On the morning of June 23, 2021, a car packed with an estimated twenty kilograms of explosives detonated on a residential street in Johar Town, Lahore, killing three people and injuring more than twenty others. The blast carved a crater four feet deep and eight feet wide into the asphalt, shattered windows across a hundred-foot radius, destroyed twelve parked vehicles, and collapsed sections of seven nearby houses. None of those facts, on their own, would distinguish this bombing from the dozens of other violent incidents Pakistan absorbs in any given year. What made the Johar Town detonation different, what elevated it from a local crime-page headline to a geopolitical inflection point, was the address. The car bomb exploded outside the residence of Hafiz Muhammad Saeed, the co-founder of Lashkar-e-Taiba, the mastermind of the 26/11 Mumbai attacks that killed 166 people, and arguably the most protected terrorist in Pakistan’s history.

That proximity, a car bomb within detonation range of the residence of a man India has spent thirteen years demanding Pakistan surrender, transformed the Johar Town blast from a criminal act into a strategic signal. Within twelve days, Pakistan’s National Security Adviser Moeed Yusuf would stand before cameras in Islamabad and accuse India’s Research and Analysis Wing of orchestrating the attack. India would deny the allegation. The international community would mostly ignore it. And seven months later, in January 2022, a man named Saleem Rehmani, an India-designated wanted terrorist, would be shot dead by unidentified gunmen in Nawabshah, Sindh. Two months after that, Zahoor Mistry, an IC-814 hijacker living under an assumed identity in Karachi, would be gunned down by motorcycle-borne assassins. By 2023, the pattern would be undeniable. By 2024, The Guardian would publish an investigation alleging that India’s intelligence services were behind nearly twenty killings on Pakistani soil. By 2026, the body count would exceed thirty. Every one of those events traces its strategic lineage to the Johar Town crater. The car bomb near Hafiz Saeed’s residence was not the first assassination attempt in the shadow war’s long arc. It was the declaration that made every subsequent assassination possible to interpret as doctrine rather than coincidence.

Background and Triggers

Understanding why a car bomb detonated outside Hafiz Saeed’s Lahore residence in June 2021 requires understanding what had not happened in the thirteen years before it. On the night of November 26, 2008, ten Lashkar-e-Taiba gunmen landed in Mumbai by sea, armed with assault rifles and grenades, and spent three days methodically killing 166 people across five locations. Ajmal Kasab, the sole surviving attacker, confessed under interrogation. David Headley, the Pakistani-American recruited by LeT and handled by ISI operatives, testified in both American and Indian courts about the planning chain. Intercepted satellite phone communications captured handlers in Pakistan guiding the gunmen in real time, directing them from room to room inside the Taj Mahal Palace Hotel. India presented the evidence to Pakistan. It presented the evidence to the United Nations. It presented the evidence to every major world capital willing to listen.

Pakistan arrested Hafiz Saeed, released him, arrested him again, released him again, and continued this cycle for over a decade. Zaki-ur-Rehman Lakhvi, the operations commander who directed the ten gunmen during the siege, was arrested, tried, and released on bail in 2015. The Financial Action Task Force placed Pakistan on its grey list. The United States placed a ten-million-dollar bounty on Saeed’s head. The United Nations Security Council designated both Saeed and Lashkar-e-Taiba under Resolution 1267. None of it produced the outcome India sought: the extradition or genuine prosecution of the men who planned and directed the bloodiest terror attack in Indian history.

The legal path had been explored and exhausted. India presented voluminous evidence to Pakistan through diplomatic channels, and Pakistan acknowledged receipt without acting on it. India appealed to the UNSC, which imposed sanctions that Pakistan implemented on paper and ignored in practice. India lobbied the FATF, which placed Pakistan on the grey list but could not compel genuine law enforcement action against designated individuals. In December 2023, India formally requested the extradition of Hafiz Saeed, a step that was procedurally correct and substantively futile given the absence of an extradition treaty between the two countries. Every institutional mechanism available to a state seeking justice through international channels had been tried, and every mechanism had been defeated by Pakistan’s ability to perform compliance while practicing protection.

The revolving door of Saeed’s prosecution illustrated the problem with devastating clarity. His first arrest came after the 26/11 attacks in December 2008, under the Maintenance of Public Order ordinance. In June 2009, the Lahore High Court ordered his release, calling the detention unconstitutional. India expressed disappointment. Interpol issued a red notice in August 2009. Pakistan briefly placed Saeed under house arrest again in September 2009 and released him again months later. The cycle repeated in 2017, in 2019, and in each case the arrest was timed to coincide with international scrutiny, a FATF review or a diplomatic summit, and the release followed once the scrutiny subsided. The pattern was not justice. It was theater, performed for an international audience that eventually stopped watching.

Alongside the diplomatic and legal failures, the attacks continued. In January 2016, a group of heavily armed militants attacked the Pathankot Air Force Station in Punjab, penetrating the base perimeter and engaging Indian security forces for three days. The attack was attributed to Jaish-e-Mohammed, and its mastermind, Shahid Latif, would later be shot dead inside a Sialkot mosque by masked gunmen in October 2023. In September 2016, militants attacked an Indian Army brigade headquarters near Uri in Jammu and Kashmir, killing nineteen soldiers. In February 2019, a JeM suicide bomber drove a vehicle laden with explosives into a Central Reserve Police Force convoy on the Jammu-Srinagar highway near Pulwama, killing forty paramilitary personnel in the deadliest attack on Indian security forces in decades.

Between 2008 and 2019, India’s response to Pakistan-origin terrorism followed a pattern of diplomatic protest, international lobbying, and occasional military escalation that never reached the individuals responsible. The 2016 Uri attack produced the surgical strikes across the Line of Control, a first in India’s military history but one that targeted forward staging areas, not the leadership chain. The 2019 Pulwama attack produced the Balakot airstrikes, which hit a Jaish-e-Mohammed training facility in Khyber Pakhtunkhwa but, again, did not reach the organization’s senior command. Each response demonstrated increasing willingness to use force, but each response also demonstrated the same structural limitation: conventional military action could destroy infrastructure and kill foot soldiers, but it could not reach the men India held most responsible. Those men lived in Pakistani cities, protected by the Inter-Services Intelligence directorate and the Pakistan Army, surrounded by civilian populations, and insulated by the nuclear deterrence that made large-scale Indian military incursion unthinkable.

The surgical strikes of 2016 had crossed one threshold: India was now willing to send ground forces across the Line of Control into Pakistan-administered territory. The Balakot airstrikes of 2019 had crossed a second: India was now willing to use air power against targets deep inside Pakistani territory, beyond the LoC and into the country’s heartland. Each crossing produced a brief diplomatic crisis and no lasting consequence. The international community treated both episodes as managed escalations between nuclear states, momentarily alarming but ultimately contained. Pakistan made threatening noises, scrambled its air force, and conducted a retaliatory airstrike near Indian military installations, producing the aerial engagement over the LoC that resulted in Wing Commander Abhinandan Varthaman’s brief captivity. The crisis resolved within days. The terrorists survived.

By 2020, a quiet shift was underway. India had revoked Article 370 in August 2019, integrating Jammu and Kashmir fully into the Indian Union and stripping Pakistan of a diplomatic lever it had wielded for seven decades. Prime Minister Modi’s rhetoric had sharpened. During a campaign rally in Bihar, he declared that today’s India strikes the enemy inside their home, a phrase that entered political vocabulary and never left. The Balakot strikes had demonstrated that India was prepared to use air power inside Pakistani territory. The intelligence community, according to analysts who study India’s evolving covert posture, had spent the post-26/11 years building the human networks and technical capabilities that a sustained campaign on foreign soil would require. Tilak Devasher, a former special secretary of RAW and the author of a detailed study of Pakistan’s internal dynamics, has written extensively about India’s intelligence apparatus maturing its cross-border operational capability in the decade following Mumbai. Ayesha Siddiqa, the Pakistani scholar best known for her work on the military’s economic empire, has argued that the Pakistan Army’s assumption that its nuclear umbrella made its strategic assets untouchable was always dangerously complacent.

India’s intelligence restructuring after 26/11 was comprehensive. The National Investigation Agency, established in 2009 as a direct institutional response to Mumbai, centralized counter-terrorism investigations that had previously been fragmented across state police forces. The Multi-Agency Centre was upgraded to function as a 24/7 intelligence fusion hub, integrating inputs from RAW, the Intelligence Bureau, military intelligence, and state agencies. New capabilities in signals intelligence, satellite surveillance, and cyber operations were developed, some with cooperation from Israel’s intelligence services, which had maintained a discreet but strategically significant partnership with India’s security establishment since the 1990s. The human intelligence dimension, always the most difficult and most critical component of cross-border operations, reportedly received sustained investment over the decade following 26/11.

The car bomb in Johar Town detonated into this environment: an India increasingly willing to act, a Pakistan increasingly complacent about its protections, and a thirteen-year accumulation of frustration, capability, and strategic intent that had not yet found its visible expression.

The Johar Town Detonation

The morning of June 23, 2021 was routine in Johar Town, a densely populated residential and commercial neighborhood in the southern sector of Lahore. Traffic moved through the BOR Society area, a subdivision within Johar Town where Hafiz Saeed maintained a residence that Pakistani authorities had designated as a sub-jail, allowing him to serve his terror-financing sentences from his own home rather than a conventional prison cell. A police picket stood permanently outside the residence, a visible reminder that the man inside was simultaneously a convicted terrorist and a state-protected asset. Provincial police chief Inam Ghani would later note that the police picket’s presence likely prevented far greater casualties, absorbing some of the blast’s force before it reached the house itself.

