Ahmedabad: The Gujarat Anti-Terrorism Squad (ATS) apprehended three suspected ISIS-affiliated operatives on November 9. Fresh revelations during interrogation have exposed a chilling trail of evidence, including an ISIS flag, encrypted digital communication manuals, and CCTV footage documenting clandestine movements. The accused, Dr. Ahmed, allegedly orchestrated plans for a major terror attack in India and conducted reconnaissance at temples in Haridwar. Senior officials revealed that the findings point toward an “organized, covert module” attempting to re-establish ISIS presence in western India.
ISIS Flag and Digital Records Recovered

Following the arrests, ATS teams searched the residence of accused Mohammad Suhel Mohammad Salim Khan, recovering a black ISIS flag, multiple mobile devices, hard drives, and memory cards. This seizure marks a significant breakthrough for the investigation. Sources indicate that Suhel was receiving instructions from foreign handlers and disseminating extremist content across the state, which authorities are currently examining.
Terror Suspect Suhel Sent Package to Azad
Interrogation of another detained suspect, Azad Suleman Sheikh, revealed a startling detail: Suhel allegedly sent him a package before his arrest. While the parcel’s contents remain undisclosed, the investigation team has launched an inquiry into the matter.
Senior officials stated that ATS is investigating whether the package contained materials or literature connected to a broader conspiracy. According to investigators, Dr. Ahmed Mohiyuddin Syed was plotting “a major incident.”
Azad Sheikh Conducted Reconnaissance at Haridwar Temples
Evidence suggests that Azad Sheikh performed reconnaissance at temples in Haridwar. The suspect had long harbored intentions to execute a major attack. His wife reportedly separated from him after learning about his extremist ideology.
Manuals on Digital Privacy Maintenance Discovered
According to ATS, the third accused, Dr. Ahmed Syed, was preparing to execute a large-scale terrorist attack in India. His digital trail reveals deliberate and systematic efforts to evade surveillance. Communications between Dr. Ahmed and his handlers contained literature on maintaining digital privacy, including modules on encrypted communication, IP address concealment, dark web access, and code-based messaging.

Officials reported that Ahmed operated almost exclusively through encrypted channels, frequently switching platforms and identities, and relied on the dark web to communicate with handlers abroad.
Ahmed Spotted Exiting Ahmedabad Hotel
Critical CCTV footage surfaced from Hotel Grand Ambey, located opposite Lucky Hotel in Ahmedabad’s Lal Darwaja area. The footage captured terror suspect Dr. Ahmed Syed leaving the hotel on the evening of November 7, 2025.
Encrypted Communication Trail Exposed
Investigators further claimed that Dr. Ahmed employed coded language in his communications and depended on dark-web channels to maintain contact with his handlers. Digital forensics teams are currently working to retrieve deleted data and examine seized devices.
Three Operatives Arrested from Gandhinagar
Gujarat ATS and central agencies arrested three terror suspects during a joint operation on Sunday (November 9) near Adalaj in Gandhinagar, following reports of suspicious activity. Among those detained was 35-year-old Dr. Ahmed Mohiyuddin Syed, an MBBS graduate from China who maintained contact with overseas radicals linked to ISKP. His two associates, Mohammad Suhel and Azad Saifi, were also apprehended. According to ATS, the trio was preparing terrorist attacks in Ahmedabad, Lucknow, and Delhi and had been under surveillance for an extended period.



