From tripwire.com
Digital attackers compromised an email server owned by Special Olympics NY and then abused it to target donors with phishing emails.
The attack emails told recipients that an automatic donation transaction of $1,942.49 would register on their accounts within the next two hours. The email then asked recipients to review a PDF statement to confirm that the alleged transaction’s details were correct. Towards that end, the email instructed victims to preview their statement by clicking on a link.