The expansion of Internet of Things (IoT) technologies and the growing integration of digital systems with physical infrastructure have created new forms of cyber and cyber-physical operations in armed conflicts. These developments raise important legal questions regarding the classification of IoT-based operations as war crimes, the scope of individual criminal responsibility, and the attribution of criminal conduct in digital environments. Moreover, cyber anonymity, the use of semi-autonomous systems, the involvement of private actors, and the difficulty of distinguishing between technical, state, and criminal attribution have generated significant challenges for the application of international criminal law. This study examines the applicability of international criminal law, particularly the Rome Statute of the International Criminal Court, to IoT-based operations in armed conflicts and analyzes the legal foundations for attributing criminal responsibility to individuals involved in such operations. The research adopts a descriptive-analytical approach based on library resources and doctrinal analysis of the Rome Statute. The findings demonstrate that conduct such as indiscriminate cyber operations, attacks against civilian infrastructure and medical facilities, and large-scale destruction of property through IoT systems may constitute war crimes under international criminal law. The study further shows that the principal challenge lies in attributing criminal responsibility and reconstructing chains of decision-making and effective control within interconnected digital environments. It concludes that technological developments have transformed the organization and execution of military operations and that an effective legal response requires strengthened attribution mechanisms, enhanced digital evidence standards, and the preservation of meaningful human control in IoT-based operations.