Militant Media Intelligence Assessment

In this issue

1. Tehrik-i-Taliban Pakistan (TTP): 334 attacks claimed in September and 406 in August; expansion into South Punjab, interior Sindh and Balochistan; allegiance pledges from Mohmand, Quetta and Bajaur; open rift with AQIS after the Swat and Kohat attacks.
2. Al-Qaeda in the Indian Subcontinent (AQIS): Rising official media presence; Kohat statement calling the attack a “mistake”; 9/11 content; booklets on the US and on lessons from Syria; launch of Shaoor Media on X.
3. Islamic State Khorasan Province (ISKP) and Islamic State Pakistan Province (ISPP): Return to mainstream platforms; youth recruitment through TikTok; renewed activity in Pakistan’s tribal districts; anti-Afghan Taliban messaging; ISPP posters on closed platforms.
4. Ittehad-ul-Mujahideen Pakistan (IUM) and associates: Links to the Kohat attack; booklet Jihad aur Fasad mein Farq; IIP videos, including one made with AI imagery; Jamaat-ul-Ahrar’s Ghazi magazine.
5. Baloch militant organizations: BLA’s Operation Marg-e-Ghaddaran and warning to mining companies; Dr. Laal Khan as the face of educated recruits; BLF’s women’s unit, KAAD; Isper magazine and the “ideology of the last bullet.”

1. Tehrik-i-Taliban Pakistan (TTP)

Overview: TTP claimed 334 attacks in September and 406 in August. The military and Frontier Corps (FC) remained the primary targets, with a growing number of attacks on police and Counter Terrorism Department (CTD) personnel. Most claims came from South Waziristan, North Waziristan and Peshawar. Claims also show expansion into Punjab, interior Sindh (Nawabshah) and Balochistan (Ziarat Cross, Pishin). The period’s defining development is the escalating AQIS–TTP dispute. TTP has responded by publicizing pledges of allegiance from its Mohmand, Quetta and Bajaur groups. It has also openly blamed AQIS and IUM for the Kohat Police Lines mosque attack.

Figure 1: TTP attacks infograph August 2026 – Telegram

Targeting security forces and “blazing” the state

Beyond killings, the claims give unusual weight to destroying infrastructure, including security cameras and communication systems. Presenting these as achievements signals a deliberate aim to degrade the state’s ability to see and coordinate on the ground. Ambushes and sniper attacks remained the main modes of attack, continuing a pattern flagged earlier this year. Both keep TTP’s own exposure low while imposing steady casualties on security forces.