Phishing Email

• Be vigilant of phishing emails and malicious links. If you are unsure of something, DO NOT CLICK ON IT. Submit a ticket to the helpdesk and we’ll be happy to investigate it for you and ensure it’s safe. 

• How to identify potential phishing emails:

  • Suspicious sender email addresses (e.g., slight variations like 'msllcc.com' instead of 'msllc.com' or non-official domains like 'microsoft-support.com' instead of 'microsoft.com')
  • Urgent or threatening language designed to make you act quickly (e.g., "immediate action required" or "security threat detected")
  • Generic greetings like 'Hi Customer' or 'Dear User' instead of your name
  • Unexpected attachments or requests to click on links (especially for "security updates" or to "verify" accounts)
  • Requests for confidential information or credentials
  • Emails claiming to be about Multi-Factor Authentication that ask you to click links to verify your account
  • Suspicious or shortened URLs that hide the actual destination

• If you receive a suspicious email:

  • DO NOT click on any links or download any attachments
  • DO NOT reply to the email
  • Forward the email to the helpdesk or IT security team
  • Delete the email from your inbox
  • If possible, report the email as phishing through your email client's reporting tools

Be especially cautious of emails about Multi-Factor Authentication (MFA):

• Legitimate MFA communications will typically NOT ask you to click links to verify your authentication
• Always verify MFA changes directly through your official Microsoft O365 account portal
• When in doubt, contact your organization's IT support directly through official contact methods

• While in the suspicious email, you can also click on the “Phish Alert” button on the top right-hand side of the toolbar. 

• 

 

Docusign Phishing

Docusign has dedicated reporting channels based on the type of threat:

• Docusign-themed imitation emails and websites: If you think that you’ve received a fraudulent email purporting to come from Docusign, forward the entire email as an attachment to [e-mail] and delete it immediately. If you identify a website imitation of Docusign, please copy and paste the URL into an email to [e-mail]  for investigation. 

• Other security incidents and Docusign-themed threats for investigation: new cybersecurity threats occur regularly. To support Docusign information security and threat intelligence, report security incidents and Docusign platform threats to [e-mail].