warezhd.com hacked

[Santocool]

so how did they access ftp?

I think someone betrayed me or server issues, because they didnt hack my site, they hacked the server.

[cyber.crime]

i think they come from the WHMCS billing then they got all info like IP server and user login to master reseller and pass they get from WHMCS database. that why don't make instant setup in WHMCS coz must put server ip/host, user and pass to login in WHM

after got that they hashing the pass then is done all client in that server will be got

[ANDY12001]

so sad