U.S. Intercepts Encrypted Message Likely From Iran That Could Trigger Sleeper Cells
Image: USA TODAY

U.S. Intercepts Encrypted Message Likely From Iran That Could Trigger Sleeper Cells

11 March, 2026.Iran.1 sources

Key Takeaways

  • U.S. intercepted encrypted messages believed to originate from Iran
  • Federal government sent an alert to law enforcement reported by ABC News
  • Alert warns messages could act as an "operational trigger" activating sleeper assets

Interception and origin

U.S. officials intercepted encrypted messages that a federal alert — reviewed by ABC News and reported by USA TODAY — described as likely of Iranian origin and potentially designed to act as an "operational trigger" for sleeper assets.

What is a 'sleeper cell'

USA TODAYUSA TODAY

The alert was sent to law enforcement agencies and said the message was transmitted to numerous countries following the death of Ayatollah Ali Khamenei on Feb. 28, described in the reporting as "the first day of the war."

Image from USA TODAY
USA TODAYUSA TODAY

The reporting frames the interception as an intelligence-warning scenario rather than confirmed activations, emphasizing that authorities flagged the communications as a potential trigger rather than reporting active attacks.

Alert language and intent

The alert uses language suggesting the messages were aimed at activating "sleeper assets" or "prepositioned sleeper assets operating outside the originating country," and described recipients as "clandestine recipients" who obtain an encryption key to deliver instructions to "covert operatives or sleeper assets."

This vocabulary underscores that the communications were framed as operational instructions rather than benign diplomatic traffic, according to the USA TODAY coverage of the federal alert and ABC News review.

Image from USA TODAY
USA TODAYUSA TODAY

Sleeper cell context

USA TODAY’s reporting places this alert in the context of how "sleeper cell" concepts have been understood historically, noting Cold War precedents (Soviet KGB placements) and the post-9/11 significance after hijackers lived in the U.S. for months before the attacks.

What is a 'sleeper cell'

USA TODAYUSA TODAY

The article also provides a concise operational definition from the Spy Museum: a sleeper cell is an "agent living as an ordinary citizen in a foreign country; acts only when a hostile situation develops," which helps explain why authorities would treat an encrypted activation message as a serious concern.

Uncertainty and review

The reporting emphasizes that the assessment came from a "preliminary signals analysis," signaling uncertainty about firm attribution or imminent action.

USA TODAY notes that the alert was "reviewed by ABC," which underlines that the public account is based on government warnings and media review rather than an official, public forensic confirmation.

Image from USA TODAY
USA TODAYUSA TODAY

The coverage therefore frames the situation as a warning to law enforcement agencies to be alert to potential activations rather than reporting confirmed operational follow-through.

Open questions remain

Because the public reporting in USA TODAY is based on a government alert and ABC News review, important details remain unclear: the identity of the senders, whether the messages led to activation of any operatives, and how law enforcement has operationally responded are not detailed in the article.

What is a 'sleeper cell'

USA TODAYUSA TODAY

The piece thus functions as an early-warning account and invites further reporting and verification about attribution, the scope of distribution, and any concrete law enforcement actions following the alert.

Image from USA TODAY
USA TODAYUSA TODAY

More on Iran