Jason Nickerson covers all the basics in this cPanel security post. It’s also a really good reminder of you get what you pay for in this world.
The internet is full of pirated/nulled software and fake resource sites. It is vital to download your theme or plugin from the official website or developer.
Jason Nickerson