Investigations have intensified in the Mira Road knife attack case after the Maharashtra Anti-Terrorism Squad (ATS) began probing a possible “lone wolf” terror angle behind the incident in Mumbai.
The attack took place in the early hours of April 27 in the Naya Nagar area of Mira Road, where accused Zaib Zubair Ansari (31) allegedly stabbed two security guards, identified as Subrata Sen and Rajkumar Mishra. Police later arrested him from his rented residence within a short time after the incident.
Authorities have booked him under attempt to murder charges, and the case is now being jointly examined by local police and the ATS.
ATS suspects planned and premeditated action
According to investigators, the attack may not have been a spontaneous act but a planned one. Officials said surveillance footage and forensic findings suggest that the accused returned home after the stabbing instead of fleeing the area.
A senior official involved in the probe told media that the accused “washed the knife, changed his blood-stained clothes, and then wore black attire” after the attack. Investigators believe this behaviour indicates a deliberate attempt to avoid immediate detection.

Officials also said they are examining whether the use of black clothing had any symbolic meaning linked to extremist propaganda, noting that “black flags and black clothing are often seen in ISIS-related propaganda content.”
However, they stressed that no confirmed link to any organisation has been established so far.
Suspected attempt to record message after attack
The ATS is also probing whether Ansari intended to record a video or issue a statement claiming responsibility after the attack.
Officials said, “Releasing a video or message is considered a common pattern used to establish the identity of ‘lone wolf’ attackers. It is still unclear whether he managed to do so before arrest.”
Evidence recovery and digital probe underway
Police said they have recovered the knife allegedly used in the attack and blood-stained clothes from the accused’s residence. His mobile phone was also seized, though officials said it had been deliberately formatted before arrest, raising suspicions of evidence destruction.
An officer said, “The accused formatted his mobile phone prior to his arrest. Agencies suspect this was done to erase possible digital evidence.”
CCTV footage from the surrounding area was also reviewed soon after the incident, helping investigators identify and track the accused.
Background of accused under scrutiny
Preliminary findings have revealed that Ansari has been living in India since 2020, while his immediate family members, including parents, sister and wife, are reportedly US citizens. His father is said to work as a taxi driver in the United States.
Police also said he had recently ended his marriage and was receiving financial support from his father abroad.
Case treated as serious security concern
While the accused remains in custody, the Maharashtra ATS is treating the case as a serious security concern due to the suspected pre-planned nature of the attack.

Officials have not ruled out any angle yet, including personal grievance, mental instability, or ideological influence. The final conclusion will depend on forensic reports, digital recovery, and further interrogation.





