Thane/Mumbai: A late-night stabbing in Mira Road’s Naya Nagar by a 31-year-old man named Zaib Zubair Ansari has quickly escalated from a local crime story into a case which has terror implications, as investigators probe what they believe may be an instance of “self-radicalised lone wolf” violence with aspirational links to the Islamic State.
The attack, which left two security guards injured (one of them critically so, fighting for his survival in a Mumbai hospital) is now being examined by multiple agencies including the Maharashtra Anti-Terrorism Squad (ATS) and the National Investigation Agency (NIA), amid claims that the accused saw the act as a first step toward joining ISIS.
What Happened in Mira Road
The incident occurred in the early hours of April 27 near Asmita Grand Mansion, Behind the Wockhardt Hospital, in the densely populated Naya Nagar area of Mira Road, on the outskirts of Mumbai.
Two guards, Subrato Ramesh Sen (31) and his supervisor in security services – Raj Keshar Mishra and others were on duty.
According to preliminary accounts from investigators and eyewitnesses, the accused, identified as Zaib Zubair Ansari (also referred to as Jaber Zubair Ansari), initially approached Sen (who stood guarding the main gate of the under-construction site) first time around 3:00 am, asking him directions to a nearby masjid. Sen says in the FIR that he showed him the direction that led towards the Masjid, upon which Ansari asked him the name of the Masjid. Sen informed him that he did not have such details, upon which Ansari asked him if he was a Hindu. Upon hearing that Sen was a Hindu, Ansari went away and was spotted loitering near a tea shop and film theatre in the vicinity, says the FIR.
He came back to the site and approached Sen again at 4:30 am and asked him again, “Did you say you were a Hindu?” and began stabbing him. Sen says he panicked after the knife sliced through a part of his back and the armed Zubair Ansari reached the cabin.
He asked the supervisor to recite Kalma if he was not a Hindu, which Mishra could not. Meanwhile, panicked Subrato Sen ran out and hid behind the cabin. After 5-6 minutes as there was no sound, he called up MIshra, only to hear him crying and saying, “I have been seriously stabbed, now I am dying!”.
Ansari had fled and Sen managed to alert others on the site to come to Mishra’s aid. Both injured men were taken to Wockhardt Hospital, and though Sen seems out of danger, Mishra is battling complications due to his grievous injuries.
What transpired between the attacker and victims during the attack has become central to the investigation.
Ansari, in his second visit to the site, attempted to force one of the guards to recite the Islamic Kalma. This was a modus operandi seen in the Pahalgam terror attack as well where Pakistan trained terrorists brutally gunned down all Hindus identified from amongst a cross section of tourists at the picturesque valley – sparing the Muslims who were identified by the recitation of the Kalma chant.
In the Mira Road case, when the guards refused to comply with the demand to recite the Kalma, Ansari attacked them with a sharp-edged weapon. Both victims sustained injuries.
The sequence of events, investigators say, suggests premeditation rather than a spontaneous altercation.
The Lone Wolf Hypothesis
Maharashtra Chief Minister Devendra Fadnavis described the incident as a likely case of “self-radicalisation,” pointing to a pattern increasingly seen in global terror cases where individuals act without direct operational support from organised groups.
“This appears to be a case of self-radicalisation. Some books and incriminating material were recovered from the accused’s residence,” Fadnavis said, adding that the accused had recently returned from the United States and had developed extremist motivations.
The “lone wolf” label is significant. Unlike coordinated terror modules, lone actors often radicalise online, consume extremist propaganda, and carry out attacks independently, making detection far more difficult.
However, the Maharashtra Chief Minister was careful to underline that the investigation would not stop at the individual. Agencies are probing whether there were “individuals or networks behind his radicalisation,” leaving open the possibility of indirect influence or remote handlers.
The ISIS Link: Aspirational or Operational?
The most striking development in the case comes from the recovery of handwritten notes from Ansari’s residence.
According to ATS sources, these notes allegedly express a desire to join ISIS and describe the Mira Road attack as a “first step” toward that goal.
At this stage, investigators are distinguishing between aspirational alignment and operational linkage.
There is, as of now, no confirmed evidence that Ansari was formally recruited or trained by ISIS. Instead, the working theory is that he may have been influenced by online extremist content, a pathway commonly seen in self-radicalised individuals.
Digital forensics teams are now analysing his mobile phone, laptop, and online activity to determine whether he had any direct contact with ISIS operatives or sympathisers, either within India or abroad.
What ATS and Mumbai Police Are Saying
The Maharashtra ATS has taken the lead in the investigation, treating the case as a potential terror incident rather than a routine criminal assault.
Officials have confirmed:
· Recovery of “incriminating material” from the accused’s residence
· Discovery of handwritten notes indicating extremist intent
· Ongoing analysis of digital devices for possible communication links
The Mumbai Police, working in coordination with the ATS, have focused on reconstructing the timeline of the attack and verifying eyewitness accounts. They are also mapping the accused’s movements in the days leading up to the incident.
A key question remains whether Ansari had conducted reconnaissance or targeted the victims specifically based on identity, which would further strengthen the terror angle.
Kirit Somaiya’s Allegations
BJP leader Kirit Somaiya has come out strongly to speak out against the broader pattern of targeted violence. Reacting to the attack, Somaiya claimed that a “new conspiracy and jihad” is unfolding in the Naya Nagar area and alleged that Hindus are being specifically targeted.
He also reiterated claims that the accused attempted to coerce the victims into reciting the Kalma before attacking them, presenting the incident as ideologically motivated rather than incidental.
Somaiya further asserted that the attacker appeared “well-trained” and warned that those involved would be identified and jailed.
While such claims are politically charged, investigators have not publicly confirmed any organised local conspiracy at this stage.
Who Is Zaib Zubair Ansari?
Details emerging about the accused paint a picture of a man whose trajectory may hold clues to the radicalisation process.
Zaib Zubair Ansari, 31, is reportedly a science graduate who spent several years in the United States before returning to India. According to investigators, he struggled to secure employment during his time abroad and eventually moved back to Mira Road.
He was living alone in Naya Nagar and earning a livelihood by offering online chemistry coaching. Unconfirmed reports say that his wife is of Afghan origins and has recently left him and proceeded to the US.
This period of relative isolation is now under scrutiny. Investigators believe that Ansari may have become radicalised through online content, a pattern seen in several lone wolf cases globally. The absence of a strong social network, combined with prolonged digital exposure, can create conditions conducive to ideological indoctrination.
His handwritten notes, if authenticated as reported, suggest not just passive consumption of extremist material, but an active desire to transition into violent action aligned with global jihadist narratives.
A Pattern Seen Before
Security experts note that the Mira Road case fits into a broader global pattern of decentralised radicalisation.
In such cases, individuals consume propaganda online, develop a personal ideological commitment, seek validation through acts of violence, and attempt to “signal” allegiance to larger terror groups.
The reference to the attack as a “first step” is particularly telling. It reflects a mindset where violence is seen as an initiation ritual rather than an end in itself.
What Happens Next
With both the ATS and NIA involved, the investigation is expected to expand beyond the immediate facts of the case, such as digital communication trails, financial transactions, travel history and contacts in the United States, and possible online networks or forums linked to radicalisation.
Authorities are also likely to examine whether there are others in the region who may have been exposed to similar content or influences
