Foreign intelligence's activities in India discussion thread


How Chinese Cloud Helped Pakistan's ISI Spy On Indian Army Movements Using CCTV​

4 Min read
Author : Divya Danu
Published : Apr 13 2026, 09:18 PM IST

11 Arrested After Delhi Police Found Spy Network Using CCTV Near Military Areas

Delhi Police has uncovered an alleged espionage network using solar-powered CCTV cameras to track military movements near sensitive locations. Linked to Pak's ISI and Babbar Khalsa International, the network sent footage via SIM-based systems. 11 people have been arrested. Authorities are reviewing CCTV systems, especially those with foreign tech.​


A major operation by the Delhi Police has uncovered an alleged espionage and terror network that used CCTV cameras to track sensitive military movements. The cameras, sources said, were powered by a Chinese system called EseeCloud. Security agencies believe this network was part of a larger plan linked to Pakistan's intelligence agency, Inter-Services Intelligence (ISI). The aim was to monitor Indian Army and paramilitary movements in key areas.

Where the cameras were placed

Police said the cameras were installed in areas with regular movement of security forces. These included Kapurthala, Jalandhar, Pathankot, Patiala and Moga in Punjab.

Other locations included Ambala in Haryana, Kathua in Jammu and Kashmir, and Bikaner and Alwar in Rajasthan. These places are considered sensitive because they are close to borders, have army camps, or are used for troop movement.
 

Over 800 terrorists at 70+ launch pads in PoK waiting to enter India: Intel report​

Story by Subhrajit Roy
• 4d •
4 min read

Recent intelligence reports indicate a sharp surge in the presence of terrorists at launch pads situated along the Line of Control (LoC) in Pakistan-occupied Kashmir (PoK). According to estimates, more than 800 terrorists, with some intelligence inputs suggesting a potential figure of 1,000 to 1,500 infiltrators, are currently stationed at approximately 70 to 72 reactivated launch pads.

This represents a significant increase compared to figures recorded in late 2025,
when intelligence agencies reported the presence of approximately 100 to 120 terrorists across six to seven launch pads.


The new report specifically mentions the Lashkar-e-Taiba (LeT) and Jaish-e-Mohammed (JeM). These Pakistan-based organizations have consistently received support from the ISI for operations targeting Jammu and Kashmir.


This assessment is further corroborated by a March 2026 report from the US Congressional Research Service, which identifies Pakistan as a persistent hub for terrorist groups targeting India.


These figures follow India's 'Operation Sindoor', conducted in May 2025, during which nine terrorist bases in Pakistan and PoK were struck in retaliation for the Pahalgam attack of April 22, 2025. In the aftermath of the operation, Pakistan initially dismantled or dispersed its bases; this included relocating some launch pads to interior regions, such as Khyber Pakhtunkhwa. However, by late 2025 and early 2026, the process of reactivating these bases had begun, initially involving small groups, but now occurring on a significantly larger scale, as highlighted in the report
 


J&K govt takes over 58 more schools linked to banned Jamaat-e-Islami, citing security concerns​

Story by Anamika Parihar
• 2d •
3 min read

Jammu & Kashmir government continuing the process of taking direct control of educational institutions took over 58 schools affiliated with Jamaat-e-Islami (JeI) and Falah-e-Aam Trust (FAT).


Jammu and Kashmir administration ordered the takeover of management for 58 schools linked to the banned Jamaat-e-Islami (JeI) and its educational wing, the Falah-e-Aam Trust (FAT). This move follows a larger action in August 2025 targeting 215 schools.

Authorities said The decision follows adverse reports by intelligence agencies, which indicated that these schools had direct or indirect links with banned organizations. The managing committees of these schools had their validity expired and were reported negatively by intelligence agencies. Deputy Commissioners concern is tasked with replacing current management with new, vetted committees. The authorities today since morning took over 58 schools affiliated directly or indirectly with Jamaat-e-Islami (JeI) and its educational wing, the Falah-e-Aam Trust (FAT) in 10 districts of Kashmir.


While the government maintains this ensures educational stability, local political leaders have criticized the intervention, raising concerns about its impact.


