US prosecutors say Iran-backed group directed London attacks over FaceTime

Who is affected

According to US prosecutors, the alleged campaign targeted Jewish and American sites across Europe. In London, attacks included arson at a Jewish charity, an arson attempt on the Iran International media organisation, and a stabbing that left two Jewish men seriously injured. Synagogues in Belgium and the Netherlands, and US bank buildings in Amsterdam and Paris, were also targeted. The group also plotted an attack on RAF Fairford, a British air base used by US bombers. The attacks were claimed by a group called Harakat Ashab al-Yamin al-Islamiya (HAYI), which prosecutors describe as a front for the Iran-backed militia Kataib Hezbollah and Iran’s Islamic Revolutionary Guard Corps (IRGC) [Recorded Future News↗ (opens in a new tab)].

How the attack worked

Prosecutors allege that the network directed attacks remotely using FaceTime and other messaging apps. During an arson attack on a London Jewish charity in April, one suspect instructed the attacker live over FaceTime, telling him to “light one in your hand,” “light it” and “throw the fourth one.” The attack was streamed and projected onto a large screen with the militia’s logo. Similar instructions were given during attacks on Iran International and a London synagogue. The indictment includes images and recordings of suspects directing attacks from Iraq and Iran, and planning with maps of London on display.

The group also plotted a vehicle attack on RAF Fairford. Prosecutors say a suspect in Iran directed the drivers of three vans toward the base by phone, while another suspect in New York relayed coded instructions through relatives. At least two vans were stopped by security, and British authorities arrested seven people, later releasing them on bail. No explosives were found, but petrol was seized.

The response

The US unsealed an indictment against three men: Mohammad al-Saadi, alleged commander of Kataib Hezbollah (jailed in New York since May), Mohsen Mohajeri (identified as an IRGC operative), and Mohammed Ali al-Hassani (an Iraqi who once lived in Britain). The latter two are believed to be in Iran. All face terrorism charges with potential life sentences. Much of the evidence comes from al-Saadi’s iPhone, seized by the FBI, containing FaceTime recordings, raw attack footage, and messages with militia contacts. The FBI linked his WhatsApp, Snapchat, Telegram, and X accounts through a single phone number. Apple, Snap, X, and Meta did not respond to requests for comment.

What experts say

Prosecutors highlight that recording attacks for propaganda was central to the network’s operations. The case also raises questions about law enforcement access to encrypted data. FaceTime calls are end-to-end encrypted, meaning Apple cannot access their content while calls are ongoing, but investigators obtained recordings stored on the suspect’s device. The story comes as Apple challenges a reported British demand for access to protected iCloud data, and the EU explores technical options for lawful access to encrypted evidence.

No primary source or official statements from UK authorities or Apple have been published. Only one outlet has reported these details so far, and some claims (such as the use of radioactive drones) remain unconfirmed by police.