The growing threat of Docusign phishing attacks (2024)
1–10 of 10 posts
Re: The growing threat of Docusign phishing attacks (2024)
#2I sometimes enjoy reading through my spam folder. I get a lot of docusign phishing (despite not being an important executive). I also get a lot of "docusing" phishing, which gives me a chuckle. Is it bardic spam?
Re: The growing threat of Docusign phishing attacks (2024)
#3Docusign could put a stop to a good chunk of these but they choose not to. They know attackers are abusing their free trial service to send these out using docusign's own domains. Just gate the trial behind a sign-up/sales call.
Re: The growing threat of Docusign phishing attacks (2024)
#4Hey Siri, what is DKIM?
Re: The growing threat of Docusign phishing attacks (2024)
#5Hey Siri, what is DKIM?
DKIM is... not foolproof. It does not stop attackers from faking the visible "From" address. Which still works as phishing vector.
Re: The growing threat of Docusign phishing attacks (2024)
#6Re: The growing threat of Docusign phishing attacks (2024)
#7Honestly I’m shocked this took so long. For years and years this has smelled like a massive vulnerability to me, just because so constantly I find myself getting docusigns from people I have some kind of business with, without any warning in advance that it’s coming.
At least a couple times a year I find myself calling some banker/travel organizer/administrator in charge of some speaking fee/etc./etc. and asking “hey, I have some Docusign with a weird name on it in my inbox, is that from you?”
(See also, every process within a million miles of the mortgage industry, which seems almost custom-made by fraudsters to help other fraudsters, like the whole practice of mailing out letters saying “Surprise! A servicer change happened, now you need to send a check to this totally other company you’ve never heard of! Trust us, it’s real!”)
Re: The growing threat of Docusign phishing attacks (2024)
#8Honestly I’m shocked this took so long. For years and years this has smelled like a massive vulnerability to me, just because so constantly I find myself getting docusigns from people I have some kind of business with, without any warning in advance that it’s coming. At least a couple times a year I find myself calling some banker/travel organizer/administrator in charge of some speaking fee/etc./etc. and asking “hey…
The threat was identified 2 years ago. This is a repost.
Re: The growing threat of Docusign phishing attacks (2024)
#9Hey Siri, what is DKIM?
There's no spoofing involved. DKIM would do quite literally nothing.