How did those Russians gain entry to my site?
What an awful question, and and what a result! Although I have not seen this happen in the last year and a half, it is not something to be taken lightly.
What is the best way to avoid this is very simple: Use a tough password and change it periodically. I often use the Norton’s Identity Safe page to generate passwords since it’s quick and easy.
Additionally, I have found Nexcess very secure since they do not use the standard industry admin tool-cPanel-and their proprietary admin tools are actually physically separated. It is just not cost-effective for hackers to try to gain access when cPanel can be a “low-hanging fruit” at other hosting companies.