At approximately 11 AM, a car parked near the picket exploded. The vehicle, later traced to Gujranwala where it had been stolen, had been packed with an estimated fifteen to twenty kilograms of explosives, though some reports placed the figure as high as thirty kilograms. Inspector General Ghani described the bomb’s construction as the work of someone with expertise, noting that the vehicle was destroyed so completely that investigators struggled to identify its make and model from the wreckage. The blast sent shrapnel and debris across the street, collapsing facades, tearing doors from their frames, and shattering every window within the immediate radius. Closed-circuit television footage, later obtained by Pakistani media, captured a man parking the suspicious vehicle and walking away before the detonation.

Three people died. The injured, numbering between twenty-one and twenty-four depending on the source, were rushed to the nearby Jinnah Hospital, where six arrived in critical condition. The dead were civilians, residents and passersby who happened to be near the blast epicenter at the wrong moment. Saeed’s residence sustained damage but remained structurally intact. The police picket absorbed a significant portion of the directed force.

The question of whether Saeed was physically present in the residence at the time of the blast became immediately contested. His organization, Jamaat-ud-Dawa, stated through a spokesperson that Saeed was serving his sentence at Kot Lakhpat Jail and was not at the residence. Pakistani journalist Amjad Saeed Sahani, appearing on Dawn News’s program Zara Hut Kay days after the blast, contradicted this account. Sahani reported that prison department protocols allowed the jail superintendent to designate any location as a sub-jail, and that according to his sources, Saeed was indeed at the residence when the bomb detonated. The discrepancy is significant: if Saeed was present, the attack was a near-miss on the most wanted man in India’s counter-terrorism ledger. If he was absent, the attack was a message delivered to an empty house, which carries its own distinct strategic meaning.

The Counter Terrorism Department took immediate control of the investigation site. Over the following two days, raids produced arrests. The primary perpetrator was identified as Eid Gul, a man of Afghan origin who had been living in Pakistan. Investigators traced his journey to Lahore, finding that he had chosen the motorway route specifically because local police had no jurisdiction along it. He had spent twelve hours on the motorway, resting at a service area before arriving in Lahore. The operational patience was notable; this was not a rushed or improvised act.

A second figure, a foreign national identified as Peter Paul David, was intercepted as he attempted to board a Karachi-bound flight from Lahore in the days after the blast. David had been traveling frequently between Karachi, Lahore, and Dubai, and investigators could not establish a legitimate purpose for his movements. His car was reportedly the vehicle used in the bombing, though the chain of custody was complex: David claimed he had lent the car to a friend whose face he never saw because the friend was masked. The operational compartmentalization, the use of Afghan-origin operatives, the multinational travel patterns, and the layered deniability suggested something more sophisticated than a local criminal act. It suggested tradecraft.

Hafiz Saeed and the Fortress He Built

To understand why a car bomb near this particular residence carried such immense symbolic weight, one must understand what Hafiz Muhammad Saeed represents in the architecture of Pakistan-based terrorism. Saeed did not merely found a terror group. He built an institutional ecosystem: Jamaat-ud-Dawa, the charitable front organization that operates hospitals, schools, ambulance services, and disaster-relief programs across Pakistan; Lashkar-e-Taiba, the military wing that executed the 26/11 Mumbai massacre; and a media apparatus that broadcast his sermons to millions. His organization’s headquarters at the Muridke compound, a 200-acre facility on the outskirts of Lahore, housed training grounds, residential quarters, a mosque, and educational institutions. Saeed himself maintained multiple residences in Lahore, all within the security cordon that the Pakistan Army and ISI maintained around LeT’s senior leadership.

Born on June 5, 1950, Saeed co-founded Markaz Dawa-wal-Irshad in 1987 alongside Abdullah Azzam, the Palestinian cleric who served as Osama bin Laden’s mentor. The organization spawned Lashkar-e-Taiba that same year, with Kashmir as its primary operational target. Over three decades, Saeed transformed what began as a small jihadist recruitment cell into a parallel state within Pakistan. JuD’s charitable operations served a dual purpose: genuine humanitarian work that built public goodwill, and a recruitment pipeline that identified, radicalized, and funneled young men into LeT’s military wing. The pipeline ran from madrassas through indoctrination to combat training, and it produced the operatives who carried out attacks across India for three decades.

The Pakistan Army’s relationship with Saeed was not one of tolerance but of active patronage. The ISI cultivated LeT as a strategic asset for proxy warfare in Kashmir. The Army provided institutional protection, ensuring that every arrest was followed by a release, every court case by an acquittal. When international pressure became unbearable, Pakistan would arrest Saeed with great ceremony, allow a few months to pass, and then quietly release him. The cycle repeated after the 26/11 attacks, after the UNSC designation, after the FATF grey-listing. In July 2019, three months before a scheduled FATF review, Pakistani authorities arrested Saeed again, and courts eventually sentenced him to a combined thirty-six years in terror-financing cases. The sentences run concurrently. More importantly, Indian media investigations found that Saeed’s “imprisonment” consisted of residence in a military-protected home in central Lahore, complete with a private park, vehicles, a mosque, a madrassa, and personal bodyguards. The Johar Town residence was reportedly one of these protected locations.

Lahore itself functioned as the operational capital of LeT’s leadership infrastructure. The city’s status as Pakistan’s second-largest metropolis, with a population exceeding eleven million, provided civilian camouflage. Its proximity to the Muridke compound, roughly forty kilometers away, allowed leadership to shuttle between the organizational headquarters and their urban residences. The presence of multiple Pakistan Army cantonments within Lahore provided a secondary layer of security. The Lahore Cantonment, one of the largest military installations in Pakistan, sits in the heart of the city. The ISI’s Punjab desk maintained officers whose responsibilities included monitoring and protecting designated strategic assets, a category that included LeT’s senior leadership.

Saeed’s personal security reflected the state’s investment in his protection. His residences were equipped with police pickets, CCTV systems, and communication lines that connected directly to security command centers. His movements, when he traveled between residences or to the Muridke compound, were reportedly coordinated with local police to ensure route security. The Pakistan Rangers, a paramilitary force under Army control, maintained a presence in the areas around Saeed’s known addresses. This layered security architecture, police, ISI, Rangers, military cantonment, had held for decades. No serious threat to Saeed’s physical safety had materialized on Pakistani soil since the organization’s founding. Saeed had survived not through cunning or concealment but through the systematic protection of the Pakistani state.

The only previous indication that this protection might be penetrable came in 2019, when a bomb planted inside a refrigerator shop in Lahore detonated near Saeed’s son, Hafiz Talha Saeed, who had been designated by the United States Treasury as a Specially Designated Global Terrorist and served as Lashkar-e-Taiba’s second-in-command. Talha controlled the organization’s finances and had contested the 2018 general elections under the banner of Allah-o-Akbar Tehreek. He survived the 2019 bombing, but the incident hinted at a vulnerability that the 2021 car bomb would confirm: the Saeed family’s addresses were known, their security had gaps, and someone was probing those gaps.

For decades, the assumption held: Lahore was impenetrable. The city’s garrison infrastructure, its intelligence presence, and its sheer density made the idea of a covert operation against LeT leadership within city limits functionally impossible. The car bomb on June 23, 2021 challenged that assumption with explosive force.

The Attribution Battle

Twelve days after the blast, on July 4, 2021, National Security Adviser Moeed Yusuf stood before reporters in Islamabad, flanked by Punjab Police Inspector General Inam Ghani and Federal Information Minister Fawad Chaudhry. His statement was unequivocal. Pakistan, Yusuf declared, had concrete evidence and intelligence, including financial and telephone records, that pointed to direct Indian sponsorship of the Johar Town terrorists.

Yusuf named India’s Research and Analysis Wing explicitly. The mastermind of the attack, he said, was an Indian citizen, based in India, and affiliated with RAW. The money used to finance the operation had its direct origin in India. Pakistan, he asserted, had identified the real identities and locations of the suspects through forensic analysis of electronic equipment recovered from the arrested perpetrators. Yusuf went further, claiming that the Johar Town attack coincided with thousands of coordinated cyberattacks on Pakistan’s investigative infrastructure, which he presented as additional evidence of state-level Indian involvement. The cyberattacks, he argued, were designed to disrupt Pakistan’s investigation and buy time for the network to disperse.

Inspector General Ghani provided the operational details that gave Yusuf’s political charges a factual spine. He described Eid Gul’s journey from the tribal areas to Lahore, his choice of the motorway route to avoid local police checkpoints, his twelve-hour rest stop, and his arrival in the BOR Society neighborhood. Ghani detailed the bomb’s construction, the stolen vehicle’s provenance from Gujranwala, and the forensic evidence recovered from the blast site. Information Minister Fawad Chaudhry added the diplomatic overlay, arguing that repeated incidents proved the Indian establishment was fully supporting terrorist networks inside Pakistan and that the international community had ignored Pakistan’s earlier warnings.

India’s response was silence. The Ministry of External Affairs did not immediately address Yusuf’s charges. India and Pakistan routinely accuse each other of sponsoring attacks, and New Delhi has historically treated Pakistani attribution claims as propaganda rather than evidence-based allegations. India’s established diplomatic position is that Pakistan harbors terrorists, not the other way around, and that any suggestion of Indian intelligence operating against targets on Pakistani soil is false and malicious anti-India propaganda, as the Ministry of External Affairs has characterized similar allegations in other contexts.

