AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway
CARBONATO hijacks exposed Docker hosts, installs an AI agent, and steals LLM API keys to fund its gateway.
76
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 25, 2026
- Last mentionedSep 25, 2026
Timeline
1 articles · newest firstAppears with
- Dockerproduct · 1
- ThreatDownorganization · 1
- Dockervendor · 1
- CARBONATOmalware · 1
- Hermes Agentproduct · 1
- Nous Researchorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.