"We know that some customers running these versions of Windows no longer receive major support (mainstrean support). That means they do not receive Security Update security updates released in March. Due to the photos. Due to the attack on customers, we decided to release Security Update for users who did not receive automatic updates (only receive Custom Support), applied to Windows XP, Windows 8 and Windows Server 2003 ". Microsoft said. "This decision is based on an assessment of the situation, with our key principle of protecting the customer ecosystem first".
Microsoft also said the attack uses phishing techniques that include infected files, so users should avoid opening files from untrusted sources.