Update 8/6/2018 @ 10.17 AM Pacific Time - New Phishing Campaign Observed Today

DocuSign has observed a new phishing campaign that began the morning of August 6th (Pacific Time). The email purports to come from DocuSign using the email addresses [email protected] The emails all have the subject:

"You received invoice from DocuSign Electronic Signature Service"

These emails contain a malicious Word document. These emails are not sent from DocuSign. Do not open the attachment in these emails, instead please forward them to [email protected] and then delete the email immediately.

For more information on how to spot phishing please see our Combating Phishing white paper (3.3 MB).