DocuSign Data-Hack Resulted in Malware-Ridden Spam

DocuSign that supplies e-signature technology admitted one data hack occurrence that enabled an outside entity towards acquiring admission into clients' e-mail addresses, information which is getting utilized within massive spam attacks.

Following the past 2 weeks when the company kept on detecting spam attacks aimed at its clients, it found the data hack. The spam mails had official branding while appeared as true DocuSign e-mails.

The hacker managed reaching one segregated, non-core device that enabled it admission into users' e-mail ids, suggests one update put up onto the DocuSign portal. The malware-laced spam messages dispatched to those ids utilized DocuSign's brand while carried one Word document attachment which planted malicious software if opened. Cyberscoop.com posted this, May 16, 2017.

Crafted to seem as though dispatched from DocuSign, the phishing electronic mails carried headers such as "Completed [domain name/e-mail id] -Accounting Invoice [number] Document Ready for Signature" or "Completed: [domain name] - Wire transfer for recipient-name Document Ready for Signature." The Word files attached to the e-mails planted malicious software in case viewed.

The whole lot of e-mails' Word files attempt at duping end-users into enabling the macro feature of Microsoft Word that when let to run causes the malware inside the attachment to download as well as plant onto the victimized end-user's PC. DocuSign reports that remaining information consisting of end-users' names, social security numbers, passwords and other files weren't hacked.

The company, on 9th May, started tracking the spam assault via its security website, albeit only on May 16, it substantiated about its electronic mail address list getting seized.

DocuSign has as well urged end-users to be watchful about web-links which don't correspond with its authorized domains, such as https://www.docusign.net or https://www.docusign.com.

According to the company, it adopted extra measures of security while informed law enforcement. According to it, clients should follow certain ways for safeguarding themselves, like sending the dubious electronic mails to spam@docusign.com prior to erasing them completely, reading the white paper of DocuSign about phishing, and updating anti-virus programs. Currently DocuSign is making clients know that the exposure of their e-mails was an effort for raising awareness.

» SPAMfighter News - 5/19/2017