Threats Tagged 'exposed daemon'
View all threats tagged with 'exposed daemon'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'exposed daemon'
Click on any threat for detailed analysis and mitigation recommendations
CARBONATO is a Docker-based botnet discovered by ThreatDown researchers that exploits exposed Docker daemons on port 2375. It operates through an unauthenticated Docker registry exposed since May 2026, facilitating both the distribution of trojanized cryptocurrency wallet applications and botnet activities. The botnet uses a modified Hermes Agent, an open-source AI framework, to execute commands via Telegram, maintain persistence, and steal credentials. The campaign infrastructure spans multiple hosting providers and has been active from October 2024 through August 2026. No specific software versions are identified as affected, and no CVE or patch information is available. Join the discussion | AlienVault OTX General | 09/24/2026, 07:56:13 UTC Added: 09/24/2026, 08:03:01 UTC |
Showing 1 to 1 of 1 result