The suspect identified as Sophia Siddique alias Sania alias Gudia, escaped from the Duronto Express in the early hours of Sunday. She was identified as a key suspect following the technical analysis of the contacts and bank accounts used in the whale phishing attack.