Among those killed with him were Commander Romal Panjshiri and Commander Atiq Andarabi.
Hasib and his team believed they were on their way to meet Taliban commanders who had become dissatisfied with the regime. The meeting was intended to explore cooperation and coordinated operations against the Taliban in northern Afghanistan. They never made it. The Taliban knew Hasib was coming.
The circumstances surrounding Hasib's death show that the Taliban had information about his planned meeting, his movements, and the route he intended to take before he reached Salang. His killing was not a chance battlefield encounter. It was the result of a Taliban intelligence operation that used compromised contacts inside the resistance network to track his movements and position forces along his route.
The operation involved the Taliban's General Directorate of Intelligence, or GDI, and the Special Forces Command of the Taliban Ministry of Defense. At the center of it was the network surrounding Mullah Juma Fateh, a dissatisfied Taliban commander arrested on August 16, whose detention gave Taliban intelligence an opening into opposition networks operating across northern Afghanistan.
The Juma Fateh Network
Before his arrest, Juma Fateh and members of his network had developed contacts with the NRF, including resistance members inside Afghanistan and contacts in Tehran. Those relationships became an intelligence opportunity for the Taliban after Fateh was arrested.
The GDI and Taliban Special Forces moved against several of Fateh's close associates in Badakhshan, including Commander Mohammad Hanif Mohammadi, Zarqawi Mujahid, and Qari Nazim Amini. All three had established relationships with anti-Taliban elements and gained access to resistance networks operating in Panjshir, Baghlan, and Parwan, including individuals associated with Hasib Panjshiri.
Rather than keep the three in custody, the Taliban turned them. They were offered amnesty and protection of their existing positions in exchange for cooperating with the GDI and Taliban Special Forces. After their release in the Nasi and Darwaz districts, they continued presenting themselves as dissatisfied Taliban commanders while providing information on resistance members, their activities, and their locations.
That arrangement allowed the three men to maintain the relationships they had already built with the resistance while quietly turning those relationships into an intelligence channel for the Taliban. One of those relationships would lead directly to Hasib Panjshiri.
The Operation Against Hasib
One of Hasib's close associates was communicating directly with Qari Nazim Amini and shared details about Hasib's planned movement toward Baghlan. Hasib's group was attempting to reach an understanding with members of Juma Fateh's network who appeared to remain dissatisfied with Taliban leadership. The plan was to meet in Andarab and discuss coordinated operations against the Taliban, including efforts to challenge Taliban control over major routes leading north toward Badakhshan and Panjshir.
But Qari Nazim was providing intelligence to the Taliban. He passed information about Hasib's planned movement to Mullah Mohibullah, also known as Nasrat Haji Lala, a Taliban Special Forces commander, and Qari Mohammad Sediq Mukhlis, head of the GDI intelligence directorate in Parwan province.
At the same time, Hasib received information through Qari Nazim's network indicating that the route through Parwan was secure. Based on those assurances, he continued toward Andarab believing he was going to meet Taliban commanders associated with Juma Fateh who remained dissatisfied with the regime and had neither been arrested nor surrendered alongside Fateh.
Taliban Special Forces under Mullah Mohibullah deployed to the Salang area of Parwan province and positioned themselves along Hasib's route. When Hasib and his men reached the area, Taliban forces intercepted them. A firefight followed, killing Hasib, Commander Romal Panjshiri, Commander Atiq Andarabi, and other members of the group.
The operation had begun long before the first shot was fired in Salang. The compromised network gave Taliban intelligence access to Hasib's plans while information flowing back through that same network gave him the confidence to continue the trip. The network remains in place.
The Intelligence Operation Continues
The three men who helped give the Taliban access to Hasib's network remain active in the Darwaz and Nasi areas. Mohammad Hanif Mohammadi, Zarqawi Mujahid, and Qari Nazim Amini continue presenting themselves as opponents of the Taliban while collecting information on commanders, personnel, locations, and activities connected to the NRF and Afghanistan Freedom Front (AFF). That information then moves through Mawlawi Abdul Khaybar Nizami, the military official in Arghanjkhwa, Badakhshan, and a Tajik Taliban commander who formerly supported Juma Fateh but now works for Qari Fasihuddin Fitrat, Chief of the General Staff of the Taliban Ministry of Defense.
