An Ethereum mining software that runs on ethOS uses by default the operating systems SSH creds, Hackers are using these creds to gain entrance and replace them with a redirect. by doing this the mining