I'm thankful my paranoia has set up Outlook to not download images. Also, that I don't click on images or links in emails unless I'm expecting the email.
This morning I received an email from "Citi Cards" saying I owed over 8,000 dollars and giving my minimum payment, etc. and telling me I could view the statement online. Pretty standard stuff, eh? Except that I don't have a Citi Card.
Looked up the bank's number and called them. Their rep said they have been pestered all day (Kentucky time) with calls. It is phishing. "But don't open the images. They have a virus in them".