On a Friday morning in October 2023, masked gunmen walked into a private clinic in the Mirali area of North Waziristan, Pakistan’s most volatile tribal district, and shot dead Dawood Malik, the founder of the Lashkar-e-Jabbar terror outfit and one of the closest associates of Jaish-e-Mohammed founder Masood Azhar. The attackers escaped immediately after the killing, vanishing into the narrow streets and dust-choked alleyways of a town where the Pakistan Army maintains checkpoints every few hundred meters, where tribal codes of hospitality and revenge govern daily life more than any national law, and where outsiders are noticed, questioned, and remembered. That Malik could be hunted and killed in this environment, a landscape where even Pakistani military convoys move with armed escorts, represents something far more significant than the elimination of a single terror operative. It represents the geographic expansion of a campaign that had previously operated in Pakistan’s cities, reaching into the country’s most remote and lawless region to find its targets.

Malik’s killing came just eleven days after Shahid Latif, the mastermind of the 2016 Pathankot airbase attack, was shot dead inside a mosque in Sialkot, Punjab. The temporal proximity is analytically significant. Two associates of Masood Azhar killed within less than two weeks of each other, in two entirely different regions of Pakistan separated by over a thousand kilometers of geography, operated upon by what appear to be two entirely different teams capable of functioning independently in radically different operational environments. Sialkot is urban Punjab, where Urdu is spoken, where the terrain is flat and populated, where escape routes follow paved highways. Mirali is tribal Waziristan, where Pashto dominates, where the landscape is mountainous and barren, where escape requires knowledge of goat tracks and seasonal riverbeds that do not appear on any commercial map. The capability to operate in both environments simultaneously, and to do so within days of each other, reveals an operational infrastructure of extraordinary depth and geographic breadth.

This profile reconstructs what is known about Dawood Malik’s life, his role within the Lashkar-e-Jabbar organization and its parent network under Masood Azhar, the circumstances of his killing, and what his elimination in North Waziristan tells us about the shadow war’s trajectory. It also provides the first systematic assessment of the Waziristan operational environment, a landscape that has defeated armies and defied governments, yet somehow failed to protect one of the men hiding within it.

The Killing

On October 20, 2023, Dawood Malik was present at a private clinic in Mirali, a town in North Waziristan district that sits roughly thirty kilometers south of Miranshah, the district headquarters. Mirali, known locally as Mir Ali, functions as the commercial hub of central North Waziristan, a settlement of roughly 50,000 people that straddles the main road connecting the tribal belt to the settled districts of Khyber Pakhtunkhwa province to the east. The town had been partially destroyed during Operation Zarb-e-Azb in 2014, when the Pakistan Army launched a massive offensive against Tehrik-i-Taliban Pakistan fighters entrenched in the district, and had been slowly rebuilding in the years since.

According to reports first published by Dawn, Pakistan’s oldest English-language newspaper, masked gunmen entered the clinic where Malik was being treated and opened fire. The attackers used firearms at close range, ensuring the killing was precise and leaving no room for survival. Pakistani police described the incident as a targeted attack, a characterization that distinguished it from the random violence and factional clashes that are commonplace in the tribal belt. The gunmen fled immediately after the shooting, and despite the Pakistan Army’s heavy presence in the district, including checkpoints, surveillance posts, and regular patrols, no arrests were made. No group claimed responsibility for the killing.

The choice of location is analytically significant. Private clinics in the tribal areas serve as informal gathering points where men from the community come for treatment, consultation, and social interaction. They are semi-public spaces where a target’s presence can be predicted if someone knows they are seeking medical attention. The clinic setting suggests prior surveillance and intelligence on Malik’s movements, specifically knowledge that he would be at that particular location on that particular morning. In an environment as surveillance-saturated as post-Zarb-e-Azb North Waziristan, where the Pakistan Army monitors movement through checkpoints and electronic surveillance, obtaining this intelligence required either deep local assets with direct knowledge of Malik’s schedule or access to communications that revealed his plans.

Pakistani police also recovered the tortured body of an unidentified person in the same area around the same time. The connection between this second body and Malik’s killing remains unclear, but the juxtaposition raises questions about whether the operation involved multiple targets or whether the unidentified victim was connected to the intelligence chain that led to Malik. In the tribal belt, where informants face brutal retribution from the groups they betray, the discovery of a tortured body in proximity to a targeted killing carries implications that extend beyond coincidence.

The killing occurred on a Friday, the day of congregational prayer in the Islamic world, a detail that echoes the timing pattern observed in other eliminations in the campaign. Friday routines are predictable. Men travel to mosques, clinics, and markets at known times. The predictability creates vulnerability, and the campaign has repeatedly exploited this vulnerability across different Pakistani cities. Shahid Latif was killed inside a mosque. Zahoor Mistry was killed during his morning routine in Karachi. The Friday timing in Mirali fits the pattern of targeting individuals at their most predictable moments.

CCTV footage of the incident was reportedly recovered by Pakistani security forces, though it has not been publicly released. The existence of CCTV cameras at a private clinic in Mirali is itself noteworthy; the tribal belt’s infrastructure has improved significantly since the military operations of 2014, and security cameras have become more common at commercial establishments, particularly in areas near army checkpoints. Whether the footage provides identifiable information about the attackers is unknown, but its recovery suggests that Pakistani authorities have access to evidence that could, in theory, advance their investigation. The absence of any arrests or public investigative findings in the months and years following the killing suggests either that the investigation yielded no actionable leads or that the leads were not pursued.

The operational signature of the killing, while adapted to the Waziristan environment, shares core characteristics with other eliminations in the campaign. The attackers arrived at a known location where the target was present, used firearms at close range to ensure lethality, made no attempt at negotiation or kidnapping, escaped immediately after the shooting, and left no identifying information behind. The absence of a kidnapping component distinguishes this operation from the abductions and forced disappearances that characterize both Pakistani intelligence operations and TTP targeting of opponents. The precision of the hit, targeting a specific individual at a specific location rather than attacking a broader facility or group, distinguishes it from military operations and factional clashes that typically produce multiple casualties and property destruction. The killing was surgical in the clinical sense: it accomplished its objective with minimal collateral impact and maximum efficiency.

The geographic context of Mirali adds a layer of significance that cannot be overstated. Mirali sits in the heart of what was, until Operation Zarb-e-Azb in 2014, one of the most dangerous and ungoverned territories on earth. The town was a stronghold of the Daur tribe and served as a commercial crossroads where traders, tribal leaders, Pakistani military personnel, and members of various armed groups intersected daily. Even after the military operation cleared the most overt militant strongholds, Mirali retained its character as a liminal space where state authority and tribal governance coexist uneasily. The Pakistan Army controls the main roads and the checkpoints, but the alleyways, the private compounds, and the social networks that connect households remain beyond direct military surveillance. An operation in this environment requires a level of granular local knowledge that no amount of satellite imagery or signals intelligence can provide.

The investigation, or lack thereof, that followed the killing mirrors the pattern observed across every other elimination in the campaign. Pakistani police opened a case, recorded statements, and collected evidence including the CCTV footage. No progress reports were issued. No suspects were identified. No arrests were made. The case joined dozens of similar unsolved cases across Pakistan’s police jurisdictions, from Sindh to Punjab to the tribal belt, each involving the killing of an individual connected to anti-India terrorism, each remaining open and unresolved. The cumulative weight of these unsolved cases tells its own story: either Pakistan’s law enforcement is comprehensively incompetent across every jurisdiction simultaneously, or there are institutional factors that prevent serious investigation of these killings. Both explanations have adherents among analysts, and neither is fully satisfying.

Who Was Dawood Malik

Dawood Malik’s significance within the landscape of anti-India terrorism derives from two intersecting identities: his role as the founder of Lashkar-e-Jabbar, a lesser-known but operationally active radical outfit, and his close personal relationship with Masood Azhar, the founder and leader of Jaish-e-Mohammed. Understanding Malik requires understanding both dimensions, the organizational and the personal, because in the world of Pakistani militant groups, the two are rarely separable.

Malik was described in Pakistani media as a tribal elder from North Waziristan, a designation that carries specific meaning in the Pashtun tribal system. Tribal elders, known as maliks, serve as intermediaries between the community and external authorities, including the Pakistani government, the military, and, in the post-2001 era, the various armed groups that have established themselves in the tribal belt. The malik system predates Pakistan itself, rooted in centuries of Pashtun governance structures that distribute authority through kinship networks and consensus-based councils called jirgas. A malik who is also the founder of a militant organization occupies a dual position of social authority and armed capability that makes him both influential and dangerous.

Malik’s connection to Masood Azhar was not peripheral. Multiple Indian and Pakistani media reports described him as Azhar’s right-hand man, a characterization that implies regular operational contact, trust in matters of organizational strategy, and involvement in the decisions that shaped Jaish-e-Mohammed’s activities. According to reports published by India TV News, Malik was involved in the operations of several terror outfits beyond just Lashkar-e-Jabbar, including JeM itself and Lashkar-e-Jhangvi, the virulently sectarian Sunni extremist group responsible for some of Pakistan’s worst anti-Shia massacres. This multi-organizational involvement is not unusual in Pakistan’s militant ecosystem, where ideological affinity and personal loyalty create overlapping memberships across groups that Western analysis sometimes treats as distinct entities.

