Media In Iran Confirm Suspicious Death Of IRGC Colonel

The sources said that Colonel Ali Esmailzadeh died when he fell from the roof of his home in Jahan Nama area of Karaj.

He was a close colleague of Colonel Hassan Sayyad-Khodaei, the acting commander of the elite Qods Unit 840, who was shot dead behind the wheel of his car outside his home in Tehran on May 22 by two gunmen who fled the scene on a motorbike.

Unit 840 is a very secretive group within the Quds Force and there are no photos of its members available.

Iran International’s sources also said that after he fell from the roof, Esmailzadeh was taken to Shahid Madani hospital where after examination doctors pronounced him dead. Based on this report, officials of the Revolutionary Guard (IRGC) told Esmailzadeh’s family that the reason for his death was suicide. The IRGC officials further told the family that he ended his life due to psychological problems after separation from his wife and has left a note about his action.

A European security source last week had told Iran International that Col. Sayyad-Khodaei, who was assassinated eight days earlier, was in charge of planning terror operations outside Iran, including attacks in India, Taiwan, Cyprus and Georgia. Suspicions for his assassination fell on Israel and according to some reports, Israeli officials told the United States that they had targeted Sayyad-Khodaei.

In the case of Esmailzadeh, Iran International’s sources said that after Sayyad Khodaei’s killing the IRGC intelligence looking for security leaks from within the Qods Force became suspicious of Esmailzadeh and decided to eliminate him by organizing a suicide scenario.

The largescale cyberattack occurred on Thursday on the eve of commemoration ceremonies for the death anniversary of the late founder of the Islamic Republic Ruhollah Khomeini. The security cameras around his mausoleum were also deactivated. 

The hacktivist group, reportedly affiliated with the Albania-based opposition Mujahideen-e Khalq (MEK) group, put photos of the leaders of the group Massoud and Maryam Rajavi as well as insults at Khomeini, Supreme Leader Ali Khamenei, and President Ebrahim Raisi on the websites of Tehran Municipality. 

The MEK released a video clip it claimed showed the websites defaced with a graphic that criticized the Iranian leaders, with an image of Khamenei with a red 'X' over his face, while calling for an “uprising until overthrow.”

A spokesman for the MEK told Iran International that over 600,000 text messages saying “Death to Khamenei” and “Damn You Khomeini” were also sent to Iranian citizens today. 

The Municipality of Tehran confirmed the attack, saying the “intentional disruption” of its portals resulted in display of “insulting” images on its websites.

The hack comes after another cyberassault in March on the portal of the Ministry of Culture and Islamic Guidance (Ershad) and its affiliated websites showing the photos of the Rajavis and calling for the death of the country’s supreme leader.

After a similar attack in January, a MEK spokesman said a ten-second hacking of several television and radio channels of Iranian state broadcasting might have been done by supporters in Iran. The hackers put up pictures of the Rajavis, and one of Khamenei in a gun sight. The Iranian leader was badly wounded in 1981 in one of many bombings attributed to the MEK.

On February 1, Hacktivist group Edalat-e Ali (Ali's Justice) hacked the online streaming of Iran’s state television and broadcasted a video with a strong opposition message. The video started with footage of people in Tehran’s Azadi stadium shouting “death to dictator” referring to Kamenei, then it cut into a close up of a masked man similar to the protagonist of the movie V for Vendetta, who said “Khamenei is scared, the regime’s foundation is rattling”.

In August 2021, a mystery hacktivist group calling itself Tapandegan (Palpitations), previously known for the 2018 hacking of electronic flight arrival and departure boards in Mashhad and Tabriz, released security camera footage from Tehran's Evin prison. Tapandegan said the images came from hackers called Edalat-e Ali (Ali's Justice) and were being circulated to draw attention to prisoner abuse.

