#FactCheck-Mock Drill Video from Kishtwar Falsely Shared as Terror Attack in Jammu & Kashmir
Executive Summary
A video is going viral on social media showing ‘injured’ security personnel being carried into ambulances. The clip is being shared with claims that a terrorist attack recently took place in Kishtwar. The video surfaced nearly a year after the terror attack in Pahalgam on April 22, 2025, adding to confusion among users online. Research by CyberPeace Research Wing found that the claim is false. The viral video is actually from a mock drill conducted in Kishtwar, not a real terror incident.
Claim
An Instagram user ‘thenewjbharat’ shared the video on April 30, 2026, claiming that a terrorist attack had taken place again in Kishtwar.
https://www.instagram.com/thenewjbharat/
Fact Check
To verify the claim, we extracted keyframes from the viral video and conducted a reverse image search using Google Lens. This led us to the same clip uploaded on April 24, 2026 by an Instagram user ‘kishtwar_breaking_news’. According to the post, the video shows a mock drill conducted by local authorities to assess emergency preparedness. Officials and rescue teams participated in the exercise.
We also found a related news video uploaded on April 23, 2026, by the YouTube channel of Daily Excelsior, which featured visuals matching the viral clip. The report confirmed that the drill was carried out to evaluate readiness for emergency situations.
Conclusion
Our research confirms that the viral video does not show a real terrorist attack. It is footage from a mock drill conducted in Kishtwar and is being falsely shared with misleading claims.
Related Blogs
Executive Summary:
A manipulated image showing someone making an offensive gesture towards Prime Minister Narendra Modi is circulating on social media. However, the original photo does not display any such behavior towards the Prime Minister. The CyberPeace Research Team conducted an analysis and found that the genuine image was published in a Hindustan Times article in May 2019, where no rude gesture was visible. A comparison of the viral and authentic images clearly shows the manipulation. Moreover, The Hitavada also published the same image in 2019. Further investigation revealed that ABPLive also had the image.
Claims:
A picture showing an individual making a derogatory gesture towards Prime Minister Narendra Modi is being widely shared across social media platforms.
Fact Check:
Upon receiving the news, we immediately ran a reverse search of the image and found an article by Hindustan Times, where a similar photo was posted but there was no sign of such obscene gestures shown towards PM Modi.
ABP Live and The Hitavada also have the same image published on their website in May 2019.
Comparing both the viral photo and the photo found on official news websites, we found that almost everything resembles each other except the derogatory sign claimed in the viral image.
With this, we have found that someone took the original image, published in May 2019, and edited it with a disrespectful hand gesture, and which has recently gone viral across social media and has no connection with reality.
Conclusion:
In conclusion, a manipulated picture circulating online showing someone making a rude gesture towards Prime Minister Narendra Modi has been debunked by the Cyberpeace Research team. The viral image is just an edited version of the original image published in 2019. This demonstrates the need for all social media users to check/ verify the information and facts before sharing, to prevent the spread of fake content. Hence the viral image is fake and Misleading.
- Claim: A picture shows someone making a rude gesture towards Prime Minister Narendra Modi
- Claimed on: X, Instagram
- Fact Check: Fake & Misleading
Amid reports of widespread protests in Iran over the past two weeks, a video showing protesters setting cars on fire is being widely shared on social media with claims that it depicts recent unrest in the country.
However, research by Cyber Peace Foundation has found the viral claim to be false. Our resarch shows that the video is not from Iran, but from violent protests that took place near the Turkish Consulate in Thessaloniki, Greece, on November 1, 2025.
Claim:
On January 11, 2026, users on social media platform X (formerly Twitter) shared the viral video claiming it showed massive anti-regime protests in Iran. One such post alleged:
“1.5–1.85 million Iranians are fighting on the streets tonight. 180 cities are burning… The revolution has spread. Iranians have decided to continue this fight for freedom until Iran becomes free from Islamic rule.”
The post’s link and archived version can be seen below: (Link and archive link)
Fact Check:
To verify the claim, we extracted keyframes from the viral video and conducted a Google Reverse Image Search. During this process, we found the same video uploaded on Instagram on November 2, 2025, well before the recent protests in Iran. (Link): https://www.instagram.com/reel/DQjRtCOjOPM/
Further analysis revealed that the video was uploaded from a Greek Instagram account, indicating that the visuals are unrelated to Iran.
It is important to note that while protests in Iran have been ongoing for the past two weeks, the viral video has been circulating on the internet since early November 2025, establishing a clear timeline mismatch.
A keyword search led us to a report published on November 2, 2025, by Ekathimerini, a leading Greek media outlet. The report detailed violent clashes that erupted in Thessaloniki following a concert by Greek rapper Lex.
According to the report:
Police in Thessaloniki detained 18 people and arrested one individual on drug-related charges. The unrest began when a group attacked police forces stationed outside the Turkish Consulate. During the clashes, six cars were damaged, two of them completely burned, along with a garbage bin. ( report link and screenshot)
In the next stage of the investigation, we found similar visuals to the viral video on a YouTube channel named “Taifer”, where the footage was published on November 2, 2025. The link to the post and its screenshot can be seen below.
