> according to a blog post published by AV provider Malwarebytes, it spread through a mechanism that scanned the Internet for computers with open Server Message Block ports

I'm still amazed so many PCs are directly online, and not trapped behind NAT or at least a firewall. Does this mean that the NHS, etc had DMZed machines on their LAN?

edit: Shodan shows over 1 million machines with SMB open