The Balkan nations are beset by “porous borders, rampant corruption, underdeveloped regions and relatively lax security,” as well as a lack of intelligence coordination between individual Balkan states and between the Balkans and the EU, making them ideal operating zones for criminal gangs, terrorist networks, and extremist organizations of all stripes. Iran has sought to exploit this environment for nearly three decades, pursuing a mutually reinforcing dual-track strategy in the Balkans by which it seeks to embed Hezbollah and state and IRGC intelligence operatives on the one hand, and a network of religious, cultural, educational, and media organizations on the other. The institutions within the Iranian ideological NGO nexus serve as cut-outs and front organizations for Iranian intelligence and Hezbollah, providing cover for terrorist operations and criminal fundraising activities.

The 2012 Burgas bus bombing carried out by Hezbollah shone a light on Iran’s intelligence and terrorism apparatus in the Balkans, which had largely flown under the radar for years, demonstrating definitively that beyond organization and logistics, Iran’s European proxies can be mobilized to strike Western and Israeli interests at Iran’s command. The attack served as a wake-up call, leading Balkan countries to begin pushing back against Iran’s malign influence.