Yes, but in my case it was different.
Please read the point 1. from  my first post.
My deposit address also has changed but after about 2 weeks backed to normal.

I believe that this whole attack campaign started in second half of March.
At that time was reading first posts about change in deposit addresses.
My account was attacked in the first wave, but now when I read about new victims(second wave?) it looks like attackers much improve themself.
Hijacking sessions, making unauthorized withdrawals and bypassing 2FA - it looks very serious.