Lebanese security officials have disclosed that an ongoing investigation into a spy network, led by a Ukrainian of Syrian descent and with several members arrested in recent weeks, has revealed an unprecedented level of Israeli intelligence activity in Lebanon. The network’s operations reportedly included attempts to infiltrate highly sensitive sites, including Beirut’s international airport.

According to sources cited by Erem News, one agent received instructions from an Israeli handler to park a car in the VIP lounge garage at the airport, with the promise of a pass granting access to the restricted area. A Lebanese security official said this could indicate either direct Israeli influence at the airport or reliance on assistance from Western entities operating there.

These revelations come amid heightened tension following the most recent Israel-Hezbollah conflict, which featured one of the deepest intelligence penetrations in Hezbollah’s history: the so-called “Pager operation.” Analysts note that the disclosures precede preparations for a potential new confrontation.

In September 2024, Hezbollah’s communication devices — known as the Pager and related radios — were sabotaged. Reports suggest this represented one of the most significant intelligence attacks in the history of the Israel-Hezbollah conflict. Western sources indicate that the attack resulted from a long-term compromise of the global supply chain, allowing small explosives to be embedded in device batteries imported through shell companies.

Lebanese sources said Hezbollah’s internal investigation revealed that Israel possessed detailed knowledge of device distribution, field commanders’ locations, meeting schedules, and movement routes. This intelligence was reportedly derived from a combination of human networks and advanced surveillance, including drones.

In response, Lebanese authorities have intensified efforts to dismantle espionage networks, arresting over 30 individuals in recent months. Those detained include civilians, port workers, retired military personnel, and foreign residents. One of the networks focused on tracking movements of Hezbollah’s Radwan Unit commanders, documenting the routes used to transport weapons across southern suburbs, southern Lebanon, and the Bekaa Valley. Data from these networks are believed to have improved the precision of Israeli strikes during and after the recent conflict.

Western analysts estimate that Israel has developed a sophisticated intelligence model that integrates artificial intelligence, human intelligence, and aerial and satellite surveillance. Systems deployed during the Gaza conflict, including “Lavender” and “The Gospel,” have been adapted to track Hezbollah commanders and analyze their movement patterns along the northern front.

Syrian researcher and intelligence expert Mohammad Saleh Al-Fateh told Erem News that these systems go beyond aerial imagery analysis, building “precise behavioral models” of individuals and groups. Data include vehicle types, number of escorts, frequency of appearances, time spent at specific locations, nighttime activity, and nearby electronic device signals.

This comprehensive approach has allowed Israel to compile an extensive database mapping small arms caches, logistical supply routes, and daily movement patterns in southern villages. Al-Fateh added that in any future confrontation, these systems are likely to enhance the accuracy of strikes on key leaders and sensitive targets, effectively advancing information warfare beyond conventional frontlines.

In response to the Pager Operation, Hezbollah has restructured parts of its security network to reduce vulnerabilities and improve communications and mobility. Measures reportedly include redesigning communication lines, reducing internet dependence, strengthening encrypted internal networks, and discontinuing previously common communication methods.

The group has conducted thorough background checks of personnel in sensitive units, including weapons depots and transport routes. Leaders now travel less predictably, using varied routes and vehicles while avoiding repeated appearances at the same locations or times.

Sources said Hezbollah has separated civilian and military networks, including disconnecting home surveillance cameras from the internet to prevent civilian infrastructure from being exploited for monitoring. Observation and reconnaissance teams are rotated regularly to avoid predictable patterns detectable by drones.

Despite these precautions, experts warn that Hezbollah’s reliance on international supply chains remains its greatest vulnerability. The group cannot fully control the sources of equipment and devices, leaving open the possibility of breaches similar to the Pager operation.