These risk actors ended up then able to steal AWS session tokens, the short term keys that help you request short-term qualifications towards your employer??s AWS account. By hijacking active tokens, the attackers had been capable to bypass MFA controls and attain access to Protected Wallet ??s