In Europe, there has been a massive anti-terrorism strategy initiated against ISKP, which is the local branch of Daesh (ISIS) based in Afghanistan. This strategy is coordinated in several EU member countries and involves the use of intelligence sharing mechanisms. It is intended to hinder the activities of ISKP in terms of external attacks, disruption of recruitment processes and thwarting any terror plans on European soil. The new strategy has been initiated following fears over the renewed international threat posed by ISKP. According to experts, ISKP is exploiting its bases in Afghanistan and those in Central and South Asia.
“ISKP is reemerging as a transnational actor with the capacity to strike globally,”
stated a recent defense analysis from the Foundation for Defense of Democracies.
It is a notable step up in the level of the counter-terrorism effort in Europe. For a long time, the ISKP was seen primarily as a threat that remained within the region of Afghanistan and the neighboring countries. Currently, European governments view the terrorist group as a threat to continental security.
Why ISKP Is Considered Daesh’s Most Active Affiliate
ISKP, or the Islamic State Khorasan Province, was founded in 2015 as ISIS supporters in Afghanistan swore allegiance to the organization’s central leaders. In the ten years since its inception, ISKP has managed to distinguish itself through a blend of prominent attacks and external operations.
Security experts say ISKP stands out for three key reasons:
1. Operational Aggressiveness
ISKP has carried out repeated attacks against Taliban officials, journalists, and government institutions in Afghanistan. In March 2025, the group resurged with high-profile strikes targeting senior Taliban figures and the Ministry of Foreign Affairs in Kabul.
2. Transnational Reach
Unlike many ISIS affiliates that remain regionally confined, ISKP has demonstrated a clear ability to operate beyond South and Central Asia. It has linked itself to plots or attempted attacks in Iran, Russia, Turkey, Tajikistan, Austria, and Germany.
3. Sophisticated External Command
ISKP has increasingly relied on remote guidance for operations, using messaging apps to direct attackers in Europe without deploying physical operatives. This model complicates detection but shows the group’s adaptability.
“The attack on Crocus City Hall in Moscow in March 2024 demonstrates that ISKP is the Islamic State’s most dangerous affiliate,”
said a CSIS security analyst.
These factors have pushed European governments to treat ISKP as a top-tier threat, rivaling or surpassing other ISIS branches in terms of operational intensity and external ambition.
Inside Europe’s Counterterrorism Operation
The new operation entails coordination through intelligence sharing, improved border security, increased monitoring and arresting of individuals. Although some operational details are kept under wraps due to security considerations, it is certain that the mission encompasses at least 12 European nations such as Germany, France, Italy, Austria, and the Netherlands.
Intelligence and Disruption
European intelligence agencies are prioritizing the disruption of ISKP’s recruitment pipelines and financial networks. Authorities say ISKP operatives often use encrypted platforms to communicate with sympathizers, making digital surveillance critical.
Border and Travel Security
The operation includes tighter screening of travelers from high-risk regions, especially those with links to Afghanistan or Central Asia. Border agencies are working to prevent ISKP-affiliated individuals from entering Europe or moving freely across borders.
Counter-Propaganda Efforts
ISKP has expanded its propaganda campaigns in multiple languages, including English, German, and Russian, to attract recruits and inspire attacks. European agencies are launching counter-messaging initiatives to undermine ISKP’s narrative and reduce its influence online.
“Daesh’s ability to strike is growing,”
warned European foreign ministers in a recent joint conclusion on terrorism, calling for deeper cooperation especially against Daesh and ISKP.
ISKP’s Growing Threat to European Security
ISKP’s threat to Europe is not theoretical. Intelligence reports and security investigations have documented multiple attempts by the group to launch or support operations on European soil.
Foiled Plots and Arrests
In recent years, European authorities have arrested individuals linked to ISKP in connection with foiled bombing plots, firearms trafficking, and recruitment activities. These cases highlight the group’s ability to penetrate European security networks through sympathizers rather than foreign operatives.
