Officials detected an encrypted message described as a possible “operational trigger” for sleeper assets—covert operatives embedded abroad—shortly after a U.S.-Israeli airstrike reportedly killed Iranian Supreme Leader Ali Khamenei on Feb. 28. His son, Mojtaba Khamenei, was later elevated as the new leader.
The signal, transmitted across multiple countries, appeared Iranian in origin and could be decoded by prearranged passcodes. Analysts noted it resembled historical methods of delivering instructions to covert operatives without relying on the internet.
Security concerns have risen about potential Iranian sleeper cells in the U.S., particularly amid ongoing hostilities with the U.S. and Israel. Past reports suggest operatives have traveled via Venezuela to establish footholds near the U.S. Analysts warned such cells or lone sympathizers could target crowded public venues, including events like the upcoming World Cup.
White House press secretary Karoline Leavitt praised President Trump’s military actions in Operation Epic Fury, citing over 2,000 Iranian targets struck, describing the campaign as decisive and aimed at eliminating threats to U.S. security.