#FactCheck- AI-generated deepfake video falsely attributes remarks to Lt Gen P.R. Shankar on Army Chief designate Lt Gen Dhiraj Seth

Overview:

WazirX is the platform for cryptocurrencies, based in India that has been hacked, and it made a loss of more than $230 million in cryptocurrency. This case concerned an unauthorized transaction with a multisignature or multisig, wallet controlled through Liminal’a digital asset management platform. These attacking incidents have thereafter raised more questions on the security of the Cryptocurrency exchanges and efficiency of the existing policies and laws.

Wallet Configuration and Security Measures

This wallet was breached and had a multisig setting meaning that more than one signature was needed to authorize a transaction. Specifically, it had six signatories: five are funded by WazirX and one is funded by Liminal. Every transaction needed the approval of at least three signatories of WazirX, all of whom had addressed security concerns by using Ledger’s hardware wallets; while the Liminal, too, had a signatory, for approval.

To further increase the level of security of the transactions, a whitelisting policy was introduced, only limited addresses were authorized to receive funds. This system was rather vulnerable, and the attackers managed to grasp the discrepancy between the information available through Liminal’s interface and the content of the transaction to seize unauthorized control over the wallet and implement the theft.

Modus Operandi: Attack Mechanics

The cyber attack appears to have been carefully carried out, with preliminary investigations suggesting the following tactics: 

• Payload Manipulation: The attackers apparently substituted the transaction’s payload during signing; hence, they can reroute the collected funds into an unrelated wallet. 

• Chain Hopping: To make it much harder to track their movements, the attackers split large amounts of money across multiple blockchains and broke tens of thousands of dollars into thousands of transactions involving different cryptocurrencies. This technique makes it difficult to trace people and things. 

• Zero Balance Transactions: There were also some instances where it ended up with no Ethereum (ETH) in the balance and such wallets also in use for the purpose of further anonymization of the transactions.

• Analysis of the blockchain data suggested the enemy might have been making the preparations for this attack for several days prior to their attack and involved a high amount of planning. 

Actions taken by WazirX:

Following the attack, WazirX implemented a series of immediate actions:

• User Notifications: The users were immediately notified of the occurrence of the breach and the possible risk it posed to them. 

• Law Enforcement Engagement: The matters were reported to the National Cyber Crime Reporting Portal and specific authorities of which the Financial Intelligence Unit (FIU) and the Computer Emergency Response Team (CERT-In). 

• Service Suspension: WazirX had suspended all its trading operations and user deposits’ and withdrawals’ to minimize further cases and investigate. 

• Global Outreach: The exchange contacted more than 500 cryptocurrency exchanges and requested to blacklist the wallet’s addresses linked to the theft. 

• Bounty Program: A bounty program was announced to encourage people to share information that can enable the authorities to retrieve the stolen money. A maximum of 23 million dollars was placed on the bounty. 

Further  Investigations 

WazirX stated that it has contracted the services of cybersecurity professionals to help in the prosecution process of identifying and compensating for the losses. The exchange is still investigating the forensic data and working with the police for tracking the stolen assets. Nevertheless, the prospects of full recovery may be quite questionable primarily because of complexity of the attack and the methods used by the attackers. 

Precautionary measures: 

 The WazirX cyber attack clearly implies that there is the necessity to improve the security and the regulation of the cryptocurrency industry. As exchanges become increasingly targeted by hackers, there is a pressing need for: 

• Stricter Security Protocols: The commitment to technical innovations, such as integration of MFA, as well as constant monitoring of the users’ wallets’ activities. 

• Regulatory Oversight: Formalization of the laws that require proper security for the cryptocurrency exchange platforms to safeguard their users as well as their investments. 

• Community Awareness: To bypass such predicaments, there is a need to study on emergent techniques in spreading awareness, particularly in cases of scams or phishing attempts that are likely to follow such breaches. 

Conclusion:

The cyber attack on WazirX in the field of cryptocurrency market, shows weaknesses and provides valuable lessons for enhancing the security.  This attack highlights critical vulnerabilities in cryptocurrency exchanges, even though employing advanced security measures like multisignature wallets and whitelisting policies. The attack's complexity, involving payload manipulation, chain hopping, and zero balance transactions, underscores the attackers' meticulous planning and the challenges in tracing stolen assets. This case brings a strong message regarding the necessity of solid security measures, and constant attention to security in the rapidly growing world of digital assets. Furthermore, the incident highlights the importance of community awareness and education on emerging threats like scams and phishing attempts, which usually follow such breaches. By fostering a culture of vigilance and knowledge, the cryptocurrency community can better defend against future attacks.

