Microsoft warned last week that the worm was behind a spike in exploits of a bug in the Windows Server service. Microsoft patched the service with an emergency fix it issued Oct. 23, shortly after it discovered a small number of infected PCs in Southeast Asia. Trend Micro has spotted infected IP addresses on the networks of Internet service providers in the U.S., China, India, the Middle East, Europe and Latin America. The worm first appeared about a week and a half ago, and began spreading in earnest just before Thanksgiving.”]
Source: https://www.csoonline.com/article/2123507/new-windows-worm-builds-massive-botnet.html

