CARBONATO is a botnet targeting exposed Docker daemons on port 2375, discovered via an unauthenticated Docker registry. It distributes trojanized cryptocurrency wallets and operates a botnet infrastructure leveraging a modified Hermes Agent AI framework. This AI agent is customized with prompts to execute commands through Telegram, maintain persistence on infected hosts, and harvest credentials. The botnet infrastructure is distributed across several hosting providers including Linode, Hetzner, and Contabo, with documented activity spanning nearly two years. No direct exploit code or CVE identifiers are associated with this threat, and no patch or remediation details are provided.

The botnet enables attackers to compromise Docker hosts with exposed daemons, leading to credential theft and unauthorized command execution via Telegram. The distribution of trojanized cryptocurrency wallets poses additional risk of financial theft. The persistence mechanisms and credential harvesting capabilities increase the potential for prolonged unauthorized access and lateral movement within compromised environments. The medium severity reflects the combination of credential theft and botnet control capabilities, but no known exploits in the wild or direct CVEs are reported.

No official patch or remediation is provided. Organizations should ensure Docker daemons are not exposed on public or untrusted networks, especially on port 2375, which is known to be insecure when unauthenticated. Restrict access to Docker APIs using authentication and network controls. Monitor for unauthorized Docker registry access and suspicious network activity involving Telegram command execution. Since no vendor advisory or patch information is available, follow best practices to secure Docker environments and remove any unauthorized containers or agents.