Spanish CERT has announced it's a worm that's exploiting the EternalBlue NSA exploit (in SMB/Windows file sharing).