Prevention and treatment of mining machine poisoning

Recently, some customers reported that some mining farms were hacked, mining pool miners were tampered with, computing power was stolen, etc. After investigation and analysis, most of them were caused by customers visiting irregular websites and downloading third-party firmware or overclocking firmware.

The following prevention and treatment methods are given for this problem:

1. Prevention measures

1. Do not visit unknown or irregular websites.

2. Do not download or use third-party firmware (especially overclocking firmware for S9 and T9+). Please refer to the official firmware.

Note: Any damage to the machine caused by overclocking or the use of third-party firmware will be charged out of warranty by after-sales service.

3. Be sure to change the mining machine login password in time.

2. Treatment methods

1. Network Isolation (Important)

Check all computers and machines on the network to ensure that the computers are not infected with viruses, and isolate the infected machines from other machines on the network.

Use secondary routing to isolate, the specific method is as follows:
1) It is divided into three areas: infected machine, recovery observation and normal machine area.
2) The router does not need to add any routes pointing to other routers, that is, use the default settings.
3) The main line from the primary router is connected to the WLAN port of the secondary router.
4) The switch is connected to the LAN port of the secondary router.
5) The IP addresses of mining machines are all obtained on the secondary router.

(II) Restore factory settings

All machines need to use SD card to restore the firmware

1. L3/L3+ series mining machines
SD card recovery tutorial: https://cnforum.bitmain.com/bbs/topics/3011
2. S9 series (S9j, S9i), T9 and T9+ mining machines
SD card recovery tutorial: https://cnforum.bitmain.com/bbs/topics/3250

(III) Modify the mining machine login password (important)

After restoring the factory settings, be sure to change the miner login password as soon as possible. It is recommended to set the password as complex as possible. The method to change the password is as follows:

1. How to modify the password of a single mining machine

1) Enter the mining machine backend, click "System" -> click "Administration", -> first enter the old password in the "Current Password" box, then enter the new password twice in the "New Password" and "Confirmation" boxes -> click "Save&Apply" to save.

2) If the modification is successful, the message “Updating Password” will be displayed.

2. Method for batch modifying passwords of multiple mining machines

1) Use the Antminer software (APMinerTool V1.0.7) to search for the mining machine, select the mining machine to be batch modified, and then click "Change Password".

2) Enter the old password, enter the new password twice, and click "OK".

3) Check the running status. If it displays "Modification successful", the modification is completed.