Docusign phishing scam using a compromised law firm webspace

  Every now and again we see a phishing scam that stops you in your tracks and you think WTF. this is one of them. It starts with a fake Docusign email that contains a link to a bit.ly short url. What makes this one so bad is that the bit.ly short url has been live since 20 August 2019 and as of the time of writing has had 1801 clicks. Now to make it even worse the bit.ly redirect is to a lawyers office  http://stevensandgoldwyn.com that probably has been compromised for the same length of time or even longer.  Continue reading →