The new trojan ( mentioned by Symantec in the second half of April ) uses the Windows Genuine Advantage feature of Vista in order to obtain data from you. Windows Genuine Advantage basically validates and revalidates the software on your PC when it receives new updates in order to be sure that your version of Vista is genuine.

The Kardphisher trojan as it was called simulates the genuine check and fails it, so when you reboot your PC a popup message will appear asking you if you want to validate your Vista or not. If you choose “No” the computer will simply reboot, if you choose “Yes” an form will appear asking your your credit card number and other details. And that’s not all of it, as Microsoft started releasing paid updates online, users might think the credit card check is legitimate and send their private information easily.

Well it seems that Vista is not as secure as Microsoft wants it to be so be careful what information you send online.