In a significant development in the investigation into the Pahalgam terror attack, the National Investigation Agency (NIA) has revealed that the initial sketches released by the Jammu and Kashmir Police were misidentifications based on a separate 2024 shootout. The actual attackers were found to be Pakistani nationals and operatives of Lashkar-e-Taiba (LeT), who were later neutralized by security forces in an operation dubbed Operation Mahadev near Dachigam National Park.

Background of the Attack

On April 22, 2025, a brutal terrorist attack occurred at Baisaran meadow in Pahalgam, Jammu and Kashmir. A total of 26 individuals, primarily tourists, were gunned down by heavily armed militants. The Indian security establishment immediately launched Operation Sindoor to dismantle the Pakistan-backed terror infrastructure. This operation later transitioned into Operation Mahadev, which resulted in the neutralization of the main perpetrators.

Initial Sketches Proven Wrong

According to the latest report released by the NIA, the J&K Police sketches initially identified Hashim Musa, Ali Bhai alias Talha, and Adil Hussain Thoker as suspects. However, post-encounter analysis confirmed these sketches were based on a photograph found on a phone recovered from an unrelated incident in December 2024. The phone had no connection to the April 22 attack.

This misidentification delayed aspects of the investigation but was corrected through digital, forensic, and testimonial evidence collected during and after the 28 July encounter.

Operation Mahadev: Real Culprits Identified and Killed

On July 28, 2025, elite para commandos from the Indian Army engaged in a high-stakes encounter in the Harwan-Dachigam forest region, killing three top LeT commanders:

• Suleman Shah alias Faizal Jatt: A++ LeT commander, identified as the mastermind and lead shooter in the Pahalgam attack.

• Abu Hamza alias Afghan: An A-grade commander, served as the second gunman.

• Yasir alias Jibran: Also an A-grade commander, was the third gunman and provided rear security.

Conclusive Evidence Linking to Pakistan

The post-encounter forensic findings were instrumental in identifying and linking the attackers to Pakistan. Key evidence includes:

• Pakistani Voter ID cards: Recovered from Suleman Shah and Abu Hamza, issued by the Election Commission of Pakistan, corresponding to voter rolls in Lahore (NA-125) and Gujranwala (NA-79).

• NADRA-verified biometric data: A micro-SD chip recovered from a damaged sat-phone contained biometric records of all three attackers, confirming their identities and addresses in Changa Manga (Kasur district) and Koiyan village near Rawalakot, PoK.

• Pakistan-made chocolates: Wrappers from Candyland and ChocoMax, both manufactured in Karachi, were found with the attackers. Lot numbers traced the consignment to Muzaffarabad, shipped in May 2024.

Timeline of Infiltration and Attack

According to Indian intelligence agencies, the attackers crossed into India through the LoC near Gurez in May 2022. They remained in hiding until the attack. The reconstructed timeline is as follows:

Forensic Evidence Secured

The technical and forensic teams deployed after the attack confirmed the following:

• Ballistics: Shell casings recovered at Baisaran matched the three AK-103 rifles found during the encounter.

• DNA testing: Mitochondrial DNA profiles from a bloodied shirt at the crime scene matched the bodies of the three attackers.

• Digital evidence: A Huawei satellite phone (IMEI 86761204-XXXXXX) was actively pinging the Inmarsat-4 F1 satellite from the Harwan forest region until July 25.

Command and Control from Pakistan

Indian agencies also uncovered command links to senior LeT handlers:

• Sajid Saifullah Jatt, South Kashmir LeT operations head, was identified as the remote handler. Voice samples retrieved from the sat-phone matched intercepted calls from previous years.

• Rizwan Anees, LeT chief in Rawalakot, visited the families of the attackers on July 29 to conduct Ghaibana Namaz (funeral prayers). Footage from that event was obtained and is now included in India’s dossier submitted to international partners.

No Local Participation Confirmed

Importantly, security agencies confirmed that no local Kashmiri individual participated in the actual shooting. However, two locals — Parvaiz and Bashir Ahmad Jothar — were arrested for providing shelter and logistical support to the infiltrators on the eve of the attack.

Political and Strategic Implications

The Indian government, in coordination with international allies, is preparing a detailed dossier containing all recovered evidence, digital trails, and Pakistani documentation to mount diplomatic pressure on Pakistan. The attack has reignited calls for counter-terrorism sanctions and possible inclusion of LeT in renewed FATF deliberations.

The clarification by NIA has not only exonerated wrongly identified suspects but also highlighted the organized infiltration infrastructure operated by LeT with state support from across the border. The discovery of NADRA-verified IDs and military-grade encrypted communications suggests direct involvement of state-backed agencies.

The Upcoming IPOs in this week and coming weeks are ConnPlex Cinemas, ALL Time Plastics, JSW Cement, Sawaliya Foods Products, ANB Metal Cast, Highway Infrastructure.

The Current active IPO are Parth Electricals & Engineering, Jyoti Global Plast, Essex Marine, Aaradhya Disposal Industries, BLT Logistics, Bhadora Industries, Flysbs Aviation, Cash Ur Drive Marketing, Renol Polychem.

Start your Stock Market Journey and Apply in IPO by Opening Free Demat Account in Choice Broking FinX.

Join our Trading with CA Abhay Telegram Channel for regular Stock Market Trading and Investment Calls by CA Abhay Varn - SEBI Registered Research Analyst.