Re: [ANN][AUTO-SWITCH] Profit-switch auto-exchange pool: CleverMining.com
clevermining's servers have been hacked.
The peeps running cleverminings servers apparently are not that tech savvy. All my miners were being routed to 190.xxx and this is from 5 different subnets from 3 different ISP providers.
lol..amateur hour @clevermining.
The miner connects and gets instructions to where to send shares--apparently a rogue hacker has infiltrated clevermining and had all the miners point to 190.xxx.
Only two things it can be.
1. clevermining did this
2. clevermining was hacked
either way this is not good.
I will be pointing my miners to a different pool until this is fixed.
UPDATE: when you close miner and reopen it..it points to correct clevermining dns entry. Therefore, the attackers (if clevermining is not doing this themselves) are logging in and running a script to point N miners to the new IP...lol.
UPDATE 2: they have been hacked. Here is URL for IP lookup..it is going to Panama...hahahaha. Make sure you get paid boys!
http://whatismyipaddress.com/ip/190.97.165.179 <--- this is IP where the miners are being pointed to..hahaha.
The peeps running cleverminings servers apparently are not that tech savvy. All my miners were being routed to 190.xxx and this is from 5 different subnets from 3 different ISP providers.
lol..amateur hour @clevermining.
The miner connects and gets instructions to where to send shares--apparently a rogue hacker has infiltrated clevermining and had all the miners point to 190.xxx.
Only two things it can be.
1. clevermining did this
2. clevermining was hacked
either way this is not good.
I will be pointing my miners to a different pool until this is fixed.
UPDATE: when you close miner and reopen it..it points to correct clevermining dns entry. Therefore, the attackers (if clevermining is not doing this themselves) are logging in and running a script to point N miners to the new IP...lol.
UPDATE 2: they have been hacked. Here is URL for IP lookup..it is going to Panama...hahahaha. Make sure you get paid boys!
http://whatismyipaddress.com/ip/190.97.165.179 <--- this is IP where the miners are being pointed to..hahaha.
CleverMining has not been hacked. Redirection to 190.xxx doesn't come from the pool - rather something is hijacking your miners and redirects them to a malicious pool. We still have thousands users mining at the pool and we just hit our highest hashrate ever yesterday with 22.5 GH/s average hashrate during the day.
If it was a pool issue, it would affect thousands of users and the pool hashrate would significantly drop instead of rising. The problem affects only small number of users and affects users of several coin-switching pool - it is not limited/related to CleverMining. I am trying to help investigate this issue but at this point there is nothing suggesting that any of the pools were hacked.
