How Intelligence agencies used Deep Tech to trace bomb threat emails to schools in Delhi and Ahmedabad to Pakistan

Indian intelligence agencies successfully exposed a hoax bomb threat campaign targeting schools in Delhi and Ahmedabad. The culprit, traced to Faislabad, Pakistan, is suspected to be an agent of Pakistan's ISI intelligence agency.
Police believe the emails aimed to create mass panic. The Delhi FIR alleges the threats were intended to "disturb public peace" through mass panic.In Ahmedabad, the emails arrived just before the Lok Sabha elections, potentially aiming to disrupt the polls.
Deep Tech and Deception
The intelligence agency employed advanced infiltration techniques and a social engineering tactic known as a "honeytrap" to identify the perpetrator. Investigators discovered the emails originated from mail.ru addresses linked to a chat platform owned by a Russian firm.
Significantly, Russian intelligence reportedly shared crucial information that aided the investigation. The findings, including the suspect's location within a Pakistani military cantonment, bolster suspicions of Pakistani involvement, possibly backed by Chinese intelligence. Indian authorities in Delhi and Gujarat have been informed of the initial investigation results.
Emails Raise Red Flags
Both bomb threats exhibited similar characteristics. The Delhi emails, signed with the term "Sawarim" associated with ISIS propaganda, included religious verses. The Ahmedabad emails originated from a "Tauheedl" address, with the sender identifying himself as a "Tauheed Warrior" threatening suicide attacks.
Investigators traced the "tauheedl" address to an account belonging to "Tauheed Liyaqat," linked to another account under the name "Ahmad Javed." Both accounts exhibited activity on gaming platforms.