These threat actors had been then in a position to steal AWS session tokens, the short-term keys that assist you to ask for non permanent qualifications towards your employer?�s AWS account. By hijacking Lively tokens, the attackers ended up in the position to bypass MFA controls and get use of Risk