#ParsedReport #CompletenessLow
23-09-2026

CARBONATO: a botnet built around an AI agent

https://www.threatdown.com/blog/carbonato/

Report completeness: Low

Threats:
Carbonato
Fsociety
Xmrig_miner
Gh0st_rat

Victims:
Docker infrastructure, Cryptocurrency wallet users, Ai service accounts

Geo:
Costa rican, America, Costa rica, Spanish, Costa_rica

TTPs:
Tactics: 1
Technics: 0

ChatGPT TTPs:
do not use without manual check
T1016, T1036.005, T1037, T1046, T1053.003, T1053.006, T1059.004, T1074.001, T1082, T1098.004, have more...

IOCs:
File: 1
IP: 5
Domain: 3

Soft:
Docker, Telegram, ocker AP, url -s, curl, lpine:la, alpine, ocker ex, Linux, systemd, have more...

Algorithms:
sha256, md5

Win Services:
bits