Google has made its advanced ransomware detection and file restoration features generally available for Google Drive for desktop, following a successful beta period.

The upgraded AI model now detects 14 times more ransomware infections by analyzing file changes and behavioral patterns during syncing.

Upon detection, Drive automatically pauses file syncing to prevent the malware from spreading to the cloud and other devices, while notifying users and admins via email and in-app alerts. Users can then quickly restore affected files to a previous clean state with just a few clicks. The feature is enabled by default and enhances protection especially for Windows and macOS users handling non-native file types. This update strengthens Google Workspace security against ransomware threats that target desktop environments.