Tumblr user thereisselfpreservation "I'm seeing warnings about scammers trying to commission artists but the "reference sheet" for their character they want commissioned isn't an image but a .vbs file ("visual basic script"), and will run a script when you open it, probably to yoink your account(s), but I haven't seen this from anyone who's actually clicked it yet. Just be careful and never open a file like that, 'cause people suck." Reply from the same user: "For reference (heh)" Screenshots of messages. Sender: "Okay, I've sent it now." There's a file attachment called "Shork_YCH_MyReference_v1.vbs". The vbs extension is circled. Sender: "If everything is in order, I can send the overpayment." Sender, in reply to the file attachment (again with the vbs extension circled): "How much would the full piece cost?" thereisselfpreservation: "At a glance, the file name checks out. But!! do not open a .vbs file!!!
You should know that the infamous I Love You virus uses the same trick - Always make sure to turn on 'show file extensions' in your windows/browser settings.