security Source: The Hacker News
๐Ÿ“… 28 September 2026 at 06:30 PM UTC

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent

Verified Primary Feed Ingestion
โšก Executive Takeaways & Intelligence Summary
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. "The implant installs the framework unchanged, then overwrites its SOUL.md persona file," ThreatDown said. "The 39-line prompt directs it to execute tasks received through

๐Ÿ“ฐ Related Surveillance Disclosures