The core of Ukraine’s war crime argument is that Russian cyber attacks have directly accompanied shellings and bombings of critical infrastructure companies, creating real world damage that impacts civilians.
Security analysts with Microsoft have been tracking recent Russian cyber attacks and have seen a pattern of their use to support real world missile strikes and seizures of facilities, with destructive attacks sometimes used as a part of the overall strategy.
The pattern of the cyber attacks fit Russia’s general intentions and past actions, but seemed restrained. The banks and government websites were ultimately only inconvenienced for a few hours.