ZeroFox Intelligence Flash Report - SITREP #36 - Pro-Iran Terrorism in Europe

ZeroFox Intelligence Flash Report - SITREP #36 - Pro-Iran Terrorism in Europe - May 5, 2026

Product Serial: F-2026-05-05a

TLP:CLEAR

In this Flash report, ZeroFox researchers report on the pro-Iran terrorist attacks in Europe and the new group claiming responsibility for them.

Standing Intelligence Requirements

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

Since March 9, 2026, a group claiming to support Iran in its war against the United States and Israel has reportedly conducted a campaign of attacks against Jewish targets in Europe.
Harakat Ashab al-Yamin al-Islamia (HAYI) has claimed 17 attacks against Jewish communities, Israeli diplomatic missions, and Iranian dissident journalists across Europe—the most recent of which was the April 29, 2026, stabbing of two Jewish individuals in the Golders Green area of London.
In the case of at least one claimed attack, HAYI likely recruited and paid criminal actors to conduct attacks on its behalf. Following an attack on a French branch of a U.S. bank, the detained suspect reportedly claimed to have been paid EUR 600 by an unidentified individual online to conduct the attack.
While there is no direct connection to the Iranian government, it is likely that HAYI is operating as a Europe-based proxy for the Islamic Revolutionary Guard Corps-Quds Force (IRGC-QF). Initially, HAYI made posts claiming responsibility on Telegram channels likely under its control; however, Telegram closed down several channels associated with HAYI after March 9, leaving the group to post claims on channels associated with IRGC-QF controlled Iraqi Shia militias.
HAYI is likely an identifiable group only online. HAYI likely operates as a function of Iranian hybrid warfare and recruits criminals and radicalized individuals via online forums to conduct attacks—almost certainly due to a combination of financial motives and ideological alignment with Iranian war aims.