Galushevich was the first prosecuted for the denial-of-service attacks, and others are suspected to still remain at-large in Russia. My bet: more students, no soldiers.
These attacks on the Baltic nation of Estonia were significant. And Estonia's Internet and infrastructure is somewhat unique. Most of the IT and communication infrastructure in Estonia was built after the 1991 breakup of the Soviet Union. And much of this infrastructure is heavily dependent on the Internet -- much more so than that of most other nations. In addition, because it's a small, concentrated nation, the Internet access to the entire country can easily be choked. And when the Web went down, the flow of consumer staples -- food -- was hampered.
Nonetheless, it wasn't a war, but a protest. And I'll wager that when we do see the world's first "cyberwar," we will witness a nation's communications blacked out through the destruction of satellites or the tactical crippling of telecommunication lines. We'll see attempts at freezing financial networks, and probably a swipe at the power grid. This will all happen very quickly before real troops advance (not botnets), and real bombs are dropped (not the logic kind).