NAVVNEET DUBEY
Jammu: The members of the White Collar Terror Module, including terrorist Dr. Umar Nabi, who terrorized the entire nation with a suicide terror attack on November 10, 2025, near the Red Fort in Delhi used a complex and sophisticated web of tricks based on SIM cloning, ghost SIM cards and encrypted apps to erase any trace of themselves on the internet media.
Most members of the White Terror module were using two to three phones or two to three SIM cards. Doctors and some other members were using one phone and one SIM card for contacting their relatives and acquaintances and for general use.
13 people were killed and a dozen others were injured in the gruesome terror attack that rocked the national capital.
The National Investigation Agency (NIA) probe revealed that the accused doctors coordinated with Pakistan-based Jaish-e-Mohammed (JeM) handlers through a ghost SIM network, enabling encrypted communications for two years of planning.
As per media report investigators suspecting a premature detonation from stockpiled ammonium nitrate-fuel oil explosives meant for multi-city strikes, with prime suspect Dr Umar-Un-Nabi assembling the device near the site.
Several reports detailed the use of Threema app on disposable SIMs for reconnaissance and logistics, masking digital footprints.
Sources involved in the investigation of the case said that this sensational information has come to light on the basis of data analysis of phones and SIM cards recovered from the members of the White Collar Terror Module arrested so far and the suspicious elements associated with them.
The source said that terrorists phones and SIM card were found to be free of any suspicious activity, and are completely clean and was registered in his own name. However, they were using another phone to contact his handlers across the border, which even with their close ones were not aware of.
The module employed spy-like methods, including Threema‘s end-to-end encryption on private servers and “dead-drop” email drafts for handler directives, avoiding metadata trails.
Dr Umar Un Nabi, Dr Muzammil Ahmad Ganaie, Dr Adeel Majeed Rather, and Dr Shaheen Shahid have been tied to Faridabad’s Al-Falah University and they switched off devices post-arrests to sever links.
NIA arrested an eighth accused, Bilal for harbouring Dr Umar and destroying evidence. Forensic teams recovered 40 samples including live cartridges and dual explosives from the Hyundai i20 blast site, with diaries from Dr Muzammil’s room showing coded “operation” entries.