Perhaps most significantly, some reports indicate that Malik barely survived the Indian Air Force’s Balakot airstrike on February 26, 2019, the retaliatory strike India launched in response to the Pulwama terror attack that killed forty Central Reserve Police Force personnel on February 14, 2019. If accurate, this detail places Malik physically present at or near the Balakot facility, the JeM training camp that India targeted with twelve Mirage 2000 jets dropping SPICE 2000 precision-guided munitions. The Balakot connection, if confirmed, would establish that Malik was not merely an ideological affiliate of Azhar but someone embedded within JeM’s operational infrastructure deeply enough to be present at one of the organization’s most significant training facilities.

The relationship between Lashkar-e-Jabbar and JeM reflects a broader pattern in Pakistan’s militant ecosystem where smaller groups operate as functional subsidiaries of larger organizations. Lashkar-e-Jabbar appears to have functioned as a JeM affiliate within the tribal belt, operating in territory where JeM’s core Punjabi-Deobandi identity made direct operations more challenging. The tribal areas are predominantly Pashtun, and organizations that operate there successfully tend to rely on local leaders who can bridge the ethnic and cultural gap between the Punjabi heartland where JeM is headquartered and the Pashtun periphery where tribal codes and armed-group dynamics follow entirely different rules.

Understanding Malik’s organizational role requires understanding the concept of affiliate networks in Pakistan’s militant landscape. Groups like Lashkar-e-Jabbar are not independent organizations in the Western sense. They are nodes in a web of relationships that connect through personal loyalty, shared ideology (in this case, Deobandi jihadism), and operational utility. Masood Azhar, who built JeM into what scholars like Christine Fair have described as Pakistan’s most lethal terror organization, relied on a network of associates who operated semi-autonomously in different regions while maintaining loyalty to the central leadership in Bahawalpur, the southern Punjab city where JeM established its headquarters.

The distinction between a mere affiliate and a trusted confidant matters in understanding Malik’s role. Azhar’s inner circle has always been dominated by family, but the operational demands of running a terror organization with cross-regional reach require trusted non-family associates who can function as extensions of the leadership in territories where the central command cannot directly operate. In the corporate analogy, Malik functioned less like a franchisee and more like a regional vice president: someone with significant operational autonomy but whose authority derives from personal trust with the CEO rather than from an institutional position that could be filled by anyone with the right credentials. This personal-trust dimension is what made Malik irreplaceable in a way that organizational charts cannot capture.

Malik’s career trajectory within the militant ecosystem also reflects the broader evolution of Pakistan’s jihadist landscape over the past two decades. In the 1990s and early 2000s, the ISI maintained relatively centralized control over militant groups, directing their activities and managing their inter-organizational relationships. After Musharraf’s ban on several groups in 2002 and the subsequent dispersal of militant assets, the ecosystem became more fragmented and decentralized. Figures like Malik, who could operate semi-autonomously in regions where ISI oversight was limited, became increasingly important. They served as the connective tissue that held the decentralized network together, maintaining relationships and communication channels that the central leadership could not manage directly from Punjab. The loss of such figures is disproportionately damaging to the network because their replacement requires not just organizational appointment but the rebuilding of trust relationships that took years to establish.

Malik’s position within this network made him a connector between JeM’s strategic leadership and the operational realities of Pakistan’s most conflict-ridden region. North Waziristan, with its proximity to the Afghan border, its history as a staging ground for cross-border operations, and its complex ecosystem of armed groups, offered both opportunities and risks for organizations like JeM. The opportunities included recruitment, training, and access to weapons and fighters flowing across the porous border. The risks included factional violence, territorial disputes with the TTP, and the constant pressure of Pakistani military operations. A figure like Malik, who understood tribal dynamics and maintained relationships with both the JeM leadership and local power structures, was essential for navigating this environment.

The Attacks Dawood Malik Enabled

Malik’s involvement in terrorism against India is documented through his connections to JeM’s broader campaign rather than through specific individually attributed attacks. This distinction is important. In Pakistan’s militant ecosystem, senior operatives contribute to terrorism through organizational support, logistics, recruitment, and strategic planning rather than through personal participation in individual attacks. Malik’s value to JeM lay not in pulling triggers himself but in maintaining the organizational infrastructure that enabled others to do so.

Jaish-e-Mohammed, the organization Malik served through Lashkar-e-Jabbar, has been responsible for some of the most devastating terrorist attacks in India’s history. The organization’s operational record includes the December 2001 attack on the Indian Parliament in New Delhi, which brought India and Pakistan to the brink of nuclear war and resulted in the mobilization of over a million troops along the international border. It includes the January 2016 Pathankot airbase attack, in which seven Indian security personnel were killed when JeM terrorists infiltrated one of the Indian Air Force’s most strategically significant installations in Punjab. And it includes the February 2019 Pulwama attack, in which a JeM suicide bomber drove an explosives-laden vehicle into a CRPF convoy on the Srinagar-Jammu highway, killing forty personnel in the single deadliest attack on Indian security forces in Kashmir’s history.

Malik’s contribution to these attacks was structural rather than direct. As the founder of a JeM affiliate operating in the tribal belt, he maintained the organizational connective tissue that allowed JeM to sustain its operations across Pakistan’s diverse geography. The tribal belt’s role in JeM’s operational infrastructure has been significant since the organization’s founding in 2000. After Pakistan’s President Pervez Musharraf banned JeM in January 2002 under pressure from India and the United States following the Parliament attack, the organization dispersed its assets across Pakistan, with some elements relocating to the tribal areas where state writ was weakest. Malik’s presence in North Waziristan and his role in Lashkar-e-Jabbar provided JeM with a foothold in this region, ensuring that the organization maintained operational depth even when its Punjab-based infrastructure came under periodic government scrutiny.

The JeM training camp at Balakot, targeted by Indian airstrikes in February 2019, illustrates the geographic distribution of JeM’s infrastructure. Balakot is located in Khyber Pakhtunkhwa’s Mansehra district, at the edge of Pakistan’s northern tribal belt. While it is not in Waziristan, its location in the mountainous periphery reflects JeM’s strategy of maintaining facilities in areas where state oversight is limited. Malik’s reported presence at or near Balakot during the Indian airstrike suggests that the network connections between JeM’s tribal-area assets and its training infrastructure were active and operational at the highest levels.

Beyond the major attacks, JeM has maintained a consistent campaign of cross-border infiltration into Indian-administered Kashmir, sending trained fighters across the Line of Control to carry out attacks on Indian security forces and civilian targets. This infiltration pipeline depends on logistics, reconnaissance, and route facilitation, functions that operatives in the tribal belt and the Pakistan-administered Kashmir region contribute to. Malik’s connections to Lashkar-e-Jhangvi, a group that shares training infrastructure and personnel with JeM, further expanded the logistical base available to JeM’s Kashmir operations. In Pakistan’s militant ecosystem, organizations that appear distinct on paper often share fighters, trainers, weapons suppliers, and safe houses in practice. Ashley Tellis at the Carnegie Endowment for International Peace has written extensively about how this shared infrastructure makes Pakistani militant groups resilient against targeted enforcement, because degrading one group’s leadership does not automatically degrade the shared infrastructure that supports multiple groups simultaneously.

Malik also reportedly maintained connections to several other wanted terrorists, a characterization that implies his position as a hub in a network of individuals involved in anti-India operations. In intelligence analysis, network hubs, individuals who connect otherwise separate nodes of a network, are high-value targets because their elimination can fragment the network’s connectivity. The concept of targeting network connectors rather than individual operatives is central to the doctrine that the shadow war appears to follow, as Sushant Sareen of the Observer Research Foundation has argued in his analysis of JeM’s peripheral networks in the tribal belt.

The operational pipeline that JeM has maintained for cross-border infiltration into Kashmir illustrates the kind of organizational functions that figures like Malik supported. Infiltration requires reconnaissance of border routes along the Line of Control, coordination with guides who know the mountain passes, staging of equipment and weapons at forward positions, and safe-house networks on both sides of the border. In the tribal belt, Malik’s connections to local communities and to the broader militant ecosystem provided access to fighters, weapons, and logistical support that could feed into this pipeline. The tribal areas’ proximity to Afghanistan also created a secondary infiltration route, through the porous Afghan border and then eastward into Kashmir, that JeM has used when the direct LoC crossing became too heavily guarded.

The financial dimension of Malik’s role, though poorly documented in open sources, can be inferred from his organizational position. JeM’s funding comes from multiple streams: donations from sympathizers (particularly in Pakistan’s Punjabi heartland), funds diverted from charitable organizations like the Al-Rehmat Trust, proceeds from businesses and properties controlled by the organization, and money channeled through the ISI’s covert support mechanisms. The tribal belt adds its own financial dynamics, including cross-border smuggling, the protection economy (where armed groups charge fees for safe passage through territory they control), and the opium trade that flows from Afghanistan through Waziristan into Pakistan’s settled areas. A figure like Malik, positioned at the intersection of JeM’s organizational network and the tribal belt’s informal economy, would have played a role in channeling resources between these different financial environments. The exact contours of his financial activities are undocumented, but his dual position as tribal elder and militant leader virtually guarantees involvement in the economic flows that sustain militant operations in the region.

Network Connections

Mapping Dawood Malik’s network connections requires understanding the concentric circles of loyalty and organizational affiliation that structure Pakistan’s militant landscape. At the center sits Masood Azhar, the JeM founder whose personal charisma, family connections, and ISI patronage created an organization that functions, as multiple scholars have observed, more like a family enterprise than a conventional terrorist group. JeM’s leadership has always been dominated by Azhar’s relatives: his brother Abdul Rauf Azhar served as the organization’s operational commander, his brother-in-law Yusuf Azhar oversaw weapons training (before being killed during Operation Sindoor in May 2025), and his son Abdullah Azhar managed the organization’s increasingly digital financial operations through platforms like EasyPaisa and SadaPay. Malik occupied a position in the next ring outward from this family core, close enough to be described as Azhar’s right-hand man but not bound by the kinship ties that define JeM’s innermost circle.

