Android 17 Locks Accessibility API to Verified Apps in Advanced Protection Mode

Google is restricting Android’s AccessibilityService API to verified applications in Android 17 when Advanced Protection is enabled. This move aims to block a major attack vector abused by malware and financial fraud. The API, designed to assist users with disabilities, has been exploited by banking trojans and spyware to steal data and perform malicious actions without root access. Recent security measures include blocking sideloaded apps from enabling accessibility services and using the accessibilityDataSensitive flag to protect sensitive data. Android 17 also introduces other security improvements like Intrusion Logging, USB Protection, and a Failed Authentication Lock.