Google Apps possibly downloading malware onto your device

Google Apps may be allowing bad actors to install malware on your device via a security flaw.

Threat: The Google Apps Script, used for apps like Google Drive, has a security vulnerability that could allow hackers to deliver malware to a user’s computer using Google Drive URLs.

Damage risk: The vulnerability supports automatic downloads of malware and social engineering plans to convince users to run the malware once it’s been downloaded.

Exploited flaw: The ability to share documents via most Google Apps magnified the script’s vulnerability.

Fixes/Workarounds: Google added restrictions to Apps Script events that could be used to spread malware. Be careful when clicking links — even to a source like Google Docs if they’re sent from someone you don’t know.

Info: tinyurl.com/GA10518