To clarify...in short:
Recently, my MX records were changed by someone. I noticed that a few days later, and changed it back to Google as it is my email service provider. I also changed my password to cPanel.
I do have an antivirus (Bitdefender), but I'm not 100% sure it can protect me.