Detecting a Google Drive vulnerability could allow hackers to trick users into installing malware

An unresolved security weakness in Google Drive can be exploited by software attackers to distribute malicious files disguised as normal documents or images targeting users, thereby allowing users to allowing them to deploy large-scale phishing attacks with a fairly high rate of success.

With that said, this is a vulnerability that Google has confirmed, but as of now it has not been patched. This vulnerability exists in the "manage versions" function of Google Drive, which is designed to allow users to upload and manage different versions of a file, as well as the interface. latest for users.

Vulnerability on Google Drive

Logically, manage versions will allow Google Drive users to update the old version of the file to the new version with the same extension, but not quite. According to A. Nikoci, a professional system administrator who reported the vulnerability to Google and then revealed the details to The Hacker News, in terms of functionality, the vulnerability in manage versions allows users to upload the latest version of the currently archived files with any extension that does not have the specific resemblance to the original design, even with a malicious executable.

Detecting a Google Drive vulnerability could allow hackers to trick users into installing malware Picture 1 The malicious executable is disguised as an image file

As can be seen in the demo videos Nikoci shared with The Hacker News, the vulnerability could cause the legitimate version of a file that was shared between a group of users to be replaced by a malicious file, which almost there aren't any signs of identification. When users download this file and access it, the malicious code immediately infects the entire system.

Demo video exploits a vulnerability in Google Drive

Apparently this vulnerability opened up new doors for highly effective phishing campaigns, leveraging the popularity of cloud services like Google Drive to spread malware on a large scale, especially. is for organizations and enterprises that use this cloud storage platform to share documents.

Nikoci said it has sent a notice to Google on the issue since August 22. Mountain View company has received the information, but as of now, there are no patches or comments. given.

For now, the best possible limited solutions are to use reliable antivirus software and be wary of file update warnings on Google Drive, especially if you don't know the file's origin.

Kareem Winters

Update 24 August 2020