Remote-Kill Switches: Centre Targets Battery Apps After E-Rickshaw Chaos

The government has ordered Google and Apple to pull seven mobile apps from their stores following reports of malicious remote interference with electric vehicle batteries.

For thousands of e-rickshaw drivers, the daily commute is no longer just about navigating traffic—it has become a battle against invisible hackers. The Ministry of Electronics and Information Technology (MeitY) has officially stepped in, issuing firm directives to both Google and Apple to remove seven specific battery management applications from their respective stores. The move follows a surge in alarming reports and viral videos showing electric vehicles being abruptly powered down while in motion, leaving drivers stranded on busy roads.

The apps under the scanner, including names like BAT-BMS, SMART BMS, and LOSSIGY, were allegedly designed to manage battery performance but were repurposed to exploit Bluetooth connectivity. By gaining unauthorized access, miscreants have been able to remotely disable the battery systems of e-rickshaws, effectively turning a functional vehicle into a dead weight. Government officials confirm that this is a targeted effort to curb a dangerous trend that has been spreading across several regions, from Uttar Pradesh to Gujarat.

The Security Breach

The vulnerability lies in the way these battery management systems communicate. While these apps were intended to provide real-time diagnostics—such as charge levels and battery health—the lack of robust encryption or authentication protocols allowed third parties to hijack the connection. MeitY Secretary S. Krishnan noted that the government had already been monitoring the situation, with two similar applications previously flagged and taken down before the current, wider crackdown.

The Centre’s directive is clear: any platform found facilitating remote interference with critical infrastructure like electric vehicles will face immediate scrutiny. This isn't just a technical glitch; it is a security threat that affects the livelihoods of small-scale transport operators who rely on these vehicles for their daily income.

Why it matters

This incident highlights the growing "cyber-physical" security gap in India’s rapidly digitizing transport sector. As we transition toward electric mobility, the ecosystem is becoming increasingly reliant on third-party software that may not meet standard safety or cybersecurity benchmarks. This episode serves as a wake-up call for EV manufacturers and regulators alike. The reliance on unregulated, often foreign-developed apps for vehicle operations creates a backdoor for mischief that goes far beyond a simple "prank."

Moving forward, we can expect the government to enforce stricter verification processes for any software that interacts with vehicle hardware. For the average owner, the message is simple: stay cautious of third-party apps claiming to "optimize" or "manage" your vehicle's core functions. If an application isn't verified by your vehicle's manufacturer, the cost of the convenience might be far higher than expected.