Restructuring in IRGC Intelligence

Left: IRGC-IO Deputy Commander Hassan Mohaghegh, and IRGC-IO Commander Hossein Taeb.
Left: IRGC-IO Deputy Commander Hassan Mohaghegh, and IRGC-IO Commander Hossein Taeb.
TT

Restructuring in IRGC Intelligence

Left: IRGC-IO Deputy Commander Hassan Mohaghegh, and IRGC-IO Commander Hossein Taeb.
Left: IRGC-IO Deputy Commander Hassan Mohaghegh, and IRGC-IO Commander Hossein Taeb.

Last month, the Islamic Republic of Iran made a new appointment in the Islamic Revolutionary Guard Corps Intelligence Organization (IRGC-IO), expanding the scope of its operations abroad focused on the US in order to fight a "total intelligence war."

The IRGC has furthermore signaled the merging of the IRGC Strategic Intelligence Directorate (IRGC-SID) into IRGC-IO as a component of this expanded mission.

On 18 May, Iranian state media announced that IRGC-IO chief Hossein Taeb will retain his post, and that his new deputy is Hasan Mohaghegh, who was previously the IRGC-SID chief. Outgoing deputy commander Hossein Nejat was demoted to the IRGC Social and Cultural Deputy.

Since 1979, IRGC intelligence has undergone a series of changes, gaining strength at the expense of the Intelligence Ministry (MOIS). After the ascendance of Islamic Republic founder Ayatollah Ruhollah Khomeini, the IRGC Intelligence and Investigation Unit was primarily in charge of intelligence activities. In 1980, Iraq invaded.

The IRGC expanded its military intelligence operations. In 1983, the internal security units of IRGC intelligence formed MOIS, which also took charge of foreign operations, and the IRGC's intelligence unit became known as the Intelligence Directorate. MOIS played a major role, often in cooperation with Hezbollah and the IRGC, in a string of some 60 assassinations abroad in the 1980's and the 1990's.

Following the war, around 1990, Tehran established the Qods Force as the IRGC's external operations branch primarily functioning as an unconventional warfare unit and forging ties with militants abroad. Its personnel included veterans of the Intelligence Directorate and Ramezan Base, a hub for orchestrating special operations behind enemy lines during the war and supporting insurgents against Iraq.

After the election of Reformist president Mohammad Khatami and the exposure of the infamous chain murders of intellectuals and dissidents in 1999, Supreme Leader Ayatollah Ali Khamenei, mistrusting MOIS, upgraded the IRGC directorate into a parallel intelligence agency. In 2005 or 2006, IRGC-SID was established out of the IRGC's Strategic Center. Following the 2009 post-election protests, officials criticized MOIS for its perceived failure to prevent protests, and spoke about divisions in the ministry. Intelligence officers were purged. The Islamic Republic promoted the IRGC Intelligence Directorate into an organization, expanding its budget and scope of activities. IRGC-IO has primarily focused on counter intelligence and internal security.

The Qods Force reportedly gained more prominence at the expense of MOIS, as well. In reaction to US and Israeli sabotage of the nuclear program in the early 2010's, the force launched its own international operations group, Unit 400. Alongside Hezbollah's resuscitated Islamic Jihad Organization, Unit 400 had a low success rate in a string of attempted attacks against American and Israeli targets in the early 2010's.

IRGC chief commander Hossein Salami has indicated an expansion of the IRGC-IO's mission, with a special focus on the US. During the inauguration ceremonies of the IRGC chief and his deputy commander, Salami said that IRGC-IO will expand its intelligence activities abroad, and that the organization's field of operation "is the entire system, [Islamic] revolution and geography of threat against Iran."

He added that "we are in a total intelligence war against America today, and this environment is a mix of psychological operations, cyber operations, military movements, public diplomacy and spreading fear." Salami also said that the IRGC must not "for a moment forego the analysis of America's strategies and behavior."

Salami also defined the bar of success: "we can defeat the enemy in the intelligence war; if we can neutralize the enemy's will to use power, this means neutralizing the enemy."

The merging of SID into IRGC-IO has several implications. IRGC-linked media have reported that the merging was another act concurrent with the appointment of Mohagegh as deputy commander of IRGC-IO. The merging likely happened to reduce competition and better organize the IRGC's intelligence units in its new mission. Some friction, however, is not hard to imagine as Mohaghegh brings his people on board in IRGC-IO.

