DocuSign scam targeted more than 10,000 inboxes: report

Scammers used a malicious DocuSign document in a campaign that tried to steal credentials belonging to more than 10,000 people across several organizations. 

Researchers at cybersecurity company Armorblox said the brand impersonation campaign targeted Microsoft Office 365 email accounts and managed to bypass other security tools. 

The subject of the emails was “Please DocuSign: Approve Document 2023-01-11” in an attempt to make victims think the email was urgent and needed to be opened as …

accounts armorblox brand brand impersonation bypass campaign credentials cybersecurity cybersecurity company document docusign email emails impersonation malicious managed microsoft microsoft office microsoft office 365 office office 365 organizations people report researchers scam scammers security security tools steal tools