#FactCheck-Fake Quote Falsely Attributed to Mojtaba Khamenei on India’s Prime Minister and Indira Gandhi

Introduction

Imagine spending two years , 730 days of early mornings, missed social events, and relentless mock tests  preparing for a single examination. Now imagine that on the morning of that exam, your phone buzzes with a forwarded video claiming the question paper has already leaked. Your heart sinks. You do not know whether to trust it or ignore it. You have about forty minutes before you must enter the hall. This was the reality for a section of the 22 lakh students who sat for the NEET UG 2026 re-examination on June 21, 2026, when a fabricated video alleging a paper leak on Telegram began circulating across WhatsApp groups and X within hours of the exam commencing. The National Testing Agency (NTA) swiftly and categorically denied the claims, activated the Indian Cyber Crime Coordination Centre (I4C), and appealed to the public not to amplify unverified content. The examination concluded without incident. But the episode laid bare a challenge that no security perimeter or surveillance camera can fully address: the weaponisation of misinformation against India's high-stakes examination ecosystem.

‍

The Anatomy of Examination Misinformation

‍

Why Examinations Are a Prime Target

India's national examinations are uniquely fertile ground for misinformation. With over 22 lakh candidates registered for NEET UG 2026 alone, the audience is vast, anxious, and hungry for any update  verified or otherwise. Research by MIT has found that false stories spread six times faster than accurate ones on social media, and are seventy percent more likely to be reshared. In India, where over 535 million people use WhatsApp and studies show that most users tend to trust messages forwarded by family and friends, the conditions for viral misinformation are near-ideal. According to a 2020 Microsoft survey, 52 percent of Indian respondents encountered misinformation at least once a day, the highest rate globally.

What makes examination-related misinformation especially dangerous is its timing. Fabricated content is almost always released on examination day itself, the precise moment when candidates are most emotionally vulnerable, official channels are stretched thin, and the window for effective rebuttal is narrowest. The NEET UG 2026 fake video, circulated on Telegram and amplified across closed WhatsApp groups, fits this pattern precisely. It was engineered not to inform, but to destabilise.

‍

A History That Sharpens the Anxiety

This misinformation did not emerge in a vacuum. The shadow of the 2024 NEET UG controversy  in which the Supreme Court of India confirmed that at least 155 students had directly benefited from a genuine paper leak, and which triggered nationwide protests, CBI investigations, and a parliamentary uproar — still looms large. Students and parents conditioned by that experience are primed to believe the worst, even when claims are entirely false. In 2026, that residual anxiety became the very vulnerability that bad actors sought to exploit. The government's response which included temporarily restricting access to Telegram in the lead-up to the re-examination  underscored just how seriously the threat of examination misinformation is now being taken at the highest levels.

‍

The NTA's Response: Why It Matters

‍

1. Speed and Transparency as Governance Tools: In crisis communication, the first credible voice usually wins. The NTA's near-immediate public denial posted on official social media handles and amplified by the Press Information Bureau's PIB Fact Check unit was a meaningful departure from the delayed, defensive responses that characterised earlier examination controversies. By directly labelling the video "FAKE" in capital letters, describing its creation as "a serious offence," and simultaneously appealing to students to rely only on official sources at neet.nta.nic.in, the NTA left little room for the false narrative to consolidate. NTA Director General Abhishek Singh went further, publicly stating that the agency was "100 per cent confident" in the integrity of the process and that no complaints of a genuine paper leak had been received. This matters beyond crisis management. Public trust in examination systems is not rebuilt through official statements alone , it is rebuilt through the consistent, transparent exercise of institutional authority. A swift, fact-based rebuttal, deployed before rumour hardens into public belief, is as much a governance act as it is a communications strategy.

