Office of Information Technology
September 22, 2023
Tags Phishing Email (on campus)

Payroll System Update (via DocuSign)

Phish Bowl Alerts

This phishing email grabs attention and pushes some key buttons by mentioning "Payroll System Update", "payroll information", and invoking the authority of DocuSign. Don't be fooled. Do mark it as phishing if you receive it (open the message in a browser, click on the stack of three dots to the right of the REPLY button and select "Report phishing"). You can also send the message to DocuSign and learn more from their Report security concerns page.

==================================================================
---------- Forwarded message ---------
From: Brown University via DocuSign <dse_NA4@docusign.net>
Date: Thu, Sep 21, 2023 at 4:52 PM
Subject: Payroll System Update
To: Brown University <josiah_carberry@brown.edu>

DocuSign

Brown University sent you a document to review and sign.

[ REVIEW DOCUMENT ]

Brown University
Universitypayrollsystems0010@outlook.com

This is to notify you that your payroll information has been updated.

© Brown University

Do Not Share This Email
This email contains a secure link to DocuSign. Please do not share this email, link, or access code with others.

Alternate Signing Method
Visit DocuSign.com, click 'Access Documents', and enter the security code:
4A2DD50C5A784A8DBE5CFF483F47E75A7

About DocuSign
Sign documents electronically in just minutes. It's safe, secure, and legally binding. Whether you're in an office, at home, on-the-go -- or even across the globe -- DocuSign provides a professional trusted solution for Digital Transaction Management™.

Questions about the Document?
If you need to modify the document or have questions about the details in the document, please reach out to the sender by emailing them directly.

Stop receiving this email
Report this email or read more about Declining to sign and Managing notifications.

If you are having trouble signing the document, please visit the Help with Signing page on our Support Center.
 

==================================================================
From: Brown University via DocuSign <dse_NA4@docusign.net>
Date: Tue, Sep 5, 2023 at 10:23 AM
Subject: Payroll System Update
To: Brown University <josiah_carberry@brown.edu>

DocuSign

Brown University sent you a document to review and sign.

[ REVIEW DOCUMENT ]

Brown University
Universitypayrollsystem0009@outlook.com

This is to notify you that your payroll information has been updated.

© Brown University


Do Not Share This Email

This email contains a secure link to DocuSign. Please do not share this email, link, or access code with others.

Alternate Signing Method
Visit DocuSign.com, click 'Access Documents', and enter the security code:
6BACAAE57B934CD6891432FEE9DE05EB7

Questions about the Document?
If you need to modify the document or have questions about the details in the document, please reach out to the sender by emailing them directly.

Stop receiving this email
Report this email or read more about Declining to sign and Managing notifications.

If you are having trouble signing the document, please visit the Help with Signing page on our Support Center.

==================================================================
From: Brown University via DocuSign <dse_NA4@docusign.net>
Date: Mon, Aug 21, 2023 at 2:06 PM
Subject: Payroll System Update
To: Brown University <josiah_carberry@brown.edu>

DocuSign

Brown University sent you a document to review and sign.

[ REVIEW DOCUMENT ]

Brown University
UniversityPayrolsystem021@outlook.com

This is to notify you that your payroll information has been updated.

© Brown University
 

Do Not Share This Email

This email contains a secure link to DocuSign. Please do not share this email, link, or access code with others.

Alternate Signing Method
Visit DocuSign.com, click 'Access Documents', and enter the security code:
1376B055E757431A9AA528382F1CB14F7

Screenshot of above fake DocuSign document content