In the early hours of April 27, 2026, two security guards were stabbed in Mumbai’s Mira Road after they were reportedly asked to recite the Kalma by the attacker, identified as Zaib Zubair Ansari. Maharashtra ATS has taken over the probe after notes referencing ISIS and “lone wolf” attacks were recovered from the accused’s residence.
How the Mira Road Attack Unfolded
At approximately 4 AM on April 27, Zaib Zubair Ansari approached an under-construction building near Asmita Enclave, behind Wockhardt Hospital in Naya Nagar, Mira Road East. He first approached one of the on-duty security guards and asked him about his name and religion. He then left briefly, returned, and approached the second guard at the security cabin. He reportedly asked the guard whether he could recite the Kalma, turning the interaction into what investigators describe as a Kalma-based confrontation. When the guard said he could not, Ansari then pulled out a knife and attacked him.
Victims Identified, Condition After Stabbing
The two victims are Rajkumar Mishra and Subroto Ramesh Sen, both security guards on night duty at the under-construction building. Mishra sustained the more serious injuries, including damage to his intestines, and his condition was initially reported as critical. Sen suffered injuries to his back described as less severe. Mishra reportedly made it to Wockhardt Hospital on his own, while Sen was found bleeding by a local resident named Nayab Sheikh, who took him first to a police station and then to hospital. Both are undergoing treatment and are reported to be stable as of April 28, following the Kalma-linked attack.
Accused Zaib Zubair Ansari Arrested Within Hours
Within 90 minutes of the attack, Mira Bhayandar Vasai Virar (MBVV) police traced and arrested Ansari using CCTV footage from the surrounding area. An FIR was registered at Naya Nagar Police Station under Sections 109, 118(2), and 196(1) of the Bharatiya Nyaya Sanhita. Ansari was produced before a Thane district court, which remanded him to police custody until May 4, 2026.
The Kalma Demand and Nature of the Attack
According to police accounts, the sequence of the attack was deliberate and structured. Ansari first established the religious identity of the guards by asking their names and religion. He then tested their knowledge of Islamic prayer. When one guard could not recite the Kalma, he was stabbed. When the second guard intervened, he was stabbed as well. The FIR includes charges of promoting enmity between communities. The nature of the interrogation before the attack has led investigators to treat the incident not as an impulsive altercation but as a motivated act.
Terror Angle Under Probe, ATS Joins Investigation
The Maharashtra Anti-Terrorism Squad officially took over the case on April 28 after the recovery of extremist material from Ansari’s residence. The ATS is probing a “lone wolf” terror angle. Officials confirmed that all possibilities are being explored and “nothing can be ruled out.” Investigators are examining whether the attack was premeditated, whether Ansari had any prior criminal history, and whether he had contact with any organised radical networks within or outside India.
ISIS References and Radicalisation Clues Found
The most alarming development in the investigation is the material recovered from Ansari’s rented accommodation in Mira Road. According to ATS officials, handwritten notes referencing ISIS, lone wolf operations, jihad, and Gaza. One note, reportedly addressed to ISIS and written in the first person, described the attack on the guards as his “first step” toward joining the terror outfit. Another document was said to contain the line: “LONE WOLVES WILL POUNCE ON YOU, you mushrikeen will see.” Ansari’s digital devices, including his phone and communication records, are being forensically examined. Preliminary findings suggest he was exposed to extremist content through online platforms, encrypted messaging applications, and possibly radical social media channels during a period of social isolation.
Background of the Accused
Zaib Zubair Ansari is 31 years old and originally from Kurla, Mumbai. He reportedly lived in the United States for several years, his family still resides there, before returning to India after failing to secure stable employment. He settled alone in a rented flat in Mira Road and worked as an online chemistry and mathematics coach. His landlord had reportedly asked him to vacate the flat by May 5. Police are treating his period of unemployed, isolated living as a possible window during which he was radicalised through online content.
Legal Charges Invoked Against the Accused
The FIR registered at Naya Nagar Police Station invokes Section 109 of the BNS (attempt to murder equivalent), Section 118(2) (voluntarily causing grievous hurt by dangerous weapons), and Section 196(1) (promoting enmity between groups on grounds of religion). The ATS is separately examining whether charges under the Unlawful Activities Prevention Act (UAPA) are applicable, which would significantly escalate the legal consequences for the accused if the terror link is formally established.
Security Concerns Rise After Incident
The Mira Road attack arrives weeks after the Pahalgam massacre in Jammu and Kashmir, in which tourists were asked to identify their religion before being shot. The pattern of religious interrogation followed by targeted violence has prompted security agencies to assess whether lone-wolf radicalisation is producing a replicable model of attack within Indian cities. Officials have called for heightened urban vigilance, particularly at low-security sites such as construction premises and residential complexes with minimal infrastructure. The ATS investigation will be closely watched, both for what it confirms about Ansari’s connections and for what it reveals about the online channels that may contribute to such radicalisation.
