Pahalgam Terror Attack: NIA Probe Exposes Lashkar-ISI Nexus, Unveils 3D Mapping Insights

On April 22, 2025, a devastating terrorist attack shook the serene Baisaran meadow, known as “Mini Switzerland,” near Pahalgam in Jammu and Kashmir, claiming the lives of 26 civilians, predominantly tourists, and injuring several others. The National Investigation Agency (NIA), India’s premier counter-terrorism agency, has since taken over the investigation, uncovering a chilling nexus between Pakistan’s Inter-Services Intelligence (ISI), the Pakistan Army, and the banned terrorist outfit Lashkar-e-Taiba (LeT), with its proxy, The Resistance Front (TRF), initially claiming responsibility. Utilizing advanced 3D mapping technology, the NIA has reconstructed the crime scene, providing critical insights into the attack’s execution. This article delves into the NIA’s preliminary findings, the Lashkar-ISI nexus, the role of 3D mapping, and the broader implications of the attack.

The Attack: A Calculated Assault

The attack occurred around 2 PM on April 22, 2025, in Baisaran Valley, a picturesque tourist hotspot surrounded by dense pine forests in Anantnag district. Five to seven heavily armed terrorists, equipped with US-made M4 carbines and AK-47s, emerged from the jungle, targeting tourists in a brutal massacre. Eyewitnesses reported that the attackers singled out men, interrogating them about their religion and forcing some to recite Islamic verses before shooting them. Among the 26 victims were 25 Indian nationals and one Nepali citizen, Sudip Neupane, marking this as one of the deadliest civilian attacks in the region since the 2008 Mumbai attacks. The Resistance Front (TRF), a shadow group of LeT, claimed responsibility, citing opposition to Indian policies allowing non-Kashmiris to settle in the region, though it later retracted its claim amid widespread condemnation.

The timing of the attack was strategic, coinciding with US Vice President JD Vance’s visit to India and Prime Minister Narendra Modi’s trip to Saudi Arabia, suggesting an intent to internationalize the Kashmir issue. The brutality and precision of the assault, coupled with the use of advanced weaponry, pointed to meticulous planning and external support, prompting the NIA to take over the investigation on April 27, 2025, following orders from the Ministry of Home Affairs’ Counter Terrorism and Counter Radicalisation (CTCR) division.

NIA’s Preliminary Findings: Unraveling the Lashkar-ISI Nexus

Under the supervision of NIA chief Sadanand Date, the agency’s preliminary report, set to be submitted to the Union Home Ministry, has exposed a deep-rooted conspiracy involving LeT, the ISI, and the Pakistan Army. Key findings include:

1. Lashkar-e-Taiba and TRF’s Role

The NIA confirmed that the attack was orchestrated by a hardened LeT module, directly controlled by LeT chief Hafiz Saeed, the mastermind of the 2008 Mumbai attacks, and his deputy, Saifullah Khalid (alias Saifullah Kasuri). The TRF, formed post the 2019 abrogation of Article 370, served as a front to project the attack as a local insurgency, masking LeT’s involvement. The NIA linked this module to prior attacks in Sonamarg, Boota Pathri, and Ganderbal, indicating a pattern of targeting civilians and security forces. The module’s operational commander, Farooq Ahmed (alias Farooq Teedwa), based in Pakistan-Occupied Kashmir (PoK), facilitated the infiltration of Pakistani terrorists into Kashmir.

2. Pakistan’s Direct Involvement

Digital traces and intelligence intercepts point to coordination from safe houses in Muzaffarabad and Karachi, with handlers in PoK providing real-time guidance. The NIA found evidence of ideological, logistical, and tactical support from the ISI and Pakistan Army. A key terrorist, Hashim Musa (alias Suleiman), a former Pakistan Special Service Group (SSG) commando, was “loaned” to LeT for the operation, underscoring the military-terror nexus. Musa, dismissed from service, joined LeT and is suspected in earlier attacks, including one on an Indian Air Force convoy in 2024.

