Microsoft's India store hacked, usernames & passwords stolen

February 13, 2012
Hacj

New Delhi, February 13: Hackers, allegedly belonging to a Chinese group called Evil Shadow Team, struck at www.microsoftstore.co.in on Sunday night, stealing login ids and passwords of people who had used the website for shopping Microsoftproducts.

While it is troublesome that hackers were able to breach security at a website owned by one of the biggest IT companies in the world, it is more alarming that user details - login ids and passwords - were reportedly stored in plain text file, without any encryption.

Following the hack, the members of Evil Shadow Team, posted a message on the Microsoft website saying "unsafe system will be baptized". The story was first reported by www.wpsauce.com.

Later, the website seemed to have been taken offline by Microsoft. We advise the users at Microsoft India Store to change the password as soon the website comes online. Also, if they have used the same password or login id on any other web service, they should change it immediately.

Last year, hacker groups like Lulzsec had carried out several-profile high profile break-ins, putting focus on the security measures companies put in place. Sony allegedly suffered several security breaches and hackers stole user ids and passwords of customers from its network.

In a message posted on a website called Pastebin, Lulzsec claimed the group was bringing attention to the web security. "Do you think every hacker announces everything they've hacked? We certainly haven't, and we're damn sure others are playing the silent game. Do you feel safe with your Facebook accounts, your Google Mail accounts, your Skype accounts? What makes you think a hacker isn't silently sitting inside all of these right now," the group wrote.

But the incident at Microsoft Store on Sunday hints that lessons have not been learnt. Just like Sony, which later revealed that user ids and passwords were not encrypted at the time of security breach, Microsoft too seemed to have been casual about handling the user details by storing them in a plain text file. We have contacted Microsoft but company has so far not acknowledged or commented on the security breach.


Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
January 20,2020

Ahmedabad, Jan 20: Cops in Gandhinagar fell in a catch-22 situation when a state government employee approached them with a complaint that the 26-year-old woman class teacher of his 14-year-old son had gone missing taking his son in tow. The man, who works at Udyog Bhavan in Gandhinagar said the woman had seduced his teenage son, who studies in class VIII and taken him away with her. The boy had gone missing from 4pm on Friday, and the classteacher was also missing.

A police official said the woman teacher had been too intimate with the allegedly missing boy for around a year, and the school authorities had recently rebuked them. “As their relationship was unaccepted, they left their homes on Friday,” he said. It was rare to find a case of a woman teacher eloping with her teenage student, the official added.

An FIR for elopement under Section 363 IPC has been registered with Kalol city police in Gandhinagar district. The complaint stated the teacher is a resident of Darbari chawl in Kalol town.

“When I reached home at around 7pm, I found my son missing. My wife told me he had left home at around 4pm. We searched for him in the neighbourhood and among relatives, but couldn’t trace him,” claims the teenage boy’s father in the FIR. “I went to the teacher’s house but they were not there,” the man stated.

Inspector K K Desai of Kalol city police said the missing duo could not be traced as they were not carrying cellphones.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
January 11,2020

New Delhi, Jan 11: Assets worth Rs 78 crore have been attached by the ED in connection with a money laundering probe against former ICICI Bank Chairman Chanda Kochhar and others, officials said on Friday.

A provisional order under the Prevention of Money Laundering Act (PMLA) has been issued for attachment of the properties that includes Kochhar's Mumbai-based house and some other assets belonging to a company linked to her, they said.

The book value of the attached assets is Rs 78 crore, they said.

The Enforcement Directorate (ED) is probing Kochhar, her husband Deepak Kochhar and others in a case of alleged irregularities and money laundering in giving loans by the bank to the Videocon group.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
July 12,2020

Tamil Nadu, Jul 12: An alleged attempt by a 19-year-old man to "open a branch of the State Bank of India" at Panruti near Tamil Nadu was scuttled and he was arrested for forgery, police said on Saturday.

The man, son of retired SBI employees, had readied fake seals and challans of the public sector lender, and had other paraphernalia like a cash counting machine needed "to run a bank branch," on an upper floor of his residence at Panruti, about 25 km from Tamil Nadu.

He had not, however, put up any signboard. The SBI Panruti branch manager lodged a complaint with police seeking action following a tip-off by a customer that the man was "opening an SBI branch and has challans as well."

A printer who printed the challans and another who had made fake seals were held for similar offences and abetment.

They were produced before a magistrate court and enlarged on bail.

Asked if the man had cheated people by soliciting deposits or facilitating loans, Panruti police inspector K Ambethkar said, "no..we have not received any such complaint so far."

The man's late father had worked for SBI and his mother had retired from the same bank some time back, he said.

To a question, the police inspector said the man's mother, who has mobility issues, and another woman a relative living in the same house had no clue about his "idea."

Investigations revealed that he aspired to work for a bank and since he had closely watched banking operations for long he was "very knowledgeable" about it.

On the suspected motive, he said several of his replies were incomprehensible, childish, and strange notwithstanding his excellent understanding of the banking processes.

"He even calmly told us that he awaited approval from Mumbai to open the (SBI) branch and that he was about to put up a signboard," the inspector said, adding that the man had tried unsuccessfully to get employment on compassionate grounds in the SBI following the death of his father in harness.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.