There isn't much information available in open source about the SID, though a pro-IRGC commentary connected the directorate's activities to Salami's statement about the complex, multi-faceted environment facing the IRGC. This suggests that the directorate's mission has involved the generally understood definition of strategic intelligence, which is identifying national-level threats, above operational and tactical levels.
IRGC-IO may be more focused in its approach and be tasked with more critical intelligence missions as it expands its portfolio abroad. The organization may have a greater say in orchestrating such activities in the IRGC aimed at the US. Due to the IRGC's dominance of the Islamic Republic's security and military decision-making, IRGC-IO will likely play a more central role in supporting Tehran's policies abroad.

Threat perception of the US is driving the latest changes in IRGC-IO. In 2017, US media reported that the Central Intelligence Agency established the Iran Mission Center to pool the agencies resources against the Islamic Republic. Salami was very clear that the IRGC considers itself in "a total intelligence war" against the US, which suggests that the IRGC is feeling the pressure.

The IRGC-IO restructuring also follows the US designation of the IRGC as a Foreign Terrorist Organization (FTO). That was probably the reason behind Salami replacing Mohammad Ali Jafari, since Jafari made threats against the US - such as threatening that the US would have to abandon its bases within 1,000-kilometer range of Iran - that put Tehran in a precarious position of a direct fight against the US if it would have backed up the threat.

IRGC-IO's missions abroad would overlap the most with MOIS. This can create overlap of responsibilities and rivalry, particularly since the Islamic Republic has been an adversary of the US since 1979. This and previous instances of sharp-elbowed rivalries may have been the reason why, in May, Salami chaired a meeting between MOIS and IRGC-IO. He said that the two are the "eyes" of the system and "compliment" each other. The dynamic between the two organizations abroad will likely be a mix of cooperation and competition, with preferential treatment for IRGC-IO.

MOIS has been involved in several failed plots recently, which may have also influenced the decision to boost IRGC-IO. In 2018, authorities arrested or expelled MOIS agents for plots or espionage in Albania, Denmark, and France. The most high profile of these was the plot to bomb an opposition rally in Paris. Netherlands also expelled two Iranian diplomats after concluding that Iran in 2015 hired two criminals to assassinate an individual suspected of being behind the major 1981 Prime Minister's office. Authorities, however, have not said which agency hired the two.

The outsourcing and subsequent arrests highlight atrophied capabilities particularly compared to some 60 assassinations abroad in the 1980' and 1990's, often using Hezbollah operatives as gunmen or logisticians.

IRGC-IO may work alongside the Qods Force to the extent that missions are related to each other, particularly with regards to US targets, though competition may also arise. It is worth nothing that in addition to the Qods Force's failures in the early 2010's, authorities have arrested suspected operatives in Germany, and have busted a cell in the Central African Republic. It is unclear whether IRGC-IO will rely primarily on the Quds Force for operations, or develop its own operations division.

The expansion of IRGC-IO's mission highlighted the IRGC's dominance in the Islamic Republic's intelligence community. The effort also reflects a reinvigorate effort to expand an asymmetric intelligence campaign against the US, the goal of which is to deter the US from using its power.



North Korea’s Kim Marks Completion of Pyongyang Housing Project as Key Party Congress Nears 

This picture taken on February 16, 2026 and released by North Korea's official Korean Central News Agency (KCNA) on February 17, 2026 shows North Korean leader Kim Jong Un (C) and his daughter Ju Ae (center L) attending the inauguration ceremony of 10,000 flats of the fourth stage in Hwasong Area of Pyongyang. (KCNA via KNS / AFP)
This picture taken on February 16, 2026 and released by North Korea's official Korean Central News Agency (KCNA) on February 17, 2026 shows North Korean leader Kim Jong Un (C) and his daughter Ju Ae (center L) attending the inauguration ceremony of 10,000 flats of the fourth stage in Hwasong Area of Pyongyang. (KCNA via KNS / AFP)
TT

North Korea’s Kim Marks Completion of Pyongyang Housing Project as Key Party Congress Nears 