This position made Malik both valuable and vulnerable. Valuable because he brought capabilities that Azhar’s family members lacked: tribal authority in Waziristan, cross-organizational connections to Lashkar-e-Jhangvi and other groups, and the ability to operate in an environment where Punjabi outsiders are immediately suspect. Vulnerable because, as a non-family member, he lacked the protective cocoon that Azhar’s relatives enjoyed through the ISI’s strategic interest in preserving JeM’s core leadership. When the shadow war began systematically targeting Azhar’s associates, the outer rings were the first to fall.

Malik’s connection to other eliminated targets in the campaign forms a pattern that intelligence analysts call a network cascade. Within the same month that Malik was killed in Mirali, Shahid Latif was killed in Sialkot. Latif was the mastermind of the Pathankot airbase attack, a JeM operative whose connection to Azhar was operational rather than familial, much like Malik’s. The near-simultaneous elimination of two Azhar associates in different parts of Pakistan suggests that the campaign was working from a target list organized around the JeM network structure, prioritizing operatives in the outer rings who could be reached without triggering the protective mechanisms that surround Azhar’s family core.

Looking forward from Malik’s killing, the campaign continued to work its way toward Azhar’s inner circle. In November 2023, Raheem Ullah Tariq, another JeM associate of Azhar, was shot dead in Karachi, making him the third Azhar-connected target eliminated in less than a month. Then came the death of Muhammad Tahir Anwar, Azhar’s own elder brother, under mysterious circumstances. The progression from peripheral associates (Malik) to direct family members (Tahir Anwar) traces a tightening circle around Azhar himself, a systematic siege that Paul Staniland at the University of Chicago would recognize as the methodical degradation of an armed group’s leadership structure.

The Lashkar-e-Jabbar connection places Malik within a specific genealogy of JeM’s organizational evolution. When Musharraf’s government banned JeM in 2002 and cracked down on its most visible structures, the organization responded by creating front organizations and affiliate groups that could operate under different names while maintaining fealty to Azhar’s leadership. Khuddam ul-Islam, Al-Rehmat Trust, and various madrassa networks all served this function at different times and in different regions. Lashkar-e-Jabbar appears to have served a similar function in the tribal belt, allowing JeM to maintain a presence in territory that was critical for recruitment, training, and cross-border operations but where JeM’s direct brand was complicated by ethnic and organizational dynamics.

The connection to Lashkar-e-Jhangvi is particularly significant for understanding the broader threat ecology. Lashkar-e-Jhangvi is a Deobandi sectarian organization that has been responsible for systematic massacres of Shia Muslims across Pakistan, particularly in Quetta, Balochistan, where Hazara Shia communities have been attacked repeatedly at markets, mosques, and public gatherings. The overlap between JeM, Lashkar-e-Jhangvi, and Sipah-e-Sahaba Pakistan, three organizations that scholars Mariam Abou Zahab and Olivier Roy have described as functionally “the same party” focusing on different sectors of activity, creates a network that is simultaneously anti-India (JeM), anti-Shia (Lashkar-e-Jhangvi), and politically Islamist (Sipah-e-Sahaba). Malik’s involvement across these organizations positioned him at the intersection of multiple threat streams, making his network value greater than his individual operational role might suggest.

Within the tribal belt specifically, Malik’s network connections extended into the complex ecosystem of armed groups that have contested control of North Waziristan for decades. The TTP, the Haqqani Network, al-Qaeda remnants, the Islamic Movement of Uzbekistan, and various local tribal militias all maintained presence in the district at various points. Navigating relationships with these groups requires diplomatic skill, tribal authority, and the ability to provide mutual benefit, services that a figure with Malik’s dual identity as tribal elder and militant leader was uniquely positioned to offer. This network complexity is precisely what makes attributing his killing to any single actor so analytically challenging.

The Hunt

Reconstructing how Dawood Malik was tracked and targeted in North Waziristan requires confronting the operational paradox at the heart of this elimination: Waziristan is one of the most difficult environments on earth for covert operations by external actors, yet someone identified Malik’s location, determined his schedule, positioned armed operatives at his clinic, and executed the killing in a manner consistent with the campaign’s signature across Pakistan. Understanding how this was possible requires examining both the operational environment and the intelligence methodology that the campaign appears to employ.

North Waziristan’s geography has defeated larger and better-resourced operations before. The United States, at the peak of its drone campaign in the tribal belt, relied on a combination of satellite surveillance, signals intelligence, human informants, and real-time drone-borne sensors to identify and target individuals. Even with these resources, the US drone program experienced significant intelligence failures, killing civilians mistakenly identified as militants, targeting gatherings that turned out to be tribal meetings rather than terrorist conclaves, and missing high-value targets who adjusted their behavior to avoid drone surveillance. The campaign that killed Malik does not appear to have drone capability. It relied on ground-level human intelligence, the kind of intelligence that requires someone with direct access to Malik’s circle to know where he would be and when.

The clinic as the targeting location suggests intelligence obtained through either medical networks (someone who knew Malik was seeking treatment at that facility) or surveillance of his movement patterns (someone who had observed him visiting the clinic previously and could predict his return). In the tribal belt, medical facilities are limited, and individuals with specific health conditions often develop routines around clinic visits that can be predicted by anyone with knowledge of their medical situation. The fact that Malik was at a clinic rather than at his residence or a social gathering suggests that the intelligence was specific enough to pinpoint not just his general location but his precise whereabouts on that particular morning.

The use of masked gunmen rather than motorcycle-borne shooters, the method that has become the campaign’s signature in Pakistani cities, represents an adaptation to the Waziristan environment. In Karachi, Lahore, and Sialkot, motorcycles provide the ideal combination of maneuverability, speed, and anonymity in congested urban traffic. In Mirali, the calculus is different. The town is smaller, the roads are fewer and more easily monitored, and motorcycle traffic, though not uncommon, does not provide the same anonymity as it does in a city of twenty million. Masked gunmen on foot or in a vehicle can blend more effectively into the tribal environment, where armed men are commonplace and face coverings carry no special suspicion.

The escape is perhaps the most analytically significant element of the killing. In post-Zarb-e-Azb North Waziristan, the Pakistan Army maintains a network of checkpoints that restricts movement throughout the district. Anyone leaving Mirali must pass through military checkpoints where identity documents are checked and vehicles are inspected. The attackers’ successful escape suggests one of several possibilities: they had identity documents that withstood checkpoint scrutiny, they used routes that bypassed the main checkpoints (goat tracks, seasonal riverbeds, or footpaths through the surrounding mountains), they had assistance from individuals within the security apparatus who facilitated their passage, or they did not leave Mirali at all but instead went to ground within the town, sheltered by local contacts who were part of the operational infrastructure.

Anatol Lieven, whose book “Pakistan: A Hard Country” provides one of the most detailed accounts of the tribal belt’s ungoverned dynamics, has described North Waziristan as a place where multiple systems of authority coexist: the Pakistani state (represented by the army and the bureaucracy), the tribal system (represented by maliks and jirgas), and the militant groups (represented by various armed organizations). An operation that succeeds in this environment must navigate all three systems, either co-opting elements within them or exploiting the gaps between them. The gaps are significant. The army controls the checkpoints but does not monitor every goat path. The tribal system tracks strangers but has blind spots for individuals who move with the right introductions. The militant groups watch each other but cannot maintain surveillance on every individual at every moment.

The intelligence preparation for an operation in Waziristan would have required significantly more investment than operations in urban Pakistan. In cities, surveillance can be conducted by individuals who blend into the anonymous urban crowd. In Waziristan, every unfamiliar face is noticed, questioned, and discussed. This suggests either that the intelligence assets used to locate Malik were local, individuals already embedded in the Waziristan community who had access to information about Malik’s movements without arousing suspicion, or that the intelligence was obtained remotely, through signals intercepts, informants within Malik’s circle who communicated to handlers outside the tribal belt, or through Pakistani intelligence assets that may have been redirected or co-opted.

The operational security challenges for the attackers themselves deserve separate analysis. Whoever executed the killing had to solve three distinct problems: getting into position (arriving at the clinic with weapons without being detected or challenged), executing the killing (entering the clinic, identifying Malik among any other patients or staff, and shooting him with sufficient precision to ensure death), and getting out (escaping the immediate area and then the broader district without being captured at military checkpoints or identified by witnesses). Each problem requires a different capability, and the three together represent a sophisticated operational chain that must work flawlessly; failure at any point results in compromise, capture, or death for the operatives.

The weapons used in the killing have not been detailed in public reporting, but the close-range nature of the attack suggests handguns or compact automatic weapons that could be concealed during approach and discarded or concealed during escape. In the tribal belt, weapons are ubiquitous; the Darra Adam Khel arms market, located in nearby Khyber district, has been producing and selling firearms for over a century, and most households in Waziristan keep weapons as a matter of cultural practice. An armed man in Mirali does not automatically attract attention. The challenge is not carrying weapons but carrying them in a manner that does not betray hostile intent before the moment of attack. Masked faces add another layer of concealment, though in the tribal belt, face coverings are less remarkable than they would be in urban Punjab.

