#FactCheck: False Claims Circulate Linking Former CEC Achal Kumar Jyoti to EVM Chip Manufacturing

Before you take that next sip of your chai latte at Starbucks, you're about to see Artificial Intelligence (AI) in your tea. Yes you heard it right, but relax, you don't need to put the cup down, because  it's not blended in like a new masala and nobody's adding AI as an ingredient. But AI will be deciding how much stock gets ordered, when the machine needs a service call, how the whole backend of your favourite coffee chain runs.

Here's what's actually going on. Starbucks has been quietly building its own AI to replace the systems Oracle, Microsoft, and IBM used to run for it, for the services such as inventory, equipment management, even the point-of-sale software every outlet depends on. In short: Starbucks decided it does not want to outsource its backend anymore. It wants to build the brain itself.

Sounds fascinating on the surface. A coffee company doing its own AI R&D, right? Except dig one layer deeper, and it stops being cool and starts being a conundrum. Here's the actual link: companies like Starbucks are Indian IT's bread and butter. This is literally the business model, global companies pay Indian IT firms like TCS, HCL, Infosys, Wipro to run exactly this kind of backend work: inventory systems, equipment management, point-of-sale software, IT infrastructure. That's what pays the salaries of roughly 6 million people employed by India's outsourcing industry. 

However, recently, this workforce has been shrinking rather than growing. TCS, the largest player in the industry, reported just 0.4 percent revenue growth in the quarter after stripping out currency fluctuations, its slowest expansion in a year, while its workforce shrank by around 3 percent over the past year to about 594,000 employees. At smaller rival HCL Technologies, sales actually slipped 0.5 percent quarter on quarter. Company wide, TCS let go of over 23,000 employees in FY26 alone, citing its pivot toward an AI first services model and reduced bench requirements per client engagement, with a steep net decline of over 11,000 employees in the most recent quarter alone.

AI's impact on India's IT industry and workforce

India's IT sector employs close to 6 million people, and a large share of that workforce has built careers around exactly the kind of work now being absorbed by AI: inventory systems, equipment monitoring, point of sale software, and other repetitive backend operations. As more global clients explore building these capabilities in house, the demand for large teams doing routine maintenance work is likely to shrink. This does not mean mass job losses overnight, but it does suggest a shift in what kind of talent gets hired and retained. Entry level, process driven roles may see slower growth, while demand rises for professionals who can design, audit, and govern AI systems rather than simply maintain legacy software. For India's IT workforce, the challenge is less about competing with AI and more about repositioning around it, moving up the value chain before the shift forces the decision.

Beyond One Coffee Chain ~ The Real Shift in Global Outsourcing

Starbucks isn't an isolated case; it's a visible example of a much wider recalibration. For two decades, the operating assumption in enterprise software was that building complex, mission-critical systems in-house was too slow, too risky, and too expensive compared to buying from established vendors. AI-assisted coding is chipping away at that assumption. What used to require large, specialised engineering teams and years of development can now be prototyped and iterated on far faster enough that even a company whose core business is coffee, not code, can seriously consider building its own enterprise software stack.

However it is also worth noting that this transition isn't frictionless. Starbucks itself had to walk back an AI-powered inventory-counting tool earlier this year after it produced inaccurate counts, reverting stores to manual counting. Building in-house AI systems is not automatically smoother or more reliable than buying proven software; it just shifts the risk and the learning curve onto the company doing the building.

Disruption and Opportunity, Side by Side

None of this means Indian IT companies can afford to sit still. The Starbucks example offers a legitimate signal that repetitive, well defined, automatable work, especially when powered by in house built AI, genuinely poses some risk or not. But it cannot be seen only through the lens of the industry's obituary. It would be premature to call this a broader decline in terms of IT professionals, companies, or jobs.

The same earnings season also brought TCS's expanded AI mandate with ABB and HCL's $1.14 billion AI driven contract in Europe. Demand has not disappeared, it appears to be evolving from routine maintenance work toward AI native, higher value engagement. 

Whether this becomes a meaningful structural shift or simply another cycle the industry eventually absorbs remains to be seen. What seems clear for now is that the path forward depends less on resisting the shift and more on how quickly the industry chooses to embrace it.

Conclusion 

AI is a double-edged sword. While it challenges the old model of outsourcing via a maintenance and staff augmentation play, it also provides new, high-value services opportunities around AI integration, data infrastructure, and governance-areas where the scale, domain expertise, and global delivery experience that Indian IT has amassed over three decades is essential. Whether India's IT majors will move fast enough to upskill, re-skill, and reposition to ride this wave before the opportunity heads somewhere else, is the question to watch, rather than the survival of one vendor or contract.

