"The model, which the Chocolate Factory boasts has been "trained on millions of real-world ransomware samples," looks for signs that may indicate ransomware - such as attempts to encrypt or corrupt large numbers of files - and then pauses syncing of affected files, helping prevent wider spread. Drive for desktop is Google's sync app for Windows and macOS that keeps local files in step with cloud storage."
"This Drive for desktop tool then sends an email alert or a desktop notification to the Drive user, guiding them to restore their files via "just a few clicks," Googlers Luke Camery and Kristina Behr said in a Tuesday blog. The recovery capability works across "traditional software" including Microsoft Windows and Office, the duo added. Plus, the model continuously analyzes file changes, and pulls in threat intelligence from VirusTotal, which, at least in theory, should help it detect even new and novel malware variants and attack behaviors."
Google introduced an AI-driven ransomware detection feature for Drive for desktop that pauses syncing when it detects suspicious activity to limit further damage. The model was trained on millions of ransomware samples and looks for behaviors like mass file encryption or corruption. The tool sends email or desktop alerts and guides users through file restoration with a few clicks. The detection continuously analyzes file changes and leverages VirusTotal threat intelligence to identify new variants. The capability is on by default, available in open beta, included in most Workspace commercial plans, and administrators can disable or receive alerts via the Admin console.
Read at Theregister
Unable to calculate read time
Collection
[
|
...
]