Reference:

https://wazirx.com/blog/important-update-cyber-attack-incident-and-measures-to-protect-your-assets/

https://www.moneycontrol.com/news/opinion/the-230-million-crypto-theft-at-wazirx-is-a-wake-up-call-for-indian-regulators-government-12772563.html

https://www.linkedin.com/pulse/wazirx-cyberattack-in-depth-analysis-jyqxf

‍

Executive Summary
 

A video purportedly showing Italian Prime Minister Giorgia Meloni angrily addressing a room full of delegates before throwing a bundle of papers and storming out has gone viral on social media. The clip is being shared alongside claims that Meloni terminated all agreements with Israel following growing tensions over the conflict in the Middle East. However, CyberPeace Research Wing  research found that the viral video is not authentic. The clip was generated using Artificial Intelligence (AI).

‍

Claim

‍

On April 24, 2026, an X user shared the viral video with the caption:“Italy's woman Prime Minister has terminated all agreements with Israel!! Italy's woman Prime Minister is far more courageous and fearless than the leaders of 56 Islamic nations.”

• https://x.com/middle_East_up/status/2047597154257297878?s=20
• https://perma.cc/4EM9-5GS4

‍

‍

Fact Check

‍

To verify the claim, we examined official records related to agreements between Italy and Israel. Data available from the Italian Ministry of Foreign Affairs and International Cooperation shows that multiple bilateral agreements between the two countries remain in force in 2026.
‍

• https://atrio.esteri.it/Home/Search

‍

‍

Further research found reports related to discussions within the European Union regarding the suspension of certain cooperation arrangements with Israel. During a meeting of EU foreign ministers in Luxembourg, Spain and Ireland renewed calls to review the EU-Israel Association Agreement. However, Italian Foreign Minister Antonio Tajani reportedly stated that no decision would be taken that day. A closer examination of the viral clip revealed several visual inconsistencies commonly associated with AI-generated content, including unnatural facial movements, irregular body gestures, and unrealistic scene transitions.

To further verify the footage, we analysed it using the DeepFake-o-Meter tool. Results from three separate detection models indicated that the video was likely generated using artificial intelligence.
‍

‍

‍

Conclusion

‍

CyberPeace Research Wing  research found that the viral video allegedly showing Italian Prime Minister Giorgia Meloni angrily terminating agreements with Israel is AI-generated. There is no evidence that the incident shown in the clip actually occurred.

‍

Introduction

‍

The digital communication landscape in India is set to change significantly as the Department of Telecommunications is preparing to implement new rules for messaging apps that operate using SIM cards. This step is part of the government’s effort to tackle cybercrime at its roots by enforcing stricter verification and reducing the number of communication platforms that can be misused. One clear change that users will notice is that WhatsApp Web sessions will now be automatically logged out every six hours, disrupting the previously uninterrupted use across multiple devices. Although this may appear to be a simple inconvenience, the measure is part of a broader plan to address the growing problem of cyber fraud. Cybercriminals exploit messaging apps like WhatsApp without keeping the registered SIM in the device, making it difficult to trace fraud. These efforts are surely gonna address these challenges at the root.

‍

The Incident: What Has Changed?

‍

The new regulations will make it mandatory for messaging platforms to create a direct link between user accounts and verified SIM identities. By this method, every account in the network can be associated with a valid and traceable mobile number. Because of this requirement, it is expected that WhatsApp is going to tighten the management of device sessions. The six-hour logout cycle for WhatsApp Web is implemented to prevent long-lived and unmonitored sessions that are sometimes taken advantage of in account takeovers, device-based breaches, and remote access scams. This change significantly affects the user experience. WhatsApp Web, often used for communication, customer support, and coordination, will now require more frequent authentication through mobile devices. Though mobile access remains uninterrupted, desktop and browser-linked sessions will be subjected to tighter security controls.

‍

Why Identity-Linked Messaging Matters

‍

India is facing a rapidly evolving cybercrime ecosystem in which messaging applications play a central role. Scammers often rely on fake, unverified, or illegally obtained SIM cards to create temporary accounts that can be used for various illegal activities, such as sending phishing messages, impersonating government officials, and deceiving victims through call centres set up for scams.

