Loading threat actor…
Terrorgram, also referred to as the Terrorgram Collective, is a decentralized extreme-right online extremist network centered on Telegram. It is associated with militant accelerationism and neo-Nazi ideology, and functions as a transnational propaganda and facilitation ecosystem rather than a conventional hierarchical organization. The network is known for producing and disseminating violent white supremacist propaganda, glorifying previous attackers as "saints," and circulating guidance and manuals for terrorist violence, including material encouraging attacks on critical infrastructure. Terrorgram has been linked to individuals convicted of terrorism-related offenses for creating propaganda and providing operational guidance in support of the network. Authorities have assessed that content produced within the network inspired multiple terrorist attacks. The network has been designated as a terrorist organization or terrorist entity in several countries, including the United States, Canada, the United Kingdom, and Australia. Its activity is primarily ideological and violent-extremist in nature, focused on radicalization, incitement, propaganda dissemination, and enabling acts of terrorism across borders.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
3 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Loose network of extreme-right terrorist channels that glorifies prior attackers and encourages further violence, including antisemitic targeting.
A decentralised online extremist network on Telegram promoting militant accelerationism and neo-Nazi ideology, publishing propaganda and sharing manuals for terrorist attacks including against critical infrastructure.
An online extremist network promoting violent white supremacist ideology and propaganda, with content linked to inspiring multiple terrorist attacks. Europol mapped the network, identified linked individuals across Europe and beyond, and supported international investigations.
Telegram-based extremist community designated as a terrorist organization; primarily focused on recruitment/incitement rather than malware operations (as described here).
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.