In September 2015, we published a Fund Alert warning of email hackers changing wiring instructions in order to steal the seller's proceeds. The hackers have upped their game, and are now intercepting emails from the sellers with the original wiring instructions, and changing the instructions to divert the proceeds to hacker's own account.
The emails appear valid, and appear to be from the seller in every way. The only way to protect yourself is to verify with the seller, by phone or in person, that the wiring instructions you have are correct.
While the hackers appear to be pretending to be sellers (because that's where the bulk of the money from any one transaction goes), be careful with all email correspondence. Do not trust an email from anyone when it comes to sending money from your trust account.
For more information, here is a link to the original September 2015 Fund Alert regarding the email hackers.