Beware of Fake Leonardo DiCaprio Movie Torrent File Drops Agent Tesla Malware

Bitdefender researchers identified a campaign that spreads the Agent Tesla RAT through a fake torrent of the film "One Battle After Another": a malicious CD.lnk reads hidden batch and PowerShell code from a subtitle file, decodes AES-encrypted payloads stored in subtitle and image files, drops scripts under C:\Users\AppData\Local\Microsoft\Diagnostics, creates a hidden scheduled task named RealtekDiagnostics for persistence, and runs the Agent Tesla payload in-memory to exfiltrate credentials and enable remote control of infected Windows systems.