Not sure what you think is happening, but that's not possible on any current Bitmain original firmware...
I should have been a little more clear. Folk who use things like AwesomeMiner are susceptible if they have enabled write on the API. And I know that I need to make a change in my firmwares as well.
Im going to disagree with your blanket statement on only using original firmwares for numerous reasons. Instead, use trusted firmwares.
I was using firmware from manufacturer since 2 months ago and it was totally ok untill I tried to add 3 more second hand M3 (seems they have infected my farm - ). these pools are not default ones ( default workers was microbt directing to f2pool ) and as " efudd " mentioned this user (
https://www.nicehash.com/miner/3CJgXokLQrRCQcEoftS7MbPDSXhXpX6P55) on nicehash seems to be hijacker.
How can I clean this virus? Do you think if I unplug all of the miners from network and start updating their firmware with sd card will work ?
I told you how to fix/clean it in my response. I have used that to help a number of folk clean up their miners.
-j