My page has been hacked, users been created

Hello, yesterday I wanted to create a new user for my page and when I saw the user list there were hundreds of users with the same pattern username. Some of them where administrators, so that’s a big problem.

They seem to be realted to Telegram because all the users are like this: 102 785 RYB SBERBANK telegram – @sibbnk

There is some variation on the usernames but is always that pattern. I have deleted all those users and changed the passwords for all my admin accounts but they keep getting created. Just during this night, 15 more admins were created.

I have updated all plugins and WordPress, I have the Wordfence plugin active and it doesn’t show anything out of the ordinary. I’ve looked in apaches error and access logs but I don’t see anything either.

Can someone help, please.