New Carbonato Malware Targets Exposed Docker Daemons to Deploy Hermes Agent AI Framework

According to a report from BleepingComputer, a new malware variant codenamed Carbonato has been observed targeting Docker hosts that are exposed to the network without proper authentication. The operators of this botnet are scanning for insecure Docker daemon instances globally. Once a vulnerable host is identified, the malware is deployed to install the Hermes Agent AI framework. The exact nature of how the AI agents are utilized and the full capabilities of the Hermes framework are still under investigation, though the initial access is achieved through the exploitation of exposed Docker APIs. The report emphasizes that the primary vector is the remote code execution capability available when Docker daemons are left accessible without credentials. The deployment of the Hermes Agent suggests a potential shift towards using compromised infrastructure for AI-related tasks or as part of a larger botnet architecture. The impact includes unauthorized access and control of affected Docker hosts, which could facilitate lateral movement within networks, data exfiltration, or the use of compromised systems as proxies. Security experts recommend immediate action to secure Docker configurations to prevent unauthorized access.