These menace actors were then able to steal AWS session tokens, the short-term keys that let you ask for non permanent credentials on your employer??s AWS account. By hijacking Lively tokens, the attackers had been capable of bypass MFA controls and gain entry to Secure Wallet ??s AWS account.