2003 India Gate plot
| 2003 India Gate plot | |
|---|---|
| Part of Insurgency in Jammu and Kashmir and Terrorism in India | |
| Location | India Gate, New Delhi, India |
| Date | Planned for 25 February 2003 (Foiled on 23 February 2003) (IST (UTC+05:30)) |
| Target | India Gate and Amar Jawan Jyoti |
Attack type | Car bomb / Improvised explosive device plot (foiled) |
| Perpetrator | Lashkar-e-Taiba |
The 2003 India Gate plot was a planned terror attack by the Pakistan-based militant organization Lashkar-e-Taiba (LeT) targeting India Gate and the Amar Jawan Jyoti in New Delhi, scheduled for 25 February 2003.[1] The plot was orchestrated by LeT supreme commander Zakiur Rehman Lakhvi and was uncovered by the Special Cell of the Delhi Police.[2]
The operation gained widespread attention after an encrypted code revealing the location of the attack was cracked by Vivek Thakur, an unemployed job-seeker visiting an officer friend in Delhi, after professional cryptographers failed to decipher it in time.[3] Following the revelation, armed units of the Indian Army were deployed around India Gate on 23 February 2003, forcing the terrorists to abandon the operation.[1] The details of the incident were made public by former Delhi Police Commissioner Neeraj Kumar in his 2019 book Khaki Files: Inside the Raw Criminal Mind.[2]
Background
[edit]
In late 2002, India Gate was one of the most accessible national monuments in New Delhi, drawing over 10,000 visitors daily on weekdays and over 20,000 on weekends.[4] Visitors could freely walk up to and touch the monument, making it a high-density soft target for militant groups targeting the Indian capital.
In October 2002, Assistant Commissioner of Police (ACP) Pramod Kushwaha of the Delhi Police Special Cell traveled to Jammu and Kashmir to investigate an ongoing terror case.[5] Kushwaha, an officer with a background in computer science, met a Border Security Force (BSF) Deputy Commandant who had recently killed a militant in an encounter.[2] Inside the deceased militant's pocket was a small notebook containing various entries written in poor handwriting.[2]
On the back page of the diary, Kushwaha noticed an email address: rashid32x[at]hotmail.com.[5] Recognizing its potential intelligence value, he noted the address and returned to Delhi to initiate an investigation under the guidance of Special Cell chief Neeraj Kumar.[2]
Cyber Cafe Tracking and Surveillance
[edit]Upon tracing the IP address activity of rashid32x[at]hotmail.com, the Special Cell discovered that the account was actively being operated from central New Delhi.[2] The user followed a strict operational security protocol: accessing the email account from various commercial cyber cafes in areas such as Paharganj, Daryaganj, and Moti Bagh, and never returning to the same cyber cafe twice.[2]
To counter this, the Special Cell deployed undercover officers across central Delhi cafes.[2] Police personnel secretly installed custom surveillance logging software via floppy disks onto public computers across suspect cyber cafes.[2] The software was programmed to trigger real-time alerts if specific keywords—such as *chacha*, *football*, *stupa*, *love you*, or *neha*—were typed into any browser or email client.[2]
Intercepted Communications
[edit]
The monitoring software soon intercepted a series of emails exchanged between rashid32x[at]hotmail.com and several secondary email accounts, including stupax[at]hotmail.com, nehasingh1x2[at]hotmail.com, and chachoji[at]hotmail.com.[2] The messages were disguised to resemble romantic communications between couples, but contained embedded operational directives:
- Code Word "Chacha": The intelligence team identified "Chacha" or "Chachaji" as the alias for Zakiur Rehman Lakhvi, the operational commander of Lashkar-e-Taiba located in Islamabad, Pakistan.[2]
- Code Word "Football": Intercepted emails referred to delivering "football", which investigators identified as a code for improvised explosive devices or bombs.[2]
- Code Word "Match" / "World Cup": Referred to the upcoming terror operation. One email sent from Pakistan confirmed: *"The date for the match is fixed. The World Cup final is set for the 25th."*[1]
While the date of the attack—25 February 2003—was successfully identified, the target location remained unknown.[1]
Encrypted Cipher and Inter-Agency Crisis
[edit]On 17 February 2003, a crucial email sent from Peshawar, Pakistan, was intercepted by the Special Cell.[1] Sent from the address puranamakan[at]hotmail.com, the email contained numeric codes written in decimal sequences, such as:
0.05 .000 .00 .05 .7 .03 .7 .0 .4 -7
