MyBB forum software developer issues warning after GitHub account hack

A developer from myBB warns administrators using the open source forum software about possible hacking attacks. The warning comes after the myBB developer’s GitHub account has been cracked and source code changes made.

MyBB developer ‘Pirata Nervo’ reports on the forum software’s website that his GitHub account was recently hacked. The attacker would have been able to make changes to the source code of the open source forum software after logging in to GitHub.

It would be malicious code with which the forum software checks whether updates are available. The hacker has injected javascript code that can be used to extract backups of myBB databases.

According to Pirata Nervo, the attacker had access to his account for approximately 16.5 hours. The developer warns website administrators using myBB to check if they may have fallen victim to the hacker. In particular, the date and time of myBB’s automatic backup function should be taken into account.