[Eagle of Fire]

Then he scans ports of this users, and, if the port, who controls command "net send", opened,[...]

This can be stopped with any firewall.

Because, that people are good and... well... (I can't find a proper word)... responsible (from "respond", if I said right* ) by default, many of this victims sended their pin code to "server".

That's the real problem. I would say those people are very guillible and stupid, at best. And I am in a good mood today. :angel:

This is best described as a BKAC (Between Keyboard And Chair) problem. Any respectable Internet services will never ask for a credit card number directly on a public network. Second to that, the internet service is not responsable of such a thievery since the problem doesn't come from their servers or software, but from the client him/herself because they gave away their unique ID code...

Edit: Oh, and this is not called "hacking" per se. It's pure fraud.

The only hacking occur when your "friend" get the infos he need on the server, infos which are probably not supposed to be available to public. So, as you see, a PC itself is pretty safe from the method you mentioned.