Recognizing that the numbers concealed the target location, the Special Cell distributed the codes to cryptographers across India, including specialists in the Indian Armed Forces, government research laboratories, and academic institutions.[3] However, none of the experts could break the code before the deadline.[3]
An American cryptography firm offered to decrypt the message for a commercial fee, but the time required for formal Government of India clearances rendered foreign assistance unfeasible.[3] Meanwhile, intelligence intercepts indicated that the execution team had already arrived in Delhi from Srinagar.[2]
Decryption by Vivek Thakur
[edit]
On 19 February 2003, Vivek Thakur, an unemployed job-seeker from Bihar and a college friend of ACP Pramod Kushwaha, visited Kushwaha's office in Delhi.[2] Noticing Kushwaha's visible distress, Thakur inquired about the problem. Kushwaha showed him the sheet of paper containing the encrypted decimal numbers without providing background context.[2]
Thakur recognized the pattern as a variation of a decimal-alphabetic shift code taught by his high school mathematics teacher.[2] He realized the cipher mapped letters of the English alphabet to decimal numbers:
- $A = .0$, $B = .1$, $C = .2$, ..., $J = .9$
- $K = .00$, $L = .01$, $M = .02$, ..., $Z = .005$
- Suffix numbers such as $-7$ indicated a backward shift of seven positions in the alphabet sequence.[2]
To test his hypothesis, Thakur decoded the sender's email verification string:
.002 .1 .004 .7 .09 .7 .07 .7 .000 -7 $\rightarrow$ puranamakan
When applied to the main message string, the decoded text yielded:
.05 .000 .00 .05 .7 .03 .7 .0 .4 -7 $\rightarrow$ India Gatx
The term "India Gatx" was identified as a misspelling of India Gate, confirming that Lashkar-e-Taiba planned to bomb the monument and the Amar Jawan Jyoti on 25 February 2003.[1][2]
Emergency Deployment and Countermeasures
[edit]On the midnight of 22 February 2003, Union Home Minister L. K. Advani convened an emergency meeting at his official residence in New Delhi, attended by intelligence heads and senior police officials.[1] Neeraj Kumar presented the decrypted email chains, proving the immediacy of the threat.[1]
Advani authorized the immediate deployment of the Indian Army at India Gate.[1] On the morning of 23 February 2003, visitors and morning joggers arrived at Rajpath to find army troops equipped with light machine guns and battle gear surrounding India Gate.[1] Heavy perimeter barricading was erected around the monument.[1]
Following the military deployment, all monitored Lashkar-e-Taiba email accounts went permanently inactive, confirming that the sleeper cell had aborted the operation.[2]
Legacy
[edit]The thwarting of the 2003 plot led to permanent changes in the security architecture around India Gate. Public access directly touching the arches of India Gate was permanently restricted, and security barricades were established as a standard protocol.[1]
The event remained undisclosed to the public for sixteen years until former Delhi Police Commissioner Neeraj Kumar detailed the operation in his 2019 book, Khaki Files: Inside the Raw Criminal Mind.[2]
Chronology of Events
[edit]| Date | Event |
|---|---|
| Late October 2002 | ACP Pramod Kushwaha discovers the email ID rashid32x[at]hotmail.com in a dead militant's diary in Kashmir.[5] |
| November 2002 – January 2003 | Delhi Police Special Cell plants logger software across Central Delhi cyber cafes.[2] |
| 1–13 February 2003 | Intercepted emails reveal coded communications between Delhi cells and Zakiur Rehman Lakhvi in Pakistan.[2] |
| 17 February 2003 | An encrypted email sent from Peshawar contains the target coordinates in decimal code.[1] |
| 19 February 2003 | Vivek Thakur deciphers the code, revealing the target as "India Gate" and date as 25 February 2003.[2] |
| 22 February 2003 (Midnight) | Home Minister L. K. Advani orders army intervention following a high-level security briefing.[1] |
| 23 February 2003 | Indian Army troops secure India Gate; the terror cell aborts the attack and email channels go silent.[1][2] |
References
[edit]- 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 "Why was Amar Jawan Jyoti closed to visitors? LeT wanted to bomb it". Hindustan Times. 10 November 2019.
- 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 "Jobless youth helped Delhi Police crack code & foil terror attack at India Gate". ThePrint. 28 October 2019.
- 1 2 3 4 "Book Excerpt: How High School Math Foiled a Terror Attack on India Gate". The Quint. 30 October 2019.
- ↑ "No loud music at India Gate 30 minutes before sunset: NDMC". The New Indian Express. 31 July 2019.
- 1 2 3 "Khaki Files: An email ID from diary of a dead terrorist in Kashmir with a Delhi connection". Pixstory. 2021.