Microsoft warns that attackers are deploying malware in ViewState code injection attacks using static ASP. NET machine keys found online.