Chinese Bat BMS App Poses Security Threat to E-Rickshaws
A Chinese mobile application named Bat BMS has been identified as a potential security risk for e-rickshaw owners, as it can remotely disable the vehicle's battery, effectively turning it into a kill switch. The app, designed to manage battery performance, can be misused by unauthorized individuals to cut power to the e-rickshaw, leaving drivers stranded.
How the Bat BMS App Works
The Bat BMS app connects to the battery management system (BMS) of e-rickshaws via Bluetooth or Wi-Fi. Once paired, it allows users to monitor battery health, charge levels, and even remotely disconnect the battery output. Security researchers have found that the app lacks proper authentication, making it vulnerable to unauthorized access. An attacker within Bluetooth range (typically up to 10 meters) could pair with the BMS and send a shut-down command, instantly disabling the e-rickshaw.
Real-World Implications and Risks
E-rickshaws are widely used for public transport in many Indian cities. A malicious actor could exploit this vulnerability to cause traffic disruptions, thefts, or even accidents. According to cybersecurity experts, the issue is not limited to a single brand; many e-rickshaws using generic Chinese BMS modules are potentially affected. The app has been downloaded thousands of times on app stores, raising concerns about widespread misuse.
How to Prevent Your E-Rickshaw from Being Hacked
To protect your e-rickshaw, follow these steps: 1) Disable Bluetooth on the BMS module when not in use. 2) Change the default password on the BMS system. 3) Update the BMS firmware to the latest version, if available. 4) Install a physical kill switch that cannot be accessed remotely. 5) Avoid using generic BMS modules from unverified sources. 6) Regularly check for unauthorized devices paired with your BMS.
Government and Industry Response
The Indian government has taken note of the issue and is working with transport authorities to raise awareness. The Ministry of Electronics and Information Technology has issued an advisory recommending e-rickshaw manufacturers to implement stronger security measures. Industry bodies have urged drivers to be cautious and report any suspicious activity.
