DocuSign has observed a new phishing campaign that began the morning of November 16th (Pacific Time)

The email comes from Lowell Joye (note this name is likely to change) and was sent from the email address dse@sign.com. The subject of the email is “Your Legally Binding Contract document is ready for signature!” and it contains a link to a malicious Word document. Do not click the link in this email, instead please forward it to spam@docusign.com and then delete the email immediately. For more information on how to spot phishing please see our phishing white paper (3.3 MB).