These threat actors were being then capable of steal AWS session tokens, the non permanent keys that permit you to ask for short term qualifications in your employer??s AWS account. By hijacking Lively tokens, the attackers were capable to bypass MFA controls and attain entry to Safe and sound