Malware Analysis: What is Agent Tesla?

This report describes Agent Tesla, a .NET remote access trojan actively distributed in COVID‑19 themed phishing campaigns using RTF attachments that exploit CVE‑2017‑11882 to execute a payload which injects into RegAsm.exe to steal credentials, keystrokes, and perform form‑grabbing; it highlights observed filenames, affected sectors (healthcare, government, finance), and recommends mitigations including patching, user training, RBAC, and improved detection.