The move is sanctioned under The Jammu and Kashmir School Education Rules 2010 (SRO 123 of 2010), SRO 292 of 2018, and SO 177 of 2022.
 
  • Like
Reactions: babablacksheep

Over 800 terrorists at 70+ launch pads in PoK waiting to enter India: Intel report​

Story by Subhrajit Roy
• 4d •
4 min read

Recent intelligence reports indicate a sharp surge in the presence of terrorists at launch pads situated along the Line of Control (LoC) in Pakistan-occupied Kashmir (PoK). According to estimates, more than 800 terrorists, with some intelligence inputs suggesting a potential figure of 1,000 to 1,500 infiltrators, are currently stationed at approximately 70 to 72 reactivated launch pads.

This represents a significant increase compared to figures recorded in late 2025,
when intelligence agencies reported the presence of approximately 100 to 120 terrorists across six to seven launch pads.


The new report specifically mentions the Lashkar-e-Taiba (LeT) and Jaish-e-Mohammed (JeM). These Pakistan-based organizations have consistently received support from the ISI for operations targeting Jammu and Kashmir.


This assessment is further corroborated by a March 2026 report from the US Congressional Research Service, which identifies Pakistan as a persistent hub for terrorist groups targeting India.


These figures follow India's 'Operation Sindoor', conducted in May 2025, during which nine terrorist bases in Pakistan and PoK were struck in retaliation for the Pahalgam attack of April 22, 2025. In the aftermath of the operation, Pakistan initially dismantled or dispersed its bases; this included relocating some launch pads to interior regions, such as Khyber Pakhtunkhwa. However, by late 2025 and early 2026, the process of reactivating these bases had begun, initially involving small groups, but now occurring on a significantly larger scale, as highlighted in the report
Looks like there might be a few surgical strikes soon at this rate.
 
Looks like there might be a few surgical strikes soon at this rate.

A land of 20 crore people with an extremist mind set majority of them working against India demands multi directional hard approach, independant of who the PM is in India. Because they will never be short of man power.
 

UP emerges as a key target in Pakistan-linked digital radicalisation network​


Story by Rohit Kumar Singh, LUCKNOW
• 1h •
3 min read

Uttar Pradesh has emerged as a major target in Pakistan’s evolving digital radicalisation and sleeper-cell recruitment strategy, with recent ATS arrests and multi-district investigations exposing an expanding network allegedly operated through social media by Pakistan-based gangster Shahzad Bhatti and handlers linked to Inter-Services Intelligence (ISI), senior central and state security agencies said.

Security agencies say the network reflects a new-age “hybrid threat” model in which online radicalisation, espionage, organised crime and covert anti-India activities are increasingly merged through decentralised and civilian-embedded modules that are harder to detect.

The revelations follow one of the largest coordinated crackdowns in recent years, during which central agencies and anti-terror units conducted simultaneous raids across Uttar Pradesh, Delhi, Haryana, Punjab, Rajasthan and Madhya Pradesh earlier this week. Around 300 suspects were detained for questioning and digital scrutiny.

Investigators believe Bhatti functioned as a proxy digital recruiter who used Instagram, YouTube and encrypted communication platforms to identify and influence vulnerable Indian youths, particularly in northern states.

According to officials, Bhatti projected a carefully curated image of wealth and influence through videos featuring luxury vehicles, foreign travel, lavish villas, expensive resorts and bundles of cash. Agencies suspect the content was designed to attract impressionable youths seeking money, identity and social status before gradually exposing them to extremist narratives and covert operational tasks.

Officials said Uttar Pradesh has become increasingly vulnerable because of its large youth population, widespread smartphone access and the rapid spread of social media influence networks.

In Rampur district, agencies are probing links connected to local youth, Ghayas Pasha, who allegedly came in contact with Bhatti through social media platforms. Investigators suspect several other youths from the district, mostly aged between 20 and 25 years, may also have interacted with the network online.

The concern deepened after the UP ATS recently arrested two youths, Hizbullah Ali Khan alias Tushar Chauhan from Meerut and Sameer Khan from Delhi’s Seemapuri, both around 20 years old and allegedly in the early stages of online indoctrination.

