Users and buyers of Microsoft India store beware as a Chinese group by the name EvilShadow hacked and defaced the Indian Microsoft Store website and displayed the image shown below.The hackers placed a picture of the Guy Fawkes mask that is often used by Anonymous hacker group who are famous for their past hacking activities.A new URL /evil.html was created and displayed the following message as shown below in the 2nd image.The hacker group also revealed about the Store database along with the username and passwords.
So users of Microsoft please go and change your passwords immediately if you haven’t done so and prevent further misuse with your account.Microsoft appears to have responded quickly and very seriously and haven taken the site down as MicrosoftStore.co.in seems to be offline.The hacker group also revealed that user passwords were saved in plain text and were not encrypted.So whose fault is it ? Microsoft or the the Indian group Quasar Media which was handling maintenance of the site.The group’s motivations are unknown, though the hacked page warned that an “unsafe system will be baptized.HackTeach posted the image about the username and passwords.
Microsoft sent an email to users requesting them to change their passwords immediately.
We are writing to inform you that there may have been unauthorized access to some of your customer account information on Microsoft Store India. We have confirmed that databases storing credit card details and payment information were not affected during this compromise. However, exposed account details may include non-financial related information including e-mail address, password, order details and shipping address.
Microsoft Store takes this situation very seriously, and the company is diligently working to remedy the issue and keep our customers protected. We need your help in this regard and we ask that you please take the following steps to prohibit any further unauthorized access to your information.
Precautions You Should Take
In order to secure your account information, Microsoft Store will take the action to re-set your password. Please follow these steps to ensure your privacy is protected:
1. If you use the same e-mail and password combination on any other sites, including non-Microsoft websites or services, you should proactively change the password immediately to ensure your personal information is protected.
2. You will receive an e-mail with a temporary password and a prompt to create a new password. Please note, the password reset relates only to Microsoft Store India.
3. Once you receive the e-mail you should immediately create a new password, one that is both secure and familiar to you.