Carbonato

Carbonato appears to be a reference that doesn't correspond to an established entity in AI governance, compliance, or enterprise technology standards. Without verified information about what Carbonato represents in the AI governance context, I cannot provide an accurate description that would be helpful for a governance news directory. If you're referring to a specific organization, framework, tool, or concept related to AI governance, please provide additional context so I can write an accurate and useful description.

1 item

ResearchGlobal2026-09-24

Carbonato Malware Turns AI Agent Frameworks Into Attack Infrastructure

A new malware campaign named Carbonato targets exposed Docker daemon APIs to install the Hermes Agent AI framework on compromised hosts. The deployed agent, configured as a persona called GH0ST, accepts operator commands via Telegram, autonomously writes terminal commands, and harvests AI API keys and credentials. Malwarebytes ThreatDown identified the campaign as an active, global threat to enterprise AI infrastructure.

Carbonato Hermes Agent AI agent abuse malware credential theft Docker security agentic AI API key security