The FBI Denver Field Office has issued an urgent warning about a rise in cybercrimes involving free online file converters. Criminals are using these services to install malware on users' computers, risking data theft or ransomware attacks. A recent Colorado incident highlights the threat, with cybercriminals targeting individuals seeking free tools to convert or merge files, such as converting Word documents to PDFs. These tools appear legitimate but secretly deliver malicious software.

FBI Denver Special Agent Mark Michalek stressed the importance of public awareness to prevent these scams, encouraging individuals to report any incidents and take protective actions.

The FBI has identified several domains linked to these malicious activities:

• Imageconvertors[.]com (phishing)
• convertitoremp3[.]it (Riskware)
• convertisseurs-pdf[.]com (Riskware)
• convertscloud[.]com (Phishing)
• convertix-api[.]xyz...

  ---

  March 19, 2025 17:07 (on 3/20/25) |  0 | 2 minutes read

Always keep your verification codes or OTPs (One-Time Passwords) private. These codes are sent to protect your accounts and should only be used by you. Even if someone appears legitimate, do not share the codes via text, email, or any other form of communication. Sharing these codes can provide malicious actors with access to your personal information or accounts. Remember, no trusted organization will ever ask you for your verification codes. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

In a fast-paced world, misinformation can damage your organization's reputation. Always verify before sharing.

DO:

• Check the Source: Use reputable websites or experts.
• Cross-Verify: Confirm with multiple trusted sources.
• Consider the Date: Ensure information is current.
• Look for Evidence: Verify claims with supporting facts.

Avoid:

• Sharing Without Checking: Don’t spread info from questionable sources.
• Clickbait: Avoid sensationalized headlines.
• Relying on One Source: Don’t trust a single unverified...

  ---

  March 18, 2025 19:15 (on 3/19/25) |  0 | QR Ready | 1 minute read

Always be cautious when interacting with websites or social media accounts that appear legitimate, as scammers are becoming increasingly skilled at creating fake sites and accounts that impersonate trusted brands. Before entering any personal or financial information, double-check and carefully review websites or social media accounts for signs of phishing, such as misspelled URLs, unusual design elements, or suspicious links. As scams become more sophisticated, it’s essential to cross-check everything and stay vigilant to avoid falling victim to phishing attacks or other online fraud.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Avoid sharing your work login details with family, friends, or even your colleagues. Sharing your credentials increases the risk of unauthorized access to your accounts. Keeping your login details private helps safeguard both your personal information and company data from potential security threats. Always ensure that only you have access to your work credentials to maintain security. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Enhance your account security by regularly reviewing the devices connected to your account and removing any that seem unfamiliar or unnecessary. Limiting the number of devices with access reduces the risk of unauthorized access to your personal information. Additionally, enabling two-factor authentication provides an extra layer of protection against potential breaches.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Avoid downloading software from unofficial websites, as it can put your computer at risk. These downloads may contain harmful viruses or malicious software that can damage your system. Always use trusted and official sources to obtain software. Keeping up-to-date with security threats and best practices will help you stay aware of the dangers of untrusted downloads. Stay vigilant about these risks to protect both your personal and work devices. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Researchers found a new attack where a malicious web extension mimics any installed add-on, copying icons, popups, and workflows. This tricks users into entering credentials, which attackers can use to hijack accounts and steal sensitive data. The attack affects all Chromium-based browsers like Chrome, Edge, Brave, and Opera.

The malicious extension scans for target extensions, changes its icon to match, and disables the legitimate extension using the "chrome.management" API. Google is working on improving Chrome Web Store security.

Preventive Actions:

1. Install extensions only from trusted sources.
2. Keep extensions and browsers updated.
3. Disable unused extensions.
4. Use security software to detect malicious extensions.
5. Enable two-factor authentication (2FA) for added protection.

Source: March 12, 2025 17:27 (on 3/13/25) |  0 | 1 minute read

To enhance the security of your personal data, consider using the "App Lock" feature on your phone. This extra layer of protection allows you to secure sensitive apps like banking, social media, and messaging apps with a password, PIN, or biometric authentication. By doing so, you ensure that even if someone gains access to your unlocked phone, they won’t be able to view or misuse your private information without your permission.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Every detail you share online can be used against you in a social engineering attack. Even small things, like your pet's name, can create risks. Be cautious and protect your privacy by sharing only what's necessary.

Tips to Protect Your Info:

• Limit Sharing: Only share what's necessary.
• Adjust Privacy Settings: Control who sees your info.
• Watch for Phishing: Be cautious of unsolicited requests.
• Avoid Public Wi-Fi: Don't share sensitive info over unsecured networks.
• Use MFA: Add extra security to your accounts.

Stay Private, Stay Safe!