Google Drive for desktop is rolling out an AI-powered ransomware detection feature, currently in open beta, with general availability expected by the end of 2025.

This feature uses a model trained on millions of samples and incorporates threat intelligence from VirusTotal to adapt to emerging ransomware threats.

It detects malicious activity in files, especially targeting Office documents and PDFs, and not Google-native files like Docs or Sheets.

When ransomware activity is detected, users are notified, and they can restore affected files to previous healthy states, enhancing data security.

The ransomware protection feature is enabled by default for most Google Workspace plans, with administrators able to customize or disable detection and alerts via the Admin console.

Initially launched as an open beta, this feature is free for most Workspace business customers and individual users, with full detection capabilities available only on paid plans.

The system creates a 'protective bubble' around files, halting sync processes to prevent the spread of ransomware, and provides visibility into detection events for administrators.

While the feature is limited to Drive for desktop on Windows and Mac, it does not currently detect infections on files stored outside of Drive.

Google emphasizes that this AI tool is an additional layer of defense, complementing traditional antivirus solutions, and does not guarantee prevention of ransomware attacks.

Ransomware remains a significant threat, accounting for 21% of cyber intrusions in 2024, with an average cost exceeding $5 million per incident, impacting various sectors.

Despite advanced detection tools, ransomware attacks continue to cause billions in damages annually, highlighting the ongoing cybersecurity challenge.

This development marks a major step forward in AI-driven cybersecurity for cloud storage, although no specific release date has been announced.