Carbonato botnet targets Docker hosts to deploy malicious AI agent

Researchers uncover a new threat targeting exposed Docker daemons.

Published 6sem2 sources✓ ConfirmedImportantupdated 5sem

≈ 15sSpeed

The fact

The malware installs the Hermes Agent framework, controlled via Telegram.

This attack highlights rising risks from insecure AI agents.

2 sources — click a link to read an article on the topic:

Explore this topic

Auto-synthesis from 2 media sources · identified on September 28, 2026