Story perspectives

Chinese Hackers Target Japan: Major Vulnerability Disclosed

11/2/2025

Summary

Story summary

In mid-2025, Secureworks Counter Threat Unit identified a cyber campaign by the Chinese state-sponsored group BRONZE BUTLER exploiting CVE-2025-61932 in Motex LANSCOPE Endpoint Manager.
The vulnerability allows attackers to execute commands with SYSTEM privileges, enabling extensive control of compromised systems.
The group has targeted Japanese organizations since 2010.
On October 22, 2025, the Japan Computer Emergency Response Team disclosed the vulnerability, prompting organizations to patch systems and review internet exposure.

1 of 1

Story summary

In mid-2025, Secureworks Counter Threat Unit identified a cyber campaign by the Chinese state-sponsored group BRONZE BUTLER exploiting CVE-2025-61932 in Motex LANSCOPE Endpoint Manager.
The vulnerability allows attackers to execute commands with SYSTEM privileges, enabling extensive control of compromised systems.
The group has targeted Japanese organizations since 2010.
On October 22, 2025, the Japan Computer Emergency Response Team disclosed the vulnerability, prompting organizations to patch systems and review internet exposure.