I have been battling with a virus on my L3+. It changes my mining pool config to something from nicehash.
I tried the Hive SD card firmware upgrade, it worked but the pool information still got altered to Nicehash. I actually thought HiveOS was suppose to protect miners from virus attacks.
it’s not a virus, it’s just that your fixed ip of your router is scanned and that you have not changed your password of your custom firmware, and you can even add the ssl if necessary …