Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools
Summary: Google announced that Android 17 will restrict AccessibilityService access to verified applications categorized as Accessibility Tools whenever Advanced Protection is enabled. Google said the AccessibilityService API, which lets apps run in the background, intercept user interface events, and act in other apps, has been abused by banking trojans and spyware to read sensitive data, log keystrokes, draw fake login screens, and initiate fraudulent fund transfers without root access.
Why it matters: Banking trojans and spyware have used this API as their main path to fraud once a user is tricked into enabling the service, and Google's fix only applies when Advanced Protection is turned on.
Read the original at The Hacker News ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026