Just got a phishing email as a fake “order confirmation” that Gmail didn’t put in my spam folder until I tagged it as a phishing attack:
Powlowski – Daugherty – Order confirmation – 5-November-2026 at 6:27
One attachment • Scanned by Gmail
The attachment seems to indicate an order from Springfield Armory. I didn’t click on it because I’m not a moron and nobody sends an invoice in .BMP, which is a Windows bitmap format. There’s been a known exploit to embed malicious code within a BMP file since 2021.
Then, just minutes later, I got another one:
Pacocha – Krajcik – Order confirmation – 5-November-2026 at 6:47
One attachment • Scanned by Gmail
I reported both for Phishing.
Never click attachments on a email you weren’t expecting, and never click on a file attachment that looks suspicious or is a weird format type.
Always be alert for scams in any unexpected email.
Stay alert, people…
Thank you Lawrence.