OAED Loader Malware — Analysis, Campaigns & Threat Activity

Related Threat Clusters

• China-linked Bronze Butler Exploits Motex Lanscope Zero-Day Vulnerability

  China-linked cyber-espionage group Bronze Butler, also known as Tick, exploited a zero-day vulnerability in Motex Lanscope Endpoint Manager, identified as CVE-2025-61932. This critical request origin verification flaw…

  2 articles · Updated November 3, 2025
• China-linked Hackers Exploit Lanscope Zero-Day to Deploy Gokcpdoor Malware

  Cyber-espionage group Bronze Butler, also known as Tick, has exploited a zero-day vulnerability in Motex Lanscope Endpoint Manager, identified as CVE-2025-61932. This critical request origin verification flaw was used…

  2 articles · Updated November 3, 2025

Recent Intelligence Reports

• New China-linked attacks involve zero-day Motex Lanscope bug exploitation — Scworld · November 3, 2025
• China-linked hackers exploited Lanscope flaw as a zero — Bleepingcomputer · November 1, 2025

Related Entities