These threat actors were then capable of steal AWS session tokens, the momentary keys that help you ask for non permanent credentials for your employer??s AWS account. By hijacking active tokens, the attackers were being able to bypass MFA controls and acquire access to Secure Wallet ??s AWS ac