Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Kaspersky reported two waves of phishing emails impersonating DocuSign and Zoom to steal corporate credentials. The Zoom-themed messages also used embedded forms requesting personal and credit-card details. To check an unexpected message, don’t trust its logo or display name: verify the request through a known channel, and use DocuSign’s direct verification process for document requests.
What Kaspersky reported
Kaspersky described a campaign targeting corporate accounts in two waves. The first emails impersonated DocuSign and included links intended to steal login credentials. They were sent to accounts in the Middle East, Latin America, Western Europe, Russia, Armenia, and Azerbaijan. A little more than a week later, a second wave impersonated Zoom, warning recipients that their accounts were about to be disabled. Those messages used credential-stealing links and embedded forms requesting personal information and credit-card details. Kaspersky’s September 28, 2026 announcement described the Zoom wave as ongoing at the time; that wording does not establish that it remains active now.
Kaspersky’s Latin American report said more than 1,000 campaign emails had been detected through September 11, 2026. That is a count of detected emails—not confirmed victims or successful account compromises. The regional report does not establish how many recipients entered information.
How can I tell if a Zoom or DocuSign email is a phishing scam?
No single visual clue proves that an email is genuine or malicious. A familiar brand, logo, sender display name, or notification style can be copied. In the campaign Kaspersky described, the warning signs were the request itself: a document-related lure or urgent claim that a Zoom account would soon be disabled, followed by a link or form seeking sensitive information.
Recommended Free Tools
#1 Best Overall
![Norton 360 Deluxe 2027 Antivirus, 3 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41qw3FS3qLL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 3 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
- Treat an unexpected request for credentials, personal details, or payment-card information as suspicious. Don’t follow its link or fill out its form.
- Verify the request with the supposed sender using contact information or a communication channel you already trust—not details supplied in the email.
- Don’t assume a message is safe because it appears to come from a colleague or a familiar service. A compromised corporate account can potentially be used to impersonate an employee or send fraudulent messages.
The reviewed reports do not provide sender domains, message headers, malicious URLs, or a universal visual test. If you need to assess a specific email, your organization’s security team can examine the message and its technical details.
How to verify an unexpected DocuSign request
For a message that appears to be a DocuSign request, DocuSign advises recipients to go directly to docusign.com, choose Access Documents, and enter the unique security code included in the email. This avoids relying on a link in a message you have not verified. You can forward a suspicious email as an attachment to verify@docusign.com or report it through DocuSign’s abuse tools.
Rank #2
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
DocuSign’s August 20, 2026 fraud alert describes a separate campaign using blurred document previews and malicious “unblur” downloads. DocuSign says it will not require software or an unblurring tool to view a document. That alert is distinct from the Zoom and DocuSign credential-theft campaign Kaspersky reported.
What to do if you receive or act on one
If you have not interacted with the email
- Do not click links, open unexpected downloads, or submit information in an embedded form.
- Report the message through your organization’s established security channel. If it appears to be a DocuSign scam, you can also use the reporting options above.
- If the request might be legitimate, confirm it separately with the sender or your IT team.
If you entered information
Contact your organization’s IT or security team promptly and explain what information you submitted. If you entered a work password, follow your organization’s process for changing it and securing the account. If you submitted payment-card details, contact the card issuer through its official channel. These steps respond to the kinds of information the reported Zoom forms sought; Kaspersky did not report confirmed compromises or specify a recovery procedure for affected recipients.
Rank #3
- NEVER WORRY about losing important files and photos again! With 25GB of secure online storage, you know your files are safe and sound.
- KEEP YOUR COMPUTER RUNNING FAST with our system optimizer. By removing unnecessary files, it works like a PC tune-up, so you can keep working smoothly.
- Our PASSWORD MANAGER by Last Pass creates, encrypts, and saves all your passwords, so you only have to remember one.
- As the #1 TRUSTED PROVIDER OF THREAT INTELLIGENCE, Webroot protection is quick and easy to download, install, and run, so you don’t have to wait around to be fully protected.
- STAY PROTECTED EVERYWHERE you go, at home, in a café, at the airport—everywhere—on ALL YOUR DEVICES with cloud-based protection against viruses and other online threats.
How organizations can reduce the risk
Kaspersky recommends layering technical controls with employee preparation rather than relying only on people to recognize every deceptive message. Its recommendations include:
- Dedicated email protection to detect and block phishing before messages reach staff.
- Regular security training and threat communications, supported by controlled phishing exercises.
- Multifactor authentication for email, especially for privileged accounts. Kaspersky also suggests passwordless options such as security tokens or mobile push where possible.
Kaspersky says a compromised corporate account can expose sensitive information, enable impersonation or fraudulent messages, and create risk for other corporate services when credentials are reused. These are possible consequences, not outcomes confirmed for every email in this campaign. For authentication choices, organizations should check compatibility with their identity provider and account configuration, along with phishing resistance, recovery procedures, and deployment and support requirements. The reports do not endorse a particular vendor or device.
Rank #4
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few clicks, and your info stays protected on public Wi-Fi every time you connect.
- PERSONAL DATA SCANS – Take your info off the market. We’ll find your personal information on sites selling it, then guide you on how to remove it.
- SOCIAL PRIVACY MANAGER – Decide what you share. McAfee finds the privacy settings buried in your social accounts and fixes them.
In the words of Andrey Kovtun, Kaspersky’s Email Threats Protection Group Manager, “Even these low-tech tactics should be caught by dedicated security solutions, so a company’s cyber safety doesn’t depend solely on the human factor.”
Quick Recap
Best Value
- SPEED-OPTIMIZED PROTECTION FOR WINDOWS: World-class antivirus security and cyber protection for Windows PCs (Windows 7 with Service Pack 1, Windows 8, Windows 8.1, Windows 10, and Windows 11), Organize and keep your digital life safe from hackers
- ESSENTIAL THREAT DEFENSE: Your software is always up-to-date to defend against the latest attacks, and includes: complete real-time data protection, multi-layer malware, ransomware, cryptomining, phishing, fraud, and spam protection, and more.
- SUPERIOR PRIVACY PROTECTION: Your privacy is our priority. Bitdefender keeps you safe with: a dedicated safe online banking browser, anti-tracker, file shredder, social network protection, wi-fi security advisor, and more
- TOP-TIER PERFORMANCE: Bitdefender technology provides near-zero impact on your computer’s hardware, including: Autopilot security advisor, auto-adaptive performance technology, game/movie/work modes, OneClick Optimizer, battery mode, and more
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
