Update 9/27/2017 @ 8:25 AM Pacific Time – New Phishing Campaign Observed Today
Sept. 27, 2017
DocuSign has observed a new phishing campaign that began the morning of Septemeber 27 (Pacific Time).
The email comes from Michael Evans (note this name is likely to change) and was sent from the email address firstname.lastname@example.org or email@example.com. The subject of the email is “Your Invoice 12345678 for firstname.lastname@example.org Document is Ready for Signature” and it contains a link to a malicious, macro-enabled Word document. Do not click the link in this email, instead please forward it to email@example.com and then delete the email immediately. For more information on how to spot phishing please see our