The attribution debate reveals a fundamental asymmetry. Pakistan’s evidence, as presented publicly, consisted of telephone records, financial trails, the arrested perpetrators’ testimony, and the assertion that the mastermind was an RAW operative. None of this evidence was made available for independent verification. No foreign government corroborated Pakistan’s claims in the immediate aftermath. The international community’s collective response was closer to indifference than engagement. India denied involvement but did not feel compelled to offer a detailed rebuttal, because the global presumption was that Pakistan’s allegations served a domestic political purpose rather than a forensic one.

Pakistan had been making similar claims for years. In November 2020, Islamabad had shared a dossier, including purported audio intercepts and financial records, alleging Indian sponsorship of attacks across Pakistan. The Johar Town accusation fit within this established pattern of Pakistani attribution diplomacy, a pattern that had not produced international action previously and was unlikely to do so now. The claims were loud, detailed, and completely without consequence.

Three years later, however, Pakistan’s attribution claims would gain unexpected retrospective credibility. In April 2024, The Guardian published an investigation, based on unnamed Indian and Pakistani intelligence operatives, alleging that Indian intelligence services had carried out nearly twenty killings on Pakistani soil since 2020 as part of an emboldened approach to national security. The report described operations allegedly planned through handlers in the United Arab Emirates, financed through layered payment systems, and executed by recruited local assets, including Afghan nationals. Zahoor Mistry’s killing in Karachi in March 2022, the report stated, was financed through millions of rupees paid to Afghan nationals, who then fled across the border. Shahid Latif’s assassination inside a Sialkot mosque was allegedly carried out by a young man paid 1.5 million Pakistani rupees by an undercover Indian agent, with a promise of fifteen million more and a catering business in the UAE upon completion.

None of these details directly confirmed the Johar Town car bomb’s attribution to RAW. The Guardian’s reporting focused on the motorcycle-borne shooting campaign that followed, not on the car bomb itself. But the operational architecture described in the reporting, the use of Afghan-origin operatives, the financing through third countries, the layered compartmentalization, matched the operational profile of the Johar Town attack closely enough to make Pakistan’s July 2021 allegations difficult to dismiss entirely.

The analytical position this article takes is the following: the car bomb’s attribution remains unconfirmed. Neither Pakistan’s public evidence nor The Guardian’s subsequent reporting directly proves that the Johar Town attack was an Indian intelligence operation. What can be established is that the operational tradecraft of the car bomb, the use of a recruited foreign-origin operative, the multinational financial trail, the compartmentalized planning, was consistent with the tradecraft that The Guardian later described as characterizing the broader campaign. The car bomb is the most speculative link in the chain, but it is also the first link, and the chain that followed it has grown strong enough to make the first link worth examining seriously.

The Declaration That Preceded a Doctrine

If the car bomb was indeed the opening move of what became India’s covert elimination campaign, then its significance lies not in the damage it caused but in the message it sent. Three people died and twenty were injured, figures that are tragically routine in Pakistan’s domestic violence landscape. Saeed’s residence survived structurally intact. Saeed himself, whether present or absent, was unharmed. By conventional metrics of assassination attempts, the Johar Town car bomb was a failure.

By unconventional metrics, it was a masterpiece of strategic communication. Consider what the blast demonstrated. It demonstrated that someone had identified Saeed’s residence with precision. It demonstrated that someone could construct an effective vehicle-borne improvised explosive device, transport it across Pakistani territory, park it in the vicinity of one of the most surveilled and protected addresses in Lahore, and detonate it. It demonstrated that the police picket and the ISI’s protective cordon were penetrable. It demonstrated that Saeed lived inside a blast radius.

No claim of responsibility followed. No organization announced the attack. No political entity took credit. The silence was itself a message: whoever did this did not need the world to know. The target’s identity was the statement. The execution was the proof of concept. The absence of a claim was the deniability that preserved the option to do it again.

This is the analytical framework through which the Johar Town car bomb must be understood: not as an assassination attempt that failed, but as a declaration of capability that succeeded. The blast told Hafiz Saeed, and by extension the entire leadership of Pakistan-based terror organizations, that the assumption of impunity was over. It told the ISI that its protective infrastructure had been mapped and penetrated. It told the Pakistan Army that the nuclear umbrella, which had deterred conventional military strikes against these targets, did not deter this kind of operation.

Seven months separated the Johar Town car bomb from the next confirmed event in the sequence. In January 2022, Saleem Rehmani, a man on India’s designated-terrorist list, was shot dead in Nawabshah, a city in Sindh province far from the Lahore garrison infrastructure. Rehmani was killed by unidentified gunmen in what local police initially described as a robbery gone wrong, a framing that would become darkly familiar as the campaign progressed. Pakistani law enforcement would attribute nearly every subsequent killing to local criminal activity, personal feuds, or sectarian violence, explanations that collapsed under the weight of the pattern that emerged as the body count grew.

Two months after Rehmani, in March 2022, Zahoor Mistry died in Karachi. Mistry had been one of the five hijackers of Indian Airlines Flight IC-814 in December 1999, the hijacking that forced India to release Masood Azhar, Ahmed Omar Saeed Sheikh, and Mushtaq Ahmed Zargar in exchange for the lives of 176 hostages. After the Kandahar crisis, Mistry had disappeared into the urban anonymity of Karachi, living under the alias Zahid Akhund. Two motorcycle-borne assailants found him anyway.

The three events, the June 2021 car bomb, the January 2022 Rehmani killing, and the March 2022 Mistry killing, form a sequence that analysts have retrospectively identified as the initiation phase of the shadow war. Defense journalist Saikat Datta has written about how the intelligence community’s recognition of the pattern lagged behind the events themselves. Praveen Swami, the Indian Express counter-terrorism analyst, has traced the campaign’s initiation to this precise period, arguing that the operational infrastructure revealed by the pattern could not have been assembled quickly. The capability to identify, locate, and eliminate targets across multiple Pakistani cities, using different methods (car bomb, shooting in a commercial area, motorcycle-borne assassination), implies years of prior intelligence preparation.

This is the campaign-origin thesis that this article advances: the Johar Town car bomb was not spontaneous. It was the visible surface of an intelligence infrastructure that had been built quietly over the preceding years, an infrastructure that the car bomb tested, the Rehmani killing validated, and the Mistry killing confirmed. By mid-2022, the campaign existed even if no one had named it yet.

From Car Bomb to Motorcycle Assassins

The methodological gap between the Johar Town car bomb and the subsequent motorcycle shootings is the strongest argument against treating them as parts of a single campaign. A car bomb is a blunt instrument. It requires significant explosive material, a vehicle, knowledge of demolition techniques, and produces indiscriminate casualties. The motorcycle-borne assassinations that followed, beginning with Rehmani and accelerating through 2023 and beyond, displayed a completely different operational signature: precise targeting of specific individuals, minimal collateral damage, rapid approach and escape on two-wheeled vehicles, and a consistency of method that suggested institutional doctrine rather than improvised violence.

The Rehmani killing in January 2022 illustrated the new method’s characteristics. In Nawabshah, a city in interior Sindh with no garrison presence and minimal security infrastructure, Rehmani was targeted in what Pakistani police initially framed as a robbery at a commercial establishment. According to the Dawn newspaper’s report from January 2022, suspects entered Rehmani’s mart, and when he and his brother resisted, the attackers opened fire, killing Saleem and wounding his brother Waseem. Workers in the mart fired back, killing one of the suspects. The local Senior Superintendent of Police initially attributed the incident to personal enmity, a reflexive explanation that would become the standard Pakistani law-enforcement response to subsequent killings in the campaign. Rehmani’s presence on India’s designated-terrorist list made the personal-enmity explanation improbable, but it served the institutional purpose of avoiding a foreign-attribution crisis.

Zahoor Mistry’s killing in Karachi two months later in March 2022 was even more revealing. Mistry had participated in the hijacking of IC-814 in December 1999, an event that forced India to release three prisoners, including Masood Azhar, who would go on to found Jaish-e-Mohammed, the organization responsible for the Pulwama bombing that killed forty CRPF personnel. After the hijacking, Mistry had vanished into Karachi’s anonymity, living under the alias Zahid Akhund and presumably operating under the assumption that twenty-three years of concealment had made him unfindable. Two motorcycle-borne assailants proved that assumption wrong. The killing demonstrated several capabilities that the car bomb had not: the ability to identify an individual living under an alias in a city of fifteen million, the ability to conduct surveillance sufficient to locate his daily routines, the ability to execute a close-range firearm assault and escape through Karachi’s chaotic traffic, and the ability to do all of this without producing a trail that led investigators to the principal. According to The Guardian’s later reporting, millions of rupees were paid to Afghan nationals to carry out the Karachi operation, and the hired gunmen subsequently fled across the border. Their handlers were later arrested by Pakistani security agencies, but the arrests reportedly failed to identify the intelligence service behind the operation.

This methodological discontinuity demands acknowledgment. The car bomb and the motorcycle shootings could represent different operational units within the same campaign architecture. They could represent an evolution in method, from a dramatic opening statement designed for symbolic impact to a sustainable, repeatable operational template designed for systematic elimination. They could represent entirely different actors, with the car bomb attributable to a source distinct from whatever entity later organized the shooting campaign. The evolution interpretation has the most analytical traction: the car bomb was loud, visible, and produced civilian casualties, all characteristics that are undesirable in a sustained campaign. A sustainable campaign requires a method that is precise, repeatable, produces minimal attention beyond the target, and allows the operational infrastructure to survive and be reused. The motorcycle shooting template meets all of these criteria, which is likely why it replaced the car bomb as the campaign’s standard method.

