How does cyberthreat attribution help in practice?

Why it would be useful to identify the specific hacking group behind a malware file found in your infrastructure.