Skip to content

Google Drive for Desktop Launches Real-Time Ransomware Protection

Google's new system in Drive for Desktop fights ransomware as it happens. It pauses syncing to contain damage and lets you restore files with ease.

In this image, we can see an advertisement contains robots and some text.
In this image, we can see an advertisement contains robots and some text.

Google Drive for Desktop Launches Real-Time Ransomware Protection

Google Drive for Desktop has launched a new live security system to combat ransomware attacks in real-time. This feature, now in open beta, uses AI to identify and stop attacks while they're happening, offering a new approach to cybersecurity.

Ransomware has emerged as one of the most costly cyber threats, with 21% of intrusions in 2024 being ransomware-related and an average incident cost exceeding $5 million. Google's new system in Drive for Desktop tackles this issue head-on.

The AI-driven security system monitors file activity, looking for patterns indicative of a ransomware attack, such as mass encryption or sudden file corruption. Once three to five corrupted files are detected, the system pauses syncing to the cloud, containing the damage. This proactive approach shifts focus from preventing entry to locking down exits once an attack is underway.

The system is designed to protect common file types like PDFs, Word documents, CAD drawings, and spreadsheets synced from Windows or macOS. Recovery is built-in, allowing users to restore files to their pre-attack state with just a few clicks. Google Docs and Sheets are mostly immune to ransomware, so they're not targeted by this feature.

The ransomware detection and recovery feature in Google Drive for Desktop is now available in open beta, switched on by default for most commercial Workspace plans. Admins gain visibility into attacks with alerts in the Workspace console and detailed logs. While false alarms may occur, Google argues it's better to interrupt suspicious processes than risk system-wide shutdowns. This new feature signals a significant advancement in real-time ransomware protection.

Read also:

Latest