Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW
  • CPE

Ransomware Protection for IBM i with Powertech Antivirus

Fortra
06/12/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


Ransomware protection is a critical component in securing your IBMI servers. The IBMI has always had a reputation for being invincible against these types of attacks. However, we've seen many systems attacked and damaged by ransomware. The all-too-common practice of sharing IFS directories, including the root directory, coupled with overprivileged users, has made the system vulnerable and created an easy target for threat actors. These weak points need to be guarded with the correct layers of protection. During a ransomware attack, any available discoverable share can be taken advantage of whether or not it's mapped as a drive by an end user. These attacks use the authority of the compromised user. Stopping these attacks can be very difficult because the actions being performed are valid actions against your files, and sometimes difficult to detect until it's too late. Removing the file shares can be helpful. However, if they're needed for valid business transactions, it's not always the best solution. Powertech Antivirus with AntiRansomware Protection can evaluate those actions for you and determine if the user's actions are malicious or not. Malicious actions can be blocked so that the attack is not allowed to continue, effectively reducing the blast zone of the attack and allowing you to take quick action to remediate the breach and protect your IBMI server.

TL;DR

  • IBM i systems are no longer immune to ransomware attacks, with shared IFS directories and overprivileged users creating exploitable vulnerabilities that threat actors actively target.
  • Ransomware attacks leverage compromised user credentials to perform valid file operations that are difficult to detect until significant damage has occurred, making traditional security approaches insufficient.
  • Powertech Antivirus with AntiRansomware Protection evaluates file system actions in real-time to distinguish malicious behavior from legitimate business operations, blocking attacks before they can spread across the environment.

Summary

This demonstration addresses the growing ransomware threat to IBM i servers, challenging the long-held belief that these systems are invincible to such attacks. The video explains how common misconfigurations—particularly shared IFS directories and overprivileged user accounts—create vulnerabilities that ransomware can exploit. Fortra's Powertech Antivirus with AntiRansomware Protection is presented as a solution that monitors file system actions in real-time, distinguishing between legitimate business operations and malicious activity. By blocking suspicious actions before they can spread, the solution aims to contain attacks quickly and minimize damage to IBM i environments. The approach recognizes that simply removing file shares isn't always practical for organizations that depend on them for business operations, offering instead a behavioral detection layer that works alongside existing security controls.

Chapters

0:00 - The Ransomware Threat Landscape
0:17 - IBM i Vulnerability Reality
0:44 - How Ransomware Exploits IBM i
1:16 - Powertech AntiRansomware Protection

Key Quotes

0:17 "The IBMI has always had a reputation for being invincible against these types of attacks."
0:22 "However, we've seen many systems attacked and damaged by ransomware."
0:26 "The all-too-common practice of sharing IFS directories, including the root directory, coupled with overprivileged users, has made the system vulnerable and created an easy target for threat actors."

FAQ

Why are IBM i systems vulnerable to ransomware if they have a reputation for being secure?

While IBM i has strong built-in security features, common misconfigurations like sharing the IFS root directory and granting excessive user privileges create attack vectors. Ransomware exploits these weaknesses by using compromised user credentials to perform valid file operations that traditional security controls don't flag as suspicious.

How does Powertech Antivirus detect ransomware without blocking legitimate business operations?

The solution uses behavioral analysis to evaluate file system actions in real-time, distinguishing between normal business transactions and malicious patterns characteristic of ransomware. When suspicious activity is detected, it blocks the actions immediately to contain the attack while allowing legitimate operations to continue.


Categories:
  • » Data Protection » Backup & Recovery
  • » Cybersecurity » Endpoint Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Endpoint Management
  • Data Protection
  • Threat Intelligence
  • Technical Deep Dive
  • Demo
  • IBM i security
  • ransomware protection
  • IFS directory security
  • privileged access management
  • behavioral threat detection
  • file system monitoring
  • endpoint protection for IBM i
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Ransomware Protection for IBM i with Powertech Antivirus

              View CPE Certificates

              Upcoming 360 View Events

              • Nov
                19

                Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection

                11/19/202601:00 PM ET
                More events

                XStreaminars (watch here)

                • Oct
                  27

                  Illumio: See It. Stop It. Contain It. Lateral Movement Defense in Action

                  10/27/202611:00 AM ET
                  • Oct
                    28

                    EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure

                    10/28/202601:00 PM ET
                    • Nov
                      10

                      Zendesk: From AI Readiness to Results: A Framework for Transforming IT Service

                      11/10/202601:00 PM ET
                      • Nov
                        12

                        Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision

                        11/12/202601:00 PM ET
                        More events

                        Industry Events (Sponsor Hosted)

