“However, the moment the email appeared in your inbox, it changed.”
CSS in HTML email can hide text until the message gets forwarded, then reveal a different message to the new recipient. Your manager forwards a harmless customer question, you receive a wire transfer request, and he confirms he sent it. Lutra told Microsoft about Outlook on the web on March 20. Microsoft closed the report six days later without doing anything.