A real company wouldn't be scamming candidates.
It could be a real company where someone hijacked an e-mail account to pose as someone from the company, though.