Tag: Carbonato

  • Carbonato Malware Installs AI Agents on Exposed Docker Hosts

    Carbonato Malware Installs AI Agents on Exposed Docker Hosts

    Carbonato malware targets Docker hosts that expose their management API without authentication. Once inside, it installs an AI agent that helps operators run commands and collect credentials, according to researchers at ThreatDown. Exposed Docker APIs Give Carbonato Access Carbonato looks for Docker daemons with an unauthenticated API exposed on port 2375. It connects to the…