DocuSign has observed a new phishing campaign that began the morning of September 6th (Pacific Time).

The email comes from "Warner Amann via DocuSign” (note, this name is subject to change) using the email address docusign@fmelaw.com. The email has the subject “Your Bill 123456 for yourdomain.com Document is Ready for Signature” and it contains a link to a malicious, macro-enabled Word document. This email is not sent from DocuSign. Do not click the link in this email, instead please forward it to spam@docusign.com and then delete the email immediately.

For more information on how to spot phishing please see our Combating Phishing white paper (3.3 MB).