Iranian State Media Calls Trump an 'American Terrorist' — But the Real Story Is the Cyber Arena They Share

On 24 May 2026, Iranian state-aligned Telegram channels Tasnim and Jahan Tasnim published parallel items under near-identical editorial framing, calling the US president the leader of an "American terrorist state" and characterising a recent series of online posts as evidence of belligerent intent. The wording — uniform across both channels, published within minutes of each other — followed a pattern this publication has previously tracked: Tehran's official information apparatus amplifies certain themes in near-synchrony, a coordination that is not itself covert but whose rhythm speaks to institutional discipline.

The posts in question — which the Iranian accounts described as "war-themed" — were not publicly confirmed by US officials as of publication. What is confirmed is that the relationship between Washington and Tehran has entered a phase in which both capitals use digital platforms as arenas for signalling, pressure, and the projection of resolve. The language of terrorism and counter-terrorism, deployed by both sides, has migrated from diplomatic memoranda into the public square of social media, where it reaches audiences that formal channels no longer reliably reach.

The Shared Arena

US cyber operations against Iranian targets have a documented public record stretching back to the Stuxnet era, with subsequent disclosures by US officials confirming offensive action against Iranian nuclear infrastructure. The National Security Agency and US Cyber Command have, in successive administrations, maintained a posture in which digital tools are presented — when acknowledged at all — as legitimate instruments of statecraft alongside sanctions, diplomacy, and military signalling. Under the current administration, that posture has if anything intensified: federal agencies have been tasked with cyber operations as part of a broader "maximum pressure" framework, and senior officials have publicly referenced the deployment of offensive capabilities against adversaries including Iran.

Iranian cyber capabilities, for their part, have been extensively documented by Western intelligence assessments and private-sector security researchers. Iranian state-linked actors have been linked to operations targeting critical infrastructure in the United States and Europe, including — according to reporting by CNN and other outlets — reconnaissance activity around operational technology networks governing power grids and water systems. The asymmetry is real but not absolute: Iran has invested substantially in developing offensive cyber capacity precisely because it compensates for conventional military disadvantage.

What the Tasnim and Jahan Tasnim coverage captures is the rhetorical layer that sits atop that operational reality. Tehran's framing — calling the United States a terrorist state, cataloguing cyber provocations — is not mere propaganda in the dismissive sense. It is a structured information campaign aimed at multiple audiences: domestic Iranian consumers who are told their government is resisting a hostile power; regional audiences in the Middle East who have their own grievances with American foreign policy; and international forums where the language of sovereignty and non-intervention still carries legal and political weight.

The Structural Frame

Both Washington and Tehran are doing something structurally similar: using publicly accessible digital platforms to conduct what would, in previous eras, have been classified signalling operations. The difference lies in the framing vocabulary each side deploys. Washington frames its cyber posture as defensive or deterrent; Tehran frames American cyber activity as aggression. Both framings contain verifiable elements. Neither framing is complete.

This shared digital arena creates a condition that security theorists — without invoking any particular model — have long identified as structurally unstable. When two states can cause tangible harm to each other's infrastructure through digital means, and when both simultaneously conduct influence operations targeting each other's populations, the absence of agreed rules of engagement means that escalation runs on perception rather than on codified thresholds. The threshold for a "cyber incident" that triggers a kinetic response has never been clearly defined by any major power; the threshold for a war of words in the same digital channels is effectively nonexistent.

The science angle — underappreciated in most coverage of this relationship — is the infrastructure underneath. The internet protocols and platform architectures that both governments now weaponise for information operations were not designed with adversarial state use in mind. They were designed for interoperability, connectivity, and commercial scale. That foundational mismatch — infrastructure built for openness being exploited for targeted coercion — is a structural vulnerability that neither Washington nor Tehran has any immediate incentive to remediate, because both benefit from the access it currently provides.

What Remains Uncertain

The sources describing the specific posts as "war-themed" do not independently confirm the content of those posts; the characterisation comes from Iranian state-aligned accounts whose editorial posture is adversarially oriented toward Washington. It is possible that the posts in question contain language that genuinely escalates rhetorical tension. It is also possible — a possibility the sources do not rule out — that the framing itself is the story, and that the regularity of the amplification cycle is designed to produce a cumulative effect regardless of the underlying content.

What is not uncertain is that the institutional apparatus on both sides — US cyber command and its public communication apparatus on one hand, Iranian state media on the other — is functioning as intended. Both are reaching their target audiences. Both are shaping the information environment in ways that serve strategic objectives. And the platforms that carry both sets of messaging were not engineered to adjudicate between them.

The Stakes

If the current trajectory holds, the absence of agreed norms for state conduct in cyberspace will become more consequential, not less. Each administration on both sides finds it tactically useful to operate below the threshold of conventional armed conflict while still projecting power and inflicting costs. That grey zone is stable only as long as neither side reads a public statement, a social media post, or an infrastructure probe as a casus belli. The history of international crises suggests that such readings are made incorrectly more often than they are made correctly.

The question this publication finds most worth posing is not which side is right — both framings contain internal logic — but what the default position of the international system is when digital signalling crosses whatever line it is that neither side wants to cross first. That line has not been drawn. It is not being drawn in the Telegram channels that carried this story. And it will not be drawn by the institutions that currently benefit from the ambiguity.

This publication's coverage of Iranian state media framing is sourced from Tehran-adjacent outlets whose reporting reflects an adversarially-oriented editorial posture. Readers are advised to cross-reference with Western wire reporting and official US government statements on cyber posture.

Wire provenance

This editorial synthesis draws on the following public wire/social posts:

• https://t.me/tasnimnews_en/4121
• https://t.me/JahanTasnim/9182