Microsoft's India store hacked, usernames & passwords stolen

February 13, 2012
Hacj

New Delhi, February 13: Hackers, allegedly belonging to a Chinese group called Evil Shadow Team, struck at www.microsoftstore.co.in on Sunday night, stealing login ids and passwords of people who had used the website for shopping Microsoftproducts.

While it is troublesome that hackers were able to breach security at a website owned by one of the biggest IT companies in the world, it is more alarming that user details - login ids and passwords - were reportedly stored in plain text file, without any encryption.

Following the hack, the members of Evil Shadow Team, posted a message on the Microsoft website saying "unsafe system will be baptized". The story was first reported by www.wpsauce.com.

Later, the website seemed to have been taken offline by Microsoft. We advise the users at Microsoft India Store to change the password as soon the website comes online. Also, if they have used the same password or login id on any other web service, they should change it immediately.

Last year, hacker groups like Lulzsec had carried out several-profile high profile break-ins, putting focus on the security measures companies put in place. Sony allegedly suffered several security breaches and hackers stole user ids and passwords of customers from its network.

In a message posted on a website called Pastebin, Lulzsec claimed the group was bringing attention to the web security. "Do you think every hacker announces everything they've hacked? We certainly haven't, and we're damn sure others are playing the silent game. Do you feel safe with your Facebook accounts, your Google Mail accounts, your Skype accounts? What makes you think a hacker isn't silently sitting inside all of these right now," the group wrote.

But the incident at Microsoft Store on Sunday hints that lessons have not been learnt. Just like Sony, which later revealed that user ids and passwords were not encrypted at the time of security breach, Microsoft too seemed to have been casual about handling the user details by storing them in a plain text file. We have contacted Microsoft but company has so far not acknowledged or commented on the security breach.


Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
March 12,2020

Mar 12: Three women were arrested for allegedly administrating fake coronavirus vaccines to villagers in Maharashtra's Jalna district, police said on Thursday.

The police on Wednesday arrested Beed residents Radha Ramnath Saamse, Seema Krishna Andhale and Sangeeta Rajendra Avhad, who allegedly posed as doctors and healthcare workers, an official said.

The trio met villagers of Pipalgoan in Ambad tehsil, informed them about a vaccine that could protect them from coronavirus and administered it to gullible locals, he said.

Some villagers informed Dr Mahadev Munde, a medical officer at a rural health centre, about this, after which a complaint was lodged, the official said.

Fake vaccines and bottles, which were seized from the accused, have been sent to the state health department, he said, adding that a case of cheating has been registered against the trio.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
June 6,2020

Kota (Rajasthan), Jun 6: A 14-year-old boy allegedly hanged himself to death on early Saturday morning shortly after he stopped playing PUBG throughout the night and went to sleep, said police. 

Railway Colony police station’s in-charge Hansraj Meena said the boy, a class 9 student and son of an Army man, was found hanging from the grill of the ventilator in his bedroom on early Saturday morning. 

Meena said according to the boy’s family members, the boy had downloaded the gaming programme on his mother’s mobile phone only three days back but had been playing the game virtually continuously for the last three days. 

He kept on playing the game till 3 am in a room in which his brother was studying, said Meena, adding the boy went to adjoining to sleep after that. His body was found hanging from the ventilator’s grill in the morning, he said, adding the boy was rushed to MBS Hospital, where he was declared “brought dead”. 

No suicide note was recovered in the case, the SHO said. The boy lived in Gandhi Colony in the city along with his mother and brother, while his father, a Tamil Nadu native and Army man, is currently posted in Arunachal Pradesh. The boy’s body has been kept in hospital’s morgue for the postmortem, the SHO said.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
May 10,2020

Mumbai, May 10: A 32-year old man, running a bakery here has been arrested for alleged promotion of products using a tagline that said his firm does not employ Muslims, police said on Sunday.

The man, who is also selling his products online had allegedly said "made by Jains on orders, no Muslim staff" for promotion purposes in his WhatApp group.

A complaint was lodged against him saying the words depicted Muslims in a bad light and Mambalam police registered a case and arrested him, a release said adding a probe was on.

Recently, a man was arrested in Mumbai after he allegedly refused to collect groceries he had ordered online since the delivery person was a Muslim.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.