These danger actors had been then in the position to steal AWS session tokens, the temporary keys that permit you to ask for non permanent qualifications towards your employer??s AWS account. By hijacking active tokens, the attackers have been ready to bypass MFA controls and acquire use of Har