New Windows Trojan designed to dupe users into divulging credit card info

[RedjackRyan]

A new Trojan Horse is making the rounds, impersonating Windows reactivation and antipiracy messages with the goal of duping users into divulging their credit card information.
According to computer security firm Symantec, the Trojan, dubbed Trojan.Kardphisher, creates a Windows look-alike screen, headlined "Microsoft piracy control," and indicates that the copy of Windows was activated by another user and needs to be reactivated.
"To help reduce software piracy, please reactivate your copy of Windows now," it instructs. "You must activate Windows before you can continue to use it." The user is given two choices: reactivating Windows over the Internet immediately or doing it later. No other applications can be run, and Task Manager cannot be launched to force-quit the Trojan.
Yes or No?
If reactivation is deferred, the system is shut down. And if users proceed with the fake reactivation, a second screen appears, requesting private information that includes location, contact information, a credit card number, the card's expiration date and three-digit security number, and even an ATM PIN.
The Trojan informs the user that the credit card information will not be charged. But, once entered, the information is sent to the fraud's perpetrators to use as they wish. The initial screen even references an actual Microsoft antipiracy site: microsoft.com/piracy.

http://news.yahoo.com/s/nf/20070507/bs_nf/52074&printer=1;_ylt=AsU3SGV01nSqJebe6Cx.PSzwPDQD

[paularoid]

This is one of many reasons I don't now have nor do I intend to have a credit card. If there's no postal address to which I can mail a check or a money order, the place does not get my business. Far too many instances of credit information being stolen every day. If I don't have it then nobody can steal it. 'Nuff said.

[RedjackRyan]

I would like to see the numbers, which forms of fraud are most prevelant.. Is online identity theft really as inflated as the media makes it out to be, or are most criminals still doing identity theft the old fashioned way.

I applaud your choice and your willpower Paul, I'd personally find it almost impossible to do the things I do without a card, but i admire those who are able to live without those evil plastic things.

[DaveM]

Paying for stuff with money orders can also be a great way of keeping your financial transactions private.

I think the net has allowed some people to cast a far wider net as far as attempting to scam people is concerned. However, I've gotten variations on the Nigerian scam, pleas for money from various phony religious groups, and credit card scams via snail mail and telephone for as long as I can remember. So the same mentality has been out there for some time, most likely for as long as it has been possible to play the various games involved.