ALERT:7/16/2018 @ 8:33 AM Pacific Time - New Phishing Campaign Observed
DocuSign has observed a new phishing campaign that began the morning of July 16th, 2018 (Pacific Time). The email purports to come from "DocuSign Signature and Invoice Service" (or similar) using the email address firstname.lastname@example.org. The emails all have the subjects:
"You received / got invoice from DocuSign Signature Service / DocuSign Electronic Signature Service / DocuSign Service"
These emails contain links to a malicious Word document. This emails are not sent from DocuSign. Do not click the links in these emails, instead please forward them to email@example.com and then delete the email immediately.
For more information on how to spot phishing please see our Combating Phishing white paper (3.3 MB).