Google Drive introduces AI-powered ransomware detection

Google is enhancing its Drive for desktop capabilities by introducing AI-powered ransomware detection.

Google has built a specialised AI model, trained on millions of real-world ransomware samples, to look for signals that a file has been maliciously modified.

The detection engine adapts to novel ransomware by continuously analysing file changes and incorporating new threat intelligence from VirusTotal.

When Drive detects unusual activity that suggests a ransomware attack, it automatically pauses syncing of affected files, helping to prevent widespread data corruption across an organisation’s Drive.

Users then receive an alert on their desktop and via email, guiding them to restore their files.

For IT teams, administrators can leverage the security center to review the audit log with detailed information. This new capability is on by default for all customers, but administrators have the controls to disable detection and restoration capabilities for end users, if needed.

Rolling out starting today in an open beta, this capability included in most Workspace commercial plans at no additional cost. Consumers also benefit from the file restoration capability at no additional cost.