How did a Pakistan-linked spy network target Navy’s Eastern Command, and how was it cracked? | Explained

A Pakistan-linked spy network, known as Operation Firewall-2026, targeted the Indian Navy's Eastern Command, with a specific focus on the Eastern Naval Command (ENC). The operation, carried out by officers and personnel from Andhra Pradesh’s Counter Intelligence Cell (CIC) and working alongside Naval Intelligence and Anti-Terrorist Squads (ATS) in 10 states, resulted in the identification of 18 key suspects, including 13 naval personnel. Two individuals, Pradeep Mukherjee and Annam Sai Vara Prasad, have been arrested thus far.

The Pakistan Intelligence Operatives (PIOs) created fake profiles of women on social media, including "Joshita Pall" and "Anvi Mehta," to honey-trap naval personnel and defence contractors. They built relationships through Facebook, WhatsApp, voice calls, and video calls, using fabricated professional identities and offering inducements such as relationships, sexually explicit content, and monetary incentives, often paid through cryptocurrency.

The ultimate goal was to persuade personnel to share sensitive defence information, including naval ship and submarine movements, photographs, videos, and details of commanding officers. Investigators also found a support network using Indian SIM cards and one-time passwords (OTPs) to communicate with foreign handlers. The modus operandi and sought intelligence were identical to a previous case in December 2019 involving Operation Dolphin’s Nose, which targeted the ENC and resulted in the arrest of 15 people, including seven naval personnel.

The ENC, located in Visakhapatnam, is home to India’s largest naval base and serves as the home port for Arihant-class nuclear ballistic missile submarines. Knowing the movements of a ship or naval platform in advance can make it easier for an adversary to position intelligence-gathering assets, making field-level intelligence a valuable asset for any nation.