Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
-
Cybersecurity researchers have disclosed details of a new botnet malware dubbed Carbonato, which targets exposed Docker daemons to deploy an open-source AI agent framework known as Hermes Agent.
According to ThreatDown, the implant installs the framework without modification, then overwrites its SOUL.md persona file. The 39-line prompt directs the agent to execute tasks received through a Telegram-controlled channel, effectively turning the compromised host into a remotely commanded automation node.
Key points from the disclosure:
- Carbonato exploits internet-exposed Docker daemons as its initial access vector.
- It deploys the open-source Hermes Agent framework as-is.
- The malware replaces the SOUL.md persona file with a 39-line prompt.
- Command and control is handled via Telegram, instructing the agent to run received tasks.
This incident highlights the continued risk of leaving Docker daemons reachable from the internet, as well as the emerging trend of abusing legitimate AI agent tooling for malicious automation. Operators should ensure Docker APIs are not publicly exposed and monitor for unexpected modifications to agent configuration files such as SOUL.md.
Source: The Hacker News
Has anyone observed unexpected changes to AI agent configuration files or suspicious Telegram-related traffic on their Docker hosts?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login