FYI for anyone running a vBulletin website
http://thehackernews.com/2014/01/ope...ni-hacker.html
It may have been due to this YUI Security Issue
where they suggest replacing file "uploader.swf" with an empty file
http://www.vbulletin.org/forum/showt...39#post2472139