I've received a few such emails from "friends" lately. Of course, since they are not from their real addresses, I know they are spam of some sort. You probably have nothing to worry about as such, just change out your passwords.