New Carbonato malware uses AI agents to hijack exposed Docker hosts
-
A new botnet malware dubbed Carbonato is actively targeting hosts that expose their Docker daemons without proper protection. According to the report, the malware abuses insecure Docker instances to install the Hermes Agent AI framework, effectively handing control of the compromised machine to the attackers.
The key detail here is the use of an AI agent framework as the payload mechanism. Rather than relying solely on traditional backdoor techniques, Carbonato leverages the installed agent to operate on the hijacked host. This marks another example of attackers folding AI tooling into botnet infrastructure.
The core issue remains misconfigured or publicly reachable Docker daemons. Exposed Docker APIs have long been a favorite entry point for cryptominers and botnets, and this campaign shows the same weakness being repurposed for AI-assisted control.
- Harden or remove public exposure of Docker daemons
- Restrict API access to trusted networks only
- Monitor hosts for unexpected installation of agent frameworks or unfamiliar containers
If your environment runs Docker in production, it is worth confirming right now that the daemon is not reachable from the internet.
Source: BleepingComputer
Has anyone observed unexpected Hermes Agent installations or suspicious Docker activity in their environment?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login