Microsoft's India Store hacked, passwords saved as plain text

[nsane.forums]

Microsoft's online store in India has been compromised and passwords related to that site have been exposed. As of 12PM EST, the site was still offline.

Microsoft has online stores for each localized region and the store in India has been compromised. As of 12:30 PM EST http://www.microsoftstore.co.in/ was still offline. WPsauce.com was able to grab a couple screenshots before the site went down that revealed that EvilShadow team was responsible for the breach, although the hackers are not design experts as blue text on black backgrounds makes getting your message across a bit harder on the eyes.

The real damage from this breach of security is that the database of the site has been compromised and to make things even worse, the passwords were saved as plain text. If you have ever created an account on Microsoft's store for India, it is imperative that you change your password immediately on all other websites that use similar phrases or logins.

A breach of security such as this is bad enough publicity for Microsoft but the fact that they did not adhere to industry best practices for securing sensitive data is rather alarming considering how often consumers use the same or similar passwords on multiple websites.

If/When Microsoft offers an update to the situation we will update this post.

View: Original Article

[sasha007]

lol .

[nsane.forums]

Microsoft India Store Hacked, User Database Exposed

Microsoft is investigating a "limited compromise" of the company's online store in India, the company said Monday.

"The store customers have already been sent guidance on the issue and suggested immediate actions," the company said in a statement.

The user names and passwords of some customers may have been leaked, and users are being advised to change their passwords, said a person close to the situation, who declined to be named. Financial information of customers has not been exposed, the person said.

The store was defaced over the weekend by hackers who claimed to be Chinese. The hackers also released images of what appeared to be lists of users' names and passwords.

The Microsoft website is managed by a third-party service provider and was still down on Monday. Microsoft said on the site that it is working to restore access as quickly as possible.

The relatively unknown hacker group, called EvilShadow Team, wrote in Mandarin in a blog post that it had changed the main page of the store, and placed an image of China's flag on it because it wanted Microsoft to pay attention. "We are not famous, we know that there are other experts among us, people who are even better," the group said.

India has border disputes with both China and Pakistan, and the animosity gets reflected on social networks, and in hacks of websites on both sides of the borders. Some top Indian websites including that of the country's Central Bureau of Investigation have been hacked.

1,651 websites were defaced in India in November, according to data from the Indian Computer Emergency Response Team (CERT-In).

View: Original Article