These risk actors have been then capable to steal AWS session tokens, the momentary keys that help you request non permanent credentials in your employer??s AWS account. By hijacking active tokens, the attackers had been ready to bypass MFA controls and gain access to Safe Wallet ??s AWS accoun