Microsoft Says Attackers Use Exposed ASP.NET Keys to Deploy Malware

Threat actors also use machine keys from publicly available sources in code injection attacks to create malicious ViewStates (used by ASP.NET Web Forms to control state and preserve pages) by attaching crafted message authentication code (MAC).