The attack appears to be indiscriminate in its targets, with compromised machines running ASP, ASP.NET, ColdFusion, JSP, and PHP, and no doubt others.

RTFA.

And linking to random n00bs chatting in the asp.net forums is not evidence. Obviously they're only going to be talking about MS.