#FactCheck-AI-generated video of ‘giant hailstorm in Maharashtra’ falsely shared as real weather event
Research Wing
Innovation and Research
PUBLISHED ON
Jun 25, 2026
10
Executive Summary
A video showing unusually large hailstones falling from the sky and damaging parked vehicles is being widely circulated on social media. Users are claiming that the video shows a severe hailstorm in Maharashtra amid the ongoing heatwave conditions in several parts of the country. CyberPeace Research Wing research found the claim to be false. The viral clip is not a real weather event and has been identified as AI-generated content.
A reverse image search of keyframes from the viral video did not yield any credible media reports linking the visuals to any real hailstorm in Maharashtra or elsewhere.
Closer examination of the video revealed multiple inconsistencies, including unnatural movement and unrealistic size and behavior of hailstones, which are commonly associated with AI-generated visuals. The video was further analysed using AI detection tools. Hive Moderation flagged the content as likely AI-generated.
Similarly, Sightengine analysis indicated a 99% probability that the visuals were artificially created.
Conclusion:
The research confirms that the viral video claiming to show a massive hailstorm in Maharashtra is not real. The visuals are AI-generated and do not depict any actual weather event.
Recently, CyberPeace faced a case involving a fraudulent Android application imitating the Punjab National Bank (PNB). The victim was tricked into downloading an APK file named "PNB.apk" via WhatsApp. After the victim installed the apk file, it resulted in unauthorized multiple transactions on multiple credit cards.
Case Study: The Attack: Social Engineering Meets Malware
The incident started when the victim clicked on a Facebook ad for a PNB credit card. After submitting basic personal information, the victim receives a WhatsApp call from a profile displaying the PNB logo. The attacker, posing as a bank representative, fakes the benefits and features of the Credit Card and convinces the victim to install an application named PNB.apk. The so called bank representative sent the app through WhatsApp, claiming it would expedite the credit card application. The application was installed in the mobile device as a customer care application. It asks for permissions such as to send or view SMS messages. The application opens only if the user provides this permission.
It extracts the credit card details from the user such as Full Name, Mobile Number, complain, on further pages irrespective of Refund, Pay or Other. On further processing, it asks for other information such as credit card number, expiry date and cvv number.
Now the scammer has access to all the details of the credit card information, access to read or view the sms to intercept OTPs.
The victim, thinking they were securely navigating the official PNB website, was unaware that the malware was granting the hacker remote access to their phone. This led to ₹4 lakhs worth of 11 unauthorized transactions across three credit cards.
The Investigation & Analysis:
Upon receiving the case through CyberPeace helpline, the CyberPeace Research Team acted swiftly to neutralize the threat and secure the victim’s device. Using a secure remote access tool, we gained control of the phone with the victim’s consent. Our first step was identifying and removing the malicious "PNB.apk" file, ensuring no residual malware was left behind.
Next, we implemented crucial cyber hygiene practices:
Revoking unnecessary permissions – to prevent further unauthorized access.
Running antivirus scans – to detect any remaining threats.
Clearing sensitive data caches – to remove stored credentials and tokens.
The CyberPeace Helpline team assisted the victim to report the fraud to the National Cybercrime Portal and helpline (1930) and promptly blocked the compromised credit cards.
The technical analysis for the app was taken ahead and by using the md5 hash file id. This app was marked as malware in virustotal and it has all the permissions such as Send/Receive/Read SMS, System Alert Window.
Img source: VirusTotal
In the similar way, we have found another application in the name of “Axis Bank” which is circulated through whatsapp which is having similar permission access and the details found in virus total are as follows:
Img Source: Virus Total
Recommendations:
This case study implies the increasingly sophisticated methods used by cybercriminals, blending social engineering with advanced malware. Key lessons include:
Be vigilant when downloading the applications, even if they appear to be from legitimate sources. It is advised to install any application after checking through an application store and not through any social media.
Always review app permissions before granting access.
Verify the identity of anyone claiming to represent financial institutions.
Use remote access tools responsibly for effective intervention during a cyber incident.
By acting quickly and following the proper protocols, we successfully secured the victim’s device and prevented further financial loss.
