The only way to prosecute them would be from above. Cluster devices would do the job.
I don’t know. I’ve always thought we should unplug certain countries until they get serious about internet crime control.
Anyway, I’m sure there are ways to hold their countries responsible.