Edit: I think my brother figured it out, DMZ was enabled and the FutureBit was the only thing on that list, maybe that's how they're getting in?
Assuming you have a consumer-grade router with DMZ enabled, your Apollo was likely compromised in seconds than minutes!
Never ever put any device in such a DMZ without knowing what you are doing. (Such consumer-grade DMZs have most likely every port open - from SSH, HTTP, HTTPS, every port from 0 to 65535 ...)
So, it seems your brother figured it out! Good! Remove Apollo from DMZ and back in the LAN where it should belong firsthand.
Reset the Apollo to factory defaults and start hashing without any more disturbance.