The new rules take into consideration the following main issues:

1. Anonymity of accounts makes large-scale fraud possible: Criminals operate bulk scams using hundreds of SIM-linked accounts.
2. Freedom to drop identities: Illegal SIMs are discarded after fraud, making it difficult for the police to trace the criminals.
3. Multi-device vulnerabilities that last for a long time: Access without permission to WhatsApp Web sessions that last for a long time is seen as the main reason for OTP theft, account hijacking, and on-device social engineering.

The government wants to disrupt these foundations by enforcing stricter traceability.

‍

A Sector Under Strain: Misuse of Messaging Platforms

‍

Messaging apps have turned out to be the most important thing in India's digital life, from communication to enterprise. This very widespread use of messaging apps has made them an easy target for cybercriminals.

The scams that are frequently visible are:

• WhatsApp groupsare  used for job and loan scams
• False communication from banks, government departments, and payment applications
• Sextortion and blackmail through unverified accounts
• Remote-access fraud with attackers who are watching WhatsApp Web sessions
• Coordinated spread of false information and distribution of deepfake videos

The employment of AI-generated personas and "SIM farms" has made it harder to secure the systems even more. Unless there is a very strict linking of users to authenticated SIM credentials, the platforms might degenerate into uncontrollable rafts of cybercrime.

‍

Government and Regulatory Response

‍

The Department of Telecommunications is initiating a process of stricter compliance measures and cooperating with the Ministry of Home Affairs, along with the Indian Cyber Crime Coordination Centre. The main points of the directions include the following:

• Identity verification linked to a SIM is mandatory for the creation of messaging accounts
• Device re-authentication on platforms often starts with WhatsApp Web
• Coordination with the telecom operators to the extent of getting suspicious login patterns
• Protocols for the sharing of data with law enforcement in the course of cybercrime investigations
• Compliance checks of digital platforms to verify adherence to national safety guidelines

This coordinated effort reflects the understanding that the security of communication platforms is the responsibility of both the regulators and the service providers.

‍

The Bigger Picture: Strengthening India’s Digital Trust

‍

The fresh regulations are in step with the worldwide trend where the platforms of messaging have to be more responsible, as governments are demanding more and more from them. The same discussions are going on in the EU, UK, and certain Southeast Asian regions. 

For India, it is imperative to enhance identity management because: 

• The nation has the largest base of messaging users in the whole world
• Cybercrime is increasing at a rate quicker than that of traditional crime 
• Digital government services rely on communications that are secure 
• Identity integrity is the basis for trust in online transactions and digital payments

The six-hour logout policy for WhatsApp Web is a small action, but it is an indication of a bigger transformation towards a regulation that is active rather than just policing that is reactive.

‍

What Needs to Happen Next?

‍

The implementation of SIM-linked regulations must involve several subsequent measures to make them effective.

1. Strengthening Digital Literacy: It is necessary to educate users about the benefits of frequent logouts and security improvements.
2. Ensuring Privacy Protections: The DPDP Act should create a strong barrier against the misuse of personal data in identity-linked messaging that will be implemented.
3. Collaboration with Platforms: Messaging services should seek to secure authentication under the compromise of safety checks.
4. Monitoring SIM fraud at the source: Illicit SIM provisioning enforcement is the main source of criminals, not just changing their methods.
5. Continuous Review and Feedback: Policymaking needs to keep pace with real-life difficulties and new inventions in technology.

‍

Conclusion

‍

India's announcement to impose regulations on messaging apps with SIM linkage is a major step forward in preventing cybercrime from occurring in the first place. Although the immediate effect, like the six-hour logout requirement for WhatsApp Web, may annoy users, it is nevertheless part of a bigger goal: to develop a more secure and trustworthy digital communication environment.

Securing the communication that links millions of people is vital as India becomes more and more digital. Through a combination of regulatory measures, technological protection, and user education, the country is headed toward a time when criminals in the cyber world will find it very difficult to operate and where consumers will be able to interact online with much more confidence and safety.

‍

References

‍

• https://thehackernews.com/2025/12/india-orders-messaging-apps-to-work.html
• https://indianexpress.com/article/explained/explained-sci-tech/whatsapp-web-automatic-log-out-six-hourse-reason-10394142/
• https://www.ndtv.com/india-news/explained-how-will-new-sim-binding-rule-affect-whatsapp-signal-telegram-9728710
• https://www.hindustantimes.com/india-news/no-whatsapp-without-active-sim-centre-issues-new-rules-dot-sim-binding-prevent-cyber-crimes-101764495810135.html

‍