Counterintelligence — 2026-10-28

UK Charges Two London Men Over Alleged Iran-Backed Plot Targeting US-Run RAF Fairford Base

BLUFIran's alleged operational reach into the UK homeland via paid proxies targeting a US bomber base marks a serious escalation in state-sponsored threat activity on allied soil.

The Crown Prosecution Service charged two London men, both 24, under the National Security Act on Tuesday: Mohmed Abdulkarim with conduct likely to materially assist a foreign intelligence service, and Nouman Essghir with approaching a prohibited place on August 22 for a purpose prejudicial to UK interests 123. Prosecutors told Westminster Magistrates' Court that a handler called "Ali" paid Abdulkarim about £70,000 and directed him to enlist five men to drive three vans of petrol to RAF Fairford on September 27, per JURIST and The National 14. One driver was told a van held a bomb and called 999; police found gasoline but no explosives, and the US later moved its B-1 bombers from the base 134. Counter-terrorism chief Laurence Taylor said police believe Abdulkarim was assisting Iran and consider Iranian state involvement highly likely, while Iran has rejected the accusations 12. Essghir was remanded and Abdulkarim bailed, with six other suspects remaining on police bail 14.

Analysis
Confidence is moderate: the four outlets converge on the charges and police statements, but they draw on the same CPS and counter-terrorism briefings rather than independent collection, and nothing is visible on the evidentiary threshold for the six suspects on bail. The handler "Ali" and any Iranian tasking chain sit outside UK jurisdiction, which limits chargeable defendants to the men in London. It is unlikely that any additional person is charged under the National Security Act in connection with the RAF Fairford plot between October 28 and December 31, 2026. Investigators may instead be holding the six for device analysis tying them to "Ali," which could produce a second charging wave before year-end. If that happens, UK and US officials would treat the plot as a wider proxy network and could add sanctions or force protection at shared bases. Otherwise, current posture and the Iran attribution process continue unchanged, with the November 20 Central Criminal Court appearance the next marker.

4 sources