In the last 24 hours, I have received more than five emails from hotmail addresses where it is very clear the account has been hacked.
If you receive an email from a hotmail account with an unsolicited link in the body of the email assume it is bad.
Let the sender know that you think they have been hacked and recommend they change their password.
I would further recommend they change email addresses, preferably a gmail account. Good security and minimal spam with gmail.