These risk actors were then ready to steal AWS session tokens, the non permanent keys that let you request short-term credentials to your employer??s AWS account. By hijacking Energetic tokens, the attackers ended up capable to bypass MFA controls and get access to Safe Wallet ??s AWS account.