Webcams exposed in Google Drive clickjack attack

Attackers can access a user’s Google Drive files and record them through their webcam by tricking the user into clicking hidden links, a researcher found.

The click-jacking attack takes advantage of the Google Picker application interface, which allows users to preview files stored within Drive and via third-party applications.