These threat actors have been then in a position to steal AWS session tokens, the short term keys that help you ask for non permanent credentials for your employer??s AWS account. By hijacking Energetic tokens, the attackers ended up in the position to bypass MFA controls and attain access to Secure Wallet ??s AWS account. By timing their attempts