CARBONATO

Researchers describe CARBONATO as the first known botnet whose command-and-control engine is an AI agent, meaning the malware can reportedly make operational decisions itself rather than following fixed instructions from attackers. The botnet is said to have been active since October 2024. Security experts are highlighting the development as a sign that AI is moving into offensive cyber tools, raising concerns about more adaptive and harder-to-take-down botnets.