Is it possible to get your account hacked only by not clicking to any links?

So my friend told me that he was in a group chat, one of his friends clicked to a malicious link

At first, it wouldn't be surprising if his friend got his account hacked but somehow my friend's account also got hacked and hijacked

He told me that he didn't click to any links, hell no interaction with links such as copying or something

How's that even possible? What are the possibilities for your account getting hacked by other client's click?