These menace actors have been then capable of steal AWS session tokens, the short term keys that allow you to ask for momentary credentials for your employer??s AWS account. By hijacking active tokens, the attackers were in a position to bypass MFA controls and acquire usage of Risk-free Wallet ??s AWS account. By timing their attempts to coincide