As @Docusign is used to digitally sign sensitive & confidential documents, you know it’s a prime target for attackers. @Ironscales details a very crafty & convincing #Docusign attack. It used a redirect-chain attack designed to dodge scanners. #infosec
https://cybersec.ironscales.com/s/the-docusign-email-that-wasn-t-a-three-redirect-credential-harvest-25677
The DocuSign Email That Wasn't - A Three-Redirect Credential Harvest

Attackers used a redirect chain via Google Maps and Amazon S3 to bypass scanners and harvest credentials from a fake DocuSign email.