In October 2021, gas stations in Iran were hit by an attack disrupting payments, leading to long queues for two days that prevented customers using the government-issued electronic cards for subsidized fuel. ‘Predatory Sparrow’ claimed responsibility, but Iranian officials blamed outside forces, widely taken to refer to Israel.

While Masoud Rajavi is widely thought dead, the MEK insists he is merely in hiding waiting for his return to Iran. The MEK allied to Saddam Hussein during the 1980-88 Iran-Iraq war and helped the Iraqi dictator put down the 1991 uprisings in Iraq, when tens of thousands died.

The MEK was listed by the US from 1997 to 2012 as a ‘foreign terrorist organization,’ but was subsequently removed from the list. The group has cultivated links with many politicians in the US and Europe, paying large sums for attendance or speeches at its rallies.

The independent monitoring service, which tracks and reports shipments and storage of crude oil, said in a Twitter post on Thursday that they have a visual confirmation the hijacked Greek Suezmax tanker Prudent Warrior is in the anchorage of Bandar Abbas in the southern Hormozgan province and the other Suezmax vessel, the Delta Poseidon is being held north of Larak island near the Strait of Hormuz.

The Iranian Revolutionary Guards' navy seized the two vessels during helicopter-launched raids on May 27 in the Persian Gulf, a week after the confiscation of Iranian oil from a tanker held off the Greek coast and its transfer to the US. 

Criticized by many former and current officials as well US congresspeople for a lenient Tehran diplomacy that has led to the increase of the Islamic Republic’s oil revenues, President Joe Biden’s administration has apparently stepped up its effort to put pressure on Iran’s crude exports, which have been sanctioned since the former President Donald Trump abandoned the nuclear deal in 2018.

The Vienna talks to restore the 2015 nuclear deal have stalled mainly because of Iran’s demand for the US to remove the Revolutionary Guard (IRGC) from its terrorism list (FTO) and the recent missile attacks have shed more doubts whether Washington would take such a step.

“Iranian authorities must understand that they can’t hide the country’s difficult realities and problems by silencing and jailing journalists,” Justin Shilad, CPJ’s Middle East and North Africa senior researcher, said Wednesday in New York.

The international press rights group called for the unconditional release of freelance reporter Arash Ghaleh-Golab, arrested at a mourning ceremony for victims of a collapsed building in the south-western city of Abadan, which killed at least 37 and led to protests in south-west Iran and elsewhere.

The CPJ cited a “source familiar with the case” that when Ghaleh-Golab was arrested “officers hit the journalist with their fists and kicked him.” The group said Ghaleh-Golab was being detained without charge at an undisclosed location and not allowed to contact his family.

The Iranian Writers Association has also expressed concern about Ghaleh-Golab and other detainees of the protests in Abadan and other cities in Khuzestan province. Security measures, including restrictions on the Internet, had made the situation of journalists and other detainees “very worrying,” the association said.

Describing the attempted attack as “deeply disturbing,” Idaho’s Republican Senator Jim Risch said in a tweet on Wednesday that “it’s typical of a regime that’s synonymous with global terrorism.”

He also expressed gratitude to the FBI and other security agencies that continue “to keep America safe from Iran’s malign activity.” 

FBI Director Christopher A. Wray disclosed the news about the “despicable” attack by hackers sponsored by Iran Wednesday, warning of rising threats of cyberattacks sponsored by nation states like Iran, Russia and China to companies and US infrastructure.

“If malicious cyber actors are going to purposefully cause destruction, or hold data and systems for ransom, they tend to hit us somewhere that’s really going to hurt,” Wray added. 

Arkansas’ Tom Cotton, another Republican senator, also reacted to the news, urging the Biden administration to hold Tehran accountable and not to reenter an agreement with the Islamic Republic.

“Instead of giving sanctions relief to the world's worst state sponsor of terrorism, Joe Biden should start holding Iran accountable,” Cotton said.

Iran has been repeatedly accused of cyber-attacks against the West, Israel and rival Arab countries in the Middle East.