About "cybercrime" in general my feeling is there is a status quo between the criminals and countries. Something like we do not take down your economy and you do not go after us.

I know for a fact that even the most powerful organizations are powerless to have some relatively unsophisticated group caught and put behind bar.

The idea we would need conventions to start acting is a joke.

Distantly related: similar to the local councils here in the UK that don't go after the obvious and prolific drug-front barbers and takeaways, because they pay business rates (local business tax) and probably employee taxes too for just enough staff for it to be believable.