An image of a banknote featuring Iran’s Supreme Leader Ayatollah Khamenei is going viral on social media, with claims that Iran’s central bank has issued a newly designed 5 million rial note bearing his portrait. However, a fact-check by the CyberPeace Research Wing has found the claim to be misleading.
Claim
The image was shared by a verified user, “Sprinter Press Agency,” on X (formerly Twitter), claiming that the Central Bank had introduced a new banknote design featuring the leader of the Islamic Revolution.
To verify the claim, relevant keywords were searched across multiple credible sources. No reports were found from any reputable international media outlet, Iranian government platform, or the Central Bank of Iran confirming the release of such a banknote. A technical analysis of the viral image was also conducted. According to the AI detection tool Zhuque AI Detection Assistant, there is a 63.8% probability that the image is AI-generated, raising further doubts about its authenticity.
Conclusion:
The claim that Iran’s central bank has issued a new 5 million rial banknote featuring Ayatollah Khamenei is misleading. There is no official confirmation of such a release, and available evidence suggests that the viral image is either edited or AI-generated.
In a world perpetually in motion, the currents of the information superhighway surge ceaselessly, molding perceptions, shaping realities, and often blurring the lines that tether truth to its moorings. At the heart of this relentless churn lies a conundrum that has become all too familiar, in which veracity is obscured by the shadow-play of misinformation. Emblematic of this dilemma is the narrative of Virat Kohli, a name that has become synonymous not only with cricketing brilliance but with the complexities of a modern era where digital echo chambers amplify half-truths and outright fabrications with alarming efficacy.
It is within this intricate fabric of the digital realm that the saga of Virat Kohli—a titan of cricket whose arsenal of strokes and strategic acumen have captivated audiences worldwide—takes on a dimension that transcends the sport. The speculative murmurs have been converted into roaring waves of misinformation, crafting a narrative that, while devoid of truth, assumes a disconcerting life. This digital osmosis, the transmutation from a quiet inkling to a deafening chorus of credibility, exemplifies the troublesome dynamic that has come to define our interactions with news media in the 21st century.
Fact check: Viral Misinformation
A viral post about Virat Kohli's mother suffering from liver issues has gone viral on social media. The claim came after Kohli withdrew from the India-England test series citing 'personal reasons'. Vikas Kohli, brother of Virat Kohli, clarified on Instagram that the viral news about their mother is false. He clarified that their mother is doing well and the viral claim is false. Vikas Kohli's Instagram page dismissed the viral claim, stating that he noticed the fake news and requested the media not to spread such news without proper information.
Fake Health Crisis
As this virulent strain of rumour regarding the health of Saroj Kohli, Virat Kohli’s mother, began to swell into the digital domain, it brought to the forefront a critical examination of the checks and balances within our networks of communication. Saroj, whose resilience and nurturing presence had been an anchor in the athlete's storied journey, undeservedly became the nucleus of a fictitious tale of despair, giving us pause to reflect on the ethical boundaries of storytelling in the world of clicks and views.
Vikas Kohli—the elder brother of Virat Kohli—took to social media, the very platform from which the falsehood originated, to stand as the bulwark against the spread of this groundless narrative.
The Consequences
The consequences of such falsehoods and their rapid dissemination are manifold, affecting individuals and communities in profound ways. The motivations behind the proliferation of deceitful stories are as labyrinthine as the networks they traverse - from manipulation and economic incentives to the pursuit of sheer sensationalism or cynical entertainment, each strand intertwines to form an intricate web wherein truth struggles to assert itself.
Conclusion
In the ceaseless expanses of the digital cosmos, where one can easily drift into the void of falsities, let the narrative of Virat Kohli stand as a sentinel, a reminder of our duty to navigate these waters with vigilance and to preserve the sanctity of truth. Amidst the vast ocean of content that laps in our consciousness, it is precisely this unwavering dedication to facts that will act as our compass, enabling us to discern the credible beacons from the deceptive mirages and ultimately ensuring that our discourse remains moored in the bedrock of reality.
Your institution or organization can partner with us in any one of our initiatives or policy research activities and complement the region-specific resources and talent we need.