ITV News, on Iran, 11 November 2026

7.3out of 10Serious

Seven men behind alleged Iranian terror network 'unmasked'

Tap a highlight to see why it matters.4 findingsSee them marked on itv.com

Play Brightcove video ITV News Global Security Editor Rohit Kachroo 'unmasks' the seven-strong group that western officials believe is behind incidents like RAF Fairford can be unmasked as a group of just seven men who, it is alleged, devised a campaign of revenge in the opening days of the Iran war. Posing as an organised proxy group, they used AI-generated propaganda and paid local criminals to carry out attacks intended less to kill than to spread fear, working on behalf of the Iranian intelligence services, security officials believe.

An ITV News investigation, based on conversations with multiple security officials, reveals how they believe the network sought to terrorise Jewish communities through a series of attacks carried out in quick succession. The findings shed new light on a campaign that has caused confusion as well as fear over the past eight months, beginning with an explosion at a synagogue in Belgium and followed soon by an arson attack on a Jewish ambulance service in London.

By the summer, following attacks in France, Greece and the Netherlands, officials believe the group escalated its ambitions, attempting to target RAF Fairford, a British airbase used by the US military. Officials paint a picture of a loose circle of associates rather than a conventional terrorist organisation. At its centre was Mohammad Baqer Saad Dawood al-Saadi, a dual Iranian-Iraqi national who was charged in the United States on Tuesday with orchestrating attacks in Europe.

Two other men, Iranian national Mohsen Mohajeri and Iraqi national Mohammad Ali al-Hassani, were also charged with terrorism-related offences in an eight-count indictment unsealed in New York. Credit: ITV News ITV News can reveal that the network is also thought to have included two brothers with suspected links to organised crime in the Netherlands. One, Mustafa Mter Rassoul Alkyaui, was arrested in Turkey, where he remains in detention.

His brother, Rassoul Mter Rassoul Alkyaui Mohsen, remains at large. The pair are named here for the first time. From a control room in Baghdad, members of the network are believed to have selected targets and devised tactics as Tehran sought unconventional ways to retaliate against Israel and the United States. But their plans were shaped as much by opportunity as strategy. Attacks depended on how quickly they could recruit local criminals willing to carry them out for money, often without knowing whose instructions they were following.

The brothers’ contacts in Europe’s criminal underworld are believed to have been crucial in turning the group’s ambitions into attacks. The first came just nine days after the war began. An explosion at a synagogue in the Belgian city of Liège shattered its windows and those of a building across the street. The synagogue is thought to have been chosen not because of its particular significance, but because the network could find criminals locally to attack it.

Eight months on, worshippers at the Liège synagogue are still struggling to come to terms with the attack. They had initially assumed local extremists were responsible, rather than an international network allegedly . Subscribe free to our weekly newsletter for exclusive and original coverage from ITV News. Direct to your inbox every Friday morning. "In the beginning we thought that they were people from around us, people who were radicalised by what’s going on," said Rosita Winkler, a worshipper at the synagogue who described to ITV News the period of fear in the Jewish community that has continued since the attack.

"Then came the anxiety. With everything that is going on in the world against the Jewish community, is it also coming to Liège? Who done it? Are we going to be targeted personally? "Why people paid those guys to come here to put a bomb in front of Liège synagogue, that’s a different question.” Two days after the explosion, a previously obscure group calling itself the Islamic Movement of Companions of the Right (IMCR) claimed responsibility.

Its video featured ominous music, a menacing emblem and the hallmarks of propaganda produced by established terrorist organisations such as Islamic State and Hezbollah - a clear attempt to generate panic. But the apparent sophistication is believed to have been an illusion, created partly through artificial intelligence to make a small network appear far more formidable. The deception was central to the campaign: the group wanted its attacks to generate fear far beyond the damage they caused.

ITV News has also learned that al-Saadi is suspected of personally producing and distributing some of the propaganda, using AI to imitate the style of established terrorist organisations. He is also believed to have helped plan an attack on a Jewish ambulance service in north London, three weeks after the war began. In the early hours of 23 March, four ambulances operated by the charity Hatzola were set alight in Golders Green. Gas canisters inside the vehicles exploded as the fires spread.

In the early hours of 23 March, four ambulances operated by the charity Hatzola were set alight in Golders Green. Credit: PA Soon afterwards, another IMCR video appeared online, claiming responsibility. Al-Saadi is suspected of not only helping create propaganda but personally publishing it too: The man accused of helping orchestrate attacks across Europe was also, investigators believe, the person pressing ‘send’ on the videos designed to terrify Jewish communities.