‍

2. Cybercrime Coordination as a Structural Shift: Perhaps the most significant development in the NTA's response was its coordination with I4C and law enforcement agencies to trace the origin of the fabricated video. This signals a structural evolution: examination misinformation is no longer being treated as an administrative inconvenience but as cybercrime with legal consequences under the Information Technology Act, 2000. The announcement that legal action would follow also carries a deterrent message to potential future actors — that the machinery of cybercrime enforcement will be activated, and that fabricating content to mislead examination candidates is a prosecutable offence.

‍

The Human and Institutional Cost

The costs of examination misinformation are neither abstract nor trivial. Mental health experts have warned that controversies surrounding national-level examinations can have serious long-term psychological consequences for aspirants. Dr. Mustafa Nadeem Kirmani of Amity University has noted that such crises increase the risk of students taking "extreme steps like suicide attempts, anger toward the system, and hopelessness," and can, in the long run, lead to clinical depression. In the wake of the 2026 paper leak controversy, multiple reports of student deaths by suicide were linked to the compounded pressures of exam cancellation and uncertainty a grim reminder of the real human stakes behind governance failures in this domain. For institutions, every viral misinformation episode generates an avoidable administrative crisis. Helplines are overwhelmed, examination centre staff face panicked queries, and senior officials are pulled into damage control rather than exam administration. The credibility of clarifications issued under pressure is itself questioned by a public already primed for suspicion. This administrative burden, multiplied across 5,440 examination centres in India and 14 abroad, represents a significant and entirely unnecessary cost.

‍

Building a Resilient Ecosystem: What Needs to Change

‍

1. Proactive Communication and Platform Coordination: Institutional credibility is built before a crisis, not during one. Examination bodies must invest in sustained pre-examination communication that educates candidates and parents about the existence of misinformation campaigns and tells them exactly where to look for verified updates. This means highly visible, verified social media presences with large followings, real-time update protocols, and formal escalation channels with platforms like WhatsApp, Telegram, X, and YouTube to enable rapid takedown of false examination-related content. The IT Amendment Rules of 2023, which require significant social media intermediaries to act on government-flagged content, provide a legal basis for such coordination  but the operational infrastructure to activate it at speed must be built in advance, not improvised on the day.

‍

2. Fact-Checking Partnerships and Digital Literacy: Independent organisations such as BOOM Live, Alt News, and Vishvas News have proven their capacity to rapidly debunk examination misinformation. Formalising their role through a structured public-private partnership  where examination authorities share real-time verified information with empanelled fact-checkers  could close the window during which false content circulates unchallenged. Equally critical is investment in digital media literacy among students and parents. A 2018 survey found that nearly 45 percent of Indian respondents were unaware of any fact-checking organisations. Addressing this gap through school curricula, coaching networks, and the Ministry of Education's DIKSHA platform  is a preventive investment far less costly than repeated crisis management.

‍

Conclusion

‍

The NTA's handling of the NEET UG 2026 fake video was, by recent standards, exemplary. It was fast, transparent, authoritative, and backed by the activation of cybercrime enforcement. But a single well-managed episode does not constitute a resilient system. India runs some of the world's largest entrance examinations, and the stakes medical seats, livelihoods, and the aspirations of crores of young people are too high for crisis response alone to suffice. Combating examination misinformation requires permanent structural investment: dedicated rapid-response cells within examination bodies, formalised fact-checking pipelines, proactive platform coordination, and a sustained public education effort around digital verification. Protecting the integrity of India's examination ecosystem is not merely an administrative responsibility. It is a commitment to the millions of students who give everything they have to compete fairly and who deserve a system that protects them not only from cheating, but from the fear of it.

