Threat actors are abusing DocuSign's Envelopes API to create and mass-distribute fake invoices that appear genuine, impersonating well-known brands like Norton and PayPal.

Digging deeper into the scam, Malwarebytes Labs finds that the Docusign Application Programming Interface (API) allows 'customers' to send emails that come from genuine Docusign accounts, and they ...

Cybercriminals are abusing DocuSign’s Envelopes API to trick businesses into signing fake invoices, which are later used to steal money from the victims.

Why? Because that's where the money is Business email compromise scammers are trying to up their success rate by using a DocuSign API.… The Envelope: create API is designed to let users of the ...

Cybercriminals are abusing DocuSign’s Envelopes API to trick businesses into signing fake invoices, which are later used to steal money from the victims.