This picture taken on February 16, 2026 and released by North Korea's official Korean Central News Agency (KCNA) on February 17, 2026 shows North Korean leader Kim Jong Un (C) and his daughter Ju Ae (center L) attending the inauguration ceremony of 10,000 flats of the fourth stage in Hwasong Area of Pyongyang. (KCNA via KNS / AFP)
This picture taken on February 16, 2026 and released by North Korea's official Korean Central News Agency (KCNA) on February 17, 2026 shows North Korean leader Kim Jong Un (C) and his daughter Ju Ae (center L) attending the inauguration ceremony of 10,000 flats of the fourth stage in Hwasong Area of Pyongyang. (KCNA via KNS / AFP)

North Korean leader Kim Jong Un marked the completion of 10,000 new houses built in Pyongyang, state media KCNA said on Tuesday, as the country prepares to hold a key party congress.

Kim has been touring construction sites and touting project progress ahead of this month's Ninth Congress of the ruling Workers' Party, the country's biggest political gathering that reviews performance, sets ‌new policy ‌goals and can bring leadership change.

On Monday, ‌Kim ⁠oversaw the completion ⁠ceremony for 10,000 houses in Hwasong District, Pyongyang, which achieved the goal of 50,000 new houses in the metropolitan area set during the Eighth Congress five years ago, according to state broadcaster KCNA.

This picture taken on February 16, 2026 and released by North Korea's official Korean Central News Agency (KCNA) on February 17, 2026 shows North Korean leader Kim Jong Un (center R) and his daughter Ju Ae (center L) attending the inauguration ceremony of 10,000 flats of the fourth stage in Hwasong Area of Pyongyang. (KCNA via KNS / AFP)

"Based on the transformational achievements... during the Eighth period, the Ninth Congress ⁠of the party will set a grander ‌goal of restoration and ‌creation," Kim said, according to KCNA.

Kim's daughter Ju Ae was ‌shown at her father's side at the completion ceremony, ‌hugging and congratulating the residents of the new estate. There has been increasing speculation among analysts and from South Korea's spy agency that Kim is grooming the teenager to ‌succeed him.

As part of their tour of the housing project, North Korean state TV ⁠showed Kim ⁠and Ju Ae also visiting an arcade game center that looked similar to an internet cafe, a musical instrument shop and an animal hospital where they petted a puppy.

Meanwhile, KCNA said those participating in the upcoming party congress arrived in Pyongyang on Monday.

In the past two instances in 2016 and 2021, the Congress began three to four days after representatives arrived in Pyongyang, according to Hong Min, an analyst at the Korea Institute for National Unification in Seoul.


At Least 14 Killed in Spate of Attacks in Northwest Pakistan

A spate of attacks in northwest Pakistan on Monday killed at least three civilians and 11 security personnel. Karim ULLAH / AFP
A spate of attacks in northwest Pakistan on Monday killed at least three civilians and 11 security personnel. Karim ULLAH / AFP
TT

At Least 14 Killed in Spate of Attacks in Northwest Pakistan

A spate of attacks in northwest Pakistan on Monday killed at least three civilians and 11 security personnel. Karim ULLAH / AFP
A spate of attacks in northwest Pakistan on Monday killed at least three civilians and 11 security personnel. Karim ULLAH / AFP

Two bomb attacks and a gunfight between police and militants in northwest Pakistan killed at least 11 security personnel and three civilians, including a child, a security official said.

The separate incidents on Monday in Khyber Pakhtunkhwa province, which left at least 25 others wounded, come as Pakistan's security forces battle intensifying insurgencies in southern and northern provinces that border Afghanistan.

This month the ISIS group claimed responsibility for a massive suicide blast at a mosque in the capital Islamabad that killed at least 31 people, with 169 more wounded.

Speaking on condition of anonymity, the security official told AFP that on Monday evening a suicide bomber rammed an explosives-laden vehicle into the wall of a religious college in the tribal district of Bajaur in Khyber Pakhtunkhwa.

"As a result, eight police and Frontier Corps personnel present inside the seminary were martyred and 10 others injured," he said.

"The blast also caused the roofs of several nearby houses to collapse, killing a child."

He added the death told may rise.

In another attack in the town of Bannu, a bomb planted in a rickshaw exploded at the Miryan police station, killing two civilians and wounding 17 others, the official said.

- Chinese targeted -

Elsewhere, three police personnel and three militants were also killed during a search operation in Shangla district.

