#FactCheck- Viral video of massive fire falsely linked to Israel-Iran conflict; actually from Dagestan gas pipeline blast
Research Wing
Innovation and Research
PUBLISHED ON
Jun 15, 2026
10
Executive Summary
A video showing a massive fire with thick black smoke is being widely shared on social media with the claim that it depicts a recent Israeli attack on Iran. CyberPeace Research Wing research found that the claim is false. The viral video is not related to Iran or any Israel-Iran conflict. It actually shows a gas pipeline fire in Kizilyurt city of Russia’s Dagestan region.
Claim:
A video circulating on X shows a large fire breaking out at a location with thick black smoke rising. The clip is being shared with a caption claiming, “Israel has carried out more than 500 surgical strikes on Iran in the last 24 hours.” Post link: https://x.com/ocjain4/status/2064700017361985702, https://x.com/ocjain4/status/2064700017361985702
A reverse image search using keyframes from the viral video led to visuals published in a report on a Dagestan-based media outlet dated June 9. The report stated that the Russian Emergency Situations Ministry’s Dagestan department received reports of three explosions at a methane gas station.
Further research found that several Russian media outlets also published the same visuals on June 9, describing them as a pipeline explosion and fire in Kizilyurt, Dagestan
We also found a report published by DW on June 9, 2026, which stated that three explosions occurred on the Mozdok–Kazimagomed gas pipeline in Kizilyurt, Dagestan, resulting in a massive fire with flames rising up to 15 meters. According to local authorities, no casualties or injuries were reported..
The research clearly shows that the viral video is unrelated to the Israel-Iran conflict. It actually depicts a gas pipeline fire in Russia’s Dagestan region, which has been falsely shared as a recent Israeli strike on Iran.
A video is being widely shared on social media showing a flood-affected area. In the video, several houses appear to be almost completely submerged in water, with only their triangular rooftops visible above the surface. Several people can be seen sitting on these rooftops, while ducks and other animals appear to be floating in the water. The video is being shared with the claim that it shows the real situation during the recent floods in Assam. CyberPeace Research Wing’s research found the claim to be misleading. The research revealed that the viral video is not from any real flood incident but was created using Artificial Intelligence (AI). Although the flood situation in Assam is real and several parts of the state have been affected, the viral video has no connection with those events. The AI-generated video is being falsely shared as an actual visual from the Assam floods.
Claim
A user on Instagram shared the viral video on July 27, 2026, claiming that Assam continues to face severe flooding, with more than seven lakh people affected. The post link, archive link and screenshot are provided below.
To verify the authenticity of the viral claim, we extracted several key frames from the video and conducted a reverse image search using Google Lens. The search did not reveal any credible news report, official source, or reliable information confirming that the video showed real flood visuals from Assam. During the research, we found a report published by Aaj Tak on July 27, 2026. According to the report, the flood situation in Assam remained severe, with several deaths reported and more than 7.05 lakh people affected across nine districts of the state. The report link and screenshot are provided below.
As the video appeared suspicious, we analysed it using the AI detection tool HIVE Moderation. The tool’s analysis indicated a 98.8 percent probability that the video was AI-generated, suggesting that it was not a real recording.
Further research was carried out using another AI detection tool, DetectVideo.AI, which found a 77 percent likelihood of the video being AI-generated.
For additional verification, we extracted key frames from the viral video and analysed them using another AI detection tool, AI or Not. The tool’s assessment indicated a 96 percent probability that the visuals were AI-generated.
Conclusion
The research established that the viral video is not from a real flood incident but was created using AI. While flooding in Assam is a real situation, this AI-generated video is unrelated to the actual floods and is being circulated on social media with a misleading claim.
Amid the ongoing war between the United States–Israel alliance and Iran since February 28, 2026, two videos are going viral across social media platforms. The clips show people running in panic, with visuals suggesting a large-scale attack. Users are sharing these videos with the claim that they depict Iran’s recent strikes on Israel. However, a research by the CyberPeace has found both claims to be false. The viral posts are misleading, as the videos are actually from the 9/11 terrorist attacks on the World Trade Center in New York, United States. They have no connection to the current conflict involving Iran or Israel.
Claim
A Facebook page titled ‘Bihar Ko Nihar’ shared one of the videos on March 25, 2026, with the caption: “Iran has launched its most powerful attack on Israel so far. Thousands of soldiers are reported dead, triggering massive protests within the country, and Israel appears completely helpless.” Similarly, another video is being circulated with the false claim that Iran has launched a missile attack on the United States.
The above claims are being widely shared by multiple users across different social media platforms. Archived versions of these posts are also available.
To verify the authenticity of the videos, keyframes were extracted and analyzed using Google Lens. The first viral clip was traced back to a YouTube video uploaded on September 11, 2007, by a channel named ‘Jumperwtc’, which clearly identifies the footage as being from the World Trade Center attacks in the United States. This confirms that the viral video is a segment from that older footage.
