Threat actors are abusing DocuSign's Envelopes API to create and mass-distribute fake invoices that appear genuine, impersonating well-known brands like Norton and PayPal.

By accessing DocuSign’s APIs, particularly the Envelopes: create API, cybercriminals can scale operations quickly and target multiple organizations at once. API Exploitation and Security Measures ...