These threat actors were then in the position to steal AWS session tokens, the short term keys that help you ask for non permanent credentials in your employer?�s AWS account. By hijacking active tokens, the attackers ended up ready to bypass MFA controls and achieve access to Secure Wallet ?�s AWS account. By timing their attempts to coincide