CARBONATO: A BOTNET BUILT AROUND AN AI AGENT

Summary from the TLDR InfoSec newsletter

CARBONATO worms through unauthenticated Docker daemons on port 2375 via privileged, host-mounted containers, then installs the stock open-source Hermes Agent and overwrites its SOUL.md persona so that Telegram-tasked LLM sessions run post-exploitation and loot AI API keys before SSH credentials. ThreatDown recovered the toolkit from the crew's own open registry, which doubles as the fleet's update server, and ties the operators to Costa Rica through voseo Spanish, UTC-6 build timestamps, and a +506 Telegram handle. Keep the Docker API off the network, hunt for a SOUL.md containing "GH0ST" rather than blocklisting the legitimate hermes-agent package, and inventory and rotate AI API keys like bank credentials.