<![CDATA[New Carbonato malware uses AI agents to hijack exposed Docker hosts]]>A new botnet malware dubbed Carbonato is actively targeting hosts that expose their Docker daemons without proper protection. According to the report, the malware abuses insecure Docker instances to install the Hermes Agent AI framework, effectively handing control of the compromised machine to the attackers.

The key detail here is the use of an AI agent framework as the payload mechanism. Rather than relying solely on traditional backdoor techniques, Carbonato leverages the installed agent to operate on the hijacked host. This marks another example of attackers folding AI tooling into botnet infrastructure.

The core issue remains misconfigured or publicly reachable Docker daemons. Exposed Docker APIs have long been a favorite entry point for cryptominers and botnets, and this campaign shows the same weakness being repurposed for AI-assisted control.

  • Harden or remove public exposure of Docker daemons
  • Restrict API access to trusted networks only
  • Monitor hosts for unexpected installation of agent frameworks or unfamiliar containers

If your environment runs Docker in production, it is worth confirming right now that the daemon is not reachable from the internet.

Source: BleepingComputer

Has anyone observed unexpected Hermes Agent installations or suspicious Docker activity in their environment?

]]>https://xploitlk.com/topic/453/new-carbonato-malware-uses-ai-agents-to-hijack-exposed-docker-hostsRSS for NodeTue, 27 Oct 2026 08:18:35 GMTThu, 24 Sep 2026 20:30:21 GMT60