A "state actor" was behind the cyberattack that hit over 12,000 devices in around 65 countries, according to NATO.