Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts

ThreatDown discovered Carbonato, a Docker-focused botnet that compromises unauthenticated Docker daemons (port 2375), launches privileged containers to gain host access, installs persistent implants and an AI agent (based on Hermes Agent) that collects AI API keys and other credentials, and spreads to other reachable Docker hosts; the report includes IOCs and defender guidance to avoid exposing the Docker daemon, require registry authentication, and monitor for the botnet's persistence and network patterns.