There is a new wave of phishing scams. In the industry this is called the “secure doc” theme. It’s getting very popular with the bad guys. We are seeing a spike of malicious ones coming in at the moment.
There are active phishing campaigns using fake DocuSign, EchoSign and Secure Adobe PDF attachments trying to trap employees into opening them up. One user reported receiving one of these, with the “from” address spoofed as coming from their own attorney. That’s a nasty form of spear phishing.
https://blog.knowbe4.com/scam-of-the-week-secure-document-phishing-attacks-trap-employees