DocuSign-Themed Phishing Email Capturing Corporate Credentials

Employees in sales and procurement were targeted on 13 April 2026 with DocuSign-themed phishing linking to https://agreement-review-now.com/sign; the phishing page harvested email addresses, passwords, and session cookies, and several compromised accounts subsequently sent outbound phishing to external partners.