November 18, 2025
NEW DELHI – Investigators looking into the terror module linked to the November 10 Red Fort blast have uncovered what appears to be a tightly organised network operating through encrypted chat groups, discreet financial channels, and a steady flow of weapons, officials familiar with the probe said on Monday.
They believe the group was coordinated by Dr Umar, identified as the man who drove the explosive-laden Hyundai i20 that blew up near the historic monument, killing 13 people.
Encrypted chat group allegedly used for internal coordination
Sources said Umar had set up a Signal group nearly three months ago, choosing a name written in special characters to avoid easy detection. He reportedly added four others, Muzammil, Adeel, Muzaffar and Irfan, to the group, which investigators suspect served as the core communication channel for planning and updates.
The probe received a significant push after police found a Krinkov rifle and a pistol in the car of Dr Shaheen, one of the accused. Officials now believe that Umar had sourced the weapons earlier and handed them to Irfan sometime in 2024. Dr Shaheen had allegedly seen the same weapons during a visit to Irfan’s room with Dr Muzammil. She is also suspected of having contributed the highest amount of money to the module’s activities.
Investigators say the group functioned with clearly defined roles. The three doctors, particularly Muzammil, were expected to arrange funds, while Irfan alias Mufti was allegedly responsible for bringing Kashmiri youths into the fold. Among those he is believed to have recruited are Arif Nisar Dar alias Sahil and Yasir ul Ashraf, both of whom have since been arrested.
Officials have also logged several instances of weapons being moved or handled. In October 2023, Dr Adeel and Umar reportedly visited Irfan at Masjid Ali. They were carrying a rifle in a bag and left after cleaning the barrel.
A month later, Adeel is said to have turned up at Irfan’s residence again with a rifle, after which Muzammil and Dr Shaheen also joined. The weapon was left with Irfan that night, and Adeel returned the following day to pick it up.
According to investigators, these details point to a structured and well-coordinated operation, one that relied on encrypted apps, trusted personal networks and a division of tasks involving financing, recruitment and the quiet movement of arms.