A senior ATS officer said the two were not hardened operatives but vulnerable recruits undergoing systematic digital grooming. Their alleged handlers, identified as Shahzad Bhatti and his associate Aabid Jatt, reportedly used Instagram and similar platforms to establish trust before introducing extremist content and operational guidance.

UP director general of police (DGP) Rajeev Krishna said recent cases across the state and NCR point towards an emerging “hybrid threat” pattern where social media radicalisation, criminal activity and espionage are orchestrated by foreign handlers.

“These are not isolated cases. Youth are first drawn in through minor criminal activities or financial inducements, and then gradually pushed towards more serious anti-national acts,” Krishna said.
 
Ajit Doval, in his 2013 paper, wrote that in 2009, the University of Toronto’s Information Warfare Monitor Citizen published a “Ghost Net” report detailing intrusion by Chinese hackers into the network system of Indian Security Establishment and offices of Dalai Lama’s secretariat. The report was expectedly rejected by Beijing.

Although the Indian counterintelligence closely tracks Chinese activities, the reduction of Pakistan to a client state of the Middle Kingdom would have serious security repercussions for the sub-continent as Islamabad could become an important source of intelligence collection against India and the sub-continent with linguistic and cultural similarities. The appointment of officials belonging Chinese United Front Work Department, which reports directly to the central committee of the Chinese Communist Party, as ambassadors to the Indian sub-continent presents a bigger security challenge. These ambassadors are ideologically committed workers of the Chinese Communist Party as opposed to Indian diplomats whose views on India and the world are not dictated by the political party in power.

Given the humongous financial resources with these embassies, Indian security agencies are already fighting a downhill battle against Beijing’s influence.

It is quite evident that the two iron brothers will exploit all Indian fault-lines, right from Kashmir, north-east insurgencies, Maoists to the economic disparity and religious fundamentalism, to destabilise India.


Updated on: Dec 16, 2020 1:04 PM IST
Hindustan Times, New Delhi | By Shishir Gupta

 
Post Op Sindoor Pakistan's rouge establishment has been desperately eyeing Delhi.

The ATS had also conducted searches at multiple locations across Maharashtra, including Mumbai, Thane, Kurla, Bandra, Jogeshwari, Navi Mumbai, Mira Road, Bhayandar, Sangli, Satara and Chhatrapati Sambhajinagar, in connection with the probe. The searches targeted individuals who had allegedly remained in contact with Bhatti through social media.

The state-wide operation comes days after the Delhi Police Special Cell busted two alleged modules linked to Pakistan-based alleged ISI handler Shahzad Bhatti and arrested six suspected operatives from Delhi and Punjab. (ANI)
 

How A US-Based NGO Used Academic Sponsorships To Train And Embed Local Recruits In India​



Reported By :
Last Updated:June 17, 2026, 11:52 IST

The ED is probing whether The Timothy Initiative, a US-based NGO, used academic sponsorships to identify, train and embed locally rooted recruits for long-term operations in India.


A major Enforcement Directorate investigation into an alleged cross-border foreign-funding network has now turned its attention to academic sponsorships that officials suspect were used to identify, train and cultivate individuals for deployment in sensitive parts of India.

According to documents and investigation details accessed exclusively by CNN-News18, the probe centres on US-based organisation The Timothy Initiative, or TTI, and an alleged network of India-based operatives and foreign principals accused of moving overseas funds into India while bypassing prescribed banking and regulatory channels.

As part of the investigation, CNN-News18 has accessed a proposal signed by Praveen Christopher, identified in the document as Director-Advancement, seeking complete financial support for an applicant named Ashaf Parmar.

The document indicates that formal academic channels were used to seek funding for selected candidates. The South Asia Institute of Advanced Christian Studies, or SAIACS, in Bengaluru is among the institutions referred to in the sponsorship documentation.

The financial assistance was sought for advanced theological education, including a Master of Divinity degree.

