Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent

A new botnet malware called Carbonato has been discovered targeting exposed Docker daemons to deploy an open-source AI agent framework called Hermes Agent. The malware installs the framework and overwrites its SOUL.md persona file with a custom 39-line prompt. The compromised hosts are then controlled via Telegram, enabling attackers to issue commands through the messaging platform. This represents a novel attack vector combining botnet infrastructure with AI agent frameworks for malicious purposes. The campaign highlights the growing risk of exposed Docker APIs and the emerging trend of threat actors leveraging AI tooling in their operations.