Speaking on the sidelines of the CII Cybersecurity Summit on Friday, Information Technology Secretary S Krishnan confirmed that immediate action had been taken after the applications came to the government's notice. He stated that the matter was identified only a day earlier and that the concerned applications had already been removed from app stores.
According to government sources quoted by PTI, removal orders were issued for three applications identified as BAT-BMS, Lossigy, and Epoch-i-ion. Officials said the decision was taken after allegations surfaced that these applications were being exploited to interfere with the functioning of battery-operated vehicles by establishing Bluetooth connections with their Battery Management Systems.
S Krishnan also emphasized that app stores must exercise greater scrutiny before permitting applications to be listed on their platforms. He said digital platforms should conduct proper due diligence to prevent potentially harmful applications from becoming publicly available and indicated that the government would engage with app store operators to strengthen review mechanisms.
The issue attracted nationwide attention after several videos circulated on social media claiming that certain electric rickshaws were being remotely switched off through smartphone applications linked to Bluetooth-enabled Battery Management Systems. The videos triggered widespread concern over cybersecurity risks associated with connected vehicle technologies and the possibility of unauthorized access to vehicle control systems.
The Delhi Government has also directed its Transport Department to verify the authenticity of the BAT-BMS application and investigate claims that it can remotely disable electric rickshaws through Bluetooth connectivity. Transport Minister Pankaj Singh stated that officials had been instructed to examine the matter after complaints were brought to the department's attention, although no formal written complaint had been received.
According to preliminary findings by government officials, the applications allow users to establish wireless connections with Bluetooth-enabled lithium batteries within a limited operating range. While these applications were originally designed to monitor battery parameters such as voltage, temperature, and current, officials believe their functions have been misused to disrupt the operation of battery-powered vehicles.
Officials further noted that many low-cost electric rickshaws operating in India are equipped with Chinese-manufactured Battery Management Systems that incorporate limited security protections. These systems reportedly lack password authentication and other security safeguards, allowing nearby users to connect through Bluetooth and disable the battery's power output.
BAT-BMS was developed by Shenzhen Grenergy Technology, based in Shenzhen, China, as a battery management application intended to help users monitor battery health and remotely manage compatible lithium batteries. However, officials said its remote-control capabilities have reportedly been exploited in India by connecting to unsecured battery systems installed in certain electric vehicles.
Several viral videos allegedly showed individuals switching off the battery discharge function through these applications, leaving electric rickshaws stranded, in some cases in the middle of busy roads. Some drivers reportedly claimed they were forced to pay strangers to help restart their vehicles after their batteries had been remotely disabled.
The government's decision to remove the three applications marks a significant step toward addressing cybersecurity threats affecting connected electric vehicles. The incident has highlighted vulnerabilities in unsecured Battery Management Systems and underscored the urgent need for stronger digital security standards, stricter application screening, and improved protection against unauthorized access to vehicle control technologies.
About The Author
Comment List