<![CDATA[Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent]]>Cybersecurity researchers have disclosed details of a new botnet malware dubbed Carbonato, which targets exposed Docker daemons to deploy an open-source AI agent framework known as Hermes Agent.

According to ThreatDown, the implant installs the framework without modification, then overwrites its SOUL.md persona file. The 39-line prompt directs the agent to execute tasks received through a Telegram-controlled channel, effectively turning the compromised host into a remotely commanded automation node.

Key points from the disclosure:

  • Carbonato exploits internet-exposed Docker daemons as its initial access vector.
  • It deploys the open-source Hermes Agent framework as-is.
  • The malware replaces the SOUL.md persona file with a 39-line prompt.
  • Command and control is handled via Telegram, instructing the agent to run received tasks.

This incident highlights the continued risk of leaving Docker daemons reachable from the internet, as well as the emerging trend of abusing legitimate AI agent tooling for malicious automation. Operators should ensure Docker APIs are not publicly exposed and monitor for unexpected modifications to agent configuration files such as SOUL.md.

Source: The Hacker News

Has anyone observed unexpected changes to AI agent configuration files or suspicious Telegram-related traffic on their Docker hosts?

]]>https://xploitlk.com/topic/567/carbonato-botnet-compromises-docker-hosts-to-deploy-telegram-controlled-hermes-ai-agentRSS for NodeTue, 27 Oct 2026 07:48:44 GMTSun, 04 Oct 2026 18:30:26 GMT60