The timing of the operation, mid-morning on a Friday, aligns with a pattern that exploits the intersection of religious routine and medical necessity. Friday morning is when clinics are busiest, as patients seek treatment before the afternoon congregational prayer. A clinic visit before Friday prayers would be a natural, unremarkable activity for someone like Malik, creating the predictable-location vulnerability that the campaign has exploited repeatedly. The pattern suggests that the intelligence collection included not just Malik’s general whereabouts but his weekly routine, the kind of granular behavioral intelligence that comes from sustained observation or from an informant within his immediate social circle.

One analytical possibility that merits consideration is the role of electronic communications in the intelligence chain. Despite the tribal belt’s relative isolation, mobile phone coverage has expanded significantly in the past decade, and even individuals who avoid smartphones for security reasons often use basic mobile phones for coordination and communication. Pakistani intelligence agencies monitor mobile communications in the tribal belt as part of their counter-TTP operations, and this surveillance infrastructure generates data that could, in theory, be accessed or shared with external actors. If Malik used a mobile phone to schedule his clinic appointment or to inform associates of his whereabouts, that communication could have provided the specific intelligence needed to time the operation. The possibility of signals intelligence involvement does not require the attackers themselves to have had sophisticated technical capabilities; it requires only that someone in the intelligence chain had access to the communications data generated by Pakistan’s own surveillance infrastructure.

Pakistan’s Response

Pakistan’s official response to Dawood Malik’s killing followed a pattern that has become depressingly familiar in the context of the shadow war. Pakistani police classified the incident as a targeted killing by unknown assailants, a designation that acknowledges the deliberate nature of the attack while leaving the identity and motivation of the attackers unresolved. No formal investigation was announced. No arrests were made. No suspects were identified publicly. The killing entered the growing catalogue of unsolved assassinations that Pakistani authorities have been unable or unwilling to resolve.

The Pakistani government’s response exists within a larger political context. By October 2023, the pattern of targeted killings of anti-India operatives on Pakistani soil had become impossible to ignore. Multiple high-profile figures, from Zahoor Mistry in Karachi to Paramjit Singh Panjwar in Lahore to Abu Qasim in Pakistan-occupied Kashmir, had been eliminated in similar fashion. Pakistani media had begun reporting on the pattern, raising questions about who was responsible and how the attackers were able to operate with impunity across Pakistani territory. The government’s response oscillated between three positions: blaming internal factional rivalries among militant groups, suggesting that foreign intelligence agencies (a euphemism generally understood to refer to India’s Research and Analysis Wing, or RAW) were responsible, and simply declining to comment pending investigation.

The factional-rivalry explanation carries some surface plausibility in the Waziristan context. North Waziristan’s complex militant ecosystem generates genuine internecine violence. The TTP has fought with JeM-affiliated groups over territorial control, recruitment pools, and ideological direction. Al-Qaeda remnants have clashed with the Islamic State’s Khorasan Province. Tribal feuds that have nothing to do with jihadist ideology but everything to do with land, honor, and revenge produce their own body counts. Against this backdrop of endemic violence, Pakistani authorities could plausibly suggest that Malik’s killing was the product of local dynamics rather than an external operation.

However, the factional-rivalry explanation fails when examined against the specifics of Malik’s profile and the broader pattern. Malik was a JeM affiliate and tribal elder. He was not in a documented feud with the TTP. His organizational affiliations placed him within the broader Deobandi militant ecosystem that includes both JeM and the TTP’s Punjab faction, making intra-sectarian violence an unlikely motive. Most critically, Malik’s primary significance was his anti-India activities, his connection to Masood Azhar, and his involvement in operations directed against Indian targets. The TTP’s agenda is focused on the Pakistani state; it has no documented history of targeting JeM personnel for their anti-India operations. The Islamic State’s Khorasan Province, while hostile to the Taliban and by extension to groups that coexist with the Taliban, has not been documented targeting JeM affiliates in Waziristan. The factional explanation requires identifying a specific group with a specific grievance against Malik, and no credible candidate has emerged.

Pakistan’s intelligence agencies, particularly the ISI, occupy an ambiguous position in this analysis. The ISI’s historical relationship with JeM is extensively documented. The agency facilitated Masood Azhar’s rise after his release during the IC-814 hijacking in 1999, provided organizational support during JeM’s early years, and maintained a complex relationship with the group even after its formal ban in 2002. The ISI’s relationship with Malik, as a JeM affiliate operating in the tribal belt, would have been mediated through this broader institutional relationship. The question of whether elements within Pakistani intelligence facilitated or at least tolerated Malik’s killing is analytically significant but unanswerable from open sources. The ISI has historically managed its militant assets through a combination of support and occasional discipline, and the targeted killing of an asset that has become a liability is not without precedent in Pakistani intelligence history.

The broader Pakistani establishment’s response to the cumulative pattern of killings has been to increase security around known militant leaders. Reports indicate that senior figures within LeT and JeM have altered their movement patterns, increased personal security, and in some cases relocated to military installations where they can receive armed protection. The irony of Pakistan providing military protection to individuals it simultaneously denies harboring has not been lost on international observers. For Malik, operating in the tribal belt rather than in Punjab, this increased security came too late. North Waziristan’s security infrastructure is designed to control the civilian population and combat the TTP, not to protect JeM affiliates from targeted assassination. The army’s checkpoints and patrols create a security architecture that faces outward, toward the Afghan border and the TTP’s mountain strongholds, rather than inward, toward the kind of precision operation that killed Malik.

The diplomatic dimension of Pakistan’s response also deserves scrutiny. By October 2023, Pakistan had been making increasingly pointed accusations about foreign interference in its internal security, with some officials directly attributing the pattern of targeted killings to Indian intelligence operatives. Pakistan’s foreign ministry had previously summoned Indian diplomatic officials to lodge protests about alleged intelligence activities on Pakistani soil, though the specific cases cited and the evidence presented in these protests have not been made fully public. The difficulty for Pakistan in pressing this issue through international diplomatic channels is the fundamental contradiction embedded in the complaint: to formally accuse India of killing individuals on Pakistani soil, Pakistan must first acknowledge that those individuals were present on Pakistani soil, thereby confirming the very accusation that India and the international community have been making for years, that Pakistan harbors terrorists involved in attacks against India.

This diplomatic trap explains, in part, Pakistan’s reluctance to pursue the issue aggressively in international forums. When Pakistan has raised the matter, the response from the international community has been muted. The United States, which itself operated a drone program in Pakistan’s tribal areas for over a decade, has limited standing to condemn targeted killings by other countries. European nations, whose own intelligence services have participated in joint targeting programs through the Five Eyes alliance and other arrangements, have been similarly circumspect. The United Nations, where Pakistan has sought to raise the issue, has shown limited appetite for investigating what amounts to a dispute between two nuclear powers over intelligence operations against designated terrorists. Pakistan’s complaint that its sovereignty is being violated by the targeted killings runs into the counterargument that Pakistan itself violated international norms by providing sanctuary to individuals responsible for terrorist attacks that killed thousands.

The specific case of Malik illustrates the challenge for Pakistani investigators. North Waziristan’s police force, reformed and expanded after the military operations of 2014, operates under the authority of the Khyber Pakhtunkhwa provincial government. The investigators who received the case are responsible for maintaining law and order in a district where dozens of violent incidents occur monthly, where the TTP kills police officers regularly, and where the resources available for investigation are stretched thin. A targeted killing by unknown assailants, in which no witnesses come forward and no group claims responsibility, represents the kind of case that languishes indefinitely in a caseload dominated by more immediate security concerns. Whether this institutional incapacity is genuine or provides convenient cover for a lack of investigative will is a question that cannot be answered from outside Pakistan’s security establishment.

The response from militant organizations has been more telling than the government’s official position. Reports from Pakistani media indicate that JeM and LeT leaderships have implemented new security protocols in response to the campaign. These include restricting the use of mobile phones, changing residences at irregular intervals, using intermediaries for communication rather than direct contact, and avoiding predictable routines such as regular mosque attendance or clinic visits. For JeM’s leadership in Bahawalpur, these precautions have included relocating to areas with higher ISI security coverage and reducing public appearances. For figures in the tribal belt like Malik, the precautions came too late, but they suggest that the organizations themselves regard the targeted killings as a coordinated campaign rather than random violence, a judgment that aligns with the pattern analysis rather than the factional-rivalry explanation.

What This Elimination Reveals

Dawood Malik’s killing in North Waziristan reveals four analytically significant dimensions of the shadow war’s evolution. Each dimension expands the campaign’s known parameters and challenges assumptions about its operational limitations.

The first and most obvious revelation is geographic expansion. Before Malik’s killing, the campaign’s confirmed operational theaters included Karachi (Sindh), Lahore and Sialkot (Punjab), Rawalpindi (Punjab), and Pakistan-occupied Kashmir. These are all areas with significant urban infrastructure, established security routines, and relatively predictable patterns of daily life that can be surveilled and exploited. North Waziristan is categorically different. It is mountainous, tribal, heavily militarized, and populated by communities where strangers are immediately identified and questioned. An operation that succeeds in Waziristan cannot rely on the same methods, assets, or escape routes that work in Karachi. The geographic expansion implies either that the campaign has developed specialized capabilities for tribal-area operations or that it has access to assets within the tribal belt that can be activated independently of its urban networks.

