Office of Information Systems

Arkansas Tech University

Beware Phishing Week 3: Duo Multifactor AuthenticationšŸŽ£

Having a second form of account verification is a cyber security industry standard. Here at ATU the multifactor authentication we use is Duo.

Every time you request access by logging in, you will either approve the push notification through the app or type in a one-time code from the app or a text message.

Some attackers will try to ask you for your code alongside asking for your username and password so that they can verify themselves when accessing your account.Ā 

Duo Guidelines to Remember: 

šŸŸ Only input your Duo code in the Duo prompt when logging in. You will never need to verify your account by putting your Duo code into any other application. 

šŸŸ Only approve a Duo push you requested.  If you receive a push you didnā€™t request, itā€™s likely your account has been hacked. If this happens, consider changing your password. 

Duo Phishing Example:

  • Notice there are grammatical errors in the text.
  • The link that was sent is suspicious, look out for “.weebly.com” addresses, or similar URLs.
  • They ask for the verification code, which in this case would be a Duo code.

šŸŽ£Donā€™t take the bait!Ā Help keep ATU cyber safe.

If you have any questions or are unsure if something is a phishing attack, reach out to the Campus Support Center at (479) 968-0646, or visit RPL 150.