
Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts
Carbonato installs Hermes Agent on hacked Docker hosts to run Telegram commands and steal AI API keys.
6 stories, newest first · one card per story

Carbonato installs Hermes Agent on hacked Docker hosts to run Telegram commands and steal AI API keys.

Carbonato botnet infects unauthenticated Docker hosts and installs a Telegram-controlled Hermes AI agent to steal credentials and run commands.

CARBONATO botnet hijacks exposed Docker servers and uses Hermes Agent for operator control.

CARBONATO infects exposed Docker hosts, persists, spreads to nearby daemons, and runs a Telegram-controlled AI agent.

CARBONATO hijacks exposed Docker hosts, installs an AI agent, and steals LLM API keys to fund its gateway.

Carbonato botnet hijacks exposed Docker hosts, installs Hermes Agent, and spreads by scanning for more daemons.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views