Top ED sources said the sponsorship model appeared to focus on individuals with roots in regions such as Gujarat and other parts of northern India. Investigators suspect the objective was to develop a locally rooted and highly trained leadership tier with knowledge of regional languages, customs and social structures.

The documents also record the candidate’s personal and educational history, tracing his journey from a rural or vulnerable background to higher education.

According to investigators, such detailed profiling could have helped the organisation identify candidates capable of returning to their native regions and building long-term local networks.

Link To Alleged Foreign Debit Card Network

The educational sponsorships are being examined as part of a wider investigation into an alleged illicit financial system operated by TTI’s India-based functionaries, including Operations Head Jonathan S Rajan and Finance Head Ajit Verghese Mathai.

The ED alleges that the organisation used a large number of foreign debit cards to channel and withdraw funds in India without routing the money through conventional banking and regulatory mechanisms.

Investigators claim debit cards issued by Truist Bank in the United States were distributed in India to people who were not the actual account holders. More than 1,000 such cards are alleged to have been circulated across the country since 2019.

According to the agency’s findings, foreign funds worth approximately Rs 92.55 crore, or USD 9.99 million, were utilised through the mechanism between November 2025 and April 2026.

Separately, ATM withdrawals made through the alleged network between January 2024 and March 2026 are estimated at nearly Rs 44 crore.

‘Santosh Kumar’ Cards And Alleged KYC Evasion

A key element of the probe concerns what investigators describe as deliberate attempts to obscure the identities of those using the cards.

Officials allege that, on Mathai’s instructions, at least 23 debit cards were printed under the generic Indian name “Santosh Kumar". This allegedly replaced an earlier system in which regional identification codes were used.

The ED suspects that the change was intended to conceal the identities of the end users and evade Know Your Customer (KYC) safeguards and scrutiny by financial institutions.

The agency has described the arrangement as a “well-coordinated criminal conspiracy" aimed at facilitating the direct withdrawal of foreign-source funds from Indian ATMs while bypassing prescribed financial channels.

The investigation gathered momentum after Micah Mark, identified by the agency as a key financial operative, was intercepted at Kempegowda International Airport in Bengaluru.

He was allegedly found carrying 24 Truist Bank debit cards.

Subsequent searches at Mathai’s premises reportedly resulted in the recovery of Rs 37 lakh in cash, largely in Rs 500 notes, as well as a corporate debit card bearing the name “Ajit Mathai – The Timothy Initiative".

Why Academic Sponsorships Are Under Scrutiny

Top ED sources said that financing advanced degrees for people belonging to specific regions could enable an organisation to create an educated, indigenous leadership structure.

Unlike outsiders or temporary field workers, locally recruited graduates would have the language skills, cultural familiarity and community connections needed to operate without immediately attracting suspicion, sources alleged.

Investigators are examining whether sponsored graduates were expected to return to their home regions and establish permanent preaching, recruitment and training networks.


According to sources, such individuals could become trainers themselves, allowing the network to expand through a decentralised and self-sustaining structure rather than relying continuously on personnel from outside the region.

Officials also allege that the organisation’s outreach focused on socio-economically vulnerable and marginalised communities through structured preaching and ideological training programmes.

The ED is probing claims that sections of this outreach may have been used for radicalisation and to push individuals towards left-wing extremist ideologies.

The agency is particularly examining transactions in Chhattisgarh, where approximately Rs 6.34 crore in alleged high-frequency ATM withdrawals have been flagged in the Bastar and Dhamtari regions.

Bastar has historically been affected by Left-Wing Extremist violence, prompting investigators to examine whether the flow of foreign funds, local recruitment and ideological outreach were interconnected.

Sources said the alleged use of academic sponsorships also made the network more difficult to detect, as the recruitment and training of personnel could be presented as legitimate educational assistance.
By decentralising its personnel network and cultivating graduates with deep local roots, the organisation could allegedly create a permanent operational structure that was harder for intelligence and enforcement agencies to trace.

The investigation remains ongoing. CNN-News18 has not independently established that the educational institutions or all the individuals named in the documents knowingly participated in any illegal activity. Their responses will be incorporated when received.