New evidence has revealed that at least one cybercrime group was using the same NSA exploits to infect computers with malware that mined for the Monero cryptocurrency. The only reason nobody noticed these attacks is that this particular malware named Adylkuzz did not destroy user data and was programmed to close down SMB ports. This had the secondary effect of protecting some previously vulnerable computers from the virulent WannaCry attacks that took place over the last 4-5 days. The three Monero wallets used to collect the proceeds for the mining operations have netted the group at least $43,000, according to Proofpoint security researcher Kaffeine.
Source: https://www.bleepingcomputer.com/news/security/adylkuzz-cryptocurrency-miner-may-have-saved-you-from-the-wannacry-ransomware/