                        • Oct
                          27

                          Maximize the Value and Security of Your Microsoft Investment

                          10/27/202611:00 AM ET
                          • Oct
                            27

                            The HUMAN Experience: Real-Time Insights into Page Intelligence

                            10/27/202601:00 PM ET
                            • Oct
                              28

                              Ensuring Universal AI Security Across the APAC Region

                              10/28/202601:00 AM ET
                              • Oct
                                28

                                EMEA: Ensuring Comprehensive AI Security Across All Fronts

                                10/28/202606:00 AM ET
                                • Oct
                                  28

                                  Ensuring Comprehensive AI Security Across the Americas

                                  10/28/202601:00 PM ET
                                  More events

                                  Upcoming Webinar Calendar

                                  • 10/27/2026
                                    11:00 AM
                                    10/27/2026
                                    Maximize the Value and Security of Your Microsoft Investment
                                    https://www.truthinit.com/index.php/channel/2178/maximize-the-value-and-security-of-your-microsoft-investment/
                                  • 10/27/2026
                                    11:00 AM
                                    10/27/2026
                                    Illumio: See It. Stop It. Contain It. Lateral Movement Defense in Action
                                    https://www.truthinit.com/index.php/channel/2182/see-it-stop-it-contain-it-lateral-movement-defense-in-action/
                                  • 10/27/2026
                                    01:00 PM
                                    10/27/2026
                                    The HUMAN Experience: Real-Time Insights into Page Intelligence
                                    https://www.truthinit.com/index.php/channel/2139/the-human-experience-real-time-insights-into-page-intelligence/
                                  • 10/28/2026
                                    01:00 AM
                                    10/28/2026
                                    Ensuring Universal AI Security Across the APAC Region
                                    https://www.truthinit.com/index.php/channel/2125/ensuring-universal-ai-security-across-the-apac-region/
                                  • 10/28/2026
                                    06:00 AM
                                    10/28/2026
                                    EMEA: Ensuring Comprehensive AI Security Across All Fronts
                                    https://www.truthinit.com/index.php/channel/2127/emea-ensuring-comprehensive-ai-security-across-all-fronts/
                                  • 10/28/2026
                                    01:00 PM
                                    10/28/2026
                                    Ensuring Comprehensive AI Security Across the Americas
                                    https://www.truthinit.com/index.php/channel/2126/ensuring-comprehensive-ai-security-across-the-americas/
                                  • 10/28/2026
                                    01:00 PM
                                    10/28/2026
                                    EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure
                                    https://www.truthinit.com/index.php/channel/2179/envzero-near-zero-time-to-resolution-live-agentic-remediation-for-failed-and-drifted-infrastructure/
                                  • 11/04/2026
                                    11:00 AM
                                    11/04/2026
                                    Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions
                                    https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
                                  • 11/05/2026
                                    02:00 PM
                                    11/05/2026
                                    HUMAN Dialogue: Embracing the Rise of the Empowered AI Consumer.
                                    https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-empowered-ai-consumer/
                                  • 11/05/2026
                                    02:00 PM
                                    11/05/2026
                                    Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption
                                    https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
                                  • 11/10/2026
                                    01:00 PM
                                    11/10/2026
                                    Zendesk: From AI Readiness to Results: A Framework for Transforming IT Service
                                    https://www.truthinit.com/index.php/channel/2191/zendesk-from-ai-readiness-to-results-a-framework-for-transforming-it-service/
                                  • 11/10/2026
                                    01:00 PM
                                    11/10/2026
                                    Agentic Shopping Trends: Insights for the 2026 Holiday Season
                                    https://www.truthinit.com/index.php/channel/2219/agentic-shopping-trends-insights-for-the-2026-holiday-season/
                                  • 11/12/2026
                                    01:00 PM
                                    11/12/2026
                                    Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision
                                    https://www.truthinit.com/index.php/channel/2192/leaving-vmware-means-leaving-vsan-your-vmware-exit-is-really-a-storage-decision/
                                  • 11/19/2026
                                    01:00 PM
                                    11/19/2026
                                    Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection
                                    https://www.truthinit.com/index.php/channel/2076/securing-the-microsoft-enterprise-strengthening-configuration-management-identity-security-and-data-protection/
                                  • 11/19/2026
                                    01:00 PM
                                    11/19/2026
                                    Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents
                                    https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
                                  Truth in IT
                                  • Sponsor
                                  • About Us
                                  • Terms of Service
                                  • Privacy Policy
                                  • Contact Us
                                  • Preference Management
                                  Desktop version
                                  Standard version