Google Drive Desktop Adds AI-Powered Ransomware Detection
Summary
Hide ▲
Show ▼
Google has expanded its AI-powered ransomware detection feature for Google Drive desktop to all paying users, now enabled by default for business, enterprise, education, and frontline Google Workspace licenses. The updated AI model detects 14x more infections than during its beta phase, providing faster and more comprehensive protection. When ransomware is detected, file syncing pauses immediately, safeguarding cloud-stored documents while local files may still be encrypted. Users receive email and admin console alerts, along with detailed restoration instructions to recover affected files. IT administrators retain the ability to disable the feature via the Google Admin console.
Timeline
-
01.10.2025 18:10 2 articles · 6mo ago
Google Drive desktop introduces AI-powered ransomware detection
Google Drive ransomware detection reaches general availability and is now enabled by default for all paying Google Workspace users, including business, enterprise, education, and frontline licenses. The feature's AI model detects 14x more ransomware infections than during beta, enabling faster and more comprehensive protection. Detection triggers immediate sync pausing to protect cloud-stored documents, even if local files are encrypted. Users receive email alerts and notifications in the Google Admin console, while IT administrators can disable the feature via the Admin console under Apps > Google Workspace > Settings for Drive and Docs > Malware and Ransomware.
Show sources
- Google Drive for desktop gets AI-powered ransomware detection — www.bleepingcomputer.com — 01.10.2025 18:10
- Google Drive ransomware detection now on by default for paying users — www.bleepingcomputer.com — 01.04.2026 09:35
Information Snippets
-
The AI-powered ransomware detection feature pauses file syncing when ransomware activity is detected.
First reported: 01.10.2025 18:101 source, 2 articlesShow sources
- Google Drive for desktop gets AI-powered ransomware detection — www.bleepingcomputer.com — 01.10.2025 18:10
- Google Drive ransomware detection now on by default for paying users — www.bleepingcomputer.com — 01.04.2026 09:35
-
The feature uses a specialized AI model trained on millions of real-world ransomware samples.
First reported: 01.10.2025 18:101 source, 2 articlesShow sources
- Google Drive for desktop gets AI-powered ransomware detection — www.bleepingcomputer.com — 01.10.2025 18:10
- Google Drive ransomware detection now on by default for paying users — www.bleepingcomputer.com — 01.04.2026 09:35
-
The anti-ransomware engine adapts to new ransomware strains using VirusTotal data.
First reported: 01.10.2025 18:101 source, 2 articlesShow sources
- Google Drive for desktop gets AI-powered ransomware detection — www.bleepingcomputer.com — 01.10.2025 18:10
- Google Drive ransomware detection now on by default for paying users — www.bleepingcomputer.com — 01.04.2026 09:35
-
Users receive alerts on their desktop and via email to restore affected files.
First reported: 01.10.2025 18:101 source, 1 articleShow sources
- Google Drive for desktop gets AI-powered ransomware detection — www.bleepingcomputer.com — 01.10.2025 18:10
-
The feature is enabled by default for Google Workspace users on Windows and macOS.
First reported: 01.10.2025 18:101 source, 2 articlesShow sources
- Google Drive for desktop gets AI-powered ransomware detection — www.bleepingcomputer.com — 01.10.2025 18:10
- Google Drive ransomware detection now on by default for paying users — www.bleepingcomputer.com — 01.04.2026 09:35
-
IT administrators can disable the ransomware detection and file restoration capabilities if needed.
First reported: 01.10.2025 18:101 source, 2 articlesShow sources
- Google Drive for desktop gets AI-powered ransomware detection — www.bleepingcomputer.com — 01.10.2025 18:10
- Google Drive ransomware detection now on by default for paying users — www.bleepingcomputer.com — 01.04.2026 09:35
-
Users must install Google Drive version 114 or later to enable ransomware detection alerts.
First reported: 01.10.2025 18:101 source, 2 articlesShow sources
- Google Drive for desktop gets AI-powered ransomware detection — www.bleepingcomputer.com — 01.10.2025 18:10
- Google Drive ransomware detection now on by default for paying users — www.bleepingcomputer.com — 01.04.2026 09:35
-
The feature is available to specific Google Workspace subscriptions and personal Google accounts.
First reported: 01.10.2025 18:101 source, 1 articleShow sources
- Google Drive for desktop gets AI-powered ransomware detection — www.bleepingcomputer.com — 01.10.2025 18:10
-
Google Drive ransomware detection is now enabled by default for all paying users, including business, enterprise, education, and frontline licenses.
First reported: 01.04.2026 09:351 source, 1 articleShow sources
- Google Drive ransomware detection now on by default for paying users — www.bleepingcomputer.com — 01.04.2026 09:35
-
The feature's AI model now detects 14x more ransomware infections compared to beta, enabling faster and more comprehensive protection.
First reported: 01.04.2026 09:351 source, 1 articleShow sources
- Google Drive ransomware detection now on by default for paying users — www.bleepingcomputer.com — 01.04.2026 09:35
-
Detection alerts are sent via email and displayed in the Google Admin console for IT administrators.
First reported: 01.04.2026 09:351 source, 1 articleShow sources
- Google Drive ransomware detection now on by default for paying users — www.bleepingcomputer.com — 01.04.2026 09:35
-
File syncing is paused immediately upon ransomware detection, protecting cloud-stored documents even if local files are encrypted.
First reported: 01.04.2026 09:351 source, 1 articleShow sources
- Google Drive ransomware detection now on by default for paying users — www.bleepingcomputer.com — 01.04.2026 09:35
-
Users receive detailed restoration instructions post-attack to undo ransomware changes via the Drive restoration tool.
First reported: 01.04.2026 09:351 source, 1 articleShow sources
- Google Drive ransomware detection now on by default for paying users — www.bleepingcomputer.com — 01.04.2026 09:35
-
Admins can disable the feature in the Admin console under Apps > Google Workspace > Settings for Drive and Docs > Malware and Ransomware.
First reported: 01.04.2026 09:351 source, 1 articleShow sources
- Google Drive ransomware detection now on by default for paying users — www.bleepingcomputer.com — 01.04.2026 09:35
Similar Happenings
Microsoft 365 Backup Introduces File-Level Restore for Faster Recovery
Microsoft is rolling out an upgrade to Microsoft 365 Backup that enables file-level restore capabilities. This enhancement allows administrators to restore individual files and folders, reducing recovery time and improving efficiency. The feature is currently in public preview and is expected to reach general availability by late April or early May 2026. The upgrade is designed to protect against data loss from ransomware, accidental deletion, or data corruption, and is available exclusively to tenants with Microsoft 365 Backup already enabled. Admins with the SharePoint Backup Administrator role can use this feature to browse and search existing restore points for SharePoint sites and OneDrive accounts.