Loading threat actor…
Knights Templar is a self-described far-right extremist and terrorist banner invoked by Anders Behring Breivik in connection with anti-Muslim, anti-multicultural, and anti-Marxist violent ideology. It was presented as part of a purported network also referred to as PCCTS and "Knights Templar Europe," with Breivik claiming a role as a "Justiciar Knight Commander." There is no independent verification in the available facts that this organization existed as a real, structured network beyond Breivik’s own assertions, and it is best understood as an extremist identity and propaganda construct associated with his attack planning and manifesto. Under this banner, Breivik promoted armed struggle, revolutionary violence, and eventual seizure of political and military control in Europe. The ideology combined ethnonationalism, anti-Muslim hatred, anti-feminism, and advocacy for deportations, executions of perceived opponents, and authoritarian restructuring of society. The material functioned as propaganda, recruitment messaging, and operational encouragement for far-right violence. Operationally, the actor context tied to this name includes extensive clandestine preparation for terrorism: use of cover entities and business pretexts, concealment of procurement activity, evidence purging, hidden equipment caches, and strict operational security. Documented behaviors include acquisition of weapons and tactical gear, procurement and processing of explosive precursor materials, experimentation with detonator compounds, logistics planning, and use of online platforms for propaganda dissemination, contact harvesting, and ideological networking. The activity reflects capabilities in initial access to extremist audiences through online outreach, reconnaissance and tradecraft for covert preparation, persistence in maintaining cover arrangements, exfiltration of contact data from social platforms, and defense evasion through secrecy and concealment. Known associated names and labels include PCCTS, Knights Templar Europe, and Knights Templar Norway. High-confidence attribution in the available facts centers on Anders Behring Breivik and his alias Andrew Berwick rather than on a demonstrably independent organization.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
38 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Violent extremist organization advocating seizure of political and military control in Western Europe, ethnic cleansing/deportation, and targeted killings of perceived 'traitors' as part of a pan-European ideological campaign.
A self-described militant extremist organization discussed in ideological and operational terms, including references to clandestine structure, support or hostility toward other militant organizations, and guidance for violent operations.
A named extremist activity cluster presented as a pan-European resistance movement advocating armed resistance, recruitment, propaganda distribution, infiltration, weapons acquisition, explosives preparation, and future political/military seizure of control.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.