CyberTerror – The Fundamentals

This paper examines how contemporary terrorist organisations exploit cyberspace across four distinct operational dimensions: propaganda and psychological warfare, intelligence gathering and target selection, logistical coordination and financing, and direct cyber attack capabilities.

The propaganda dimension receives particular attention, documenting how platforms such as Telegram, encrypted social media, and dark web forums have replaced earlier reliance on physical media and in-person networks, enabling unprecedented reach with minimal resource investment.

On the intelligence gathering dimension, the paper analyses how open-source intelligence (OSINT) techniques originally developed by state actors have been adapted by terrorist groups to profile potential targets, monitor security responses, and identify operational vulnerabilities.

The logistical dimension encompasses the use of cryptocurrencies for financing, encrypted communications for command and control, and digital infrastructure for cross-border coordination between geographically dispersed cells.

The paper concludes with a policy framework recommending the integration of dedicated cybersecurity communities — drawn from both public and private sectors — into European security architectures, arguing that the traditional separation between law enforcement, intelligence, and cybersecurity functions is increasingly untenable given the convergence of physical and digital threat vectors.