The analytical weight, however, tips toward continuity rather than coincidence. Three factors support this reading. The first is target selection. The Johar Town blast targeted the residence of India’s most-wanted man. The subsequent shootings targeted individuals on India’s designated-terrorist list, NIA charge sheets, and UNSC sanctions lists. The target-selection criteria are consistent across the methodological gap: every target is someone India has formally identified as hostile.

The second factor is geographic penetration. The car bomb demonstrated the ability to operate within Lahore’s garrison-protected urban core. The subsequent shootings demonstrated the ability to operate across Pakistani cities, from Nawabshah in Sindh to Sialkot in Punjab to Rawalakot in Pakistan-Occupied Kashmir. If the car bomb demonstrated reach into the most protected single location, the shootings demonstrated reach across the entire territorial expanse. The combination suggests a single intelligence architecture with nationwide capability, not a local vendetta or sectarian dispute.

The third factor is the absence of alternative explanation. No domestic Pakistani group has claimed any of these attacks. Pakistan’s own investigations, when they produced results, consistently pointed toward foreign intelligence rather than domestic actors. The ISI, which monitors militant activity within Pakistan more comprehensively than any outside observer, attributed the car bomb to RAW through its most senior national security official. If Pakistan’s own intelligence apparatus believes the car bomb was an Indian operation, and if the subsequent shootings follow the same target-selection logic, the simplest analytical framework is that they are connected.

The connection is not certain. It is inferential. This article advances the inference because the alternative, that the Johar Town car bomb and the killing campaign that followed are entirely unrelated, requires an improbable coincidence: that an unknown actor independently decided to bomb the residence of India’s most-wanted man, and that an unrelated campaign of targeted killings against India’s most-wanted individuals then began independently seven months later. The simpler explanation is that the car bomb was the opening move and the shootings were the campaign it inaugurated.

The Pre-Campaign Intelligence Escalation Timeline

The analytical framework that treats the Johar Town car bomb as the shadow war’s opening move requires a deeper chronological context. The car bomb did not emerge from a vacuum. It arrived at the end of a thirteen-year period that can be divided into four distinct phases, each building on the last, each pushing India closer to the threshold the car bomb crossed.

The first phase, spanning 2008 through 2012, was characterized by restrained fury. India absorbed the 26/11 attacks without a military response, choosing diplomatic channels that it already suspected would fail. During this period, India filed formal requests for extradition, presented evidence to international forums, lobbied for UNSC sanctions, and pressed the FATF to scrutinize Pakistan’s terror-financing networks. Each effort produced incremental institutional progress, designations, grey-listings, sanctions, and zero operational results. Saeed remained free. Lakhvi was released. The organizations that planned and executed the Mumbai carnage continued to operate from Pakistani territory. What this phase built was the political argument for escalation: India could demonstrate to any observer, domestic or international, that every legitimate avenue had been exhausted.

The second phase, spanning 2013 through 2016, was the period of capability construction. Intelligence restructuring accelerated. New partnerships with foreign intelligence services, particularly Israel’s Mossad, yielded technology transfers and operational methodology sharing. India’s intelligence community reportedly expanded its presence in countries adjacent to Pakistan, building the kind of human networks that would eventually be needed to recruit and manage assets on Pakistani soil. The establishment of new signals intelligence facilities, upgrades to satellite surveillance capabilities, and the expansion of cyber-operations units all occurred during this period. None of these investments were visible; they appeared in defense budgets as technical line items rather than strategic programs. The public saw only the diplomatic frustration. The intelligence community was building the tools to address it.

The third phase, spanning 2016 through 2019, was the kinetic threshold. The Uri attack in September 2016 produced the surgical strikes, breaking the taboo against ground operations across the LoC. The Pulwama bombing in February 2019 produced the Balakot airstrikes, breaking the taboo against air operations inside Pakistan’s sovereign territory. Each threshold crossing met an escalatory response from Pakistan that was ultimately absorbed without producing the deterrent Pakistan intended. The aerial engagement over the LoC in February 2019, which saw an Indian Air Force pilot captured and returned within days, demonstrated that Pakistan could contest Indian military action but could not prevent it. More importantly for the shadow war’s genesis, the Balakot strikes demonstrated that India’s intelligence community possessed the target-identification capability and the operational planning capacity to conduct precision strikes deep inside Pakistan. Targeting a training camp in Khyber Pakhtunkhwa is not the same as targeting an individual in Lahore, but the intelligence disciplines overlap substantially: satellite reconnaissance, signals intercept, human source reporting, and target-pattern analysis.

The fourth phase, spanning 2019 through 2021, was the quiet preparation. Article 370’s revocation in August 2019 removed India’s most significant diplomatic constraint. For decades, Pakistan had leveraged the disputed status of Jammu and Kashmir to internationalize the conflict and attract sympathy. With the revocation, India declared the Kashmir question settled under Indian domestic law, stripping Pakistan of a tool it had used since 1947. The diplomatic space was now clear. Modi’s Bihar rally declaration that India strikes the enemy inside their home was not a rhetorical flourish; it was a policy signal understood by India’s intelligence establishment and, presumably, by Pakistan’s. Between 2019 and 2021, the operational groundwork for the campaign was reportedly finalized: handler networks established, financial channels tested, recruitment pipelines for local assets identified, and target packages prepared.

The Johar Town car bomb on June 23, 2021, was the moment these four phases converged into action. It was the visible surface of years of intelligence preparation, the test case for an operational infrastructure that had been assembled silently, and the declaration that announced a new phase of India-Pakistan conflict without using words. The subsequent events followed with the logic of a doctrine, not the randomness of coincidence. Saleem Rehmani in January 2022. Zahoor Mistry in March 2022. Then the acceleration in 2023: Bashir Ahmad Peer of Hizbul Mujahideen in Rawalakot, Mullah Sardar Hussain Arain of Jamaat-ud-Dawa in Nawab Shah, Riyaz Ahmad alias Abu Qasim of LeT shot at point-blank range inside Al-Qudus mosque in Rawalakot, Khwaja Shahid beheaded near the LoC in Pakistan-Occupied Kashmir, Akram Khan killed in Khyber Pakhtunkhwa’s Bajaur district, Raheem Ullah Tariq of JeM shot dead in Karachi. Seven targets across five cities, targeting four organizations, in seven months. The acceleration was too consistent to be coincidental, too geographically dispersed to be a single local feud, and too organizationally diverse to be an internal power struggle. After 2023, anyone who denied the campaign’s existence was arguing against arithmetic.

The timeline from post-26/11 restraint through the Johar Town car bomb to the 2023 acceleration wave is not a sequence of unrelated events. It is a single arc: from restraint, through capability construction, through kinetic threshold crossings, through quiet preparation, to declaration, to proof of concept, to acceleration. The car bomb sits at the inflection point where preparation became action.

The Intelligence Infrastructure Behind the Strike

If the Johar Town car bomb was indeed the shadow war’s opening salvo, then it raises a question more profound than attribution: what does the operation reveal about the intelligence infrastructure that produced it? A car bomb outside a specific, high-security residence in Lahore is not an operation that can be planned in weeks. It requires target identification, physical surveillance of the residence and its security arrangements, knowledge of the police picket’s routines and vulnerabilities, acquisition and preparation of explosives, procurement of a vehicle, recruitment and management of the person tasked with parking the vehicle, identification of approach and escape routes, and management of the communications and financial channels that connected these elements across potentially multiple countries.

Each of these requirements implies a pre-existing capability. Someone had to know which house was Saeed’s. This is not trivial; Saeed maintained multiple residences, and his location at any given time was managed by the prison department through a sub-jail designation system that was not publicly documented. Someone had to conduct physical surveillance of the BOR Society neighborhood, mapping the police presence, the traffic patterns, and the residential routines. Someone had to maintain a supply chain for explosives material within Pakistan or across its borders. Someone had to recruit Eid Gul, an operative of Afghan origin, which implies a handler network that extended into Afghanistan or into the Afghan refugee communities within Pakistan. Someone had to arrange the financial transfers that funded the operation, transfers that Pakistan’s NSA later claimed originated in India but flowed through intermediary channels.

The intelligence preparation timeline for an operation of this complexity is measured in months to years, not days to weeks. This is the strongest argument for the campaign-origin thesis: the Johar Town car bomb did not mark the beginning of intelligence activity against Saeed’s network. It marked the moment that intelligence activity became kinetic. The years between 2008 and 2021, years of seeming Indian restraint, were not years of inaction. They were years of capability construction.

Tilak Devasher’s work on India’s intelligence evolution provides the institutional context. Following 26/11, India restructured its intelligence architecture, creating new coordination mechanisms between RAW, the Intelligence Bureau, and military intelligence. The National Investigation Agency was established in 2008 specifically to handle terror-related cases. The Multi-Agency Centre, a joint intelligence fusion center, was strengthened to enable cross-agency information sharing. These institutional changes were the visible dimension of a process that almost certainly included covert dimensions as well.

Ayesha Siddiqa’s analysis from the Pakistani perspective is equally instructive. She has argued that Pakistan’s military establishment became complacent about the security of its strategic assets, the terror leaders it cultivated and protected, precisely because those assets had survived decades of international pressure without consequence. The assumption was that nuclear deterrence, combined with institutional denial and the complexity of Pakistan’s urban landscape, made these individuals permanently untouchable. The Johar Town car bomb challenged that assumption. The motorcycle-borne assassinations that followed obliterated it.

