Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts

Exposed Docker hosts may now be silently exfiltrating AI API keys, potentially incurring unexpected costs or enabling further attacks.

A botnet named Carbonato has been discovered actively exploiting vulnerable Docker hosts by deploying an AI agent. This botnet leverages the open-source Hermes Agent AI framework to achieve its malicious objectives. Attackers gain control of compromised Docker environments and then use Telegram as a command-and-control channel. A primary function of this botnet appears to be the theft of AI API keys. These keys, when exposed through vulnerable Docker installations, become prime targets for Carbonato. The botnet's operation highlights a growing trend of AI-powered tools being used for cybercrime, specifically targeting cloud infrastructure.

The deployment of an AI agent by the Carbonato botnet signifies a notable evolution in cybercriminal tactics, moving beyond traditional exploitation to leverage autonomous, AI-driven operations. By integrating with the Hermes Agent AI framework, Carbonato can execute complex commands and adapt its strategies on compromised Docker hosts, making it more difficult to detect and neutralize. The specific targeting of AI API keys suggests that attackers are looking to monetize stolen credentials by accessing and misusing powerful AI services, or by reselling these keys to other malicious actors.

This development signals a new arms race in cloud security, where defenders must increasingly contend with AI-powered threats that can operate with greater sophistication and stealth. The ease with which Carbonato appears to be exploiting exposed Docker hosts indicates a widespread vulnerability that requires immediate attention from organizations managing containerized environments. Future attacks may see similar botnets focusing on other sensitive credentials or resources within cloud infrastructure, necessitating a proactive security posture that includes continuous monitoring and robust access controls for AI-related assets.