These threat actors had been then capable to steal AWS session tokens, the non permanent keys that permit you to request momentary qualifications to your employer??s AWS account. By hijacking active tokens, the attackers had been capable to bypass MFA controls and attain access to Secure Wallet ??s AWS account. By timing their attempts to coincide