The second revelation concerns the campaign’s operational tempo. Malik was killed on October 20, 2023, just eleven days after Shahid Latif’s killing in Sialkot on October 11. Within the following month, Khwaja Shahid of LeT was found beheaded in Pakistan-occupied Kashmir, and Raheem Ullah Tariq of JeM was shot dead in Karachi. The concentration of four eliminations across four different locations in a single month represents the campaign’s densest operational window up to that point. Maintaining this tempo across geographically dispersed theaters requires either multiple independent teams operating simultaneously or a central command with the logistical capacity to move assets rapidly between theaters. Either possibility implies a level of organizational sophistication that exceeds what a simple revenge campaign or a factional feud could sustain.

The third revelation is target-selection methodology. Malik was not a high-profile public figure like Hafiz Saeed or Masood Azhar. He was not someone whose name would have been familiar to the general public or even to most analysts following the India-Pakistan conflict. His significance was structural: he was a connector between JeM’s central leadership and its tribal-belt infrastructure, a figure whose elimination would degrade a specific organizational function rather than generate headlines. This suggests that the target-selection process is informed by network analysis rather than public notoriety, prioritizing individuals whose elimination has the greatest structural impact on the organizations they serve rather than individuals whose elimination has the greatest propaganda value. The distinction is important because it reveals an intelligence-driven campaign rather than a politically driven one. A politically driven campaign would target famous names for maximum public impact. An intelligence-driven campaign targets network nodes for maximum organizational damage.

The fourth revelation concerns the campaign’s ability to operate in environments with conflicting armed-group dynamics. North Waziristan is not merely ungoverned; it is multi-governed, with the Pakistan Army, various TTP factions, the Haqqani Network’s legacy presence, and smaller groups all exercising authority over overlapping territories. Operating in this environment requires navigating between these competing authorities, avoiding detection by multiple surveillance systems simultaneously, and exploiting the gaps between them. The successful execution of an operation in this environment demonstrates a level of environmental awareness and operational flexibility that goes beyond what standard military or intelligence operations typically achieve in unfamiliar terrain.

Taken together, these four revelations, geographic expansion, accelerating tempo, intelligence-driven targeting, and multi-environment operational capability, paint a picture of a campaign that is maturing in real time. Each new operation expands the known parameters, and the cumulative expansion produces a capability profile that matches what scholars like Daniel Byman at the Brookings Institution have described as a “targeted killing program” rather than a series of opportunistic hits. The distinction matters because programs have doctrine, infrastructure, training pipelines, and strategic objectives that outlast individual operations. If the shadow war is a program rather than a sequence of events, then Malik’s killing in Waziristan is not merely an addition to the tally but an indicator of the program’s geographic ambitions.

The doctrinal implications merit particular attention. Every military and intelligence campaign operates according to a doctrine, a set of principles that guide target selection, operational planning, resource allocation, and risk management. The shadow war’s doctrine, as reconstructed from the pattern of operations, includes several identifiable principles: target individuals with documented involvement in anti-India terrorism, conduct operations across Pakistan’s geographic breadth to deny any region safe-haven status, adapt tactics to the operational environment rather than applying a rigid methodology, avoid collateral damage that would generate international backlash, and maintain strict operational security through the absence of claims and the use of deniable methods. Malik’s killing in Waziristan confirms and extends this doctrine by demonstrating that the principle of geographic comprehensiveness applies even to Pakistan’s most remote and challenging terrain.

The psychological dimension of the campaign should not be underestimated. Beyond the physical elimination of individuals, the campaign generates a pervasive fear among its target population that erodes organizational effectiveness. This fear is not the dramatic terror that a suicide bombing produces but the quiet, persistent anxiety that comes from knowing that one’s location, routine, and associates may have been compromised by an intelligence service that has demonstrated the ability to act on its knowledge. For militant leaders in the tribal belt, where the geographic isolation had previously provided a sense of security, Malik’s killing shattered the psychological comfort of remoteness. The mountains, the checkpoints, the tribal codes of hospitality, the armed groups that guard their territories: none of these proved sufficient to protect Malik when the campaign reached Waziristan. The message is not subtle, and it does not require a public claim to be understood by its intended audience.

For the broader trajectory of India-Pakistan relations, Malik’s killing in Waziristan represents a specific kind of escalation. It is not the overt military escalation of troop movements and missile deployments that characterized the post-Pulwama crisis or the Operation Sindoor confrontation. It is the covert escalation of geographic reach, the steady expansion of the theater of operations from major cities to provincial towns to the tribal borderlands. This geographic escalation has its own momentum. Each new theater that the campaign penetrates makes the next expansion seem less dramatic and more routine, normalizing the campaign’s presence across Pakistan’s geography and progressively reducing the areas where militants can feel safe. The trajectory, if extended, points toward a condition in which no corner of Pakistani territory remains beyond the campaign’s demonstrated reach, a condition that would fundamentally alter the cost-benefit calculus of Pakistan’s use of non-state actors as instruments of foreign policy.

The Waziristan Operational Environment

Understanding why Malik’s killing in North Waziristan carries unique analytical significance requires a detailed assessment of the environment itself, a landscape that has defied external control for centuries and that presents operational challenges found in few other places on earth. This assessment constitutes the first systematic analysis of Waziristan as a shadow-war theater rather than as a counterinsurgency battlefield, a distinction that changes which features of the environment are analytically relevant.

North Waziristan occupies approximately 4,700 square kilometers of mountainous terrain in Pakistan’s former Federally Administered Tribal Areas, now merged into Khyber Pakhtunkhwa province. The district shares a long border with Afghanistan’s Khost and Paktia provinces to the west, connects to South Waziristan to the south, and abuts the settled districts of Bannu and Lakki Marwat to the east. The terrain is dominated by steep hills and narrow valleys carved by seasonal rivers and dry streambeds called nullahs. Elevations range from roughly 300 meters in the eastern lowlands near Bannu to over 3,000 meters in the Shawal Valley along the Afghan border. The main road network consists of a single highway connecting Bannu to Miranshah, with secondary roads branching to Mirali, Datta Khel, and other settlements. Beyond these roads, movement depends on unpaved tracks, footpaths, and seasonal routes that shift with rainfall and snowmelt.

The population of approximately 550,000 is predominantly Wazir and Daur Pashtun, organized into extended kinship networks that determine land ownership, dispute resolution, and social hierarchy. The Wazir tribe, which gives the district its name, is divided into two major branches, the Utmanzai and the Ahmadzai, whose territories roughly correspond to the northern and southern portions of the district respectively. The Daur tribe occupies the central corridor around Mirali. Tribal identity shapes every aspect of daily life, from marriage and inheritance to economic activity and political allegiance. Outsiders, defined as anyone who is not a member of the local tribe and has not been formally accepted as a guest, face immediate scrutiny.

The concept of melmastia, the Pashtun code of hospitality, has shaped North Waziristan’s role as a militant safe haven. Under melmastia, a host is obligated to protect guests with their own life if necessary, regardless of the guest’s identity or the reasons they are seeking shelter. This cultural obligation created the conditions that allowed first the Afghan mujahideen during the 1980s, then al-Qaeda and Taliban fighters after 2001, and subsequently various militant groups including JeM affiliates to find sanctuary in the tribal belt. A militant who has been accepted as a guest by a local tribe enjoys the same protection as any other guest, a protection that the tribe is honor-bound to enforce. Violating melmastia, by betraying a guest’s location to outsiders, is among the most serious transgressions in Pashtun culture and can trigger blood feuds lasting generations.

This cultural architecture creates formidable barriers to intelligence collection. Human intelligence, the kind of close-access information needed to locate a specific individual at a specific location at a specific time, requires either co-opting individuals within the target’s social circle or recruiting informants from the local community. In both cases, the informant faces not merely the risk of being discovered by the target but the risk of violating melmastia, a violation that would bring retribution not from the target’s organization but from the informant’s own tribe. The social cost of betrayal in Waziristan is orders of magnitude higher than in an urban environment where informants can maintain anonymity and communities do not enforce codes of guest protection. The risk extends beyond the individual informant to their entire family and clan, creating a deterrent structure that makes intelligence recruitment in the tribal belt one of the most difficult challenges any intelligence service can face. The penalty for informing is not prison; it is the destruction of one’s family’s honor and social position, consequences that persist across generations.

The Pakistan Army’s presence in North Waziristan represents a security layer that both complicates and potentially facilitates operations against figures like Malik. Following Operation Zarb-e-Azb in 2014, which the army described as a comprehensive offensive against all militant groups in the district, the military established a network of checkpoints, forward operating bases, and surveillance positions throughout the district. The stated purpose of this infrastructure is to prevent the reestablishment of militant safe havens and to control the movement of armed individuals. In practice, the security architecture has produced mixed results. The TTP has continued to mount attacks on military positions and civilian targets in the district, as evidenced by ongoing incidents in Mirali and Miranshah that have continued into 2025 and 2026.

For the shadow war, the military’s security architecture in Waziristan presents a double-edged sword. On one hand, the checkpoints and surveillance make movement more difficult for anyone, including operatives conducting targeted killings. Getting into and out of the district requires passing through military scrutiny. On the other hand, the same infrastructure that the army uses to monitor the population generates intelligence about the movements and locations of individuals within the district. If any element of the Pakistani security apparatus provided information, whether deliberately or through compromised communications, the military’s own surveillance network could have been the source of the intelligence that led to Malik. This possibility is speculative but analytically necessary to consider, given that the army’s extensive presence in the district makes undetected external intelligence collection extraordinarily difficult.

