DocuSign is a great and efficient way to obtain authentic signatures for contracts and invoices. As with other efficient tools, threat actors will and have found a way to use the DocuSign API to send fake invoices to divert funds.

According to security researchers at Wallarm, “Unlike traditional phishing scams that rely on deceptively…