Iran's response to the war was not sleeper cells but a cheap, decentralized hybrid campaign of paid lone wolves, hackers, and teenagers — bad news for Western counterterrorism.

• Since the war began, Iran-linked attacks have hit the US and Europe: a deadly shooting in Austin, a consulate shooting in Toronto, embassy and bank bombings in Oslo, Amsterdam, and Paris, and plots against Jewish targets.
• Hackers tied to Iran breached US oil and gas systems, gas station fuel monitors, a medical tech company, and even FBI director Cash Patel's personal email.
• A new group called HAI is recruiting teenagers, drifters, and troubled people for a few hundred dollars to firebomb synagogues, plant bombs, and film attacks — "gig economy" spies who barely know who they work for.
• US prosecutors charged Iraqi militia commander Al-Sadi as the mastermind behind 18 attacks across North America and Europe, confirming Iran is running this through proxies, not its own soldiers.
• This model mirrors Russia's sabotage playbook in Europe and is harder to stop than traditional sleeper cells because anyone can be recruited online and replaced instantly.

Outlook: Western counterterrorism will need a major rethink as paid lone-wolf attacks keep coming and become the new normal.