The armed-group density in North Waziristan adds another layer of complexity. The TTP maintains active fighters in the district, particularly in the areas bordering South Waziristan and along the Afghan frontier. The Haqqani Network, while primarily focused on operations in Afghanistan, maintained its historical base in and around Miranshah and the village of Danday Darpakhel for decades, and its legacy networks persist even after the organization’s leadership relocated to Afghanistan. Remnants of al-Qaeda’s network, though significantly degraded since the peak of US drone operations, maintain a presence in the Shawal Valley and other remote areas. The Islamic Movement of Uzbekistan, once a significant force in the district, has been largely displaced but individual fighters remain integrated into other groups. Local tribal militias, some allied with the army and some operating independently, add further armed actors to an already crowded landscape.

For Malik, this armed-group density provided both protection and risk. Protection because the presence of multiple armed groups creates a fog of violence that can obscure the specific targeting pattern of the shadow war, making it easier for his killing to be attributed to factional violence rather than an external operation. Risk because the multiple groups’ competing interests and surveillance networks create multiple potential sources of intelligence leakage. An individual like Malik, who maintained connections across several organizations (JeM, Lashkar-e-Jabbar, Lashkar-e-Jhangvi), necessarily shared information with multiple contacts, each of whom represented a potential vulnerability in his security.

The comparison between Waziristan and the US drone program’s theater of operations is illuminating. Between 2004 and 2018, the United States conducted approximately 430 drone strikes in the tribal areas, the majority in North and South Waziristan. These strikes relied on a combination of signals intelligence, satellite imagery, and human intelligence provided by both Pakistani and CIA-recruited assets. The drone program’s intelligence failures, including strikes on tribal gatherings, wedding parties, and individuals misidentified as militants, demonstrated the difficulty of accurate targeting in the tribal environment even with the world’s most advanced surveillance technology. The shadow war’s operation against Malik achieved what many drone strikes failed to achieve: the precise targeting of a specific individual at a known location, without apparent collateral damage (the tortured body found nearby notwithstanding), using ground-level assets rather than satellite-guided munitions.

David Kilcullen, whose work “The Accidental Guerrilla” provides a theoretical framework for understanding insurgency in tribal environments, has argued that effective operations in these settings require a level of cultural literacy and local knowledge that technological superiority cannot substitute. The shadow war’s success in Waziristan, if Malik’s killing can be attributed to the same campaign responsible for eliminations in Pakistani cities, suggests either that the campaign has developed this cultural literacy through locally recruited assets or that it has access to intelligence streams that provide equivalent granularity. Either possibility represents a capability that few intelligence services have demonstrated in the tribal belt.

The physical infrastructure of Mirali itself deserves specific analysis. The town was heavily damaged during Operation Zarb-e-Azb, when the Pakistan Army used artillery, airstrikes, and ground assault to clear militant positions. Much of the pre-2014 commercial district was destroyed, and the town’s reconstruction has been uneven. New concrete buildings stand alongside the ruins of older structures, creating a physical environment where sight lines are broken, abandoned structures provide concealment, and the mix of construction types complicates surveillance. The private clinic where Malik was killed was one of many small medical facilities that had reopened after the military operation, serving a population that lacks access to the larger hospitals in Bannu or Peshawar without a long and checkpoint-studded journey.

The seasonal and climatic factors of North Waziristan also shape operational considerations. October in the tribal belt is the transition between the hot summer months and the cold winter. Temperatures in Mirali, at roughly 600 meters elevation, typically range from 10 to 25 degrees Celsius in October. The summer dust gives way to clearer air, but the shorter days reduce the window for daytime operations. More significantly, October marks the beginning of the period when mountain passes in the higher elevations begin to close due to early snowfall, restricting cross-border movement and potentially trapping individuals who have moved into the tribal belt for the summer months. If Malik was at a clinic rather than traveling, it may reflect a calculation that the approaching winter made movement more dangerous and that medical attention could be sought safely during a period of relative calm. This seasonal vulnerability, the window when travel is constrained and individuals are pinned to specific locations, is exactly the kind of intelligence that an observant asset could exploit.

The social dynamics of the clinic setting also merit examination. In Waziristan’s conservative society, private clinics serve specific social functions beyond medical care. They are places where men gather, where local news is exchanged, and where relationships are maintained. The waiting room of a tribal-belt clinic is a social space where a man’s presence is both natural and predictable. Someone monitoring Malik’s medical schedule would know not just that he would be at the clinic but approximately when he would arrive, how long he would stay, and what his physical condition would be (possibly weakened or distracted by whatever ailment prompted the visit). The vulnerability of a medical appointment, when a target is focused on their health rather than their security, has been exploited by intelligence services historically, from the CIA’s aborted attempt to access Fidel Castro through medical channels to Mossad’s targeting of individuals during hospital visits. The Mirali clinic killing, whether by design or circumstance, exploited this same vulnerability in an environment where other targeting opportunities were constrained by tribal security.

Lashkar-e-Jabbar and JeM’s Affiliate Architecture

Dawood Malik’s organizational creation, Lashkar-e-Jabbar, represents a specific phenomenon in Pakistan’s militant ecosystem: the affiliate group that operates under a distinct name while maintaining operational and ideological fealty to a parent organization. Understanding Lashkar-e-Jabbar requires understanding why groups like JeM create affiliates, what functions affiliates serve, and how the affiliate architecture affects both the parent organization’s resilience and the effectiveness of campaigns targeting its leadership.

JeM’s history of creating front organizations and affiliates dates to the aftermath of President Musharraf’s January 2002 ban. The ban, imposed under combined pressure from India, the United States, and the United Kingdom following the December 2001 Parliament attack, forced JeM to restructure its public-facing operations. Masood Azhar, detained briefly by Pakistani authorities in a gesture toward international compliance, responded by dispersing JeM’s assets across multiple organizational vehicles. Khuddam ul-Islam emerged as one front. The Al-Rehmat Trust continued JeM’s charitable and fundraising activities under a different name. Madrassas affiliated with JeM continued operating with minor cosmetic changes to their institutional identities.

Lashkar-e-Jabbar fits within this pattern of organizational dispersion, but with a geographic specificity that distinguishes it from JeM’s Punjab-based fronts. While Khuddam ul-Islam and other fronts operated in JeM’s heartland of southern Punjab, Lashkar-e-Jabbar appears to have been established specifically to extend JeM’s reach into the tribal belt, where the organization’s Punjabi-Deobandi identity required local mediation. The tribal areas are predominantly Pashtun and follow Hanafi Islamic jurisprudence with Pashtunwali cultural overlay; the Deobandi sectarian identity that unites JeM, Lashkar-e-Jhangvi, and Sipah-e-Sahaba in Punjab has different resonance in the tribal context, where sectarianism is less salient than tribal loyalty and where the Taliban (which share Deobandi origins) dominate the religious-militant landscape.

By establishing Lashkar-e-Jabbar under local leadership, Malik provided JeM with a tribal-belt entity that could recruit, train, and operate within the Pashtun cultural framework while maintaining the ideological and operational connection to Azhar’s central command. This is not fundamentally different from the franchise model that al-Qaeda adopted globally, creating regional affiliates (al-Qaeda in the Arabian Peninsula, al-Qaeda in the Islamic Maghreb, al-Shabaab) that operated with significant local autonomy while maintaining loyalty to the central organization. The difference in scale is significant; Lashkar-e-Jabbar was not a global franchise but a regional extension into territory adjacent to JeM’s operational area, but the organizational logic is the same.

The affiliate architecture creates both resilience and vulnerability for the parent organization. Resilience because the dispersion of assets across multiple organizational vehicles means that targeting one group does not automatically degrade the others. Banning JeM did not affect the Al-Rehmat Trust’s fundraising operations or Lashkar-e-Jabbar’s tribal-belt activities until those entities were independently identified and targeted. Vulnerability because each affiliate represents a potential entry point for intelligence collection. Malik’s connections to Azhar, maintained through personal contact and organizational communication, created information flows that could be intercepted or compromised. Each communication between Lashkar-e-Jabbar and JeM’s central command represented a vulnerability that sufficiently sophisticated intelligence collection could exploit.

The shadow war’s targeting of Malik can be understood as an attack on JeM’s affiliate architecture specifically. By eliminating the founder of Lashkar-e-Jabbar, the campaign removed the human connector between JeM’s central command and its tribal-belt extension. This connector function, performed by a single individual whose tribal authority, personal relationships, and organizational knowledge could not be easily replicated, was more valuable than any material asset Lashkar-e-Jabbar possessed. Buildings can be rebuilt. Weapons can be resupplied. The trust relationships and cultural literacy that a figure like Malik embodied take years to develop and cannot be transferred by organizational decree.

The implications of this targeting extend to how intelligence services approach networked organizations more broadly. Traditional counter-terrorism doctrine, developed primarily by the United States after September 2001, focused heavily on decapitation: removing the top leader and expecting organizational collapse. This approach produced mixed results. Al-Qaeda survived Osama bin Laden’s death. The Islamic State survived Abu Bakr al-Baghdadi’s death. The decapitation model fails because it overestimates the importance of the top leader and underestimates the resilience of distributed networks. The shadow war’s approach, as exemplified by the Malik operation, targets the network’s connectors rather than its apex. Connectors are the individuals who bridge different segments of the network, who translate between different organizational cultures (tribal and jihadist, in Malik’s case), and who maintain the communication channels that allow the center to coordinate with the periphery. Removing connectors is more damaging than removing leaders because connectors cannot be replaced by organizational succession. A new JeM commander can be appointed by decree. A new tribal elder with Malik’s cross-organizational relationships and local knowledge cannot be manufactured on demand.

