A 20-year-old man sitting in a Melbourne jail cell just got handed a massive stack of fresh counter-terrorism charges. He didn't have to travel anywhere to get them; the Victorian Joint Counter Terrorism Team walked right into the prison to process him.
Police allege he was the third masked figure who broke into the Adass Israel Synagogue in Ripponlea on December 6, 2024, dumping flammable liquid across the floors before setting the building ablaze. The fire gutted the sanctuary, forced worshippers to run for their lives, and caused injuries.
But the real story isn't just about three local criminals with matches. It's about who was pulling the strings from thousands of miles away.
Australian intelligence and political leaders explicitly pin this attack on the Islamic Revolutionary Guard Corps (IRGC), an arm of the Iranian government. Tehran denies it, of course. Yet the diplomatic fallout was immediate, resulting in the mass expulsion of the Iranian ambassador and multiple diplomats.
This arrest exposes a dark reality that western security agencies are struggling to contain. Foreign states aren't sending their own spies to do their dirty work anymore. They are hiring local thugs who might not even know who is actually paying them.
The Anatomy of a Foreign Proxy Attack
The concept of proxy warfare is old, but the execution in modern cities like Melbourne is changing fast. According to Mike Burgess, the chief of Australia's domestic spy agency (ASIO), Iran utilized a "complex web of proxies" to hide its hand in both the synagogue arson and a separate attack on a Sydney kosher kitchen.
Look at the timeline of the arrests. It took over 18 months of tedious tracking to secure this third arrest.
- July 2025: Police nabbed 21-year-old Giovanni Laulu.
- August 2025: Authorities arrested 20-year-old Younes Ali Younes.
- June 2026: The third suspect, an unnamed 20-year-old from Airport West, is formally charged while already locked up for separate crimes.
The physical mechanics of the crime were brutal but basic. Three men broke in at 4:10 AM, spread accelerant, and lit it up. They used a stolen Volkswagen Golf that police later tied to a string of other non-political crimes, including a nightclub fire and a shooting.
This crossover is exactly how these proxy operations mask themselves. The operatives are often career criminals, gang members, or impressionable youth recruited through digital backchannels or local criminal syndicates.
Australian Federal Police Assistant Commissioner Peter Crozier admitted as much. He noted that the alleged arsonists might be entirely oblivious to the identity of the people directing the operation. They just saw a payday or a chance to cause chaos.
Why Using Local Thugs Works for Hostile States
Hiring street-level criminals gives state actors two massive advantages.
First, it offers plausible deniability. When a state-sponsored agent gets caught with a foreign passport and military training, it's an act of war. When a couple of local twenty-year-olds with existing rap sheets burn down a building, it looks like localized hate speech or basic arson. It confuses the narrative.
Second, it is incredibly cheap and expendable. The IRGC doesn't care if Giovanni Laulu or an unnamed kid from Airport West spends 15 years in an Australian prison. They are disposable assets in a larger geopolitical chess match.
The psychological impact on the ground is devastating. The Adass Israel Synagogue is slated to stay closed until at least 2029 due to the structural damage. For five years, a local community is robbed of its house of worship because of a foreign state's geopolitical agenda.
What Communities and Security Forces Must Do Next
The Victorian Joint Counter Terrorism Team proved that law enforcement can eventually untangle these webs. But waiting 18 months to catch the foot soldiers after a building is already reduced to ash isn't a sustainable defense strategy.
If you manage security for a community space, a religious center, or an institution that could be targeted in global political disputes, you have to change how you look at risk.
- Audit your physical perimeters immediately. The Melbourne attackers gained entry in the dead of night through forced entry. High-grade commercial locks, reinforced entry points, and smart security cameras that flag motion directly to a monitoring service save lives.
- Train staff on early morning vulnerabilities. The Adass Israel fire occurred just as early morning worshippers arrived to prepare for prayers. Lone workers or early arrivals are the most vulnerable. Never open or prep a public building alone in high-risk climates.
- Report unusual local reconnaissance. Proxy actors often do messy, obvious drive-by surveillance beforehand because they lack professional tradecraft. If a vehicle or individual loops past your facility repeatedly, log the plate and hand it to police.
Law enforcement officials confirmed that some individuals actively lied to investigators to stall this specific inquiry. The network is real, and it relies on local silence to operate. True safety requires aggressive vigilance at the local level to ensure these proxy chains break before the match is struck.
