Cybercriminals Exploit DocuSign Envelopes API to Deceive Businesses. Here is what we know.

Cybercriminals have found a new way to deceive businesses by exploiting DocuSign’s Envelopes API. This sophisticated attack involves sending realistic fake invoices that appear to come from trusted sources like Norton and PayPal. The goal is to trick recipients into signing these documents, which can then be used to authorize payments outside of normal company procedures.

How the Attack Works

Attackers create legitimate DocuSign accounts and use the platform’s templates to design invoices that mimic the branding and layout of well-known companies. By using the “Envelopes: create” API function, they can generate and send a high volume of these fraudulent invoices to numerous potential victims simultaneously.

The emails are sent directly from DocuSign’s domain, bypassing email security protections and appearing legitimate to recipients.

Impact on Businesses

Once a recipient signs the fake invoice, the attackers can use the signed document to request payment from the organization’s finance department. This method effectively bypasses the billing department and allows the attackers to steal money from their victims.

The consistency of these attacks suggests a highly automated approach, making it difficult for businesses to detect and prevent them.

DocuSign Response

DocuSign has acknowledged the issue and stated that they take these reports seriously. The company has implemented additional safeguards to prevent misuse of their services. However, the API-friendly design of DocuSign’s platform creates vulnerabilities that can be exploited by malicious actors.

Protecting Against Such Attacks

To protect against these types of attacks, businesses should be cautious when receiving unexpected invoices or other communications through email. It is essential to verify the authenticity of such requests by contacting the supposed sender directly through known and trusted channels. Additionally, organizations can implement stricter email security measures and educate employees about the risks of phishing scams.

Conclusion

The abuse of DocuSign’s Envelopes API highlights the evolving tactics used by cybercriminals to deceive businesses and steal money. By staying vigilant and implementing robust security measures, organizations can better protect themselves from these sophisticated attacks.

You think you have a story worth everyone’s time? SUBMIT A STORY and we will publish it