On GMail, I've received a phishing email from someone I know, and the email has been sent to other people the victim knows. One of the emails is claiming to be from their GMail address, while the other is claiming to be from zendesk, mentioning a github project the user owns.
I'm thinking of reporting it, but I'm worried that the owner of the hijacked email account will be treated as a phisherman, rather than an non-malicious user.
GMail has a help page on phishing, but it doesn't address my concern.
If I report the email as phishing, will this cause problems for the owner of the hijacked email account?
There's a question about this on the webapps stack exchange, but it didn't receive a lot of attention, and users there may not know as much about security, and incident responses, as users here.