E-Business
Kaspersky New Threat Attribution Engine Connects New Attacks to APT Groups in Seconds
Kaspersky has released its new threat intelligence solution aimed at helping SOC analysts and incident responders attribute malware samples to previously revealed APT groups.
Using its proprietary method, Kaspersky Threat Attribution Engine matches a discovered malicious code against one of the biggest databases of malware in the industry, and, based on the code similarities, links it to a specific APT group or campaign. This information helps security experts prioritize high-risk threats over less serious incidents.
By knowing who is attacking their company, and for what purpose, security teams can quickly come up with the most tailored incident response plan for the attack.
However, unveiling the actor who is behind an attack is a challenging task, which requires not only a large amount of collected threat intelligence (TI) but also the right skills to interpret it.
To automate the classification and identification of sophisticated malware, Kaspersky presents its new Kaspersky Threat Attribution Engine.
The solution has evolved from an internal tool used by Kaspersky’s Global Research and Analysis Team (GReAT), a world-renowned team of experienced threat hunters. For example, Kaspersky Threat Attribution Engine was leveraged in the investigation of the iOS implant LightSpy, TajMahal, ShadowHammer, ShadowPad and Dtrack campaigns.
In order to determine if a threat is related to a known APT group or campaign and identify which one, Kaspersky Threat Attribution Engine automatically decomposes a newly found malicious file into small binary pieces.
After that, it compares these pieces with the ones from Kaspersky’s collection of more than 60,000 APT-related files. For more accurate attribution, the solution also incorporates a large database of whitelisted files. This significantly improves the quality of the malware triage and attack identification and facilitates incident response.
Depending on how similar the analysed file is to the samples in the database, Kaspersky Threat Attribution Engine calculates its reputational score and highlights its possible origin and author with a short description and links to both private and public resources, outlining the previous campaigns.
Kaspersky APT Intelligence Reporting subscribers can see a dedicated report on tactics, techniques and procedures used by the identified threat actor, as well as further response steps.
Kaspersky Threat Attribution Engine is designed to be deployed on a customer’s network, “on premise”, rather than in a third-party cloud environment. This approach grants a customer control over data sharing.
In addition to the threat intelligence available “out of the box”, customers can create their own database and fill it with malware samples found by in-house analysts. That way, Kaspersky Threat Attribution Engine will learn to attribute malware analogous with those in a customer’s database while keeping this information confidential.
“There are several ways to reveal who is behind an attack. For example, analysts can rely on artifacts in the malware, which can determine attackers’ native language, or IP addresses that suggest where they might be located. However, it’s not a problem for a skilled attacker to manipulate these, leading a researcher to become bogged down in an investigation, as we have already seen in many cases.
“Our experience shows that the best way is to look for shared code that the samples have in common with others identified in previous incidents or campaigns. Unfortunately, such manual investigation may take days or even months.
“To automate and speed up this task, we created Kaspersky Threat Attribution Engine, which is now available for the company’s customers,” comments Costin Raiu, Director Global Research & Analysis Team at Kaspersky.
Galaxy Backbone (GBB) aligns with and celebrates the successful announcement by the Office of the Head of the Civil Service of the Federation on the achievement of a Paperless Civil Service, a significant milestone in Nigeria’s public sector reform and digital transformation agenda.
The milestone was formally highlighted at a press briefing led by the Head of the Civil Service of the Federation, Mrs. Didi Esther Walson-Jack, who commended Galaxy Backbone for its sustained support and contribution throughout the implementation of the programme.
GBB has played a critical role in enabling this transition by providing secure, scalable, and shared digital infrastructure that supports the digitisation of government processes across Ministries, Departments and Agencies (MDAs). Through the 1Government Cloud, MDAs have been empowered to migrate from paper-based workflows to digital platforms, improving efficiency, collaboration, data security, and service delivery across the Federal Civil Service.
In addition, GovMail, GBB’s secure government email platform, has strengthened official communication, enhanced records management, and reinforced cybersecurity standards—key pillars in sustaining a paperless operating environment.
Galaxy Backbone acknowledges the collective efforts of the Office of the Head of the Civil Service of the Federation, Permanent Secretaries, Directors of ICT, consultants, partners, and dedicated public servants whose commitment and collaboration ensured the smooth delivery of this initiative.
The Managing Director/Chief Executive Officer of Galaxy Backbone, Prof. Ibrahim Adeyanju, was represented at the press briefing by Akintayo Bamisaye, Acting Group Head, Research, Digital Innovation and Skills Department (RDIS).
GBB describes the achievement as a strong close to 2025 and reaffirms its commitment to supporting the Federal Government in building a modern, efficient, and digitally enabled public service.
At the close of 2025, Temidayo Ojo, the CEO of Jumia Nigeria, reflected on a year-end shopping season that points to the growing maturity of the country’s e-commerce market. “Black Friday is no longer a single, short-lived spike in activity,” he said.
