New Carbonato malware uses AI agents to hijack exposed Docker hosts
Recorded: Sept. 24, 2026, 8:10 p.m.
| Original | Summarized |
New Carbonato malware uses AI agents to hijack exposed Docker hosts News Featured ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach New Windows Defender zero-day blocks Microsoft antivirus updates EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts Check Point warns of Management Server zero-day exploited in attacks Drop monthly subscriptions with a $79.99 lifetime PDF editor for Mac Exposed GitLab project email addresses let attackers push code FedRAMP VDR & VER: Daily Scans Are Only the Beginning Hackers now exploit critical Roundcube flaw in code injection attacks Tutorials Latest How to access the Dark Web using the Tor Browser How to enable Kernel-mode Hardware-enforced Stack Protection in Windows 11 How to use the Windows Registry Editor How to backup and restore the Windows Registry How to start Windows in Safe Mode How to remove a Trojan, Virus, Worm, or other Malware How to show hidden files in Windows 7 How to see hidden files in Windows Webinars Latest Qualys BrowserCheck STOPDecrypter AuroraDecrypter FilesLockerDecrypter AdwCleaner ComboFix RKill Junkware Removal Tool Deals Categories eLearning IT Certification Courses Gear + Gadgets Security VPNs Popular Best VPNs How to change IP address Access the dark web safely Best VPN for YouTube Forums Virus Removal Guides HomeNewsSecurityNew Carbonato malware uses AI agents to hijack exposed Docker hosts New Carbonato malware uses AI agents to hijack exposed Docker hosts By Bill Toulas September 24, 2026 A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control. The GH0ST agent instructionsSource: ThreatDown Build your security blueprint for AI-powered attacks Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed. Related Articles: AI Bill Toulas Previous Article Post a Comment Community Rules You need to login in order to post a comment Not a member yet? Register Now You may also like: Upcoming Webinar Popular Stories ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach Microsoft reminds admins to migrate Entra ID users to passkeys New Windows Defender zero-day blocks Microsoft antivirus updates Sponsor Posts Automate Onboarding and Access Reviews with No-Code IGA: See how it works AI is a data-breach time bomb: Read the new report Build cyber resilience with Wazuh: The open-source SIEM & XDR for proactive protection Daily detection, monthly validation, 12-hour clocks. Are you VDR & VER ready? Overdue a password health-check? Audit your Active Directory for free Follow us: Main Sections News Community Forums Useful Resources Welcome Guide Company About BleepingComputer Terms of Use - Privacy Policy - Ethics Statement - Affiliate Disclosure Copyright @ 2003 - 2026 Bleeping Computer® LLC - All Rights Reserved Login Username Password Remember Me Sign in anonymously Sign in with Twitter Not a member yet? Register Now Help us understand the problem. What is going on with this comment? Spam Abusive or Harmful Inappropriate content Strong language Other Read our posting guidelinese to learn what content is prohibited. Submitting... |
A new botnet malware named Carbonato utilizes artificial intelligence agents to compromise and hijack exposed Docker hosts. This malware operates with worm-like capabilities, originating from an unauthenticated Docker registry that contained approximately sixty repositories and four point three gigabytes of image data. Researchers from ThreatDown, working with Malwarebytes, retrieved operational evidence spanning from October 2024 to August 2026 detailing both the botnet operations and a separate campaign involving counterfeit cryptocurrency wallet applications. Carbonato spreads across Docker hosts by exploiting an exposed Application Programming Interface (API) on port 2375 that lacks authentication. Upon connection, the malware instructs the Docker daemon to launch a privileged container, thereby gaining access to the underlying host system. To establish persistence, the malware sets up a reverse SSH tunnel, installs an SSH server using the operators’ keys, and configures various persistence mechanisms, including cron jobs, systemd timers, rc.local, and OpenRC hooks. A critical feature of this attack is the installation of the Hermes Agent AI framework on the compromised hosts, utilizing an agent designated as “GH0ST.” This agent is responsible for executing task commands received via Telegram, which involves an interactive command loop where the model interprets the task, writes terminal commands, reads the output, and determines subsequent actions. The Hermes framework is used by Carbonato to collect sensitive data, including AI API keys, SSH credentials, and access tokens, before reporting the results back through the Telegram chat. The malware's worm-like nature allows it to propagate to other exposed Docker daemons by scanning the network attached to the host every five minutes. Each successful compromise involves pulling the implant from the registry, launching the same privileged container, and initiating the persistence and scanning loop. Although the researchers could not attribute Carbonato to any known threat clusters, the evidence suggests a possible operational location in Costa Rica. To mitigate the risk of infection, the researchers recommended that organizations ensure Docker daemon APIs are kept off the network and require authentication for access to registries. Indicators of a Carbonato attack include the presence of a GH0ST persona file, the setting of the CARBONATO_API_KEY, unexpected traffic to Telegram, and reverse SSH tunnels directed toward the IP address AS262145. |