Google Drive can now detect ransomware and roll back your files

Google announced anti-ransomware protections for paying cloud customers in September 2025.

The new feature uses a specialized AI model that detects 14 times more ransomware infections than earlier versions.

When Drive for Desktop detects ransomware-like activity it stops syncing, notifies users and admins, and lets customers restore files from Drive.

The protections are enabled by default for end users and IT admins and require Drive for Desktop v114 or later.