The most weird thing is I did not get any notification on telegram for "new device login". - Should my account been compromised. Im sure hiveos guys have nothing to do with this.
If your rig has a real IP address (direct connection) and you have not changed your SSH password than the attacker can SSHing into your rig (many bots constantly scan to get new victims) and change miner settings.
Generally, it's a bad idea mining on the rig with real IP ("white").