Skip to content
Welcome, thoughtbot's Giant Robots listeners!Start here
Russia-Ukraine War 2026
1APR

Israel kills intelligence chief Khatib

3 min read
16:30UTC

Intelligence Minister Esmail Khatib's death in a Tehran airstrike makes him the third member of the Supreme Leader's inner circle eliminated in 48 hours, as Israel's pre-authorised killing campaign reaches Iran's counter-intelligence apparatus and the IDF publicly names Mojtaba Khamenei as next.

ConflictDeveloping
Key takeaway

Three inner-circle kills in 48 hours suggests unprecedented Israeli intelligence penetration of Iran's leadership security architecture.

Israel killed Iran's Intelligence Minister Esmail Khatib in an overnight airstrike on Tehran⁠1. President Pezeshkian confirmed the death. Khatib ran the Ministry of Intelligence and Security — VAJA — the body responsible for internal surveillance, protest suppression, and overseas intelligence operations. During the 2022 Mahsa Amini protests, VAJA coordinated the security crackdown that Amnesty International documented as including rooftop snipers targeting protesters' heads and torsos. The US had posted a $10 million bounty for information about him. He is the third member of The Supreme Leader's inner circle killed in 48 hours, after Ali Larijani and Basij commander Gholamreza Soleimani.

The tempo is a direct product of the killing framework Netanyahu and Defence Minister Katz established on 16 March: advance authorisation for the IDF and Mossad to strike senior Iranian figures without cabinet approval when time-sensitive intelligence surfaces. A senior Israeli official told Ynet this delegation of lethal authority "has never happened before" — previous operations against high-value targets, including the 2024 killing of Hamas political chief Ismail Haniyeh in Tehran, required full cabinet sign-off. The framework produced Larijani and Soleimani within hours of its announcement; Khatib followed two days later. The IDF has publicly named Mojtaba Khamenei himself as the next target, with Brig. Gen. Effie Defrin stating on camera: "He is not immune. We will pursue him, find him, and neutralise him".

Khatib's death carries a specific operational cost beyond the leadership tally. His ministry is Iran's counter-intelligence apparatus — the system designed to detect and prevent exactly the kind of intelligence penetration that made these strikes possible. With VAJA's chief dead, Iran's capacity to shield its remaining leaders is weaker at the moment it matters most. Senior commanders were already attempting to evade targeting; when Soleimani and his deputy were killed, they were found in a makeshift tent encampment rather than their headquarters. DNI Tulsi Gabbard told the Senate Intelligence Committee that the Iranian government "appears to be intact but largely degraded"⁠2. The Supreme Leader himself survived the 28 February opening strikes by "mere seconds," according to a leaked audio recording obtained by The Telegraph, and has not appeared publicly since. Israel has demonstrated it can reach Iran's senior leadership at will. The operational question for Tehran is whether anyone in the chain of command can make decisions without becoming the next target.

Deep Analysis

In plain English

Iran has two parallel intelligence services. The IRGC runs its own spy network. VAJA — the Intelligence Ministry Khatib headed — handles something different: tracking dissidents inside Iran, suppressing protests, and running covert overseas operations. These are separate bureaucracies with separate personnel and methods. Killing Khatib disrupts domestic surveillance precisely when internal dissent from the war may be intensifying. It also degrades the ministry responsible for overseas covert action — assassinations, proxy coordination, and intelligence collection abroad. Combined with the Larijani and Soleimani deaths, Iran's Supreme Leader has lost three figures from his personal inner circle — the people he relies on for advice, security assessments, and political control — within two days.

Deep Analysis
Synthesis

Three inner-circle kills in 48 hours requires either extraordinary real-time intelligence on leadership movements or advance placement of human assets at the highest levels of Iran's protective security architecture. The body notes the fact; the analytical question it does not address is what enabled it. If Israel is operating a penetrated source inside The Supreme Leader's protection detail, that represents a vulnerability Iran cannot quickly repair — and one that shapes every future Iranian leadership decision about physical security versus operational continuity.

Root Causes

The campaign's authorisation outside cabinet approval is a structural feature of Israeli coalition politics under emergency conditions, not aberrant behaviour. Netanyahu's governing coalition includes partners who might demand restraint or extract political concessions; bypassing cabinet insulates the most consequential decisions from domestic veto players. This governance structure has been in place since the October 2023 war cabinet was dissolved.

Escalation

The IDF's public naming of Mojtaba Khamenei as a target represents a qualitative escalation beyond any previous conflict norm. No state has publicly designated a sitting Supreme Leader's designated successor as a military target. This forces Khamenei to either concede vulnerability or escalate dramatically to demonstrate regime survival.

What could happen next?
  • Risk

    Public targeting of Mojtaba Khamenei may trigger preemptive succession manoeuvres inside Iran, destabilising the regime's internal command structure before any military defeat.

    Short term · Suggested
  • Consequence

    VAJA's overseas covert operations are temporarily degraded, reducing Iran's near-term capacity to conduct retaliatory action through its foreign intelligence networks.

    Immediate · Assessed
  • Risk

    Successors drawn from more ideologically extreme IRGC factions could make Iran's security apparatus less amenable to the eventual negotiated settlement this conflict requires.

    Medium term · Suggested
  • Precedent

    Authorising senior leadership assassinations outside cabinet approval normalises executive override of democratic oversight in declared emergencies, with implications beyond this conflict.

    Long term · Suggested
First Reported In

Update #41 · South Pars struck; Iran hits Qatar's LNG

Al Jazeera· 19 Mar 2026
Read original →
Different Perspectives
Bulgarian government
Bulgarian government
Bulgaria's Prime Minister, Rumen Radev, said the sinking of HS Dignity "benefits the Russian Federation" while saying Bulgaria lacked solid evidence to accuse anyone, and Defence Minister Dimitar Stoyanov asked NATO for air defence on 16 October. The request comes from a government that stopped state military aid to Ukraine in June.
Radoslaw Sikorski
Radoslaw Sikorski
Poland's foreign minister challenged Elon Musk on X after SpaceX capped Ukraine's Starshield terminals on 14 October. Poland pays about $50m a year for Ukraine's Starlink subscriptions, so Warsaw speaks as the paying customer as well as the ally.
Andy Burnham
Andy Burnham
Burnham fast-tracked £10m of a £45m air-defence missile delivery when Zelenskyy visited London on 14 October, and his ministers are lobbying allies to ban maritime services for Russian liquefied natural gas. The measure targets insurers and shipowners, many of them in London, rather than the gas itself.
Ministry of External Affairs (India)
Ministry of External Affairs (India)
India's foreign ministry said after the 16 September House vote that New Delhi would take all necessary measures to protect its trade.
European Council
European Council
EU leaders on 15-16 October rejected a US idea to hand Washington the roughly €200bn of frozen Russian assets held in Europe, and Kaja Kallas said the decision belongs to Europeans. The same summit put off a decision on financing Ukraine, saying leaders "will revert to the issue in a timely manner".
Donald Trump
Donald Trump
Trump signed the 16 October order that sets the Graham Act's duties and waives them under section 115(a), with a certification sent to Congress. He says the United States has not stopped sharing intelligence with Ukraine, and on 11 October he said both sides had agreed to halt attacks on energy infrastructure.

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Editorial standards.