The operational chain behind the Johar Town blast also reveals something important about the role of third countries in facilitating covert operations. Peter Paul David’s frequent travel between Karachi, Lahore, and Dubai raises questions about the Gulf states’ role, whether knowing or unknowing, as operational staging areas. Dubai, with its vast expatriate population, its permissive financial environment, and its geographic position between South Asia and the Middle East, has long served as a logistical hub for intelligence operations across the region. Eid Gul’s Afghan origin raises parallel questions about the role of Afghan territory and Afghan refugee communities as recruitment pools. Pakistan hosts approximately 1.7 million registered Afghan refugees and an estimated similar number of undocumented Afghans. These communities, concentrated in particular neighborhoods and camps, provide a demographic environment from which operatives can be recruited with relative anonymity. An Afghan national carrying out an attack on Pakistani soil creates an attribution challenge that serves any intelligence service seeking deniability: the perpetrator is neither Indian nor Pakistani, and his nationality introduces an additional variable that complicates investigation.

The financial architecture of the operation adds another layer. Yusuf claimed the direct origin of the money was India, flowing through intermediary channels that included the UAE. If true, this would mirror the financial tradecraft that The Guardian later described in the context of the motorcycle-borne assassinations: payments in Pakistani rupees, funded through cross-border transfers that passed through Dubai or other Gulf financial centers, reaching recruited assets who had no direct contact with the ultimate principal. The compartmentalization is characteristic of intelligence operations designed to survive forensic analysis: even if the final link in the chain is captured, the trail terminates at an intermediary, and the intermediary’s knowledge does not extend to the principal behind the operation. Eid Gul knew who told him to park the car. He may not have known why, and he almost certainly did not know who was behind the person who told him.

This layered architecture, recruited assets with limited knowledge, financial channels designed to terminate before reaching the source, multinational operational footprints that complicate jurisdiction, and the use of third-country nationals to execute the kinetic act, is not novel. It is the standard operational template of state intelligence services conducting deniable operations on foreign soil. Israel’s Mossad used similar structures in its targeted killings across the Middle East and Europe. The United States’ CIA used comparable methods in its drone program’s ground-intelligence component. Russia’s GRU has employed recruited assets with limited knowledge in operations from Salisbury to Istanbul. The Johar Town car bomb, if it was a state intelligence operation, followed the playbook. What made it distinctive was the target: not a mid-level functionary but the co-founder of the most dangerous terror organization India had ever faced, living in the second-largest city of a nuclear-armed adversary.

Key Figures in the Johar Town Incident

Hafiz Muhammad Saeed

The intended target, whether or not he was physically present, was the reason the bombing carried strategic significance rather than merely criminal weight. Saeed co-founded Lashkar-e-Taiba in 1987, built Jamaat-ud-Dawa into Pakistan’s largest jihadist front organization, and directed the organizational machinery that produced the 26/11 Mumbai attacks. The United States placed a ten-million-dollar bounty on his head. The UNSC designated him under Resolution 1267. India designated him as an individual terrorist. Pakistan convicted him on terror-financing charges and sentenced him to thirty-six years, but the sentence was served in conditions that bore no resemblance to incarceration. His son, Hafiz Talha Saeed, had survived a separate bombing in Lahore in 2019 when a device planted inside a refrigerator shop exploded. The pattern of attacks near Saeed family members predated the Johar Town blast and continued after it.

Moeed Yusuf

Pakistan’s National Security Adviser at the time of the bombing, Yusuf was the public face of the attribution campaign. A Washington-trained policy analyst who had worked at the United States Institute of Peace before returning to Pakistan, Yusuf brought a Western communications style to his press conference, delivering key portions in English to ensure international media coverage. His claims were specific: RAW was identified, the mastermind was an Indian national, the money trail led to India, and Pakistan’s investigative agencies had mapped the network. Yusuf’s credibility was undermined by the broader context in which Pakistan routinely blames India for domestic incidents, but his specificity, naming RAW by name, citing telephone and financial forensic evidence, and describing the concurrent cyberattacks, gave his claims more substance than Pakistan’s typical attribution rhetoric.

Eid Gul

The primary perpetrator, a man of Afghan origin living in Pakistan, whose role illustrated the operational method of using recruited foreign nationals for deniable operations. Gul’s journey from the tribal areas to Lahore, his deliberate choice of the motorway to avoid police checkpoints, and his twelve-hour stopover suggested operational discipline rather than impulsive action. The use of an Afghan-origin operative is significant because it mirrors the pattern The Guardian later described in the motorcycle-borne assassinations, where Afghan nationals were reportedly recruited and paid to carry out killings on behalf of handlers who remained insulated from the operational act.

Gul’s profile raises questions about the recruitment infrastructure that preceded the car bomb. Pakistani investigators established that he had traveled from the tribal areas, a region where Afghan refugee communities and cross-border populations create a demographic environment conducive to covert recruitment. The tribal belt, including North and South Waziristan, Bajaur, and Mohmand, has historically been a zone of limited state authority, where intelligence services from multiple countries have operated with varying degrees of impunity. The recruitment of an Afghan national from this region for an operation in Lahore, over a thousand kilometers away, suggests handler networks that span Pakistan’s geographic width and possess the logistical capability to transport a recruited asset across the country while avoiding detection.

Inspector General Ghani’s account of Gul’s journey provides the most detailed operational reconstruction available. Gul entered the motorway system, a controlled-access highway where entry and exit times are automatically logged, suggesting either confidence that the logs would not be checked quickly or acceptance of the risk as part of an operational timeline that prioritized avoiding local police over avoiding electronic records. His twelve-hour rest at a motorway service area indicates either a calculated decision to arrive in Lahore at a specific time, perhaps when the police picket’s shift rotation would create a brief window of reduced alertness, or simple exhaustion from a journey that began far from Punjab. The stolen vehicle from Gujranwala added another city to the operational footprint, confirming that preparations had been spread across multiple locations. Stealing a car in Gujranwala, packing it with explosives at an undisclosed location, and delivering it to Johar Town required coordination across at least three separate sites and, presumably, at least three separate participants beyond Gul himself.

Inam Ghani

The Inspector General of Punjab Police, whose detailed operational briefing provided the investigative foundation for Yusuf’s political charges. Ghani described the bomb’s technical construction, traced the stolen vehicle’s provenance, and outlined the investigative timeline that led to the arrests. His assessment that the bomb’s construction demonstrated expertise and that the police picket’s presence had averted a major loss of life added operational gravitas to the political narrative.

Peter Paul David

The foreign national intercepted while boarding a Karachi-bound flight in the days after the blast. David’s frequent travel between Karachi, Lahore, and Dubai, his inability to provide a satisfactory explanation for his movements, and his connection to the vehicle used in the bombing made him a person of significant investigative interest. His presence in the operational chain, if confirmed, would reinforce the multinational character of the attack, linking Pakistan, the Gulf states, and a broader network that transcended domestic criminal activity.

Consequences and Impact

The immediate consequences of the Johar Town car bomb were modest by the metrics that typically measure such events. Three dead, twenty-plus injured, property damage to residential buildings and vehicles, a brief disruption to the neighborhood’s daily life, and a political controversy that flared for weeks before subsiding. The Counter Terrorism Department conducted raids, made arrests, and filed charges. The international community noted the incident without sustained engagement. India denied involvement. Pakistan’s allegations were filed alongside the country’s broader dossier of grievances against its eastern neighbor, and the world moved on.

The local consequences for Johar Town itself were more tangible than the geopolitical reverberations. The BOR Society neighborhood, a middle-class residential area where families had lived for years in the shadow of Saeed’s compound, experienced the kind of disruption that transforms a community’s relationship with its own geography. Seven houses were damaged severely enough to require structural repair. Shop owners in the blast radius lost inventory and premises. The crater in the road required municipal intervention. For the residents of BOR Society, the attack was not an abstraction about intelligence operations and counter-terrorism doctrine. It was broken glass, collapsed walls, injured neighbors, and the sudden, violent reminder that living near a designated global terrorist comes with physical risk. No Pakistani government agency compensated the civilian victims for the damage inflicted by an attack directed at a man the state had chosen to protect in their midst.

The medium-term consequences, visible only in retrospect, were transformative. The Johar Town car bomb demonstrated a capability that Pakistan’s security establishment had assumed did not exist: the ability to reach into Lahore and threaten the most protected individuals in the country’s terrorism infrastructure. This demonstration had cascading effects across multiple domains.

Within Pakistan’s intelligence community, the car bomb forced a reassessment of protective arrangements for high-value assets. If Saeed’s residence, protected by a permanent police picket and situated within Lahore’s garrison infrastructure, could be targeted, then the security assumptions protecting every other senior terrorist leader required revision. The ISI had to consider that its protective architecture had been compromised, that someone possessed sufficient intelligence on the locations, routines, and vulnerabilities of its clients to mount operations against them. This realization, whether it produced effective countermeasures or merely increased anxiety, altered the psychological environment in which Pakistan-sheltered terrorists operated. Subsequent reports suggest that several high-value individuals changed their residences, altered their travel patterns, and reduced their public appearances in the months following the Johar Town blast. These behavioral changes, while rational from a security standpoint, degraded the operational effectiveness of the very organizations the ISI had cultivated as strategic assets. A terror commander who cannot meet his subordinates, cannot inspect his training camps, and cannot coordinate operations because he is hiding from an unseen enemy is a terror commander whose organization is already under degradation, even before a single bullet has been fired at him.

