Inside "The Com": How Europol Dismantled a Shadowy Youth-Targeting Cybercrime Network

At first glance, it looked like just another chaotic corner of the internet: gaming chatrooms, encrypted messaging apps, and music streams buzzing with teenage slang. But behind the digital noise, law enforcement saw the fingerprints of a sprawling, sinister machine-one that had mastered the art of exploiting the young and vulnerable. In a yearlong operation codenamed “Project Compass,” Europol and partners from 28 countries have struck a major blow against "The Com," a loosely organized but highly effective cybercrime syndicate that turned the comfort zones of youth into hunting grounds.

The Anatomy of a Decentralized Threat

Unlike traditional cybercrime gangs with clear hierarchies, The Com is a decentralized, English-speaking network made up of multiple subgroups, each specializing in a different flavor of online harm. Europol describes it as “nihilistic”-motivated not just by profit, but by a toxic mix of extremism and chaos.

The network’s tentacles reach into the daily digital lives of children and teens, with subgroups like "Offline Com" inciting real-world violence and property damage; "Cyber Com" launching ransomware and network intrusions; and the chilling "(S)extortion Com," which specializes in manipulating minors into producing explicit content, sometimes driving them to self-harm or worse.

Particularly notorious is a subgroup called “764,” which surfaced in 2021 and became infamous for grooming young people into sexual exploitation. In April 2025, two alleged ringleaders of 764-Leonidas Varagiannis, 21, and Prasan Nepal, 20-were arrested and now face life sentences for running an international child exploitation ring.

The Com’s reach has extended to major cyberattacks, including ransomware strikes against UK retail giants Marks & Spencer, Co-op, and Harrods, and even breaches in Las Vegas casinos. Their digital fingerprints are everywhere, blending among the millions of daily interactions on platforms where children feel safest.

Project Compass: Turning the Tide

Launched in January 2025 and coordinated by Europol’s European Counter Terrorism Centre, Project Compass pooled resources from police and intelligence agencies across 28 countries. Investigators traced digital breadcrumbs, infiltrated online forums, and worked directly with tech companies to identify both perpetrators and victims.

According to Europol, the operation has so far identified 179 suspects, arrested 30, and safeguarded dozens of children. “These networks deliberately target children in the digital spaces where they feel most at ease,” said Anna Sjöberg, head of the Counter Terrorism Centre. “Project Compass allows us to intervene earlier, safeguard victims, and disrupt those who exploit vulnerability for extremist purposes.”

Looking Forward

The Com’s story is a stark reminder that cybercrime is evolving as fast as the internet itself. As digital predators grow more sophisticated, so too must the guardians. Project Compass is a landmark victory, but it also signals an urgent need for ongoing international cooperation-and for families, educators, and platforms to stay vigilant in the ever-shifting digital landscape.

WIKICROOK

• Decentralized network: A decentralized network spreads data and control across many computers, not a single server, enhancing security, privacy, and system resilience.
• Ransomware: Ransomware is malicious software that encrypts or locks data, demanding payment from victims to restore access to their files or systems.
• Child Sexual Exploitation Material (CSAM): CSAM is illegal digital content depicting the sexual abuse or exploitation of minors. It is a serious crime and a major focus for cybersecurity efforts.
• Grooming: Grooming is when an adult builds trust with a child online to exploit or abuse them, often through manipulation and emotional connection.
• Sextortion: Sextortion is online blackmail where criminals threaten to release private or embarrassing images or videos unless a ransom is paid.