Fake ‘One Battle After Another’ torrent hides malware in subtitles

Bitdefender researchers uncovered a malicious torrent for a Leonardo DiCaprio movie that uses a stealthy multi-stage infection chain: PowerShell embedded in subtitle files reconstructs AES-encrypted scripts, drops payloads to user AppData, creates scheduled tasks and extracts AgentTesla into memory. The campaign targets torrent downloaders to steal credentials and other sensitive data via the long-running Agent Tesla RAT.