Why it matters
ThreatDown’s analysis of an exposed container registry describes a botnet that compromises unauthenticated Docker daemons, establishes host persistence, and installs an unchanged Hermes Agent framework with malicious persona instructions. Operators send post-compromise tasks through Telegram, with AI API keys named as priority targets. The surrounding scripts handle infection, persistence and propagation; the evidence does not make those stages autonomous model decisions. The report provides host and network indicators for investigating abuse of a legitimate agent package.
My takeaway: Remove unauthenticated Docker API exposure and authenticate registries. Investigate suspicious privileged containers, persistence hooks and unexpected Telegram traffic together. On compromised hosts, rotate reachable AI and cloud credentials and check their usage; the presence of Hermes alone is not an indicator of infection.