This connector-targeting doctrine has parallels in network theory, where scholars like Albert-Laszlo Barabasi have demonstrated that networks are most vulnerable to targeted removal of nodes with the highest number of connections, even when those nodes are not the most prominent. In the context of the shadow war, the pattern of targeting figures like Malik, who may be less well-known than Masood Azhar or Hafiz Saeed but who serve critical connecting functions, suggests an intelligence-driven targeting methodology informed by network analysis rather than public notoriety. The campaign is not simply picking off the names that appear in newspaper headlines. It is systematically mapping the network and removing the nodes whose elimination causes the greatest structural damage, a methodology that requires deep intelligence about the internal structure of the target organizations.

The Significance of the Tribal Belt as an Operational Theater

The shadow war’s expansion into North Waziristan raises a strategic question that extends beyond Malik’s individual case: what does it mean for the campaign’s trajectory that it has demonstrated the ability to operate in Pakistan’s most remote and lawless region?

In the first phase of the campaign, from the 2021 car bomb near Hafiz Saeed’s Lahore residence through the Zahoor Mistry killing in Karachi in early 2022, operations were confined to Pakistan’s two largest cities. These are environments with massive populations, extensive transportation networks, and the anonymity that comes with urban density. Operating in Karachi (population approximately 16 million) or Lahore (population approximately 13 million) requires a different skill set than operating in Mirali (population approximately 50,000), but the urban environment offers compensating advantages: surveillance is easier in a crowd, escape routes are numerous, and the target’s daily routine can be observed without the observer being noticed.

The expansion into the tribal belt eliminates these urban advantages and replaces them with a set of challenges that test entirely different capabilities. In place of urban anonymity, the tribal belt offers ethnic homogeneity where outsiders are immediately identified. In place of multiple escape routes, the tribal belt offers a limited road network controlled by military checkpoints. In place of a target embedded in a predictable urban routine, the tribal belt offers a target embedded in a tribal community whose codes of loyalty and hospitality actively protect him.

The fact that the campaign succeeded in this environment suggests one of two strategic developments. The first possibility is that the campaign has developed specialized tribal-belt capabilities, recruiting local assets, building safe houses, and establishing escape routes within the tribal system. If true, this represents a significant investment of time, money, and organizational effort, because building a network in the tribal belt requires years of relationship cultivation and cannot be accomplished through the same methods that work in urban Pakistan. The second possibility is that the campaign exploited a one-time intelligence opportunity, perhaps a single informant with access to Malik’s schedule or a signals intercept that revealed his location, without establishing a permanent presence in the tribal belt. This second possibility would be less significant for the campaign’s long-term trajectory but would still demonstrate the intelligence collection capabilities needed to identify and act on opportunities in the most challenging environments.

The comparison with the US drone program is instructive. The US built its tribal-belt intelligence network over years, investing heavily in both technological surveillance and human intelligence recruitment. Even with this investment, the drone program’s accuracy was contested, its intelligence was sometimes wrong, and its operations generated significant civilian casualties that undermined the political sustainability of the campaign. The shadow war’s apparent ability to conduct precise, ground-level operations in the same geographic area where the US relied on stand-off weapons from altitude suggests either a more refined intelligence methodology or a more limited operational footprint that sacrifices scale for precision.

The implications for Pakistan’s security establishment are significant. If the shadow war can operate in North Waziristan, a district where the Pakistan Army maintains its densest security infrastructure outside of the Line of Control, then no safe haven in Pakistan is truly safe. The tribal belt was supposed to be the last redoubt, the place where militant leaders could relocate when their urban safe havens came under pressure. Malik’s killing challenges this assumption. It suggests that the geographic expansion of the campaign has reached the point where the traditional calculus of safe havens, the expectation that remote, tribal, heavily militarized regions would provide protection against external operations, no longer holds.

For the militant organizations themselves, the implications are equally profound. JeM’s strategic dispersal of assets across Pakistan’s geography was designed to ensure organizational survival by distributing risk. If the Punjab-based leadership came under pressure, the tribal-belt affiliate could maintain operations. If the tribal belt was subjected to military operations (as it was during Zarb-e-Azb), the Punjab-based headquarters could continue directing the organization. The shadow war’s ability to strike across both environments, eliminating Shahid Latif in Punjab and Dawood Malik in Waziristan within eleven days, collapses this geographic hedge. The organization can no longer assume that distance provides security.

The behavioral impact on surviving JeM operatives in the tribal belt is difficult to measure but analytically important. Human beings respond to perceived threat through a combination of avoidance, concealment, and hardening. Avoidance means reducing activities that create exposure, such as travel, public appearances, and communication. Concealment means adopting disguises, changing residences, using intermediaries, and reducing digital footprints. Hardening means increasing personal security, traveling with armed escorts, and fortifying residences. Each of these responses imposes costs on the individual and on the organization they serve. An operative who cannot travel cannot maintain network connections. An operative who cannot communicate cannot relay instructions. An operative who lives in a fortified compound draws attention that defeats the purpose of the fortification. The shadow war’s expansion into Waziristan forces JeM’s tribal-belt operatives into these behavioral adaptations, each of which degrades the organizational function they are supposed to perform.

The broader implications extend beyond JeM to every militant group that has used the tribal belt as a sanctuary. The safe haven concept, the expectation that certain geographic regions are beyond the reach of hostile operations, is fundamental to how non-state armed groups organize their activities. Safe havens provide the physical security needed for training, planning, communication, and recuperation. They provide the psychological security needed for leaders to think strategically rather than reactively. And they provide the organizational security needed for command-and-control functions that require fixed locations and predictable routines. When a safe haven is penetrated, all three forms of security are compromised simultaneously, forcing the organization into a reactive posture that degrades every aspect of its operations.

The shadow war’s expansion into the tribal belt represents a progressive erosion of Pakistan’s safe-haven guarantee. This guarantee, the implicit assurance that Pakistani territory provides protection for those the state chooses to shelter, has been the foundation of Pakistan’s use of non-state actors as instruments of foreign policy for decades. The guarantee was always conditional: Pakistan would protect its militant assets as long as those assets served the state’s strategic objectives and did not threaten the state itself. The shadow war does not challenge the conditionality of the guarantee; it challenges the guarantee itself, demonstrating that Pakistan’s ability to provide protection has limits that can be exploited by a sufficiently capable adversary.

Frequently Asked Questions

Q: Who was Dawood Malik?

Dawood Malik was the founder of the Lashkar-e-Jabbar terror outfit and a close associate of Masood Azhar, the founder and leader of Jaish-e-Mohammed. Described in media reports as Azhar’s right-hand man, Malik was a tribal elder from North Waziristan who maintained connections across multiple militant organizations, including JeM, Lashkar-e-Jabbar, and Lashkar-e-Jhangvi. He was involved in anti-India activities throughout his career and reportedly had a narrow escape from India’s Balakot airstrike in February 2019. Malik was shot dead by unknown masked gunmen at a private clinic in the Mirali area of North Waziristan on October 20, 2023.

Q: What is Lashkar-e-Jabbar?

Lashkar-e-Jabbar is a militant organization founded by Dawood Malik in the tribal areas of Pakistan. The group functions as an affiliate of Jaish-e-Mohammed, extending JeM’s organizational reach into the Pashtun tribal belt where JeM’s core Punjabi identity makes direct operations more challenging. The organization supports extremist ideologies and has been involved in facilitating anti-India terrorism through its connections to JeM’s broader network. The name “Jabbar” may reference Maulana Abdul Jabbar, a JeM figure whose faction broke away to pursue jihad against the Pakistani state after Musharraf joined the US war on terror in 2001, though the organizational genealogy is not fully documented in open sources.

Q: How was Dawood Malik killed?

Malik was killed at a private clinic in the Mirali area of North Waziristan on October 20, 2023. According to Pakistani media reports citing police sources, masked gunmen entered the clinic where Malik was present and opened fire, killing him on the spot. The attackers escaped immediately after the shooting. Police described the incident as a targeted attack. No group claimed responsibility for the killing, and no arrests were made in connection with the case. CCTV footage was reportedly recovered from the clinic by Pakistani security forces.

Q: Why is a killing in North Waziristan significant compared to other locations?

North Waziristan is one of the most challenging operational environments on earth for covert operations. The district is mountainous, tribal, and heavily militarized by the Pakistan Army, which maintains checkpoints and surveillance posts throughout the area. The Pashtun tribal population enforces codes of hospitality (melmastia) that protect guests, including militant figures, with the force of cultural obligation. Strangers are immediately noticed and questioned in the small communities that dot the district. A successful targeted killing in this environment requires intelligence capabilities and local assets that far exceed what urban operations demand, making Malik’s elimination a significant demonstration of the campaign’s geographic reach.

Q: Was Malik’s killing linked to India’s shadow war against terrorists?

The attribution question is central to the analysis of Malik’s case. His profile fits the pattern of the broader campaign: he was involved in anti-India activities, he was a close associate of one of India’s most-wanted terrorists (Masood Azhar), and he was killed by unknown gunmen in a style consistent with other eliminations attributed to the shadow war. However, North Waziristan’s complex militant ecosystem offers alternative explanations, including TTP factional violence or inter-group rivalries. The factional explanation is weakened by the fact that Malik’s anti-India activities and JeM affiliation do not place him in documented conflict with the TTP. The pattern evidence, including the timing just eleven days after Shahid Latif’s killing, supports campaign attribution, though certainty is not possible from open sources.

Q: How many Masood Azhar associates have been killed in the shadow war?

