Al-Qaida offshoot AQIS behind Red Fort blast in 2025: UNSC report confirms
A report by the United Nations Security Council's Analytical Support and Sanctions Monitoring Team has attributed the November 2025 car explosion near Delhi's Red Fort to Al-Qaida in the Indian Subcontinent (AQIS), an affiliate of the global Al-Qaida network.
The blast, which took place near the Red Fort Metro Station on 10 November 2025, killed at least 15 people and injured over 20 others; investigators found the vehicle laden with ammonium nitrate-based explosives.
The monitoring team's assessment supersedes an earlier attribution by a UN member state that had linked the attack to Jaish-e-Mohammed (JeM), marking a shift in the official understanding of the perpetrating group.
The report notes that AQIS has evolved from a fragmented outfit into a regional terrorist entity that builds logistics and financial networks and operates through small, decentralised, scattered cells rather than large formations, with continuing presence in southeastern Afghanistan and efforts to expand into Bangladesh.
The report also flags that operatives affiliated with the network have used publicly available AI chatbot tools to seek information related to bomb-making and target selection, raising fresh concerns about AI misuse in terrorism.
The National Investigation Agency (NIA) has separately chargesheeted individuals linked to Ansar Ghazwat-ul-Hind, an AQIS-affiliated module, in connection with the blast.
The UNSC 1267 Sanctions Regime and the Monitoring Team
The UN Security Council's terrorism sanctions architecture originated with Resolution 1267 (1999), which initially imposed an assets freeze and air embargo on the Taliban for sheltering Osama bin Laden. Resolution 1989 (2011) split the regime so that sanctions applied separately to individuals and entities associated with Al-Qaida, distinct from the Taliban. The Committee overseeing this list is supported by the Analytical Support and Sanctions Monitoring Team, established under Resolutions 1526 (2004) and 2253 (2015), currently comprising about ten independent experts based in New York whose mandate (most recently extended by Resolution 2734 of 2024) runs until June 2027. The regime today functions through three coordinated measures against listed entities: an assets freeze, a travel ban, and an arms embargo.
Key Details
- Resolution 1267 (1999) — origin of the Al-Qaida/Taliban sanctions regime.
- Resolution 1989 (2011) — separated the Al-Qaida sanctions list from the Taliban list.
- Resolution 2253 (2015) — extended the sanctions regime to cover ISIL (Da'esh) alongside Al-Qaida.
- Three sanctions tools: assets freeze, travel ban, arms embargo.
The Red Fort blast attribution comes from precisely this Monitoring Team's periodic report to the Security Council, illustrating how the 1267 sanctions architecture also functions as a global intelligence-sharing and threat-assessment mechanism for member states, not merely a punitive listing tool.
Al-Qaida in the Indian Subcontinent (AQIS) — Origin and Legal Status in India
AQIS was formally announced on 3 September 2014 by then Al-Qaida chief Ayman al-Zawahiri as a Pakistan-based affiliate tasked with extending Al-Qaida's operations into India, Bangladesh, and Myanmar. In India, AQIS was formally banned as a terrorist organisation in 2018 under the Unlawful Activities (Prevention) Act, 1967 (UAPA). The UAPA allows the central government to designate any organisation as a "terrorist organisation" under Section 35 read with the First Schedule, once it is satisfied the organisation is involved in terrorism, without needing a prior criminal conviction.
Key Details
- AQIS announced: 3 September 2014, by Ayman al-Zawahiri.
- Banned in India: 2018, under UAPA, 1967.
- UAPA Section 35 and First Schedule govern the process for designating organisations as "terrorist organisations."
- UAPA also allows individual designation as a "terrorist" under Section 35, independent of organisational membership (since the 2019 amendment).
The UNSC's attribution of the Red Fort blast to AQIS reinforces India's own domestic legal designation of the group, and strengthens the basis for UAPA-based prosecution of the affiliated cells the NIA has chargesheeted.
Dual-Use Risk of AI Tools in Terrorism Planning
The monitoring team's finding that operatives used AI chatbots to seek bomb-making and targeting information is an emerging internal security concern globally. It illustrates the broader "dual-use" problem in security studies, where widely available civilian technologies (AI models, drones, encrypted communication apps) can be repurposed by non-state actors for hostile ends, complicating traditional counter-terrorism financing and interdiction approaches that focus on physical logistics and networks.
Key Details
- The report highlights the group's "logistics and financial networks" as key to sustained operational capability despite counter-terrorism pressure.
- AI misuse in terrorism planning is increasingly cited in UN Counter-Terrorism Committee assessments as a frontier security risk alongside traditional financing and recruitment channels.
This finding links the Red Fort blast case to the wider global policy debate on regulating generative AI tools to prevent their misuse for violent extremism, a theme increasingly relevant to India's own counter-terrorism and technology governance discourse.
- Red Fort blast date: 10 November 2025, near Red Fort Metro Station, Delhi.
- Death toll: at least 15 killed, more than 20 injured (figures varied slightly across initial reports).
- Explosive material: ammonium nitrate-based device in a car.
- AQIS formally announced: 3 September 2014; banned in India in 2018 under UAPA.
- UNSC Monitoring Team mandate (per Resolution 2734, 2024): extended until June 2027.
- Earlier attribution (by a UN member state) had linked the attack to Jaish-e-Mohammed before the Monitoring Team's AQIS finding.