‍

References

‍

1. https://timesofindia.indiatimes.com/articleshow/131900261.cms
2. https://www.india.com/education/neet-ug-2026-re-exam-paper-leak-claim-goes-viral-nta-says-video-is-fake-and-false-fabricated-examination-conducted-successfully-8453620/
3. https://www.republicworld.com/education/neet-ug-re-exam-nta-says-paper-leak-video-fake-test-conducted-successfully-2026-06-22-129346
4. https://thefederal.com/category/education/neet-re-exam-paper-leak-admission-system-crisis-247410
5. https://www.outlookindia.com/healthcare-spotlight/beyond-the-paper-leak-emotional-trauma-among-neet-aspirants-raises-concern
6. https://en.wikipedia.org/wiki/2024_NEET_controversy
7. https://kaval.chat/blog/misinformation-scam-statistics-india-2026/
8. https://www.ijert.org/the-virality-gap-political-misinformation-and-the-information-crisis-in-india-s-digital-democracy-ijertv15is050041
9. https://www.science.org/doi/10.1126/science.aap9559 https://www.microsoft.com/en-us/digital-skills/digital-civility
10. https://www.meity.gov.in/content/information-technology-intermediary-guidelines-and-digital-media-ethics-code-amendment
11. https://www.indiacode.nic.in/handle/123456789/1999 
12. https://pib.gov.in/PressReleasePage.aspx 
13. https://www.careerindia.com/news/addressing-the-mental-health-crisis-sparked-by-net-and-neet-paper-leaked-in-india-041963.html
14. https://thediplomat.com/2025/03/indias-growing-misinformation-crisis-a-threat-to-democracy/

‍

Executive Summary

A video of an Indian Army officer leaving a meeting alongside a police official is being widely circulated on social media. Some users are sharing the clip with the claim that the officer walked out of a meeting after the government refused to provide funding for security preparations related to Pakistan and China. CyberPeace Research Wing’s research found the viral claim to be false. Our research revealed that the video is not related to any dispute over defence funding. It actually shows a press conference held in Patiala in March 2025 regarding an attack on an Indian Army Colonel. During the press conference, the Army officer demanded a transparent, time-bound, fair and impartial research, while the police official provided details about the action taken in the case.

‍

Claim

‍

Facebook user ‘Salman Pathan’ shared the video on July 15, 2026, with the claim: “After the government refused funding for security arrangements/preparations related to Pakistan and China, an Indian Army officer left the meeting.” The post further questioned the government over alleged priorities in spending public money.

https://www.facebook.com/reel/3995874277215044 

https://perma.cc/JL7A-2A6B?type=standard

Fact Check

‍

To verify the claim, we extracted keyframes from the viral video and conducted a reverse image search using Google Lens. During the research, we found that the same video was uploaded on March 25, 2025, by X user ‘Man Aman Singh Chhina’. The post stated:

“Chief of Staff of Western Command Lieutenant General Mohit Wadhwa left along with senior officers after reading a statement on the Patiala Colonel case without answering any questions. The DGP also read his statement and left, but at least he answered media questions.”

https://x.com/manaman_chhina/status/1904492655720988850?s=20

‍

‍

Further research revealed that the Government of Punjab’s official YouTube channel had uploaded the video of the same press conference on March 25, 2025. At the end of the press conference, when the Army and police officials leave the venue, the same question from journalists that appears in the viral clip can be heard.

https://www.youtube.com/live/7i3Nxc6vTpU

‍

According to a report published by Amar Ujala on July 16, 2025, the Punjab and Haryana High Court, dissatisfied with the research conducted by the Chandigarh Police SIT, transferred the case to the Central Bureau of research (CBI).

https://www.amarujala.com/punjab/chandigarh-punjab/colonel-bath-assault-case-high-court-handed-over-research-to-cbi-2025-07-16

‍

‍

Conclusion

‍

Our research found that an old and unrelated video from March 2025 is being falsely circulated with the claim that an Army officer left a meeting after the government refused funding for security preparations related to Pakistan and China. The viral video actually relates to a press conference regarding the attack on Colonel Pushpinder Singh Bath in Patiala and has no connection with any defence funding issue. The viral claim is therefore false and misleading.

