logo

Indian Govt Bans Apps Being Misused to Stop E-Rickshaws Remotely

ID: 2b8080bc-278b-53c3-aef0-67da709f9e43

STIX ID: report--2b8080bc-278b-53c3-aef0-67da709f9e43

Feed Name: cybersecurityNews.com

Threat Score
70/100

Date Published: 2026-07-03

Date Updated: 2026-07-03

Author: Guru Baran

...
...

The Indian government ordered Google and Apple to remove three BMS mobile apps (BAT-BMS, Lossigy, Epoch-i-ion) after viral videos showed users remotely disabling e-rickshaws mid-journey via always-on API/Bluetooth links and weakly protected credentials. Originally legitimate fleet-management tools with remote-kill features, these apps were exploited by unauthorized actors due to inadequate authentication and access controls, prompting removal orders and recommendations for multifactor auth, geofencing, audit logs, and third-party security reviews.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.