In June 2026, security researchers in Argentina documented Rokarolla, a new Android banking trojan programmed to attack over 200 financial and cryptocurrency applications. It spreads via fake APK files posing as Chrome or TikTok, often from third-party stores, and requests accessibility and SMS permissions to intercept credentials and two-factor codes. Police in Mexico City warned that attackers are exploiting unprotected voicemail boxes to hijack WhatsApp accounts: by calling a target while the line is busy, they force the verification code into voicemail, retrieve it, and then solicit transfers from contacts. Argentina’s postal service reported a parallel surge in phishing sites mimicking its tracking portal to harvest banking data.

The threats coincide with Google’s phased release of Android 17, which hardens the platform’s privacy architecture. Initially available on Pixel devices from the Pixel 6 onward and in beta on handsets from Xiaomi, OnePlus and Honor, the update hides the last character of saved passwords, allows temporary location access for selected apps, and introduces a facial-recognition-based device lock called Find Hub. It can also cap RAM usage per app to prevent crashes and battery drain. The permission restrictions directly counter the techniques used by banking trojans and account-takeover schemes.

New hardware is arriving in parallel. Xiaomi’s 17T Pro, launched in Taiwan in late May, features a Leica 5x optical periscope telephoto lens and a 7,000 mAh battery that retained 43 per cent charge after two days of intensive outdoor use, according to field tests. The device also offers a “Leica Live Moment” function that captures short motion clips around the shutter press. In China, OnePlus released the Pad 3 Pro tablet with a 13,380 mAh battery and a Snapdragon 8 Elite Gen 5 processor; a global variant is already selling in India.

Authorities in Mexico and Argentina are urging users to deactivate voicemail, enable WhatsApp’s two-step verification, and restrict app installations to official stores. The next milestone to watch is the broader availability of Android 17 beyond Pixel and beta devices, which will determine how quickly the new permission controls and credential protections reach the hundreds of millions of devices that remain exposed to mobile financial fraud.