Full Report
The 47-year-old Michigan man, who pleaded guilty to sexually exploiting a child, was highly active in the online criminal network called 764, which the FBI now considers a “tier one” terrorism threat.
Analysis Summary
# Threat Actor: 764 Terror Network
## Attribution & Identity
- **Primary Entity:** An online criminal network known as **764**.
- **Known Affiliations:** Linked to extremist ideologies such as neofascist accelerationism and the **Order of Nine Angles (ONA)**.
- **Key Individuals Mentioned:**
* **Richard Densmore:** Sentenced to 30 years for sexually exploiting a child; a member of 764.
* **Bradley Cadenhead:** Creator of 764 (founded in 2020); currently serving time for child sexual abuse imagery offenses.
- **Official Assessment:** Categorized by the FBI and DOJ as a **"tier one" terrorism threat** that "directly threaten[s] the national or economic security of the United States."
## Activity Summary
764 is an extremely dangerous criminal network centered around child sexual abuse material (CSAM) distribution and the sexual exploitation of minors.
- **Recent Activity:** Richard Densmore, a member, was sentenced to 30 years in prison in November 2024, following an arrest in Kaleva, Michigan.
- **Scope:** Since its creation in 2020, criminal cases linked to 764 have emerged in at least seven US states, Brazil, Canada, the UK, and multiple European nations.
- **D.O.J. Focus:** The DOJ is investigating approximately 10 764-related cases weekly across all US field offices.
## Tactics, Techniques & Procedures
The core TTPs revolve around exploitation, coercion, and ideological violence:
- **Exploitation & Coercion:** Controlling victims through "extreme fear" by using compromising photographs and personal information.
- **Extortion:** Extorting minors into sexual exploitation or self-harm.
- **Ideological Motivation:** Activities are tied to goals of "destroying civilized society, fomenting civil unrest, and ultimately collapsing the US Government institutions."
- **Extreme Violence Goal:** A stated goal by some members is forcing victims to commit suicide on livestream for network entertainment or perpetrator fame.
- **Criminal Focus:** Engaging in child abuse and distributing CSAM.
- **MITRE ATT&CK IDs:** No specific MITRE ATT&CK IDs were provided in the source material, though the activities align heavily with techniques related to **T1557 (Insecure Collaboration)**, **T1580 (Gather Victim Identity Information)**, and **T1583 (Acquire Infrastructure)** within the Threat Actor profile.
## Targeting
- **Sectors:** Not strictly sector-based, but the network targets the **most vulnerable populations (minors/children)**.
- **Geography:** Global reach, with activity noted in the **United States (at least seven states), Brazil, Canada, the United Kingdom, and multiple European nations.**
- **Victims:** Minors, who are coerced through blackmail and threats.
## Tools & Infrastructure
- **Malware Families Used:** None explicitly named in the summary.
- **Infrastructure:** Operations are conducted within a specific online criminal **network called 764**.
## Implications
The 764 network represents an acute, multifaceted threat:
1. **Terrorism Threat:** Explicitly designated "tier one" by US law enforcement due to its direct threat to national security.
2. **Ideological Violence:** Blends horrific child sexual abuse with neofascist/accelerationist extremist goals, aiming for societal collapse.
3. **Widespread Reach:** Its rapid expansion across multiple continents indicates difficulty in containment and enforcement.
## Mitigations
Standard cybersecurity defenses are insufficient against this type of threat; mitigation focuses on law enforcement and proactive digital defense against CSAM:
- **Proactive Investigation:** Continuous investigation and intervention by federal law enforcement (DOJ/FBI) to dismantle the network structure.
- **Digital Monitoring:** Increased focus on monitoring and reporting illicit online activity, particularly related to CSAM distribution and extremist chatter referencing 764 ideologies or goals.