“It has become a familiar, anticipated moment in the retail calendar, where consumers shop deliberately and with confidence.”
Preliminary KPIs for the two months ended November 30, 2025, show strong year-on-year growth in both orders and Gross Merchandise Value (GMV), with GMV growth outpacing order growth. This indicates that customers are placing fuller, more considered baskets rather than shopping in fragmented transactions. Nigeria ranked among Jumia Group’s better-performing markets, with engagement remaining steady throughout the Black Friday period rather than spiking briefly and tapering off.
A key factor behind this performance is the growing familiarity of consumers with online shopping. Customers are increasingly leveraging platform features such as saved carts, brand stores, and price comparison tools to plan purchases in advance. This trend suggests that digital commerce is becoming embedded in everyday habits rather than being viewed as a one-off event.
Ojo also highlighted the role of Jumia’s JForce network in connecting digital commerce to local communities. “Our agents are critical to ensuring that customers across Nigeria, including secondary cities and smaller communities, have access to variety, consistent pricing, and reliable delivery,” he said. “During peak periods like Black Friday, JForce agents can respond faster, serve more customers efficiently, and build stronger local relationships. This isn’t just a distribution channel—it’s a pathway to sustainable income and inclusion.”
Reflecting on the overall performance, the CEO concluded: “What we’re seeing this year-end is steady engagement across categories, stronger consumer confidence, and partners like our JForce agents benefiting from increased activity.
“It confirms that Nigeria’s e-commerce ecosystem is maturing, growing in a more structured and resilient way. As the December Holiday Sale continues, we expect these patterns of familiarity, trust, and participation to sustain momentum and drive both commerce and community impact across the country.”
Galaxy Backbone Limited (GBB) has been ranked first overall in the 2025 Federal Government Website Performance Scorecard.
This is a landmark achievement for Nigeria’s digital economy.
The ranking, conducted by the Bureau of Public Service Reforms (BPSR), is the definitive benchmark for digital excellence and transparency across all Ministries, Departments, and Agencies (MDAs).
Professor Ibrahim Adepoju Adeyanju, managing director and CEO of Galaxy Backbone, received the award during a ceremony in Abuja.
He described the feat as a validation of the agency’s“Nigeria First”data sovereignty strategy and its relentless pursuit of service excellence.
This recognition comes as the Federal Government intensifies its push to achieve a fully paperless civil service by December 31, 2025.
GBB has been the primary architect of this transition through its 1Gov Enterprise Content Management (ECM) platform, which now hosts the operations of almost all federal MDAs.
The award adds to a growing list of accolades for Galaxy Backbone in 2025, following its recent win of the “International Standard Excellence Award for Best IT Service Provider.”
As the central hub for government shared services, GBB’s performance serves as a blueprint for other agencies currently undergoing digital transformation.
With its expanded fiber-optic backbone now covering over 13 states and its secure cloud solutions, Galaxy Backbone remains the cornerstone of Nigeria’s vision to become a leading digital nation by the end of the decade.
FIRS Rebrands as Nigeria Revenue Service, as New Tax Laws Take Effect
Galaxy Backbone Celebrates the Federal Government’s Paperless Civil Service Milestone
Banks to Impose N50 Stamp Duty on Transfers of N10,000 and Above from January 1
How to Use the Correlation of Gold with Other Trading Assets in the Forex Market
How Nigeria’s New Tax Law Could Redefine Risk in the Banking Sector
Nigeria Records Highest Weekly Cyberattacks in Africa — Report
Financial Sector Faced AI, Blockchain and Organised Crime Threats in 2025 – Report
Cyber Tsunami Hits Nigeria as Breaches Surge 1,047%, esentry Q3 Report Reveals
Banks quietly move to enforce new ₦50 transfer levy from Jan. 1
Report Reveals Half of 2025’s Compromised Passwords were Already Leaked
Telecom3 days agoNnaemeka Ani – The Architect of ‘Code and Courage’
E-Financial3 days agoNigeria’s N58.18trn Budget and Rising Cost of Deficit Governance
Telecom3 days agoMTN Nigeria Appreciates Partners, Customers at Lagos Prestige Experience
Telecom2 days agoT2 Faces NCC Probe in Benue Over Major Service Outage in 9 LGAs
Telecom2 days agoMTN Nigeria Crowns Ayo Benzi Winner of Next Afrobeats Star
E-Business2 days agoJumia CEO says Black Friday Signals Nigeria’s E-Commerce Maturity
E-Financial2 days agoGTCO Secures Regulatory Approvals to Raise N10bn in Private Placement
Telecom2 days agoNCC Grants 45 Days for Telecoms Firms to Fix Unapproved Shareholding Changes