FBI issues ‘critical’ warning for these websites, here's why

FBI

FBI Denver Field Office has issued a warning about a growing cyber scam involving free online file converters and downloader tools. Criminals are using these websites to install malware on victims’ devices, leading to potential identity theft, financial fraud, and ransomware attacks. The agency is urging users to be cautious and report any suspicious activity.

According to the official post by FBI Denver, cybercriminals set up websites offering free file conversion or downloading services, such as converting a .doc file to .pdf or merging multiple images into one document. While these tools perform the advertised function, the downloaded file may contain hidden malware. Additionally, these websites can extract sensitive data from submitted files, including personal identification details, banking credentials, and cryptocurrency wallet information.

Many victims remain unaware of the breach until they experience financial losses or their system is locked by ransomware. The FBI warns that this scam is being carried out on a global scale, affecting individuals and businesses alike.

FBI hasn’t revealed the exact name and details of the website. However, it has generalised the websites that offers free online services like file conversions, etc. This includes:

- Websites that claim to convert .doc to .pdf or .jpg to .pdf

- Tools that offer MP3 or MP4 downloads

- File merger or compression services

- Any online tool that requires users to upload sensitive files

According to the post, the malicious websites can capture and misuse various types of sensitive information, including:

Social Security numbers, birth dates, and phone numbers

Bank account details and credit card information

Cryptocurrency wallet addresses and seed phrases

Email addresses and login credentials

The FBI has provided guidelines to help users avoid falling victim to these scams:

Think before you act: Be mindful of the risks before using online file conversion tools.

Use antivirus software: Keep security programs updated and scan any downloaded files before opening them.

Be cautious with online tools: Use only reputable services and avoid websites that require personal information.

Victims of this scam should take immediate action:

Notify financial institutions to prevent unauthorized transactions.

Change all passwords using a clean and trusted device.

Report the incident to the FBI’s Internet Crime Complaint Center (IC3) at www.ic3.gov. Or, Indian users can report to the cybercrime department or dial 1903 and report the incident.

Run a security scan or seek professional malware removal services.