These threat actors had been then in the position to steal AWS session tokens, the non permanent keys that assist you to request non permanent credentials for your employer??s AWS account. By hijacking active tokens, the attackers ended up in the position to bypass MFA controls and get use of R