JUSTICE

Old Bailey hears Norwegian teen deny UK Foxtrot murder plot

Prosecutors at the Old Bailey say Johannes Kongsnes Natland, a 19-year-old Norwegian, travelled from Stavanger to Manchester in March 2025 to carry out a paid killing for the Foxtrot Network; Natland denies conspiracy to murder but has admitted possession of two firearms and ammunition. The court has heard that handlers using aliases including Agent 47 and Generalen allegedly directed him to cash, weapons and an unidentified target after he arrived in England. Natland told the jury he did not intend to kill anyone and feared the network would harm him or his family if he withdrew. The case matters beyond Britain because the UK government has sanctioned Foxtrot and Rawa Majid, saying the Swedish-based network has acted against Jewish and Israeli targets in Europe on behalf of Iran. A 2024 research analysis also identified Brussels as one of the European places where alleged proxy activity had appeared.

Belgium Impulse Editorial·11 June 2026·3 min read·6 sources

Key signal

For Belgian residents, Jewish communities, diplomats, security services and parents of teenagers using encrypted platforms, the case is a warning about how alleged state-linked violence can be outsourced through cross-border criminal networks. Belgium is not the courtroom, but Brussels hosts embassies, EU institutions and international organisations that can become symbolic targets. The UK government and Säpo have both framed this threat as international, while a 2024 research analysis linked alleged Foxtrot activity to an incident involving Israel's embassy in Belgium.

Johannes Kongsnes Natland (Norwegian defendant, 19, from Stavanger) is on trial in London over an alleged murder conspiracy. Stavanger (south-west Norwegian city and oil-sector hub) is his home city. The Old Bailey (Central Criminal Court of England and Wales in London) hears serious criminal cases. Manchester Airport (major north-west England airport) was Natland's arrival point on 17 March 2025, according to prosecutors. Huddersfield (West Yorkshire town between Manchester and Leeds) is where police arrested him at the Briar Court Hotel (local hotel named in court). Foxtrot Network (Swedish organised-crime group associated with gang violence and sanctions) is the alleged commissioning network. Rawa Majid (Swedish-Turkish crime figure also known as the Kurdish Fox) is named by UK sanctions as Foxtrot's leader. Agent 47 and Generalen (aliases cited in court) are alleged handlers or intermediaries. Säpo (Sweden's domestic security service) has publicly linked Iranian services to Swedish criminal networks.

Background

The alleged plot fits a wider pattern identified by security agencies and researchers. Säpo said in May 2024 that Iran was using criminal networks in Sweden as proxies against Israeli or Jewish interests. The UK government said in April 2025 that Britain had responded to more than 20 Iran-backed plots since early 2022 and sanctioned Foxtrot and Rawa Majid under the 2023 Iran Sanctions Regulations. A 2024 Washington Institute and ICCT analysis said Iranian external operations in Europe increased after a foiled 2018 Iranian bomb plot near Paris and that criminal intermediaries now feature more often.

The wider picture

The broader issue is Iran's alleged use of deniable proxies in Europe while avoiding direct state responsibility. Researchers and Western officials describe this as a way to pressure dissidents, Israeli-linked targets and Jewish communities without openly deploying state officers. That blurs the line between organised crime, terrorism, sanctions policy and counterintelligence.

Why now

The story is timely because Natland is currently giving evidence at the Old Bailey in a live conspiracy-to-murder trial, and because UK sanctions against Foxtrot in April 2025 have made the network's alleged Iran links part of a wider European security debate.

OIS Intelligence

What to watch

Watch for the Old Bailey verdict on conspiracy to murder, any sentencing on the admitted firearms offences, and whether UK or Nordic authorities disclose further charges against alleged handlers. European signals to monitor include new sanctions designations and any EU debate on treating the IRGC or proxy networks differently.

Impact

Regional — The effects differ by level. The UK courts are testing the criminal allegation against Natland. Sweden and Norway sit closer to the alleged recruitment chain because Foxtrot is Swedish-based and Natland is Norwegian. Belgium's relevance is primarily Brussels security: a 2024 research analysis linked alleged Foxtrot activity to an airsoft-grenade incident at Israel's embassy in Belgium. At EU level, the issue feeds broader questions on sanctions, intelligence sharing and whether member states treat proxy violence as organised crime, state threat activity or terrorism.

Opposing perspectives

Natland defence
Natland's defence, as described in court evidence, frames him as a frightened and immature recruit who made reckless choices but did not intend to kill. The strongest version is that possession of weapons and bravado in messages do not prove murderous intent if he was trying to survive pressure from a violent network.
UK prosecutors and security authorities
UK prosecutors frame the case as an interrupted contract killing: Natland allegedly travelled, collected firearms and remained in contact with handlers. The UK government's sanctions position strengthens the wider security reading by treating Foxtrot as a network used for violence against Jewish and Israeli targets in Europe.
Swedish security services
Säpo's position is that Iranian-linked use of Swedish criminal networks is not only gang crime but a state-threat problem requiring international cooperation. That frame sees the Natland case as part of a broader proxy method, even if each criminal trial must prove individual guilt separately.