Multi-Factor Fatigue

A cyberattack gaining in popularity is “multi-factor fatigue,” which describes incessant fraudulent push notifications sent to the owner of a compromised account. The victim becomes overwhelmed by the prompts and confirms the login attempt to make the notifications stop. If you receive a Duo access prompt on your device, which does not directly coincide with your login request (VPN, Citrix, O365), deny the request(s).

• Immediately change your password.
• If you are using the Duo App, press the red “deny” button to alert Information Security.
• If you are receiving phone calls or texts outside of the Duo App, contact the Service Desk to let them know of the incident.

Email the ServiceDesk or email Information Security with questions.

UT Southwestern Service Desk will never ask you to provide your password over the phone or email.