Exposing the Illusion of Fairness: Auditing Vulnerabilities to Distributional Manipulation Attacks