For resistance groups operating in northern Afghanistan, the problem is larger than these three men. A Taliban commander who genuinely breaks with the regime could provide valuable intelligence, access, recruits, or even a potential partner for future operations. That makes identifying real divisions within the Taliban important, but it also creates an opportunity for the GDI to exploit. By keeping compromised commanders in place as supposed opponents of the regime, the GDI and Taliban Special Forces can turn what could be a valuable opportunity for the resistance into a way to identify and target its people and networks.
The operation against Hasib is not the only recent example of the GDI using deception to penetrate anti-Taliban resistance networks. In another operation, a covert GDI intelligence officer named Ehsanullah Farahi has been operating under the name Commander Shahin Aseman, presenting himself as a member and representative of the AFF. His role has been to identify former Afghan military personnel and members of resistance fronts, verify their identities and affiliations, and help facilitate their arrests.
The deception went as far as staging a fake phone call involving a supposed conversation between the AFF and Juma Fateh. Farahi participated in the call while someone was presented as Fateh, creating the appearance of a legitimate connection between the resistance and Fateh's network. The ruse did not have the consequences of the operation against Hasib, but it shows the same GDI tactic: manufacture credibility, create what appears to be a trusted connection, and use that access to identify people inside the resistance.
The Tehran Connection
The intelligence picture also extends beyond Afghanistan. A coordination office in Tehran for former Afghan military personnel was involved in some of Hasib's plans and works primarily with Tajiks and other non-Pashtun former security personnel living in Iran. One of its main functions is to help them obtain residency permits and prevent their deportation to Afghanistan, where they could fall into Taliban hands.
The office was previously headed by Ikramuddin Sari, who was later assassinated. It is now led by Khoja Mahboob Saiqi, who operates under the cover of serving as the representative of Atta Muhammad Noor.
Saiqi provides another connection back to the network surrounding Juma Fateh. He has been involved in establishing links with members of Fateh's network while making false claims about some of those contacts. He has also traveled to Kabul and Mazar-e-Sharif to meet with the GDI, including Directorate 197.
At the same time, Saiqi's position gives him access to former Afghan military personnel who rely on the Tehran coordination office. Information collected through that access is shared with both Directorate 197 and Iran's Islamic Revolutionary Guard Corps Intelligence Organization (IRGC-IO). The office is also indirectly used to recruit fighters for the resistance, making that access particularly valuable. An office intended to help protect former Afghan military personnel from deportation and the Taliban has also become an intelligence collection point.
Sari's own assassination shows where that access can lead. His killing was the result of coordination between the Taliban's GDI and IRGC’s Unit 840. The operation was jointly overseen by Mawlawi Abdul Jamil Abid, then head of Directorate 197, and Mohammad Jafar Shahlai, a senior commander within Unit 840. Directorate 197 is formally the Taliban's Foreign Relations Directorate, but it also serves a covert action role for the GDI. Its relationship with the IRGC gives the Taliban access to former Afghan military personnel and resistance-linked networks operating inside Iran.
That relationship continues. Mullah Abdul Jabbar Shahidmal, the new head of Directorate 197, has made a handful of official trips to Moscow and Tehran since March 2026. A central purpose of his travel to Tehran has been monitoring former Afghan military personnel living in Iran and setting them up for assassination. For former Afghan military personnel who fled to Iran, leaving Afghanistan has not put them beyond the Taliban's reach.
What Hasib's Killing Reveals
Hasib's killing shows that the Taliban is not simply trying to defeat the resistance on the battlefield. It is using counterintelligence to penetrate it from within. The GDI is exploiting real divisions inside the Taliban, creating false ones when necessary, and using supposed defectors and trusted intermediaries to gain access to resistance networks. For the NRF and AFF, identifying Taliban commanders who genuinely break with the regime could provide valuable opportunities. The challenge is determining which divisions are real and which have been manufactured by the GDI.
Hasib's killing demonstrates the cost of getting that assessment wrong. The Taliban did not find him by searching the mountains of northern Afghanistan. It penetrated the network around him and waited for him to arrive. The next resistance commander reaching out to a supposed Taliban defector could be walking into the same operation.