7/29/2026 at 6:42:39 PM
by saikatsg
7/29/2026 at 7:14:00 PM
Docusign could put a stop to a good chunk of these but they choose not to. They know attackers are abusing their free trial service to send these out using docusign's own domains. Just gate the trial behind a sign-up/sales call.by thewebguyd
7/29/2026 at 9:00:00 PM
Honestly I’m shocked this took so long. For years and years this has smelled like a massive vulnerability to me, just because so constantly I find myself getting docusigns from people I have some kind of business with, without any warning in advance that it’s coming.At least a couple times a year I find myself calling some banker/travel organizer/administrator in charge of some speaking fee/etc./etc. and asking “hey, I have some Docusign with a weird name on it in my inbox, is that from you?”
(See also, every process within a million miles of the mortgage industry, which seems almost custom-made by fraudsters to help other fraudsters, like the whole practice of mailing out letters saying “Surprise! A servicer change happened, now you need to send a check to this totally other company you’ve never heard of! Trust us, it’s real!”)
by paultopia
7/29/2026 at 9:11:59 PM
The threat was identified 2 years ago. This is a repost.by 1970-01-01
7/29/2026 at 7:07:38 PM
I sometimes enjoy reading through my spam folder. I get a lot of docusign phishing (despite not being an important executive). I also get a lot of "docusing" phishing, which gives me a chuckle. Is it bardic spam?by wiml
7/29/2026 at 7:15:08 PM
Hey Siri, what is DKIM?by effnorwood
7/29/2026 at 7:29:47 PM
DKIM is... not foolproof. It does not stop attackers from faking the visible "From" address. Which still works as phishing vector.by SirFatty
7/29/2026 at 7:45:35 PM
Hey Siri, I get a lot of Docusigns because I'm a lawyer. Check my domain DKIM status please.by effnorwood