Two prominent international law experts think the recent malware worm, if actually tied to Russia, constitutes a violation of the Geneva convention.

“In the case of NotPetya, significant improvements have been made to create a new breed of ultimate threat," researcher Bernhards Blumbergs said.

International law says governments who've been cyberattacked don't have to reveal the evidence underlying the response they choose.