They're not even trying very hard right now. These attacks are very blatantly false flag attacks, being blamed on Iran.
A group that did not exist online or anywhere else before March 9, 2026, has suddenly claimed responsibility for a string of low-tech arson and attempted bombings at synagogues and US banks across Belgium, the Netherlands, France, and the UK
Mainstream outlets like FT and counter-terrorism analysts are rushing to label Harakat Ashab al-Yamin al-Islamia (HAYI, or "Ashab al-Yamin") as an Iranian intelligence "hybrid warfare" front. But a closer look raises serious red flags: the group's amateurish execution, suspiciously perfect timing amid the U.S.-Israeli war on Iran, and a pattern that seems tailor-made to stoke the antisemitism narrative and justify further crackdowns on Tehran and its proxies.
French prosecutors revealed one teen claimed he was recruited on Snapchat, offered €500–€1,000, and initially told the "bomb" was revenge on a cheating girlfriend - before being instructed to film it for the cause. Many suspects were released on bail.
It looks like the original source of this is The Gray Zone: https://thegrayzone.com/2026/03/28/iran-terror-cell-europe/