Scammers Fake Docusign Templates to Blackmail & Steal From Companies

Researchers observed a surge in DocuSign-themed phishing where cybercriminals buy cheap, authentic-looking email and document templates (as little as $10) and harvested login credentials on Russian forums. Attackers use these assets to phish employees, harvest DocuSign account access, probe document histories for sensitive information, and conduct follow-on frauds such as vendor impersonation, extortion, or resale of credentials; security advice includes verifying senders, checking links, and opening documents directly from vendor sites.