{"success":true,"data":{"id":"docusign-api-abuse-invoice-lure","label":"DocuSign API abuse — @docusign.net sender impersonating consumer brand (Norton/PayPal/Geek Squad) with invoice amount","description":"Email from a real @docusign.net / @docusign.com address (passes DMARC/SPF) impersonates consumer brands (Norton, PayPal, McAfee, Geek Squad, Best Buy) with a dollar-amount invoice. Attackers pay for DocuSign accounts and abuse the Envelopes API to mass-send fake invoices that email auth cannot block. Wallarm and BleepingComputer documented active campaigns since Nov 2024; HHS issued a healthcare sector alert. Common amounts: $199–$499 designed to trigger callback-phone fraud.","tier":"danger","category":"other","isThin":false}}