I'm guessing xenforo? Most forums use it - even the illicit ones. The issue probably stems from an insecure plugin - this was how OGUsers was hacked.