Fix joomla hacked site

My websites index.php is changing on regular basis by a hacker probably by script injection. I usually replace the code of index.php with the default and the problem is gone for 1 or 2 days until the hacker changes it again.
I run on latest joomla version 3.10.1
I want to find out what is causing this issue and fix it.