Workshop 9 – Cybercrime as war crime?
Armed conflict may be accompanied by cyberattacks and cybercrime as experienced by Georgia in 2008 and by Ukraine since 2014, and these could be equally destructive and impactful as kinetic attacks. This raises the question of whether and under what conditions such cyberattacks and -crime could amount to war crime or other international crimes covered by domestic law or under the Rome Statute. In March 2025, the Office of the Prosecutor at the International Criminal Court published a “draft policy on cyber-enabled crimes under the Rome Statute” which also helps frame this workshop. Against this background, the purpose of this session is to identify:
- examples of cyberattacks and cybercrime that may represent underlying crimes or that may aid the commission of war crimes (and other international crimes)
- the conditions and criteria to be met to prosecute cyberattacks and cybercrime as war crimes (and other international crimes)
- obstacles encountered and possible solutions to prosecute such crimes in domestic and international courts.
- Introduction and objective of the session
- Perspectives
- Cyber-enabled crimes under the Rome Statute
- Public international law: Status quo with focus on cybercrime standards
- A look at the battlefield: perspective from Ukraine
- Discussion
- Conclusions by rapporteur
Presentations and panel discussions
- Introduction and objective of the session
- Perspectives
- Cyber-enabled crimes under the Rome Statute
- Public international law: Status quo with focus on cybercrime standards
- A look at the battlefield: perspective from Ukraine
- Discussion
- Conclusions by rapporteur
Resources
Standards
The Geneva Conventions and their Additional Protocols, https://www.icrc.org/en/law-and-policy/geneva-conventions-and-their-commentaries
Rome Statute of the International Criminal Court, https://www.icc-cpi.int/sites/default/files/2024-05/Rome-Statute-eng.pdf
The Convention on Cybercrime (Budapest Convention), https://www.coe.int/en/web/cybercrime/the-budapest-convention
United Nations Convention against Cybercrime, https://www.unodc.org/unodc/en/cybercrime/convention/home.html
Research and studies
The Tallinn Manual, The NATO Cooperative Cyber Defence Centre of Excellence, https://www.onlinelibrary.iihl.org/wp-content/uploads/2021/05/2017-Tallinn-Manual-2.0.pdf
International Criminal Court, Office of the Prosecutor (March 2025): Draft Policy on Cyber-Enabled Crimes under the Rome Statute. https://www.icc-cpi.int/sites/default/files/2025-03/250306-OTP-Policy-on-Cyber-Enabled-Crimes-for-public-consultation.pdf
Permanent Mission of Liechtenstein to the United Nations (August 2021): The Council of Advisers’ Report on the Application of the Rome Statute of the International Criminal Court to Cyberwarfare. https://www.ila-americanbranch.org/wp-content/uploads/2022/10/The-Council-of-Advisers-Report-on-the-Application-of-the-Rome-Statute-of-the-International-Criminal-Court-to-Cyberwarfare.pdf
Can cybercrimes be war crimes? Raoul Wallenberg Institute, https://rwi.lu.se/blog/can-cybercrimes-be-war-crimes/
If you have any questions related to this workshop, please contact the Octopus Conference Secretariat