For the second video, reverse image searches led to a report published on CBS8.com on September 10, 2021, where the same visuals were found. Further reesearch revealed that the footage also appears in a video uploaded on September 11, 2021, by the YouTube channel ‘CBS 8 San Diego’. The viral segment can be seen around the 1:11 timestamp in that video.
Both viral videos being shared as recent attacks by Iran on Israel or the United States are actually old clips from the 9/11 attacks on the World Trade Center in New York. The claims are false, and the videos are unrelated to the ongoing conflict in West Asia.
All citizens are using tech to their advantage, and so we see a lot of upskilling among the population leading to innovation in India. As we go deeper into cyberspace, we must maintain our cyber security efficiently and effectively. When bad actors use technology to their advantage, we often see data loss or financial loss of the victim, In this blog, we will shine light upon two new forms of cyber attacks, causing havoc upon the innocent. The “Daam” Malware and a new malicious app are the two new issues.
Daam Botnet
Since 2021, the DAAM Android botnet has been used to acquire unauthorised access to targeted devices. Cybercriminals use it to carry out different destructive actions. Using the DAAM Android botnet’s APK binding service, threat actors can combine malicious code with a legitimate application. Keylogging, ransomware, VOIP call records, runtime code execution, browser history collecting, incoming call recording, PII data theft, phishing URL opening, photo capture, clipboard data theft, WiFi and data status switching, and browser history gathering are just a few of the functions offered by the DAAM Android botnet. The DAAM botnet tracks user activity using the Accessibility Service and stores keystrokes it has recorded together with the name of the programme package in a database. It also contains a ransomware module that encrypts and decrypts data on the infected device using the AES method.
Additionally, the botnet uses the Accessibility service to monitor the VOIP call-making features of social media apps like WhatsApp, Skype, Telegram, and others. When a user engages with these elements, the virus begins audio recording.
The Malware
CERT-IN, the central nodal institution that reacts to computer security-related issues, claims that Daam connects with various Android APK files to access a phone. The files on the phone are encrypted using the AES encryption technique, and it is distributed through third-party websites.
It is claimed that the malware can damage call recordings and contacts, gain access to the camera, change passwords, take screenshots, steal SMS, download/upload files, and perform a variety of other things.
Safeguards and Guidelines by Cert-In
Cert-In has released the guideline for combating malware. These were issued in the public interest. The recommendations by Cert-In are as follows-
Only download from official app stores to limit the risk of potentially harmful apps.
Before downloading an app, always read the details and user reviews; likewise, always give permissions that are related to the program’s purpose.
Install Android updates solely from Android device vendors as they become available.
Avoid visiting untrustworthy websites or clicking on untrustworthy
Install and keep anti-virus and anti-spyware software up to date.
Be cautious if you see mobile numbers that appear to be something other than genuine/regular mobile numbers.
Conduct sufficient investigation Before clicking on a link supplied in a communication.
Only click on URLs that clearly display the website domain; avoid abbreviated URLs, particularly those employing bit.ly and tinyurl.
Use secure browsing technologies and filtering tools in antivirus, firewall, and filtering services.
Before providing sensitive information, look for authentic encryption certificates by looking for the green lock in your browser’s URL information, look for authentic encryption certificates by looking for the green lock in your browser’s URL bar.
Any ‘strange’ activity in a user’s bank account must be reported immediately to the appropriate bank.
New Malicious App
From the remote parts of Jharkhand, a new form of malicious application has been circulated among people on the pretext of a bank account closure. The bad actors have always used messaging platforms like Whatsapp and Telegram to circulate malicious links among unaware and uneducated people to dupe them of their hard-earned money.
They send an ordinary-looking message on Whatsapp or Telegram where they mention that the user has a bank account at ICICI bank and, due to irregularity with the credentials, their account is being deactivated. Further, they ask users to update their PAN card to reactivate their account by uploading the PAN card on an application. This app, in turn, is a malicious app that downloads all the user’s personal credentials and shares them with the bad actors via text message, allowing them to bypass banks’ two-factor authentication and drain the money from their accounts. The Jharkhand Police Cyber Cells have registered numerous FIRs pertaining to this type of cybercrime and are conducting full-scale investigations to apprehend the criminals.
Conclusion
Malware and phishing attacks have gained momentum in the previous years and have become a major contributor to the tally of cybercrimes in the country. DaaM malware is one of the examples brought into light due to the timely action by Cert-In, but still, a lot of such malware are deployed by bad actors, and we as netizens need to use our best practices to keep such criminals at bay. Phishing crimes are often substantiated by exploiting vulnerabilities and social engineering. Thus working towards a rise in awareness is the need of the hour to safeguard the population by and large.
Become a part of our vision to make the digital world safe for all!
Numerous avenues exist for individuals to unite with us and our collaborators in fostering global cyber security
Awareness
Stay Informed: Elevate Your Awareness with Our Latest Events and News Articles Promoting Cyber Peace and Security.
Your institution or organization can partner with us in any one of our initiatives or policy research activities and complement the region-specific resources and talent we need.