Google Drive: Ransomware detection and file restoration
Google Drive receives two new security features: ransomware detection and mass file restoration.
(Image: Mongta Studio/Shutterstock.com)
Google has generally released two new security features for Google Drive: ransomware detection and mass file restoration. After a beta phase that started in September 2025, both features are now available.
The ransomware detection works in the Drive desktop client. If the client detects suspicious activity, it automatically stops synchronization. According to Google, the revised AI model recognizes 14 times more infection types than in the beta phase. The user sees a warning on their computer and also receives an email; the responsible administrator receives an email and an alert in the Security Center of the Admin Console in parallel. This is intended to prevent encrypted files from migrating to the cloud and overwriting intact versions there.
Additionally, users can now restore multiple files to a previous state at once – for example, to the point before a ransomware attack. This saves the tedious process of restoring individual files and, according to Google's announcement, should ensure that those affected do not have to pay a ransom.
Videos by heise
Enabled by default
Both features are active by default. Administrators can enable or disable them in the Admin Console under the settings for Drive and Docs at the level of individual organizational units. For the full alert functionality of the detection, Google requires at least version 114 of Drive for Desktop. In older versions, synchronization is also paused in cases of suspicion, but the desktop notification is missing.
File restoration is available to all Google Workspace customers, Workspace Individual subscribers, and users with a personal Google account. Ransomware detection, on the other hand, is limited by Google to selected plans: Business Standard and Plus, the Enterprise editions Starter, Standard, and Plus, as well as Education Standard and Plus, and Frontline Standard and Plus.
(fo)
