Researchers have identified a new botnet called Carbonato that preys on Docker hosts with unsecured daemons. The malware scans for exposed Docker APIs, then uses them to launch containers that pull and install the Hermes Agent AI framework, effectively handing attackers remote control of the environment.
Once Hermes Agent is active, the botnet can execute arbitrary commands, move across the compromised infrastructure, and potentially enlist the host in larger-scale attacks. The use of an AI agent framework is a notable shift, as it allows the malware to operate with greater autonomy and adapt its behavior, complicating detection and cleanup.
The report underscores that the root cause is poor Docker configuration—specifically, daemons left accessible without authentication or network restrictions. Administrators are advised to disable remote access unless necessary, enforce strong authentication, and monitor for unusual container activity. Since this is a single source, no conflicting details were available.