3. Overground Workers (OGWs) and Local Support

The NIA identified over a dozen Kashmiri OGWs who provided critical logistical support, including reconnaissance, safe passage, and provisions. More than 10 OGWs maintained real-time communication with the attackers using encrypted messaging apps, such as “Ultra” phones sourced from Lahore. These devices, capable of transmitting voice, video, and text without Indian mobile networks, are detectable only within a 5-10 km radius when active. The NIA has compiled a list of 14 local terrorists, aged 20-40, affiliated with LeT (eight operatives), Jaish-e-Mohammed (JeM) (three), and Hizbul Mujahideen (three), including Adil Rehman Dentoo, Asif Ahmed Sheikh, and Shahid Ahmed Kutay, who are under scrutiny for aiding the attackers.

4. Advanced Technology and Tactics

The terrorists employed sophisticated technology, including GPS-enabled offline navigation apps like Alpine Quest, used by trekkers, to navigate dense forests. Body cameras recorded the massacre, likely for propaganda, and encrypted satellite phones masked their positions. The NIA noted that the terrorists scouted four other locations—Aru, Betaab, and other valleys—but chose Baisaran due to its lower security presence. Weapons were hidden in Betaab Valley prior to the attack, indicating extensive pre-planning.

5. Narcoterror Funding

The NIA linked the attack to a broader narcoterror plot, with funds from a 2021 heroin seizure at Mundra port (valued at ₹21,000 crore) allegedly funneled to LeT by the ISI. This financial trail underscores Pakistan’s role in sustaining terror operations in Kashmir.

3D Mapping: Revolutionizing the Investigation

A cornerstone of the NIA’s probe is the use of advanced 3D mapping technology to reconstruct the Baisaran meadow crime scene. Deployed on April 30, 2025, this technique, previously used in the 2019 Pulwama attack and the 2024 RG Kar hospital rape case, integrates LiDAR, drones, photogrammetry, satellite imagery, and video footage, including a critical tree-top video recorded by a local photographer. Key aspects include:

• Methodology: A team led by an Inspector General-rank officer, accompanied by forensic experts, conducted the mapping. They recorded statements from over 150 individuals, including pony guides, vendors, zipline operators, and survivors like Rishi Bhatt, whose footage captured images of the terrorists. The 3D model provides a graphic-rich visualization of the attack site, detailing entry and exit points, victim locations, and terrorist movements.
• Utility: The mapping aids in understanding the attack’s duration, the radius of the killings, and the terrorists’ escape routes. It enhances witness questioning without requiring their presence at the site and contextualizes evidence for courtroom presentations. The technique confirmed that three terrorists opened fire while a fourth provided backup, with others possibly hiding nearby.
• Significance: The 3D map has corroborated the testimony of a Lieutenant Colonel holidaying with his family, whose detailed observations provided a precise timeline. It also revealed that the terrorists were present in Baisaran at least 48 hours prior, conducting reconnaissance.

Terrorist Profiles and Ongoing Manhunt

The NIA and Jammu and Kashmir Police have released sketches of three suspects: Pakistani nationals Hashim Musa (alias Suleiman) and Ali Bhai (alias Talha Bhai), and local operative Adil Hussain Thoker from Anantnag. A ₹20 lakh bounty has been announced for each. Musa, a former SSG commando, and Thoker, who received terror training in Pakistan in 2018, are linked to prior attacks in Poonch. The terrorists are believed to be hiding in south Kashmir’s dense forests, possibly in the Pir Panjal range, with provisions and encrypted devices, evading a massive manhunt involving the Indian Army, paramilitary forces, and police.

