{"id":12532,"date":"2026-03-10T11:48:19","date_gmt":"2026-03-10T11:48:19","guid":{"rendered":"https:\/\/www.europesays.com\/iran\/12532\/"},"modified":"2026-03-10T11:48:19","modified_gmt":"2026-03-10T11:48:19","slug":"irans-threat-on-u-s-soil-sleeper-cells-lone-wolves-cyberattacks","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/iran\/12532\/","title":{"rendered":"Iran&#8217;s threat on U.S. soil: Sleeper cells, lone wolves, cyberattacks"},"content":{"rendered":"\n<p>With U.S. and Israeli forces continuing offensive strikes on Iran, federal counterterrorism authorites are warning that  the desperate theocracy could launch retaliatory strikes on American soil using sleeper cells, affiliated Iranian terrorist groups, lone wolf sympathizers or targeted cyberattacks.<\/p>\n<p>Within days of the killing of Iranian Supreme Leader <a class=\"link\" href=\"https:\/\/abcnews.com\/International\/ayatollah-ali-khamenei-irans-supreme-leader-dead-trump\/story?id=122947671\" target=\"_blank\" rel=\"nofollow noopener\">Ayatollah Ali Khamenei<\/a> on Feb. 28, cryptic messages were broadcast globally on a new shortwave radio frequency.<\/p>\n<p> \u201cTavajjoh! Tavajjoh!\u201d the message began, using the Persian word for \u201cattention.\u201d The eerie male voice then read a seemingly random string of numbers. <\/p>\n<p>The monotone transmission recalled the manner in which deep-cover Cold War spies for the KGB and CIA once received orders. Using a special encryption code, the operatives could translate the numerals into a readable message. Although messages from so-called number stations have been broadcast for decades, they are now less prevalent in the digital encryption age. <\/p>\n<p>Still, federal authorities warned local law enforcement that they had detected a new broadcast of a likely encoded sequence that could be \u201can operational trigger\u201d for \u201csleeper assets\u201d potentially on U.S. soil. <\/p>\n<p>Although counterterrorism investigators have so far found no credible specific threat, a memo to police agencies, first reported by ABC News, calls for local law enforcement to be on heightened watch. The alert describes the \u201cpreliminary signals analysis\u201d of the transmission, \u201clikely of Iranian origin,\u201d that was relayed across multiple countries and intended for \u201cclandestine recipients\u201d who possess the encryption key.<\/p>\n<p>\u201cSleeper cells have always been a concern when it comes to Iranians and their proxies,\u201d said Horace Frank, former head of counterterrorism for the Los Angeles police and a retired assistant chief. \u201cThis isn\u2019t new, but given the situation, some of their proxies are feeling a lot more desperate.\u201d<\/p>\n<p>The FBI and the Department of Homeland Security have been on a war footing since Operation Epic Fury launched Feb. 28.<\/p>\n<p>During President Biden\u2019s term, the Department of Homeland Security issued a threat assessment saying, \u201cIran relies on individuals with pre-existing access to the United States for surveillance and lethal plotting.\u201d<\/p>\n<p>Beyond the idea of a deep-cover sleeper cell threat, Iran has repeatedly tried to hire assassins to kill U.S. officials.<\/p>\n<p> After a U.S. airstrike against Iranian Gen. <a class=\"link\" href=\"https:\/\/thehill.com\/people\/qassem-soleimani\/\" target=\"_blank\" rel=\"nofollow noopener\">Qassem <\/a>Suleimani in 2020, Iran sought to kill <a class=\"link\" href=\"https:\/\/thehill.com\/policy\/international\/3596575-pompeo-also-targeted-in-an-iranian-assassination-plot-reports\/\" target=\"_blank\" rel=\"nofollow noopener\">former Secretary of State Mike Pompeo and former national security advisor John Bolton<\/a> to avenge the general\u2019s death. The Department of Justice charged Shahram Poursafi, a member of Iran\u2019s Islamic Revolutionary Guard Corps, with trying to hire people to assassinate Bolton, a former top official in the Trump White House, between October 2021 and April 2022 in Washington and Maryland in exchange for $300,000. He remains a fugitive.