No One Needs a Missile: What Iran Could Actually Do to Bulgaria

The Financial Times reported this week, citing two people described as close to the Iranian leadership and specifically to the Islamic Revolutionary Guard Corps, that Tehran has been assessing options for striking American military sites outside the Middle East should Donald Trump order a fresh escalation of the war. Among the sites reportedly considered were a base in Cyprus, fiber-optic cables running beneath the Strait of Hormuz, and the Bezmer air base in southeastern Bulgaria, where American KC-135 tanker aircraft have been stationed since the end of July. For a public that has spent the past three weeks being told there is no direct threat to the country, seeing Bulgaria named in a British newspaper alongside the phrase "potential target" was always going to land badly, and it has.

Until now the Iranian pressure on Sofia took the form of diplomatic notes and public warnings, of the kind Foreign Ministry spokesman Esmaeil Baghaei issued in late July when he said that any country providing bases or logistical support for aggression against Iran would share responsibility for it. That was a general warning aimed at a category of countries. What the Financial Times describes is Bulgaria appearing by name in Iranian internal deliberations, which is a different order of information even if the practical distance to an actual attack remains considerable.

Between intelligence study of possible targets and an actual strike lie operational planning, a political decision, preparation of forces, targeting and deployment, and there is nothing in the public record suggesting that process has moved past its earliest stage. The report itself is conditional throughout, describing what Iran might do if Washington escalates, at a moment when Trump has declared the Strait of Hormuz to be American territory and said negotiations are going nowhere.

The government's answer

Defense Minister Dimitar Stoyanov pushed back harder than the standard reassurance, and did so with an unusual detail. He said Bulgarian services, including Military Intelligence, are in contact with their British counterparts, and that the information reaching Sofia from those partners "is significantly different" from what the Financial Times published. He added that he received a document from the services the previous day categorizing the risk as extremely low, with no direct threat to Bulgaria, to sites hosting American aircraft, or to other facilities on Bulgarian territory. Stoyanov also raised the possibility that the leak is itself a move in the contest between Tehran and Washington, concluding that Bulgaria is not a party to that conflict.

Interior Minister Ivan Demerdzhiev took the opposite rhetorical approach to the same end, saying that measures around Bezmer had been calibrated deliberately for a threat level considerably higher than the one the services actually assess, and that protective steps would continue to run ahead of the intelligence picture rather than behind it.

Yordan Bozhilov, the former deputy defense minister who directs the Sofia Security Forum, made the point that matters most about the sourcing. The Financial Times cites two people close to the Revolutionary Guard rather than officials speaking on the record, which he reads as a controlled leak, and the useful question is therefore not only whether the threat is real but what the leak is meant to achieve. Journalist Nina Spasova made a similar observation, noting that the choice of a respected and authoritative outlet was unlikely to be accidental.

What the specialists actually think would happen

The military assessment among Bulgarian analysts is close to unanimous, and it is not the assessment driving the panic on social media.

Ruslan Trad set out the range picture plainly. Several Iranian systems could physically reach Bulgaria, including the Shahab-3 at roughly 2,000 kilometers, the Sejjil at 2,000 to 2,500, the Khorramshahr at 2,000 to 3,000, Sumar cruise missiles at around 2,000 to 2,500, and the Shahed-136 drone at approximately 2,500. Reaching a target and hitting it are separate problems. A strike on Bezmer would most plausibly require crossing Turkish airspace rather than the Cyprus-to-Caucasus line people tend to imagine, which means engaging NATO's most heavily defended eastern flank before a weapon comes anywhere near Bulgarian skies. NATO itself pointed to the record when asked, stating that alliance air defenses have neutralized Iranian ballistic missiles aimed at Turkey on four occasions this year, and Trad noted the March interception took under ten minutes from detection to neutralization.

Trad also drew the distinction that carries the most weight. The Bezmer mission is logistical, refueling rather than combat sorties launched from Bulgarian soil, whereas Akrotiri in Cyprus, struck by an Iranian drone on March 1 and 2, was directly tied to operations against Iran. Opening a front against a NATO member over a handful of unarmed tankers would buy Tehran very little while risking Article 5 consultations, at a moment when Iran is already committed against Israel, in the Gulf and in the Red Sea. Martin Tabakov put the political version of the same argument, that involving Europe would be illogical for Tehran precisely because it would push European governments toward the active engagement they have so far avoided, and that the messages should be read first as signals to Washington.

