New Delhi: The investigation into the recent petrol bomb attack on a Rashtriya Swayamsevak Sangh (RSS) office in Ranchi has reportedly uncovered alleged links to a network associated with Pakistan’s Inter-Services Intelligence (ISI)-backed Tehreek-e-Taliban Hindustan (TTH), according to sources cited by ANI.

The development follows the arrest of three accused individuals in connection with the attack. Investigators are now examining possible foreign connections, communication channels and the role of overseas handlers in the planning and execution of the incident.

Officials have stated that the probe remains ongoing and that authorities are working to establish the full extent of the network allegedly linked to the attack.

Arrests lead investigators to alleged foreign links

According to sources, the alleged foreign connection emerged during the interrogation of the three arrested suspects.

Investigators reportedly found evidence suggesting that the accused maintained contact with individuals based outside India through encrypted communication platforms. These findings prompted authorities to explore possible links between the suspects and organisations operating beyond the country’s borders.

The revelations have added a new dimension to the investigation, shifting attention towards potential international connections and the possibility of coordination with overseas operatives.

Law enforcement agencies are continuing to analyse digital evidence and communication records as part of the inquiry.

Encrypted messaging platforms under scrutiny

Officials examining the case have reportedly focused on the use of encrypted communication applications by the accused.

According to sources, the suspects were allegedly in regular contact with handlers through platforms such as WhatsApp and Botim. Investigators believe these applications may have been used to exchange instructions and maintain communication while avoiding conventional monitoring methods.

Botim, a messaging and calling application widely used in the Gulf region, has become a key focus of the investigation due to its alleged use in communications linked to the case.

Authorities are analysing electronic devices and digital records to determine the nature and frequency of the interactions.

Attack footage allegedly shared with handler

Investigators have also reportedly discovered that the accused recorded the petrol bomb attack on their mobile phones.

According to sources, the footage was subsequently shared with an alleged handler after the operation was carried out. Officials are examining the videos and related digital evidence to establish whether the attack was directed or monitored remotely.

The sharing of visual evidence with handlers is being viewed as a potentially significant aspect of the investigation, as it may provide insights into the chain of communication and command.

Authorities have not yet publicly disclosed the full contents of the recovered material.

Dubai connection emerges during probe

The investigation has also revealed a possible Dubai connection involving two of the accused.

According to officials, Saif Ansari and Aman Ansari had travelled to Dubai in the past. During their stay, they allegedly came into contact with an individual identified as Shahbaz Rana, also known as Bhatti, who is described by investigators as a Pakistani national.

Sources claim that investigators suspect the two individuals were exposed to radical influences during their time abroad. Authorities are now examining the nature of their interactions and whether those contacts played a role in the events that followed.

The alleged overseas connection has prompted agencies to expand the scope of the investigation beyond domestic networks.

Alleged TTH link being investigated

Sources further indicated that investigators are examining possible links between the accused and Tehreek-e-Taliban Hindustan (TTH), an organisation that authorities claim is backed by elements associated with Pakistan’s ISI.

Officials suspect that the accused may have agreed to participate in activities aligned with the group’s alleged anti-India agenda. However, investigators are still working to verify the extent of any organisational involvement and establish whether there was direct operational support.

At this stage, authorities have not publicly released detailed evidence supporting the alleged links, and the investigation remains in progress.

The findings are expected to undergo further scrutiny as agencies gather additional intelligence and forensic evidence.

Investigation continues into wider network

Security agencies are continuing to probe the broader network that may have been involved in the Ranchi attack.

Investigators are examining financial transactions, travel histories, communication records and digital footprints to identify any additional individuals connected to the case.

Officials have indicated that the inquiry remains active and that further arrests or developments cannot be ruled out as new evidence emerges.

The case is likely to attract significant attention given the seriousness of the allegations and the reported cross-border dimensions being explored by investigators.

Authorities have emphasised that the investigation is ongoing and that conclusions regarding the full scope of the alleged network will depend on the evidence gathered during the course of the probe.