Cyber Espionage Alert: Tick Group Exploits Critical Motex Lanscope Flaw for System Takeover!
Tick, also known as Bronze Butler, is back in action! Exploiting the critical CVE-2025-61932 flaw in Motex Lanscope Endpoint Manager, they’re dropping backdoors like they’re hot. With a CVSS score of 9.3, this vulnerability allows remote attackers to execute arbitrary commands with SYSTEM privileges. Stay vigilant, because Tick is not just for tocking!

Hot Take:
It’s official, the Tick group has ticked off the cybersecurity community once again! With a new vulnerability exploit in Motex Lanscope, these cyber-espionage wizards are proving they have more aliases than a spy in a James Bond movie. Who knew that being a ‘Stalker Panda’ could involve so much tech-savvy villainy?
Key Points:
- Critical security flaw in Lanscope exploited by Tick group.
- Vulnerability CVE-2025-61932 allows command execution with SYSTEM privileges.
- Gokcpdoor backdoor used for proxy connections and malicious command execution.
- Attack involves DLL side-loading and tools like goddi and Remote Desktop.
- Tick group’s history of exploiting zero-day flaws is well-documented.
Already a member? Log in here
