Recent judicial proceedings in the United States and United Kingdom have detailed a systemic shift in Iranian intelligence operations, characterized by the utilization of third-party criminal proxies to execute violent acts against dissidents and foreign interests.

近期美國與英國的司法程序詳細揭露了伊朗情報行動的系統性轉變，其特點在於利用第三方犯罪代理人，對異議人士及外國利益採取暴力行動。

The operational paradigm of the Islamic Republic of Iran has undergone a transition toward the employment of non-ideological intermediaries. According to testimony provided to the Woolwich Crown Court, the Iranian state has increasingly outsourced violence to criminal syndicates since 2005 to maintain plausible deniability. This is exemplified by the March 2024 stabbing of journalist Pouria Zeraati in London. Prosecutors allege the attack was preceded by extensive reconnaissance and funded via a complex financial chain involving a London-based construction firm and Romanian nationals, who were motivated by pecuniary gain rather than political affiliation.

伊朗伊斯蘭共和國的行動範式已轉向雇用非意識形態的中間人。根據伍爾威奇皇冠法院的證詞，伊朗政府自 2005 年起日益將暴力行動外包給犯罪集團，以維持「合理否認」的可能性。2024 年 3 月在倫敦發生的記者 Pouria Zeraati 被刺事件即為例。檢方指稱，此次襲擊前經過了廣泛的偵察，並透過涉及一家倫敦建築公司和羅馬尼亞國民的複雜財務鏈提供資金，後者的動機是金錢利益而非政治隸屬。

Simultaneously, the U.S. Department of Justice has identified Harakat Ashab al-Yamin al-Islamiya (HAYI) as a front for the Iraqi militia Kata’ib Hezbollah, which maintains close ties to the Islamic Revolutionary Guard Corps (IRGC). The U.S. government alleges that Mohammed Saad Baqer al-Saadi, a senior commander within Kata’ib Hezbollah, utilized HAYI to coordinate approximately 18 to 20 attacks across Europe and Canada. These operations, which included arson attacks on Jewish community sites and a shooting at the U.S. consulate in Toronto, were reportedly initiated in retaliation for military actions taken by the U.S. and Israel against Iran.

同時，美國司法部將 Harakat Ashab al-Yamin al-Islamiya (HAYI) 認定為伊拉克民兵「真主黨旅」(Kata’ib Hezbollah) 的掩護組織，後者與伊斯蘭革命衛隊 (IRGC) 保持密切聯繫。美國政府指稱，真主黨旅的高級指揮官 Mohammed Saad Baqer al-Saadi 利用 HAYI 在歐洲和加拿大協調了約 18 至 20 起襲擊。據報導，這些行動包括對猶太社區地點的縱火以及在多倫多美國領事館的槍擊事件，旨在報復美國與以色列對伊朗採取的軍事行動。

Technologically, these operations leverage encrypted messaging platforms, social media, and cryptocurrency to facilitate recruitment and payment. This 'terrorism as a service' model allows state actors to recruit disposable operatives—often individuals with existing criminal records—who lack ideological commitment to the Iranian cause. This methodology mirrors 'hybrid warfare' tactics previously pioneered by the Russian Federation, designed to induce social fragmentation and disorientation within Western states through low-cost, high-impact disruptions.

在技術上，這些行動利用加密訊息平台、社群媒體和加密貨幣來促成招募與付款。這種「恐怖主義即服務」模式允許國家行為者招募可拋棄的特工——通常是具有犯罪紀錄的人員——他們對伊朗的事業缺乏意識形態上的投入。此方法模仿了俄羅斯聯邦先前開創的「混合戰爭」戰術，旨在透過低成本、高影響的擾亂，誘發西方國家的社會分裂與失序。

The current security landscape is defined by the proliferation of state-directed proxy networks that utilize criminal elements to target specific diaspora communities and diplomatic symbols.

目前的安全局勢特點在於國家主導的代理人網絡激增，這些網絡利用犯罪元素來針對特定的僑民社區與外交象徵。