Jaish‑e‑Mohammad’s New Playbook: Proxy Modules and ISI Low‑Visibility Terror

December 12, 2025

NEW DELHI, Dec 12, 2025 — Indian security agencies have raised alarms over a new playbook emerging within the banned terrorist group Jaish‑e‑Mohammad (JeM), which now allegedly uses proxy terror modules to execute low‑visibility attacks across India under the alleged direction of Pakistan’s intelligence agency Inter‑Services Intelligence (ISI).

Shift From Traditional Infiltration to Covert Module Strategy

Intelligence inputs suggest that JeM has shifted from classic cross‑border infiltration and high‑profile attacks to a more covert operational strategy, leveraging proxy modules   small, decentralized networks that can operate with plausible deniability and minimal visibility.

Officials tracking the November Red Fort car blast and other terror cases note that these modules are increasingly recruiting local operatives, primarily from Jammu and Kashmir, and training them to function independently across various Indian states. These recruits are often channeled into operations and planning via encrypted digital platforms.

Role of ISI in Nurturing Proxy Networks

According to security assessments, Pakistan’s ISI has been instrumental in nurturing these proxy modules by identifying, radicalizing, and directing local associates within India   a strategy that allows ISI and JeM to maintain control while reducing direct links that could be traced back to Pakistan.

This represents a major shift from earlier patterns where Pakistan‑based terror groups primarily focused on Jammu & Kashmir‑centric attacks. Intelligence reports highlight that now, militants from the region are being embedded into domestic cells that can target urban centers and sensitive locations nationwide.

How Groups Recruit and Operate

Investigations into terror plots   including the Faridabad module case revealed that operatives used encrypted communication platforms and online networks to coordinate logistics, gather materials, and plan attacks without engaging in direct, traceable communication.

Security agencies have also noted recruitment from professional and academic circles, suggesting that the proxy networks are not limited to traditional militant recruits but include “white‑collar terror” ecosystems   a blend of educated operatives and local sympathizers allegedly guided by handlers via secure, anonymous communication channels.

Government and Security Response

In response to this evolving threat, Indian intelligence and law‑enforcement agencies have intensified surveillance and raids on suspected networks, conducting multi‑state operations to dismantle these proxy cells before they can execute larger terror incidents.

Officials maintain that while traditional high‑impact terror plots remain a threat, the low‑visibility modules pose a significant challenge because they are harder to detect and can integrate seamlessly within civilian populations.