I felt this “ALERT” from the California Association of Realtors was well worth passing on.
Update 5/17/2017 @ 1:02 PM Pacific Time – New Phishing Campaign Discovered Today
DocuSign has observed a new phishing campaign that began the morning of May 16 (Pacific Time). The email comes from “email@example.com” with the subject “Legal acknowledgement for <person> Document is Ready for Signature” and it contains a link to a malicious, macro-enabled Word document. We suggest you do not open this email, but rather delete it immediately.
As an update to the frequently-asked questions we originally included below:
Q: Have the email addresses of my employees, customers or customers’ customers been exposed as part of this incident?
A: As part of our ongoing investigation, we can now confirm that no signers were on the list of email addresses that was accessed maliciously unless they had signed up for a DocuSign account. That could include direct DocuSign customers; someone who signed a document and elected to open a DocuSign account; or someone who signed up for a DocuSign freemium account – via docusign.com, through a partner integration, or via the DocuSign mobile client.
Q: Do I need to communicate to all of them?
A: We would encourage you to utilize the existing materials on the Trust Center to help your employees, customers or customers’ customers protect themselves from phishing attacks.
As always, please continue to email firstname.lastname@example.org or call +1-800-379-9973 with any additional questions.
This current market can be VERY challenging for homeowners. Many are struggling to get a gauge on their best options. With my guidance, you can make the right decisions immediately and avoid making huge mistakes concerning your biggest and most important asset. I'm here to show you how to eliminate uncertainty, focus on what you need NOW and win.