I just received the following email with title “Review the document“:
From: Echosign@adobe.com
Hi,
You have received a document via Adobe Echosign.
Sign in with your googlemail to review the document.
Sign In Here.
Thank you.
Clicking the “Sign In Here” takes you to a page on anffaslonigo.it that I think is pretending to be a Google log in page, even though it actually looks nothing like one:
When you enter your details your are then redirected to https://www.echosign.adobe.com/en/home.html – the real, official page. However, you are not logged in to Google or Echosign (I tested with fake details).
Obviously if you enter your Google email address and password all you are doing is giving them access to your account. They are then free to steal your data, spam your friends, hack your websites and generally be complete bastards.