative; the main Telegram channel for the White Lives Matter movement; a channel that advertises white power music events primarily in Europe; a Canadian extreme right channel that promotes Active Clubs; a channel affiliated with a neo-Nazi podcast; and a white supremacist channel where users of an affiliated chat have shared footage from the 2019 Christchurch attack and extreme antisemitic content.
Advertisements were for channels promoting cryptocurrency, investment advice, Tucker Carlson interviews, and one featuring alternative history. In Telegram searches in late July, CEP researchers previously found eight extreme right channels with advertisements enabled.
Telegram allows channels with over 1,000 subscribers to contain advertisements, with payment in the company’s TON (Telegram Open Network) cryptocurrency. Telegram channel administrators receive half of the revenue for ad placement.
|