These danger actors had been then ready to steal AWS session tokens, the non permanent keys that let you ask for temporary qualifications to your employer??s AWS account. By hijacking Energetic tokens, the attackers were being capable to bypass MFA controls and gain use of Safe Wallet ??s AWS account. By timing their attempts to coincide with the