Latest in Gear

Image credit:

Phishing campaign alerts DocuSign to customer data breach

Malware-laden emails were targeting customers directly.
Jamie Rigg, @jmerigg
May 16, 2017
Share
Tweet
Share

Sponsored Links

shutterstock

A bizarre email address or an obvious misspelling are good indicators that the recent email telling you to reset your Apple ID password isn't what it seems. But there are more sophisticated (and believable) phishing attacks you have to watch out for, like the recent Google Docs scam that linked out to a legit-looking web app. Last week, DocuSign spotted an uptick in phishing emails imitating the company's branding. Being in the business of secure document management, it's not uncommon for DocuSign's name to be on the face of a phishing email; but upon further investigation the firm discovered why this particular campaign was so targeted: It'd been hacked.

As it turns out, "a malicious third party" had managed to break into a "non-core system" that DocuSign uses to send out service announcement emails. This is why the phishing campaign has been so accurately targeting customers, though the red flag here is that emails ask recipients to download a Microsoft Word document (containing malware), which isn't something a genuine DocuSign email would ever request.

The company stresses the breached system contained only a list of email addresses, that it has since been secured, and that all other data and services were untouched. Obviously it's still not a good look for DocuSign given data security is an integral part of its pitch, but it's an important reminder that just because an email looks above board at first glance doesn't mean it can be trusted.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share

Popular on Engadget

GameStop will have more $499 PS5s available to pre-order on Friday

GameStop will have more $499 PS5s available to pre-order on Friday

View
Here's everything Amazon announced at its big hardware event

Here's everything Amazon announced at its big hardware event

View
Oral-B thinks its AI toothbrush can clean your teeth better than you can

Oral-B thinks its AI toothbrush can clean your teeth better than you can

View
Ring made a security drone that flies around inside your home

Ring made a security drone that flies around inside your home

View
Amazon's new Eero mesh routers support WiFi 6

Amazon's new Eero mesh routers support WiFi 6

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr