For the first time, the Mossad, IDF and Shin Bet have pulled back the curtain on the secret IRGC unit that ran a years-long campaign to murder Israeli officials, bomb Jewish sites and hit strategic infrastructure across three continents. The picture they paint is of a machine that Israel has now systematically decapitated.

At the center of the network sat Rahman Moghaddam, who doubled as head of Division 4000, the Special Operations arm of the IRGC Intelligence Organization. Division 4000’s job was simple and sinister: run terror operations beyond Iran’s borders against Israeli and Western targets, and smuggle advanced weapons into Israel. Under its umbrella, operatives were recruited and trained in Iran and abroad to surveil senior Israeli politicians, members of the security establishment, Western military sites, ports and Israeli-flagged vessels around the world. Moghaddam answered to Majid Khademi, the overall IRGC intelligence chief. Both men are now dead. Moghaddam was taken out in the opening hours of Operation Roaring Lion, and Khademi was hunted down later in a precision strike in the heart of Tehran.

Below them worked Mohsen Souri, a senior operator in Division 4000 who flew from country to country meeting local terror cells and directing attacks on the ground. Mossad and Shin Bet tracked him to a fortified emergency hideout he was sharing with other IRGC personnel, and the Israeli Air Force leveled it. Another key figure, Mehdi Yekeh-Dehghan, code-named “the Doctor,” ran the Azerbaijan file. He first surfaced publicly after Turkish authorities rolled up a cell he was handling, one that had been smuggling explosive drones from Iran through Turkey into Cyprus while casing the US Air Force’s Incirlik base in Adana.

The most ambitious plot the agencies revealed unfolded in Azerbaijan. Operatives directed straight from Tehran were arrested by local security after they had already smuggled in explosive drones and fragmentation munitions. Their targets read like an Iranian wish list: the Baku-Tbilisi-Ceyhan pipeline, which pumps Caspian crude through Georgia and Turkey toward Europe and supplies roughly a third of Israel’s oil imports BOE Report, along with the Israeli embassy in Baku, the city’s synagogue and leaders of Azerbaijan’s ancient Mountain Jewish community. Cell members had been tailing targets, photographing them, and feeding the files back to their handlers in Iran.

This was not the first time the network got caught surveilling Western bases. During Operation Rising Lion, Azerbaijani nationals were arrested for gathering intelligence on Israeli facilities and military installations in Cyprus and Crete, the same Cyprus that Iran would later hit directly with Shahed-type drones. Tehran’s overseas operatives are also cooperating with other arms of its axis, including pro-Iranian militias in Iraq, to push attack plans across the finish line.

Iran has long treated global terror as a second front, a way to bleed Israel while keeping its own fingerprints off the crime scene. The systematic unmasking of commanders, unit numbers and playbook is designed to strip the regime of the plausible deniability the whole strategy rests on, and to hand friendly services abroad a roster of names and methods they can act on. The message from Jerusalem is blunt: the hunt is ongoing, and every layer of this apparatus is on the board.