ShadowPad malware is being delivered through an actively exploited WSUS vulnerability, granting attackers full system access.