IncidentsCarbonato botnet turns hijacked Docker hosts into AI agents
Researchers say the malware installs the open-source Hermes Agent framework on exposed Docker daemons, then rewrites its persona file to take orders over Telegram.
28 Sept 2026
Carbonato Botnet Hijacks Exposed Docker Hosts to Run Hermes AI Agent Malware
The Carbonato botnet targets exposed Docker daemons to install the open-source Hermes Agent AI framework, overwriting its persona configuration file with a 39-line prompt that directs the agent to execute attacker tasks received via Telegram.
Disclosed 28 September 2026 · Record updated 1 October 2026
Impact
Exposed Docker daemons are compromised and repurposed to run a Telegram-controlled AI agent for attacker-directed tasks.
Our coverage
IncidentsSources
- thehackernews.comhttps://thehackernews.com/2026/09/carbonato-botnet-compromises-docker.html