Taliban spokesman Zabihullah Mujahid has stated that the Pakistan spy agency, ISI, orchestrated attacks in Kerman, Iran, and at Moscow’s Crocus City Hall in 2024. His claims support findings from Indian intelligence agencies indicating that ISI and the Pakistan military are operating IS-Khorasan modules from areas along the Afghanistan-Pakistan border.
Both attacks, occurring within three months, were reportedly claimed by the Islamic State in Khorasan Province. Investigations by Iranian authorities revealed that primary suspect Abdollah Tajiki entered Iran two weeks prior to the attack via the southeast border (from Pakistan).
The United States has categorized the Moscow attack as “IS-K’s first successful attack in Russia,” while Russian officials attributed the incident to the “special services of an unfriendly state,” believed to refer to Ukraine.
During a press briefing on October 12, Mujahid asserted that both operations, originally claimed by the Islamic State, were coordinated within Pakistan and that IS-K’s leadership is situated there. He also accused the ISI of contributing to unrest in Afghanistan, alleging that certain factions within the Pakistani military are opposed to regional peace.
Mujahid’s statements reinforce assessments from Indian intelligence, indicating that recruits for IS-K targeting Indian youths are controlled by the ISI. Reports of IS-inspired cells dismantled in cities such as Delhi and Ranchi have traced connections to ISI operatives, with internet protocol analysis pointing to locations in Pakistan. Mujahid claimed, “A particular group within the Pakistani army is turning a blind eye to IS activities,” further accusing Pakistan of allowing IS-K to operate from Khyber Pakhtunkhwa while planning attacks on Afghan territory.