These menace actors were being then able to steal AWS session tokens, the temporary keys that permit you to request non permanent credentials to your employer??s AWS account. By hijacking active tokens, the attackers had been capable of bypass MFA controls and obtain use of Risk-free Wallet ??s AWS account. By timing their initiatives to coincide