WannaCry may be behind us, but fears that the crooks might create new malware from the NSA’s stash of exploits seem to be coming true