Someone hacking website

[FTG LIQUID CL]

Not sure if this is the right place to post this,But I need some help.Someone is hacking in to my website.A couple days ago I got on my website and the entire home page had been changed.On the home page was a message that said you have been hacked by powersurge.
Then today someone posted in my chat box that my website was gonna be moving to power surge.The weird part is ,it said it was posted by the main admin account on my website.I changed my passwords right away.I restored my website through my host account.Every thing seems to be fine,but how was someone able to hack my website and how do I stop it from happening again.Thanks

[LouiseWilson]

Could be many reasons, security on your server, chmod incorrectly of certain files, insecure mods, there are more obvious ones

I would right at this time disable your mods via your config.php and .htaccess your mod cp & admincp to just your IP address.
Without logs or more information I'm not sure what else anyone can do for you.

Oh and back up daily ............. or in your case right now back up hourly :P

[New Joe]

Yes, p0wersurge, claim they can hack any vBulletin forum, and that is really more of a, they can, over a claim

They hacked one huge site, which in a way was good as it was a site for nulled scripts, vbteam was the name, they also tried to take down another huge nulled site called, forumscriptz, but they got their server down quickly as they saw vbteam getting hacked.
The outcome of the above was good for IB and vBulletin, as they are now both off line and won't be coming back.

The people who did this to your forum are here:
http://www.p0wersurge.com/forums/forum.php
https://twitter.com/p0wersurge

All vbulletin customers should be aware their Forums are not safe from these hackers, they are the best around at the present time.

As said above, keep backups of everything, and keep an eye on what is happening on your forum.

[FTG LIQUID CL]

They just recently hacked me,could this be because of a mod I recently added.I dont understand why they would want to hack my forum.I only have like 500 members and its a gaming website.Thanks for the info.

[New Joe]

It's not a case as why, it's more of 'they can' so they do.
All about the vbulletin stuff can be found in this section
http://www.p0wersurge.com/forums/forumdisplay.php?f=201

[ForceHSS]

No point in the link joe can't see any posts unless you register

[New Joe]

I just registered so I could read the Threads, really easy to do

[ForceHSS]

Not going to register on a hacking site

[New Joe]

Use a proxi or vps and make a new e mail account just for that site only.
Really interesting how they can hack vbulletin sites, lots if information within the Threads there.

[kh99]

Originally Posted by New Joe

All vbulletin customers should be aware their Forums are not safe from these hackers, they are the best around at the present time.

I don't buy the "can hack any forum" thing. It doesn't matter how good a hacker is, they still need to find a mistake to exploit. It's always possible there is a hole in vbulletin that isn't publicly known, but I think it's more likely that they go looking for known security issues that haven't been repaired.