Google's online storage platform has become the solution of choice for many Internet users around the world. Unfortunately, the security within Google Drive does not seem to be optimal, which puts millions of users and their files at risk.
Cybersecurity researcher A. Nikoci has indeed identified a security breach within Google Drive. A flaw through which hackers could spread malware if users were not careful what they were downloading through the "file sharing" feature.
A sleight of hand
The security of this feature would be porous, the cybersecurity researcher told The Hacker News. He explains that the Mountain View firm has not set up a verification system to ensure that the shared file has not been exchanged along the way. In fact, when an Internet user wants to share a file, Google Drive verifies the file when the sharing link is created, but not afterwards. Thus, an attacker could replace the share link file with malware without the link being changed. Worse yet, the preview of the file would remain the same. The illusion would be perfect. The victim would therefore download malicious software onto their Drive without knowing it, while being certain that it is the right file.
The potential for exploiting the Google Drive security hole is quite low when it comes to sharing files between trusted people. On the other hand, the risks are much greater in the case of sharing files found on the web, whether on a specialized site, a social network or a forum. The link could be corrupted without the person who posted it knowing.
It is therefore better to pay attention to the Google Drive sharing links that you find on the web for the moment. The researcher warned Google of the problem, it only remains to wait for the firm to fill the gap quickly.
High-Tech
PinePhone, a smartphone designed to respect the privacy of its owners
High-Tech
4G: A network breach exposes phone calls to hacker attacks
- Personal data
- Computer science
- Hacker
- High-Tech
- Cybersecurity
- Cyber attack