Allied Intelligence — 2026-07-03

Israel Arrests Tajikistani Man With Russian Passport Accused of Spying for Iran During Wartime

BLUFIran's wartime use of third-country nationals recruited through social media job lures signals a scalable, low-cost espionage model that one arrest cannot dismantle.

Israeli Police, the Shin Bet security agency and the Defense Ministry announced on Thursday that prosecutors filed a declaration ahead of an indictment against Behrouz Sobirgon, a Tajikistani national holding a Russian passport, arrested last month on suspicion of spying for Iran following a joint investigation by the Defense Ministry's Malmab "Yamar" security unit and Shin Bet 123. According to the joint statement, Sobirgon had been in contact with an Iranian handler since January after an initial approach disguised as a job offer, and continued the contact after recognizing the Iranian connection, with most of his activity occurring during the 40-day Operation Roaring Lion that began February 28 23. Authorities said his alleged tasks included documenting and transmitting locations of Iranian missile impact sites, sending coordinates for Tel Aviv's Azrieli Towers, photographing the Port of Haifa, and attempting to photograph a sensitive security facility in northern Israel 1234. The Tel Aviv District Attorney's Office also said Sobirgon assisted in recruiting additional people for Iranian-directed missions and requested he remain in custody pending a "serious indictment" 3.

Analysis
Israel's disclosure fits a wartime pattern of Iranian recruitment via fabricated job offers exploiting vetting-resistant targets who kept contact after recognizing the approach as hostile. Tasking Sobirgon toward missile-impact-site mapping, Azrieli Towers coordinates, and Haifa Port photography indicates Tehran prioritized real-time battle-damage assessment and infrastructure targeting over long-term strategic collection during the 40-day exchange, and his alleged recruitment of further operatives points to a self-replicating network rather than a single-source channel, complicating Shin Bet's ability to shut it down with one arrest. Coverage from Ynetnews, Israel National News and JNS reads as near-identical convergence on a single official release rather than independent confirmation. The joint statement's detailed, publicity-forward disclosure of targets and methods suggests Israeli security services are using the case for deterrent messaging as much as prosecutorial notice.

4 sources

Tajik national arrested in Israel for allegedly spying for Iran during war - Ynetnews
Foreign citizen arrested on suspicion of spying for Iran - Israel National News
Tajikistani man arrested in Israel on suspicion of spying for Iran - JNS
Israel Arrests Another Man Who Spied For Iran, This Time From Tajikistan - South Front