DocuSign abused to launch devious phishing scams

Cybersecurity, DocuSign, phishing, Previously, email providers, best eSign software solutions, best password managers, best security keys, Adobe Sign, explains, malware, ransomware, best identity theft protection services

Cybersecurity researchers have discovered a new attack, in which malicious users spoof DocuSign messages to send malicious documents and phishing links.

Previously, hackers have exploited the trust users associate with DocuSign to pass around fake phishing emails, to pilfer user credentials from all major email providers.

DocuSign is an electronic signature technology used by businesses and individuals to exchange contracts, tax documents and legal materials.

The threat actors behind this new wave of phishing attacks, discovered by email security vendor Avanan, are using this legitimate application to pass malicious links.

“E-signature providers such as DocuSign and Adobe Sign typically flatten uploaded document files and convert them into static .pdf files. This does help deter threats such as Macros from being embedded in the document. However, hyperlinks within a .pdf, .docx, etc., get carried on in the document and retain clickability to the end recipients after Signing execution,” explains Avanan’s Jeremy Fuchs in a blog post.

Abusing trust

Avanan explains that although DocuSign has implemented various security measures to prevent malicious documents from being hosted on its infrastructure, a trailblazing attacker could use mechanisms like steganography to override the checks and deliver “a weaponized piece of malware or ransomware.”

Furthermore, Avanan discovered that while embedding booby-trapped files does take some doing, malicious links can be added to any document without any effort or trick.

In his writeup Fuchs argues that this is a particularly effective strategy since it hosts the phishing link on DocuSign’s servers, while keeping the email clean, which helps it get past any security checks imposed by the client clients.

Fuchs notes that Avanan has shared details about this attack vector with the DocuSign information security and threat intelligence team.

Internet Explorer Channel Network
News Related

OTHER NEWS

This 4K drone packed with flight features is now on sale for less than $80

TLDR: This nifty 4K drone model brings together precision flying ability with a 4K-ready camera for stellar images and video at a price tag under $80. We could say the ... Read more »

Google Sheets is about to become much easier to use

To make its spreadsheet software easier to use, particularly on devices with smaller screen real estate, Google has decided to make a couple of functional, as well as cosmetic changes ... Read more »

Best cheap website builder deals of 2021

The best cheap website builder options are no-code, drag and drop tools that include hosting, letting you build your own site from scratch, creating endless opportunities to grow your business, ... Read more »

Best MP3 player 2021 top portable music players from Apple, Onkyo, Astell & Kern and more

If you thought MP3 players no longer existed, you’re not alone. But the best MP3 players you can buy in 2021 are now more advanced than you might imagine and ... Read more »

EU court fines Poland €1m a day over judiciary row

EU court fines Poland 1 million euros per day over judiciary row – EPA-EFE/Shutterstock /Shutterstock The EU's top court on Wednesday ordered Poland to pay one million euros a day ... Read more »

Anthony Joshua Accepts Tyson Fury's Offer to Train Him – Under One Condition

Since his unanimous defeat against Oleksandr Usyk back in September we haven't heard too much from Anthony Joshua. Sure, there have been rumblings that he's been travelling around the US ... Read more »

SpaceX to fix leaky toilets ahead of planned launch at the weekend

The launch, from Cape Canaveral on Sunday, will mark SpaceX’s fourth launch of Nasa astronauts (REUTERS) SpaceX is having to fix its leaking toilets ahead of its planned launch at ... Read more »

Emmerdale star Danny Miller and fiancée Steph Jones welcome baby

Photo credit: @danny_b_miller – Instagram Danny Miller is now a dad after welcoming a baby with his fiancé. The Emmerdale actor announced that his partner Steph Jones had given birth ... Read more »

Best Dolby Atmos speakers: your guide to getting amazing object-based audio

The best Dolby Atmos speakers you can buy today are the latest evolution in multi-channel audio, bringing you an experience that’s beyond the limits of conventional surround sound systems. Dolby ... Read more »

You can now use Adobe Photoshop on your desktop browser

Adobe has announced that its photo editing platforms Photoshop and Illustrator are coming to the web. This means you can access your projects anywhere without installing the softwares on your ... Read more »

World's smallest arcade packs Nvidia GeForce Now streaming into a red phone box

Nvidia has created what it claims is the ‘world’s smallest gaming arcade’, which is essentially a repurposed British red phone box that’s packed with the hardware necessary to allow for ... Read more »

These are the 5 highest-paying jobs for engineers in the UK

When you’re on the hunt for a new job, there are a number of things to consider. We all have our personal list of what we want from a job. ... Read more »

Lightyear trailer takes Buzz to infinity, and... well, watch it and find out

The trailer for Disney and Pixar’s next big blockbuster has landed, you can watch the Lightyear trailer below. Lightyear will bring us the origin story of Buzz Lightyear – of ... Read more »

Windows 10 is getting Windows 11's new Microsoft Store

Rudy Huyn, Architect of the Microsoft Store, has confirmed that the redesigned Store is coming to Windows 10 users who are currently signed into the Insider program. The new Microsoft ... Read more »

FCC revokes China Telecom's US authorisiation over national security concerns

China Telecom must withdraw its communications services in the US within 60 days after the US Federal Communications Commission (FCC) revoked its authorisation to operate. An ‘order of revocation and ... Read more »

God of War: Ragnarok PS5 release date, trailer, news and rumors

God of War: Ragnarok is heading to PS5 and PS4 in 2022, and we’ve finally seen some gameplay footage and got the official title thanks to the PlayStation Showcase. Since ... Read more »

