DocuSign has observed a new phishing campaign that began around 09:00 AM on the morning of October 08 (Pacific Time). The email purports to come from "DocuSign Signature” or similar using the email address "docusign@blisscommunities[.]net” The emails have the subject line similar to:

"You got invoice from DocuSign Electronic Signature Service"

These emails contain a link to an archive containing a malicious word document.  These emails are not sent from DocuSign. Do not click on the link in these emails, instead please forward them to spam@docusign.com and then delete the email immediately.

For more information on how to spot phishing please see our Combating Phishing white paper (3.3 MB)