AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway

www.itsecuritynews.info • September 25, 2026

CARBONATO exploits exposed Docker daemons, installs an AI agent, steals API keys and spreads across networks with autonomous command execution. CARBONATO is a Docker-based botnet that has been active since at least October 2024. ThreatDown discovered the operation after finding an unauthenticated container registry exposed to the internet. The registry contained the attackers’ entire toolchain […]

This article has been indexed from Security Affairs

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CARBONATO Botnet Exploits Exposed Docker APIs Using AI Agents The CARBONATO botnet, discovered by ThreatDown, targets exposed Docker daemons on port 2375 without authentication, enabling attackers to install the Hermes Agent AI framework. This malware has been active since at least October 2024 and has been linked to a publicly accessible container registry containing 59 repositories and 4.3 GB of data. The botnet uses a worm-like propagation mechanism, scanning for vulnerable Docker APIs and executing commands on compromised hosts. It establishes persistence through cron jobs and systemd timers while reporting activities via Telegram. The operation is suspected to be linked to actors in Costa Rica, although the infrastructure may be used by others. The severity of this threat is rated as critical due to its potential impact on entire host systems. Current recommendations emphasize securing Docker APIs and requiring authentication to prevent exploitation. 10 sources 75

Extracted Entities

AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Tools (1)