YouTube says it has over 20 lakh creators now on the platform

YouTube continues to pen the success story for Google and Over 2 million (20 lakh) creators are now making money and building their businesses on YouTube, the company has said.According ... Read more »

India in final stages of clearing national cybersecurity strategy, says national coordinator

India is in the final stages to clear a National Cybersecurity Strategy in the wake of growing cyber attacks and threats from nation-state actors against the country, national cyber security ... Read more »

Here are the EE Pocket-lint Awards nominees for Best Flagship Phone 2021 and how to vote

© Provided by Pocket-lint Here are the EE Pocket-lint Awards nominees for Best Flagship Phone 2021 and how to vote photo 1 (Pocket-lint) – The EE Pocket-lint Awards celebrates the best ... Read more »

Tech & Science Daily: The world's first ‘thinking' robot

(Yuichiro Yada, Shusaku Yasuda, and Hirokazu Takahashi) The world’s first ever ‘thinking’ robot has just been created. Using brain-like neurons grown in a lab, Japanese scientists managed to get the ... Read more »

PlayStation VR 2: PSVR 2 is coming to PS5, here's everything you need to know

Sony has officially confirmed the PSVR 2 is on its way. This latest-gen VR headset will work exclusively with the PS5 and be the successor to the original PlayStation VR, ... Read more »

Modular DJI Action 2 tries a little too hard to differ from GoPro Hero 10 Black

The DJI Action 2 is a dramatic overhaul of the drone giant’s previous action camera, the DJI Osmo Action – and while its modular design is clever and versatile, the ... Read more »

China woos Intel, Infineon and others in chip investment push to boost supply chain security

The investment promotion bureau of China’s Ministry of Commerce has held talks with Intel, STMicroelectronics, Infineon Technologies and other firms to discuss setting up a working group to facilitate “cross-border ... Read more »

Save $250 on the best budget QLED TV with these early Black Friday TCL deals

Black Friday is still weeks away but the early deals have already started. Right now you can find great savings across TCL’s entire 2021 TV range at Best Buy, Walmart, ... Read more »

Bang & Olufsen launches a headset for work that you might actually want to wear

One of the world’s most famous audio brands is looking to add a bit of glamour to your video conferencing calls with a super-smart new release. Ban & Olufsen has ... Read more »

GTA 5 PS5 and Xbox Series X: release date, enhancements and what we know

GTA 5 PS5 and Xbox Series X is happening. The iconic GTA 5 will have released on three generations of consoles after it arrives, “expanded and enhanced”, on the new ... Read more »

The Lord of the Rings Gollum game release date, trailers, news and rumors

The Lord of the Rings: Gollum, developed by Daedalic Entertainment who you might know as the creators of the Deponia point-and-click adventure series, has been in active development for quite ... Read more »

Key budget announcements: Alcohol, fuel and tax changes revealed in chancellor's statement

Here are the key points from Chancellor Rishi Sunak's budget speech: • The chancellor says there are “challenging” months ahead, adding that inflation in September was 3.1% and is likely ... Read more »

9 in 10 Indians say talking to chatbots better for career growth: Report

Nine in 10 Indians believe that chatbots or robots can support their career better than human HR managers, as they grapple with various mental health issues in the pandemic, a ... Read more »

‘A Quiet Place' video game adaptation will be released next year

From the trailer of “A Quiet Place” | Photo credit: Paramount Pictures / YouTube screenshot The box office hit “A Quiet Place” is the latest popular film to get a ... Read more »

Best indoor TV antennas 2021: 6 digital TV antennas worth having

The best indoor TV antennas are a must-have if you’ve cut the cord for good when it comes to cable TV. Buying an indoor TV antenna for your home is ... Read more »

2023 Corvette Z06 extends legend with radical new engine, 2.6-second 0-60 dash

If General Motors’ shift to electric vehicles spells the end of the legendary Chevy small-block V8, the engine that powered many of its greatest vehicles is going out with a ... Read more »

New Windows Store now live for Windows 10 testers

The new store has a better design and new features Microsoft has rolled out the new Microsoft Store to Windows 10 testers. The new store features in Windows 11 and ... Read more »

Budget 2021: Sunak resets UK's spending focus for a post-covid economy

Watch: Rishi Sunak delivers his Budget speech after PMQs UK chancellor Rishi Sunak laid out sweeping plans for the next three financial years in his Autumn Budget and Spending Review ... Read more »

'Universe' and 'The Love Trap': The 5 best things on TV on Wednesday, 27 October

‘Universe’ and ‘The Love Trap’ are in Wednesday’s TV highlights. (BBC/ITV) Professor Brian Cox opens out eyes to the wonders of the solar system again tonight in new BBC Two ... Read more »

Iran says sweeping cyberattack took down gas stations across country

“There should be serious readiness in the field of cyberwar," Iranian President Ebrahim Raisi said. Read more »

Saints Row reboot: what can we expect to see from Volition's next game?

Read more »

TCL TV 2021 range: every new TCL TV for this year

In 2020, TCL launched a number of new TVs, proving you don’t need to pay a small fortune to get a good new TV. Now we’re nearing the end of ... Read more »

Dell Cyber Monday sale: the best Dell deals on cheap laptops and PC's you can find right now

Dell is currently displaying some absolute bargains in the Cyber Monday sale, and we’re seeing some fantastic offers available on the best laptops and desktop PCs sold by the computing ... Read more »

Google is making more than ever before, here's why

Tech giant has posted all-time record revenue in the second quarter of 2021. During its quarterly earnings call, Google revealed that it recorded revenue of $65.1 billion whereas its profits ... Read more »
On free-english-test.com you will find lots of free English exam practice materials to help you improve your English skills: grammar, listening, reading, writing, ielts, toeic