Threat actors are exploiting exposed ASP.NET keys to deploy malware.