I watched today an interesting video by a youtuber , he is an ex-Microsoft guy and he talked about that the ransom-ware was probably leaked by the NSA it self as most of the exploits were discovered by NSA and they made the patches ! to their high classified machines but Microsoft still did not do anything until found by one of their internal employees . This is why Microsoft patches for the NSA hacking tools there were no sources on it !!!