Emails from people I know, but asking to open and download a document (US)

The user is receiving scam emails that appear to be from people in their address book but originate from random email addresses. They are concerned about potential email account hacking or unauthorized access to their address book.