Update 6/5/2018 @ 9:25 AM Pacific Time - New Phishing Campaign Observed

DocuSign has observed a new phishing campaign that began the morning of June 5th, 2018 (Pacific Time). The email purports to come from "DocuSign Electronic Signature and Invoice Service" using the email address [email protected] . The emails all have the subjects:

You received / got invoice from DocuSign Signature Service / DocuSign Electronic Signature Service / DocuSign Service

These emails contain links to a malicious Word document. This emails are not sent from DocuSign. Do not click the links in these emails, instead please forward them to [email protected]om and then delete the email immediately. 

For more information on how to spot phishing please see our Combating Phishing white paper (3.3 MB)