You don't have to comment on other people's comments you know.

Phishing with .bmp files existed for a very long time now.