Alert: July 18, 2019, 08:00 AM Pacific Time - New Phishing Campaign Observed Today
DocuSign has observed a new phishing campaign that began around 08:00 on the morning of July 18th (Pacific Time).. The email purports to come from "DocuSign Electronic Signature and Invoice Service” or similar using the email address "docusign @ ggarvey.net" The emails have the subject line similar to:
"You received notification from DocuSign Service“
These emails contain and it contains a .zip attachment with a malicious .vbs file. This is a change in tactics. These emails are not sent from DocuSign. Do not click on the link in these emails, instead please forward them to firstname.lastname@example.org and then delete the email immediately.
For more information on how to spot phishing please see our Combating Phishing white paper (3.3 MB)