‍

Introduction:

Former Egyptian MP Ahmed Eltantawy was targeted with Cytrox’s predator spyware through links sent via SMS and WhatsApp. Former Egyptian MP Ahmed Eltantawy has been targeted with Cytrox’s Predator spyware in a campaign believed to be state-sponsored cyber espionage. After Eltantawy made his intention to run for president in the 2024 elections known, the targeting took place between May and September 2023. The spyware was distributed using links sent via SMS and WhatsApp, network injection, and visits to certain websites by Eltantawy. The Citizen Lab examined the assaults with the help of Google's Threat Analysis Group (TAG), and they were able to acquire an iPhone zero-day exploit chain that was designed to be used to install spyware on iOS versions up to 16.6.1.

‍

Investigation: The Ahmed Eltantawy Incident

Eltantawy's device was forensically examined by The Citizen Lab, which uncovered several efforts to use Cytrox's Predator spyware to target him. In the investigation, The Citizen Lab and TAG discovered an iOS exploit chain utilised in the attacks against Eltantawy. They started a responsible disclosure procedure with Apple, and as a consequence, it resulted in the release of updates patching the vulnerabilities used by the exploit chain. Mobile zero-day exploit chains may be quite expensive, with black market values for them exceeding millions of dollars. The Citizen Lab also identified several domain names and IP addresses associated with Cytrox’s Predator spyware. Additionally, a network injection method was also utilised to get the malware onto Eltantawy's phone, according to the study. He would be discreetly routed to a malicious website using network injection when he went to certain websites that weren't HTTPS.

‍What is Cyber Espionage?

‍

Cyber espionage, also referred to as cyber spying, is a sort of cyberattack in which an unauthorised user tries to obtain confidential or sensitive information or intellectual property (IP) for financial gain, business benefit, or political objectives.

Apple's Response: A Look at iOS Vulnerability Patching

Users are advised to keep their devices up-to-date and enable lockdown Mode on iPhones. Former Egyptian MP targeted with predator spyware ahead of 2024 presidential run hence Update your macOS Ventura, iOS, and iPadOS devices, as Apple has released emergency updates to address the flaws. Apple has Released Emergency Updates Amid Citizen Lab’s Disclosure. Apple has issued three emergency updates for iOS, iPadOS (1), and macOS Ventura (2).

The updates address the following vulnerabilities:

CVE-2023-41991,

CVE-2023-41992,

CVE-2023-41993.

Apple customers are advised to immediately install these emergency security updates to protect themselves against potential targeted spyware attacks. By updating promptly, users will ensure that their devices are secure and cannot be compromised by such attacks exploiting these particular zero-day vulnerabilities. Hence it is advisable to maintain up-to-date software and enable security features in your Apple devices.

Conclusion:

Ahmed Eltantawy, a former Egyptian MP and presidential candidate, was targeted with Cytrox’s Predator spyware after announcing his bid for the presidency.  He was targeted by Cytrox Predator Spyware Campaign. Such an incident is believed to be State-Sponsored Cyber Espionage.  The incident raises the question of loss of privacy and shows the mala fide intention of the political opponents. The investigation Findings reveal that Ahmed Eltantawy was the victim of a sophisticated cyber espionage campaign that leveraged Cytrox’s Predator spyware. Apple advised that all users are urged to update their  Apple devices. This case raises alarming concerns about the lack of controls on the export of spyware technologies and underscores the importance of security updates and lockdown modes on Apple devices.

References:

• https://uksnackattack.co.uk/predator-in-the-wires-ahmed-eltantawy-targeted-by-predator-spyware-upon-presidential-ambitions-announcement
• https://citizenlab.ca/2023/09/predator-in-the-wires-ahmed-eltantawy-targeted-with-predator-spyware-after-announcing-presidential-ambitions/#:~:text=Between%20May%20and%20September%202023,in%20the%202024%20Egyptian%20elections.
• https://thehackernews.com/2023/09/latest-apple-zero-days-used-to-hack.html
• https://www.hackread.com/zero-day-ios-exploit-chain-predator-spyware/

‍