This command should tell you the suspicious process ID(s):
sudo ls -l /proc/*/fd/* | grep /dev/random
This command should tell you the suspicious process ID(s):
sudo ls -l /proc/*/fd/* | grep /dev/random