These threat actors were then in a position to steal AWS session tokens, the short-term keys that permit you to request temporary credentials to your employer?�s AWS account. By hijacking Lively tokens, the attackers were being ready to bypass MFA controls and attain usage of Safe and sound