LevelBlue + SentinelOne Partner to Deliver AI-Powered Managed Security Operations and Incident Response. Learn More

43 Minute Watch Ziv Mador,
VP, Security Research, LevelBlue SpiderLabs

In July 2021, the Kaseya ransomware attack occurred, a wide-scale attack that impacted hundreds of organizations at once.

There is much to learn from how this particular attack was executed and how new, advanced cyber criminals might emulate or attempt to improve upon the ransomware attack’s effectiveness.

This session reviews insights from our own investigation into the Kaseya cyberattack -- including unique tricks that were used by the REvil ransomware gang. The presentation also includes examples of dark web communications between organized ransomware groups and demonstrates how they use communication as a lever to pressure victims to pay. We also dive into how organizations can utilize the dark web and threat intelligence to gain a better understanding of ransomware attacks. Lastly, the presentation provides best practices for organizations to follow to bolster their cyber resilience and prepare for the ever-growing threat of ransomware.

Related Resources

Current: resourceswebinarsransomware-attacks-and-their-reflection-on-the-dark-web
Resource: resourceswebinarsmulti-hop-phishing-kits-clouds-and-chained-attacks
Webinar

Multi-Hop Phishing: Kits, Clouds, and Chained Attacks

Current: resourceswebinarsransomware-attacks-and-their-reflection-on-the-dark-web
Resource: resourceswebinarslevelblue-ttp-briefing-q1-2026-trust-abuse-exposes-weaknesses
Webinar

LevelBlue TTP Briefing Q1 2026: Trust Abuse Exposes Weaknesses

Current: resourceswebinarsransomware-attacks-and-their-reflection-on-the-dark-web
Resource: resourceswebinarshow-we-detected-a-suspected-north-korean-it-worker
Webinar

How We Detected a Suspected North Korean IT Worker