Militancy/Terrorism

07
Nov 2025
12:27 UTC

Europe Alert: Weapons cache linked to Hamas discovered in Vienna, Austria, suspect arrested in London, UK per November 6 reports; reflecting growing risk of Hamas-backed attacks as group seeks to expand its operational capabilities

Current Situation

  • Per November 6 reports, Austria’s Direktion Staatsschutz und Nachrichtendienst (DSN), the domestic intelligence service, uncovered a weapons cache in Vienna believed to be linked to Hamas for use in “possible terrorist attacks in Europe.”
  • According to the Interior Ministry, a British citizen allegedly connected to the cache was arrested in London, the UK, on November 3. The weapons, five handguns and 10 magazines, were found in a suitcase stored in a rented storage unit in Vienna.
  • Germany’s Federal Prosecutor’s Office later identified the arrested suspect as Mohammed A., confirming that he had met twice with Abdel Al G., one of three Hamas-linked suspects arrested in Berlin on October 1 for allegedly preparing attacks on Israeli and Jewish sites in Germany. During these meetings, Mohammed A. reportedly acquired five handguns and ammunition from Abdel Al G. and subsequently stored them in Vienna.
  • The prosecutor’s office added that, following his extradition from the UK, Mohammed A. will be brought before an investigating judge at Germany’s Federal Court of Justice. The UK’s National Crime Agency (NCA) also confirmed the arrest of the suspect in central London.
  • The DSN stated that the find formed part of an internationally coordinated investigation “into a global terrorist organization with ties to Hamas.”

Source: AP

Assessments & Forecast

  1. The discovery of a Hamas-linked weapons cache in Vienna, alongside similar arms finds across Europe, including in Germany, Bulgaria, Denmark, the Netherlands, and Poland between 2023 and 2025, underscores the growing threat of Hamas-backed operations across the continent. Although Europe has not recorded a successful Hamas-directed attack, the recurring discovery of weapons caches and multiple foiled plots in recent years suggests a strategic shift in Hamas’ intent, as the group seeks to rebuild and expand its operational footprint beyond Israel and the Palestinian Territories.
  2. With its military infrastructure in Gaza severely degraded following Israeli operations since October 7, 2023, Hamas appears increasingly focused on developing alternative operational hubs abroad, particularly within Europe, where it is likely attempting to leverage sympathetic networks and expatriate communities to strengthen its organizational presence.
  3. In addition to the high number of sympathizers, Europe remains structurally vulnerable to Hamas-linked activity due to its open-border environment, which facilitates the movement of illicit goods once inside the EU. Furthermore, Hamas’s known links with organized criminal networks in the Nordics, particularly in Denmark and Sweden, have reportedly enabled the group to procure firearms, such as AK-47 rifles, handguns, and significant quantities of ammunition, through black-market channels. These dynamics collectively highlight how logistical and criminal convergence within Europe is increasingly being exploited by Hamas operatives and affiliates seeking to reconstitute external operational capability.
  4. As such, these activities indicate that the recurring discovery of weapons caches linked to Hamas is part of long-term strategic planning by Hamas, rather than just short-term retaliatory intent. By stockpiling weapons, building links with organized criminal networks, and utilizing locally based operatives, the group appears to be developing contingency infrastructure designed to enable future attacks against Israeli and Jewish targets in Europe. Such operations would likely be activated in response to Israeli actions against Hamas’ leadership or interests, potentially in coordination with Iran and Hezbollah, both of which maintain extensive external networks across the region.
  5. FORECAST: As such, in the medium term, European authorities are likely to uncover additional Hamas-linked networks, weapons caches, and facilitators, as the group continues efforts to expand its footprint. While the risk of large-scale coordinated attacks is expected to remain low due to strong counterterrorism monitoring, Hamas’s growing attempts to penetrate Europe increase the overall risk of targeted, small-arms assaults on Israeli or Jewish sites, including synagogues, community centers, schools, and diplomatic facilities moving forward.
  6. FORECAST: The threat of Hamas-linked or inspired attacks will likely peak around ideologically or religiously symbolic dates, including major Jewish holidays, commemorations, and anniversaries of large-scale attacks. Potential perpetrators may target crowded venues, religious gatherings, cultural events, and transport hubs to maximize casualties and media impact. The risk will also remain elevated in areas frequented by Jewish tourists and near Israeli diplomatic or community sites across Europe.

Recommendations

  1. Travel to Austria, Germany, and UK may continue while maintaining heightened vigilance for the increased threat of terror attacks near Israeli embassies, synagogues, Jewish establishments, festive events, transportation hubs, religious sites, and public places with large crowds due to the potential for attacks.
  2. Alert authorities immediately upon witnessing suspicious items or behavior.
  3. If a potential stabbing, shooting, explosion, or similar incident manifests, leave the area immediately if possible, or take shelter at a secure location.
    Jewish and Israeli individuals and organizations are advised to be conscious of their surroundings and activity around any residences, places of work, or community centers. Consider keeping a low profile and limiting the wearing or presentation of overt signs or symbols associated with Judaism or Israel.
  4. Those who wear the traditional head covering (kippah) are advised to consider wearing an additional head covering, such as a baseball cap.
  5. Public, private, and third-sector organizations are advised to increase awareness of threats on social media using threat monitoring services. Increased awareness of an organization’s political footprint and perceptions from online fringe groups can help uncover potential violent actors and plots before they occur.
  6. For further questions and risk assessments, please contact [email protected].
COUNTRY RISK LEVEL Low
AFFECTED AREA Europe
INCIDENT RISK LEVEL Medium
STRENGTH OF SOURCE Confirmed

