Unfortunately this is significantly harder than you might think. The perps tend to be citizens of countries who happily turn a blind eye to their activities so

Unfortunately this is significantly harder than you might think. The perps tend to be citizens of countries who happily turn a blind eye to their activities so long as they aren't infecting their domestic systems. What interest do Russia or post-Soviet states have in prosecuting cybergangs that destabilize Western business and infrastructure? I mean, maybe we can create such interests/motivations, but now we are talking about a major geopolitical issue. If major infrastructure continues to be hit I think we will eventually see this happen, but we absolutely cannot count on foreign states to 'do the right thing.'