Play-2617 DocSign Phish

  This one lives here: https://docs.google.com/document/d/e/2PACX-1vRgWlpv8SawGms6n-bQPKp4

Play-2617 DocuSign Phishing

You received invoice from DocuSign Electronic Signature Service 

DocuSign Signature and Invoice Service [email protected] 

This one lives here: https://docs.google.com/document/d/e/2PACX-1vRgWlpv8SawGms6n-bQPKp4j3_rT0XGz4tiQ9cr7j_LagJKVwmx7TT8PnzSOv3XPfipiEhBQbihplLE/pub

Which takes you here: http://www.serve-tour.com/polygamous.php

Then here: https://www.docusign.com/?download=0202_384807601456.doc

And then downloads this Word Document:

Which we passed up on opening...

No virus messages or error so the macro is probably just about sending email with your contacts in or similar.

 

 

Add comment