Israel’s long penetration war pays off

Its killing of Iran's Supreme Leader shows how patient recruitment and mapping created an opportunity for a decisive blow

AFP/Reuters/Axel Rangel Garcia

Israel’s long penetration war pays off

On the morning of 28 February 2026, as senior Iranian officials convened for a Saturday security meeting in the heart of Tehran, they had no idea missiles were already inbound—and those who might have warned them couldn’t get through. Within minutes of the first explosions, 30 missiles slammed into the Pasteur Street compound of Supreme Leader Ali Khamenei.

According to details revealed by the Financial Times, cellular towers in the surrounding blocks had been selectively disabled, cutting security personnel off from warning calls. Nearly every traffic camera in Tehran was already feeding encrypted footage to servers in Tel Aviv. And somewhere in Washington, Donald Trump was aboard Air Force One, having given the order ten hours earlier.

Israeli sources suggest that in just five minutes (between 8:10 am and 8:15 am), no less than 40 top Iranian officials were killed. The main leg of the attack targeted a large complex used by Supreme Leader Khamenei on Pasteur Street, a highly secured area of Tehran. Amidst renewed negotiations, Iranian officials were beginning their week (starting Saturday in Iran) with a morning meeting at the leader’s residence. Just minutes before the strike, both Israel and the US had confirmed that all of the high-value targets were indeed heading to the meeting.

Following the decapitation, the second wave of fighter jets attacked the self-produced Iranian air defences from afar, creating a corridor for the third wave. The US and Israel coordinated tasks, with Israel focusing on western Iran and the US on the east, supported by American fueling tankers. The third wave, comprising 200 planes, targeted hundreds of pre-planned sites, primarily ballistic missile storage silos, production facilities, and launchers

The joint Israeli-American strike on Iran (codenamed Operation Roaring Lion by Israel and Operation Epic Fury by the Pentagon) was the most audacious military opening in 21st-century warfare. But the real story isn't the missiles or the bombers. It's what the strike revealed about how deeply Israel had penetrated the Iranian regime, and what that penetration tells us about the future of intelligence-driven warfare.

US Air Force / REUTERS
A US Air Force B-2 Spirit stealth bomber at Whiteman Air Force Base, Missouri, US, in June 2025.

Calculated subversion

The decision to attack in the morning was itself a calculated subversion. Every previous Israeli strike on Iran had come at night. Attacking on a Saturday when senior officials would be at their offices rather than in dispersed safe houses inverted Tehran's entire defensive playbook.

The Israeli Air Force launched approximately 200 fighter jets in what it codenamed Operation Genesis, the largest combat sortie in Israeli history. Nearly the entire fleet of advanced fighter jets was mobilised, with the deployment made possible by at least 9 US refuelling aircraft that enabled sustained operations against Iran. Within the first 24 hours, over 1,200 bombs were dropped on 500 targets across western and central Iran, including air defences, missile launchers, and command centres. Launchers and bases primed for a retaliatory strike were hit, including a main site in the western Iranian city of Tabriz.

The US contributed B-2 stealth bombers striking hardened ballistic missile sites, Tomahawk cruise missiles launched from warships, HIMARS ground launchers, and, for the first time in combat, low-cost one-way attack drones from the newly formed Task Force Scorpion Strike.

Israel also debuted the Black Sparrow air-launched ballistic missile, fired from F-15 fighters. Debris consistent with Sparrow-series boosters was later found in western Iraq along the missile's projected flight path, confirming what defence analysts had long suspected: Israel had quietly converted its missile-defence testing platforms into operational strike weapons.

Reuters
An Israeli Air Force F-15 Eagle is pictured at an air base in this handout image released on 14 April 2024.

Previous versions of the missile (Blue Sparrow) had already been extensively used by Israel during past rounds of fighting with Iran, both in 2024 and 2025. Those weapons offer the safety of distance, allowing a first shot from further away before closing in to hit targets without entering Iranian airspace.

