What happened

According to ABC News, U.S. intelligence intercepted a series of encrypted signals that arrived shortly after the assassination of Iran’s Supreme Leader Ali Khamenei on February 28. The federal government advisory describes a preliminary analysis of signals "likely of Iranian origin" that may have been intended to activate sleeper agents outside the country of origin.

"Although the exact content of these signals cannot be determined at this time, the sudden appearance of a new station with characteristics of international relay requires increased vigilance"

— Federal government advisory, quoted by ABC News

According to the bulletin to law enforcement, the messages were coded and intended for secret recipients with encryption keys — that is, a mechanism for transmitting instructions without using the internet or mobile communications. The document stresses that no specific location of the threat has been identified so far, but advises increasing monitoring of suspicious radio-frequency activity.

Context and sources — why this interpretation is credible

The information is based on intelligence and an official advisory cited by ABC News. Other reputable outlets have also reported on the intelligence: for example, The New York Times previously wrote about the possibility that Tehran could instruct its proxy networks to act in Europe and the Middle East in response to strikes by the U.S. and Israel. Separate reports from Azerbaijan about allegedly planned terrorist attacks add to the picture of heightened risks in the region.

Why this matters for Ukraine and the Ukrainian diaspora

The framing of this report is not about sensationalism but about practical security. If the signals were indeed intended to activate agents, it means the adversary is using a multichannel influence network and may resort to asymmetric strikes: from sabotage of infrastructure to attacks on diplomatic or public targets.

For Ukraine this has several implications: first, the risks affect citizens abroad, volunteer networks, and logistical chains; second, critical infrastructure and energy facilities in partner countries could become targets, indirectly affecting our security; third, the need for strengthened coordination with allies — in intelligence and law enforcement — increases.

Recommendations from intelligence services and practical steps

The advisory contains simple but concrete instructions: increase radio-frequency monitoring, practice information-sharing mechanisms between local law enforcement and international partners, and raise vigilance in communities and at critical infrastructure. It is important to emphasize: this is not a call to panic, but to an organized response.

"Although there is no operational threat linked to a specific location, law enforcement agencies have been ordered to increase monitoring of suspicious radio-frequency activity"

— Federal government advisory, quoted by ABC News

What’s next

If the advisory is confirmed, it will validate fears expressed after the U.S. and Israeli strikes: networks deployed abroad could be used in retaliation. It is now important that the advisory be turned into concrete countermeasures: from operational monitoring to protection of critical sites and coordination with our partners.

A question for readers and responsible agencies: are we prepared to quickly turn informational signals into practical actions to protect people and critical infrastructure?