Iranian Intelligence
The Iranian intelligence apparatus encompasses several state agencies, primarily the Ministry of Intelligence (MOIS) and the IRGC Intelligence Organization, tasked with domestic surveillance, regional subversion, and global espionage. In recent years, these agencies have intensified efforts to recruit Israeli citizens and foreign nationals for sabotage, surveillance, and high-value intelligence gathering.
The Iranian intelligence community is a multi-layered structure characterized by competition between the Ministry of Intelligence and Security (MOIS) and the Intelligence Organization of the Islamic Revolutionary Guard Corps (IRGC-IO). While the MOIS is a formal government ministry, the IRGC-IO has grown in prominence, often taking the lead in aggressive overseas operations and counter-intelligence. For Israel, the primary threat from these entities involves the systematic attempt to penetrate Israeli society and security circles. Iranian operatives frequently utilize 'social engineering' on platforms like Telegram, Facebook, and WhatsApp, posing as recruiters or businesspeople to lure individuals into cooperation. These missions often begin with seemingly benign tasks—such as photographing locations for payment—before escalating to severe security offenses, including the surveillance of sensitive military sites and high-ranking officials. Recent cases in 2026 have highlighted a shift toward recruiting individuals for kinetic tasks and direct espionage, reflecting Tehran's broader strategy of 'internal erosion' alongside its direct military confrontations. The Shin Bet (ISA) and Israel Police have identified a recurring pattern where Iranian handlers target vulnerable individuals, using cryptocurrency to facilitate payments. Beyond Israel, these efforts include monitoring dissidents and conducting high-level operations abroad. Recent reports indicate that Iranian intelligence successfully tracked the exact hotel floor of President Trump during a NATO summit in Ankara, illustrating their capability to gather precise intelligence on high-value targets. This intelligence effort extends to monitoring infrastructure vulnerabilities and missile impact sites during active conflicts, such as Operation Roaring Lion, to improve the accuracy of future strikes.