CVE-2025-61932

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 1, 2025

Last Seen

November 6, 2025

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

China-linked Bronze Butler Exploits Motex Lanscope Zero-Day Vulnerability68.7

China-linked cyber-espionage group Bronze Butler, also known as Tick, exploited a zero-day vulnerability in Motex Lanscope Endpoint Manager, identified as CVE-2025-61932. This critical request origin verification flaw was used to deploy an updated version of their Gokcpdoor malware to steal confiden...

China-linked Hackers Exploit Lanscope Zero-Day to Deploy Gokcpdoor Malware51.1

Cyber-espionage group Bronze Butler, also known as Tick, has exploited a zero-day vulnerability in Motex Lanscope Endpoint Manager, identified as CVE-2025-61932. This critical request origin verification flaw was used to deploy an updated version of the Gokcpdoor malware to steal confidential inform...