It's probably a way to get phished, if you click on a malicious bmp file.