Your crime is having friends with lax security protocols.
Your crime is having friends who are normal non-geek people and who just click on everything that arrives by email
Unfortunately had Outlook set with a reading pane permanently displayed - now switched off
I thought that particular stupid back door was closed years ago. Now, Outlook should not execute any attachments unless they are files with the proper image file suffix. Then, you should be exposed only if you have the other back door unplugged; the one where a specially formatted jpeg can execute code of the attacker's choice, but M$ have plugged that one too,
AFAIK.