A newly reported malware campaign is taking over internet-exposed Docker servers and using an AI agent to run commands, steal credentials, and spread to other systems. Malwarebytes says Carbonato targets Docker daemons exposed on port 2375 without authentication, launches a privileged container to access the host, installs persistence and reverse SSH access, and uses Hermes Agent with a custom "GH0ST" persona over Telegram to collect API keys, SSH credentials, access tokens, and other data.
Why it matters: Organizations running exposed or unauthenticated Docker APIs are at immediate risk of full host compromise and lateral spread. Defenders should remove Docker daemon access from the public internet, require authentication, and hunt for Telegram traffic, reverse SSH tunnels, and Carbonato persistence artifacts.
Bill Toulas
2026.09.24
100% relevant
This article appears to be the first concrete report establishing Carbonato as a distinct malware campaign targeting exposed Docker environments with Hermes Agent-based post-compromise control.
← Back to all stories