[Dynamo]

Of course I'm not aware of the severity of the P4V hack; not enough input on that. But because the hack was so old and there is no complaint from any user from any visible annoyance of any kind --especially from the leak of private data...--, I'm a bit perplexed as to the quick decision to just pack up things and close the forum!!..

I would have hoped at least that @Dynamo gave us the full account of what exactly happened to P4V--ie how deep was the exploit.. and why he deemed necessary to just close the forum instead of purging P4V assets from the compromising exploits. This disclosure may also serve as a lesson to(/educate) everybody else using MyBB.

As I had written in the first post, while updating the forum, I came across a file named dbkiss.php on googling found out that it was a script to control the database(though the one used here was made for an older version of php). After which I further started to search more came across a script that might be used to gain ssh access upon examining the modification dates and backups it looks like it was there since 2018, not really sure exactly which vulnerability the attacker used. It is not vise to just delete those files and forget about it, since there might be more such files already planted, or even worse, there might be some XSS scripts loaded in the database ready to be exploited in the future.

It happened most probably due to MyBB and plugins not being up to date from time to time.