October 24, 2019, 7:30:00 AM Pacific Time - New Phishing Campaign Observed Today
DocuSign has observed a new phishing campaign that began around 7:30:00 AM on the morning of October 24(Pacific Time). The email purports to come from "DocuSign Electronic Signature and Invoice Service” or similar using the email address "firstname.lastname@example.org” The emails have the subject line similar to:
"You got notification from DocuSign Signature Service “
These emails contain a malicious macro enabled word document. These emails are not sent from DocuSign. Do not click on the link in these emails, instead please forward them to email@example.com and then delete the email immediately.
For more information on how to spot phishing please see our Combating Phishing white paper (3.3 MB)