The FBI has issued an alert about a growing cybersecurity threat involving fake online document converters that steal sensitive information and potentially deploy ransomware. The warning comes from the FBI Denver field office following an increase in reported incidents.
## How the Scam Works
Cybercriminals create websites advertising free document conversion services, download tools, or file merging capabilities. While these tools typically perform their advertised functions, they simultaneously:
– Install hidden malware that can provide remote access to infected devices
– Extract sensitive information from uploaded documents, including:
– Social security numbers
– Banking information
– Cryptocurrency wallet details
– Passwords and email addresses
## Deceptive Tactics
These scammers often mimic legitimate services by creating URLs that closely resemble trusted sites, changing just one letter or using different domain extensions (e.g., “INC” instead of “CO”). Users searching for “free online file converter” are particularly vulnerable, as search results now frequently include paid listings that may be scams.
## Confirmed Threats
Recent examples include sites like docu-flex.com and pdfixers.com, which distributed Windows executables later identified as malware. Cybersecurity researchers have also documented Google ad campaigns promoting fake converter sites that delivered Gootloader malware, which can download additional threats like banking trojans and post-exploitation tools.
These attacks have previously escalated to full-scale ransomware deployments by groups like REvil and BlackSuit.
## Protecting Yourself
To avoid falling victim to these scams:
– Research file converters before using them
– Check reviews of conversion tools
– Avoid relatively unknown sites
– Be suspicious of any resulting files that are executables or JavaScript
– Report incidents to IC3.gov
The FBI emphasizes that while not all online file converters are malicious, users should exercise caution when using these services, particularly with unfamiliar websites.