6 ms·

I'm not sure DocuSign has a full handle on what happened here yet. I received six (6) DocuSign emails, half of which used a convincing subject derived from actu

I'm not sure DocuSign has a full handle on what happened here yet. I received six (6) DocuSign emails, half of which used a convincing subject derived from actual DocuSign documents I have signed or processed through the system. Perhaps a coincidence? Or these hackers gained access to more than just "email addresses".

secfirstmd 9y ago
Hmmm yes I have received a few and if I recall, some of them had titles very similar to docusign documents I was previously sent. Exact titles similar to this: "Accounting Invoice 630761 Document Ready for Signature"
- user5994461 9y ago
  The postmortem states that the phishing campaign used only a few patterns. "Delete any emails with the subject line, “Completed: [domain name] – Wire transfer for recipient-name Document Ready for Signature” and “Completed [domain name/email address] – Accounting Invoice [Number] Document Ready for Signature”. These emails are not from DocuSign. They were sent by a malicious third party and contain a link to malware spam." Did you received phishing with other subjects?
  - koolba 9y ago
    As a general rule, if you receive an email referencing wire transfers, it's probably bogus.
    - adrianN 9y ago
      Given the ratio of spam to ham, as a general rule every email is probably bogus.
      - Neliquat 9y ago
        Youd think that, but I never seem to get spam bug reports or feature requests. Always sex, drugs or money related it seems.
        nobodyorother 9y ago
        Now you've just given me new, horrifying, nightmares of the future. ---- Feature Request: Your software does not make it easy to buy drugs, money, or sex as buydrugsmoneyandsex-dot-com does. Please implement buydrugsmoneyandsex-dot-com functionality by directing users to that website through our affiliate link program: http://preview.tinyurl.com/2tx http://preview.tinyurl.com/2tx
deleted 9y ago
[deleted]
bogomipz 9y ago
I am skeptical as well. I feel like the standard procedure these days is for a company to acknowledge that their security has been compromised but that the breach was limited to only non-sensitive data.
- ams6110 9y ago
  I'm not an expert but once you are breached I feel it's very difficult to be sure what was or was not accessed. Maybe if the system breached was air-gapped or completely third-party (e.g. a mail list provider) you can safely say "no personal information" was accessed but as a user, my trust in DocuSign is now lower no matter what they say.
  - bogomipz 9y ago
    I agree on both points.
smhenderson 9y ago
At my work we too have received dozens of phishing emails purportedly from DocuSign. Most are getting caught but a few are making it to people's inbox. Which is terrible because a lot of my coworkers use DocuSign and think nothing of clicking on a link in one of these rather convincing emails.
- jrs235 9y ago
  As a real estate agent DocuSign is used immensely. Not just by agents, but the documents are sent to customers and clients who are probably more susceptible to these types of scams. Sigh.
  - lanaius 9y ago
    Wife and I just closed on our home - good thing this didn't happen DURING the process as we got a ton of DocuSign requests.

secfirstmd 9y ago

Hmmm yes I have received a few and if I recall, some of them had titles very similar to docusign documents I was previously sent. Exact titles similar to this: "Accounting Invoice 630761 Document Ready for Signature"

user5994461 9y ago
The postmortem states that the phishing campaign used only a few patterns. "Delete any emails with the subject line, “Completed: [domain name] – Wire transfer for recipient-name Document Ready for Signature” and “Completed [domain name/email address] – Accounting Invoice [Number] Document Ready for Signature”. These emails are not from DocuSign. They were sent by a malicious third party and contain a link to malware spam." Did you received phishing with other subjects?
- koolba 9y ago
  As a general rule, if you receive an email referencing wire transfers, it's probably bogus.
  - adrianN 9y ago
    Given the ratio of spam to ham, as a general rule every email is probably bogus.
    - Neliquat 9y ago
      Youd think that, but I never seem to get spam bug reports or feature requests. Always sex, drugs or money related it seems.
      - nobodyorother 9y ago
        Now you've just given me new, horrifying, nightmares of the future. ---- Feature Request: Your software does not make it easy to buy drugs, money, or sex as buydrugsmoneyandsex-dot-com does. Please implement buydrugsmoneyandsex-dot-com functionality by directing users to that website through our affiliate link program: http://preview.tinyurl.com/2tx http://preview.tinyurl.com/2tx

deleted 9y ago

[deleted]

bogomipz 9y ago

I am skeptical as well. I feel like the standard procedure these days is for a company to acknowledge that their security has been compromised but that the breach was limited to only non-sensitive data.

ams6110 9y ago
I'm not an expert but once you are breached I feel it's very difficult to be sure what was or was not accessed. Maybe if the system breached was air-gapped or completely third-party (e.g. a mail list provider) you can safely say "no personal information" was accessed but as a user, my trust in DocuSign is now lower no matter what they say.
- bogomipz 9y ago
  I agree on both points.

smhenderson 9y ago

At my work we too have received dozens of phishing emails purportedly from DocuSign. Most are getting caught but a few are making it to people's inbox. Which is terrible because a lot of my coworkers use DocuSign and think nothing of clicking on a link in one of these rather convincing emails.

jrs235 9y ago
As a real estate agent DocuSign is used immensely. Not just by agents, but the documents are sent to customers and clients who are probably more susceptible to these types of scams. Sigh.
- lanaius 9y ago
  Wife and I just closed on our home - good thing this didn't happen DURING the process as we got a ton of DocuSign requests.