By Leada Gore
The FBI has confirmed that threats related to fake file converter websites are ongoing as victims continue to fall victim to the scams.
Last week, the FBI’s Denver Field Office issued a warning related to free online document converter websites. The sites, accessed through common browsers such as Chrome, Safari and Edge, offer to convert one type of file into another, such as a .doc file into a .pdf file. Other sites also claim to combine files such as joining multiple .jpg files into a single .pdf file or offering an MP3 or MP4 downloading tool.
While the tools often work, the sites can expose users to malware that infiltrates a computer.
The agency has recently confirmed the problem is continuing to grow and the scam is getting trickier.
“The scammers try to mimic URLs that are legit – so changing just one letter, or ‘INC’ instead of ‘CO’,” Vikki Migoya, the Public Affairs Office for FBI Denver, told Bleeping Computer. “Users who in the past would type ‘free online file converter’ into a search engine are vulnerable, as the algorithms used for results now often include paid results, which might be scams.”
Malware isn’t the only issue with the sites, the FBI said. The uploaded documents can also be scraped for sensitive information, Bleeping Computer reported, including Social Security numbers, passwords, email addresses and banking information. Many victims don’t know they’ve been infected with malware until it’s too late and their computer is infected or their identity stolen.
The best way to avoid the malware issue is to not use unknown websites for file converting. FBI Special Agent in Charge Mark Michalek has more advice.
“The best way to thwart these fraudsters is to educate people so they don’t fall victim to these fraudsters in the first place,” he said. “If you or someone you know has been affected by this scheme, we encourage you to make a report and take actions to protect your assets. Every day, we are working to hold these scammers accountable and provide victims with the resources they need.”
People who think they’ve been a victim or attempted victim of a malware scheme should contact the FBI Internet Crime Complaint Center at www.ic3.gov.
