Phishing for Houses Part 2

A few weeks ago I wrote an article over at VIA Studio about a phishing attempt sent to me in regards to house documents (I’m in the process of buying a house). Today I received another phishing attempt, this time posing to from DocuSign, and it was a little bit more fleshed out.

First off, if you didn’t know, DocuSign is used for basically everything in the house buying process. Instead of faxing over papers and running to the realtors office, the realtor can send over a document that can be “signed” by you over the computer (basically you clicking a button that signs it). Below is a normal email from DocuSign and the one I received.

Compared to the real email, the fake one is offset but generally the same look. Clicking the link takes you to a fake DocuSign website in the attempt of getting your email credentials.

After typing in your credentials a PDF document pretending to be an actual housing offer is displayed.