Red Fort blast: Smartphone apps that the terrorists used to plot the attack and communicate

Days after the Delhi car blast near Red Fort, officials have confirmed that Dr Umar Nabi, the suspected suicide attacker, and his associated group coordinated their efforts using a mix of encrypted messaging apps, including Session, Signal and Telegram. Nabi and three associates, linked to the terror groups Jaish-e-Muhammed and Ansar Ghazwat-ul-Hind, traveled to Turkey in 2022. They met a handler codenamed "Ukasa" in Ankara, where Nabi spent two weeks. Initial communications began on Telegram before the group strategically moved their coordination to the more secure Signal and Session apps to finalise and communicate the details of the Red Fort attack.

Delhi blast: What is Session app that terrorists used

Session is a messaging application that differs from popular apps in its approach to privacy, security and data handling. According to the company website, Session is an end-to-end encrypted messenger that protects private data through a decentralised platform designed and operated by privacy experts.


Key features of Session app that make it 'dangerous'Some of the key features of the Session app makes it ideal for people to keep their conversations private and untraceable.

No personal information required: Session does not require a phone number, email or any personal information to create an account. Users are identified by a randomly generated Session ID that cannot be traced back to their identity, the company website says.

Decentralised network: The app operates on a decentralised network using blockchain technology. Messages route through multiple nodes using onion routing. There are no central servers that can be shut down or compromised.

In simpler words, the app uses a series of encrypted connections through a network of relay nodes designed to hide the origin and destination of messages.

Complete encryption: Session provides end-to-end encryption for all messages. No metadata is stored or accessible. Messages cannot be traced through the network.

Local data storage: Messages are stored only on user devices with no cloud backup and no server-side message retention. Users maintain complete control over their data.

Privacy-focused communication: The app offers basic messaging and voice messages, group chats, file sharing and voice calls. Session prioritizes privacy over additional features.