For a few weeks, my admin and user password are stolen.
I followed all the rules against brute force, but after a few days, after I restore the website with the old backup, I found a new admin user and password.
What is strange is that today I found the previous admin user and a impossible to decrypt password:
I have 220.127.116.11 version, including captcha on the backend login.
Please help me with some advice,