Young people may perform cyberattacks without fully understanding what they’re doing. How can we stop it and should they be punished?