Within the diplomatic sphere, Pakistan’s public attribution of the car bomb to RAW added a new data point to the country’s long-running campaign to portray India as a state sponsor of terrorism. Previous Pakistani allegations had been generic, asserting Indian interference without specific operational evidence. Yusuf’s press conference offered names, methods, and claimed forensic evidence. The international community did not act on these allegations in 2021. But when Pakistan’s Foreign Secretary Muhammad Syrus Sajjad Qazi held his own press conference in January 2024, formally alleging Indian involvement in multiple killings on Pakistani soil, the Johar Town car bomb was already part of the established evidentiary record Pakistan was building. The pattern had thickened. The allegations had compounded. By 2024, the cumulative weight of Pakistani claims, combined with The Guardian’s independent investigation and parallel allegations from the United States and Canada regarding alleged Indian intelligence operations on their soil, created a diplomatic environment in which India’s total deniability was under greater pressure than at any point since the campaign’s inception.

Within India’s strategic community, the car bomb’s significance lay in what it revealed about the shifting boundaries of acceptable state action. Whether or not India was responsible, the bombing occurred in a strategic environment where India’s willingness to conduct cross-border operations had been escalating steadily: from the surgical strikes of 2016 to the Balakot airstrikes of 2019 to whatever the Johar Town blast represented. Each escalation expanded the envelope of what was thinkable. Each operation that went without effective punishment, each demonstration of capability that was met with diplomatic noise rather than deterrent consequences, lowered the threshold for the next operation. India’s strategic debate, conducted in closed rooms and op-ed pages, had shifted from “should we act” to “how should we act” to “how far can we go.” The Johar Town car bomb, whether it was state action or fortunate coincidence, provided a data point for each of these questions.

The longest-term consequence was the campaign itself. Whether the car bomb inaugurated the campaign or merely preceded it, the timeline is inescapable. From the Johar Town crater in June 2021 to the full chronological record of targeted killings that now stretches across multiple years, across multiple Pakistani cities, across multiple terrorist organizations, the escalation curve passes through Johar Town. Something changed in June 2021. What changed was the demonstration that Pakistan’s most protected terrorist could not take his protection for granted.

The Analytical Debate

Two sharply opposed analytical frameworks compete to explain the Johar Town car bomb, and the debate between them shapes how the entire subsequent campaign is understood.

The first framework, which this article has advanced, treats the car bomb as the opening move of a systematic Indian covert campaign against Pakistan-based terrorism. In this reading, the attack was planned by Indian intelligence, executed through recruited assets, financed through third-country channels, and designed to deliver a strategic message: impunity is over. The subsequent motorcycle-borne assassinations are the campaign that the car bomb inaugurated. The target-selection logic is consistent (India’s designated terrorists), the operational tradecraft is sophisticated (multinational recruitment, layered financial transfers, rigorous operational security), and the escalation trajectory is deliberate (moving from a symbolic attack on the highest-value target to systematic elimination of the operational infrastructure below him).

Proponents of this framework draw on both circumstantial and structural evidence. The circumstantial case rests on target selection: the car bomb targeted the residence of India’s most-wanted individual, which eliminates the vast majority of domestic Pakistani actors who would have no interest in attacking Saeed. Within Pakistan’s militant landscape, Saeed is not a rival but an ally, a patron, and a fundraiser. The idea that a competing faction would attack him is theoretically possible but practically improbable. Sectarian violence, the standard explanation for politically inconvenient killings in Pakistan, does not apply: Saeed’s Ahl-e-Hadith affiliation has not produced the kind of sectarian targeting that characterizes Shia-Sunni conflict. Criminal enterprise does not apply: Saeed is not involved in the drug trade, land disputes, or commercial rivalries that generate targeted violence in Pakistani cities. After eliminating the improbable, what remains is the plausible: a state actor with both motive and capability.

The structural case rests on the broader arc. India had motive (thirteen years of failed justice for 26/11), capability (an intelligence apparatus that had been quietly building cross-border operational capacity), opportunity (a target whose address was known, whose security had gaps, and whose protection depended on assumptions of impenetrability), and a strategic context (escalating willingness to use force, combined with a political leadership that had publicly signaled readiness to strike inside Pakistan). Each of these factors, considered individually, supports but does not prove the thesis. Considered together, they form a pattern that is difficult to explain through alternative frameworks.

The second framework treats the car bomb as a domestic Pakistani event, distinct from and unrelated to the subsequent killings. In this reading, the explosion could have been the work of sectarian rivals, internal militant feuds, or criminal elements with no connection to Indian intelligence. Pakistan is a country where car bombs detonate regularly, where militant factions fight each other, and where intelligence agencies manufacture attribution narratives to serve political purposes. The fact that Yusuf blamed India proves nothing; Pakistan blames India reflexively, the way India blames Pakistan reflexively. The subsequent shootings may or may not be an Indian campaign, but even if they are, the car bomb’s methodological discontinuity (explosive vehicle versus precision firearm) argues against treating it as part of the same operational program.

Proponents of the domestic-origin framework highlight several points that deserve serious engagement. Pakistan’s internal violence includes factions within the TTP (Tehrik-i-Taliban Pakistan) that have targeted state-protected militant leaders. The Balochistan Liberation Army has conducted operations in Punjab. Criminal elements in Lahore have used car bombs in targeted assassinations unrelated to geopolitics. The possibility that the Johar Town attack was a TTP splinter operation, a Baloch insurgent action, or even an ISI false-flag operation designed to build a diplomatic case against India cannot be dismissed entirely.

A third analytical position, occupying the space between these two frameworks, deserves attention. This position holds that the car bomb may have been an Indian operation, but one planned and executed by a different organizational unit than the subsequent motorcycle campaign. Intelligence agencies are not monolithic structures. RAW, like any major intelligence service, operates through multiple directorates with distinct capabilities and operational cultures. A directorate specializing in explosives and sabotage would plan a car bomb operation differently than a directorate specializing in targeted assassination through recruited human assets. The methodological gap between the car bomb and the shootings could reflect not different campaigns but different units within the same service, each tasked with the same strategic objective but applying different operational methods.

Both frameworks have merit. The first is supported by the target-selection logic, the operational sophistication, the absence of alternative explanation, and the consistency with the tradecraft later described in The Guardian’s investigation. The second is supported by the methodological gap, the inherent unreliability of Pakistani attribution claims, and the legitimate possibility that the car bomb had domestic origins that were politically convenient for Pakistan to attribute to India.

This article takes a position between these poles. The car bomb’s connection to the subsequent campaign is the strongest inference available given the evidence, but it is not confirmed. The analytical confidence is high but not dispositive. The car bomb fits the campaign too neatly to dismiss and too imperfectly to confirm. It is the shadow war’s most ambiguous chapter, and that ambiguity is itself analytically significant: it tells us something about how covert campaigns begin, gradually, with events that are legible only in retrospect, where the first move is always the hardest to attribute because the pattern it inaugurates does not yet exist.

Christine Fair, the Georgetown University scholar whose work on the Pakistan Army’s strategic culture has shaped the field, has argued that Pakistan’s cultivation of terrorist organizations as strategic assets always carried an implicit risk: that the adversary would eventually develop the capability and the will to target those assets directly, bypassing the nuclear deterrence and the diplomatic protection that Pakistan assumed were permanent shields. The Johar Town car bomb, in this framework, was the moment that implicit risk became explicit. Fair’s analysis draws on decades of research into how the Pakistan Army conceptualizes its relationship with militant proxies, and her core argument is that the Army never developed a contingency plan for the scenario in which India simply stopped trying to hold Pakistan accountable through institutions and started acting unilaterally.

Praveen Swami has offered a complementary analysis, arguing that the operational pattern visible from 2022 onward reveals a campaign that was too well-organized and too precisely targeted to have been assembled quickly. The intelligence groundwork, the human networks, the financial channels, and the operational procedures that the campaign demonstrates must have been built over years. If that is true, then the car bomb was not the moment the campaign was conceived. It was the moment the campaign became visible. Swami’s chronological analysis tracks the escalation from symbolic strikes (car bomb near a residence) through confirmed killings (motorcycle shootings) to institutional degradation (the systematic elimination of mid-level and senior commanders across multiple organizations). The progression suggests a campaign that was planned with long-term objectives, not one that emerged ad hoc from a single explosive event.

Why It Still Matters

The Johar Town car bomb matters because it established three precedents that continue to shape the India-Pakistan strategic environment. The first precedent is penetration. Before June 23, 2021, the operational assumption among Pakistan-based terrorist leaders was that Pakistan’s urban centers, and especially Lahore, were impenetrable to hostile intelligence operations. The car bomb demonstrated otherwise. The psychological impact of this demonstration cannot be overstated. When you have lived for decades under the assumption that your state protectors have made you untouchable, and then a bomb explodes outside your bedroom window, the assumption does not survive. The behavioral changes that analysts have documented among surviving terrorist leaders, increased security, reduced movement, avoidance of established routines, changes in communication patterns, trace their origin to this moment.

The penetration of Lahore was particularly significant because of what the city represents in the safe-haven architecture that Pakistan has maintained for decades. Lahore is not merely a city where terrorists live; it is the headquarters city of Pakistan’s most dangerous terror organization. The Muridke compound sits on its outskirts. Saeed’s residences are scattered through its neighborhoods. JuD’s offices, madrassas, hospitals, and media operations are woven into the city’s fabric. The Pakistan Army’s Lahore Cantonment provides the military infrastructure that undergirds the protection. For the shadow war to penetrate Lahore was for it to penetrate the command center of the infrastructure it seeks to dismantle.

