logo

Google cracks down on Android apps abusing accessibility

ID: 030dfda7-b752-5d5a-b78c-763a39ede2a0

STIX ID: report--030dfda7-b752-5d5a-b78c-763a39ede2a0

Feed Name: Malwarebytes Blog

Threat Score
65/100

Date Published: 2026-03-17

Date Updated: 2026-04-28

...
...

Google’s Android 17.2 introduces stricter controls that block apps from using the accessibility API when Advanced Protection Mode (APM) is enabled, aiming to curb long-standing abuse by banking Trojans that use accessibility features for fake overlays and permission abuse to steal credentials and 2FA codes; the article describes specific malware families and recent incidents and frames Google's change as a trade-off between functionality and security.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.