Easily, about 4 or 5 times a month, I get an email from someone I “know.” “Know” is in quotation marks because the sender is actually someone other than the person I really do know, but their email address or account has been hijacked by a scammer. The suspect email usually has very little copy and always has a link in the body of the message. First, if you are the recipient of the message, don’t–repeat, DO NOT–click the link! Any one of a number of bad things can happen and it’s just not worth it. Second, look at the sender’s address. If it’s something other than the usual address, that’s the clue that the address has been ripped-off.
Here is an article that provides additional information: http://www.pcworld.com/article/2927993/what-to-do-when-your-email-address-sends-spam.html. Scammers have way too much time on their hands, and there are a bazillion of ’em out there. Our accounts have been ‘jacked, so even if you’re tech-savvy, it can happen to you. All you can do is guard against it and take the necessary remedies and precautions when it does.