Android 17 Advanced Protection Restricts Accessibility Services to Verified Assistive Tools
Google has announced that in Android 17, switching on the operating system's Advanced Protection mode will automatically restrict access to the Android AccessibilityService API to verified applications that the company categorizes as Accessibility Tools.
Advanced Protection is a one-touch security setting that turns on Android's security features to defend a device against threats. According to Google, the change is intended to close a major malware pathway while leaving assistive technology intact. "In Android 17, enabling Advanced Protection automatically restricts AccessibilityService access exclusively to verified applications categorized as Accessibility Tools, closing off a major avenue of attack while preserving vital assistive technology," Google said.
The AccessibilityService API lets an application run in the background, intercept user-interface events and interact with other apps on a user's behalf. Its primary purpose is to assist people with disabilities through tools such as screen readers and voice-control systems, but its privileged access has been abused by banking trojans and spyware to extract sensitive data and carry out actions without root access, including initiating fraudulent transfers, logging keystrokes, drawing fake login screens over legitimate apps and granting themselves additional permissions.
"Because accessibility services are designed to interact directly with the screen, malicious actors can exploit them to read sensitive data, install malware, or block uninstallation," Google said. The company said it has taken a number of steps in recent years to counter that abuse, and that the Android 17 restriction is its latest measure.
The accessibility restriction is one of several security improvements arriving with Advanced Protection in Android 17. Google said developers can be notified when Advanced Protection is enabled so they can automatically turn on any features they have for that user population, and that existing users will receive a notification once the new capabilities reach their devices.