#Botnet

Carbonato: the Docker botnet whose AI agent is told to steal API keys before SSH credentials

ThreatDown documented a commodity Docker botnet that installs an off-the-shelf AI agent and ranks AI provider keys as loot #1 — above SSH credentials, tokens and databases.