Welp, these malware authors are getting paid.

https://www.nicehash.com/miner/3CJgXokLQrRCQcEoftS7MbPDSXhXpX6P55

They have this running on equihash, sha256 and scrypts.... it's designed to infiltrate, identify miner type (guesses) and then modify the config and mine for them. Based on the addresses payout of $780usd/day at the time of this writing, I'd say it is working for them. :/

net-net, don't install random firmware.

-j