Loading threat actor…
PCCTS, also styled as the Knights Templar and expanded as Pauperes commilitones Christi Templique Solomonici, is a self-described pan-European far-right extremist and terrorist formation associated with the ideology and manifesto of Anders Behring Breivik. It is presented as a clandestine militant order and tribunal advocating anti-Muslim, anti-multicultural, and anti-government violence in Western Europe. High-confidence reporting indicates that the entity functions primarily as an ideological and organizational construct within Breivik’s extremist doctrine rather than a broadly corroborated, independently verified operational network. The group’s narrative promotes decentralized lone-actor and small-cell terrorism under the label of “Justiciar Knights,” with emphasis on compartmentalization, secrecy, and resistance to intelligence penetration. Its doctrine endorses assassinations, sabotage, shock attacks, executions of perceived political “traitors,” and eventual coups intended to overthrow democratic governments and replace them with an authoritarian Christian nationalist order. The movement’s propaganda explicitly legitimizes mass-casualty political violence, accepts civilian deaths as collateral damage, and frames terrorism as a means to polarize society, gain media attention, and accelerate broader conflict. PCCTS propaganda includes operational security guidance such as avoiding electronic communications, limiting overt extremist exposure, using cover identities and front businesses, and structuring activity through autonomous cells. It also discusses financing through personal funds, loans, donors, and criminal expropriation; propaganda exploitation of criminal trials; and indirect support from sympathizers. The material further advocates radiological terrorism, including the use of dirty bombs for psychological, economic, and symbolic impact, alongside broader calls for weapons acquisition, protective equipment, and long-term insurgent preparation. Aliases and associated labels include Knights Templar and Justiciar Knights. Related constructs mentioned alongside it include the Young Europeans Movement. The dominant motivation is ideological and destructive rather than financial, centered on violent anti-Muslim and anti-democratic extremism.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
36 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
10 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A violent extremist organization described as seeking to acquire radioactive material and conduct radiological dispersal device attacks in Western European capitals, alongside broader terrorist planning and propaganda.
Violent extremist organization advocating martyrdom operations, attacks on political/media targets, and armed resistance across Europe under a pseudo-chivalric Christian identity framework.
Violent extremist organization described as a pan-European nationalist military order and tribunal advocating armed resistance, shock attacks, assassinations, sabotage, coups, executions, and deportations across Western Europe.
Violent far-right extremist network/ideological movement advocating terrorism, assassinations, sabotage, armed resistance, infiltration, and propaganda in support of a pan-European anti-Muslim, anti-multiculturalist agenda.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.