<\/p>\n<p>On Friday, Asif Raza Merchant was convicted in a 2024 murder-for-hire plot targeting President Trump and others, and attempting to commit an act of terrorism transcending national boundaries. Pakistani native Merchant was recruited in Karachi in 2022 or early 2023, when he received training in tradecraft, including countersurveillance by the Islamic Revolutionary Guard Corps,  prosecutors said. Merchant testified that in 2024, he was sent to recruit \u201cMafia\u201d members to steal documents, stage a protest and arrange the murders, but the hit men turned out to be federal agents.<\/p>\n<p>In November 2024, the Justice Department charged Farhad Shakeri \u2014 an Afghan national residing in Tehran \u2014 in a separate plot. Authorities said he had also been tasked by the Revolutionary Guard with hiring someone to assassinate  Trump.<\/p>\n<p>Since the Sept. 11 terrorist attacks, the Los Angeles Police Department has attempted to prepare for all manner of threats \u2014 machine gun-based street attacks; fuel bombs with secondary explosives intended to kill first responders, and even radiation-laced dirty bombs. Using security lessons learned in the Middle East, the LAPD even makes vehicles carrying Hollywood stars to the Oscars zigzag around concrete barriers, while snipers with .50-caliber rifles keep their eyes peeled for potential threats.<\/p>\n<p>\u201cWe are at a heightened level of awareness,\u201d Chief Jim McDonnell said. \u201cLone wolves in our experience have been our concern.\u201d Such attackers may be inspired by talk  in the Middle East, and see themselves as acting for the cause.<\/p>\n<p>\u201cWe have some great partnerships with our local and federal agencies,\u201d when it comes to counterterrorism, McDonnell said. But historically, as much as intelligence pays off, the chief said it is the eyes and ears of the public that often deliver the vital tip.<\/p>\n<p>Those of Iranian descent number more than 700,000 in Southern California, the largest single population outside Iran. McDonnell said that brings heightened awareness.<\/p>\n<p>Even as the LAPD and other agencies have thwarted several lone wolf plots, the nation\u2019s worst terrorist attack since 9\/11 unfolded in San Bernardino. Restaurant inspector Syed Rizwan Farook, a U.S. citizen, and his Pakistani-born wife, Tashfeen Malik, walked into his San Bernardino County employee holiday party with military-style assault rifles and shot more than 30 people, killing 14 in 2015.<\/p>\n<p>The extreme violence, apparently inspired by jihadi propaganda online, thrust the city of San Bernardino into the global spotlight.<\/p>\n<p>For homeland security analysts, the San Bernardino attack was a wake-up call. At the time, they were still intensely focused on preventing terrorists trained in foreign lands from infiltrating America\u2019s porous borders \u2014 as the 9\/11 hijackers had. Now they were confronted with the grave threat that American citizens were being radicalized online.<\/p>\n<p>Farook was raised in Riverside. Malik was born in Pakistan and had lived most of her life in Saudi Arabia. They met online, married, had a 6-month-old girl, and lived in Redlands. They had no apparent links to international terrorist networks \u2014 until Malik pledged allegiance to the leader of the extremist group Islamic State  on Facebook shortly before the attack.<\/p>\n<p>Within a day of the Iranian leadership being targeted and killed, 53-year-old Ndiaga Diagne donned a hoodie emblazoned with the words \u201cProperty of Allah\u201d and a T-shirt stamped with an Iranian flag design and set about killing three people and wounding 13 on Austin\u2019s popular bar strip before being fatally shot by police in Texas. Investigators are still looking into the motive, including a \u201cnexus to terrorism.