These threat actors had been then in a position to steal AWS session tokens, the short-term keys that permit you to request temporary qualifications in your employer??s AWS account. By hijacking Energetic tokens, the attackers had been capable of bypass MFA controls and acquire access to Safe W