Skip to content
LLMGaurd
ai.sec
home
research
products
contact
early access
[#]
topic / credential theft
Credential theft.
1 entry on credential theft.
All research
.
2026-10-01
CARBONATO plants an AI agent on Docker hosts to steal API keys
CARBONATO worms through exposed Docker daemons and plants an unmodified Hermes Agent, reprogrammed by a 39-line file to steal AI API keys via Telegram.
docker
botnet
5 min
→