BLOG

Address leak leads to phishing

A number of people in the industry are reporting getting phishing emails to addresses they used at DocuSign.

There were initial reports of a DocuSign data breach back in December. Now it appears DocuSign is being used as a phishing target.

At 8:40AM PST this morning, 1/24/2013, DocuSign became aware of new malware spam emails that are being sent as if it was coming from the DocuSign service. An example follows immediately below. These emails are not coming from DocuSign and you should not click on any links or attachments therein. They are coming from an unrelated, malicious third party attempting to copy DocuSign’s email branding in the hopes of fooling recipients into opening the email and clicking on links and/or attachments.

This seems to be a widespread phishing attack. Watch your links.

1 comment

  1. steve says

    I’ve been seeing phishing/malware mails claiming to be from docusign since early December, all to an address that I think was taken from SolarWinds/Eloqua. I’ve also seen “Scanned Image”, “Paychex”, “eFax corporate” and “Wire transfer”.

    No obvious connection to any DocuSign breach, just generic malware mail by the look of it. Without looking closely, I’d guess one of the botnets.

Comment:

Your email address will not be published. Required fields are marked *

  • Vague reports of Yahoo problems

    A number of people, on different forums, have been asking if anyone is seeing a higher bounce rate than usual with Yahoo. Not sure exactly what's going on here. As I understand it, folks are talking with Yahoo about it. If I hear anything more, I'll share. For now, though, if you're seeing a small increase in Yahoo bounces (or other weirdnesses) others are seeing something odd, too.No Comments


  • Responsive design just got easier at Gmail

    Today Gmail announced they are supporting media queries in Gmail and Google Inbox. This should simplify the creation of emails for multiple platforms. The full list of supported rules can be found on the Google Developer Site.No Comments


  • Brief blogging break

    Sorry about the unexpected hiatus. I picked up a cold that really made me feel fuzzy and writing was an exercise in futility. I'll be back Monday. Meanwhile, Oracle bought another ESP (Bronto) when they bought NetSuite.  No Comments


Recent Comments

Archives