ALERT:09/4/2018 @ 8.30 AM Pacific Time - New Phishing Campaign Observed Today
DocuSign has observed a new phishing campaign that began the morning of September 4th (Pacific Time). The email purports to come from "DocuSign Signature and Invoice" using the email addresses email@example.com. The emails all have the subject:
"You received / got invoice from DocuSign Signature Service / DocuSign Electronic Signature Service / DocuSign Service"
These emails contain a malicious PDF attachment linking to a malicious download site. These emails are not sent from DocuSign. Do not open the attachment in these emails, instead please forward them to firstname.lastname@example.org and then delete the email immediately.
For more information on how to spot phishing please see our Combating Phishing white paper (3.3 MB).