It could also be part of a subtle phishing attack, many users wouldn't think twice if a message from their "manager" told them to use a new site as a source, which has hidden payload text (in this case white-on-white font, but they mention there are other ways to achieve the same thing) so it looks normal even if they think to check it.