---
id: 7067
title: "Tracking cloud-fluent threat actors - Part two: Behavioral cloud IOCs"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/detecting-behavioral-cloud-indicators-of-compromise-iocs"
published_at: "2025-01-15T09:56:28Z"
tags: ["cloud", "cloud-security", "aws", "threat-intelligence", "detection", "ioc", "threat-research"]
phying_url: "https://phying.com/item/7067"
lang: en
---

# Tracking cloud-fluent threat actors - Part two: Behavioral cloud IOCs

## Summary

Part two of Wiz's series on tracking cloud-fluent threat actors: behavioral IOCs—action patterns, parameter values, and time-series signatures—with a case study on the 'Bapak' key-abusing attacker.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2025-01-15T09:56:28Z
- **Original:** https://www.wiz.io/blog/detecting-behavioral-cloud-indicators-of-compromise-iocs
- **Phying News:** https://phying.com/item/7067