AI agent incident

The Carbonato botnet put a Telegram-controlled Hermes agent on hacked Docker hosts

Reported · 2 sources

  • credential-theft
  • agent-framework

What happened

The Carbonato botnet compromised exposed Docker hosts and installed the open-source Hermes AI agent framework on them, overwriting its persona file so the agent took commands over Telegram. Dark Reading reported it also stole AI API keys from the hosts.

Why it matters

Hermes has already appeared twice in this database, driving a DeepSeek attack chain over Telegram in July and running unattended inside Thailand's finance ministry, and this time it is the payload rather than the operator's tool. An exposed Docker host now buys the attacker a resident agent with a chat interface, and the AI API keys stored on the box go with it.

Sources

  1. The Hacker News Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
  2. Dark Reading Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts

New incidents by email

Get incidents like this one in your inbox

New AI agent incidents are covered in the briefing, with what to check on the agents you already run. At least once a week, free.

You confirm by email. Unsubscribe in one click.

Background reading

What is agent identity? An explainer on the problem behind this incident.

Cite or correct this record

“The Carbonato botnet put a Telegram-controlled Hermes agent on hacked Docker hosts.” The Permission Layer AI Agent Incident Database, https://thepermissionlayer.com/incidents/carbonato-botnet-hermes-agent/. Database updated October 22, 2026.

Every record traces to the dated sources above. If something here is wrong or missing, email [email protected] and it gets fixed. See this record in the full list.

The Permission Layer

Get the briefing by email

At least one email a week on AI agent identity, permissions, security and spend, written for the people who approve agent access. Five-minute read, free.

You confirm by email. Unsubscribe in one click.