You received invoice from DocuSign Electronic Signature Service - Spam Warning!

You received invoice from DocuSign Electronic Signature Service - Spam Warning!   This email ha

You received invoice from DocuSign Electronic Signature Service - Spam Warning!

 

This email has been doing the rounds this week:

From:                                                       DocuSign Signature and Invoice <[email protected]>

Sent:                                                         17 October 2018 17:19

To:                                                            Recipient

Subject:                                                   You received invoice from DocuSign Electronic Signature Service

 

 

 

 

DocuSign

Review and sign an invoice.

 

Dear Receiver,

Please review this invoice
It is an electronically created invoice notification.

 

This email keeps a secure link to DocuSign. Do not show this access code with anybody.

Alternative Signing Way
Visit DocuSign, click 'Access Documents', enter the security code: 01D975C517

About Our Service
Sign invoice electronically in just minutes. It is secure. No matter if you are at work, at home or even across the globe -- DocuSign provides a trusted solution for Digital Operations .

Questions regarding an Invoice?
In case you need to edit the document or have inquiries , please contact the sender directly.

If you cannot sign an invoice, visit the Help page on our support .

This message was sent to you by DocuSign Electronic Signature Service.

 

 

This is a good shout for a spam as the truth about docusign is that it is trusted very quickly and it is not always that obvious what the document is in connection with as it is often the commencement of a relationship so you don't know the person sending you the contract well.

The giveaway is, of course, the URL you are being sent to: http://runwithhunt.com?1P34=YourEmailEncoded is an unencrypted http site with a very different name to docusign. 

The website is just as disappointing, it does not impersonate Docusign at all, but simply downloads a harmful Word 2003 macro file:

 

Add comment