New Exploits Target Windows Context Menu and Reddit for C2 Traffic

• •The 'RightHand' exploit enables stealthy code execution via Windows context menus.
• •The 'RedditC2' exploit disguises C2 traffic using Reddit's API, targeting active users.
• •Both exploits are currently not confirmed to be in active use but pose serious risks.

Two new cybersecurity exploits have emerged, one demonstrating a stealthy persistence method using Windows context menu handlers and the other leveraging Reddit for command and control (C2) traffic. The first exploit, titled 'RightHand,' allows malicious code execution when users right-click specific files or folders in Windows Explorer. This method involves registering a custom COM object, which can be used for nefarious purposes despite the author's disclaimer for educational use only. The second exploit, 'RedditC2,' abuses Reddit's API to mask C2 traffic, targeting users who frequently engage with the platform. It allows attackers to post commands in comments and receive encrypted outputs, making detection by antivirus software difficult. Both exploits raise significant concerns about their potential misuse in real-world attacks, particularly against Windows systems and users of Reddit. Currently, there are no confirmed reports of these exploits being actively used in the wild.