‍

Sources

1. Bloomberg Opinion  -  Andy Mukherjee, "You Can't Spell Chai Latte Without AI, and That Will Hurt India.” bloomberg.com/opinion/articles/2026-07-14/you-can-t-spell-chai-latte-without-ai-that-will-hurt-india
2. Yahoo Finance /  Vlad Schepkov, "Starbucks Working on AI Tools to Replace Microsoft and IBM Software – Report," July 9, 2026. finance.yahoo.com/technology/ai/articles/starbucks-working-ai-tools-replace-105954159.html
3. Livemint - Andy Mukherjee, "As Starbucks Mixes AI in Chai Latte, What Must IT Players Do?" Mint Curator.
   livemint.com/opinion/online-views/andy-mukherjee-india-it-industry-starbucks-ai-tc-hcl-tech-artificial-intelligence-oracle-microsoft-ibm-11784118723454.html
4. Metaintro, "TCS and Infosys Face an AI Reckoning" https://www.metaintro.com/blog/tcs-infosys-ai-reckoning-millions-it-jobs-2026
5. LayoffTrends, "IT Layoffs India 2026 — TCS, Infosys, Wipro, GCC Jobs" https://layofftrends.com/india.html
6. NiftyTrader, "Hiring Slows at India's Top IT Firms — Net Headcount Falls in 9MFY26" https://www.niftytrader.in/markets/hiring-slows-at-indias-top-it-firms-net-headcount-falls-in-9mfy26-what-it-signals-for-the-sector/
7. TCS official newsroom, "TCS and ABB Sign Multi-Million, Multi-Year Deal to Transform Global Network Operations with AI," tcs.com/who-we-are/newsroom/press-release/tcs-and-abb-sign-multi-million-multi-year-deal-to-transform-global-network-operations-with-ai

‍

Executive Summary:

A viral social media claim suggested that India Post would discontinue all red post boxes across the country from 1 September 2025, attributing the move to the government’s Digital India initiative. However, fact-checking revealed this claim to be false. India Post’s official X (formerly Twitter) and Instagram handles clarified on 7 August 2025 that red letterboxes remain operational, calling them timeless symbols of connection and memories. No official notice or notification regarding their discontinuation exists on the Department of Posts’ website. This indicates the viral posts were misleading and aimed at creating confusion among the public.

‍

Claim:

A claim is circulating on social media stating that India Post will discontinue all red post boxes across the country effective 1 September 2025. According to the viral posts,[archived link] the move is being linked to the government’s push towards Digital India, suggesting that traditional post boxes have lost their relevance in the digital era.

‍

‍Fact Check:  

After conducting a reverse image analysis, we found that the official X handle of India Post, in a post dated 7 August 2025, clarified that the viral claim was incorrect and misleading. The post was shared with the caption:

‍

I’m still right here and always will be!"

India Post is evolving with the times, but some things will remain the same- always. We have carried love, news, and stories for generations... And guess what? Our red letterboxes are here to stay.

They are symbols of connection, memories, and moments that mattered. Then. Now. Always. 

Keep sending handwritten letters- we are here for you.

‍

This directly refutes the viral claim about the discontinuation of the red post box from 1 September 2025. A similar clarification was also posted on the official Instagram handle @indiapost_dop on the same date.

‍

‍

Furthermore, after thoroughly reviewing the official website of the Department of Posts, Government of India, we found absolutely no trace, notice, or even the slightest mention of any plan to discontinue the iconic red post boxes. This complete absence of official communication strongly reinforces the fact that the viral claim is nothing more than a baseless and misleading rumour.

‍

‍

Conclusion: 

The claim about the discontinuation of red post boxes from 1 September 2025 is false and misleading. India Post has officially confirmed that the iconic red letterboxes will continue to function as before and remain an integral part of India’s postal services.

• Claim: A viral claim suggests that India Post will remove all red letter boxes across the country beginning 1 September 2025.‍
• Claimed On: Social Media‍
• Fact Check: False and Misleading

‍

Introduction

The unprecedented cyber espionage attempt on the Indian Air Force has shocked the military fraternity in the age of the internet where innovation is vital to national security. The attackers have shown a high degree of expertise in their techniques, using a variant of the infamous Go Stealer and current military acquisition pronouncements as a cover to obtain sensitive information belonging to the Indian Air Force. In this recent cyber espionage revelation, the Indian Air Force faces a sophisticated attack leveraging the infamous Go Stealer malware. The timing, coinciding with the Su-30 MKI fighter jets' procurement announcement, raises serious questions about possible national security espionage actions.

A sophisticated attack using the Go Stealer malware exploits defense procurement details, notably the approval of 12 Su-30 MKI fighter jets. Attackers employ a cunningly named ZIP file, "SU-30_Aircraft_Procurement," distributed through an anonymous platform, Oshi, taking advantage of heightened tension surrounding defense procurement.

Advanced Go Stealer Variant:

The malware, coded in Go language, introduces enhancements, including expanded browser targeting and a unique data exfiltration method using Slack, showcasing a higher level of sophistication.

Strategic Targeting of Indian Air Force Professionals:

The attack strategically focuses on extracting login credentials and cookies from specific browsers, revealing the threat actor's intent to gather precise and sensitive information.

Timing Raises Espionage Concerns:

The cyber attack coincides with the Indian Government's Su-30 MKI fighter jets procurement announcement, raising suspicions of targeted attacks or espionage activities.

