
Iran-Israel · 09 March, 2026 · 2 min read
U.S. Intercepts Iran Message Activating Sleeper Cells After U.S.-Israel Strike Kills Khamenei
U.S. intercepted encrypted communications believed to originate in Iran that may activate sleeper assets abroad Federal alert to law enforcement cited preliminary analysis and said transmission contents were unknown
Attribution/wording about Ayatollah Ali Khamenei's death.
13 of 14 outlets skipped it: u.S. and Israeli strikes on Iran have killed at least 1,230 people in the country; seven U.S. service members have also been killed (Associated Press figure)..
14outlets compared
Same story, two versions
tap a side to read it in full
NDTV Profit
“The Iranian supreme leader was killed in a joint US-Israeli strike on February 28.”Read the original ↗
Newsweek
“shortly after the reported death of Iran's former Supreme Leader Ayatollah Ali Khamenei.”Read the original ↗
One outlet states the death as a direct result of a "joint US-Israeli strike," while another uses cautious, hedged language "reported death." This reveals editorial differences in asserting perpetrator responsibility versus hedging or distancing from a contested attribution.
Alert on intercepted transmission
U.S. agencies intercepted an encrypted radio-frequency transmission that preliminary analysis judged 'likely of Iranian origin'.
“U.S. officials intercepted an encrypted radio transmission that preliminary analysis says was likely of Iranian origin and was rebroadcast across multiple countries shortly after the reported death of Iran’s supreme leader, Ayatollah Ali Khamenei, the alert reviewed by ABC News says.”
A federal alert reviewed by ABC News said the transmission was rebroadcast across multiple countries shortly after the reported death of Iran’s supreme leader, Ayatollah Ali Khamenei.

The alert described the message as a possible 'operational trigger' meant to activate or instruct covert or prepositioned 'sleeper' assets abroad.
The characterization raised concern among U.S. and allied security services about potential retaliatory operations.
Several outlets reporting on the alert framed it as tied to the spike in hostilities following the Feb. 28 strike attributed to the U.S. and Israel.
Encrypted radio broadcast alert
The circulated alert described the signal as encoded for "clandestine recipients" who would possess the required decryption key.
The alert said the signal was sent without using internet or cellular networks.

The alert said it was relayed via a newly observed station with "international rebroadcast characteristics".
Authorities were told there was no specific, location-tied operational threat identified in the notice.
Agencies were directed to heighten monitoring of suspicious radio-frequency activity and increase situational awareness while analysts attempt to determine whether the broadcasts contain operational directives.
Escalation and security concerns
Reporting placed the intercept in a broader escalation that followed the Feb. 28 U.S.-Israeli strike, which many articles link to the reported death of Khamenei.
“Preliminary signals analysis indicated the transmission likely came from Iran and was relayed through multiple countries shortly after the reported assassination of Iran’s supreme leader, Ayatollah Ali Khamenei, on Feb. 28 in a strike the alert attributes to the U.S. and Israel.”
Some outlets described the strikes and their aftermath as producing an expanded theatre of conflict.
Other reporting noted prior U.S. advisories and concerns about Iran-linked sleeper cells in Europe and elsewhere, while regional arrests and seizures in places like Qatar have been cited as part of the wider security picture.
Heightened security vigilance
U.S. and allied officials responded with heightened vigilance amid worries about possible revenge attacks and covert operations.
Reports said law-enforcement agencies were warned to increase monitoring of suspicious radio traffic, counterintelligence officials flagged the potential for retaliatory strikes in Western countries, and political figures and security commentators publicly urged caution even as agencies refrained from confirming a specific, actionable plot.

Assessment of intercepted broadcasts
Significant uncertainties remain: officials and reports repeatedly note the intercept has not yielded deciphered content, no specific operational target or location has been identified, and some outlets flagged that reporting around Khamenei’s death and the attribution of strikes varies in language and verification.
“...though officials say the content hasn’t been deciphered and no specific location-based threat has been identified.”
The alert therefore raised situational awareness rather than a confirmed imminent threat, and analysts continue to assess whether the broadcasts contain commands or are non-operational transmissions.
