Or anti-virus companies selling more of their wares.

This kind of large scale attack is perfect advertising for anyone selling protection against such attacks.

Spy agencies have no interest in selling protection.