Remote Guidance Model
ISKP’s preferred method of attack involves remote guidance. Instead of sending fighters into Europe, the group directs local sympathizers via encrypted messaging apps. This approach reduces the risk of detection but increases the challenge for intelligence agencies trying to identify plot coordinators.
Propaganda Expansion
ISKP has launched multilingual propaganda campaigns aimed at European audiences, using social media and private messaging platforms to spread extremist content. The group’s propaganda often emphasizes retaliation against Western policies and portrays Europe as a battlefield for global jihad.
“ISKP’s latest campaign shows expanded propaganda and external operations targeting Europe,”
reported the Global Research on Extremism and Violence (GNET) in a 2024 analysis.
The EU’s Strategic Response to Daesh and ISKP
The European Union has long participated in the Global Coalition against Daesh, providing funding and coordination for counterterrorism efforts. The new operation against ISKP reflects a broader strategic shift to prioritize external operations and transnational threats.
Funding and Prevention Programs
The EU allocates significant resources to prevention and countering violent extremism (P/CVE) programs. These initiatives aim to reduce radicalization, support community resilience, and counter extremist narratives online.
Intelligence Sharing Frameworks
EU member states participate in intelligence-sharing mechanisms such as the Europol Counter Terrorism Centre and the European Intelligence Coordination Platform. These frameworks enable rapid coordination when ISKP-linked threats emerge.
Partnership with Third Countries
European foreign ministers have called for stronger cooperation with third countries, especially those in Central Asia and the Middle East, to disrupt ISKP networks before they reach Europe.
“Call for more cooperation especially against Daesh, particularly with third countries,”
stated EU foreign ministers in their joint conclusions.
Challenges in Countering ISKP
Despite the coordinated operation, security experts warn that countering ISKP remains difficult due to several structural challenges.
1. Afghanistan as a Safe Haven
The fact that ISKP has a safe haven in Afghanistan allows it to plan its strategies and recruit people from there. The Taliban presence in Afghanistan has not been able to wipe out the ISKP presence from there, and at times it has actually compelled the ISKP to target Europeans indirectly.
2. Digital Obfuscation
ISKP’s use of encrypted messaging and decentralized communication makes it hard for authorities to track coordinators. The group often operates through intermediaries, further complicating attribution.
3. Decentralized Recruitment
ISKP recruits sympathizers remotely rather than relying on physical cells. This model allows the group to scale its operations without maintaining large, visible networks in Europe.
“ISKP is exploiting counterterrorism gaps by leveraging its Afghan stronghold and regional networks,”
noted a CSIS report published in November 2024.
What This Means for Europe and Global Security
This anti-terrorism initiative marks the fact that Europe considers ISKP an immediate and rising threat. It marks the transformation of looking at ISKP as just a regional threat to realizing that ISKP is a global terrorist organization that has the ability to target Europe. For the citizens of Europe, the move means more security initiatives, surveillance, and arrests associated with ISKP operations. For global security, the initiative signifies the importance of cooperation in closing the gaps in counterterrorism.
The security analysts predict that there will be a higher number of foiled plots and arrests in the coming months. But on the other hand, the analysts predict that the threat will remain because of the adaptability of the ISKP and their remote guidance model.
“ISKP’s transnational reemergence is a clear warning that the threat is not confined to Afghanistan,”
said a defense policy expert reviewing ISKP’s recent campaign.
Europe’s Counterterrorism Moment
The European counterterrorism operation against ISKP represents a defining time in the battle against the most active Daesh affiliate organization. Through intelligence coordination, border security, and propaganda disruption, European authorities have taken decisive action in ensuring that the ISKP does not conduct attacks within their territories. However, this operation underscores another truth about the threat posed by ISKP. ISKP is no longer a threat limited to Afghanistan. The organization represents a transnational threat that requires international cooperation in addressing it. Until the deficiencies exploited by ISKP are addressed, the threat will persist.
As European foreign ministers warned,
“Daesh’s ability to strike is growing,”
and ISKP is at the forefront of that expansion. The operation launched now may be the first major step in a longer campaign to contain one of the world’s most dangerous terrorist affiliates.
