Docusign spearphishing attack: Thorough malware scan and tracking concerns
Good Morning: It finally happened--a spearphishing attack fooled me. Yesterday, received an email pretending to come Docusign stating that Joe Fakename (not his real name) had a document for me to sign. Have done a lot of business with Joe Fakename over the past decade, therefore clicked the Review Document link and got a Page Not Found error message on the "Docusign" website. Clicked on the Open in Scribe Desktop button and got a "Safari cannot open the page because the address is invalid" message.
Went back to the original email and clicked on the Alternate Signing Method link. That led to another error message. Wrote to Joe Fakename to report this and he wrote that he had not sent the email and more than 20 of his contacts had received the same email.
Oddly enough, the phishing email seems to have taken me to the legit Docusign website! Deleted all of the cookies, browsing history, et cetera. Nothing has gotten downloaded to my computer, gave the scammers no information except my email--which they already had--but now they know it's real. Nothing seems to have been installed, but sometimes I like paranoia.
Two questions:
- What software do you recommend for a *thorough* scan of malware, trackers, password and login info thieves, et cetera?
- Can the phishers track online activity without sneaking anything onto my desktop?
TIA,
Vonn
[Edited by Moderator]
Original Title: Docusign Spearphishing
iMac 27″, macOS 15.5
