MeitY Orders Google and Apple to Remove Malicious BMS Apps Following Viral E-Rickshaw 'Prank' Attacks

In a significant move to safeguard the livelihoods of thousands of small-scale transport operators, the Ministry of Electronics and Information Technology (MeitY), Government of India, has issued a stringent directive to tech giants Google and Apple. The order mandates the immediate removal of seven mobile applications from their respective app stores after reports surfaced of these tools being weaponized for malicious activities and disruptive 'pranks' on the streets.

The Security Vulnerability: How the Attacks Occur

The crackdown follows a series of viral videos on social media platforms that demonstrated how specific Bluetooth-enabled Battery Management System (BMS) applications were being used to target electric vehicles. The applications identified in the directive include BAT-BMS, SMART BMS, LOSSIGY, and Epoch Li-ion, among others.

The root of the problem lies in a critical security flaw within the hardware used by many budget-friendly e-rickshaws. Currently, a large number of these vehicles utilize Chinese-manufactured lithium-ion battery packs that lack essential security features, such as password protection or digital authentication protocols. Because these battery systems communicate via Bluetooth, any individual within a 15-meter radius can pair with the vehicle's BMS using the aforementioned apps. Once connected, the perpetrator can remotely trigger a command to switch off the battery's discharge function, instantly immobilizing the vehicle while it is in motion.

Impact on Drivers and Livelihoods

While the perpetrators often frame these actions as harmless 'pranks,' the real-world impact is devastating. For e-rickshaw drivers, these vehicles are their primary source of income. Being suddenly stranded in the middle of traffic due to a remote battery shutdown not only causes massive inconvenience and loss of wages but also poses significant safety risks to the driver, passengers, and other commuters on the road. The sudden immobilization of a moving vehicle can lead to accidents and direct economic hardship for vulnerable populations.

Legal Warning: Criminal Offenses and Penalties

Cybersecurity experts have issued a stern warning to anyone attempting to use such technology to tamper with vehicles without consent. They emphasize that these actions are not mere jokes but constitute serious criminal offenses under the Information Technology (IT) Act.

• Imprisonment: Perpetrators may face a prison sentence of up to three years.
• Financial Fines: Violators could be liable for fines amounting to as much as ₹5 lakh.

By taking this decisive action, the Indian government aims to curb the misuse of digital tools and encourage manufacturers to implement more secure, authenticated battery management solutions to protect the growing e-mobility ecosystem.