Solved Bitcoin mining through Sinusbot

[Guchen]

I just noticed that the account sinusbot is mining bitcoins on my server. Do you have any explanation. Here is the URL of the pool: http://zpool.ca/?address=1LUCM2EmaqHSja1i9Y8ddbAKcXeVcTnDXF
I'll attach an image of the htop result on my server (blacked out IP and password override). What exactly is this and why is the bot mining bitcoins?

 

[flyth]

I guess you have setup a sinusbot user with a weak password and have password authentication enabled on your server, which both you shouldn't do. Also: where did you download the bot?

 

[irgendwr]

What exactly is this and why is the bot mining bitcoins?

The bot itself is not mining bitcoins this would be a dumb idea on many levels.

This is only possible if someone has compromised you server, most likely via 3rd party software like cracks

also: this is why we don't want people running things as root or getting untrustworthy 3rd party stuff.

 

[Guchen]

I guess you have setup a sinusbot user with a weak password and have password authentication enabled on your server, which both you shouldn't do. Also: where did you download the bot?

I downloaded it through the official installation script. I guess I'll just kill the processes and disable password authentication even though I think I've done that

 

[Xuxe]

I downloaded it through the official installation script. I guess I'll just kill the processes and disable password authentication even though I think I've done that

The official install script does not run multiple bot instances and abuses our terms and license system.
PS: I think your server is hacked, go reinstall it and learn how to secure it.