{"id":244591,"date":"2026-09-29T01:22:22","date_gmt":"2026-09-29T06:22:22","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/09\/carbonato-botnet-compromises-docker-hosts-to-deploy-telegram-controlled-hermes-ai-agent"},"modified":"2026-09-29T01:22:22","modified_gmt":"2026-09-29T06:22:22","slug":"carbonato-botnet-compromises-docker-hosts-to-deploy-telegram-controlled-hermes-ai-agent","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/09\/carbonato-botnet-compromises-docker-hosts-to-deploy-telegram-controlled-hermes-ai-agent","title":{"rendered":"Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/carbonato-botnet-compromises-docker-hosts-to-deploy-telegram-controlled-hermes-ai-agent.webp\"><\/a><\/p>\n<p>Cybersecurity researchers have disclosed details of a new botnet malware called <strong>Carbonato<\/strong> that\u2019s targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called <a href=\"https:\/\/hermes-agent.nousresearch.com\/\" target=\"_blank\">Hermes Agent<\/a>.<\/p>\n<p>\u201cThe implant installs the framework unchanged, then overwrites its SOUL.md persona file,\u201d ThreatDown <a href=\"https:\/\/www.threatdown.com\/blog\/carbonato\/\" target=\"_blank\">said<\/a>. \u201cThe 39-line prompt directs it to execute tasks received through Telegram, maintain persistence, and collect credentials.\u201d<\/p>\n<p>At a high level, the botnet breaks into Docker daemons exposed without authentication on port 2,375 and scans neighboring networks every five minutes to propagate further. On each host, it installs Hermes Agent with instructions to follow operators\u2019 Telegram commands.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that\u2019s targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. \u201cThe implant installs the framework unchanged, then overwrites its SOUL.md persona file,\u201d ThreatDown said. \u201cThe 39-line prompt directs it to execute tasks received through Telegram, maintain [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,6],"tags":[],"class_list":["post-244591","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode","category-robotics-ai"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/244591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=244591"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/244591\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=244591"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=244591"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=244591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}