MalwarePublished 24 Sep 2026

New Carbonato malware uses AI agents to hijack exposed Docker hosts

Source Bleeping Computer

Description

A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control. [...]

Impact

Successful exploitation allows attackers to gain privileged access to Docker hosts, install a persistent AI-driven agent capable of executing arbitrary commands, stealing credentials and tokens, and maintaining remote control via reverse SSH tunnels. The worm-like propagation enables rapid spread across networks with exposed Docker daemons, potentially compromising multiple hosts. The AI agent's interactive command loop facilitates dynamic attacker control and data exfiltration, increasing operational flexibility and stealth.

Defensive guidance

To prevent Carbonato infection, ensure Docker daemon APIs are not exposed on the network and require authentication on Docker registries. These measures effectively block the primary infection vector. Monitor for indicators such as the GH0ST persona file, the CARBONATO_API_KEY environment variable, unexpected Telegram traffic, and reverse SSH tunnels.

References

bleepingcomputer.com/news/security/new-carbonato-malware-uses-ai-agents-to-hijack-exposed-docker-hosts/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 24 Sep 2026, 21:03 UTC

References

Community reviews

Related threats