A new variation of the Svpeng Trojan uses several tricks to phish for credit card numbers and online banking credentials.