These threat actors had been then in the position to steal AWS session tokens, the non permanent keys that permit you to request short term qualifications towards your employer??s AWS account. By hijacking Lively tokens, the attackers were capable of bypass MFA controls and achieve use of Harml