For the past three weeks, cybercriminals have targeted American cities by using the same NSA tool employed in the WannaCry attack.