Bronze Butler Strikes Again: New Gokcpdoor Malware Exploits Critical Lanscope Flaw!
Bronze Butler exploited a Lanscope Endpoint Manager flaw to deploy Gokcpdoor malware, according to Sophos researchers. The cyber-espionage group used this vulnerability, CVE-2025-61932, to steal data before a patch was released. With no workarounds available, patching remains the best defense against these attacks.
Hot Take:
Looks like the Bronze Butler is at it again, serving up a steaming hot dish of cyber-espionage with a side of zero-day vulnerability exploitation. In the grand buffet of cybersecurity threats, it seems Motex Lanscope Endpoint Manager just became the dish of the day. Bon appétit, cyber defenders!
Key Points:
- China-linked hackers known as ‘Bronze Butler’ exploited a zero-day vulnerability.
- The flaw, CVE-2025-61932, affects Motex Lanscope Endpoint Manager versions 9.4.7.2 and earlier.
- The attackers deployed an updated version of Gokcpdoor malware.
- The vulnerability allows arbitrary code execution with SYSTEM privileges.
- Organizations are urged to patch immediately, as there are no alternative mitigations.
Already a member? Log in here