U.S. intelligence agencies are analyzing an encrypted communication believed to have originated in Iran that may have been intended for covert operatives overseas, according to an alert cited by ABC News. Officials described the message as a potential “operational trigger” aimed at what intelligence analysts call sleeper assets — individuals quietly embedded in foreign countries who remain inactive until they receive specific instructions. The transmission was reportedly detected shortly after the alleged killing of Iranian Supreme Leader Ali Khamenei in a joint U.S.–Israeli airstrike in Tehran on Feb. 28. Following his death, Iranian authorities elevated his son, Mojtaba Khamenei, to the position of supreme leader.
According to the alert, the encrypted signal traveled across multiple countries and was flagged by U.S. monitoring systems. Analysts concluded the communication likely originated in Iran and may have been intended for clandestine recipients capable of decoding the message using prearranged codes. Officials said the signal displayed “international rebroadcast characteristics,” a method that allows coded instructions to be distributed over long distances without relying on internet communications. Similar techniques have historically been used to deliver messages to covert operatives without leaving a digital trail.
Security officials have raised concerns about the possible presence of Iranian sleeper cells in the United States as tensions in the region intensify. Experts warn that potential threats could involve both individuals sympathetic to Tehran and organized networks awaiting instructions. Former Department of Homeland Security adviser Charles Marino said the United States could face a “convergence” of threats if coordinated attacks were carried out. Marino noted that extremists seeking maximum casualties might focus on “soft targets,” including concerts, sporting events, and other crowded public locations.
