Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts

September 28, 2026 · 11:46 am 2 sources

Image: Dark Reading

Coverage

Coverage

• Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts
  Dark Reading · September 28, 2026 20:23
  The botnet uses the open source Hermes Agent AI framework to execute commands via Telegram and steal AI API keys from exposed Docker hosts.

More coverage

• Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
  The Hacker News · September 28, 2026 11:46
  Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. "The implant installs the framework unchanged, then overwrites its SOUL.md…