https://workspace.google.com/blog/product-announcements/ai-ransomware-detection-in-google-drive

Google has rolled out a new security feature for its Google Drive desktop application, leveraging AI technology to automatically detect and respond to ransomware attacks. This innovative capability aims to protect users’ data stored in the cloud and minimise the impact of such malicious activities.

The specialised AI model, trained on millions of real-world ransomware samples, is designed to rapidly identify and react to signs of malicious file alterations. When the system detects unusual activity indicative of a ransomware attack, it automatically pauses the syncing of affected files, preventing widespread data corruption across an organisation’s Google Drive. Users then receive alerts on their desktop and via email, guiding them through the easy restoration of their files using the intuitive web interface.

Unlike traditional solutions that often require complex system re-imaging or costly third-party tools, Google Drive’s ransomware detection and file restoration capabilities provide a seamless and user-friendly experience. This new feature is enabled by default for all Google Drive users on Windows and macOS, empowering them to safeguard their data and swiftly recover from potential ransomware incidents. IT administrators, however, can choose to disable the ransomware detection and file restoration capabilities if needed.