Happens all the time, they do this for various scams, They will also often send messages, multi media with a virus attached.

If your friends don't know about this, tell them to Google it. And...