These threat actors were being then capable of steal AWS session tokens, the non permanent keys that enable you to request short term qualifications in your employer?�s AWS account. By hijacking active tokens, the attackers ended up in a position to bypass MFA controls and attain entry to Safe Wallet ?�s AWS account. By timing their initiative