Unpatched security flaw in Google Drive could be exploited by malware attackers to distribute malicious files disguised as legitimate documents or images. Google Drive’s file update feature is meant to be an easy way to update shared files, including the ability to replace the document with a completely new version from the system. The issue leaves the door open for highly effective spear-phishing campaigns that take advantage of cloud services such as Google Drive to distribute malware. Google Chrome appears to implicitly trust files downloaded from Google Drive even when they are detected by antivirus software as malicious.
Source: https://thehackernews.com/2020/08/google-drive-file-versions.html

