
In the escalating shadow of the ongoing U.S.-Israel conflict with Iran, new intelligence reports have sparked widespread concern that Tehran may be attempting to activate long-dormant sleeper cells around the world for possible retaliatory attacks.
U.S. intelligence agencies have intercepted encrypted communications believed to originate from Iran, according to a federal alert distributed to law enforcement agencies. The transmissions, described in reports from ABC News and other outlets on March 9, 2026, appear to function as an “operational trigger” for “sleeper assets” or covert operatives positioned abroad. These messages were relayed across multiple countries shortly after the death of Iran’s Supreme Leader, Ayatollah Ali Khamenei, who was killed on February 28, 2026, in joint U.S.-Israeli airstrikes on Tehran.
The alert, based on preliminary signals analysis, indicates the communications were encoded using methods suited for clandestine recipients—avoiding standard internet or cellular networks—and likely intended to deliver instructions to prepositioned operatives without detection. If confirmed, such signals could represent Tehran’s effort to mobilize networks maintained by the Islamic Revolutionary Guard Corps (IRGC) or affiliated proxies like Hezbollah for asymmetric warfare, including espionage, assassinations, or terror operations in Western nations.
This development has amplified longstanding anxieties about Iranian retaliation through proxy forces. Iran has historically sustained clandestine cells in Europe, North America, and elsewhere for surveillance and potential strikes, often targeting dissidents, Israeli interests, or former officials. U.S. authorities have disrupted several Iran-linked plots in recent years, though many involved recruited criminals rather than deeply embedded long-term sleepers.
The timing aligns with heightened threats following Khamenei’s assassination and the broader war, now in its second week. Earlier warnings from the Department of Homeland Security (DHS) and counterterrorism experts had already flagged elevated risks to the U.S. homeland from Iran-backed extremists or inspired lone actors. Incidents such as a deadly shooting in Austin, Texas, involving a suspect with alleged pro-regime ties, and a gun attack on an Iranian dissident’s gym in Canada, have fueled speculation about possible connections—though no definitive links to coordinated sleeper cell activity have been publicly established.
Experts emphasize that while Iran’s capabilities for such operations are credible, the regime’s current weakened state—following leadership losses and military setbacks—may limit large-scale, traceable actions that could invite devastating further escalation. Instead, threats could manifest through proxies, sympathizers, or opportunistic attacks rather than a centralized, high-profile campaign.
Security agencies in the United States, Europe (including Germany, where officials have warned of potential strikes following a reported fatwa), and beyond remain on high alert. Law enforcement has increased surveillance, and officials urge public vigilance without widespread panic. No major incidents directly attributed to these suspected cells have been confirmed as of March 10, 2026, but the fluid nature of the conflict leaves open the possibility of rapid developments.
The situation underscores the complex interplay between overseas military operations and domestic security risks, with former officials noting that foreign wars often carry a “homeland threat component.” As the Middle East crisis continues, global counterterrorism efforts are intensifying to counter any potential activation of these hidden networks.