Overview
- The conviction in July 2026 of Norwegian teenager Johannes Natland for conspiracy to murder highlighted how Foxtrot moves recruits across borders, books travel, and supplies hidden guns and cash to would‑be attackers.
- Europol’s Operational Taskforce OTF GRIMM has coordinated work across 11 countries and helped secure more than 280 arrests and several key detentions and extradition requests.
- Investigators describe Foxtrot’s method as 'violence‑as‑a‑service' where handlers use social media and encrypted apps to give gamified, step‑by‑step instructions to vulnerable teens who are often not paid because they are later arrested.
- Swedish police and some journalists say parts of Foxtrot’s violence may have been carried out for the Iranian regime while other attacks reflect criminal turf disputes, but the group’s leader Rawa Majid remains at large in Tehran and authorities are still probing state direction.
- The VaaS model has already spread to rival gangs, creating a wider Northern European security problem that requires sustained cross‑border policing, extradition cooperation, and closer scrutiny of online recruitment that targets at‑risk young people.