Researchers from security software maker Avast recorded 57,000 infections in 99 countries -- with Russia, Ukraine and Taiwan the top targets.
Cyber security experts say the malicious software, known as ransomware, entered organisations when employees clicked on email attachments. It then spread internally when employees shared files. Victims were told to pay between $300 to $600 to restore access, or have their data destroyed.
Cyber security experts say hackers appear to have stolen the software from the U-S National Security Agency (NSA) , who used it to exploit a weakness in Microsoft systems for its own intelligence-gathering purposes.
The tool was then leaked to the internet by a group of hackers known as The Shadow Brokers several weeks ago.
At the time, Microsoft released software updates for the vulnerabilities, but not everyone installed the fixes, or they continued using the older, unprotected versions of Windows.
Prime Minister Malcolm Turnbull's special advisor on cyber-security, (mr)Alastair MacGibbon, says no Australian organisations appear to be affected so far, but the risk remains.