The USDA, Agricultural Marketing Service (AMS) was recently made aware that a vendor received an email from the fake email address “firstname.lastname@example.org” that looks like it is from an AMS employee and requests the reader sign a document using the online service “DocuSign.”
Please be advised that AMS does not use the online service DocuSign and the email address is not a USDA address.
The USDA Cyber Security Team has confirmed that the link within the email takes the user to a website that will attempt to harvest the credentials of the user or computer. If you receive an email from the fraudulent address or an email that appears to be from AMS staff mentions DocuSign, do not click any of the links.
Forward the email to SPAM.ABUSE@wdc.usda.gov, then delete the message.
If you have any questions regarding this notice, please contact your AMS servicing contracting officer.