I wonder how the OP is getting on with fixing this as not posted back maybe fixed or still in process. Hope OP gets problem resolved and fixed and nice secure again.
Should be okay. Hiding miners behind private networks / firewalls and away from publicly visible IPs shuts down this type of hack entirely.