How are scammers using Leonard DiCaprio's 'One Battle After Another' for malware?

Scammers are distributing malware through pirated torrents of the film, tricking users into downloading harmful software.

What is Agent Tesla malware found in the fake movie torrents?

Agent Tesla is a remote access Trojan that allows attackers to gain full control of infected computers and steal personal information.

Is it safe to download movies like 'One Battle After Another' from torrent sites?

Downloading pirated content from torrent sites is risky as they are often used to spread malware like Agent Tesla.

Home / Technology / DiCaprio Film Torrent Hides Malware Trap

DiCaprio Film Torrent Hides Malware Trap

13 Dec

•

Summary

Scammers use pirated 'One Battle After Another' torrents to distribute malware.
Agent Tesla Trojan gives attackers remote access to victim PCs.
Malicious code is hidden within fake subtitle files and other downloaded components.

DiCaprio Film Torrent Hides Malware Trap

Scammers are exploiting the popularity of Leonard DiCaprio's recent film, 'One Battle After Another,' to distribute malware. Users attempting to download pirated versions of the movie are falling victim to a dangerous remote access Trojan known as Agent Tesla. This malware provides attackers with complete control over infected Windows computers, enabling them to steal sensitive financial and personal information.

The malicious payload is cleverly concealed within what appears to be a legitimate torrent file. Instead of the film, users receive a deceptive .lnk shortcut. This shortcut activates hidden malicious code embedded within a .srt subtitle file, alongside other downloaded components, which then uses Windows PowerShell to install the Agent Tesla Trojan.

Cybersecurity firms have detected a significant increase in these threats, with torrents for the supposed movie showing thousands of users involved. This incident serves as a stark reminder to exercise caution around pirated digital content, as hackers frequently use these channels to spread Trojans and other malicious software.