About "cybercrime" in general my feeling is there is a status quo between the criminals and countries. Something like we do not take down your economy and you do not go after us.
I know for a fact that even the most powerful organizations are powerless to have some relatively unsophisticated group caught and put behind bar.
The idea we would need conventions to start acting is a joke.