hijacked s9 | Bitcointalksearch.org

mikeywith

legendary

Activity: 2394

Merit: 6581

be constructive or S.T.F.U

Quote from: Bipede85 on March 22, 2021, 05:08:51 AM

Hi, I got a used miner, it seemed to have worked fine for some time, but suddenly yesterday it changed mining address and pool, I tried flashing it with SD card but nothing changes.

Are you sure the Sdcard flash was done right? did you try to flash another working miner to confirm that both the files and the Sdcard function well? I remember someone mentioned that some viruses can corrupt the boot loader which is used to flash the firmware from the Sdcard to the DRAM, and so if that is the case, the control board is bricked for good.

Quote from: Bipede85 on March 22, 2021, 05:08:51 AM

To safeguard the other miners in the network, if I change the admin password of the other miners will they be safe?

No, it's not totally safe, you need to isolate this miner, use a different router / Vlan until you confirm the virus is gone completely.

thierry4wd

sr. member

Activity: 446

Merit: 347

hi, from what I see, it will indeed seem that the miner is corrupted ... I confirm "the virus" is found exclusively in the control card ... the hashboard cards are not affected ...

if the flash by sd card (if it is done well) does not give result ... I am very surprised ... or a virus particularly efficient ... the solution will be to return with SSH, and to see what it goes below! but sela is very difficult to explain, you must know the files of the miner and know how to use SSH, or even unlock it, because if it is really a virus, it must necessarily have locked SSH.

another possibility, very very rare, but it is possible that the miner just corrupted a file, notably the "miner-stat.cgi", the miner actually works perfectly, but the info displayed is wrong.

gt_addict

hero member

Activity: 2534

Merit: 623

The “virus” will be in the control board. Try swapping it for a different one or try a different OS. Braiins OS works well although its not proven to find a block yet. But it hashes and if you get the “Plus” version you can set a power limit and it will auto tune to the best/most efficient settings based on the power limit.

Bipede85

newbie

Activity: 27

Merit: 2

I installed hiveOS, is it good? thierry4wd links aren't working.

changing the admin passwords of the other miners will it be enough to protect them? and the "virus" is it in the board or in the chains?

BitMaxz

legendary

Activity: 3374

Merit: 3095

BTC price road to $80k

Where do you mine? I mean what pool do you mine?

The pool status seems weird are you sure that you flash it through an SD card?

Try to flash it with some custom firmware like Braiins OS or the firmware modded by thierry4wd you can find it from here https://bitcointalksearch.org/topic/exploit-antminer-s9-and-t9-firmware-asicboost-original-moded-free-release-5127323

Bipede85

newbie

Activity: 27

Merit: 2

Hi, I got a used miner, it seemed to have worked fine for some time, but suddenly yesterday it changed mining address and pool, I tried flashing it with SD card but nothing changes. Is there anything I can do to recover him?

The "hacking" affects the board or the chains? (ex. can I use the chains in another s9 without worry?) To safeguard the other miners in the network, if I change the admin password of the other miners will they be safe?

https://imgur.com/a/sROJIM0

Topic: hijacked s9 (Read 133 times)