These threat actors ended up then able to steal AWS session tokens, the momentary keys that let you ask for short-term qualifications towards your employer??s AWS account. By hijacking active tokens, the attackers ended up able to bypass MFA controls and achieve usage of Secure Wallet ??s AWS a