These menace actors were being then able to steal AWS session tokens, the short-term keys that enable you to ask for non permanent qualifications in your employer??s AWS account. By hijacking active tokens, the attackers ended up capable to bypass MFA controls and acquire usage of Safe and soun