FBI mobilizes as Iran's asymmetric threat reaches domestic front

With the U.S.-Iran war entering a volatile phase, the FBI is deploying expanded counterterrorism resources to monitor potential sleeper cells and cyber operations—but organizational tensions complicate the effort.

The FBI has raised counterterrorism teams nationwide to high alert as the conflict with Iran escalates beyond the Middle East. FBI Director Kash Patel instructed personnel to monitor foreign intelligence activity, terrorism, cyber operations, and transnational repression—methods Iran has historically used to strike targets at home without direct military engagement. Iran relies on proxy networks, cyber actors, and operatives embedded in the U.S. to wage what officials call an "asymmetric campaign," designed to blur the line between overseas conflict and domestic threat. The heightened vigilance comes amid concrete concerns. Intelligence officials have documented Iranian sleeper cell networks and pointed to historical precedent: a 2011 thwarted plot to assassinate the Saudi ambassador in Washington. Border data shows over 2,500 Iranian nationals arrested inside the U.S. since 2021, and analysts warn that Iran could mobilize known assets or sympathizers already positioned domestically. Beyond kinetic threats, Iran-affiliated hackers have compromised FBI Director Patel's personal email and launched intrusion campaigns against U.S. water infrastructure utilities across at least 12 states, though no contamination has been confirmed. The FBI has expanded its Joint Terrorism Task Force network to over 200 units nationwide and increased surveillance of priority suspects and technical intelligence collection. However, the effort faces a complicating factor: just days before the U.S. strikes began in late February, Patel fired a dozen agents and staff from CI-12, the elite FBI counterintelligence unit responsible for tracking foreign threats including Iran. The dismissals, reportedly ordered as retaliation for those agents' roles in the Mar-a-Lago classified documents investigation, have drawn criticism from lawmakers who argue the timing undermines domestic counterterrorism capacity during active conflict. Official statements emphasize deterrence over imminent threat. Patel and Homeland Security Secretary Kristi Noem maintain that no specific plots have been activated, and one intelligence source told CNN that no increased threats or activated sleeper agents have been confirmed since strikes began. Analysts stress that heightened monitoring is routine when U.S. military operations intersect with adversaries historically prone to indirect retaliation. But the convergence of documented Iranian operational networks, tactical precedent, resource disruptions, and asymmetric capabilities has pushed the threat calculus toward maximum vigilance as the September 11 anniversary approaches.

How could this affect you

Traced by who's actually in the path of this — not everyone is.

Likely

Americans in major U.S. cities and near military installations

Iranian proxies or sympathizers could conduct asymmetric attacks (lone-actor shootings, vehicle rammings, bombings) in response to U.S. strikes on Iran. The FBI's expansion of domestic monitoring and city police increases in patrols could reduce vulnerability but do not eliminate risk.

Likely

U.S. critical infrastructure operators (water, energy, communications)

Iranian cyber actors have already infiltrated water utilities and FBI networks. Escalating cyber operations targeting U.S. industrial control systems could disrupt services or damage infrastructure, though U.S. attribution and response capabilities constrain full-scale impact.

Possible

U.S. security apparatus and resource allocation

The firing of experienced counterintelligence agents tasked with Iran monitoring could slow investigations and delay threat identification during peak risk periods, potentially affecting response time if plots materialize. Partial Department of Homeland Security shutdown adds strain.

Off-Lens

Who is covering this — and who is not.

2 articles · 2 countries · via GDELT

🌐US

50%

🇮🇱Israel

50%

🌐washingtonexaminer.com 🇮🇱jpost.com

Perspectives not in sources

🇺🇸 United States🇮🇷 Iran

Chanakya's Move

Whose move this was, what they're betting on, what could counter it.

This is Iran's asymmetric play: avoid direct military competition the U.S. dominates, instead activate or inspire networks already embedded domestically to impose costs, deter further strikes, and demoralize. Iran bets that a coordinated campaign of cyber intrusions, proxy attacks, and intelligence operations will signal resolve and constrain U.S. escalation—without provoking nuclear-scale retaliation. The U.S. counter is maximum-alert domestic monitoring designed to disrupt plots before execution and deter would-be operatives by raising the cost of activation. The wildcard is organizational: if the FBI lacks institutional depth to conduct simultaneous counterintelligence and counterterrorism at scale, Iran's asymmetric strategy could find purchase. Patel's firing of Iran-focused agents suggests a hierarchy of loyalties within the Trump administration that may have deprioritized Iranian threats relative to other domestic political priorities—a vulnerability Iran will certainly exploit.