The implications extended beyond LeT. Karachi, Pakistan’s largest city and a haven for Jaish-e-Mohammed operatives, was penetrated within nine months of the Johar Town blast when Zahoor Mistry was killed. Nawabshah, in interior Sindh, was penetrated a month before that with the Rehmani killing. Sialkot, a garrison town in Punjab, was penetrated in October 2023 when Shahid Latif was assassinated inside a mosque. Rawalakot, in Pakistan-Occupied Kashmir, was penetrated when Riyaz Ahmad was shot inside Al-Qudus mosque. Bajaur, in the tribal areas of Khyber Pakhtunkhwa, was penetrated when Akram Khan was killed. By 2026, the campaign had operated across virtually every major geographic zone of Pakistan, from the tribal areas to the southern port cities. Each operation expanded the map of vulnerability. Each expansion traced back to the first demonstration, the Johar Town car bomb, that Pakistan’s protection could be breached.

The second precedent is escalation management. The car bomb was a violent act on Pakistani soil that killed Pakistani civilians. It could have triggered a severe diplomatic crisis, a military escalation, or an international incident. Instead, it triggered a press conference. Pakistan accused India. India ignored the accusation. The world shrugged. The diplomatic non-response to the car bomb established the cost structure for the operations that followed: the cost of conducting covert operations against terrorists on Pakistani soil was low, because Pakistan’s complaints would not be taken seriously by the international community and because India’s deniability would be accepted at face value.

This cost structure was not accidental. It was the product of decades of Pakistani credibility erosion. Pakistan had spent years denying that it harbored terrorists, denying Osama bin Laden’s presence in Abbottabad until the May 2011 raid that killed him a kilometer from the Pakistan Military Academy, denying ISI’s involvement in the 26/11 attacks despite intercepted communications and Headley’s testimony, and denying institutional support for LeT and JeM despite UNSC sanctions and FATF grey-listing. Each denial damaged Pakistan’s standing as a credible accuser. When Pakistan pointed its finger at India over the Johar Town car bomb, the international community’s response was shaped not by the merits of the specific claim but by the accumulated skepticism toward Pakistani attribution narratives. Yusuf’s press conference was detailed and specific, but it arrived in a diplomatic environment where Pakistan’s word had been devalued by decades of denial. The car bomb’s architect, if there was a state architect, could reasonably have predicted this response: that Pakistan’s complaint would be ignored because Pakistan had exhausted its credibility on related issues.

The third precedent is campaign architecture. The car bomb, whether or not it was the campaign’s true origin, demonstrated a template for operating within Pakistan. It showed that local assets could be recruited, that explosives material could be procured or assembled, that high-security targets could be reached, and that the operational trail could be compartmentalized sufficiently to survive initial investigation. Every subsequent operation in the shadow war refined this template: the method changed from car bombs to motorcycle shootings, the targets shifted from symbolic attacks on leadership residences to precise eliminations of designated individuals, and the operational tempo increased from one event every several months to multiple events per month. The refinement was progressive, suggesting institutional learning.

The fourth dimension of the car bomb’s enduring significance, beyond penetration, escalation management, and campaign architecture, is its role in the psychological warfare dimension of the conflict. The car bomb demonstrated something that mere intelligence reports cannot: visceral proximity. An intelligence agency can report that a target has been located. A car bomb demonstrates that the target lives within blast range. The difference is not informational but experiential. After Johar Town, every senior leader of LeT, JeM, Hizbul Mujahideen, and every affiliated faction had to consider the possibility that someone had already identified their residence, already assessed its security vulnerabilities, and was deciding whether and when to act. The operational value of this psychological pressure is incalculable. It degrades decision-making. It forces leaders into isolation, reducing their ability to command their organizations. It creates internal suspicion, because the penetration of security implies that someone close to the target provided information. The shadow war’s psychological dimension, its ability to degrade organizations it has not yet struck, begins at Johar Town.

As of 2026, with more than thirty India-linked militants eliminated by unidentified assailants across Pakistan, the Johar Town car bomb occupies a specific position in the campaign’s architecture. It is the prologue. Every chapter that followed, from Rehmani’s killing in Nawabshah to the attack on LeT co-founder Amir Hamza in Lahore, reads differently when the reader knows that the story began with a crater in the asphalt outside the most protected house in Pakistan’s second-largest city. The car bomb near Hafiz Saeed’s residence did not kill Hafiz Saeed. It did something more lasting: it demonstrated that Hafiz Saeed could be killed, and in doing so, it made every man beneath Saeed in the organizational hierarchy a credible target.

The acceleration in 2025 and 2026, following Operation Sindoor, elevated the campaign from a covert intelligence program to an open dimension of India’s counter-terrorism architecture. When Indian missiles struck targets across Pakistan in May 2025 in response to the Pahalgam massacre, the line between the shadow war and the open war blurred. The post-Sindoor period produced the most intense phase of the targeted-killing campaign yet, with eliminations occurring at a pace that suggested either a deliberate escalation following the conventional military action or the exploitation of degraded Pakistani security in the conflict’s aftermath. In either case, the Johar Town car bomb’s significance was retroactively amplified: the campaign it inaugurated had not only survived for five years but had intensified to a level that its architects, whoever they were, could scarcely have predicted in June 2021.

The diplomatic landscape has shifted with the campaign. Pakistan’s former Foreign Minister Bilawal Bhutto Zardari stated in July 2025 that Islamabad had no objection to extraditing individuals of concern, including figures like Hafiz Saeed, as a confidence-building measure. Whether this represented genuine willingness or diplomatic posturing, the statement itself was unprecedented. For over a decade, Pakistan had refused to even acknowledge that Saeed deserved prosecution, much less extradition. The shadow war may not have killed Saeed, but it created the conditions under which Pakistan’s political class felt compelled to publicly contemplate his surrender, a concession that thirteen years of diplomatic pressure had failed to produce.

The question of whether the June 2021 car bomb in Johar Town was the first act of India’s shadow war or merely the coincidence that preceded it will likely never be resolved with certainty. Covert operations are designed to resist attribution; that is their defining feature. What can be said is this: before June 23, 2021, no one spoke of a campaign. After June 23, 2021, a campaign began. The crater in Johar Town is either the origin of that campaign or the most remarkable coincidence in the history of India-Pakistan covert conflict. The evidence favors the former. The absence of proof preserves the latter. Somewhere in that gap between evidence and proof, the shadow war was born.

Frequently Asked Questions

Q: What happened near Hafiz Saeed’s house in Lahore in June 2021?

On June 23, 2021, a car bomb detonated near the residence of Hafiz Muhammad Saeed, the co-founder of Lashkar-e-Taiba and the mastermind of the 26/11 Mumbai attacks, in the Johar Town neighborhood of Lahore, Pakistan. The explosion killed three people and injured more than twenty others. The blast left a four-foot-deep crater, destroyed twelve vehicles, and damaged seven houses. Pakistan’s Counter Terrorism Department took control of the investigation and arrested several suspects, including the primary perpetrator, a man of Afghan origin named Eid Gul. Pakistan’s National Security Adviser subsequently blamed India’s intelligence agency RAW for orchestrating the attack.

Q: Did India bomb Hafiz Saeed’s residence in Lahore?

Pakistan’s National Security Adviser Moeed Yusuf accused India’s Research and Analysis Wing of planning and financing the Johar Town car bomb. He claimed to possess telephone records, financial forensic evidence, and arrested suspects’ testimony linking the attack to RAW. India has not publicly addressed the specific allegation and has historically denied conducting operations on Pakistani soil. The attribution remains contested: Pakistan’s claim is specific but unverified independently, and India’s denial is consistent with its broader deniability posture regarding covert operations.

Q: Was Hafiz Saeed present at the residence when the bomb went off?

This is contested. Jamaat-ud-Dawa’s spokesperson stated that Saeed was serving his sentence at Kot Lakhpat Jail and was not at the residence. Pakistani journalist Amjad Saeed Sahani reported on Dawn News that the prison department’s sub-jail designation system allowed Saeed to serve his sentence at his own residence, and that according to his sources, Saeed was present when the bomb detonated. The discrepancy has not been officially resolved.

Q: How powerful was the Johar Town car bomb?

The bomb contained an estimated fifteen to thirty kilograms of explosives, depending on the source. Punjab Police Inspector General Inam Ghani described the device as expertly constructed, noting that the car was destroyed so completely that identifying its make and model from the wreckage was difficult. The blast created a crater four feet deep and eight feet wide, shattered windows across a hundred-foot radius, and collapsed sections of seven houses.

Q: Who was arrested for the Johar Town bombing?

The primary perpetrator was identified as Eid Gul, described as a man of Afghan origin who had been living in Pakistan. Gul traveled from the tribal areas to Lahore via the motorway, deliberately avoiding local police routes. A foreign national named Peter Paul David was also intercepted while boarding a Karachi-bound flight. David had been traveling frequently between Karachi, Lahore, and Dubai and was connected to the vehicle used in the bombing.

Q: What did NSA Moeed Yusuf say about India’s involvement?

On July 4, 2021, twelve days after the blast, Yusuf held a press conference in Islamabad alongside the Punjab Police Inspector General and the Information Minister. He stated unequivocally that the mastermind of the Johar Town attack was an Indian national affiliated with RAW, that the financial trail led to India, and that Pakistan had concrete evidence including telephone and financial records. He also alleged that thousands of coordinated cyberattacks had targeted Pakistan’s investigative infrastructure simultaneously, which he claimed proved state-level Indian involvement.

Q: Is the Lahore car bomb connected to the shadow war against terrorists in Pakistan?

