Chinese hackers have hacked Microsoft’s India store and it seems, user id/password has been compromised as is evident from pictures posted by the Evil Shadow Team.
Important to note that the official site was not run by Microsoft, but by Quasar Media, which has been appointed to operate & maintain Microsoft’s online store.
At the time of reporting this, the site has been taken offline and all the evil files (http://www.microsoftstore.co.in/evil.html) have been removed.
Worst of all, the site was storing password in plain text, a sin that needs no further comment.
[The news was first reported by wpsauce.]
Ashish Sinha