DocuSign is tracking a malicious email campaign
Resources
Docusign wants to help you protect yourself from online security threats. Below are several resources designed to do that, including:Practical advice on how to reduce risk by combating common Internet-themed threats, such as business email compromise, phishing, and brute-force attacksAn overview of controls that you can apply to reduce risk to an acceptable levelAdditional video guidance from Docusign’s security thought leadersRecommended system and application access best practicesWorkstation securityInstall anti-virus software and ensure it’s enabled and kept up-to-date. Apply vendor-recommended security patches on a frequent basis.Public computers/Internet cafesExercise caution using public computers. Web browsers can cache personal data and store login details. Always log off websites and clear the browser cache when done using a public computer to protect your personal information, passwords, and accounts.Safeguard IDs and passwordsKeep your user IDs and passwords safe by following these tips:Use a strong password that’s difficult for others to guess, and avoid birthdays, names, and pet namesNever write down your password or share it with othersNever provide your Docusign account login or password, credit card number, or other personal information via email or to unknown partiesNote: Docusign will never ask you for your password.Filtering email attachmentsQuarantine any emails from the Internet with potentially harmful attachments, such as .zip and .exe file types. The only attachments Docusign sends in email are PDFs.Combating phishing and malwareRead our “Dealing with Malware” blog post.For advice on how to proactively battle phishing, and identify brand impersonation, read the following resources:Combat Phishing (white paper)How to Combat Phishing (blog)Protecting Your Organization Against Docusign Brand Impersonation (white paper)