The connection is analytically inferred rather than confirmed. The car bomb targeted the residence of India’s most-wanted man. The subsequent campaign of targeted killings, beginning seven months later, exclusively targets individuals on India’s designated-terrorist lists. The target-selection logic, operational sophistication, and multinational financing structure are consistent across both the car bomb and the later shootings. However, the methodological difference between a car bomb and motorcycle-borne shootings is significant, and the connection cannot be confirmed with certainty.

Q: Why would India target Hafiz Saeed’s residence?

Hafiz Saeed is the co-founder of Lashkar-e-Taiba and the acknowledged mastermind of the 2008 Mumbai attacks that killed 166 people. India has sought his extradition for over a decade without success. The United States has placed a ten-million-dollar bounty on him. The United Nations Security Council has designated him as a terrorist. Pakistan convicted him on terror-financing charges but has been accused of providing him with comfortable imprisonment rather than genuine incarceration. If the car bomb was an Indian operation, the target selection follows logically from thirteen years of failed diplomatic and legal efforts to hold Saeed accountable.

Q: Was the car bomb the start of the targeted killing campaign?

The car bomb is widely regarded by analysts as the chronological starting point of the campaign, though the connection is inferential. Defense journalist Saikat Datta and counter-terrorism analyst Praveen Swami have both traced the campaign’s visible initiation to the 2021-2022 period, with the car bomb as the declaration, the January 2022 Rehmani killing as the proof of concept, and the March 2022 Mistry killing as the confirmation of pattern. Some analysts argue that intelligence preparation began years before the car bomb, making it a milestone rather than an origin point.

Q: How did the international community respond to the Johar Town attack?

The international response was minimal. No foreign government publicly corroborated Pakistan’s attribution of the attack to India. The incident received brief coverage in international media but did not produce diplomatic action. The muted response established an important precedent: Pakistan’s complaints about Indian covert operations on its soil would not generate international consequences, a cost structure that arguably enabled the expansion of the campaign in subsequent years.

Q: What evidence links the car bomb to the later motorcycle shootings?

Three factors support the connection. First, target-selection consistency: both the car bomb (targeting Saeed’s residence) and the shootings (targeting India-designated terrorists) focus exclusively on individuals India has formally identified as hostile. Second, operational sophistication: both the car bomb and the shootings involved recruited foreign-origin operatives, multinational financial channels, and rigorous compartmentalization. Third, the absence of alternative explanation: no domestic Pakistani group has claimed any of these operations, and Pakistan’s own investigators have consistently pointed toward foreign intelligence involvement.

Q: Did the car bomb change security arrangements for terrorist leaders in Pakistan?

The bombing forced a reassessment of protective arrangements across Pakistan’s terrorism infrastructure. If Saeed’s residence, protected by a permanent police picket in Lahore’s garrison-secured urban core, could be targeted, then every other senior terrorist leader’s security arrangements were potentially vulnerable. Analysts have documented behavioral changes among surviving leaders in the years following the campaign’s acceleration, including increased security details, reduced public appearances, changes in movement patterns, and avoidance of established routines.

Q: What happened to Hafiz Saeed after the car bomb?

Saeed continues to serve his thirty-six-year sentence on terror-financing charges. His legal status has not changed as a result of the bombing. In July 2025, Pakistan’s former Foreign Minister Bilawal Bhutto Zardari stated that Islamabad had no objection to extraditing individuals of concern to India, including figures like Saeed, as a confidence-building measure, the first time a senior Pakistani official publicly entertained Saeed’s extradition. Whether this represents a genuine shift or diplomatic posturing remains unclear.

Q: How does the Johar Town bombing compare to other attacks in the shadow war?

The car bomb is methodologically distinct from every subsequent event in the campaign. All confirmed subsequent killings used firearms, primarily carried out by motorcycle-borne assailants who approached the target, fired at close range, and fled. The car bomb used explosives, produced civilian casualties, and targeted a residence rather than an individual. This methodological gap is the strongest argument against treating the car bomb as part of the same campaign, and the strongest argument for treating it as a distinct operational phase, the declaration that preceded the doctrine.

Q: Was the Johar Town attack a failed assassination attempt?

The answer depends on the analytical framework. If the intent was to kill Hafiz Saeed, the attack failed: Saeed was either absent or survived unharmed. If the intent was to deliver a strategic message, that Saeed’s most protected residence was within blast radius and that Pakistan’s protective infrastructure was penetrable, then the attack succeeded completely. The absence of a claim of responsibility and the attack’s proximity to Saeed’s address, rather than a direct hit on the building itself, suggest that the message was at least as important as the physical outcome.

Q: How does the Lahore car bomb fit within the broader India-Pakistan conflict?

The Johar Town bombing fits within a pattern of escalating Indian responses to Pakistan-origin terrorism: from diplomatic protest (pre-2016), to surgical strikes across the LoC (2016), to airstrikes on Pakistani territory (Balakot, 2019), to what analysts believe is a covert elimination campaign (2021 onward). Each escalation expanded the boundaries of acceptable action. The car bomb, if it was indeed an Indian operation, represented the shift from military strikes against infrastructure to covert operations against the individuals India held personally responsible for terror attacks.

Q: Why did Pakistan wait twelve days before blaming India?

The twelve-day gap between the June 23 blast and Moeed Yusuf’s July 4-5 press conference allowed time for investigation, forensic analysis, and the construction of a presentable attribution narrative. Inspector General Ghani needed time to trace the stolen vehicle, arrest the perpetrators, analyze the electronic equipment recovered from the suspects, and establish the financial trail that Yusuf would present as evidence. The delay also allowed Pakistan to coordinate its messaging across multiple government agencies, presenting the police, intelligence, and political dimensions as a unified case rather than a rushed reaction.

Q: What role did Afghan nationals play in the Johar Town bombing?

Eid Gul, the primary perpetrator identified by Pakistani investigators, was described as a man of Afghan origin who had been living in Pakistan. His involvement reflects a broader pattern that would become characteristic of the subsequent killing campaign: the use of recruited foreign-origin assets, particularly Afghan nationals, to execute operations on Pakistani soil. This pattern creates an additional layer of deniability, since the executing agent is neither Indian nor Pakistani, and complicates attribution by introducing a third-country nationality into the operational chain. The April 2024 Guardian investigation later described Afghan nationals as playing similar roles in the motorcycle-borne assassinations that followed the car bomb.

Q: How did the Johar Town bombing affect Pakistan’s relationship with the FATF?

The Johar Town bombing occurred during a period of intense FATF scrutiny of Pakistan’s counter-terrorism financing regime. Pakistan had been placed on the FATF grey list in June 2018 and was working through a comprehensive action plan to demonstrate compliance with international anti-money-laundering and counter-terrorism-financing standards. The bombing exposed the tension between Pakistan’s performative compliance with FATF requirements, which included convicting Saeed on terror-financing charges, and the operational reality that Saeed was serving his sentence from a protected residence while the organization he founded continued to operate. The incident reinforced the perception among FATF member states that Pakistan’s counter-terrorism measures were procedurally correct but substantively hollow. Pakistan was eventually removed from the grey list in October 2022, but the Johar Town episode contributed to the extended timeline of its compliance journey.

Q: How does the Johar Town car bomb compare to Israel’s targeted killing operations?

Israel’s Mossad has conducted targeted killings on foreign soil for decades, from the Operation Wrath of God campaign against Munich Olympics perpetrators in the 1970s through the assassination of Hamas commanders and Iranian nuclear scientists in subsequent decades. The Johar Town car bomb shares certain operational characteristics with Israeli operations: the use of explosive devices against specific high-value targets, the employment of recruited local or third-country assets, the multilayered financial and communication compartmentalization, and the absolute deniability. The key distinction is transparency. Israeli operations have been gradually acknowledged through semi-official channels, journalistic accounts, and court proceedings, creating a body of public knowledge about Mossad’s methods. India’s alleged operations maintain total deniability, with no official acknowledgment and no journalist access to operational details. The Johar Town car bomb, if it was an Indian operation, represents the beginning of an Indian program that borrowed Israel’s operational logic while rejecting its accountability framework.

Q: What was the condition of Saeed’s residence after the blast?

Saeed’s residence sustained significant external damage, including shattered windows, blown-open doors, and cracked walls, but the structure remained intact. The police picket positioned between the car bomb and the residence absorbed a substantial portion of the blast’s directed force, which Inspector General Ghani credited with preventing a major loss of life inside the building itself. Houses and commercial establishments within a hundred-foot radius suffered more severe damage, with collapsed sections, destroyed storefronts, and debris scattered across the street. Twelve vehicles parked in the vicinity were destroyed, including rickshaws and motorcycles that were reduced to twisted metal.

Q: What is the significance of the Johar Town bombing in the context of nuclear deterrence?

The car bomb challenged one of the foundational assumptions of nuclear deterrence between India and Pakistan: that nuclear weapons made the leadership of state-protected organizations untouchable. Pakistan’s nuclear arsenal was designed to deter large-scale Indian military action, and for decades it served that purpose effectively. Conventional military strikes against terrorist leaders in Pakistani cities were unthinkable because they risked nuclear escalation. The car bomb, if it was an Indian operation, demonstrated that the nuclear deterrent could be circumvented through covert methods that fell beneath the threshold of conventional military action. A car bomb in a residential neighborhood does not trigger the same escalation dynamics as an airstrike on a military target. The covert method, plausibly deniable and calibrated to avoid attributable state-on-state violence, exploited a gap in Pakistan’s deterrence architecture. The subsequent motorcycle-borne assassinations exploited the same gap with even greater precision and even lower escalatory risk. The Johar Town car bomb, in this sense, was not just an attack on a terrorist’s residence. It was a proof of concept for operating beneath the nuclear threshold.