A federal government alert distributed to law enforcement agencies has flagged encrypted transmissions believed to originate in Iran that may serve as an operational trigger for clandestine personnel positioned abroad.
According to the alert, preliminary signals analysis found a coded transmission likely of Iranian origin that was rebroadcast across multiple countries in the period following the reported death of Ayatollah Ali Khamenei. The alert links the timing of the transmission to the death, which occurred in a U.S.-Israeli attack on Feb. 28, and highlights the international routing of the signal.
Investigators who reviewed the signal said the intercepted transmission was encoded and appeared directed to covert recipients in possession of the corresponding encryption key. The alert describes this as the type of message designed to convey instructions to operatives or prepositioned sleeper assets without using internet or cellular networks, relying instead on radio-frequency pathways.
Officials noted the transmissions could be intended to activate or give operational instructions to sleeper assets that are operating outside the originating country. At the same time, the alert emphasizes that its authors cannot yet determine the precise contents of the intercepted communications.
The notice also pointed to the emergence of a previously unseen station exhibiting international rebroadcast characteristics. That development, the alert said, is the basis for recommending increased situational awareness among law enforcement and related agencies.
While the alert stops short of identifying an immediate operational threat to a specific location, it directs agencies to intensify monitoring of suspicious radio-frequency activity and related indicators. The guidance focuses on detection and awareness rather than signaling a confirmed, localized attack plan.
Given the current limits on content analysis, the alert underlines uncertainty about intent and contents while urging vigilance in tracking atypical signal patterns and rebroadcast behavior across borders.
Contextual note: The information in the alert is based on preliminary signals analysis communicated to law enforcement; authorities have not publicly released decrypted content or attributed operational orders to any identified individuals or groups.