Back Ground.News

New Carbonato malware uses AI agents to hijack exposed Docker hosts

Ground.News • September 25, 2026

A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control. [...]

Carbonato targets exposed Docker daemons

Carbonato is a botnet malware targeting Docker APIs exposed on port 2375 without authentication. It deploys a privileged container, opens reverse SSH access, installs the Hermes Agent framework with a GH0ST persona, reports via Telegram, and...

AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway

CARBONATO: A Botnet Built Around an AI Agent via Exposed Docker APIs

1. Basic Information Original Title: CARBONATO: a botnet built around an AI agent Source: ThreatDown Published Date: 2026-09-22 Updated Date: None Collection Date: 2026-09-25T08:28:50+09:00 Report Type: Threat Intelligence Severity: Critical Basis of Severity: ThreatDown analyzed recovered containers and scripts, identifying host intrusion, persistence, propagation, mining, and AI agent-driven operational capabilities. Although the exact number …

50 % of the sources are Center , 50 % of the sources lean Right

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CARBONATO Botnet Exploits Exposed Docker APIs Using AI Agents The CARBONATO botnet, discovered by ThreatDown, targets exposed Docker daemons on port 2375 without authentication, enabling attackers to install the Hermes Agent AI framework. This malware has been active since at least October 2024 and has been linked to a publicly accessible container registry containing 59 repositories and 4.3 GB of data. The botnet uses a worm-like propagation mechanism, scanning for vulnerable Docker APIs and executing commands on compromised hosts. It establishes persistence through cron jobs and systemd timers while reporting activities via Telegram. The operation is suspected to be linked to actors in Costa Rica, although the infrastructure may be used by others. The severity of this threat is rated as critical due to its potential impact on entire host systems. Current recommendations emphasize securing Docker APIs and requiring authentication to prevent exploitation. 10 sources 75

Extracted Entities

New Carbonato malware uses AI agents to hijack exposed Docker hosts

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

Malware (1)

MITRE ATT&CK (3)

Tools (2)