hello! the same thing happens, restore everything and everything is back to normal.
change all passwords, cpanel, db, change the prefix WP.
I use
wp better security
Wordfence
after a time
But as hacker and change back to the user an pass ..
Not noticed another problem, only change the username and password!
You could solve the problem?
which theme you use?
sorry for my English!!