Looks like you've been attacked by a Trojan.
This site will give you more info:
http://www.v3.co.uk/vnunet/news/2145...-attack-paypal
A lot of the time the attack comes in on USB Memory Sticks from China. That's how half the MOD network was brought down 18 months ago.
A legit site would never ask for your PIN number, it is no use to them. However it is perfect for anyone making a cloned credit card.
You need to run a good anti virus and anti malware program. This program is good for detecting trojans and the like:
http://www.filehippo.com/download_ma..._anti_malware/