This session will focus on case studies of real cyber attacks done by APT41 and Ransomware Revil. Victims' views will be presented, and attendees will be walked through a real example of an organisation under attack, and their response. Attribution and how to track down attackers will be presented. This session stems from executive to technical decisions and obstacles organisations are facing with the threat actors. The closure will point to collaborative work with the FBI/DoJ that led to the prosecution of the threat actors.