I received an email from what looked like a friend, it had a suspicious link I inspected the email address and saw that the username was spot on but the domain name was totally different. I also put the link through a suspicious link checker and it came through as such. The username is quite a unique one I'm very suspicious as it feels like a personal attack. That said I don't how these phishing people operate so am asking for your thoughts
I would like to bring your attention to a malware called Trickbot. This TrendMicro article on Trickbot should bring you up to speed.
I have worked with the malware a couple of times in recent months and you might be interested in one of its capabilities.
It is able to steal email credentials & address-books. The compromised sender email address will then be used to spoof the subsequent mass emails to the potential victims in the address-book.
Essentially by doing this, the chances of this malware infecting another user by clicking it is way higher. The intention is to let the victim's guard down by putting a familiar name to the malicious email. Victims would assume that the sender is legitimate, like a friend or a colleague, and would then click the link and compromised itself and the cycle continues. So let's say an address book of 150 recipients, all it takes is one out of the 150 to keep the chain going.
You might've witnessed this malware first hand, notify your friend through proper channels, and see what is going on.
as it feels like a personal attack.
I can see why you would feel this way, I am not ruling out the personal attack reasoning. But I am just letting you know that there is a way that there are automated/customized personal attacks being crafted where you are just a potential victim of another victim.