Topic

Hermes Agent

Coverage tagged hermes agent.

Articles: 1
Desk: 1

Data graphic: the CARBONATO botnet installs an AI agent as its implant, and the agent's persona puts the API keys of 14 AI providers, from OpenAI and Anthropic to self-hosted Ollama and vLLM, at the top of its loot list "loot #1" . It gets in through the unauthenticated Docker API on port 2375, uses a 39-line SOUL.md persona and takes orders over Telegram.

highAI Security Hermes Agent

CARBONATO Botnet Turns Exposed Docker Hosts Into Hermes Agent Bots That Hunt AI Keys

CARBONATO hijacks open Docker APIs and installs Hermes Agent with a GH0ST persona that hunts API keys for 14 AI providers. How it works and what to check.

Oct 2 · 6 min