Alert: New Phishing Campaign Observed, March 27, 2020
DocuSign has observed a new phishing campaign that spoofs not only DocuSign, but also the WHO (World Health Organization), and is delivered through Sendgrid, a well-known email service provider. The email purports to come from "DocuSign with World Health Organization” or similar using the email address “firstname.lastname@example.org” and "coronov19_selfserviceBR@who.com.” The emails have the subject line similar to:
"Health Message: Important health guidelines and information about corona virus"
These emails contain a link to a malicious script. These emails are not sent from DocuSign. Do not click on the link in these emails, instead please forward them to email@example.com and then delete the email immediately.
For more information on how to spot phishing please see our Combating Phishing white paper (3.3 MB)