Weird enough. Everything is up to date but still having the issue.

Same FTP (but changed to password), different themes and plugins but still have wp-updatexxxxxxx user created outside wp