Red Fort Attack Plotters Used Encrypted Apps Session, Signal, and Telegram
Investigators have confirmed that the terrorists behind the Delhi car blast near the Red Fort used a combination of encrypted messaging apps—Session, Signal, and Telegram—to coordinate the attack. The primary suspect, Dr Umar Nabi, and his three associates, linked to Jaish-e-Muhammed and Ansar Ghazwat-ul-Hind, finalized their plans on the more secure platforms after initial contact on Telegram.
Key Takeaways
- Terrorists used Session, Signal, and Telegram to plan the Red Fort blast.
- The group met a handler, “Ukasa,” in Ankara, Turkey, in 2022.
- Session app’s privacy features make it difficult for authorities to trace communications.
How the Terrorist Communication Unfolded
Dr Umar Nabi and his associates travelled to Turkey in 2022, where they met their handler, codenamed “Ukasa,” in Ankara. Nabi spent two weeks there. While initial communications began on Telegram, the group later shifted their coordination to the more secure Signal and Session apps to finalize the details of the Red Fort attack, evading detection.
What is the Session App?
Session is an end-to-end encrypted messaging application built on a decentralized network. It is designed and operated by privacy experts, focusing on maximum security and anonymity for its users, making it a tool of choice for those seeking untraceable communication.
Key Features of the Session App
The following features of the Session app contribute to its reputation as a secure, and in this context, dangerous tool for covert planning:
- No Personal Information Required: Creating an account does not require a phone number or email. Users are identified only by a randomly generated Session ID.
- Decentralised Network: The app uses a blockchain-based, decentralized network with onion routing. Messages pass through multiple encrypted relay nodes, hiding their origin and destination. There are no central servers to shut down.
- Complete Encryption: All messages have end-to-end encryption, and no metadata is stored or accessible, preventing message tracing.
- Local Data Storage: Messages are stored solely on the user’s device with no cloud backup or server-side retention, giving users full data control.
- Privacy-Focused Communication: Session offers basic features like messaging, group chats, file sharing, and voice calls, prioritizing privacy over additional functionalities.



