Major email hack?

Two people have sent emails with links ending in "com_ag_google_analytics2/www.php?html129" The first had to change their password - and spamming stopped. I just called the second to let them know. First was on hotmail - second on yahoo.