Multiple individuals connected to Masood Azhar have been eliminated since the campaign began. Within a single month in late 2023, three Azhar-connected targets were killed: Shahid Latif (Sialkot, October 11), Dawood Malik (Mirali, October 20), and Raheem Ullah Tariq (Karachi, November 2023). Subsequently, Azhar’s elder brother Muhammad Tahir Anwar died under mysterious circumstances, further tightening the circle around JeM’s founder. The cumulative targeting of Azhar’s associates represents a systematic dismantling of the JeM founder’s operational network, working from the outer rings of peripheral associates toward the inner circle of family members.

Q: Could Malik’s killing have been a TTP factional hit?

The TTP (Tehrik-i-Taliban Pakistan) is active in North Waziristan and conducts targeted killings as part of its insurgency against the Pakistani state. However, the TTP’s targeting pattern focuses on Pakistani military and police personnel, government officials, tribal elders cooperating with the state, and rival militant factions that compete for territorial control. Malik, as a JeM affiliate whose primary activities were directed against India rather than the Pakistani state, does not fit the TTP’s targeting profile. The TTP has no documented history of targeting JeM personnel for their anti-India operations. While TTP involvement cannot be categorically ruled out, the available evidence does not support this explanation.

Q: What role did Malik play in the Balakot connection?

Reports indicate that Malik barely survived the Indian Air Force’s Balakot airstrike on February 26, 2019, the retaliatory strike launched in response to the Pulwama terror attack. If accurate, this places Malik physically at or near the JeM training facility in Balakot during the Indian strike, suggesting that he was deeply embedded in JeM’s operational infrastructure. The Balakot facility was one of JeM’s most significant training installations, and presence there indicates involvement at a level that goes beyond mere ideological affiliation. This detail, reported by Indian media sources, has not been independently confirmed.

Q: What anti-India activities was Malik involved in?

Malik’s anti-India involvement was structural rather than directly operational. As the founder of a JeM affiliate and a close associate of Masood Azhar, he maintained the organizational infrastructure that enabled JeM to sustain its terrorism campaign against India. This infrastructure included recruitment, logistics, communication networks, and cross-organizational connections that supported JeM’s operations across Pakistan’s geography. JeM’s attacks against India include the 2001 Parliament attack, the 2016 Pathankot airbase attack, and the 2019 Pulwama bombing, though Malik’s specific involvement in these individual attacks has not been publicly documented.

Q: How does the Waziristan killing compare to the motorcycle-borne killings in Pakistani cities?

The killing in Waziristan differs from the urban motorcycle pattern in several key respects. In cities like Karachi, Lahore, and Sialkot, the campaign’s signature method involves two riders on a motorcycle, close-range gunfire, and immediate escape through congested urban traffic. In Mirali, masked gunmen on foot targeted Malik at a clinic, adapting the method to an environment where motorcycle escapes are less practical and where armed men on foot attract less attention than they would in an urban setting. The adaptation suggests that the campaign adjusts its tactics to match the operational environment rather than rigidly following a single methodology, indicating tactical flexibility and environmental awareness.

Q: What was the Pakistan Army’s security posture in North Waziristan when Malik was killed?

The Pakistan Army maintained extensive security infrastructure in North Waziristan at the time of Malik’s killing, a legacy of Operation Zarb-e-Azb (2014) and subsequent operations including Radd-ul-Fasaad. This infrastructure includes checkpoints on all major roads, forward operating bases in key settlements including Mirali and Miranshah, surveillance posts on high ground, and regular patrols. Despite this presence, the army was unable to prevent the targeted killing or apprehend the attackers. The security architecture is primarily designed to combat the TTP insurgency and control population movement, not to protect specific individuals from precision assassination operations.

Q: What happened to Lashkar-e-Jabbar after Malik’s death?

Open-source reporting on Lashkar-e-Jabbar’s activities after Malik’s death is extremely limited, reflecting the group’s relatively low profile in the broader militant landscape. The elimination of a founding leader typically produces one of three outcomes: the group fractures and disperses, a successor assumes leadership and maintains operations, or the group is absorbed into its parent organization. Given Lashkar-e-Jabbar’s function as a JeM affiliate rather than an independent organization, the most likely outcome is that JeM’s central command either appointed a successor or absorbed Lashkar-e-Jabbar’s remaining assets into other organizational vehicles. The group’s tribal-belt location makes external monitoring difficult, and the true status of its post-Malik operations remains unclear.

Q: How does Malik’s elimination fit into the broader JeM degradation picture?

Malik’s killing is one node in a broader pattern of JeM leadership attrition. The campaign has systematically targeted individuals at multiple levels of JeM’s hierarchy, from operational commanders like Shahid Latif to peripheral affiliates like Malik to family members like Muhammad Tahir Anwar. The cumulative impact is significant: JeM’s external network of allies, affiliates, and associates has been progressively depleted, forcing the organization to rely more heavily on its core family-based leadership, which is itself under pressure. Ashley Tellis at Carnegie has argued that measuring organizational degradation through leadership attrition requires tracking not just the number of individuals eliminated but the specific functions they performed and whether those functions can be replicated by successors.

Q: What does Malik’s killing tell us about the campaign’s intelligence capabilities?

The successful targeting of Malik in North Waziristan implies intelligence capabilities that go significantly beyond what is required for urban operations. The operation required knowledge of Malik’s presence at a specific clinic at a specific time, in an environment where tribal codes of hospitality protect guests and where strangers are immediately noticed. This level of intelligence precision suggests either locally recruited assets with direct access to Malik’s circle, signals intelligence that captured his communications or movements, or information from within the Pakistani security apparatus. Each possibility carries different implications for the campaign’s long-term sustainability and the scope of its intelligence infrastructure.

Q: What is the Mirali area like as a physical environment?

Mirali, also known as Mir Ali, is a settlement of approximately 50,000 people in central North Waziristan, located roughly 30 kilometers south of Miranshah, the district headquarters. The town sits at the intersection of several roads and serves as a commercial hub for surrounding villages and tribal territories. It was partially destroyed during Operation Zarb-e-Azb in 2014 when the Pakistan Army cleared militant strongholds in the area, and has been gradually rebuilding since. The landscape around Mirali is semi-arid, with low hills, seasonal riverbeds, and cultivated patches along the flatter areas. The town has a bazaar, several mosques, medical facilities, and residential areas that mix traditional tribal architecture with newer concrete construction.

Q: Why is the timing of Malik’s killing significant?

Malik was killed on October 20, 2023, just eleven days after Shahid Latif was shot dead in Sialkot, Punjab. The two killings, targeting two JeM associates in two entirely different regions of Pakistan separated by over a thousand kilometers, suggest operational coordination rather than coincidence. The compressed timeline indicates that the campaign can execute operations in rapid succession across geographically dispersed theaters, implying either multiple independent teams or a logistical infrastructure capable of supporting near-simultaneous deployments. The October 2023 concentration of killings marked an acceleration in the campaign’s operational tempo that would continue into November with additional eliminations.

Q: Did any group claim responsibility for killing Malik?

No group claimed responsibility for Malik’s killing, a pattern consistent with virtually all of the targeted killings attributed to the shadow war. The absence of claims is itself analytically significant. In Pakistan’s militant landscape, violence is typically claimed because claiming credit serves organizational objectives, whether recruitment, deterrence, or territorial assertion. The consistent absence of claims across the entire pattern of targeted killings suggests that the entity responsible has no interest in the propaganda value of the killings, a characteristic more consistent with a state intelligence operation than with a militant group pursuing organizational objectives.

Q: How does the US drone program’s experience in Waziristan compare to the shadow war’s operations there?

The US drone program operated in North Waziristan from 2004 to approximately 2018, conducting hundreds of strikes that killed both targeted individuals and civilians. The drone program relied on satellite surveillance, signals intelligence, and human informants to identify targets, then used Predator and Reaper drones to deliver precision-guided munitions. Despite this technological investment, the program experienced significant intelligence failures, including strikes on tribal gatherings and misidentified targets. The shadow war’s operation against Malik achieved precise targeting using ground-level assets rather than aerial platforms, avoiding the collateral damage and political controversy that characterized the drone campaign. The comparison suggests that ground-level human intelligence, though harder to develop, can produce more precise targeting than technology-dependent stand-off methods.

Q: What are the implications for other JeM operatives in the tribal belt?

Malik’s killing sends a clear signal to other JeM operatives and affiliates in the tribal belt: the geographic remoteness and military security infrastructure of the tribal areas do not provide protection against the campaign. This message has behavioral implications. Operatives who previously assumed that relocating from Punjab to the tribal belt would increase their security must now reconsider that assumption. The likely responses include further movement (potentially across the border into Afghanistan, where the Taliban government provides a different security environment), increased personal security measures (armed guards, frequent address changes, reduced use of electronic communications), and reduced operational activity (limiting travel and public exposure). Each of these responses imposes costs on the organization, degrading its ability to maintain the logistics, communication, and command functions that sustain its operations against India.

Q: Can the shadow war sustain operations in the tribal belt long term?

The sustainability of tribal-belt operations depends on factors that are difficult to assess from open sources. If the operation against Malik relied on a permanent network of local assets, the campaign could potentially conduct additional operations in the tribal belt as intelligence opportunities arise. If it relied on a one-time intelligence windfall, the capability may not be replicable. The key variable is the depth of the intelligence infrastructure. Building and maintaining assets in the tribal belt requires continuous investment in relationship cultivation, secure communication, and risk management for informants who face severe consequences if discovered. The US drone program demonstrated that even well-resourced intelligence programs can lose access in the tribal belt when informants are compromised or killed. Whether the shadow war’s intelligence infrastructure has the resilience to sustain tribal-belt operations over time remains an open question.