Take on
Summary AI is born, the news room has been reviewed.
Nia’s report connects Pakistan’s ISI to Pahalgam terror attack.
On 22 April, 26 persons, most tourists died in the attack.
Lashkar-e-Tabiba conspired to attack under ISI instructions as per NIA sources.
New Delhi:
Terror Anti-Terror Body National Investigation Agency (NIA) Preliminary Report on 22 April Terrorist attack in Pahgam ‘S Besaran Valley points to an operational connivance between Pakistan’s intelligence agency, Inter-Services Intelligence (ISI), and Terrorist group Lashkar-e-Tabiba (Late), sources have said.
According to NIA sources, the conspiracy behind the terrorist attack killing 26 people, mainly tourists, was allegedly developed within late, under the instructions issued by ISI Operators. The scheme is believed to have been formalized at the headquarters of Lashkar in Pakistan.
Two central terrorist Pakistani citizens are confirmed for an attack as Hashmi Moses (aka Suleman) and Ali Bhai (aka Talha Bhai). Inquiry by the detained operators indicates that the two attackers maintained constant communication with Pakistani-based handlers, obtained specific instructions on time, logistics and execution.
Terrorists allegedly entered the Indian territory weeks before the attack and assisted by a network of over ground workers (OGWS), who provided local logistic support including shelter, navigation and reconnaissance.
Evidence collection
The NIA has comprehensive forensic and electronic data collection. More than 40 cartridges recovered from the crime site have been sent for ballistic and chemical analysis. Investigators demonstrated 3D mapping of the attack site and extracted dump data from mobile towers around the valley.
Satellite phone activity in the region occurred in the leading days for the attack. At least three satellite phones were operational in and around it, and two signs have been detected and analyzed.
Inquiry and detention
Overall, more than 2,800 persons have been questioned by NIA and security agencies. By May 2, more than 150 persons stay in custody for further questioning. These include suspected OGWS and individuals, linking restricted groups such as Jamaat-e-Islami and various groups of the Hurrita Sammelan.
Raids have been conducted in several districts including Kupwara, Pulwama, Sopore, Anantnag and Baramullah. The residences of several persons suspected of supporting terrorist infrastructure across the border were discovered.
In the 1999 IC-814 hijack case, a prominent person was discovered at the residence of Mushtaq Ahmed Zargar, aka Latram and is currently believed to be working from Pakistan. The Srinagar residence of Zargar was first connected in 2023 under the stringent illegal activities (prevention) Act (UAPA).
Tech monitoring and eyewitness accounts
The NIA has rectified the transit around Pahalgam and reconstruct CCTV footage from public areas to detect the attackers’ movement. They are also reviewing data from security posts in nearby areas for pattern mapping.
Dozens of eyewitnesses, including families of victims, pony operators and food vendors, have provided admirers to re -organize the attack schedule. Many described the attackers as using body-mounted cameras, possibly to record the event for publicity purposes. These accounts are under forensic investigation.
Attack related to previous incident
The NIA has also established a relationship between the Pahgam murders and a former terrorist attack near the Z-Morah tunnel in Sonamarg, Genderbel district in 2024, killing seven persons, including six laborers and a doctor. It is believed that the operators of the same late-supported unit are carried out by both attacks. An recognized operative, Junaid Ahmed Bhatt was ineffective in an encounter in December 2024. Another suspect, now identified as Hashim Musa, allegedly participated in both attacks.
Left: Adil Ahmed Thokar, Right: Junaid Ahmed Bhatt
According to sources, the terrorist reached Pahalgam around 15 April a week before the attack. Detailed reconnaissance was performed at four possible sites including Besaran Valley, Aru Valley, Betab Valley and a local amusement park. Finally, Basaron was chosen at that time due to a relatively thin security appearance.
The attackers spent at least two days, surveying tourist movements in Basaron, with the help of four major OGWs.
