{"version":"1.0","type":"rich","provider_name":"RootPwn","provider_url":"https://rootpwn.me","title":"Carbonato Botnet Deploys AI Agents on Exposed Docker Hosts","description":"The Carbonato botnet infects servers with unauthenticated Docker daemons on port 2375, installs the Hermes Agent AI framework, and uses Telegram to exfiltrate AI API keys. Defenders should audit Docker exposure, harden daemon security, monitor for Hermes Agent activity, and revoke compromised keys.","url":"https://rootpwn.me/news/carbonato-botnet-deploys-ai-agents-on-exposed-docker-hosts","thumbnail_url":"https://rootpwn.me/images/e6ed8ad334dc44bba6033cb9d9ac9014.jpg","thumbnail_width":1600,"thumbnail_height":900}