Multi-Factor Fatigue

A cyberattack gaining in popularity is “multi-factor fatigue,” which describes incessant fraudulent push notifications sent to the owner of a compromised account. The victim becomes overwhelmed by the prompts and confirms the login attempt to make the notifications stop. If you receive a Duo access prompt on your device, which does not directly coincide with your login request (VPN, Citrix, O365), deny the request(s).

• Immediately change your password.
• If you are using the Duo App, press the red “deny” button to alert Information Security.
• If you are receiving phone calls or texts outside of the Duo App, contact the Service Desk to let them know of the incident.

ServiceDesk@UTSouthwestern.edu the ServiceDesk or informationsecurity@utsouthwestern.edu Information Security with questions.

UT Southwestern Service Desk will never ask you to provide your password over the phone or email.