Ranchi RSS Attack Suspects Linked to Pakistan-Backed Terror Group TTH

No injuries reported in the petrol bomb attack, though one suspect sustained a gunshot wound during a police encounter escape attempt.
They filmed their own attack and sent it back as proof
The accused recorded the petrol bomb attack on their phones and forwarded the footage to overseas handlers to demonstrate compliance with instructions.

In the late hours of June 16, two petrol bombs struck an RSS office in Ranchi's Chutia neighborhood, and what appeared at first to be a local act of violence has since unraveled into something far more deliberate — a coordinated operation allegedly orchestrated from abroad, linking three young Indian men to a Pakistan-backed terror network. The accused, all in their early twenties, are suspected of acting as local foot soldiers for Tehreek-e-Taliban Hindustan, receiving instructions through encrypted apps, filming their own attack as proof of execution, and sending that footage to handlers overseas. This case raises a question that extends well beyond Ranchi: how many others, radicalized through a screen and a message, are already waiting for their instructions.

  • Two petrol bombs hit an RSS office just before midnight, setting the building alight — and within hours, three young men were in custody, their phones holding evidence of something far more organized than a spontaneous act.
  • Investigators allege all three suspects were in active contact with overseas handlers via WhatsApp and Botim, receiving step-by-step guidance on surveillance, target selection, and bomb assembly through instructional videos.
  • Two of the accused had traveled to Dubai, where a Pakistani national named Shahbaz Rana allegedly radicalized them and recruited them into TTH operations — they returned to India with a mission and carried it out.
  • The attack was documented: the accused filmed themselves throwing the bombs and sent the footage abroad as proof of completion, revealing this was less an act of rage and more a test of operational obedience.
  • One suspect bolted from police custody, was pursued to a toll plaza, and was shot and wounded during the chase — a moment that exposed the desperation simmering beneath the surface of this case.
  • Security agencies now fear this is a blueprint — a scalable, low-cost model using radicalized youth, encrypted apps, and minimal resources to strike ideological targets, with raids ongoing to map the full network.

Just before midnight on June 16, two petrol bombs were thrown at the Rashtriya Swayamsevak Sangh office in Ranchi's Chutia neighborhood. One landed near the gate; the other hit the roof. The building caught fire, but no one was injured. Police moved quickly, arresting three men in their early twenties — Saifi Ansari, Aman Ansari, and Sayam Sujan — and what followed was not a simple criminal case but the unraveling of an alleged transnational terror operation.

Investigators say all three suspects were connected to Tehreek-e-Taliban Hindustan, a group believed to be funded by Pakistan's ISI. They maintained regular contact with overseas handlers through WhatsApp and Botim, receiving instructions on how to conduct surveillance, select targets, and assemble petrol bombs — the last of which they reportedly learned through online tutorials. Before the attack, they filmed the RSS premises during reconnaissance. After the attack, they filmed themselves carrying it out and sent the footage abroad as proof of completion.

Two of the three — Saif and Aman Ansari — had traveled to Dubai, where they allegedly came under the influence of a Pakistani national known as Shahbaz Rana or Bhatti, suspected of coordinating anti-India activities. Investigators believe the Dubai trip was where radicalization took hold and the mission was agreed upon. The men returned to India with instructions and executed them.

The case took a volatile turn when Saifi Ansari attempted to flee police custody, slipping away under the pretense of using the bathroom. Officers pursued him toward a toll plaza, and during the chase, he was shot and wounded before being recaptured and taken for medical care.

Security agencies now believe the Ranchi attack may be the first visible move in a broader strategy — a model designed to recruit disaffected young men through social media, radicalize them remotely, and deploy them as low-cost operatives against ideological targets. No advanced training, no significant funding — just encrypted instructions, a bottle of petrol, and a willingness to act. Raids are ongoing across Jharkhand and beyond as investigators work to determine how many others may already be inside the same network.

On the night of June 16, just before midnight, two petrol bombs were thrown at the Rashtriya Swayamsevak Sangh office in Ranchi's Chutia neighborhood. One landed outside the main gate; the other struck the roof. The building caught fire but no one was hurt. Within hours, police arrested three young men: Saifi Ansari, Aman Ansari, and Sayam Sujan, all in their early twenties. What began as a local crime investigation has since revealed something far more deliberate—a coordinated attack orchestrated from overseas, with the accused filming their own handiwork and sending proof back to handlers abroad.

