points
You don't have to comment on other people's comments you know.
Phishing with .bmp files existed for a very long time now.