Google Enables Drive Ransomware Detection by Default for Paid Workspace Users
Summary
Google has enabled Drive’s ransomware detection by default for paid Workspace customers. It pauses desktop syncing when it detects ransomware-encrypted files, alerts users and admins, and offers file recovery; local files may still be encrypted.
Key points
- Google Drive’s AI-powered ransomware detection is generally available and enabled by default for eligible paid Workspace organizations.
- When ransomware-encrypted files are detected during desktop syncing, Drive pauses syncing and alerts the user and administrators.
- Google says its updated AI model detects 14 times more infections than during the beta; this is a company-reported comparison.
- Drive-stored files can be restored with the Drive restoration tool, but the feature does not prevent files on an affected computer from being encrypted.
- Admins can disable detection in the Admin console. Drive for desktop version 114 or later is required for detection alerts; syncing can still be paused on older versions.
Article Details
- Event Type
- Google made its AI-powered Google Drive ransomware detection generally available and enabled it by default for eligible paid Google Workspace customers.
- Impact
- When ransomware-encrypted files are detected during desktop syncing, syncing is paused and users and administrators are alerted. Drive-stored documents can be restored with the Drive restoration tool, but files on the affected local device may still be encrypted. Google says its updated AI model detects 14 times more infections than during beta.
Vendors
Products
Drive for desktopAdmins can disable detection in the Admin console and must deploy Drive for desktop v.114+ for detection alerts; OneDrive and Dropbox offer comparable features.Google DriveGoogle has made its AI-powered Google Drive ransomware detection generally available and enabled it by default for paid Google Workspace customers.Google WorkspaceGoogle has made its AI-powered Google Drive ransomware detection generally available and enabled it by default for paid Google Workspace customers.