In a blog post by Pieter Arntz covering this new threat, the team at MalwareBytes Labs has put together a list of malicious domains used recently in these attacks and the specific threat they pose. These are all sites you want to actively avoid:
Below are some recent examples of domains involved in this type of scam:
- Imageconvertors[.]com – Phishing
- convertitoremp3[.]it – Riskware
- convertisseurs-pdf[.]com – Riskware
- convertscloud[.]com – Phishing
- convertix-api[.]xyz – Trojan
- convertallfiles[.]com – Adware
- freejpgtopdfconverter[.]com – Riskware
- primeconvertapp[.]com – Riskware
- 9convert[.]com – Riskware
- Convertpro[.]org – Riskware
Since hackers have a large number of domains at their disposal, the sites listed above will likely be moved to a new domain soon.
Still, it’s worth looking out for these ones in particular as they have previously been used in attacks.