Phishers have adopted another trick: they send emails pretending to be from Docusign with a fake link to a document that the recipient must sign.