something similar happened to a vc business that my Dad used to work for. They acquired the domain with an extra letter in the middle. They emailed the controller posing as the owner of the company and instructed him to wire low xx,xxx to an account. They chose the perfect time to pull this scam, the business was in the middle of a big legal case that was costing them a lot of money. The owner happened to be out of town at that time and was emailing the controller and instructing him to wire money to different places on a daily basis.