Coded signals after the strike

US intercepts encrypted Iranian broadcast after Khamenei killing, warns of sleeper cell activation across the West

Nordic Observer · March 15, 2026 at 00:25
  • Encrypted broadcasts were sent to multiple countries shortly after the US-Israeli strike that killed Khamenei on February 28
  • US authorities issued warnings to law enforcement to increase monitoring of suspicious radio frequencies
  • Former Norwegian intelligence chief Ola Kaldager says there is 'no doubt' Iranian sleeper agents are present in Norway
  • Experts assess Iran maintains espionage networks across both Europe and the United States

US federal authorities intercepted encrypted messages believed to originate from Iran and sent to multiple countries shortly after the joint US-Israeli strike that killed Supreme Leader Ayatollah Ali Khamenei on February 28, ABC News reports. The messages were intended for covert recipients who possess the knowledge to decode them. Authorities considered the intercept serious enough to issue a warning to law enforcement agencies nationwide, urging increased monitoring of suspicious broadcast frequencies.

The full content of the messages has not yet been deciphered, but the timing — days after the most consequential Western strike against the Iranian regime in decades — and the method of transmission raised immediate concerns that Tehran may be issuing operational orders to dormant networks abroad. Iranian intelligence has spent decades building exactly this kind of infrastructure. NRK reports that experts assess Iran maintains espionage networks in both Europe and the United States, staffed by operatives who live ordinary lives in their host countries until activated. Ola Kaldager, former head of Norway's intelligence service, told NRK there is "no doubt" that so-called sleeping agents are present in Norway. Their potential tasks upon activation range from assassination and sabotage to terrorism and the collection of sensitive information.

The Iranian sleeper network presents a particular challenge for Nordic security services. Unlike state-sponsored cyber operations or missile threats, dormant human operatives leave minimal signatures until the moment they act. They hold jobs, pay taxes, blend into communities — the ideal cover in high-trust Scandinavian societies where residents are not accustomed to suspecting their neighbors of working for a foreign intelligence service. Norway, with its energy infrastructure, NATO membership, and proximity to Arctic shipping routes, presents an attractive target set.

The broader question is what Tehran's chain of command looks like after Khamenei's death — and whether the encrypted broadcasts represent centralized orders from a surviving authority or fragmented cells acting on pre-programmed instructions. A regime that has lost its supreme leader but retains the ability to activate operatives across multiple Western countries simultaneously has, in a sense, already distributed its capacity for retaliation beyond the reach of any single military strike. The intercepted messages may or may not contain activation orders. The fact that Western intelligence cannot yet tell the difference is itself the problem.

Sources: RÚV, ABC News, NRK