At ExtraTorrent we try and provide you with the most useful and important information, this snippet was posted in our forum by LesLes, we recommend you read it all
Symantec reported recently on a Trojan horse that mimics the Microsoft Windows activation interface. Called Trojan.Kardphisher, it doesn’t do most of the technical things that Trojans usually do: It’s purely a social-engineering attack, aimed at stealing credit card information.
In a sense, it’s a standalone phishing program.
Once you reboot, Kardphisher asks you to reactivate your copy of Windows, citing piracy issues and telling you that another user has activated your copy. Though it assures you that you will not actually be charged, it asks for credit card information.
If you don’t enter the credit card information, Kardphisher shuts down the PC. The Trojan also disables the Windows Task Manager, which makes it more difficult to shut the malware down.
Looks Pretty Official.