DocuSign has observed a new phishing campaign that spoofs DocuSign. The email is using the email address "Mario.DaSilvaMelo[@]du.edu." The emails have the subject line similar to:

"A Document was sent to you for review for Covid-19 update."

These emails contain a link to a malicious script. These emails are not sent from DocuSign. Do not click on the link in these emails, instead please forward them to spam@docusign.com and then delete the email immediately.

For more information on how to spot phishing please see our Combating Phishing white paper (3.3 MB)