I saw this started happening a few days ago when I was receiving emails for people with AOL addresses that I did not speak to in years. The email included a link that when you click it, it redirected to a page and auto downloaded something. On my Android phone it downloaded a file update.apk.
This also happened to Yahoo accounts too. What is not making sense is that it is sending email to people in their address book and its not BCC so you get to see everyone the email was sent to.