(YouTube link): https://www.youtube.com/watch?v=TejETjQRmTQ
To strengthen our findings, we conducted a geolocation analysis of the video. By comparing road layouts, surrounding buildings, light poles, and other visual markers with online maps and images, we confirmed that the location shown in the video matches Agios Dimitriou Street in Thessaloniki, Greece.
(Location link)
Our research clearly establishes that the viral video being shared as footage of recent protests in Iran is misleading. The video actually shows violent demonstrations near the Turkish Consulate in Thessaloniki, Greece, on November 1, 2025, and has no connection to the current situation in Iran.
Introduction
As we navigate the digital realm that offers unlimited opportunities, it also exposes us to potential cyber threats and scams. A recent incident involving a businessman in Pune serves as a stark reminder of this reality. The victim fell prey to a sophisticated online impersonation fraud, where a cunning criminal posed as a high-ranking official from Hindustan Petroleum Corporation Limited (HPCL). This cautionary tale exposes the inner workings of the scam and highlights the critical need for constant vigilance in the virtual world.
Unveiling the scam
It all began with a phone call received by the victim, who lives in Taware Colony, Pune, on September 5, 2023. The caller, who identified himself as "Manish Pande, department head of HPCL," lured the victim by taking advantage of his online search for an LPG agency. With persuasive tactics, the fraudster claimed to be on the lookout for potential partners.
When a Pune man received a call on September 5, 2023. The caller, who introduced himself as “department head of HPCL”, was actually a cunning fraudster. It turns out, the victim had been searching for an LPG agency online, which the fraudster cleverly used to his advantage. In a twisted plot, the fraudster pretended to be looking for potential locations to establish a new LPG cylinder agency in Pune.
Enthralled by the illusion
The victim fell for the scam, convinced by the mere presence of "HPCL" in the bank account's name. Firstly victim transferred Rs 14,500 online as “registration fees”. Things got worse when, without suspicion, the victim obediently transferred Rs 1,48,200 on September 11 for a so-called "dealership certificate." To add to the charade of legitimacy, the fraudster even sent the victim registration and dealership certificates via email.
Adding to the deception, the fraudster, who had targeted the victim after discovering his online inquiry, requested photos of the victim's property and personal documents, including Aadhaar and PAN cards, educational certificates, and a cancelled cheque. These seemingly legitimate requests only served to reinforce the victim's belief in the scam.
The fraudster said they were looking for a place to allot a new LPG cylinder agency in Pune and would like to see if the victim’s place fits in their criteria. The victim agreed as it was a profitable business opportunity. The fraudster called the victim to “confirm” that his documents have been verified and assured that HPCL would be allotting him an LPG cylinder agency. On September 12, the fraudster again demanded a sum of money, this time for the issuance of an "HPCL license."
As the victim responded that he did not have the money, the fraudster insisted on an immediate payment of at least 50 per cent of the stipulated amount. So the victim transferred Rs 1,95,200 online. On the following day the 13th of September 2023, the fraudster asked the victim for the remaining amount. The victim said he would arrange the money in a few days. Meanwhile, on the same day, the victim went to the HPCL’s office in the Pune Camp area with the documents he had received through the emails. The HPCL employees confirmed these documents were fake, even though they looked very similar to the originals. The disclosure was a pivotal moment, causing the victim to fully comprehend the magnitude of the deceit and ultimately pursue further measures against the cybercriminal.
Best Practices
- Ensuring Caller Identity- Prioritize confirming the identity of anyone reaching out to you, especially when conducting financial transactions. Hold back from divulging confidential information until you have verified the credibility of the request.
- Utilize Official Channels- Communicate with businesses or governmental organizations through their verified contact details found on their official websites or trustworthy sources. Avoid solely relying on information gathered from online searches.
- Maintaining Skepticism with Unsolicited Communication- Exercise caution when approached by unexpected calls or emails, particularly those related to monetary transactions. Beware of manipulative tactics used by scammers to pressure swift decisions.
- Double-Check Information- To ensure accuracy, it is important to validate the information given by the caller on your own. This can be done by double-checking and cross-referencing the details with the official source. If you come across any suspicious activities, do not hesitate to report it to the proper authorities.
- Report Suspicious Activities- Reporting can aid in conducting investigations and providing assistance to the victim and also preventing similar incidents from occurring. It is crucially important to promptly report cyber crimes so law enforcement agencies can take appropriate action. A powerful resource available to victims of cybercrime is the National Cyber Crime Reporting Portal, equipped with a 24x7 helpline number, 1930. This portal serves as a centralized platform for reporting cybercrimes, including financial fraud.
Conclusion
This alarming event serves as a powerful wake-up call to the constant danger posed by online fraud. It is crucial for individuals to remain sceptical, diligently verifying the credibility of unsolicited contacts and steering clear of sharing personal information on the internet. As technology continues to evolve, so do the strategies of cyber criminals, heightening the need for users to stay on guard and knowledgeable in the complex digital world.
References:
- https://indianexpress.com/article/cities/pune/cybercriminal-posing-hindustan-petroleum-official-cheat-pune-man-9081057/
- https://www.timesnownews.com/mirror-now/crime/pune-man-duped-of-rs-3-5-lakh-by-cyber-fraudster-impersonating-hpcl-official-article-106253358