Current Situation

  • Per November 6 reports, Austria’s Direktion Staatsschutz und Nachrichtendienst (DSN), the domestic intelligence service, uncovered a weapons cache in Vienna believed to be linked to Hamas for use in “possible terrorist attacks in Europe.”
  • According to the Interior Ministry, a British citizen allegedly connected to the cache was arrested in London, the UK, on November 3. The weapons, five handguns and 10 magazines, were found in a suitcase stored in a rented storage unit in Vienna.
  • Germany’s Federal Prosecutor’s Office later identified the arrested suspect as Mohammed A., confirming that he had met twice with Abdel Al G., one of three Hamas-linked suspects arrested in Berlin on October 1 for allegedly preparing attacks on Israeli and Jewish sites in Germany. During these meetings, Mohammed A. reportedly acquired five handguns and ammunition from Abdel Al G. and subsequently stored them in Vienna.
  • The prosecutor’s office added that, following his extradition from the UK, Mohammed A. will be brought before an investigating judge at Germany’s Federal Court of Justice. The UK’s National Crime Agency (NCA) also confirmed the arrest of the suspect in central London.
  • The DSN stated that the find formed part of an internationally coordinated investigation “into a global terrorist organization with ties to Hamas.”

Source: AP

Assessments & Forecast

  1. The discovery of a Hamas-linked weapons cache in Vienna, alongside similar arms finds across Europe, including in Germany, Bulgaria, Denmark, the Netherlands, and Poland between 2023 and 2025, underscores the growing threat of Hamas-backed operations across the continent. Although Europe has not recorded a successful Hamas-directed attack, the recurring discovery of weapons caches and multiple foiled plots in recent years suggests a strategic shift in Hamas’ intent, as the group seeks to rebuild and expand its operational footprint beyond Israel and the Palestinian Territories.
  2. With its military infrastructure in Gaza severely degraded following Israeli operations since October 7, 2023, Hamas appears increasingly focused on developing alternative operational hubs abroad, particularly within Europe, where it is likely attempting to leverage sympathetic networks and expatriate communities to strengthen its organizational presence.
  3. In addition to the high number of sympathizers, Europe remains structurally vulnerable to Hamas-linked activity due to its open-border environment, which facilitates the movement of illicit goods once inside the EU. Furthermore, Hamas’s known links with organized criminal networks in the Nordics, particularly in Denmark and Sweden, have reportedly enabled the group to procure firearms, such as AK-47 rifles, handguns, and significant quantities of ammunition, through black-market channels. These dynamics collectively highlight how logistical and criminal convergence within Europe is increasingly being exploited by Hamas operatives and affiliates seeking to reconstitute external operational capability.
  4. As such, these activities indicate that the recurring discovery of weapons caches linked to Hamas is part of long-term strategic planning by Hamas, rather than just short-term retaliatory intent. By stockpiling weapons, building links with organized criminal networks, and utilizing locally based operatives, the group appears to be developing contingency infrastructure designed to enable future attacks against Israeli and Jewish targets in Europe. Such operations would likely be activated in response to Israeli actions against Hamas’ leadership or interests, potentially in coordination with Iran and Hezbollah, both of which maintain extensive external networks across the region.
  5. FORECAST: As such, in the medium term, European authorities are likely to uncover additional Hamas-linked networks, weapons caches, and facilitators, as the group continues efforts to expand its footprint. While the risk of large-scale coordinated attacks is expected to remain low due to strong counterterrorism monitoring, Hamas’s growing attempts to penetrate Europe increase the overall risk of targeted, small-arms assaults on Israeli or Jewish sites, including synagogues, community centers, schools, and diplomatic facilities moving forward.
  6. FORECAST: The threat of Hamas-linked or inspired attacks will likely peak around ideologically or religiously symbolic dates, including major Jewish holidays, commemorations, and anniversaries of large-scale attacks. Potential perpetrators may target crowded venues, religious gatherings, cultural events, and transport hubs to maximize casualties and media impact. The risk will also remain elevated in areas frequented by Jewish tourists and near Israeli diplomatic or community sites across Europe.

Recommendations

  1. Travel to Austria, Germany, and UK may continue while maintaining heightened vigilance for the increased threat of terror attacks near Israeli embassies, synagogues, Jewish establishments, festive events, transportation hubs, religious sites, and public places with large crowds due to the potential for attacks.
  2. Alert authorities immediately upon witnessing suspicious items or behavior.
  3. If a potential stabbing, shooting, explosion, or similar incident manifests, leave the area immediately if possible, or take shelter at a secure location.
    Jewish and Israeli individuals and organizations are advised to be conscious of their surroundings and activity around any residences, places of work, or community centers. Consider keeping a low profile and limiting the wearing or presentation of overt signs or symbols associated with Judaism or Israel.
  4. Those who wear the traditional head covering (kippah) are advised to consider wearing an additional head covering, such as a baseball cap.
  5. Public, private, and third-sector organizations are advised to increase awareness of threats on social media using threat monitoring services. Increased awareness of an organization’s political footprint and perceptions from online fringe groups can help uncover potential violent actors and plots before they occur.
  6. For further questions and risk assessments, please contact [email protected].
COUNTRY RISK LEVEL Low
AFFECTED AREA Europe
INCIDENT RISK LEVEL Medium
STRENGTH OF SOURCE Confirmed

Related Reports

Austria
  • SECURITY_OPERATIONS
    Security Operations
    Austria Alert: Security operations, closure ongoing following threat at bank in Keplerplatz in Vienna as of afternoon hours (local time) on November 3; remain cognizant of updates

Related Reports

Austria
  • SECURITY_OPERATIONS
    Security Operations
    Austria Alert: Security operations, closure ongoing following threat at bank in Keplerplatz in Vienna as of afternoon hours (local time) on November 3; remain cognizant of updates