
FBI warns about document conversion sites spreading malware
Online document conversion sites have been a lifesaver, whether you need to turn a PDF into an editable document, convert a PPT into a PDF or open a lesser-known file format.
Most of these sites are free and deliver quick results, but many also pose serious privacy risks. When you upload your documents, you're essentially handing them over to a service with no obligation to protect them.
Now, the FBI is warning that some free online document converters go a step further by loading malware onto your computer. These malicious sites complete the conversion but also silently install malware on your device.
The FBI Denver Field Office is warning about a scam involving free online document converter tools that cybercriminals are using to spread malware. These malicious tools can lead to serious incidents, including ransomware attacks.
Hackers worldwide are exploiting any type of free document converter or downloader tool to carry out this scheme. The scam may involve websites that promise to convert files, such as turning a .doc into a .pdf, or tools that claim to merge multiple images into a single document. Some even pose as MP3 or MP4 downloaders. While these tools perform the advertised task, the resulting file may contain hidden malware, giving attackers access to the victim's computer.
These tools can also extract sensitive information from submitted files, including personal details like Social Security numbers, dates of birth and phone numbers. They may also harvest banking details, cryptocurrency data such as seed phrases and wallet addresses, as well as email addresses and passwords.
"Unfortunately, many victims don't realize they have been infected by malware until it's too late, and their computer is infected with ransomware or their identity has been stolen," the feds note.
The FBI advises you to pause, slow down and think carefully before taking any actions online. To reduce the risk of malware infections, keep your antivirus software updated and scan any downloaded files before opening them, the security service noted.
A strong antivirus software safeguards you from malicious links that install malware, potentially accessing your private information. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.
The FBI Denver Field Office also urges anyone who has fallen victim to or encountered this scam to report it to the FBI's Internet Crime Complaint Center at www.ic3.gov.
"The best way to thwart these fraudsters is to educate people so they don't fall victim to these fraudsters in the first place," said FBI Denver Special Agent in Charge Mark Michalek. "If you or someone you know has been affected by this scheme, we encourage you to make a report and take actions to protect your assets. Every day, we are working to hold these scammers accountable and provide victims with the resources they need."
1. Use official conversion tools: Instead of relying on random online tools, download and use reputable document conversion software provided by reputable companies like Adobe Acrobat, LibreOffice or Microsoft Office. These programs let you convert files securely without exposing your data to potential threats.
2. Check the website's reputation: Before using an online converter, research the site. Look for reviews and see if cybersecurity forums or sources have flagged it as unsafe. If the site lacks basic security measures, avoid it.
3. Avoid downloading executable files: If an online document converter provides an .exe, .bat or .scr file instead of a standard document format, do not download or run it. Legitimate converters should only generate files like .pdf, .docx or .png, not executables that could contain malware.
4. Scan files after conversion: Even if you use a trusted converter, always scan the converted file with up-to-date strong antivirus software before opening it.
5. Check file permissions: After conversion, verify that the new file doesn't have unexpected permissions or properties that could indicate malware.
6. Create backups and enable ransomware protection: Regularly back up important documents on an external drive or a secure cloud service. Some security suites, like Microsoft Defender, offer ransomware protection features that prevent unauthorized changes to your files.
7. Be cautious of browser extensions: Avoid installing browser extensions for file conversion, as these can often be browser hijackers or adware.
8. Consider paid services: If you frequently need to convert files, invest in a reputable paid service that offers better security and privacy protection.
9. Use cloud-based solutions: Consider using cloud-based productivity suites that offer built-in conversion tools, reducing the need for third-party converters.
The convenience of free online tools often blinds us to the risks they carry. Many users assume that if a website looks professional or ranks high on Google, it must be safe. Cybercriminals understand this mindset and take full advantage of it.
The real issue is not just malware-laced converters but the habit of trading security for convenience without a second thought. The internet is filled with services that appear free but come at the hidden cost of stolen data, financial fraud or compromised devices. Instead of trusting every tool that offers an easy solution, it is important to think critically about what we are giving away whenever we upload a file or click a download button.
Do you verify the reputation of websites before uploading sensitive files? Let us know by writing us at Cyberguy.com/Contact.
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.
Alert: Malware steals bank cards and passwords from millions of devices.
Follow Kurt on his social channels:
Answers to the most-asked CyberGuy questions:
New from Kurt:
Copyright 2025 CyberGuy.com. All rights reserved.

Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles

22 minutes ago
Pulse massacre survivors are set to revisit the nightclub before it's razed
ORLANDO, Fla. -- Survivors and family members of the 49 victims killed in the Pulse nightclub massacre nine years ago are getting their first chance Wednesday to walk through the long-shuttered, LGBTQ+-friendly Florida venue before it's razed and replaced with a permanent memorial to what was once the worst U.S. mass shooting in modern times. In small groups over four days, survivors and family members of those killed planned to spend a half hour inside the space where Omar Mateen opened fire during a Latin night celebration on June 12, 2016, leaving 49 dead and 53 wounded. Mateen, who had pledged allegiance to the Islamic State group, was killed after a three-hour standoff with police. At the time, it was the worst mass shooting in modern U.S. history. The Pulse shooting's death toll was surpassed the following year when 58 people were killed and more than 850 injured among a crowd of 22,000 at a country music festival in Las Vegas. The city of Orlando purchased the Pulse property in 2023 for $2 million and plans to build a $12 million permanent memorial which will open in 2027. Those efforts follow a multiyear, botched attempt by a private foundation run by the club's former owner. The existing structure will be razed later this year. 'None of us thought that it would take nine years to get to this point and we can't go back and relitigate all of the failures along the way that have happened, but what we can do is control how we move forward together," Orange County Mayor Jerry Demings said two weeks ago when county commissioners pledged $5 million to support the city of Orlando's plan. The opportunity to go inside the nightclub comes on the ninth anniversary of the mass shooting. Outside, over-sized photos of the victims, rainbow-colored flags and flowers have hung on fences in a makeshift memorial, and the site has attracted visitors from around the globe. But very few people other than investigators have been inside the structure. Around 250 survivors and family members of those killed have responded to the city's invitation to walk through the nightclub this week. Families of the 49 people who were killed can visit the site with up to six people in their group, and survivors can bring one person with them. The people invited to visit are being given the chance to ask FBI agents who investigated the massacre about what happened. They won't be allowed to take photos or video inside. Brandon Wolf, who hid in a bathroom as the gunman opened fire, said he wasn't going to visit, primarily because he now lives in Washington. He said he wanted to remember Pulse as it was before. 'I will say that the site of the tragedy is where I feel closest to the people who were stolen from me,' said Wolf, who now is national press secretary for the Human Rights Campaign, a LGBTQ+ advocacy group. 'For survivors, the last time they were in that space was the worst night possible. It will be really hard to be in that space again.' Mental health counselors planned to be on hand to talk to those who walk through the building. Survivors and family members had hoped to have a permanent memorial in place by now. But an earlier effort by a private foundation to build one floundered, and the organization disbanded in 2023. Barbara and Rosario Poma and businessman Michael Panaggio previously owned the property, and Barbara Poma was the executive director of the onePulse Foundation — the nonprofit that had been leading efforts to build a memorial and museum. She stepped down as executive director in 2022 and then left the organization entirely in 2023 amid criticism that she wanted to sell instead of donate the property. There were also complaints about the lack of progress despite millions of dollars being raised. The original project, unveiled in 2019 by the onePulse Foundation, called for a museum and permanent memorial costing $45 million. That estimate eventually soared to $100 million. The city of Orlando has since outlined a more modest proposal and scrapped plans for a museum. 'The building may come down, and we may finally get, a permanent memorial, but that doesn't change the fact that this community has been scarred for life,' Wolf said. 'There are people inside the community who still need and will continue to need support and resources.'


News24
an hour ago
- News24
Cape Town couple arrested on child porn charges allegedly abused their own children
A Bloubergstrand couple has been arrested for the alleged sexual abuse of their two daughters, aged 3 and 8. They have been accused of producing child pornography and other sexual offences. According to police spokesperson Lieutenant Colonel Amanda van Wyk, a multidisciplinary team comprising members of the national and Western Cape Serial and Electronic Crime Investigations (SECI) Units, and officials from the Department of Social Development (DSD), supported by the FBI and Homeland Security Investigations (HSI), arrested the 47-year-old woman and 48-year-old man in Bloubergstrand on Tuesday. They were found at a house identified through joint investigative efforts. They face multiple charges, including the production of CSAM (commonly referred to as child pornography), rape, sexual assault, and sexual grooming. The two children were rescued during the operation and have since been put in a place of safety. Several electronic devices were seized. Last month, the Asset Forfeiture Unit (AFU) seized assets, including a luxury vehicle and R647 300 in cash belonging to Darryn Wilken and his girlfriend, Tiona Megan Moodley. Investigations by various law enforcement agencies, including the US Secret Service and Federal Bureau of Investigation (FBI), led to their arrests. The couple faces charges for allegedly running a child pornography website, offering material for sale internationally. National Prosecuting Authority (NPA) spokesperson Phindi Mjonondwane said along with the cash and vehicle, the unit also seized high-end electronic equipment. 'It (Wilken's luxury vehicle) brazenly reflected a registration number 'KIDZ NA GP'. The luxury vehicle, high-end electronic equipment and R647 300 in cash were the subjects of the search and seizure warrant,' she said.
Yahoo
2 hours ago
- Yahoo
Damien Madison, WA man arrested in multi-state manhunt, booked into Thurston Co. jail
The Brief Damien Madison, a 10-time felon arrested after a multi-state manhunt, is now in Thurston County Jail facing multiple charges. Madison allegedly shot at Thurston County deputies with an AR-15, disabling a patrol car during a pursuit. Madison's mother and three others are accused of aiding his escape. THURSTON COUNTY, Wash. - Damien Madison, the man arrested in a multi-state manhunt for allegedly shooting at Washington deputies, was booked into Thurston County Jail. The backstory The search for Madison spanned just under a week, when he was arrested near the California/Nevada border on May 13. The 10-time convicted felon has since been extradited back to Washington, now jailed on two counts of first-degree assault, first-degree unlawful possession of a firearm, first-degree malicious mischief, and drive-by shooting. Madison is expected in court Wednesday afternoon. The Thurston County Sheriff says Madison fired an AR-15 towards a deputy during a pursuit in Tenino, hitting the patrol car's windshield and disabling the vehicle. FBI agents apprehended Madison after using a "grappler" on his vehicle near Jean, Nevada. Madison's mother was also with him and taken into custody. She and three others are accused of helping Madison escape. The Source Information in this story came from the Thurston County Sheriff's Office, the Las Vegas Metropolitan Police Department and FOX 13 Seattle reporting. LIVE: Travis Decker manhunt: Focus shifts near WA's Blewett Pass Former Army squadmate shares insight into Travis Decker's military past Home of Seattle rapper Macklemore invaded, nanny maced: police 2 dead after 'tragic' bus accident at Seattle retirement home Community mourns Bellevue High School student found dead in Shoreline Parkland, WA neighbors fed up, scared with continuing car crashes To get the best local news, weather and sports in Seattle for free, sign up for the daily FOX Seattle Newsletter. Download the free FOX LOCAL app for mobile in the Apple App Store or Google Play Store for live Seattle news, top stories, weather updates and more local and national news.