New Carbonato malware uses AI agents to hijack exposed Docker hosts
BleepingComputer published a report on September 24, 2026 describing a new malware family named Carbonato. According to the source, Carbonato uses AI agents to hijack exposed Docker hosts. The report frames the malware as new and identifies exposed Docker hosts as the systems it targets through the use of AI agents. The provided source text consists of the headline and publication metadata; it does not name the AI models, agent frameworks, or other tooling used by Carbonato, nor does it describe the initial access vector, payload behavior, persistence, or the identity or motivation of the operators. No version numbers, indicators of compromise, or remediation guidance are included in the excerpt. Because the excerpt is limited to the headline, the account here is restricted to what the source states: a newly reported malware family, named Carbonato, that employs AI agents against exposed Docker hosts, as reported by BleepingComputer on September 24, 2026.
The source states that a new malware family, Carbonato, uses AI agents to hijack exposed Docker hosts, a target class developers commonly run.