Microsoft led brand-impersonation phishing in Check Point’s Q3 2026 data
Apple and Google each had 8%, while later lures spoofed Claude, Google Antigravity, Apple, and Docusign.
2
Stories per day · 30 days
2 RSS
8 stories, newest first · one card per story
Stories tagged #docusign
New Windows Malware Built to Survive Takedowns With a Hidden P2P Command Network
Varonis uncovers AvisLoader, a Windows loader using encrypted Tox P2P for takedown-resistant C2, delivered via ClickFix DocuSign lures.
1
Hackers Use Blob URLs and Microsoft Teams to Create Phishing Pages Inside Victims’ Browsers
Barracuda details a phishing campaign using Microsoft Teams OAuth redirects and browser blob URLs to render local fake DocuSign login pages for credential theft.
1
New Phishing Attack Uses Blob URLs to Hide Malicious Pages From Security Scanners
Barracuda detailed a DocuSign-themed phishing campaign that renders credential-harvesting pages as browser blob URLs, evading URL reputation and blocklist defenses.
Cybercriminals are building phishing pages that exist only inside victims’ browsers
Barracuda details a DocuSign-themed phishing campaign that renders login pages locally via blob URLs, abusing genuine Microsoft OAuth and Teams infrastructure.
New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser
Barracuda details a phishing campaign that renders pages in-browser via blob URLs, routed through Microsoft Teams and cdn.bloom[.]io to evade detection.
HVNC Backdoor Targets LATAM Organizations with Fake Tax and DocuSign Lures
A custom HVNC backdoor is targeting Latin American financial organizations via fake DocuSign and NFe tax-document lures, giving attackers hidden persistent remote access.
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
NovaCookies AitM phishing kit, a Sneaky 2FA variant, uses genuine Docusign lures to steal Microsoft 365 sessions at hundreds of organizations.