Pahalgam Terror Attack- In a chilling revelation, the National Investigation Agency (NIA) has uncovered what it describes as a well-orchestrated terror conspiracy in the April 22 attack in Baisaran Valley, Pahalgam, that claimed the lives of 26 people, most of them tourists. According to sources familiar with the NIA’s preliminary findings, the attack was the result of an operational alliance between Pakistan’s Inter-Services Intelligence (ISI) and the Lashkar-e-Taiba (LeT) terror outfit.
Pakistani Operatives at the Helm
The central perpetrators of the deadly assault have been identified as Hashmi Musa (alias Suleman) and Ali Bhai (alias Talha Bhai)—both confirmed Pakistani nationals. Intelligence and interrogation data suggest that the plot was conceived and greenlit at Lashkar’s Pakistan-based headquarters under the supervision of senior ISI officers.
The attackers, who are believed to have infiltrated Indian territory weeks before the assault, maintained constant communication with handlers across the border. These handlers provided detailed directives, including the timing, logistics, and nature of the execution, ensuring a high-impact operation targeting civilians.
OGW Support and Local Coordination
Upon entering India, the terrorists were reportedly supported by a network of Over Ground Workers (OGWs). These individuals facilitated safe movement and accommodation, provided local intelligence, and helped the attackers conduct reconnaissance of potential targets.
Investigators have confirmed that reconnaissance missions were conducted at multiple locations, including Aru Valley, Betaab Valley, a local amusement park, and ultimately Baisaran Valley, which was chosen due to low security visibility at the time.
3D Mapping and Digital Forensics at the Core of Investigation
The NIA has used advanced technological tools to reconstruct the attack. A 3D mapping of the attack site was undertaken, while mobile tower dump data from the vicinity was extracted to trace movement patterns and identify potential collaborators.
Evidence gathered from the crime scene includes over 40 bullet cartridges, now undergoing ballistic and chemical analysis. Importantly, investigators also picked up satellite phone activity in the area—an unusual indicator in civilian zones. At least three satellite phones were active in and around Pahalgam in the days leading up to the attack, with signals from two of them already traced for deeper scrutiny.
Widespread Detentions and Raids Across Kashmir
As part of the sweeping investigation, over 2,800 individuals have been questioned, with more than 150 currently in custody. These include suspected OGWs and individuals linked to banned organisations such as Jamaat-e-Islami and factions of the Hurriyat Conference.
Multiple raids have been carried out across Kashmir, including in Kupwara, Pulwama, Sopore, Anantnag, and Baramulla. Among the high-profile locations searched was the Srinagar residence of Mushtaq Ahmad Zargar, alias Latrum, a key conspirator in the 1999 IC-814 hijacking, now believed to be operating from Pakistan. His home had previously been attached under the Unlawful Activities (Prevention) Act (UAPA) in 2023.
Eyewitness Accounts and Propaganda Concerns
Dozens of eyewitnesses, including pony operators, food vendors, and the families of victims, have offered testimonies that are helping investigators reconstruct the sequence of events. Several witnesses claim the attackers appeared to be wearing body-mounted cameras, likely intended to capture the assault for propaganda purposes—a method seen in previous terror attacks for psychological impact and recruitment drives.
The NIA has retrieved CCTV footage from transit zones and public locations in and around Pahalgam. Data from security checkpoints in adjacent areas is being analysed to identify any anomalies in movement or patterns that could aid further arrests.
Linked to Previous Sonamarg Attack
The Pahalgam attack has now been linked to a prior strike in 2024 near the Z-Morh tunnel in Sonamarg, where seven people, including six migrant labourers and a doctor, were killed. Both incidents are believed to have been orchestrated by the same LeT-backed module.
One operative, Junaid Ahmed Bhatt, who played a role in the Sonamarg attack, was neutralised in an encounter in December 2024. His associate, Hashmi Musa, who resurfaced in the Pahalgam attack, has now been confirmed as a repeat offender.
Sources suggest the terrorists arrived in Pahalgam around April 15, conducting multi-day surveillance with help from four local OGWs, who are now in custody. The attackers blended with tourist traffic while gathering intelligence on crowd movements and security deployments.
What Lies Ahead
The NIA continues its investigation into what officials are calling one of the most meticulously planned attacks in Kashmir in recent years. The agency is now focusing on breaking the OGW chain, neutralising cross-border communication networks, and identifying new operational bases used by LeT and ISI-backed groups.
With increasing use of technology, satellite communication, and propaganda techniques, the attack marks a worrying evolution in the methods adopted by terror networks in the region.