Lyuben Yovchev of Terem-Holding identified where the real vulnerability sits, and it is uncomfortable reading. Against single ballistic missiles along the southeastern axis, coverage is good, but Bulgaria is not the one providing it. Against low-flying small drones, that coverage does not exist, and he pointed directly at the drone that exploded near Kardam on August 8 as proof that neither Deveselu nor Patriot batteries solve the problem. Bulgarian air defense still rests mainly on Soviet-era S-300, Osa and KUB systems, which Trad described as effective against older targets but not optimized against modern cruise missiles or low-flying loitering munitions. The S-300PMU has no real anti-ballistic capability, the incoming IRIS-T SLM will handle aircraft, cruise missiles and large drones but not ballistic missiles or small first-person-view drones, and the ten planned short-range systems would work far better paired with an early detection layer that Bulgaria currently lacks. In any genuine emergency, Sofia would be requesting allied Patriot or French SAMP/T batteries.

The threat that deserves the worry

Every specialist quoted this week converged on the same conclusion, which is that a ballistic missile is the least likely thing Bulgaria should be preparing for. Yovchev's formulation is the one to remember: nobody needs a cell to stage a provocation near Bezmer, because a recruited local with a thousand-euro drone and publicly available information is sufficient. He described the preferred Iranian method in Europe recently as contracting criminal networks, financially motivated people with no link to handling officers and often minors or petty criminals, which maximizes deniability and makes state sponsorship very hard to prove.

The historical precedent Bulgarians reach for, the 2012 Sarafovo bombing at Burgas airport, fits that pattern rather than the missile one. The investigation established links to Hezbollah's military wing rather than to the Iranian state directly, and both Hezbollah and Tehran denied involvement. Trad's warning is that similar structures could attempt to move drones into European territory through Bulgarian borders, where awareness of Iranian networks is thin. Add the information dimension, where Europol led an operation in May against roughly 14,200 posts and accounts linked to Revolutionary Guard-adjacent disinformation, with law enforcement from nineteen countries including Bulgaria taking part, and the shape of the realistic threat becomes clear. Vladimir Vladimirov made the point that a large part of the Bulgarian population is highly susceptible to exactly this kind of pressure, that a storm erupts on Facebook within hours, and that it converts quickly into political argument and social division.

That last observation is the one worth sitting with, because it describes what has actually happened in Bulgaria this week rather than what might happen. Asen Vassilev from opposition party PP declared that Iran had found Bezmer on the map and that Radev brought the country into a war in two months that had been kept out of it for five years. Kostadin Kostadinov from opposition party "Revival" called the government's policy the liquidation of Bulgarian sovereignty and demanded the Bezmer decision be reversed. Opposition party GERB demanded the Foreign Ministry summon the Iranian ambassador for an official explanation of whether Tehran considers Bulgarian territory a target, while pointing out that Radev warned of direct threats as president and now describes the same risk as a matter of logistics. Ivaylo Mirchev from opposition party DB asked for a joint sitting of the defense and foreign policy committees. Vassilev also criticized President Iliyana Yotova for not convening the Consultative Council on National Security within twenty-four hours of the report.

Some of that is legitimate parliamentary scrutiny of a decision with real consequences, and the demand for a published risk assessment is entirely reasonable. Some of it is an election campaign that began the moment the presidential vote was scheduled for October 25. The difficulty for a reader trying to work out whether to be frightened is that both are happening in the same sentences.

The honest summary is this. Iran has the motive to regard American infrastructure in Bulgaria as a legitimate category of target, and it has systems capable of reaching this country at the outer edge of their range. There is no public evidence that Tehran has decided to strike, prepared to strike, or moved beyond considering scenarios. A direct missile attack remains unlikely and would require defeating several layers of allied defense along nearly any route it could take. What is considerably more plausible, and what Bulgarian services should be resourced and focused on, is the quieter category: sabotage, a cheap drone launched from close by, cyber operations against critical infrastructure, an attack on a soft target connected to Israel or the United States, and a sustained effort to frighten Bulgarians into turning on each other and on their own government. The last of those does not require Tehran to launch anything at all, and it is already underway.