Sshadow said:
Make sure you change your password for cPanel. That is most likely how they did it. Also make sure myBB is up to date and your only using trusted plugins for it.
Actually getting a cPanel password is one of the hardest way to hack a forum. Unless the server admin is a moron, the security settings will stop anybody doing a brute-force attack to get the password (usually blacklisting the IP).
Rocky said:
I agree with Sshadow. It's most likely they got your cPanel details because that's the only way I can think of them being able to re-name and edit files... Have you given anyone your cPanel details lately or haven't changed it since the last time you gave it to someone? If not maybe that's the person who hacked you. Change the password immediately and make it complex...
Incorrect. One can re-name and edit files by executing scripts, and is much easier to do (if one were to find a vulnerability in software) than hacking a cPanel password.
If you're using a bridge, they most likely got in using that. From experience, forum software is usually pretty good with security, but the bridges are usually not updated as well. Bonus points if the software you're bridging isn't secure. If you don't have any bridges installed, portals and other addons might have a vulnerability. MODs that have style changes or do simple code edits you can eliminate.