The Deceitful ZIP ArchiveSU-30 Aircraft Acquisition

The cyberattack materialised as a sequence of painstakingly planned actions. Using the cleverly disguised ZIP file "SU-30_Aircraft_Procurement," the perpetrators took benefit of the authorisation of 12 Su-30 MKI fighter jets by the Indian Defense Ministry in September 2023. Distributed via the anonymous file storage network Oshi, the fraudulent file most certainly made its way around via spam emails or other forms of correspondence.

The Spread of Infection and Go Stealer Payload:

The infiltration procedure progressed through a ZIP file to an ISO file, then to a.lnk file, which finally resulted in the Go Stealer payload being released. This Go Stealer version, written in the programming language Go, adds sophisticated capabilities, such as a wider range of browsing focussed on and a cutting-edge technique for collecting information using the popular chat app Slack.

Superior Characteristics of the Go Stealer Version

Different from its GitHub equivalent, this Go Stealer version exhibits a higher degree of complexity. It creates a log file in the machine owned by the victim when it is executed and makes use of GoLang utilities like GoReSym for in-depth investigation. The malware focuses on cookies and usernames and passwords from web browsers, with a particular emphasis on Edge, Brave, and Google Chrome.

This kind is unique in that it is more sophisticated. Its deployment's cyber enemies have honed its strengths, increasing its potency and detection resistance. Using GoLang tools like GoReSym for comprehensive evaluation demonstrates the threat actors' careful planning and calculated technique.

Go Stealer: Evolution of Threat

The Go Stealer first appeared as a free software project on GitHub and quickly became well-known for its capacity to stealthily obtain private data from consumers who aren't paying attention. Its effectiveness and stealthy design rapidly attracted the attention of cyber attackers looking for a sophisticated tool for clandestine data exfiltration. It was written in the Go programming language.

Several cutting-edge characteristics distinguish the Go Stealer from other conventional data thieves. From the beginning, it showed a strong emphasis on browser focusing on, seeking to obtain passwords and login information from particular websites including Edge, Brave, and Google Chrome.The malware's initial iteration was nurtured on the GitHub database, which has the Go Stealer initial edition. Threat actors have improved and altered the code to serve their evil goals, even if the basic structure is freely accessible.

The Go Stealer version that has been discovered as the cause of the current internet spying by the Indian Air Force is not limited to its GitHub roots. It adds features that make it more dangerous, like a wider range of browsers that may be targeted and a brand-new way to exfiltrate data via Slack, a popular messaging app.

Secret Communications and Information Expulsion

This variation is distinguished by its deliberate usage of the Slack API for secret chats. Slack was chosen because it is widely used in company networks and allows harmful activity to blend in with normal business traffic. The purpose of the function "main_Vulpx" is specifically to upload compromised information to the attacker's Slack route, allowing for covert data theft and communication.

The Time and Strategic Objective

There are worries about targeted assaults or espionage activities due to the precise moment of the cyberattack, which coincides with the Indian government's declaration of its acquisition of Su-30 MKI fighter fighters. The deliberate emphasis on gathering cookies and login passwords from web browsers highlights the threat actor's goal of obtaining accurate and private data from Indian Air Force personnel.

Using Caution: Preventing Possible Cyber Espionage

• Alertness Against Misleading Techniques: Current events highlight the necessity of being on the lookout for files that appear harmless but actually have dangerous intent. The Su-30 Acquisition ZIP file is a stark illustration of how these kinds of data might be included in larger-scale cyberespionage campaigns.
• Potentially Wider Impact: Cybercriminals frequently plan coordinated operations to target not just individuals but potentially many users and government officials. Compromised files increase the likelihood of a serious cyber-attack by opening the door for larger attack vectors.
• Important Position in National Security: Recognize the crucial role people play in the backdrop of national security in the age of digitalisation. Organised assaults carry the risk of jeopardising vital systems and compromising private data.
• Establish Strict Download Guidelines: Implement a strict rule requiring file downloads to only come from reputable and confirmed providers. Be sceptical, particularly when you come across unusual files, and make sure the sender is legitimate before downloading any attachments.
• Literacy among Government Employees: Acknowledge that government employees are prime targets as they have possession of private data. Enable people by providing them with extensive cybersecurity training and awareness that will increase their cognition and fortitude.

Conclusion

Indian Air Force cyber surveillance attack highlights how sophisticated online dangers have become in the digital era. Threat actors' deliberate and focused approach is demonstrated by the deceptive usage of a ZIP archive that is camouflaged and paired with a sophisticated instance of the Go Stealer virus. An additional level of complication is introduced by integrating Slack for covert communication. Increased awareness, strict installation guidelines, and thorough cybersecurity education for government employees are necessary to reduce these threats. In the digital age, protecting national security necessitates ongoing adaptation as well as safeguards toward ever-more potent and cunning cyber threats.

References

• ‍https://www.overtoperator.com/p/indianairforcemalwaretargetpotential
• ‍https://cyberunfolded.in/blog/indian-air-force-targeted-in-sophisticated-cyber-attack-with-su-30-procurement-zip-file#go-stealer-a-closer-look-at-its-malicious-history
• ‍https://thecyberexpress.com/cyberattack-on-the-indian-air-force/https://therecord.media/indian-air-force-infostealing-malware

‍