---
id: 6971
title: "IMDS Abused: Hunting Rare Behaviors to Uncover Exploits"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/imds-anomaly-hunting-zero-day"
published_at: "2025-09-22T14:50:13Z"
tags: ["zero-day", "cloud-security", "threat-detection", "credential-theft", "imds", "wiz-research"]
phying_url: "https://phying.com/item/6971"
lang: en
---

# IMDS Abused: Hunting Rare Behaviors to Uncover Exploits

## Summary

Wiz shares how hunting anomalous IMDS usage — the metadata service attackers abuse for credentials — uncovered a zero-day being exploited in the wild in a popular web service.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2025-09-22T14:50:13Z
- **Original:** https://www.wiz.io/blog/imds-anomaly-hunting-zero-day
- **Phying News:** https://phying.com/item/6971