Can’t believe how confident must be. Harvard headhunted her without even applying for the job? She must be so cocky to fall for it.
I hope you wouldn't apply that logic to victims of other non-online crimes.
Anyway, separately, she addresses that in her article, convincingly I thought. Plus she's brave and helping others to write about this (which victim blaming doesn't encourage).
This sounds exactly like the kind of job opportunity that's meant to come about by networking, getting your name out there, public speaking and so on. We are often told that this is how the best jobs are found.
At some universities, it’s possible to create email aliases at your .edu domain, so it’s possible that the scammer had access to one or more convincing email addresses.
The article doesn’t say that the emails received were “@harvard.edu” only that they appeared to be valid Harvard ids. That means she made a judgement call that the email were legitimate, but it doesn’t give very many technical details on what she judged that call on.