\u201d<\/p>\n<p>Counterterrorism experts also warn there is a threat from so-called proxies \u2014 those associated with the Iranian government, including militants linked to Hezbollah in Lebanon and the Houthi movement in Yemen. A Rand report, <a class=\"link\" href=\"https:\/\/www.rand.org\/pubs\/perspectives\/PEA3585-1.html\" target=\"_blank\" rel=\"nofollow noopener\">Hezbollah\u2019s Networks in Latin America, <\/a>found that the militant group had a considerable network that was active in the Southern Hemisphere. <\/p>\n<p>Frank, the former police official, said those proxies have traditionally used California as a fertile base for financing and have avoided other activities here. However, given the military threat Iran now faces, that could change.<\/p>\n<p>In 2023, two Iranian nationals on a U.S. security watch list were <a class=\"link\" href=\"https:\/\/www.fox7austin.com\/news\/iranian-encounters-confirmed-texas-border-dps-director#:~:text=FOX%20News%2C%20Monday%20morning%2C%20reported%20four%20Iranians%2C%20two%20of%20whom%20are%20on%20a%20security%20threat%20watch%20list%2C%20have%20been%20caught%20on%20the%20Texas%20border%20this%20month.%20The%20most%20recent%20case%20happened%20Sunday%20morning.%C2%A0\" target=\"_blank\" rel=\"nofollow noopener\">apprehended<\/a> at the Texas-Mexico border, stoking security concerns. After U.S.-Israeli strikes on Iran\u2019s nuclear infrastructure last year, Customs &amp; Border Patrol Commissioner Rodney Scott warned that \u201cthousands of Iranian nationals have been documented entering the United States illegally\u201d between 2022 and 2025. Countless more were probably \u201cgot-a-ways,\u201d he said. <\/p>\n<p>But some experts say Iranians with government ties don\u2019t need to risk border crossings and have access to fake identities. They note that authorities in S\u00e3o Paulo unmasked a hub for <a class=\"link\" href=\"https:\/\/www.interpol.int\/en\/News-and-Events\/News\/2023\/Two-year-investigation-leads-to-arrest-of-suspected-migrant-smuggler\" target=\"_blank\" rel=\"nofollow noopener\">Iranian document-forging networks<\/a>. <\/p>\n<p>U.S. counterterrorism authorities have long watched the cyber threat from Iranian-backed hackers. In recent years, those tied to the government have been seen testing vulnerabilities in U.S. systems and targeting water supply facilities. But cybersecurity experts say that beginning the morning of Feb. 28, when the strikes began, Iran\u2019s available internet <a class=\"link\" href=\"https:\/\/netblocks.org\/\" target=\"_blank\" rel=\"nofollow noopener\">connectivity<\/a> dropped to between 1% and 4%. <\/p>\n<p>Joint Chiefs of Staff Chairman Gen. Dan Caine said U.S. Cyber Command was involved in \u201ccoordinated space and cyber operations [that] effectively disrupted communications and sensor networks \u2026 leaving the adversary without the ability to see, coordinate or respond effectively.\u201d <\/p>\n","protected":false},"excerpt":{"rendered":"With U.S. and Israeli forces continuing offensive strikes on Iran, federal counterterrorism authorites are warning that the desperate&hellip;\n","protected":false},"author":2,"featured_media":12533,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[693,6940,6943,6934,6942,6939,34,46,6935,6937,6941,6932,6938,6933,6936],"class_list":{"0":"post-12532","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-iran","8":"tag-concern","9":"tag-counterterrorism","10":"tag-cyberattack","11":"tag-department","12":"tag-federal-authority","13":"tag-homeland-security","14":"tag-iran","15":"tag-islamic-revolutionary-guard-corps","16":"tag-lone-wolf","17":"tag-proxy","18":"tag-san-bernardino","19":"tag-sleeper-cell","20":"tag-tashfeen-malik","21":"tag-threat","22":"tag-u-s-soil"},"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@iran\/116204726068433391","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/posts\/12532","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/comments?post=12532"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/posts\/12532\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/media\/12533"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/media?parent=12532"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/categories?post=12532"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/iran\/wp-json\/wp\/v2\/tags?post=12532"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}