Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent

Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. "The implant installs the framework unchanged, then overwrites its SOUL.md persona file," ThreatDown said. "The 39-line prompt directs it to execute tasks received through

Researchers reported that the Carbonato botnet compromises Docker daemons exposed without authentication, installs the open-source Hermes Agent framework, and overwrites its SOUL.md persona file with instructions for Telegram-controlled task execution, persistence, and credential collection. The agent is therefore repurposed as an operator-controlled mechanism inside compromised hosts rather than attacked through a model vulnerability. RealGround analysis: this represents high-severity AI agent abuse, warranting review of agent permissions, tool execution, persistence controls, command-channel security, and red-team testing against unauthorized agent deployment.