For the first 4 days that was the biggest one with me and maybe still is as to how my 2fa could be switched off, they would first need to get around my 2fa to switch 2fa off if you get my meaning.
There is one way to stop 2fa as far as I know, is by contacting wallet support where you tell them that you have lost access to 2fa and they do some questions including information from your account to know that you are the actual account holder, such as the amount of assets you have in your wallet and also the date of the last deposit or withdrawal and such Things, if you pass the questions successfully they will deactivate your 2fa so you can activate it again.
Some platforms are less strict about 2fa as they only ask for an email or phone number to verify.
In any case, the person who hacked your account must have sufficient information about your account as well as your email and phone, so it is likely that your device is hacked and the hacker has all the information required to cancel 2fa.