(Credit: vittaya25 via Getty Images)
If you need to convert a file to another format, watch out for potential malware. The FBI is warning that hackers are circulating malicious file-converter tools online.
The FBI's Denver Field Office says cybercriminals worldwide are exploiting this tactic, which involves offering free document converters or downloader tools. "This might be a website claiming to convert one type of file to another, such as a .doc file to a .pdf file," the agency says. “It might also claim to combine files, such as joining multiple .jpg files into one .pdf file."
In other cases, the malicious tool will claim it can download MP3 or MP4 media files from a site. Consumers often turn to search engines for free conversion services, typically from lesser-known third-party vendors. But cybercriminals have also joined in, hosting their own tools to distribute malware.
These file-conversion tools can be especially devious since they work as advertised, successfully converting a file into the desired format. But they pair the converted file with a program designed to secretly hijack the victim’s computer.
“Unfortunately, many victims don’t realize they have been infected by malware until it’s too late, and their computer is infected with ransomware, or their identity has been stolen,” the FBI says.
Antivirus provider Malwarebytes adds that users should avoid free file conversion tools that require the user to download a program or install a browser extension. “In the most sophisticated scenario, the so-called converted file contains malware code that downloads and installs an information stealer, and everyone who opens it will get their device infected," it says.
As a result, it’s best to use more reputable file-conversion tools with positive reviews. Consumers should also be aware that even legitimate file-conversion tools may do little to protect the privacy of any documents you upload.