Google Adds AI Ransomware Detection to Drive for Desktop

Google has introduced AI-powered ransomware detection and recovery features for Google Drive for Desktop on Windows and macOS, designed to identify and halt ransomware activity early by pausing file syncing and enabling quick file restoration. This AI model, trained on millions of real-world ransomware samples and continuously updated with new threat intelligence, aims to address gaps in ransomware detection where organizations often learn of attacks only from external sources. The feature, available in open beta at no additional cost for most Google Workspace commercial plans, sends alerts to users and IT admins upon detecting suspicious activity and allows restoration to previous healthy file versions with ease. Google’s approach targets the "missing middle" in ransomware protection by intervening precisely when an attack begins, complementing traditional antivirus and backup strategies. Ransomware remains a significant threat, with a 15% increase in global attacks reported in 2024, affecting various sectors worldwide and causing substantial financial and operational damage. This development reflects Google’s commitment to enhancing cybersecurity by leveraging AI to protect critical file formats commonly targeted by ransomware, such as Microsoft Office documents and PDFs.