Adversary Intelligence — 2026-07-14

Germany Investigates Suspected Iranian Intelligence Activities and Attack Planning After Tehran Publishes Retaliation List Targeting European Leaders

BLUFPre-existing Iranian proxy infrastructure inside Europe narrows the gap between the Hamshahri list's rhetorical signaling and operational capability against named leaders more than Berlin's measured posture acknowledges.

German security authorities are examining leads on suspected reconnaissance and attack preparations tied to the Iran conflict, an Interior Ministry spokesperson told Handelsblatt on Tuesday 12. Federal agencies are coordinating with state authorities and international partners to assess the threat, and the ministry said the latest US-Iran escalation has not worsened Germany's already elevated security posture 12. The review follows publication of an Iranian "retaliation list." Tehran municipality-affiliated newspaper Hamshahri published an image on Saturday depicting 13 world leaders, including Chancellor Friedrich Merz, in prison uniforms under crosshairs with the caption "Revenge is certain," also naming Giorgia Meloni, Emmanuel Macron and Keir Starmer alongside US and Israeli officials 3. The BKA's protective measures for Merz are under continuous review and adjustment, and the ministry cited Iran's asymmetric tactics, including intelligence gathering and intimidation of exiled opponents through aligned groups such as Hezbollah, Hamas and the Houthis, as context for the threat picture 23.

Analysis
German authorities are reading the Hamshahri target list as confirmation of an already-elevated threat baseline, not a trigger for escalation, folding the reconnaissance and attack-planning leads into existing protective reviews around Merz rather than new emergency measures. Framing the threat through established Hezbollah, Hamas, and Houthi-linked intimidation and surveillance networks signals Berlin sees continuity of a known Iranian collection and coercion apparatus inside Europe rather than a new capability, keeping the BKA's response within routine protective-detail adjustment despite the list personalizing the threat against a sitting chancellor. The assessment rests on a single sourcing chain, Handelsblatt's Interior Ministry interview relayed secondhand by dts and Shabtab, without independent corroboration. The ministry's posture may equally reflect standard precautionary protocol activated by any public threat list rather than possession of specific actionable intelligence on an active plot.

3 sources

Irankrieg: Behörden prüfen Hinweise auf mögliche iranische Anschläge - Handelsblatt
Sicherheitsbehörden prüfen Hinweise auf iranische Anschläge - dts Nachrichtenagentur
Germany investigates suspected Iran-linked spying and attack plans - Shabtab News