These menace actors have been then capable to steal AWS session tokens, the short term keys that enable you to ask for short term credentials in your employer?�s AWS account. By hijacking active tokens, the attackers had been in a position to bypass MFA controls and achieve entry to Protected Wallet