These menace actors were being then capable of steal AWS session tokens, the non permanent keys that permit you to request temporary credentials towards your employer??s AWS account. By hijacking active tokens, the attackers had been capable to bypass MFA controls and attain access to Secure Wa