Iran's Threats on US soil - Sleeper Cells, Lone Wolves, Cyberattacks and Mysterious Numbers Code

U.S. Counterterrorism Officials Issue Heightened Alert Over Potential Iranian Retaliation on American Soil

Los Angeles, March 10, 2026 — Amid escalating U.S. and Israeli military strikes on Iran, federal authorities are warning law enforcement agencies nationwide of possible retaliatory actions on American soil, including activation of sleeper cells, lone wolf attacks inspired by Iranian rhetoric, disruptive cyberattacks, and mysterious encoded radio broadcasts interpreted as potential operational signals.

The alerts follow the February 28 killing of Iran's Supreme Leader Ayatollah Ali Khamenei during joint U.S.-Israeli operations, which have left the Iranian regime severely weakened and increasingly desperate. Counterterrorism officials describe the theocracy as cornered, raising concerns that it could turn to asymmetric threats inside the United States rather than conventional military responses.

A key element drawing alarm is the detection of cryptic shortwave radio transmissions originating from Iran shortly after Khamenei's death. These broadcasts begin with the Persian word "Tavajjoh!" (meaning "attention") repeated urgently, followed by an eerie male voice reciting long strings of seemingly random numbers. Intelligence analysts believe these sequences may serve as encrypted "numbers stations" — a classic espionage method used to deliver one-time-pad instructions to operatives or sleeper assets. Federal memos shared with local police describe at least one recent broadcast as a possible "operational trigger" for dormant Iranian-linked elements embedded in the U.S., though investigators have uncovered no specific, credible plot to date.

Sleeper cells — long-term operatives or proxy networks placed years in advance for activation during major conflict — remain a persistent concern for U.S. agencies. Historical precedents include foiled Iranian-backed assassination attempts on American officials and dissidents since 2020. Experts note that while large-scale coordinated attacks by such cells are considered unlikely in the near term, the regime's proxies (including Hezbollah affiliates) could be mobilized.

Lone wolf sympathizers pose a more immediate and unpredictable risk, according to Los Angeles police and other departments. In Southern California, home to the largest Iranian-American population outside Iran (approximately 700,000), officials are particularly vigilant about individuals radicalized online or inspired by Tehran's calls for vengeance. "Lone wolves in our experience have been our concern," one law enforcement source told reporters, emphasizing the difficulty of detecting self-radicalized actors.

Cyber threats form another pillar of the warnings. Iranian government-affiliated hackers and aligned hacktivist groups have a track record of low-level disruptive operations, including website defacements, distributed denial-of-service attacks, and targeting poorly secured networks. Amid the ongoing conflict — dubbed Operation Epic Fury by the U.S. — experts anticipate an uptick in such activity against American infrastructure, businesses, and government entities, even as Iran's own internet connectivity remains severely degraded.

No imminent large-scale physical attack has been confirmed, and the Department of Homeland Security stresses that vigilance, rather than panic, is the appropriate response. Local police have been urged to monitor soft targets, report suspicious activity, and coordinate with federal fusion centers.

As the conflict enters its second week, the specter of these multifaceted threats underscores the challenge of containing a war that began overseas but could reverberate deeply within U.S. borders. Counterterrorism officials continue to monitor developments closely, with heightened alerts expected to remain in place as long as military operations persist.

17GEN4.com