{"id":181962,"date":"2025-10-01T07:06:11","date_gmt":"2025-10-01T07:06:11","guid":{"rendered":"https:\/\/www.newsbeep.com\/au\/181962\/"},"modified":"2025-10-01T07:06:11","modified_gmt":"2025-10-01T07:06:11","slug":"block-ransomware-proliferation-and-easily-restore-files-with-ai-in-google-drive","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/au\/181962\/","title":{"rendered":"Block ransomware proliferation and easily restore files with AI in Google Drive"},"content":{"rendered":"

Ransomware remains one of the most damaging cyber threats facing organizations today. These attacks can lead to substantial financial losses, operational downtime, and data compromise, impacting organizations of all sizes and industries, including healthcare, retail, education, manufacturing, and government. In fact, intrusions related to ransomware represented\u00a021%<\/a>\u00a0of all the intrusions observed by Mandiant last year, with an average ransomware or extortion incident cost exceeding\u00a0$5M<\/a>.<\/p>\n

While native Workspace documents (e.g., Google Docs, Sheets) are not impacted by ransomware and ChromeOS has\u00a0never<\/a>\u00a0had a ransomware attack, ransomware is a persistent threat for other file formats (e.g., PDF, Microsoft Office) and desktop operating systems (e.g., Microsoft Windows).\u00a0That’s why we’re enhancing Google Drive for desktop with AI-powered ransomware detection to automatically stop file syncing and allow users to easily restore files with a few clicks.<\/p>\n

\"\"<\/p>\n

Users see this notification in Drive for desktop when ransomware has been detected on their device, automatically pausing file syncing to the cloud.<\/p>\n

The traditional approach to fighting ransomware falls short<\/p>\n

To-date, ransomware has largely been treated as an antivirus (AV) issue: seek out potentially malicious code before it’s activated and quarantine it. This is an important and necessary defense, but with the\u00a0 continued success of ransomware attacks over the last few years, it’s clear this approach is insufficient. Especially when ransomware is no longer just an IT issue; it has become increasingly\u00a0 disruptive for core business operations, such as manufacturing lines, retail operations, or hospital services. We believe that it’s paramount to find a better way to fight ransomware.<\/p>\n

What we’re announcing today is an entirely new layer of defense. While AV solutions continue their work to stop ransomware from getting in, we’ve built the protections to stop it from being effective once it is, inevitably, through the door. Our AI-powered detection in\u00a0Drive for desktop<\/a>\u00a0identifies the core signature of a ransomware attack – an attempt to encrypt or corrupt files en masse – and rapidly intervenes to put a protective bubble around a user’s files by stopping file syncing to the cloud before the ransomware can spread. This helps to stop ransomware from doing what it must to be most effective: corrupt important files and make them unusable.<\/p>\n

In addition, the built-in virus detection in Drive, as well as in Gmail and Chrome, helps to prevent ransomware from spreading to other devices with the aim of taking over an entire network. As a result, these defenses can help organizations in industries such as healthcare, retail, education, manufacturing, and government from being disrupted by the types of ransomware attacks that have been so destructive up to this point.<\/p>\n

How it works<\/p>\n

Drive for desktop<\/a>, available on Windows and macOS, is used to efficiently and securely sync user files and documents to the cloud. It can be also used as a critical line of defense against malware and ransomware attacks. With that in mind, we’ve built a specialized AI model, trained on millions of real-world ransomware samples, to look for signals that a file has been maliciously modified. The detection engine adapts to novel ransomware by continuously analyzing file changes and incorporating new threat intelligence from VirusTotal. When Drive detects unusual activity that suggests a ransomware attack, it automatically pauses syncing of affected files, helping to prevent widespread data corruption across an organization’s Drive and the disruption of work.<\/p>\n

Users then receive an alert on their desktop and via email, guiding them to restore their files. Unlike traditional solutions that require complex re-imaging or costly third-party tools, the intuitive web interface in Drive allows users to easily restore multiple files to a previous, healthy state with just a few clicks. This rapid recovery capability helps to minimize user interruption and data loss, even when using traditional software such as Microsoft Windows and Office.<\/p>\n

\"\"<\/p>\n

Users can easily restore multiple files to a previous, healthy state with Google Drive.<\/p>\n

For IT teams, administrators maintain the visibility and control they need by receiving alerts in the Admin console for detected ransomware activity. Administrators can leverage the\u00a0security center<\/a>\u00a0to review the audit log with detailed information. This new capability is on by default for all customers, but administrators have the controls to disable detection and restoration capabilities for end users, if needed. As a reminder, Google\u00a0does not<\/a>\u00a0use customer data, including prompts and generated outputs, for advertising purposes or to train or fine-tune any of its generative AI models without customer permission or instruction.<\/p>\n

\"\"<\/p>\n

An alert in the Admin console showing a notification for detected ransomware<\/p>\n

“By seamlessly integrating AI-powered ransomware detection and restore capabilities into Drive, Google is helping organizations with an innovative way to avoid an increasingly common and increasingly dangerous threat while also giving end users the ability to continue working. This is great not only for Google Workspace users but individuals and companies who may use other office productivity suites as well” \u2013 Bob O’Donnell, President and Chief Analyst, TECHnalysis Research.<\/p>\n

Next steps<\/p>\n

Rolling out starting today in an open beta, this capability is one of the many enterprise-grade security controls in Drive that provide robust protection of sensitive data and business continuity for organizations of all sizes. It is included in most Workspace commercial plans at no additional cost. Consumers also benefit from the file restoration capability at no additional cost.\u00a0Learn more<\/a>\u00a0about these new capabilities and\u00a0d<\/a>ownload Drive for desktop<\/a>\u00a0today.<\/p>\n","protected":false},"excerpt":{"rendered":"Ransomware remains one of the most damaging cyber threats facing organizations today. These attacks can lead to substantial…\n","protected":false},"author":2,"featured_media":181963,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[282,64,63,60497,73483,28619,284,14279,116710,34616,21039,113,116711,13457,20237,6385,109655,62991,116709,105,7116],"class_list":["post-181962","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-artificial-intelligence-ai","tag-au","tag-australia","tag-cloud-security","tag-cloud-storage","tag-cyber-threat","tag-cybersecurity","tag-data-breach","tag-data-encryption","tag-data-protection","tag-enterprise-security","tag-google","tag-google-drive","tag-google-workspace","tag-macos","tag-malware","tag-microsoft-office","tag-network-security","tag-ransomware","tag-technology","tag-windows"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/181962","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/comments?post=181962"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/181962\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media\/181963"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media?parent=181962"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/categories?post=181962"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/tags?post=181962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}