Docker Daemon - GoKawiil

Carbonato Botnet Deploys AI Agents Inside Hijacked Docker Hosts

ThreatDown researchers identified a botnet called Carbonato that targets Docker servers with exposed, unauthenticated daemons on port 2375. After gaining access, attackers launch a privileged container, install a persistent SSH backdoor, and embed an AI agent built on the open-source Hermes Agent framework that receives commands via Telegram and harvests stolen credentials. The infrastructure, exposed since May, was also linked to a separate operation distributing trojanized cryptocurrency wallet apps.

darkreading.com · 2026-09-28

Docker's Root-Level Daemon Design Poses Ongoing Security Risk, Rootless Mode Urged

A security researcher highlights how Docker's default client-server architecture runs its daemon as root, meaning any user with access to the Docker socket can escalate privileges to full root access without a password. The piece demonstrates this with a simple command that mounts the host filesystem inside a container and bypasses normal permission checks, tying the issue to a recent vulnerability disclosed in an unnamed Linux distribution whose installer enabled an insecure Docker configuration by default.

blog.miguelgrinberg.com · 2026-09-08