But the kinetic firepower was only the visible layer. A key enabler of Israel’s success was Iran’s own preconceptions, especially the belief that any major strike would come at night. That expectation was rational: advanced militaries tend to “own the night,” using sensors and precision-guided munitions to fight in darkness, while a less-sophisticated defender loses awareness. Night operations also reduce civilian traffic, make mobile military assets easier to track, and often pin senior figures to predictable locations.

Israel and the United States flipped that script. A daylight strike was more dislocating because it violated Iran’s timing assumptions and increased the chance of surprise. And the sheer scale of forces available (Israel’s air power alongside Trump’s “armada’) gave the allies more operational flexibility, letting them manoeuvre aggressively and accept risks they might otherwise avoid.

Years in the making

The assassination of Supreme Leader Ali Khamenei was years in the making. According to a Financial Times investigation, Israeli intelligence had hacked nearly all of Tehran's traffic cameras years before the strike.

The cameras, originally deployed as part of Iran's own surveillance apparatus to track dissidents, were turned against the regime. Tehran has a very dense network of cameras flowing directly into a key regional headquarters that fuses different streams of data to track down individuals—from women not wearing hijab to protesters.

ATTA KENARE / AFP
A closed-circuit television (CCTV) camera is pictured in a street in Tehran on 10 April 2023.

In recent years, the Islamic Republic has doubled down on this investment, turning to China to expand it, including through an ambitious “smart city” programme aimed at deploying 15,000 AI-powered cameras. Unwittingly, by doing so, the regime expanded Israel’s intelligence picture, even when the internet was shut down.

One camera, angled just right, showed where members of Khamenei's security detail parked their cars. Through this footage, Mossad built detailed profiles of each bodyguard (home addresses, work schedules, protection assignments) and used artificial intelligence to analyse vast datasets about the Supreme Leader's daily patterns.

A key enabler of Israel's success was Iran's belief that any major strike would come at night

Initially, Israel tracked bodyguards' cell phones to locate VIPs, but this method was compromised after the June war last year, forcing Israeli intelligence to go back to the drawing board—which it did. Israel tracked one simple pattern: which bodyguard typically accompanied which VIP. That routine turned a security measure into an access point—one that could, and was, used against the Islamic Republic.

Unit 8200

The bulk of this endeavour was carried out by Israel's vaunted Unit 8200, the Israeli equivalent of the NSA. The unit has been at the forefront of Israel's vast intelligence war against Iran, with the role of maintaining a "live" overview of key targets that could (or have) been marked for elimination. Unit 8200 has also been one of the early adopters of AI, even before Chat GPT made it famous, using machine learning to sift through the kind of data it would have had access to through cameras and cell phones. By doing so, the unit provides Israel with a "predictive" map that can be used to specifically identify windows of opportunity —the kind that opened on Saturday.

REUTERS/Dado Ruvic
The Mossad logo is seen in this illustration taken on 6 May 2025.

Israel's Unit 8200 had also deeply penetrated Tehran's mobile phone networks. On the morning of the strike, cellular service on Pasteur Street was selectively manipulated: phones didn't go dead, but returned busy signals when called, preventing anyone from warning Khamenei's team that missiles were inbound.

Twelve cellular antennas were penetrated, giving Israel temporary control of communications. Through continued collection, the unit can also check for specific patterns that signal certain events—such as a high-level meeting preceded by a set of phone calls between specific officials—building a social network map of different nodes and how they interact on a daily basis.

This map also serves to potentially track and disrupt the Iranian response to such a major event, with the aim of monitoring follow-up targets, creating panic and uncertainty, and blunting the Islamic Republic's ability to respond both against Israel and by protecting its VIPs. The US later exploited the intelligence picture provided by years of Israeli penetration to launch its own cyber attacks, in an effort to amplify the initial impact of the attack on Iran's chain of command.

