These menace actors ended up then ready to steal AWS session tokens, the temporary keys that let you request non permanent credentials in your employer?�s AWS account. By hijacking active tokens, the attackers had been in the position to bypass MFA controls and attain usage of Harmless Wallet ?�s AWS account. By timing their efforts to coincid