But the public may not have been the only ones deceived. Investigators believe two rival branches of the Iranian regime were funding the same network: the Revolutionary Guards’ Quds Force and Iran’s Ministry of Intelligence. Neither, it is thought, knew the other was involved - evidence, officials believe, of a lack of coordination between different arms of the Iranian regime. Although the group is assumed to have chosen most of its targets itself, western officials believe that its decision to target RAF Fairford is likely to have received sign-off from more senior figures within the Iranian Revolutionary Guard.

" This eight-count indictment shows the determination of Iran to commit terrorist attacks in Europe and the US, including one plot that was recently prevented at RAF Fairford, a British Royal Air Force Base where American forces were stationed," said FBI Director Kash Patel. With little sign of a breakthrough in Qatar-led attempts to mediate between the warring sides, Iran’s security chief Mohsen Rezaei renewed threats against military bases “from West Asia to Europe” on Wednesday evening.

Left out here: Leaves out what changes the picture

The article never reports that Iran has denied any involvement in the attacks or the RAF Fairford plot. Without it, a reader believes the accusation against Iran stands uncontested, when the accused state has rejected it.

From Westminster to Washington DC - our political experts are across all the latest key talking points. Listen to the latest episode below...

Read the original article on itv.com (opens in a new tab)
What we found (4)

ITV News reports the US indictment of men accused of running a network behind attacks on Jewish sites and the RAF Fairford plot, and mostly attributes its account to officials and investigators. But its opening line states as fact that the network is Iranian, and the article never tells the reader that Iran has denied any involvement, so Western officials' claims close the piece unanswered. It also calls Iran's government 'the Iranian regime' in its own narration.

  1. Gives a contested claim the last word

    Serious

    “Western officials believe that Iranian networks such as the self-styled IMCR are prepared to strike again, offering the regime a route towards retaliation as well as plausible deniability.”

    Why this matters
    ITV closes its report on Western officials' claim that Iranian networks will strike again and that Iran uses them for deniability. Nothing from Iran is set against this claim anywhere in the article.
    The impression it gives
    A reader comes away believing Iran's role is uncontested, and that any denial would only be the 'plausible deniability' the officials describe.
    The context
    Metro and LBC, reporting the same indictment, both state that Iran has denied any involvement. ITV never reports that denial.

    Show it in the article

    Written straight

    Western officials believe networks such as the self-styled IMCR are prepared to strike again. Iran has denied any involvement in the attacks.

  2. Leaves out what changes the picture

    Serious

    What is missing

    The article never reports that Iran has denied any involvement in the attacks or the RAF Fairford plot. Without it, a reader believes the accusation against Iran stands uncontested, when the accused state has rejected it.

    Show where it belongs

  3. States one side's claim as fact

    Minor

    “An Iranian terror network that claimed responsibility for a wave of attacks across Europe”

    Why this matters
    The words "An Iranian terror network" state in ITV's own voice that the network is Iranian. The only hedge in the sentence, "it is alleged", is attached to the campaign of revenge, not to the network's link to Iran.
    The impression it gives
    A reader takes it as established fact that Iran runs the network, before any source is named.
    The context
    The article's next sentence attributes the Iranian link to security officials' belief, and the headline itself says "alleged". The link rests on officials' claims and an indictment, which are not convictions, and Iran has denied any involvement.

    How we know

    Show it in the article

  4. Uses a loaded word

    Minor

    “acting on behalf of the Iranian regime”

    Why this matters
    ITV calls Iran's government "the Iranian regime" in its own narration. No source is attached to the word.
    The impression it gives
    A reader takes on a pejorative verdict about Iran's government as neutral description.
    The context
    The facts in the article concern the alleged conduct of specific Iranian bodies. They do not require the outlet's own voice to use 'regime'. 'Iran's government' carries the same information.

    How we know

    • Elsewhere in the article“the Revolutionary Guards’ Quds Force and Iran’s Ministry of Intelligence”

    Show it in the article

How other outlets reported it

Spot something we missed? Report this article

More from ITV News

  1. 9 NovTrump after meeting with Qatari PM says he believes war with Iran is militarily 'effectively over'3.0
  2. 7 NovUS military says it fired on commercial vessel in Gulf of Oman after it attempted to breach blockade3.0
  3. 5 NovTanker struck by projectiles in the Persian Gulf off Qatar, and other Mideast news0.0
  4. 5 NovTrump weighs next move on Iran as Middle East conflict is blamed for election loss3.0
  5. 5 NovAfter midterm loss, Trump is left to weigh his next move in Iran war that contributed to GOP debacle3.0

Everything we scored from ITV News