Carbonato botnet hijacks exposed Docker hosts with Hermes Agent
Insecure Docker APIs are being used to deploy an AI-powered agent that steals credentials and expands across connected networks.
Malwarebytes’ ThreatDown researchers identified Carbonato, a botnet that compromises Docker machines when their unauthenticated daemon interfaces are reachable, then deploys Hermes Agent. They found an open registry holding almost 60 repositories and 4.3 GB of image files; related operational records ran from October 2024 to August 2026. Access is gained through Docker’s API on port 2375 when it lacks authentication. Once active, Hermes receives Telegram instructions and can retrieve AI API keys, SSH logins and access tokens, run commands, and send results to the operators. Carbonato also checks networks connected to each infected host every five minutes for more exposed Docker services, giving it a worm-like route to further systems.
Why it matters
For teams running Docker, an unauthenticated API on port 2375 is now a direct path to compromise. Once Carbonato lands, Hermes Agent can take over the host, harvest sensitive credentials and tokens, and execute commands under the operators’ control, while scripts continuously look for more exposed Docker daemons on attached networks. The size and duration of the campaign’s registry suggest a sustained, evolving operation rather than an isolated incident.
Signal or noise?
Does this story matter, or is it hype? Decide before you see what everyone else thinks.
Sources
- BleepingComputer