Microsoft's India store hacked, usernames & passwords stolen

February 13, 2012
Hacj

New Delhi, February 13: Hackers, allegedly belonging to a Chinese group called Evil Shadow Team, struck at www.microsoftstore.co.in on Sunday night, stealing login ids and passwords of people who had used the website for shopping Microsoftproducts.

While it is troublesome that hackers were able to breach security at a website owned by one of the biggest IT companies in the world, it is more alarming that user details - login ids and passwords - were reportedly stored in plain text file, without any encryption.

Following the hack, the members of Evil Shadow Team, posted a message on the Microsoft website saying "unsafe system will be baptized". The story was first reported by www.wpsauce.com.

Later, the website seemed to have been taken offline by Microsoft. We advise the users at Microsoft India Store to change the password as soon the website comes online. Also, if they have used the same password or login id on any other web service, they should change it immediately.

Last year, hacker groups like Lulzsec had carried out several-profile high profile break-ins, putting focus on the security measures companies put in place. Sony allegedly suffered several security breaches and hackers stole user ids and passwords of customers from its network.

In a message posted on a website called Pastebin, Lulzsec claimed the group was bringing attention to the web security. "Do you think every hacker announces everything they've hacked? We certainly haven't, and we're damn sure others are playing the silent game. Do you feel safe with your Facebook accounts, your Google Mail accounts, your Skype accounts? What makes you think a hacker isn't silently sitting inside all of these right now," the group wrote.

But the incident at Microsoft Store on Sunday hints that lessons have not been learnt. Just like Sony, which later revealed that user ids and passwords were not encrypted at the time of security breach, Microsoft too seemed to have been casual about handling the user details by storing them in a plain text file. We have contacted Microsoft but company has so far not acknowledged or commented on the security breach.


Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
February 16,2020

Five Bajrang Dal activists have been arrested for allegedly indulging in vandalism in the city on Valentines Day, police said.

They said about 10 to 15 activists on two wheelers vandalised a shop in Kattupalli area in Hyderabad on February 14.

They held aloft flags and raised slogans against celebration of Valentines Day and "created havoc" at different malls, a police press release said.

On receiving information, police rushed to a mall, but the Bajrang Dal activists escaped from the spot.

Five of them were later identified with the help of CCTV footage and arrested, police said.

The others too have been identified and efforts were on to nab them, police said.

Two cases have been registered against them under relevant sections of the Indian Penal Code on a complaint from shop owners, the release said.

 

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
January 17,2020

Jan 17: Police have busted a "high- profile" sex racket operating in a three-star hotel in suburban Andheri and arrested a 29-year-old woman and rescued three female artists, including a minor, an official said on Thursday.

The Social Service (SS) branch of the city police conducted the raid at the hotel at Andheri East on Thursday, the official said.

"During the raid, three females, including a minor, were found to have been forced into prostitution. They were rescued and a woman, identified as Priya Sharma, who was operating the racket, was arrested," he said.

"Sharma was running tours and travel agency in Kandivali East. However, she was involved in immoral activities," senior inspector of SS branch, Sandesh Revale, said.

While one of the rescued is a woman actor and singer, who has worked in 'Savdhaan India' TV crime show, he said, another one has worked in a Marathi movie and serials.

The minor has worked in a web series, Revale added.

The offence was being registered against Sharma, he said.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
July 7,2020

Meerut: The licence of a private hospital in Uttar Pradesh’s Meerut has been suspended after a video showing its staff member providing fake Covid-19 report had gone viral.

"A video had gone viral in Meerut. We have registered a case in this regard. We have suspended the licence of the nursing home. Today, we have sealed it also. Strict action will be taken against anybody who will do something like this in this time of crisis,” said Anil Dhingra, District Magistrate, Meerut.

In the video, the person can be heard saying that they provide Covid-19 negative report for Rs 2,500, Dhingra stated.

Meerut CMO Rajkumar said, “In the video, a man from the hospital can be heard saying that he can arrange COVID-19 negative report and the person can get operation or other things done. We have identified the man. We have suspended the licence of the hospital and an FIR has been registered.”

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.