Google Android 17 Advanced Protection restricts AccessibilityService to verified Accessibility Tools
Security Tool/Service
Summary
Hide ▲
Show ▼
Android 17 is tightening Advanced Protection by restricting AccessibilityService access to verified Accessibility Tools, cutting off a major abuse path used for malware and financial fraud. The change preserves legitimate assistive technology while reducing the risk that malicious apps can exploit privileged accessibility access to steal data or trigger fraudulent actions.
Related Happenings
RemControl Android MaaS malvertising-delivered credential theft platform
Malware Activity
H score29
First: 24.09.2026 00:25
Last: 24.09.2026 00:25
Sources 1
About this happening:
RemControl, a new Android malware-as-a-service, is being distributed through malvertising and fake Google Play pages impersonating TVTap IPTV, creating a scala...
RemControl Android MaaS malvertising-delivered credential theft platform
Malware ActivityAbout this happening: RemControl, a new Android malware-as-a-service, is being distributed through malvertising and fake Google Play pages impersonating TVTap IPTV, creating a scala...
Latest development: 25.09.2026 12:30
Group-IB researchers say the Russian-speaking operator tracked as UNKK appears to have used an AI assistant to build significant portions of the RemControl command and control backend and phishing overlays. The analysis also says the trojan's C2 panel API documentation was inadvertently exposed, giving researchers deeper insight into the malware infrastructure.
Mantax Otax Android malware activity
Malware Activity
H score32
First: 11.09.2026 00:40
Last: 11.09.2026 00:40
Sources 1
About this happening:
The Mantax Otax Android malware now combines ransomware and spyware features, putting older Android devices at risk of file encryption, data theft, and harassment....
Mantax Otax Android malware activity
Malware ActivityAbout this happening: The Mantax Otax Android malware now combines ransomware and spyware features, putting older Android devices at risk of file encryption, data theft, and harassment....
MantaxOtax Android malware with ransomware and spyware control
Malware Activity
H score32
First: 10.09.2026 16:00
Last: 10.09.2026 16:00
Sources 1
About this happening:
The MantaxOtax Android malware now combines file encryption with spyware-style surveillance, putting infected phones at risk of both lockout and data theft. It can ste...
MantaxOtax Android malware with ransomware and spyware control
Malware ActivityAbout this happening: The MantaxOtax Android malware now combines file encryption with spyware-style surveillance, putting infected phones at risk of both lockout and data theft. It can ste...
ToxicPanda 2.0 Android malware expands fraud capabilities
Malware Activity
H score29
First: 20.08.2026 13:38
Last: 20.08.2026 13:38
Sources 1
About this happening:
The ToxicPanda (aka TgToxic) Android malware family now ships with 167 remote commands and broader fraud features that raise the risk of credential theft and account takeo...
ToxicPanda 2.0 Android malware expands fraud capabilities
Malware ActivityAbout this happening: The ToxicPanda (aka TgToxic) Android malware family now ships with 167 remote commands and broader fraud features that raise the risk of credential theft and account takeo...
Manic Android malware activity with offline relay exfiltration
Malware Activity
H score29
First: 20.08.2026 13:02
Last: 20.08.2026 13:02
Sources 1
About this happening:
Manic is an Android malware activity that targets Ukrainian banks, government and identity services, messaging apps, and also Russian and European financial inst...
Manic Android malware activity with offline relay exfiltration
Malware ActivityAbout this happening: Manic is an Android malware activity that targets Ukrainian banks, government and identity services, messaging apps, and also Russian and European financial inst...
Timeline
-
02.10.2026 11:01 2 articles · 1h ago
Google restricts Android AccessibilityService to verified Accessibility Tools under Advanced Protection
Initial DisclosureGoogle announced that Android 17 will automatically restrict AccessibilityService access to verified applications classified as Accessibility Tools when Advanced Protection is enabled, closing off a major abuse path used by malicious Android applications for malware deployment and financial fraud while preserving legitimate assistive technology. The broader Android 17 security update also adds Intrusion Logging, USB Protection, Disable WebGPU, Failed Authentication Lock, and View Supporting Apps.
Show sources
- Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools — thehackernews.com — 02.10.2026 11:01
- Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools — thehackernews.com — 02.10.2026 11:01