This paper investigates the problem of optimal secure control for networked control systems under hybrid attacks. A control strategy based on the Stackelberg game framework is proposed, which differs from conventional methods by considering both denial-of-service (DoS) and false data injection (FDI) attacks simultaneously. Additionally, the stability conditions for the system under these hybrid attacks are established. It is technically challenging to design the control strategy by predicting attacker actions based on Stcakelberg game to ensure the system stability under hybrid attacks. Another technical difficulty lies in establishing the conditions for mean-square asymptotic stability due to the complexity of the attack scenarios. Finally, simulations on an unstable batch reactor system under hybrid attacks demonstrate the effectiveness of the proposed strategy.