CARBONATO Hermes Agent traffic to Sociedad Fsociety LLM C2 gateway

Ibrahim Saud@tektrix

•updated 7 days ago•0•0•0

Detects network communication associated with the CARBONATO Hermes Agent, including direct C2 beaconing to a hardcoded IP on port 8989 and TLS connections to Vercel-hosted proxy infrastructure identifying as 'carbonato-proxy'.