Critical CIA role

The CIA added a critical final piece. A human intelligence source confirmed that Khamenei would be at the compound that morning and who would be joining him. When Israeli sensors detected the scheduled meeting proceeding as expected, the strike was moved forward.

ATTA KENARE / AFP
Motorists drive along an expressway as plumes of smoke rise after a strike in Tehran on 5 March 2026.

The CIA's involvement also helped validate the attack: a second, sovereign stream of confirmation that reduces the risk of a catastrophic miss and makes it easier to commit to an irreversible escalation. Not all assassination attempts are successful, as Israel discovered in Doha last year, and starting the war with a miss may well have galvanised the Islamic Republic. The Israeli doctrine requires that at least two separate intelligence officers (from different fields of collection) confirm a person's location before an attack can be considered. Cross-national operations require further confirmation, which the CIA source provided promptly.

Thirty missiles hit the compound. Khamenei's body was found in the rubble. Defence Minister Aziz Nasirzadeh, IRGC Commander Mohammad Pakpour, Armed Forces Chief of Staff Abdolrahim Mousavi, and former SNSC secretary Ali Shamkhani were also killed in the first wave.

In addition to Khamenei's compound, Israel appears to have launched even broader attacks targeting Khamenei's son, Mojtaba, as well as former President Mahmoud Ahmadinejad. In doing so, Israel and the US were likely trying to eliminate potential successors (as Mojtaba is now predicted by some sources to replace his father), and outsiders who could help reorganise the regime in a more unpredictable way.

Early reports claimed Khamenei was not at the leadership compound. Later confirmation suggested the opposite: he was in the most predictable place he could be.

KHAMENEI.IR / AFP
Iran's Supreme Leader Ayatollah Ali Khamenei addressing a crowd in Tehran on 17 January 2026.

Death wish?

Iranian media and sympathetic commentators have tried to turn that exposure into a virtue. They framed Khamenei's public calm and his apparent disregard for extra precautions as proof that the Supreme Leader did not prioritise his own survival. The message is that the Islamic Republic is resilient, able to endure even if Khamenei dies.

There is a kernel of truth here: his death, even from natural causes, would not be a complete shock, given his age and recurring health concerns. Succession has been debated for years inside the system. But that does not mean those internal struggles are resolved, or that Khamenei was simply "waiting for death."

At the tactical level, the obvious question is why he wasn't in one of the bunkers where he has reportedly spent increasing amounts of time. Yet the last major Israeli decapitation strike, the opening move in last year's 12-day war, targeted a bunker as well. Living in bunkers and dying in one may have felt like a trap rather than a form of protection; Khamenei may have chosen to take his chances above ground.

A related puzzle is Tehran's insistence on in-person meetings. That too has a rationale: Israel's penetration of Iranian (and broader "Axis of Resistance") communications makes remote coordination vulnerable, pushing leaders toward physical contact even when it increases personal risk.

Majid Asgaripour / REUTERS
Iranian missiles are displayed at the Islamic Revolutionary Guard Corps (IRGC) Aerospace Force Museum in Tehran, Iran, on 12 November 2025.

Iran's immediate response was decent. Redundant command pathways enabled quick missile launches after the strike, and that worked in the narrow sense of speed. But attempts to fire large, synchronised barrages of 30–50 missiles repeatedly fell short because many launchers were damaged by Israeli unmanned "hunter" drones operating over Iranian territory. The initial decapitation strike was followed by hours of ballistic-missile hunting, enabled in part by refuelers positioned close enough to sustain persistent air operations.

The larger point is that repeated Israeli successes are not the product of a single intelligence coup. They reflect an institutional penetration campaign built over decades. Since the early 2000s, Israel has treated the Islamic Republic as its central strategic problem and invested accordingly. This war looks, from the vantage point of Israel's intelligence services, like the culmination of long preparation: patient recruitment, mapping, and enabling operations designed to create an opportunity for a decisive blow against Iran's principal regional power base.

font change

Related Articles