The investigation has uncovered alleged connections between all three suspects and Tehreek-e-Taliban Hindustan, a terror organization believed to be funded by Pakistan's Inter-Services Intelligence agency. According to investigators, the accused maintained regular contact with their handlers using WhatsApp and Botim, a messaging application popular in the Gulf region. The handlers, working from outside India, allegedly provided instructions on reconnaissance, target selection, and how to execute the attack. The accused conducted surveillance of the RSS office beforehand, filming the premises before the operation itself.

Two of the three—Saif Ansari and Aman Ansari—had traveled to Dubai, where they came into contact with a Pakistani national named Shahbaz Rana, also known as Bhatti, who is suspected of involvement in anti-India activities. During their time in the Emirates, investigators believe the two men underwent a process of radicalization and agreed to support TTH operations back in India. They returned home with instructions and a mission. The third suspect, Sayam Sujan, was also drawn into the network through similar channels.

What distinguishes this attack from an act of simple vandalism is the documentation. After hurling the petrol bombs, the accused recorded video footage on their mobile phones. They then sent this footage to their handlers overseas as proof that they had completed the assignment. Forensic examination of the seized phones is ongoing, but the pattern is clear: this was not a spontaneous act but a test of obedience, a demonstration that local recruits could follow orders from abroad. The handlers had even provided instructional videos showing how to assemble petrol bombs, which the accused learned through online tutorials rather than any formal training.

The investigation took a dramatic turn when Saifi Ansari, one of the three arrested men, attempted to escape police custody. While being held at the Kotwali police station, he asked to use the bathroom and bolted. Police pursued him toward the Mandal Toll Plaza area, and during the chase, an encounter occurred in which Saifi was shot and wounded. He was recaptured and taken for medical treatment. The incident underscored the volatility of the case and the desperation of at least one suspect to avoid further questioning.

Security agencies now suspect the Ranchi attack may be the opening move in a larger strategy. The theory is that overseas handlers, working through TTH, are attempting to build a network of local operatives capable of carrying out low-cost, high-impact attacks against ideological and political targets across India. The accused were young, easily radicalized through social media, and willing to act on instructions sent through encrypted messaging apps. They required no advanced training, no significant resources—just a bottle of petrol and a match. The model is scalable and difficult to detect until it is too late.

Central and state security agencies have intensified their investigation, conducting raids across Jharkhand and beyond to identify additional members of the network, trace funding channels, and map the full scope of communication between Indian operatives and their overseas handlers. The three young men arrested in Ranchi may be the visible part of something much larger—a recruitment pipeline that turns disaffected youth into foot soldiers for a Pakistan-backed terror organization. The question now is how many others are already in the network, and how many more are being radicalized through the same channels right now.

The accused filmed the entire petrol bomb attack on their mobile phones and subsequently sent the footage to their handlers as proof of execution.
— Investigators
Security agencies suspect that instructions regarding reconnaissance, target selection and execution of the attack may have been relayed through these communication channels.
— Security officials
A Conversa do Hearth Outra perspectiva sobre a história
Inventor

Why would someone film their own attack and send it to handlers? That seems reckless.

Model

It's not reckless to them—it's proof of loyalty. They're young, they've been isolated through radicalization, and sending that video is how they demonstrate they've done what they were told to do. It's a way of saying: I'm committed, I'm trustworthy, I'm part of this.

Inventor

So the handlers never actually saw them in person?

Model

Not necessarily. Two of them went to Dubai and met a Pakistani national there. That's where the radicalization began. After that, everything moved online—WhatsApp, Botim. It's cheaper, faster, harder to track.

Inventor

How do you radicalize someone in a few weeks in Dubai?

Model

You don't need weeks. You need someone who's already searching for meaning, for belonging, for a cause. The handlers know how to find those people and how to speak to them. They show you videos, they give you a mission, they make you feel part of something larger than yourself.

Inventor

And the petrol bombs—they really just learned that from YouTube?

Model

From instructional videos sent by handlers, yes. Nothing sophisticated. That's actually the scariest part. The barrier to entry is almost zero. You don't need to be trained. You just need to be willing.

Inventor

What happens to the network now?

Model

That's what the agencies are racing to figure out. These three are visible. But how many others are still in contact with handlers? How many more are being recruited right now through the same channels? That's the real investigation.

Quer a matéria completa? Leia o original em Republic World ↗
Fale Conosco FAQ