The Khyber Pakhtunkhwa police force said in a statement, also late on Monday, that the three militants who died in the firefight had been involved in "attacks targeting Chinese nationals".

Beijing has poured billions of dollars into Pakistan in recent years, but Chinese-funded projects have sparked resentment and their citizens have frequently come under attack.

In March last year, five Chinese nationals working on a major dam construction site were killed along with their driver when a suicide bomber targeted their vehicle, which plunged into a deep ravine off the mountainous Karakoram Highway.

Beijing is Islamabad's closest regional ally, readily providing financial assistance to bail out its often struggling neighbor.

The China-Pakistan Economic Corridor (CPEC) has seen tens of billions of dollars funneled into massive transport, energy and infrastructure projects -- part of Beijing's transnational "Belt and Road" scheme.

The police statement said "due to the area's proximity to the Silk Road route, (the militants) posed a persistent threat to the strategic road corridor and Chinese development projects."

"In light of this, the Counter Terrorism Department (CTD) and the district police launched a joint operation today under a coordinated strategy."


India Seizes Three Iran-linked US-sanctioned Tankers

This photo posted on the X account of the US Department of Defense on February 15, 2026 shows what the Department of Defense says are US military forces preparing to interdict and board an oil tanker, the Veronica III, in the Indian Ocean. (Photo by Handout / US Department of Defense / AFP)
This photo posted on the X account of the US Department of Defense on February 15, 2026 shows what the Department of Defense says are US military forces preparing to interdict and board an oil tanker, the Veronica III, in the Indian Ocean. (Photo by Handout / US Department of Defense / AFP)
TT

India Seizes Three Iran-linked US-sanctioned Tankers

This photo posted on the X account of the US Department of Defense on February 15, 2026 shows what the Department of Defense says are US military forces preparing to interdict and board an oil tanker, the Veronica III, in the Indian Ocean. (Photo by Handout / US Department of Defense / AFP)
This photo posted on the X account of the US Department of Defense on February 15, 2026 shows what the Department of Defense says are US military forces preparing to interdict and board an oil tanker, the Veronica III, in the Indian Ocean. (Photo by Handout / US Department of Defense / AFP)

India has seized three US-sanctioned oil tankers linked to Iran this month and stepped up surveillance in its maritime zone to curb illicit trade, a source said on Monday, confirming a post on X by Indian authorities earlier in February that had been deleted.

India aims to prevent its waters from being used for ship-to-ship transfers that obscure the origin of oil cargoes, the source with direct knowledge of the matter told ‌Reuters.

The seizures and ‌heightened surveillance follow an improvement in US-India relations. Washington ‌earlier ⁠this month announced it ⁠will cut import tariffs on Indian goods to 18% from 50%, after New Delhi agreed to stop Russian oil imports.

The three sanctioned vessels - Stellar Ruby, Asphalt Star and Al Jafzia - frequently changed their identities to evade law enforcement by coastal states, the source said, adding that their owners were based overseas.

VESSELS SEIZED OFFSHORE MUMBAI

Iranian state media cited the National Iranian Oil Company as ⁠saying that the three tankers seized by India ‌had no connection to the company. It ‌said that neither the cargoes nor the vessels were linked to the company.

Indian authorities ‌had said in a post on X on February 6 that ‌they intercepted three vessels about 100 nautical miles west of Mumbai after detecting suspicious activity involving a tanker in India's exclusive economic zone.

The post was later deleted, but the source confirmed that the vessels had been escorted to Mumbai for ‌further investigation.

The Indian Coast Guard has since deployed about 55 ships and between 10 and 12 aircraft for round-the-clock ⁠surveillance in its ⁠maritime zones, according to the source.

The US Office of Foreign Assets Control said last year it had sanctioned three vessels, called Global Peace, Chil 1, and Glory Star 1, with IMO numbers identical to the ships lately captured by India.

Two of the three tankers are linked to Iran, with Al Jafzia having carried fuel oil from Iran to Djibouti in 2025 and Stellar Ruby flagged in Iran, according to LSEG data.

The Asphalt Star mostly operated on voyages around China, the data show.

Sanctioned oil and fuel are often sold at deep discounts due to the risks involved, with intermediaries moving cargo through complex ownership structures, false documentation and mid-sea transfers that complicate enforcement.