New CARBONATO Botnet Targets Exposed Docker Daemons Using AI

• •CARBONATO exploits unauthenticated Docker daemons on port 2375.
• •The botnet uses the Hermes Agent AI framework for command execution and data collection.
• •Researchers recommend securing Docker APIs to prevent infections.

ThreatDown researchers have identified a new botnet malware named CARBONATO that exploits insecure Docker daemons to install the Hermes Agent AI framework. The malware was discovered in an unauthenticated Docker registry containing 59 repositories and 4.3 GB of image data. CARBONATO spreads across Docker hosts with APIs exposed on port 2375, allowing it to launch privileged containers and establish persistence. The botnet collects sensitive data such as API keys and SSH credentials, reporting back to operators via Telegram. The operational evidence spans from October 2024 to August 2026, linking CARBONATO to a campaign distributing counterfeit cryptocurrency wallet apps. Researchers have not attributed the botnet to any known threat clusters but suspect Costa Rica as a possible location for the operators. Recommendations to prevent infection include disabling unauthenticated Docker APIs and securing registries.