Cybersecurity researchers have verified that these bogus websites, which promise to convert files like PDFs, images, or videos, are actually a front for delivering malicious software. Once a user uploads a file or downloads the “converted” version by the file converters, their system is quietly infected.
Fake File Converters Are Spreading Malware
The malware being spread includes information stealers, remote access trojans (RATs), and keyloggers, capable of grabbing passwords, personal files, and even banking information.
According to analysts at BleepingComputer, the sites mimic real file converters but are riddled with scripts that drop malware like Nitro Infostealer, Amadey, and Rhadamanthys. These threats are often hosted on seemingly harmless domains and spread via SEO poisoning — ranking high on search engines to lure victims.
The FBI’s warning, issued earlier this year, urged users to avoid unofficial converter tools, especially from unfamiliar or newly registered websites.
⚠️ What You Should Do:
- Stick to trusted sources for file conversions.
- Use antivirus software with real-time protection.
- Double-check URLs before downloading anything.
- Avoid clicking suspicious search results that promise free file conversions.
Cybercriminals are constantly evolving their tactics, and this is a strong reminder that even simple online tools can be traps. Think before you click.