Fake Leonardo DiCaprio Movie Torrent Drops Agent Tesla Through Layered PowerShell Chain

Bitdefender uncovered a sophisticated malware deployment method using a fake torrent of Leonardo DiCaprio's film **_One Battle After Another_**. Users trying to download the film inadvertently execute a series of PowerShell scripts that install **Agent Tesla**, a Remote Access Trojan (RAT). This multi-stage infection leverages legitimate Windows tools to bypass detection and operates entirely in memory.

Key points include: the targeted nature of this attack on novice downloaders; the use of advanced obfuscation techniques; and the trend of using fake multimedia files to spread malware, reminiscent of past campaigns involving the **Lumma Stealer** and email phishing attempts. The report highlights the growing prevalence of such threats and emphasizes the importance of awareness among users.