The Journal of Nanoparticle Research victim of an organized rogue editor network
link.springer.com
link.springer.com
I nearly fell for a vaguely similar attack: an email apparently from a relative's account. It was phrased suspiciously, and then I noticed that the reply-to didn't go to the same account. If I had bitten, I doubt I'd have been taken in by the reply (I imagine they'd have asked for money), but only because of stylistic issues, not technical ones.
So it doesn't surprise me that a better targeted attack could succeed, even against somebody fairly sophisticated.