Update 3/6/2018 @ 2.15 PM Pacific Time - New Phishing Campaign Observed Today
March 6, 2018
DocuSign has observed a new phishing campaign that began the morning of March 6th, 2018 (Pacific Time). The email purports to come from "DocuSign Electronic Signature and Invoice" using the email addresses firstname.lastname@example.org and email@example.com. The emails all have the subjects:
You received / got invoice from DocuSign Signature Service / DocuSign Electronic Signature Service / DocuSign Service
These emails contain links to a malicious Word document. This emails are not sent from DocuSign. Do not click the links in these emails, instead please forward them to firstname.lastname@example.org and then delete the email immediately.
For more information on how to spot phishing please see our Combating Phishing white paper (3.3 MB)