Malwarebytes detected webshells on close to 1K unique machines already.
https://blog.malwarebytes.com/exploits-and-vulnerabilities/2021/03/patch-now-exchange-servers-attacked-by-hafnium-zero-days/
Comme le soleil, les machines ne se couchent jamais.