These threat actors had been then capable of steal AWS session tokens, the temporary keys that permit you to request short-term qualifications for your employer??s AWS account. By hijacking active tokens, the attackers have been able to bypass MFA controls and acquire access to Secure Wallet ??