Iran Threatens Attacks on U.S. Soil After Operation Epic Fury, Mobilizes Sleeper Cells and Assassins

U.S. and Israeli strikes on Iran under "Operation Epic Fury" have prompted U.S. counterterrorism officials and homeland-security analysts to warn of an elevated risk of retaliatory attacks on American soil.

Officials' concerns center on activation of Iran-linked sleeper cells, mobilization of local sympathizers, and the use of assassins.

Homeland Security Today

Homeland Security Today frames these strikes as raising "fears of retaliatory attacks inside the United States, including activation of Iran-linked sleeper cells and local sympathizers."

The Los Angeles Times reports federal officials "are warning of heightened risk to the U.S. after the Feb. 28 killing of Iran’s supreme leader, Ayatollah Ali Khamenei" and links the strikes and the leader’s killing to increased vigilance.

Analysts point to Iran’s long-standing practice of using proxy groups and clandestine networks to carry out overseas operations, with the IRGC and Hezbollah specifically named as instruments for surveillance, target selection, and attacks, a capability that feeds fears of strikes or plots inside the U.S.

Homeland Security Today highlights Iran’s 'long-standing use of proxy groups such as the IRGC and Hezbollah to conduct overseas operations and maintain clandestine networks for surveillance, target selection, and attacks,' and notes U.S. agencies have previously flagged such methods in threat assessments.

Los Angeles Times

The Los Angeles Times adds that reports of Iran trying to hire assassins to target American officials amplify concerns that Tehran or its proxies could retaliate via 'sleeper cells, affiliated terrorist groups, lone-wolf attackers or cyberattacks.'

U.S. intelligence and law-enforcement history inform present worries: CIA assessments and past disruption of Iran-linked plots demonstrate embedded networks and persistent plotting capabilities.

Homeland Security Today states that 'CIA assessments indicate these embedded cells have existed in the U.S. for years as contingencies awaiting orders,' and cites the 2011 IRGC-linked plot to kill the Saudi ambassador in Washington as a turning point for U.S. threat analysis.

The Los Angeles Times underscores that 'the FBI and DHS have been on heightened alert since Operation Epic Fury began Feb. 28,' reflecting institutional caution rooted in prior disruptions of Iran-backed plots.

Authorities acted on indicators that raised concern among local and federal agencies, including a shortwave 'number station'-style broadcast that analysts told police could be an 'operational trigger' for clandestine recipients.

The Los Angeles Times reports a shortwave 'number station'-style broadcast using Persian and a string of numbers was detected and that a memo to police agencies urged heightened vigilance.

Los Angeles Times

Preliminary signals analysis called the transmission 'likely of Iranian origin'.

Homeland Security Today cautions about Iran's clandestine capabilities and the potential activation of sleeper networks inside the U.S.

Officials stress that, despite elevated alerts and concerning indicators, investigators have so far not identified a credible, specific threat to U.S. soil, while continuing to monitor potential avenues of retaliation including lone actors and cyber operations.

The Los Angeles Times notes that "so far investigators say there is no credible, specific threat, but authorities view the situation as elevated and potentially volatile."

Homeland Security Today

Homeland Security Today references ongoing disruptions of plots and longstanding contingency planning by Iran-linked networks that complicate assessments.