Pakistan’s Response and India’s Countermeasures

Pakistan has denied involvement, with Defence Minister Khawaja Asif claiming India “staged” the attack and Prime Minister Shehbaz Sharif offering a “neutral” probe involving Russia or China. Security for Hafiz Saeed has been quadrupled, with SSG commandos, drones, and CCTV deployed around his Lahore residence, signaling fears of Indian retaliation. Indian intelligence suggests the attack may have been orchestrated by the ISI to provoke a limited conflict, bolstering the Pakistan Army’s domestic image amid internal threats from the Taliban and Balochistan Liberation Army.

India’s response has been swift and multifaceted:

• Diplomatic Measures: India downgraded ties with Pakistan, expelled Pakistani nationals, suspended the Indus Waters Treaty, closed the Attari Integrated Check Post, and shut airspace to Pakistani flights.
• Security Crackdown: Authorities razed the houses of 10 suspected terrorists, including LeT commander Shahid Ahmad Kutay and Ahsan ul Haq Sheikh, and detained over 1,500 people for questioning. The J&K government closed 48 of 87 tourist destinations in Kashmir following intelligence about potential attacks.
• Military Response: Prime Minister Modi, after cutting short his Saudi Arabia visit, chaired a high-level meeting with Defence Minister Rajnath Singh, National Security Advisor Ajit Doval, and Chief of Defence Staff General Anil Chauhan, authorizing the armed forces to plan a counterattack.

Broader Context and Implications

The Pahalgam attack highlights Pakistan’s recalibrated terror strategy post the 2019 abrogation of Article 370, shifting focus to the less militarized Jammu region south of the Pir Panjal range. Shadow groups like TRF, People’s Anti-Fascist Force (PAFF), and Jammu and Kashmir Ghaznavi Force (JKGF) are used to mask Pakistan’s involvement, projecting terrorism as indigenous. The use of advanced technology, such as encrypted devices and offline navigation, reflects an evolution in terrorist tactics, complicating real-time tracking.

The attack has reignited India-Pakistan tensions, shredding the 2021 ceasefire pact along the Line of Control. India’s suspension of the Indus Waters Treaty, a critical water-sharing agreement, has been labeled an “act of war” by Pakistan, escalating diplomatic stakes. The NIA’s findings, coupled with India’s robust response, signal a new phase of confrontation, with potential cross-border military action looming.

Critical Analysis

While the NIA’s probe confirms the Lashkar-ISI-Pakistan Army nexus, Pakistan’s denials and calls for international probes reflect a strategy to deflect blame and maintain diplomatic leverage, especially amid economic overtures to the US. The reliance on encrypted technology and local OGWs underscores the challenges in countering hybrid warfare. The 3D mapping technology marks a significant advancement in forensic investigation, but apprehending the attackers, likely hiding in rugged terrain, remains a daunting task. The attack’s fallout, including the closure of tourist destinations and heightened security, threatens Kashmir’s fragile tourism revival, with the upcoming Amarnath Yatra on July 3, 2025, under scrutiny.

Conclusion

The Pahalgam terror attack of April 22, 2025, is a stark reminder of the persistent threat of cross-border terrorism in Jammu and Kashmir. The NIA’s probe, leveraging 3D mapping and intelligence, has exposed the intricate Lashkar-ISI-Pakistan Army nexus, revealing a sophisticated terror ecosystem. As India mounts a multi-pronged response, the international community watches closely, with the attack’s repercussions likely to shape regional dynamics. The pursuit of justice for the 26 victims continues, with the NIA’s efforts pivotal in dismantling terror networks and preventing future atrocities.

Sources: Information compiled from reports by Hindustan Times, India Today, NDTV, The Indian Express, Firstpost, and posts on X, accessed as of May 2, 2025.

You Might Also Like:

Israel’s Shocking Stand on Kashmir Attack Exposes Pakistan’s Role

PM Modi Grants Armed Forces Full Operational Freedom in Response to Pahalgam Terror Attack

Mark Zuckerberg Defends Meta’s Shift: Trusts Public Intelligence Over Heavy Content Moderation