It was revealed that there is a security vulnerability in Google Drive

According to the information provided to The Hacker News by a system administrator named Nikoci, it is one of the most popular cloud storage services in the world. Google Drive, which makes it possible for hackers to download malware to your computer has a critical security vulnerability.

The vulnerability, which Nikoci said he reported to Google, was still unpatched at last check, and the vulnerability in question was still unpatched. of malware It is placed on Google Drive as a harmless software, causing users to download these software instead of their original files.

Google Drive users, Manage Versions Thanks to this feature, they can view the changes made and the old versions of the files that have been modified. The vulnerability in question allows you to take full advantage of this feature.

Normally a file in Google Drive can only be deleted if it has the same extension. new version It can be updated with . However, due to the vulnerability in question, files can also be updated with files that do not have the same extension. Therefore, users are actually downloading malicious software while trying to access their own harmless files.

According to Nikoci's statement, since the malware is embedded in the user's original file, it is not possible for the user to notice it. important before Googledoes not warn about the changing extension when the user wants to download the file. Therefore, the user downloads the malware to his device without realizing it.

And that's not all! antivirus Malware is not detected by the antivirus, as its software generally sees files downloaded via Google Drive as an exception. Naturally, when the user opens the file, it runs the malware. It is not yet clear when Google will fix this vulnerability. unknown.